last executing test programs: 11m3.630069534s ago: executing program 3 (id=541): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0e0000000000000000000000ee3d050080000000000000a71211d3bbf023e09ad47fec6ec079d0db811711126016821ff2994c717c62cc930b8815204bfd7c0c3449f3f8369e831bc432", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x3, 0x9, 0x4b, 0x8, 0x8, 0x800001}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) execve(0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x3, 0x0, 0x0) syz_io_uring_setup(0xcaf, &(0x7f0000000100)={0x0, 0xb601, 0x859, 0x5, 0x200032c}, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x41}, 0x20000810) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r5, r5, r5}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000281f00e8ffffff000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000000), &(0x7f0000000080)=r6}, 0x20) socket$inet6_sctp(0xa, 0x5, 0x84) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000000c0)=r9, 0x4) sendmsg$unix(r8, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 11m2.712256942s ago: executing program 3 (id=548): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(&(0x7f0000000000), 0xd, 0x220400) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@delnexthop={0x20, 0x69, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [{0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000085}, 0xc050) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000000)=0x200000000) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r6 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000280)=""/72, 0x312000, 0x800, 0x0, 0x5}, 0x20) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x40c81, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r7, 0x40045010, &(0x7f0000000080)=0x7) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) 11m2.317962785s ago: executing program 3 (id=550): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}]}}}]}, 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0xe6) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340), 0x10}, 0x94) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'aead\x00', 0x11, 0x0, 'aegis256-generic\x00'}, 0x58) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x48000, &(0x7f0000000200)={0xa, 0x4e23, 0x3ff, @loopback, 0x10001}, 0x1c) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) (fail_nth: 1) 11m1.907750521s ago: executing program 3 (id=551): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000019200)={0xa, 0x4e21, 0x2f6, @remote}, 0x1c) msgsnd(0x0, &(0x7f0000000000)=ANY=[], 0x242, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='&'], 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000019240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0\x00') pivot_root(&(0x7f0000000340)='./file0/../file0/../file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00') r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000191c0)='net/fib_triestat\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000019080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r6, @ANYRES64=r1], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prlimit64(0x0, 0x1, 0x0, 0xffffffffffffffff) ptrace(0x10, r2) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22ad41, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000190c0)=[@text64={0x40, &(0x7f0000000100)="460f30b9800000c00f3235008000000f30660f7efac7442400cf3b4049c74424020997565ac7442406000000000f0114240f01990f00000066baf80cb8b42cdf88ef66bafc0cedc4c1fa1121430f0843fb66ba200066b8f7ff66ef", 0x5b}], 0xaaaaaaaaaaaae4a, 0x58, 0x0, 0x0) syz_kvm_setup_cpu$x86(r8, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000019100)=[@text32={0x20, &(0x7f0000019140)="0f01cab848bd5f6d0f23c00f21f835030009000f23f8b943020000b800600000ba000000000f300f20d835080000000f22d80f01d1b9bc0900000f322ecf260f7886cb458a7265f7efea07000000c200", 0x50}], 0x1, 0x6b2100ea1964e3f9, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) r10 = socket(0x40000000015, 0xa, 0x0) bind$inet(r10, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) getsockopt(r5, 0x110, 0x2715, 0x0, &(0x7f0000000400)) ioctl$KVM_RUN(r9, 0xae80, 0x0) ptrace$setregs(0xd, r2, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x21, r2, 0x80000001, 0x4) 11m1.589494648s ago: executing program 3 (id=555): unlink(&(0x7f00000000c0)='./cgroup.cpu/cpuset.cpus\x00') syz_emit_ethernet(0xd5, &(0x7f0000000200)={@local, @local, @void, {@mpls_uc={0x8847, {[{0x9}, {0x9}, {0x40}, {0xcf63, 0x0, 0x1}], @llc={@llc={0x8e, 0x80, "d9d7", "74925e917027ff0fe1c2606aa8c200c660cf660fd6ca0d9a34d7a387cb99b64051c5236a6dd22539f6353fac759ea70052e4a9afa04a385a9e702d1c72418b3938c8540a5a7b7f220db678328b34de6a5712572ebd07403a990c1891b0af1a1125c864d6181ee1ff1cf07bedca31d6a66bb15f8465887f5fc7599efd26e611eec45ca69e7331397bbc0fc68f7c9486c1292ca1a9450e0c91b8e67b706aaf4c0ccfc07a7399ce8f2d8e3253328f25ce97d35043"}}}}}}, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) 11m1.174151726s ago: executing program 3 (id=559): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0xfe98, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0xfdde, 0x2}, @TCA_FQ_FLOW_MAX_RATE={0x1400, 0x7, 0x3}]}}]}, 0x48}}, 0x0) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f00000004c0)={0x1, 0x8, 0x6, 0x5, @vifc_lcl_ifindex=r2, @local}, 0x10) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000140)=0x8000, 0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="d311000000010400180a000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000000080300000000000000000005797a31000000000900010073797a3000000000140004800800024000000007080001400000000a00"/72], 0x48}, 0x1, 0x0, 0x0, 0x4000010}, 0x200040c4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000540)=0x2, 0x4) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000180)={{0x2, 0x4e24, @rand_addr=0x64010101}, {0x1, @multicast}, 0x0, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'hsr0\x00'}) ioctl$FITHAW(r4, 0xc0045878) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r7, r7, 0x8, 0x0) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000380), r8) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r9, 0x200, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x81}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x804) r10 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x1e, r5, 0x16, r10}, 0x10) r11 = open(&(0x7f00009e1000)='./file0\x00', 0x149042, 0x40) fcntl$setlease(r11, 0x400, 0x0) bind$xdp(r1, &(0x7f0000000040)={0x2c, 0x8, r5, 0x1c, r3}, 0x10) truncate(&(0x7f0000000080)='./file0\x00', 0x4) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r5, 0x0, r3}, 0x10) 11m0.64776077s ago: executing program 32 (id=559): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0xfe98, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0xfdde, 0x2}, @TCA_FQ_FLOW_MAX_RATE={0x1400, 0x7, 0x3}]}}]}, 0x48}}, 0x0) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f00000004c0)={0x1, 0x8, 0x6, 0x5, @vifc_lcl_ifindex=r2, @local}, 0x10) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000140)=0x8000, 0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="d311000000010400180a000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000000080300000000000000000005797a31000000000900010073797a3000000000140004800800024000000007080001400000000a00"/72], 0x48}, 0x1, 0x0, 0x0, 0x4000010}, 0x200040c4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000540)=0x2, 0x4) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000180)={{0x2, 0x4e24, @rand_addr=0x64010101}, {0x1, @multicast}, 0x0, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'hsr0\x00'}) ioctl$FITHAW(r4, 0xc0045878) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r7, r7, 0x8, 0x0) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000380), r8) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r9, 0x200, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x81}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x804) r10 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x1e, r5, 0x16, r10}, 0x10) r11 = open(&(0x7f00009e1000)='./file0\x00', 0x149042, 0x40) fcntl$setlease(r11, 0x400, 0x0) bind$xdp(r1, &(0x7f0000000040)={0x2c, 0x8, r5, 0x1c, r3}, 0x10) truncate(&(0x7f0000000080)='./file0\x00', 0x4) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r5, 0x0, r3}, 0x10) 7m58.691520694s ago: executing program 4 (id=1671): syz_usb_connect$uac3(0x2, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x40, &(0x7f0000000300)={0x5, 0xf, 0x40, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x9, 0xa, 0x2}, @ssp_cap={0x1c, 0x10, 0xa, 0x6, 0x4, 0x10001, 0x1e00f, 0xfffe, [0xff3f, 0xc0, 0xc030, 0x413f]}, @ext_cap={0x7, 0x10, 0x2, 0x24, 0x8, 0x2, 0x3}, @generic={0x11, 0x10, 0x4, "f1c48f94c836cff244fd7d1fcd06"}]}}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9d", 0x2f}], 0x1}}], 0x1, 0x20000044) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0xfc, 0x6, @remote}, 0x14) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x474d, 0x4) connect$inet(r2, &(0x7f00000002c0)={0x2, 0xc22, @remote}, 0x10) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f00001cd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f00000021c0)=[{0x2000000000000009, 0xffffffff, 0x1}], 0x1, 0xc2ff, 0x0, 0x0, 0x0, 0x76}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x208340, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x4, {0x9, @pix_mp={0x12, 0x5be7, 0xb5315258, 0x6, 0xb, [{0x80000000, 0x107}, {0xffffffe8, 0x5}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x7, 0x489aa92e}, {0x5}, {0x103, 0x7}], 0x1, 0x2c, 0x2, 0x0, 0x3}}, 0xffffffff}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getgid() r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r7, 0xc058565d, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000001, 0x810, 0xffffffffffffffff, 0x9f221000) syncfs(r6) 7m55.603423709s ago: executing program 4 (id=1681): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x4d9, 0xa04a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0xeb}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xfc}}}}}]}}]}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) read(r1, &(0x7f00000000c0)=""/116, 0x74) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 7m52.511802699s ago: executing program 4 (id=1697): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d4f64653d30303030303030303030303030303030f9b729391bd9f014dc54a7375a8fd2ce303034303030302c757365725f69643d977beda30db363d4356bf2bf961ff2e6f2876700d346868bb55cc067cbac546a5570305fef63", @ANYRES16=r0, @ANYRESDEC=r0, @ANYRES8=r0]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000000), &(0x7f0000000140)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000372000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7m52.281585091s ago: executing program 4 (id=1698): socket$inet_tcp(0x2, 0x1, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="a1105000000000009500000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x25}, 0x94) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xc) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) socket$nl_route(0x10, 0x3, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0xfffffe14) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x208000, 0x0, 0x3d, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000001740)='./file0\x00') syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') r4 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) fchdir(r5) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) read$FUSE(r6, &(0x7f00000102c0)={0x2020}, 0x7) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x8, 0x10208, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(r5, &(0x7f00000000c0)='./file0\x00', 0x200800, 0x18) syz_fuse_handle_req(r0, &(0x7f0000006340)="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", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r7, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) dup3(r0, r7, 0x6700000000000000) syz_open_dev$ttys(0xc, 0x2, 0x0) 7m51.224759581s ago: executing program 4 (id=1707): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x64c546c48307219d) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="06010009070000000000000000000000020010000000", @ANYRES16=r0], 0x38}}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x1ff, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone3(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004080}, 0x20004800) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix_mp={0x0, 0x0, 0xb5315258, 0x0, 0x0, [{0x1000001}, {}, {}, {0x0, 0xff}, {}, {0x0, 0x5}, {}, {0x0, 0xcef}]}}) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.time_recursive\x00', 0x0, 0x0) socket(0x2, 0x80805, 0x486d) pwrite64(r2, &(0x7f0000000080)="fd0baea11edf81", 0x7, 0xcfa5) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, 0x0, &(0x7f00000002c0)) mount_setattr(r4, 0x0, 0x8000, &(0x7f0000001dc0)={0x10000a, 0x100088, 0x80000}, 0x20) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x40080, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r7 = fanotify_init(0x202, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x16, &(0x7f0000000180)="aff7", 0x0, 0x3}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r8, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) fanotify_mark(r7, 0x1, 0x4800003e, r6, 0x0) r9 = dup2(r7, r6) read$FUSE(r9, &(0x7f0000001a40)={0x2020}, 0x2020) 7m51.095556774s ago: executing program 4 (id=1708): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f00000000c0)={0x2, 0x100, 0xcfcd4592ae3d59a8, {0x10001, 0x3, 0x3, 0x91}}) 7m50.58219967s ago: executing program 33 (id=1708): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f00000000c0)={0x2, 0x100, 0xcfcd4592ae3d59a8, {0x10001, 0x3, 0x3, 0x91}}) 52.185295054s ago: executing program 5 (id=3651): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3a) r1 = socket$can_bcm(0x1d, 0x2, 0x2) sendfile(r0, r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x40800}, 0x4454) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a2c000000070a010400000000000000000a0000050900020073797a32000000000900010073797a3100000000140000001100010000000000000000000e00000a"], 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0xe0}}, 0x0) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000070a010300000000000000000a00000ad4287e31c850adf2aecf4085c3430400000000000000db899edd6573fc97e3805c9314eb57fd79e236065b"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20000004) r3 = syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000810087406d040e0a759400000001090212000100000000090400200003"], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$sierra_net(r3, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x11) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x2000}}, 0x1, 0x0, 0x0) chmod(&(0x7f00000001c0)='./file0\x00', 0x44) getresuid(&(0x7f00000000c0), &(0x7f0000000280), &(0x7f0000000480)=0x0) syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x18fb, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d3020303030053a8a172859ee68e555163981d12b3030303030303030170e6cb49bed7242293402ff533775deb5cb15759c37d12606db475623178f071208a6c96e8150fffb21cd943c30e9cb63d1462525cf3f4ac4e8407cf63d9a290ac7ac1b725c5ab7506003fdc61ab682b4085cd9ca03f77f97", @ANYRESDEC=r5, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x0000000000000006,blksize=0x0000000000000800,blksize=0x0000000000001a00,allow_other,default_permissions,allow_other,allow_other,\x00'], 0x1, 0x0, 0x0) r6 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r8, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) ioctl$int_in(r8, 0x5452, &(0x7f0000000080)=0x4) recvmmsg(r8, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) landlock_restrict_self(r6, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='cmdline\x00') exit(0xa) read$FUSE(r9, 0x0, 0x0) r10 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r10, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000008400000005000000300000f30200000010000000000000008400000002"], 0x38, 0x4014}, 0x2c0408d0) 49.821711034s ago: executing program 5 (id=3655): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020ef0ec4720000000000010902"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) (async) syz_usb_disconnect(r0) syz_usb_connect(0x6, 0x24, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYRES32], 0x0) 47.617180134s ago: executing program 1 (id=3662): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000001, 0x11, r1, 0xc10c3000) (async, rerun: 64) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x0) (async, rerun: 64) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="201006000000065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) (async) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, 0x0, 0x0) 47.43280587s ago: executing program 2 (id=3664): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400"], 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3629ff075475e4bd6e43be1712bf8b4dc", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x800) sendmsg$alg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20048800}, 0x4040901) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r2, 0xb02, 0x70bd2a, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44044}, 0x1) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r3, 0x1, &(0x7f0000000600)=[&(0x7f0000000640)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f00000002c0)='\t71', 0x3}]) r4 = timerfd_create(0x5, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r4, 0x400}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000002d40)={@cgroup, 0xffffffffffffffff, 0x10, 0x1a}, 0x20) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000012009702281e571e000000e5060006"], 0x20}, 0x1, 0x0, 0x0, 0x2004c0d1}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0xffffffffffffffe1, 0xfa00, {{0xa, 0x4e22, 0x9, @mcast2, 0x5}, {0xa, 0x4e21, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x9}, r6, 0x6c}}, 0x48) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_UIE_ON(r8, 0x7003) 44.003592955s ago: executing program 5 (id=3668): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x40003}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000400030a000700726f75"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 40.592172369s ago: executing program 2 (id=3669): r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e20, 0x8b3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xf}}, 0x7, 0x9}, 0x90) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00', 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) shutdown(0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, 0x0, 0x6000, 0x7ff, 0x0) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r5, 0x80086303, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x38) mknod(&(0x7f0000000100)='./file0\x00', 0x8, 0xd) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) getpriority(0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000010c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}}, 0x4010) timer_create(0x1, 0x0, &(0x7f0000bbdffc)) timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_create(0x5, &(0x7f0000000040)={0x0, 0x17, 0x4}, 0x0) timer_gettime(r6, &(0x7f00000000c0)) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c903f00000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 40.371903083s ago: executing program 1 (id=3671): r0 = fsopen(&(0x7f0000000140)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000980)='#\n$)-.\x02\xcc\xd7\xb2f\xcdY\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\n\x13:\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb|&#\xe9\xa3\'\x91>C\x1bV\x87\xeb\xfe\xda\x89\xb7}@\xab%\xf2\x8f\x97\x18\xce\x92\xc9\xa8\x1c\x9d\\C\xfeI%\xae\x8fKHq\x89\x83\xbb\x9dC\xd6H\x80s\xd66y\xfao\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n=/o\xf3\x96\xaf\b1\x1b48\bu\x01\xab\x90Q\xe8r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\xe495\x12B\x06\xe5\x8f\x83Vb\xf1\xbc\xb9E\x1a\x9bH$\x1f^\x9dX\xd0\xca\xcc\xc9\x86\xaa\x90\x9c\xc0\x82\xabE\xcc{\xcd\xd3\xdb\x97\x1e.y\xb0\x9f\x8f\xefv\x9c\xbd%\x84\xbf\"\xd9\xb4Vm\t.\x15\xf1)\xd6\xd8\x1cb\xc5\xd9=c\xb5<|+K*\x9f\x01u\x00\x00\x00\x00\x00', 0xfeffffff00000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000040a0106f500000069f400000200000a5ea5091f466bc9adc7e740e76939a963bddb3598a40e7c94d4743628f39128e8487dad49fe6f50a31614cc3ef3bfd2f47f4825776555344e87e7254e0a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000020) 40.233035406s ago: executing program 5 (id=3672): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0xc) write$cgroup_pid(r0, &(0x7f0000000000), 0x12) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = fsopen(&(0x7f0000000640)='ntfs3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='iocharset', &(0x7f0000000040)='-/\x00', 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r4, 0x120, 0x70bd27, 0x25dfdbff, {{}, {}, {0x20, 0x17, {0x2, 0x9, @l2={'eth', 0x3a, 'veth1_to_team\x00'}}}}, ["", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0xc) (async) write$cgroup_pid(r0, &(0x7f0000000000), 0x12) (async) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) fsopen(&(0x7f0000000640)='ntfs3\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='iocharset', &(0x7f0000000040)='-/\x00', 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) close_range(r3, 0xffffffffffffffff, 0x0) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r4, 0x120, 0x70bd27, 0x25dfdbff, {{}, {}, {0x20, 0x17, {0x2, 0x9, @l2={'eth', 0x3a, 'veth1_to_team\x00'}}}}, ["", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) 38.863381966s ago: executing program 1 (id=3673): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010800000000000000", @ANYRES32=0x0], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) socket$key(0xf, 0x3, 0x2) ppoll(&(0x7f0000000100)=[{r3, 0x3a1}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'virt_wifi0\x00', 0x1}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000480)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2f}}, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e20, 0x0, @empty, 0xfff}, @in={0x2, 0x4e23, @rand_addr=0x64010102}], 0x4c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="01f6ff0000000000000000000001", @ANYRES32=0x0, @ANYBLOB="15010000000000002800128008000100736974001c00028006000e0004000000080002006401010008000c0006000000"], 0x48}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) r5 = open(&(0x7f0000000280)='.\x00', 0x80, 0x28) fcntl$notify(r5, 0x402, 0x3b) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x8042, 0x1f6) r7 = open(&(0x7f0000000180)='./file1\x00', 0x143142, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0x103000) splice(r7, 0x0, r6, 0x0, 0x59, 0x2) syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x74, 0x43, 0x2}, 0x50) pselect6(0x40, &(0x7f0000000600)={0x2, 0x8, 0x35, 0xc5, 0x7ff, 0xe, 0xfffffffffffffff7, 0xc7}, &(0x7f0000000640)={0x8, 0xe, 0x7fff, 0x8000000000000001, 0x8, 0x3, 0x5, 0xffffffffffff48e5}, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000180)={'veth0_to_bond\x00', &(0x7f00000003c0)=@ethtool_gfeatures={0x3a, 0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000740000000000000095000000000000009e2332fefec79341c68420532cff42968663b57a6b10e5c503c5b0491c51b7b4526790b9f0b46a48c324f9dd40f10bf97757b221e381954f2e7c29e5f78edc533736bbedba1e0faeabadfd7eac003946ce17738fc2040439d2cdb614bd79e10620d2b4333368abe0fbba1552833076508ecf6f4c8042c69f4159fe51"], &(0x7f0000000040)='GPL\x00'}, 0x90) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x6, 0x9, 0x4, 0x2, 0x3, 0x7fff, 0x1000}, 0x0) 33.771681143s ago: executing program 6 (id=3674): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300), 0x800401, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0x400) 33.589835462s ago: executing program 5 (id=3675): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d4f64653d30303030303030303030303030303030f9b729391bd9f014dc54a7375a8fd2ce303034303030302c757365725f69643d977beda30db363d4356bf2bf961ff2e6f2876700d346868bb55cc067cbac546a5570305fef63", @ANYRES16=r0, @ANYRESDEC=r0, @ANYRES8=r0]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000000), &(0x7f0000000140)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000018"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 33.14067993s ago: executing program 0 (id=3676): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) (async) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xaf62}]}}]}, 0x3c}}, 0x20004055) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x20000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000204355420000000000000109022400018000000b0904000001030000000921fd7f000122ea00090581031000000f00"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000140)={0x5, 0x1, 0x0, 0x2000, &(0x7f00001ae000/0x2000)=nil}) (async) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x9) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000000000/0x1000)=nil) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000380)={r6, @in={{0x2, 0x4e22, @loopback}}, 0x4, 0x4, 0x2, 0x0, 0x80, 0x8, 0x4}, &(0x7f0000000440)=0x9c) (async) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000180)=0x7f, 0x4) (async) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 32.08273528s ago: executing program 2 (id=3677): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0xb, 0x9}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{0x0}], 0x1}, 0x51) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x4040000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c4000000190001000000000000004000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000200000000000000b9120000000000000000000000000000000c0015005a07350081"], 0xc4}, 0x1, 0x0, 0x1200, 0x40100}, 0x2c000010) 31.671907605s ago: executing program 6 (id=3678): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='clear_refs\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) dup(0xffffffffffffffff) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) rt_sigpending(0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f0000002200)=ANY=[@ANYBLOB="0500000010000000040000000a3f0200ff03000000"]) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x8, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000340)={0x0, 0x0, 0xc, 0x7, 0x5}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r3, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0], 0x2c2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000000140)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x8000001, @private0, 0x3}, 0x1c, &(0x7f00000003c0)=[{0x0}], 0x1}}], 0x1, 0x931766f6319eed40) shutdown(r4, 0x1) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r7, &(0x7f00000001c0)={&(0x7f00000017c0)={0x2, 0x4, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@rdma_args={0x48, 0x114, 0x1, {{0x4008, 0x2}, {&(0x7f0000000140)=""/116, 0x74}, &(0x7f0000001b40)=[{&(0x7f0000000080)=""/79, 0x4f}], 0x1, 0x21}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffff8, 0x4}, {0x0}, &(0x7f0000001580)=[{&(0x7f00000003c0)=""/137, 0x89}], 0x1, 0x8, 0x3}}], 0x90}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000301010100000000000000000200000000000908001540000000b408000140003400041800028014000180080001007f00000108ec1100ffffffff", @ANYRES8=r6, @ANYRESDEC=r4], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x40000) 30.581808539s ago: executing program 2 (id=3679): mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x1, 0x0) syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000440)=ANY=[@ANYBLOB="120101020600004063071a2040000102030109026e0003017f0004080b0002012730230904010000010130000a2401100a00090000000904010000010230000904010101010230d012c26d0960002507040a2525010400000500000904020000010230000904020101010230000905820900027404c00a2525ffffff7f00e10bd60fb912a4cf3d4298c9edd043b1de69e8043f31769eab6d1a7fe67f6b2cb6c4de0fdebbd7451456ff56e75f27680afe03b223f28c58dc8b99537d8dd88eddccf9aa8aa3aa44b56edc406ba02679509183cc3659bcbe9c8320465d0787cfbde07ebcf1205e903e3adb8e077803f60d646a274f9c1ffd0cdeecad1c60e6b4e1a259d7919f7dd6171f23c7377eebb377e2085e6c1c55b730d2587eee2f087ee4e09df89ba005b7a063e97a5580dd17c514aa3ba7416f64af01ef9ec3539e9d2e54873b02103fcd1fda3a6af132f558794d624e1f2d74e9c5"], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000003ac0)={0x9, [[0x3, 0x443, 0x0, 0x0, 0x4], [0x7f7f, 0x40, 0x0, 0xfffffffe, 0x0, 0x0, 0xff], [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]], '\x00', [{0x0, 0x24, 0x0, 0x1}, {0x0, 0x1ff}, {0x0, 0x1000}, {}, {}, {0x2529, 0xfffffffc}, {0x3, 0xfffffffd}, {}, {0x0, 0x10000000}, {0x5}, {0x3}, {0x0, 0xfffffffc}], '\x00', 0xff}) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x14cf, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc0}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600100004"], 0x50) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = syz_open_dev$media(&(0x7f00000000c0), 0x1, 0x20081) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r4, 0x0, 0x16, &(0x7f0000000000)=0x9, 0x4) sched_setscheduler(0x0, 0x3, &(0x7f0000000400)=0x9) ioctl$MEDIA_REQUEST_IOC_QUEUE(r3, 0x7c80, 0x0) syz_clone(0xe8344400, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x4d9, 0xa081, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x20, "", [{{0x9, 0x4, 0x0, 0x10, 0x7, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8, 0x0, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0xf, 0xfe}}}}}]}}]}}, 0x0) syz_usb_connect$uac2(0x4, 0x84, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x3, 0x1, 0x0, 0xa0, 0x3, {0x8, 0xb, 0x0, 0x0, 0x1, 0x0, 0x20, 0x6d}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x5, 0xb, 0x12, 0x40}, [@effect_unit={0x9, 0x24, 0x7, 0x5, 0x3, 0x2, [0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x6, 0x1, 0x1, {0x8, 0x25, 0x1, 0x80, 0x33, 0x2, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x16, 0xf7, 0x8, {0x8, 0x25, 0x1, 0x0, 0xc, 0x63, 0x6}}}}}}}}]}}, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x20040, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 30.304970197s ago: executing program 5 (id=3680): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x5}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) (async) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x3c, 0x0, &(0x7f00000008c0)="e3ef7f670000ec6789b4241544940000000000000000000000040033a42c9550f5a10011e0f0544b00aab05450dc72ff6e8f62d070e87f2c73d153bf", 0x0, 0x9ffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8001}, 0x50) (async) r7 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x88003) ioctl$FIBMAP(r7, 0x1, &(0x7f0000000040)=0x85) (async, rerun: 64) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (rerun: 64) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x0, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x64, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4, 0x21}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x58, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x54, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x2a, 0x3, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xfff2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x8001}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xad}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x0, 0x3, 0x9}]}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 24.800180302s ago: executing program 0 (id=3681): r0 = io_uring_setup(0x2d29, &(0x7f0000000600)={0x0, 0x707d, 0x400, 0x2, 0xe8}) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f0000000480)={0x2, 0x0, 0x0, &(0x7f0000000140)=[{0xffffffffffffffff}, {0x0}], 0x0}, 0x20) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = syz_open_procfs(r1, &(0x7f0000000000)='fdinfo/3\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) read$eventfd(r2, &(0x7f0000000080), 0x8) 24.740311383s ago: executing program 1 (id=3682): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x40003}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000400030a000700726f75"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 24.739806305s ago: executing program 2 (id=3683): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x140, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x10, 0x6, 0xffffffef, 0x7fffffff, 0xffffffff, 0x8, 0x4}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$kcm(0x11, 0x3, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x34, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r13, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x5) syz_usb_connect(0x0, 0x28e, &(0x7f0000000280)={{0x12, 0x1, 0x201, 0xd8, 0x57, 0xce, 0x40, 0x9f05, 0x4e86, 0xe15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x27c, 0x1, 0xf7, 0x7, 0x0, 0xde, "", [{{0x9, 0x4, 0x65, 0x5, 0x5, 0x8, 0x5, 0x1, 0xb, [@hid_hid={0x9, 0x21, 0x3, 0x81, 0x1, {0x22, 0x4ce}}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "e77cc2efcd"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x80000001, 0x3, 0xb4, 0x4}, [@mdlm={0x15, 0x24, 0x12, 0x5}, @mdlm={0x15, 0x24, 0x12, 0x800}, @mdlm_detail={0xd5, 0x24, 0x13, 0x4, "144357df2d7c3d971192a9f0f4f4fd7389266458007ef31d212c5148d38a72245dab068e53ecaf4414a2f8c37b04a1c3acb22d0959ad68cc6025b8e9046e43e092d02c634c11a10564a7ae5819b70235e03cc468266f89f3df9a804b69715a353f0cbc733a2aa4dff9c3f59f7e730fb6b9fb8a0bee94f34f47cd9d2b1ba77de8edfcb18248f5fe7c3db682d77a91856f3a99c30ef816c2fb256dff4ee89992efc50d46a6dae93eac6e1e906fcc57f1597a9e6a916ce42fe35dd1c6d438fe201bab26f1269fa6ecd8f1e1599fc37ecd5f75"}, @network_terminal={0x7, 0x24, 0xa, 0x8, 0x9, 0x1, 0x5}, @acm={0x4}, @ncm={0x6, 0x24, 0x1a, 0x2}]}], [{{0x9, 0x5, 0xc, 0x10, 0x8, 0xf8, 0x4e, 0xd}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x6, 0x0, 0x12}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0x1, 0x8, 0xf8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x91, 0x5}]}}, {{0x9, 0x5, 0x0, 0x1c, 0x20, 0x5, 0x8, 0x9}}, {{0x9, 0x5, 0x0, 0x3, 0x10, 0x0, 0xd5, 0x7f, [@generic={0xfa, 0x10, "2ddc5c8f8a81b18b13f812e4ce9cd1299c65bd3dbf3bfd540048bdf638f06e8989e3113c867f7d0fbad7833f083d23015b1baafb9b9ab4df611898fedc1e7446d05f2b0a053d18ccd8a840ab2ce806f49e8329861dcd6a38dac6b8aff9bb998e0cf5576824642343e143c12ab4702e6bfea2a2a12c838f2764db8f3133d73d8681b709651ef1a28584136f6bb0ea26eab7c83dc4fcd000e125618c8c9889361f52f0e461fdec8571f1235b79bea638363757b067c48782966d2d2bf1069708a30be6631cf2b6cbd6351aa1566b596bd2f3dd63270ac2296abc74674add51ee568cd299415fce3c0a8b73d65e2a5e0413c16c092168413a18"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0x7}]}}]}}]}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x201, 0x63, 0x80, 0x8, 0x20}, 0x39, &(0x7f0000000580)={0x5, 0xf, 0x39, 0x3, [@ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x2, 0x0, 0x401}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "6bdb6d5ddf634ff1174be4f2b61654ae"}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "24885ed61d09aa1680bf90d28c2c1102"}]}, 0x7, [{0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x807}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x418}}, {0x3a, &(0x7f0000000640)=@string={0x3a, 0x3, "9785643be69c86883cff5691a37f376b9a1a6e2965aaba594b0480bdc9eab126f4ed0b04269103578c88dc1ef8d15cc9bd81d7c141078f43"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x437}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0xc0a}}, {0x37, &(0x7f0000000700)=@string={0x37, 0x3, "febda49cdda100a99b3aa0b2286256af300c281d7b24c694fc324b37852587e0358710d58f82047d48a6879f7286e301fa3414ed39"}}, {0x9d, &(0x7f0000000740)=@string={0x9d, 0x3, "34179d35611770bfc7a1ba6d224f2b0a0d96d6885e7307054de6ce36b316ba0debf33036834c6d253258bda8ea2852f5e7f93e1fd32944b3c09ee0d5047c0470bfc4a6eeac08e8d0acef5e81f4c877887be89d0fc9ec9a3a3cf3d972c9d7f8eac8fb234b9be6f53709cd9cde22dc5f1eda00e207ef4819b69d6997820b26459a6d0d24f02f0f6b0d94c79db259daf89efd39c2bbfbce0c5f829ca8"}}]}) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0xa, 0x0, 0x0, 0x0, 0x180, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x4, 0x80, 0x0, 0xfffffffd, 0x26, 0x0, 0x1}) 24.739434295s ago: executing program 6 (id=3684): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0xa, @private0}}}, 0x3a) r3 = socket$pppl2tp(0x18, 0x1, 0x1) socket$kcm(0x2, 0x1, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0xe4ff, @broadcast}, 0x1, 0x1}}, 0x2e) 24.462227083s ago: executing program 1 (id=3685): keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000100), &(0x7f0000000140)={'enc=', 'pkcs1', ' hash=', {'sha512-generic\x00'}}, 0x0, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000a40)={0x28, 0x2, r2, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x18, 0x0, r2, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) r4 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009058103"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000b00)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x3, "efb9ce47"}]}}, 0x0}, 0x0) 24.461975632s ago: executing program 6 (id=3686): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x42, 0x4, 0x390, 0xffffffff, 0x140, 0x140, 0x1f8, 0xffffffff, 0xffffffff, 0x2f8, 0x2f8, 0x2f8, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr=0x40, @loopback, 0x0, 0x0, 'vxcan1\x00', 'wlan0\x00', {}, {}, 0x73}, 0x0, 0xe0, 0x140, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@set={{0x40}, {{0x1, [0x5, 0x3, 0x2, 0x6, 0x3], 0x0, 0x2}}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x1, 0x1, [0xd, 0x22, 0x39, 0x3, 0x2c, 0x4, 0x27, 0x2f, 0x3e, 0x34, 0x20, 0xc, 0xc, 0x2a, 0x3, 0x1a], 0x3, 0x7, 0x2}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xe, 'syz1\x00', {0x8}}}}, {{@ip={@private, @rand_addr=0x64010101, 0x0, 0x0, 'veth1_virt_wifi\x00', 'dvmrp0\x00'}, 0x0, 0xc0, 0x100, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) (async) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000140)=r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r3, &(0x7f0000000040), &(0x7f0000000400)=""/72}, 0x20) 24.438380432s ago: executing program 0 (id=3687): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0xc0045543, &(0x7f0000000080)=0xfdfdfffd) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000100)={{0x1, 0x3, 0xffffff00, 0x1, 0x4}}) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000000)=0x1) connect$pppoe(r2, &(0x7f0000000180)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, 'ip6tnl0\x00'}}, 0x1e) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x143000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x15, 0x0, &(0x7f0000000040)) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000040)={[0xb, 0x0, 0x34a30b42, 0x0, 0x1000, 0x4008000, 0x1002, 0xfffffffffffffffb, 0x80008, 0xa, 0x6, 0x2372, 0x8bda, 0xfffffffffffffefe, 0x401, 0x20], 0x25000, 0x216157}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$nl_crypto(0x10, 0x3, 0x15) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$nl_crypto(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x40040) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_SET_GUEST_DEBUG_x86(r6, 0x4048ae9b, &(0x7f0000000380)={0x50001, 0x0, {[0x4, 0x8000000000000000, 0x4, 0x9, 0xb89c, 0x0, 0x4837, 0x2]}}) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffc}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0) r9 = fsopen(&(0x7f0000000480)='adfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000040)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) ioctl$PPPOEIOCSFWD(r2, 0x40047452, 0x0) r10 = socket$pppl2tp(0x18, 0x1, 0x1) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) connect$pppl2tp(r10, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0xa, @mcast1, 0x2000}}}, 0x36) 23.943553683s ago: executing program 6 (id=3688): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300), 0x800401, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0x400) 23.840474144s ago: executing program 6 (id=3689): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=r2], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000000000000b7020000000000008500000085000000b70000000000000095000000000002004d3eec2266a544b1ef2f8eaa30fdc84bce4ff3cd03872e1690e168968e65afb4007dd6ed2d7a8cf0d5d3bbd8dc738f2dfd4ce02487ff26ded8301eda52a9369f582f5e967d70553bab7025e67079f969b31bc2796cd563a0cd807e17d219002c651529b91a5c3a8014a567dadbb23f9b1d4a5eb949333d406cdcb03053c94d4701509ead112a240343c1fe0cb2b0b7c39a1728d726b3c8f24c6d45398f75a0fdfc49d909b76409c57e3d187dd4be3773163b30b0f04115bbd57432"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r6 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3c5ccb605208b079, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = fsopen(0x0, 0x1) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x4000}]}) ioctl$TUNSETQUEUE(r8, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x600}) ioctl$TUNGETIFF(r8, 0x800454d2, &(0x7f0000000000)={'ip_vti0\x00'}) ioctl$FS_IOC_GETFLAGS(r7, 0x80086601, 0x0) connect$netlink(0xffffffffffffffff, &(0x7f00000000c0)=@unspec, 0xc) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r9, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000140)="0f9b842c48660f35f20f59080f015fffdbe967f30f2b6100f2de440066b9b00100000f320f01bd000166b9800000c00f326635000100000f30", 0x39}], 0x1, 0x11, 0x0, 0x0) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r10, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, r11, 0x1}}, 0x48) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="650f01ef6436f466f080737ca90f01c30f320f01c8b8006000000f23d80f21f835000000a00f23f8670f01c3faf00fba3985", 0x32}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) r12 = userfaultfd(0x80001) ioctl$UFFDIO_API(r12, 0xc018aa3f, &(0x7f0000000000)) 22.399098248s ago: executing program 0 (id=3690): bind$l2tp6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x0, 0x80000}, 0x20) (async) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x0, 0x80000}, 0x20) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, 0x0, 0x0) (async) bind$l2tp6(r0, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) read$FUSE(r1, 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x0, 0x4000, 0x0, 0x0, 0x100, 0x3, 0x0, 0x0, 0x20, 0x2}}, 0x50) geteuid() (async) geteuid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0xd3dcf268ca42a75e, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0xd3dcf268ca42a75e, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000100)={0x0, &(0x7f0000000180)=[{}, {}, {}], 0x0, 0x0, '\x00', 0x0, 0x3}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r3, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r3, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x65, 0x6, 0x0, 0xb49, 0x9, 0x100000000008, 0x2, 0x3}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc", 0x29}], 0x1}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc", 0x29}], 0x1}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYRES16=r4, @ANYRES16=r2, @ANYBLOB="012000000000fdffffff3900000008000300", @ANYRES32=r5, @ANYBLOB="28005a8024000080050006"], 0x44}}, 0x20040004) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r6, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) (async) setsockopt$inet_udp_int(r6, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) socket$can_raw(0x1d, 0x3, 0x1) sendmmsg$inet(r6, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$inet6(0xa, 0x2, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) 21.675464834s ago: executing program 1 (id=3691): socket$nl_generic(0x10, 0x3, 0x10) write$dsp(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x4040084) socket(0xa, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000480)={0x60, 0x0, &(0x7f000007c000/0x4000)=nil, &(0x7f0000839000/0x1000)=nil, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x7b4e, 0xf080, 0xc, 0xa0002f5}) syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000001140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4f20, 0x1, @loopback, 0x5}, 0x1c) io_uring_enter(r2, 0x2219, 0x7729, 0x6, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='6\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000fedbdf25100000000e0001006e657464657673696d0000000f0002006e65746465"], 0x54}, 0x1, 0x0, 0x0, 0x8c1}, 0x11) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) io_uring_setup(0x1b7b, &(0x7f0000000480)={0x0, 0xc89f, 0x2, 0x0, 0x28}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0xea5bc50b6199d77e) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) file_setattr(0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x2901, 0x7ffffffb, 0x7, 0x802, 0xc3ef514}, 0x18, 0x400) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) 21.082521258s ago: executing program 0 (id=3692): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x20004450) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, 0x0, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r4, &(0x7f0000000000)="180c4552", 0x4) sendmsg$NL80211_CMD_REQ_SET_REG(r4, 0x0, 0x40800) ioctl$XFS_IOC_SCRUBV_METADATA(r4, 0xc0285840, 0x0) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff0000000000000000000000000500", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c55080000000c547d03d8a0f4bd00", [0x0, 0x6]}}) 20.12229809s ago: executing program 0 (id=3693): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="30000000190001002cbd7000fbcbdf240a202000f002ff010030000008001e0006000400040002"], 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x8000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2000a, 0x600a8}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0xfffffffffffffec7, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x1}, @IFLA_BOND_AD_LACP_ACTIVE={0x5, 0x1d, 0x13}]}}}]}, 0x44}}, 0x24008040) 17.124698601s ago: executing program 2 (id=3694): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x6}, 0x4) mount$fuse(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) unshare(0x64000600) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1740, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = eventfd2(0xe5c, 0x80000) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000000)={r6, 0x8, 0x2, r6}) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @ioapic={0x100000, 0xffff8479, 0x4, 0x6, 0x0, [{0x34, 0xfc, 0x3, '\x00', 0xc}, {0x3, 0x7, 0xf7, '\x00', 0x2}, {0x7, 0x4, 0x6, '\x00', 0x9}, {0x9, 0xb0, 0x10, '\x00', 0x7}, {0x10, 0x6, 0x8, '\x00', 0x4}, {0x6, 0x6, 0x7, '\x00', 0x72}, {0x0, 0x0, 0x5, '\x00', 0xb}, {0x1, 0x7f, 0x1, '\x00', 0x3}, {0xb, 0xfe, 0x1, '\x00', 0x7}, {0x2, 0x10, 0x8, '\x00', 0x9}, {0x26, 0xeb, 0x0, '\x00', 0x7}, {0xb, 0x8, 0x2a}, {0x3, 0xcc, 0x3d, '\x00', 0x5}, {0xd, 0x5, 0x3, '\x00', 0x7}, {0x4, 0x9, 0x9c, '\x00', 0x2}, {0x0, 0xd2, 0x8, '\x00', 0x3}, {0x6, 0x0, 0x0, '\x00', 0x7}, {0x3, 0x4f, 0x3, '\x00', 0x5}, {0x9, 0xfd, 0x3f, '\x00', 0x7f}, {0x5, 0xc8, 0x10, '\x00', 0x80}, {0x40, 0x0, 0xf5, '\x00', 0xc5}, {0x7, 0x1, 0xba, '\x00', 0x4}, {0x6, 0x7, 0x6, '\x00', 0x6}, {0x0, 0x80, 0x29, '\x00', 0xb}]}}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0xcb, 0xd, 0x2000000000004, 0x6d, 0x2002, 0x4000000001002, 0x80000ef, 0x7f, 0x7fffffffffffb, 0x7fff, 0x4, 0x3, 0xfffffffffffffffe, 0x8, 0x5, 0xbdf], 0xeeee8000, 0x67a64fa265da9e51}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r7 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f0000000100)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40}) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000000)) readv(r7, &(0x7f0000000800)=[{&(0x7f00000002c0)=""/241, 0xf1}, {&(0x7f00000003c0)=""/198, 0xc6}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f0000000540)=""/179, 0xb3}, {&(0x7f0000000600)=""/4, 0x4}, {&(0x7f0000000640)=""/81, 0x51}, {&(0x7f00000006c0)=""/67, 0x43}, {&(0x7f0000000740)=""/180, 0xb4}], 0x8) r8 = socket(0x200000000000011, 0x2, 0x0) setsockopt$packet_int(r8, 0x107, 0x3, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x7, 0x1, 0x15, 0x8, 0x9, 0x1000, 0x4b, 0x0, 0x4, 0x0, 0xa5, 0x0, 0x6, 0x5, 0xfffffffffffffffe, 0x4], 0x0, 0x1019c4}) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet_mptcp_buf(r9, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9) ptrace(0x8, 0x0) 0s ago: executing program 34 (id=3691): socket$nl_generic(0x10, 0x3, 0x10) write$dsp(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x4040084) socket(0xa, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000480)={0x60, 0x0, &(0x7f000007c000/0x4000)=nil, &(0x7f0000839000/0x1000)=nil, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x7b4e, 0xf080, 0xc, 0xa0002f5}) syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000001140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4f20, 0x1, @loopback, 0x5}, 0x1c) io_uring_enter(r2, 0x2219, 0x7729, 0x6, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='6\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000fedbdf25100000000e0001006e657464657673696d0000000f0002006e65746465"], 0x54}, 0x1, 0x0, 0x0, 0x8c1}, 0x11) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) io_uring_setup(0x1b7b, &(0x7f0000000480)={0x0, 0xc89f, 0x2, 0x0, 0x28}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0xea5bc50b6199d77e) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) file_setattr(0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x2901, 0x7ffffffb, 0x7, 0x802, 0xc3ef514}, 0x18, 0x400) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) kernel console output (not intermixed with test programs): : entered allmulticast mode [ 700.134315][T18745] bridge_slave_0: entered promiscuous mode [ 700.329931][ T5745] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 700.700232][T18774] : entered promiscuous mode [ 700.745981][T18745] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.779050][T18745] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.809003][T18745] bridge_slave_1: entered allmulticast mode [ 700.830898][T18745] bridge_slave_1: entered promiscuous mode [ 700.921031][ T5745] usb 1-1: unable to get BOS descriptor or descriptor too short [ 700.961950][ T5745] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 700.985457][T11746] IPVS: starting estimator thread 0... [ 701.030518][ T5626] Bluetooth: hci4: command tx timeout [ 701.047986][T18790] sctp: [Deprecated]: syz.6.3248 (pid 18790) Use of int in max_burst socket option. [ 701.047986][T18790] Use struct sctp_assoc_value instead [ 701.068573][ T5745] usb 1-1: can't read configurations, error -71 [ 701.070690][T18788] sctp: [Deprecated]: syz.6.3248 (pid 18788) Use of int in max_burst socket option. [ 701.070690][T18788] Use struct sctp_assoc_value instead [ 701.128636][T18745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 701.142339][T18791] IPVS: using max 55 ests per chain, 132000 per kthread [ 701.205142][T18745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 701.614468][T18798] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3251'. [ 701.682902][T18745] team0: Port device team_slave_0 added [ 701.773734][T18745] team0: Port device team_slave_1 added [ 701.814186][T18799] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3250'. [ 701.898598][T18745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 701.917211][T18745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 701.952520][T18745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 702.052311][T18745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 702.086887][T18745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 702.145730][T18745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 702.296263][T18822] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3253'. [ 702.601301][T18829] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3255'. [ 702.657923][T18829] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3255'. [ 702.670375][T18745] hsr_slave_0: entered promiscuous mode [ 702.696194][T18745] hsr_slave_1: entered promiscuous mode [ 702.890725][ T7394] bridge_slave_1: left allmulticast mode [ 702.907785][ T7394] bridge_slave_1: left promiscuous mode [ 702.925006][ T7394] bridge0: port 2(bridge_slave_1) entered disabled state [ 703.038334][ T7394] bridge_slave_0: left allmulticast mode [ 703.068721][ T7394] bridge_slave_0: left promiscuous mode [ 703.087861][ T7394] bridge0: port 1(bridge_slave_0) entered disabled state [ 703.110775][ T5626] Bluetooth: hci4: command tx timeout [ 703.562336][T18866] misc userio: The device must be registered before sending interrupts [ 703.611127][ T5635] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 703.637332][ T7394] bond5 (unregistering): (slave gretap1): Releasing active interface [ 703.769896][ T5635] usb 2-1: Using ep0 maxpacket: 8 [ 703.778411][ T5635] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 703.797064][ T5635] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 703.815784][ T5635] usb 2-1: config 0 interface 0 has no altsetting 0 [ 703.822866][ T5635] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0a1d, bcdDevice= 0.00 [ 703.832819][ T5635] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.844037][ T5635] usb 2-1: config 0 descriptor?? [ 704.070110][T11746] usb 1-1: new low-speed USB device number 39 using dummy_hcd [ 704.085045][ T7394] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 704.096207][ T7394] bond_slave_0: left promiscuous mode [ 704.103564][ T7394] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 704.113131][ T7394] bond_slave_1: left promiscuous mode [ 704.120300][ T7394] bond0 (unregistering): (slave team0): Releasing backup interface [ 704.131497][ T7394] team0: left promiscuous mode [ 704.136318][ T7394] team_slave_0: left promiscuous mode [ 704.142044][ T7394] team_slave_1: left promiscuous mode [ 704.148192][ T7394] bond0 (unregistering): Released all slaves [ 704.160699][ T7394] bond1 (unregistering): Released all slaves [ 704.177458][ T7394] bond2 (unregistering): Released all slaves [ 704.193812][ T7394] bond3 (unregistering): Released all slaves [ 704.210243][T11746] usb 1-1: device descriptor read/64, error -71 [ 704.224702][ T7394] bond4 (unregistering): Released all slaves [ 704.243609][ T7394] bond5 (unregistering): Released all slaves [ 704.261370][ T7394] bond6 (unregistering): Released all slaves [ 704.262217][ T5635] hid (null): unknown global tag 0xa3 [ 704.274309][ T5635] hid (null): unknown global tag 0xc [ 704.279219][ T7394] bond7 (unregistering): Released all slaves [ 704.279746][ T5635] hid (null): unknown global tag 0xd [ 704.305718][ T7394] bond8 (unregistering): Released all slaves [ 704.307757][ T5635] hid-corsair-void 0003:1B1C:0A1D.001B: unexpected long global item [ 704.325638][ T5635] hid-corsair-void 0003:1B1C:0A1D.001B: parse failed (reason: -22) [ 704.335317][ T5635] hid-corsair-void 0003:1B1C:0A1D.001B: probe with driver hid-corsair-void failed with error -22 [ 704.336714][ T7394] bond9 (unregistering): Released all slaves [ 704.373253][ T7394] bond10 (unregistering): (slave lo): Releasing backup interface [ 704.381509][ T7394] bond10 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 704.393292][ T7394] bond10 (unregistering): Released all slaves [ 704.408768][ T7394] bond11 (unregistering): Released all slaves [ 704.423909][ T7394] bond12 (unregistering): Released all slaves [ 704.456843][ T5291] 8021q: adding VLAN 0 to HW filter on device eth9 [ 704.479887][T11746] usb 1-1: new low-speed USB device number 40 using dummy_hcd [ 704.494878][ T5635] usb 2-1: USB disconnect, device number 2 [ 704.661762][T11746] usb 1-1: device descriptor read/64, error -71 [ 704.672627][ T7394] tipc: Disabling bearer [ 704.677804][ T7394] tipc: Disabling bearer [ 704.687500][ T7394] tipc: Left network mode [ 704.791736][T11746] usb usb1-port1: attempt power cycle [ 705.161280][T11746] usb 1-1: new low-speed USB device number 41 using dummy_hcd [ 705.193495][ T5626] Bluetooth: hci4: command tx timeout [ 705.201729][T11746] usb 1-1: device descriptor read/8, error -71 [ 705.377734][T18891] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3267'. [ 705.460283][T11746] usb 1-1: new low-speed USB device number 42 using dummy_hcd [ 705.521044][T11746] usb 1-1: device descriptor read/8, error -71 [ 705.632187][T11746] usb usb1-port1: unable to enumerate USB device [ 705.655089][ T7394] hsr_slave_0: left promiscuous mode [ 705.665605][ T7394] hsr_slave_1: left promiscuous mode [ 705.672281][ T7394] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 705.685683][ T7394] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 705.759917][ T5710] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 705.919976][ T5710] usb 3-1: Using ep0 maxpacket: 8 [ 705.939455][ T5710] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 705.961602][ T5710] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 705.988317][ T5710] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 706.016516][ T5710] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.168893][ T7394] team0 (unregistering): Port device team_slave_1 removed [ 706.196251][ T7394] team0 (unregistering): Port device team_slave_0 removed [ 706.230028][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 706.386391][T18893] netlink: 192 bytes leftover after parsing attributes in process `syz.2.3266'. [ 706.663621][T18893] bridge3: entered promiscuous mode [ 706.669740][T18893] bridge3: entered allmulticast mode [ 707.152224][ T7394] IPVS: stop unused estimator thread 0... [ 707.203117][ T5745] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 707.271902][ T5626] Bluetooth: hci4: command tx timeout [ 707.373799][ T5745] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 707.407817][ T5745] usb 1-1: config 0 has no interface number 0 [ 707.427856][ T5745] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 707.455520][ T5745] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 707.483019][ T5745] usb 1-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 707.525338][ T5745] usb 1-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 707.551457][ T5745] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.577754][ T5745] usb 1-1: config 0 descriptor?? [ 707.649880][T11750] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 707.812291][T11750] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 707.831997][T18745] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 707.839982][T11750] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 707.868387][T18745] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 707.876917][T11750] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 707.907405][T11750] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.920132][T11750] usb 2-1: Product: syz [ 707.962552][T11750] usb 2-1: Manufacturer: syz [ 707.977788][T11750] usb 2-1: SerialNumber: syz [ 707.983116][T18745] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 707.991312][T18909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 708.015805][T11750] usb 2-1: config 0 descriptor?? [ 708.022721][T18909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 708.035303][T18745] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 708.054100][T11750] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 708.063356][T18745] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 708.088805][T18745] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 708.098382][T18745] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 708.132327][T18745] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 708.243401][ T5745] uclogic 0003:28BD:0042.001C: failed retrieving string descriptor #100: -71 [ 708.277177][ T5745] uclogic 0003:28BD:0042.001C: failed retrieving pen parameters: -71 [ 708.298476][ T5745] uclogic 0003:28BD:0042.001C: pen probing failed: -71 [ 708.308487][ T5745] uclogic 0003:28BD:0042.001C: failed probing parameters: -71 [ 708.338925][ T5745] uclogic 0003:28BD:0042.001C: probe with driver uclogic failed with error -71 [ 708.380722][ T5745] usb 1-1: USB disconnect, device number 43 [ 708.523597][T18745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 708.589360][T18745] 8021q: adding VLAN 0 to HW filter on device team0 [ 708.634445][T17715] bridge0: port 1(bridge_slave_0) entered blocking state [ 708.641736][T17715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 708.672444][T18917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 708.703769][T18917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 708.719324][T17715] bridge0: port 2(bridge_slave_1) entered blocking state [ 708.726509][T17715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 708.754062][T18917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 708.781372][T18941] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 708.825198][T18917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 708.838694][T11755] usb 3-1: USB disconnect, device number 71 [ 709.051131][T18949] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3277'. [ 709.088570][T18745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 709.115823][T11750] gspca_sunplus: reg_r err -71 [ 709.126870][T11750] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 709.211780][T11750] usb 2-1: USB disconnect, device number 3 [ 709.252983][T18745] veth0_vlan: entered promiscuous mode [ 709.294402][T18745] veth1_vlan: entered promiscuous mode [ 709.386099][T18745] veth0_macvtap: entered promiscuous mode [ 709.413351][T18745] veth1_macvtap: entered promiscuous mode [ 709.462127][T18745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 709.498456][T18745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 709.537529][ T7394] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.579337][ T7394] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.623657][ T7394] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.654976][ T7394] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.665244][T11755] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 709.812137][T18966] bridge0: port 3(erspan0) entered blocking state [ 709.862225][T11755] usb 1-1: config 0 has no interfaces? [ 709.874500][T18966] bridge0: port 3(erspan0) entered disabled state [ 709.901638][T11755] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 709.925085][T18966] erspan0: entered allmulticast mode [ 709.933836][T11755] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 709.972448][T11755] usb 1-1: Manufacturer: syz [ 710.017368][T11755] usb 1-1: config 0 descriptor?? [ 710.031198][T18966] erspan0: entered promiscuous mode [ 710.149386][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 710.149402][ T30] audit: type=1326 audit(1778956167.667:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18965 comm="syz.6.3281" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f176579ce59 code=0x7ffc0000 [ 710.221760][ T30] audit: type=1326 audit(1778956167.707:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18965 comm="syz.6.3281" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f176579ce59 code=0x7ffc0000 [ 710.239703][ T3306] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 710.298461][ T30] audit: type=1326 audit(1778956167.707:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18965 comm="syz.6.3281" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f176579ce59 code=0x7ffc0000 [ 710.332394][ T3306] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 710.367371][ T30] audit: type=1326 audit(1778956167.707:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18965 comm="syz.6.3281" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f176579ce59 code=0x7ffc0000 [ 710.411521][ T30] audit: type=1326 audit(1778956167.767:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18965 comm="syz.6.3281" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f176575d68e code=0x7ffc0000 [ 710.436217][ T30] audit: type=1326 audit(1778956167.777:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18965 comm="syz.6.3281" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f176575d68e code=0x7ffc0000 [ 710.461638][ T30] audit: type=1326 audit(1778956167.777:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18965 comm="syz.6.3281" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f176575d68e code=0x7ffc0000 [ 710.515527][ T30] audit: type=1326 audit(1778956167.777:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18965 comm="syz.6.3281" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f176575d68e code=0x7ffc0000 [ 710.555259][ T7388] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 710.587254][ T7388] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 710.601394][ T30] audit: type=1326 audit(1778956167.777:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18965 comm="syz.6.3281" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f176575d68e code=0x7ffc0000 [ 710.726529][ T30] audit: type=1326 audit(1778956167.777:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18965 comm="syz.6.3281" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f176575d68e code=0x7ffc0000 [ 711.281490][T11762] usb 1-1: USB disconnect, device number 44 [ 711.849876][T11762] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 712.030585][T11762] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 712.064899][T11762] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 712.132251][T11762] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 712.171586][T11762] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 712.195543][T11762] usb 2-1: SerialNumber: syz [ 712.426647][T19009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 712.455243][T19009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 712.511207][T11762] usb 2-1: 0:2 : does not exist [ 712.613673][T11762] usb 2-1: USB disconnect, device number 4 [ 713.158683][T19030] netlink: 'syz.1.3292': attribute type 1 has an invalid length. [ 713.187185][T19030] netlink: 'syz.1.3292': attribute type 2 has an invalid length. [ 713.209260][T19030] netlink: 'syz.1.3292': attribute type 1 has an invalid length. [ 713.223992][T19030] netlink: 'syz.1.3292': attribute type 2 has an invalid length. [ 713.324966][T19037] FAULT_INJECTION: forcing a failure. [ 713.324966][T19037] name failslab, interval 1, probability 0, space 0, times 0 [ 713.341594][T19037] CPU: 0 UID: 0 PID: 19037 Comm: syz.0.3295 Tainted: G L syzkaller #0 PREEMPT(full) [ 713.341620][T19037] Tainted: [L]=SOFTLOCKUP [ 713.341625][T19037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 713.341635][T19037] Call Trace: [ 713.341642][T19037] [ 713.341649][T19037] dump_stack_lvl+0xe8/0x150 [ 713.341675][T19037] should_fail_ex+0x412/0x560 [ 713.341700][T19037] should_failslab+0xa8/0x100 [ 713.341726][T19037] __kmalloc_cache_noprof+0x88/0x660 [ 713.341747][T19037] ? iopt_alloc_pages+0x85/0x490 [ 713.341766][T19037] iopt_alloc_pages+0x85/0x490 [ 713.341781][T19037] iopt_alloc_user_pages+0x42/0xe0 [ 713.341798][T19037] iopt_map_user_pages+0x4e/0xd0 [ 713.341818][T19037] iommufd_ioas_map+0x397/0x4d0 [ 713.341847][T19037] ? __pfx_iommufd_ioas_map+0x10/0x10 [ 713.341873][T19037] iommufd_fops_ioctl+0x4b5/0x5d0 [ 713.341897][T19037] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 713.341922][T19037] ? __fget_files+0x2a/0x420 [ 713.341945][T19037] ? __fget_files+0x2a/0x420 [ 713.341966][T19037] ? bpf_lsm_file_ioctl+0x9/0x20 [ 713.341989][T19037] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 713.342009][T19037] __se_sys_ioctl+0xfc/0x170 [ 713.342030][T19037] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.342048][T19037] do_syscall_64+0x15f/0xf80 [ 713.342071][T19037] ? trace_irq_disable+0x3b/0x140 [ 713.342092][T19037] ? clear_bhb_loop+0x40/0x90 [ 713.342120][T19037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.342134][T19037] RIP: 0033:0x7fad5419ce59 [ 713.342150][T19037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 713.342164][T19037] RSP: 002b:00007fad523f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 713.342181][T19037] RAX: ffffffffffffffda RBX: 00007fad54415fa0 RCX: 00007fad5419ce59 [ 713.342194][T19037] RDX: 0000200000000380 RSI: 0000000000003b85 RDI: 0000000000000003 [ 713.342204][T19037] RBP: 00007fad523f6090 R08: 0000000000000000 R09: 0000000000000000 [ 713.342213][T19037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 713.342221][T19037] R13: 00007fad54416038 R14: 00007fad54415fa0 R15: 00007fad5453fa48 [ 713.342242][T19037] [ 713.827741][T19039] program syz.1.3296 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 713.936624][T19046] : entered promiscuous mode [ 714.100065][T11762] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 714.274441][T11762] usb 1-1: unable to get BOS descriptor or descriptor too short [ 714.296802][T11762] usb 1-1: not running at top speed; connect to a high speed hub [ 714.314605][T11762] usb 1-1: config 12 has an invalid interface number: 231 but max is 0 [ 714.336944][T11762] usb 1-1: config 12 has no interface number 0 [ 714.355563][T11762] usb 1-1: config 12 interface 231 altsetting 2 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 714.371297][T11762] usb 1-1: config 12 interface 231 has no altsetting 0 [ 714.382372][T11762] usb 1-1: New USB device found, idVendor=2040, idProduct=9941, bcdDevice=93.b7 [ 714.393054][T11762] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.402347][T11762] usb 1-1: Product: syz [ 714.406713][T11762] usb 1-1: Manufacturer: syz [ 714.413514][T11762] usb 1-1: SerialNumber: syz [ 715.030545][T19073] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3304'. [ 715.215044][ T30] kauditd_printk_skb: 310 callbacks suppressed [ 715.215060][ T30] audit: type=1326 audit(1778956172.737:1668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19074 comm="syz.5.3305" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3fd9ce59 code=0x7ffc0000 [ 715.248682][ T30] audit: type=1326 audit(1778956172.737:1669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19074 comm="syz.5.3305" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3fd9ce59 code=0x7ffc0000 [ 715.275800][ T30] audit: type=1326 audit(1778956172.737:1670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19074 comm="syz.5.3305" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3fd9ce59 code=0x7ffc0000 [ 715.321588][ T30] audit: type=1326 audit(1778956172.767:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19074 comm="syz.5.3305" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3fd9ce59 code=0x7ffc0000 [ 715.398581][ T30] audit: type=1326 audit(1778956172.767:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19074 comm="syz.5.3305" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f6b3fd9ce59 code=0x7ffc0000 [ 715.425310][ T30] audit: type=1326 audit(1778956172.767:1673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19074 comm="syz.5.3305" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3fd9ce59 code=0x7ffc0000 [ 715.503400][ T30] audit: type=1326 audit(1778956172.767:1674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19074 comm="syz.5.3305" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3fd9ce59 code=0x7ffc0000 [ 715.540975][ T30] audit: type=1326 audit(1778956172.767:1675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19074 comm="syz.5.3305" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3fd9ce59 code=0x7ffc0000 [ 715.567181][ T30] audit: type=1326 audit(1778956172.767:1676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19074 comm="syz.5.3305" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3fd9ce59 code=0x7ffc0000 [ 715.596234][ T30] audit: type=1326 audit(1778956172.767:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19074 comm="syz.5.3305" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6b3fd9ce59 code=0x7ffc0000 [ 715.709171][T19080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 715.780182][T19080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 715.803325][T19083] netlink: 'syz.6.3308': attribute type 10 has an invalid length. [ 715.828017][T19087] CUSE: unknown device info "" [ 715.837375][T19085] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3308'. [ 715.864986][T19087] CUSE: unknown device info "" [ 715.877605][T19087] CUSE: unknown device info "" [ 715.942487][T19087] CUSE: unknown device info "" [ 715.959120][T19085] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 715.974710][T19087] CUSE: unknown device info "" [ 715.999092][T19087] CUSE: unknown device info "" [ 716.014773][T19087] CUSE: unknown device info "" [ 716.028470][T19085] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 716.043266][T19087] CUSE: unknown device info "" [ 716.055727][T19087] CUSE: DEVNAME unspecified [ 716.060653][T19085] bond0 (unregistering): Released all slaves [ 716.354071][T19109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 716.366557][T19103] Cannot find set identified by id 0 to match [ 716.377694][T19109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 716.599935][T19103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 716.615850][T19103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 716.853194][T19132] loop8: detected capacity change from 0 to 7 [ 716.863491][T19132] Dev loop8: unable to read RDB block 7 [ 716.872771][T19132] loop8: unable to read partition table [ 716.886542][T19132] loop8: partition table beyond EOD, truncated [ 716.895056][T19132] loop_reread_partitions: partition scan of loop8 (被x ) failed (rc=-5) [ 716.992256][T19139] loop3: detected capacity change from 0 to 7 [ 717.010474][T19139] Dev loop3: unable to read RDB block 7 [ 717.023367][T19139] loop3: unable to read partition table [ 717.036229][T19139] loop3: partition table beyond EOD, truncated [ 717.052774][T19139] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 717.323272][T19151] program syz.2.3330 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 717.446296][T19159] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3330'. [ 717.470037][T19159] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3330'. [ 717.689581][ T5732] hid-generic 0001:10000:007F.001D: unknown main item tag 0x0 [ 717.713778][T19176] netlink: 'syz.0.3332': attribute type 4 has an invalid length. [ 717.717740][ T5732] hid-generic 0001:10000:007F.001D: unknown main item tag 0x0 [ 717.747441][ T5732] hid-generic 0001:10000:007F.001D: unknown main item tag 0x0 [ 717.773012][ T5732] hid-generic 0001:10000:007F.001D: unknown main item tag 0x0 [ 717.787942][ T5732] hid-generic 0001:10000:007F.001D: unknown main item tag 0x0 [ 717.811046][ T5732] hid-generic 0001:10000:007F.001D: unknown main item tag 0x0 [ 717.830967][ T5732] hid-generic 0001:10000:007F.001D: unknown main item tag 0x0 [ 717.849911][ T5732] hid-generic 0001:10000:007F.001D: unknown main item tag 0x0 [ 717.867590][ T5732] hid-generic 0001:10000:007F.001D: unknown main item tag 0x0 [ 717.899856][ T5732] hid-generic 0001:10000:007F.001D: unknown main item tag 0x0 [ 717.941462][ T5732] hid-generic 0001:10000:007F.001D: hidraw0: HID v100.00 Device [syz1] on syz1 [ 718.023127][T19183] binder: 19182:19183 ioctl 891c 200000000180 returned -22 [ 718.029117][T19184] fido_id[19184]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 718.067371][T19183] binder_alloc: 19182: binder_alloc_buf size -392 failed, no address space [ 718.107966][T19183] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 718.128271][T19187] loop8: detected capacity change from 0 to 7 [ 718.161632][T19187] Dev loop8: unable to read RDB block 7 [ 718.179127][T19187] loop8: unable to read partition table [ 718.192177][T19187] loop8: partition table beyond EOD, truncated [ 718.208823][T19187] loop_reread_partitions: partition scan of loop8 (被x ) failed (rc=-5) [ 718.327315][T19193] netlink: 'syz.2.3337': attribute type 4 has an invalid length. [ 718.382435][T19193] netlink: 'syz.2.3337': attribute type 4 has an invalid length. [ 718.445732][T19193] netlink: 'syz.2.3337': attribute type 4 has an invalid length. [ 718.655656][T19202] ip6erspan0: entered promiscuous mode [ 718.681231][T19202] ip6erspan0: entered allmulticast mode [ 718.695313][T19204] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 718.847311][T19211] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3342'. [ 719.153937][T19223] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3345'. [ 719.429180][T19230] loop8: detected capacity change from 0 to 7 [ 719.441352][T19230] Dev loop8: unable to read RDB block 7 [ 719.448698][T19230] loop8: unable to read partition table [ 719.453236][T11762] dvb-usb: found a 'Hauppauge Nova-T 500 Dual DVB-T' in cold state, will try to load a firmware [ 719.455715][T19230] loop8: partition table beyond EOD, truncated [ 719.489271][T19230] loop_reread_partitions: partition scan of loop8 (被x ) failed (rc=-5) [ 719.560139][T11755] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 719.571692][T19188] syz.0.3334 (19188): drop_caches: 2 [ 719.602444][T11746] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 719.612449][T19232] netlink: 'syz.1.3349': attribute type 1 has an invalid length. [ 719.655691][T11762] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 719.665008][T11762] dib0700: firmware download failed at 7 with -22 [ 719.710331][T19238] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3351'. [ 719.728382][T19238] binder: 19237:19238 ioctl c0306201 200000000080 returned -14 [ 719.730868][T11755] usb 3-1: Using ep0 maxpacket: 32 [ 719.738319][T19238] binder: 19237:19238 ioctl c0306201 2000000003c0 returned -14 [ 719.762409][T11755] usb 3-1: too many configurations: 148, using maximum allowed: 8 [ 719.784642][T11755] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 719.792921][T11746] usb 6-1: Using ep0 maxpacket: 32 [ 719.808146][T11746] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 719.823445][T11755] usb 3-1: can't read configurations, error -61 [ 719.846820][T11746] usb 6-1: config 0 has no interface number 0 [ 719.870812][T11746] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 719.918113][T11746] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 719.941017][T11746] usb 6-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 719.953097][T11746] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.971957][T11746] usb 6-1: config 0 descriptor?? [ 719.990231][T11755] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 720.013194][T19241] xt_CT: No such helper "snmp" [ 720.149999][T11755] usb 3-1: Using ep0 maxpacket: 32 [ 720.160832][T11755] usb 3-1: too many configurations: 148, using maximum allowed: 8 [ 720.181302][T11755] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 720.191696][T11755] usb 3-1: can't read configurations, error -61 [ 720.202883][T11755] usb usb3-port1: attempt power cycle [ 720.900322][T11755] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 720.933409][T11755] usb 3-1: Using ep0 maxpacket: 32 [ 720.939253][T11755] usb 3-1: too many configurations: 148, using maximum allowed: 8 [ 720.964462][T11755] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 720.975732][T11755] usb 3-1: can't read configurations, error -61 [ 721.109261][T19257] netlink: 'syz.1.3357': attribute type 21 has an invalid length. [ 721.110393][T11755] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 721.126269][T19257] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3357'. [ 721.171343][T11755] usb 3-1: Using ep0 maxpacket: 32 [ 721.180037][T11746] uclogic 0003:28BD:0094.001E: failed retrieving string descriptor #100: -71 [ 721.210194][T11755] usb 3-1: too many configurations: 148, using maximum allowed: 8 [ 721.218259][T11746] uclogic 0003:28BD:0094.001E: failed retrieving pen parameters: -71 [ 721.227302][T11746] uclogic 0003:28BD:0094.001E: pen probing failed: -71 [ 721.244332][T11746] uclogic 0003:28BD:0094.001E: failed probing parameters: -71 [ 721.244500][T11755] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 721.265964][T11746] uclogic 0003:28BD:0094.001E: probe with driver uclogic failed with error -71 [ 721.281106][T11755] usb 3-1: can't read configurations, error -61 [ 721.284984][T19260] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3358'. [ 721.294601][T11746] usb 6-1: USB disconnect, device number 33 [ 721.306785][T11755] usb usb3-port1: unable to enumerate USB device [ 721.337867][T19264] loop8: detected capacity change from 0 to 7 [ 721.348717][T19264] Dev loop8: unable to read RDB block 7 [ 721.356697][T19264] loop8: unable to read partition table [ 721.363927][T19264] loop8: partition table beyond EOD, truncated [ 721.370690][T19264] loop_reread_partitions: partition scan of loop8 (被x ) failed (rc=-5) [ 721.390375][ T5732] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 721.477525][T19268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 721.488822][T19268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 721.539917][ T5732] usb 2-1: device descriptor read/64, error -71 [ 721.619898][T11746] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 721.649353][T19272] netlink: 'syz.6.3363': attribute type 9 has an invalid length. [ 721.657670][T19272] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3363'. [ 721.759868][T11746] usb 6-1: device descriptor read/64, error -71 [ 721.810217][ T5732] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 721.949920][ T5732] usb 2-1: device descriptor read/64, error -71 [ 721.999923][T11746] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 722.073370][ T5732] usb usb2-port1: attempt power cycle [ 722.089511][T19274] : entered promiscuous mode [ 722.139922][T11746] usb 6-1: device descriptor read/64, error -71 [ 722.264237][T11746] usb usb6-port1: attempt power cycle [ 722.331063][T19278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 722.348801][T19278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 722.419940][ T5732] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 722.450686][ T5732] usb 2-1: device descriptor read/8, error -71 [ 722.506919][T19287] netlink: 'syz.6.3369': attribute type 1 has an invalid length. [ 722.518719][T19285] vlan2: entered allmulticast mode [ 722.524111][T19285] team0: entered allmulticast mode [ 722.529356][T19285] team_slave_0: entered allmulticast mode [ 722.535426][T19285] team_slave_1: entered allmulticast mode [ 722.576572][T19287] 8021q: adding VLAN 0 to HW filter on device bond1 [ 722.586132][T19287] bond0: (slave bond1): making interface the new active one [ 722.594316][T19287] bond0: (slave bond1): Enslaving as an active interface with an up link [ 722.602964][T19285] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3368'. [ 722.612186][T11746] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 722.633767][T19287] bond0: (slave gretap1): Enslaving as a backup interface with an up link [ 722.643093][T11746] usb 6-1: device descriptor read/8, error -71 [ 722.645174][T19287] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3369'. [ 722.663532][T19287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 722.678146][T19287] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3369'. [ 722.719901][ T5732] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 722.751578][ T5732] usb 2-1: device descriptor read/8, error -71 [ 722.755691][T19295] kAFS: unparsable volume name [ 722.861464][ T5732] usb usb2-port1: unable to enumerate USB device [ 722.890002][T11746] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 722.930734][T11746] usb 6-1: device descriptor read/8, error -71 [ 722.964551][T19298] loop8: detected capacity change from 0 to 7 [ 722.972666][T19298] Dev loop8: unable to read RDB block 7 [ 722.986995][T19298] loop8: unable to read partition table [ 722.995304][T19298] loop8: partition table beyond EOD, truncated [ 723.002806][T19298] loop_reread_partitions: partition scan of loop8 (被x ) failed (rc=-5) [ 723.051343][T11746] usb usb6-port1: unable to enumerate USB device [ 723.139967][T19302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 723.153696][T19302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 723.739937][T11746] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 723.893211][T11746] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 723.904307][T11746] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 723.916667][T11746] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 723.925831][T11746] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 723.934897][T11746] usb 3-1: Manufacturer: syz [ 723.944882][T11746] usb 3-1: config 0 descriptor?? [ 724.097864][T19320] sctp: [Deprecated]: syz.0.3380 (pid 19320) Use of int in maxseg socket option. [ 724.097864][T19320] Use struct sctp_assoc_value instead [ 724.113360][T19321] sctp: [Deprecated]: syz.0.3380 (pid 19321) Use of int in maxseg socket option. [ 724.113360][T19321] Use struct sctp_assoc_value instead [ 724.161495][T19311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 724.179679][T19311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 724.489385][T19335] fuse: Bad value for 'fd' [ 724.499586][T19336] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3385'. [ 724.739875][T11750] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 724.869997][T11750] usb 2-1: device descriptor read/64, error -71 [ 724.980815][T11746] usbhid 3-1:0.0: can't add hid device: -71 [ 724.992598][T11746] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 725.009392][T11746] usb 3-1: USB disconnect, device number 76 [ 725.120662][T11750] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 725.132190][T19343] [U]  [ 725.135560][T19343] [U] [ 725.138264][T19343] [U] [ 725.140960][T19343] [U] [ 725.144286][T19343] [U] [ 725.147002][T19343] [U] [ 725.149722][T19343] [U] [ 725.152424][T19343] [U] [ 725.156228][T19343] [U] [ 725.158942][T19343] [U] [ 725.161736][T19343] [U] [ 725.164440][T19343] [U] [ 725.168039][T19343] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\ [ 725.215053][T19343] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\ [ 725.261976][T19343] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\ [ 725.309067][T19343] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\ [ 725.319963][T11750] usb 2-1: device descriptor read/64, error -71 [ 725.382630][T19343] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\ [ 725.429663][T19343] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\ [ 725.476560][T19343] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\ [ 725.524333][T19343] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0 [ 725.573271][T19343] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\ [ 725.620306][T19343] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\ [ 725.667178][T19343] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\ [ 725.681153][T11750] usb usb2-port1: attempt power cycle [ 725.714139][T19343] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\ [ 725.773000][T19343] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\ [ 725.820101][T19343] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\ [ 725.867067][T19343] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\ [ 725.914476][T19343] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0 [ 725.991489][T19343] [U] [ 726.100556][T19350] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3389'. [ 726.229959][T11750] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 726.250748][T11750] usb 2-1: device descriptor read/8, error -71 [ 726.319948][ T5732] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 726.482018][ T5732] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 726.490320][ T5732] usb 3-1: config 1 has no interface number 0 [ 726.505613][ T5732] usb 3-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 726.519896][T11750] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 726.537075][ T5732] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 726.551434][T11750] usb 2-1: device descriptor read/8, error -71 [ 726.559826][ T5732] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 726.586337][ T5732] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 726.604872][ T5732] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.623603][ T5732] usb 3-1: Product: syz [ 726.633200][ T5732] usb 3-1: Manufacturer: syz [ 726.643146][ T5732] usb 3-1: SerialNumber: syz [ 726.668540][T19349] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 726.690103][T11750] usb usb2-port1: unable to enumerate USB device [ 726.807685][T19358] fuseblk: Unknown parameter 'uid' [ 726.898812][T19349] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 727.124455][ T5732] sierra_net 3-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.2-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 727.933119][T19379] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 727.955934][T19381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 727.980567][T19379] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3400'. [ 728.000651][T19381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 728.008645][T11762] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 728.145022][T19393] ip6erspan0: entered allmulticast mode [ 728.169946][T11762] usb 2-1: Using ep0 maxpacket: 16 [ 728.175893][T19393] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[11589] was attempted by "   @ h debu   @$ \x07 (  \x0c     blkio.bfq.dequeue [ 728.188378][T11762] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 728.339944][T11755] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 728.363719][T11762] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 728.375335][T19398] syzkaller0: entered promiscuous mode [ 728.393099][T19398] syzkaller0: entered allmulticast mode [ 728.405891][T11762] usb 2-1: config 0 interface 0 has no altsetting 0 [ 728.446763][T11762] usb 2-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 728.458907][T11762] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.496766][T11762] usb 2-1: config 0 descriptor?? [ 728.504168][T11755] usb 6-1: Using ep0 maxpacket: 8 [ 728.532091][T19379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 728.548813][T19379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 728.559665][T11755] usb 6-1: unable to get BOS descriptor or descriptor too short [ 728.584961][T11755] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 728.598457][T11755] usb 6-1: can't read configurations, error -71 [ 728.636301][T11746] usb 3-1: USB disconnect, device number 77 [ 728.664358][T11746] sierra_net 3-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.2-1, Sierra Wireless USB-to-WWAN Modem [ 728.811312][T11746] sierra_net 3-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 728.942668][T11762] usbhid 2-1:0.0: can't add hid device: -71 [ 728.959919][T11762] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 729.001006][T11762] usb 2-1: USB disconnect, device number 13 [ 729.141574][T11746] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 729.299902][T11746] usb 3-1: Using ep0 maxpacket: 16 [ 729.315806][T11746] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 729.337755][T11746] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 729.367033][T11746] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 729.399869][T11746] usb 3-1: config 0 interface 0 has no altsetting 0 [ 729.413553][T11746] usb 3-1: New USB device found, idVendor=5543, idProduct=0045, bcdDevice= 0.00 [ 729.447570][T11746] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.468633][T11746] usb 3-1: config 0 descriptor?? [ 729.670066][T11755] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 729.690586][T19428] netlink: 'syz.1.3405': attribute type 11 has an invalid length. [ 729.699463][T19428] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3405'. [ 729.826422][T19433] netlink: 'syz.0.3407': attribute type 4 has an invalid length. [ 729.843750][T11755] usb 6-1: Using ep0 maxpacket: 32 [ 729.851305][T19433] netlink: 'syz.0.3407': attribute type 4 has an invalid length. [ 729.867873][T11755] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 729.877900][T11755] usb 6-1: config 0 has no interface number 0 [ 729.887075][T11755] usb 6-1: config 0 interface 184 has no altsetting 0 [ 729.893950][T19433] netlink: 'syz.0.3407': attribute type 4 has an invalid length. [ 729.904742][T11755] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 729.921363][T11755] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.931873][T11755] usb 6-1: Product: syz [ 729.936204][T11755] usb 6-1: Manufacturer: syz [ 729.941549][T11755] usb 6-1: SerialNumber: syz [ 729.950578][T11755] usb 6-1: config 0 descriptor?? [ 730.086407][T11746] usbhid 3-1:0.0: can't add hid device: -71 [ 730.098657][T11746] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 730.126554][T11746] usb 3-1: USB disconnect, device number 78 [ 730.167434][T11755] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 730.180625][T11755] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 730.222345][T11755] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 730.244239][T11755] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 730.254796][T11755] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 730.285652][T11755] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 730.296039][T11755] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 730.329739][T11755] usb 6-1: USB disconnect, device number 39 [ 730.354253][T16977] udevd[16977]: setting owner of /dev/bus/usb/006/039 to uid=0, gid=0 failed: No such file or directory [ 730.382190][ T30] kauditd_printk_skb: 138 callbacks suppressed [ 730.382207][ T30] audit: type=1400 audit(1778956187.907:1816): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=19447 comm="syz.5.3410" [ 730.777784][T19459] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 730.929922][T11762] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 730.940230][ T5626] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 731.107127][T11762] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 731.156575][T11762] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 731.186277][T11762] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 731.206692][T11762] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.231152][T11762] usb 3-1: config 0 descriptor?? [ 731.653653][T11762] hid_parser_main: 211 callbacks suppressed [ 731.653669][T11762] kone 0003:1E7D:2CED.001F: unknown main item tag 0x0 [ 731.693066][T11762] kone 0003:1E7D:2CED.001F: unknown main item tag 0x0 [ 731.709981][T11762] kone 0003:1E7D:2CED.001F: unknown main item tag 0x0 [ 731.741159][T11762] kone 0003:1E7D:2CED.001F: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.2-1/input0 [ 731.799874][ T5732] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 731.851296][T11762] usb 3-1: USB disconnect, device number 79 [ 731.874806][T19472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 731.915986][T19472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 731.952840][T19478] fido_id[19478]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 732.241355][T19487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3423'. [ 732.790890][T19498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3424'. [ 733.691694][T19515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 733.776296][T19515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 733.938383][ T30] audit: type=1326 audit(1778956191.457:1817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19517 comm="syz.1.3430" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb623d9ce59 code=0x7ffc0000 [ 734.028760][ T30] audit: type=1326 audit(1778956191.457:1818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19517 comm="syz.1.3430" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb623d9ce59 code=0x7ffc0000 [ 734.136356][ T30] audit: type=1326 audit(1778956191.457:1819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19517 comm="syz.1.3430" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7fb623d9ce59 code=0x7ffc0000 [ 734.213087][ T30] audit: type=1326 audit(1778956191.457:1820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19517 comm="syz.1.3430" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb623d9ce59 code=0x7ffc0000 [ 734.266125][ T30] audit: type=1326 audit(1778956191.457:1821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19517 comm="syz.1.3430" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb623d9ce59 code=0x7ffc0000 [ 734.291072][ T30] audit: type=1326 audit(1778956191.457:1822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19517 comm="syz.1.3430" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb623d9ce59 code=0x7ffc0000 [ 734.316103][ T30] audit: type=1326 audit(1778956191.457:1823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19517 comm="syz.1.3430" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb623d9caeb code=0x7ffc0000 [ 734.347566][ T30] audit: type=1326 audit(1778956191.457:1824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19517 comm="syz.1.3430" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb623d9ce59 code=0x7ffc0000 [ 734.395342][ T30] audit: type=1326 audit(1778956191.457:1825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19517 comm="syz.1.3430" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb623d9ce59 code=0x7ffc0000 [ 734.423832][T19527] bond1: option min_links: invalid value (18446744073709551608) [ 734.431965][T19527] bond1: option min_links: allowed values 0 - 2147483647 [ 734.461004][T19527] bond1 (unregistering): Released all slaves [ 734.637752][T19526] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 734.639668][T19530] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 734.678563][T19530] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 735.233569][T19547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3437'. [ 735.264992][T19546] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3437'. [ 735.387524][T19543] input: syz0 as /devices/virtual/input/input140 [ 735.571345][T19553] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3439'. [ 736.115661][T19564] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3443'. [ 736.154820][T19565] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3443'. [ 736.231854][T19564] 8021q: adding VLAN 0 to HW filter on device bond1 [ 736.369875][ T5732] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 736.538834][ T5732] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 736.560693][ T5732] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 736.573655][ T5732] usb 3-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 736.584515][ T5732] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.593833][ T5732] usb 3-1: Product: syz [ 736.602656][ T5732] usb 3-1: Manufacturer: syz [ 736.609760][ T5732] usb 3-1: SerialNumber: syz [ 736.829521][ T5732] usb 3-1: 0:1 : does not exist [ 736.844750][T19587] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3446'. [ 736.849336][ T5732] usb 3-1: unit 6 not found! [ 736.868798][ T5732] usb 3-1: unit 27 not found! [ 736.928845][ T5732] usb 3-1: USB disconnect, device number 80 [ 737.073050][T19596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 737.082417][T19597] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3453'. [ 737.088602][T19596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 737.093109][T19597] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3453'. [ 737.099359][T11762] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 737.127186][T19597] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3453'. [ 737.137772][T19597] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3453'. [ 737.279990][T11762] usb 2-1: Using ep0 maxpacket: 32 [ 737.287101][T11762] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 737.295980][T11762] usb 2-1: config 0 has no interface number 0 [ 737.304134][T11762] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 737.313615][T11762] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.316945][T19603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 737.321709][T11762] usb 2-1: Product: syz [ 737.321730][T11762] usb 2-1: Manufacturer: syz [ 737.321743][T11762] usb 2-1: SerialNumber: syz [ 737.335788][T19603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 737.349413][T11762] usb 2-1: config 0 descriptor?? [ 738.163981][T11762] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 738.177956][T11762] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 738.378842][T19590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 738.399603][T19590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 738.640232][T11750] usb 6-1: new full-speed USB device number 41 using dummy_hcd [ 738.823125][T11750] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 738.837997][T19590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 738.846688][T11762] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 738.858986][T11750] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 738.869446][T19590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 738.884994][T11762] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -32 [ 738.903182][T11750] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 738.919279][T11750] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.928266][T11750] usb 6-1: Product: syz [ 738.933144][T11750] usb 6-1: Manufacturer: syz [ 738.937926][T11750] usb 6-1: SerialNumber: syz [ 738.939344][ T5710] usb 2-1: USB disconnect, device number 14 [ 738.958806][T11750] usb 6-1: config 0 descriptor?? [ 738.967059][T19631] raw-gadget.5 gadget.5: fail, usb_ep_enable returned -22 [ 738.983251][T11750] usb 6-1: ucan: probing device on interface #0 [ 738.995827][T11750] usb 6-1: ucan: invalid endpoint configuration [ 739.011693][T11750] usb 6-1: ucan: probe failed; try to update the device firmware [ 739.195710][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 739.195725][ T30] audit: type=1326 audit(1778956196.717:1861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19630 comm="syz.5.3462" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6b3fd9ce59 code=0x0 [ 739.265364][T19645] sit1: entered promiscuous mode [ 739.279639][T19645] sit1: entered allmulticast mode [ 739.403110][T19652] trusted_key: encrypted_key: insufficient parameters specified [ 739.609417][T19666] xt_policy: output policy not valid in PREROUTING and INPUT [ 739.989926][T11750] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 740.140827][T11750] usb 3-1: Using ep0 maxpacket: 16 [ 740.153850][T11750] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 740.166858][T11750] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 740.177548][T11750] usb 3-1: config 0 interface 0 has no altsetting 0 [ 740.184363][T11750] usb 3-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 740.193684][T11750] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.215773][T11750] usb 3-1: config 0 descriptor?? [ 740.297168][T19676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 740.313049][T19675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 740.313453][T19676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 740.340614][T19675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 740.919372][ T30] audit: type=1326 audit(1778956198.437:1862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19692 comm="syz.1.3481" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb623d9ce59 code=0x7ffc0000 [ 740.972254][T19700] sctp: [Deprecated]: syz.6.3483 (pid 19700) Use of int in maxseg socket option. [ 740.972254][T19700] Use struct sctp_assoc_value instead [ 740.978452][ T30] audit: type=1326 audit(1778956198.437:1863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19692 comm="syz.1.3481" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb623d9ce59 code=0x7ffc0000 [ 741.018080][ T30] audit: type=1326 audit(1778956198.437:1864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19692 comm="syz.1.3481" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb623d9ce59 code=0x7ffc0000 [ 741.043875][ T30] audit: type=1326 audit(1778956198.437:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19692 comm="syz.1.3481" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fb623d9ce59 code=0x7ffc0000 [ 741.074308][ T30] audit: type=1326 audit(1778956198.487:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19692 comm="syz.1.3481" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb623d5d68e code=0x7ffc0000 [ 741.103733][ T30] audit: type=1326 audit(1778956198.497:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19692 comm="syz.1.3481" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb623d5d68e code=0x7ffc0000 [ 741.131271][ T30] audit: type=1326 audit(1778956198.517:1868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19692 comm="syz.1.3481" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb623d5d68e code=0x7ffc0000 [ 741.156708][ T30] audit: type=1326 audit(1778956198.517:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19692 comm="syz.1.3481" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb623d5d68e code=0x7ffc0000 [ 741.214823][ T30] audit: type=1326 audit(1778956198.517:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19692 comm="syz.1.3481" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb623d5d68e code=0x7ffc0000 [ 741.409188][T11746] usb 6-1: USB disconnect, device number 41 [ 741.741634][T19709] cgroup: fork rejected by pids controller in /syz1 [ 741.772209][T11746] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 741.971301][T11746] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 742.006478][T11746] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 742.034729][T11746] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 742.044888][T11746] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 742.056353][T11746] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 742.065659][T11746] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.081569][T11746] usb 6-1: config 0 descriptor?? [ 742.316153][T11746] hdpvr 6-1:0.0: unexpected answer of status request, len -32 [ 742.342653][T11746] hdpvr 6-1:0.0: device init failed [ 742.353577][T11746] hdpvr 6-1:0.0: probe with driver hdpvr failed with error -12 [ 742.748845][T11750] usbhid 3-1:0.0: can't add hid device: -71 [ 742.772963][T11750] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 742.811918][T11750] usb 3-1: USB disconnect, device number 81 [ 743.022891][ T5632] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 743.046621][ T5632] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 743.056771][ T5632] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 743.065873][ T5632] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 743.080405][ T5632] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 743.208393][T19722] : entered promiscuous mode [ 743.806240][ T7392] bridge_slave_1: left promiscuous mode [ 743.821634][ T7392] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.831017][ T5710] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 743.854774][ T7392] bridge_slave_0: left promiscuous mode [ 743.869323][ T7392] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.003953][ T5710] usb 3-1: Using ep0 maxpacket: 8 [ 744.023664][ T5710] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 744.064325][ T5710] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 744.073890][ T5710] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.093649][T19745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 744.111797][ T5710] usb 3-1: config 0 descriptor?? [ 744.122720][T19745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 744.143769][ T5710] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 744.489551][T11746] usb 6-1: USB disconnect, device number 42 [ 744.687616][ T7392] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 744.703948][ T7392] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 744.714939][ T7392] bond0 (unregistering): Released all slaves [ 744.729646][ T7392] bond1 (unregistering): Released all slaves [ 744.907431][ T5291] 8021q: adding VLAN 0 to HW filter on device eth9 [ 744.939572][T19762] tipc: Started in network mode [ 744.947624][T19762] tipc: Node identity 16fd9e9f260d, cluster identity 4711 [ 744.959682][T19762] tipc: Enabled bearer , priority 0 [ 744.994630][T19763] syzkaller0: entered promiscuous mode [ 745.012714][T19763] syzkaller0: entered allmulticast mode [ 745.058495][ T7392] : left promiscuous mode [ 745.190100][ T5626] Bluetooth: hci0: command tx timeout [ 745.215868][T19758] tipc: Resetting bearer [ 745.367495][T19758] tipc: Disabling bearer [ 745.397258][T19772] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 745.401883][ T7392] tipc: Left network mode [ 745.460054][ T5710] gspca_vc032x: reg_r err -110 [ 745.460116][ T5710] vc032x 3-1:0.0: probe with driver vc032x failed with error -110 [ 745.766274][T19726] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.794499][T19726] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.823225][T19726] bridge_slave_0: entered allmulticast mode [ 745.843797][T19726] bridge_slave_0: entered promiscuous mode [ 745.937267][T19726] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.954192][T19726] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.965630][T19726] bridge_slave_1: entered allmulticast mode [ 745.977499][T19726] bridge_slave_1: entered promiscuous mode [ 746.195512][T19726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 746.214775][T19792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 746.238582][T19726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 746.249710][T19792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 746.277485][ T7392] hsr_slave_0: left promiscuous mode [ 746.278068][T19792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 746.293987][ T7392] hsr_slave_1: left promiscuous mode [ 746.303232][ T7392] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 746.307372][T19792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 746.327986][ T7392] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 746.599486][T11746] usb 3-1: USB disconnect, device number 82 [ 746.803905][ T7392] team0 (unregistering): Port device team_slave_1 removed [ 746.828214][ T7392] team0 (unregistering): Port device team_slave_0 removed [ 747.027339][ T5291] 8021q: adding VLAN 0 to HW filter on device eth10 [ 747.057579][T19726] team0: Port device team_slave_0 added [ 747.102801][T19726] team0: Port device team_slave_1 added [ 747.184198][T19726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 747.195279][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.201034][T19726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 747.209886][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.248857][T19726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 747.271314][T19726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 747.278334][T19726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 747.281304][ T5626] Bluetooth: hci0: command tx timeout [ 747.317197][T19726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 747.373761][T19726] hsr_slave_0: entered promiscuous mode [ 747.380564][T19726] hsr_slave_1: entered promiscuous mode [ 747.386990][T19726] debugfs: 'hsr0' already exists in 'hsr' [ 747.393652][T19726] Cannot create hsr debugfs directory [ 747.530748][T19827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 747.554388][T19827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 747.569718][T19827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 747.604045][T19827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 747.832534][T19833] misc userio: No port type given on /dev/userio [ 749.170145][ T5635] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 749.310200][ T5635] usb 3-1: device descriptor read/64, error -71 [ 749.363824][ T5626] Bluetooth: hci0: command tx timeout [ 749.559921][ T5635] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 749.656518][T19726] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 749.679308][T19726] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 749.700111][ T5635] usb 3-1: device descriptor read/64, error -71 [ 749.729571][T19726] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 749.744121][T19726] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 749.754828][T19726] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 749.776208][T19726] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 749.822041][ T5635] usb usb3-port1: attempt power cycle [ 749.837714][T19726] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 749.918899][T19726] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 750.179916][ T5635] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 750.223836][ T5635] usb 3-1: device descriptor read/8, error -71 [ 750.369376][T19726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 750.401539][T19726] 8021q: adding VLAN 0 to HW filter on device team0 [ 750.457309][ T7392] bridge0: port 1(bridge_slave_0) entered blocking state [ 750.465504][ T7392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 750.493146][T19889] __nla_validate_parse: 5 callbacks suppressed [ 750.493226][T19889] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3514'. [ 750.513596][ T7392] bridge0: port 2(bridge_slave_1) entered blocking state [ 750.520335][ T5635] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 750.520857][ T7392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 750.573697][ T5635] usb 3-1: device descriptor read/8, error -71 [ 750.704024][ T5635] usb usb3-port1: unable to enumerate USB device [ 750.782508][T19899] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 750.864437][T19900] libceph: resolve '0..' (ret=-3): failed [ 750.886976][T19726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 751.079097][T19726] veth0_vlan: entered promiscuous mode [ 751.169706][T19726] veth1_vlan: entered promiscuous mode [ 751.205055][T19914] FAULT_INJECTION: forcing a failure. [ 751.205055][T19914] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 751.242996][T19726] veth0_macvtap: entered promiscuous mode [ 751.264542][T19726] veth1_macvtap: entered promiscuous mode [ 751.283379][T19914] CPU: 0 UID: 0 PID: 19914 Comm: syz.5.3519 Tainted: G L syzkaller #0 PREEMPT(full) [ 751.283408][T19914] Tainted: [L]=SOFTLOCKUP [ 751.283415][T19914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 751.283425][T19914] Call Trace: [ 751.283432][T19914] [ 751.283440][T19914] dump_stack_lvl+0xe8/0x150 [ 751.283507][T19914] should_fail_ex+0x412/0x560 [ 751.283553][T19914] _copy_from_user+0x2d/0xb0 [ 751.283587][T19914] video_usercopy+0x36f/0x1450 [ 751.283711][T19914] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 751.283759][T19914] ? __pfx___video_do_ioctl+0x10/0x10 [ 751.283783][T19914] ? __pfx_video_usercopy+0x10/0x10 [ 751.283814][T19914] ? __fget_files+0x2a/0x420 [ 751.283852][T19914] ? __fget_files+0x2a/0x420 [ 751.283869][T19914] ? __fget_files+0x3a0/0x420 [ 751.283890][T19914] v4l2_ioctl+0x18d/0x1e0 [ 751.283912][T19914] ? __pfx_v4l2_ioctl+0x10/0x10 [ 751.283932][T19914] __se_sys_ioctl+0xfc/0x170 [ 751.283957][T19914] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.283989][T19914] do_syscall_64+0x15f/0xf80 [ 751.284012][T19914] ? clear_bhb_loop+0x40/0x90 [ 751.284032][T19914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.284048][T19914] RIP: 0033:0x7f6b3fd9ce59 [ 751.284065][T19914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 751.284079][T19914] RSP: 002b:00007f6b40ce6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 751.284101][T19914] RAX: ffffffffffffffda RBX: 00007f6b40015fa0 RCX: 00007f6b3fd9ce59 [ 751.284114][T19914] RDX: 0000200000000000 RSI: 00000000c0405602 RDI: 0000000000000003 [ 751.284125][T19914] RBP: 00007f6b40ce6090 R08: 0000000000000000 R09: 0000000000000000 [ 751.284135][T19914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 751.284145][T19914] R13: 00007f6b40016038 R14: 00007f6b40015fa0 R15: 00007f6b4013fa48 [ 751.284173][T19914] [ 751.516183][ T5626] Bluetooth: hci0: command tx timeout [ 751.684633][T19726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 751.702364][T19726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 751.734611][T19917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 751.743648][T19917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 751.814995][T17714] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.841670][T17714] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.881968][T17714] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.924739][T17714] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.987838][T19925] netlink: 27 bytes leftover after parsing attributes in process `syz.2.3522'. [ 752.081247][T11762] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 752.282081][T11762] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 752.316176][T11762] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 752.333683][ T7394] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 752.345342][T11762] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.360045][T19932] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3523'. [ 752.395326][T11762] usb 6-1: config 0 descriptor?? [ 752.409761][T17714] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 752.422836][T19934] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3523'. [ 752.432134][ T7394] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 752.456872][T17714] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 752.634029][T11762] usbhid 6-1:0.0: can't add hid device: -71 [ 752.652509][T11762] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 752.744352][T11762] usb 6-1: USB disconnect, device number 43 [ 753.170612][T11762] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 753.309894][T11744] usb 2-1: new low-speed USB device number 15 using dummy_hcd [ 753.339897][T11762] usb 6-1: Using ep0 maxpacket: 16 [ 753.352478][T11762] usb 6-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 753.384640][T11762] usb 6-1: config 0 interface 0 has no altsetting 0 [ 753.409587][T11762] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 753.435616][T11762] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.460105][T11744] usb 2-1: device descriptor read/64, error -71 [ 753.469733][T11762] usb 6-1: config 0 descriptor?? [ 753.720016][T11744] usb 2-1: new low-speed USB device number 16 using dummy_hcd [ 753.873955][T11744] usb 2-1: device descriptor read/64, error -71 [ 753.904849][T11762] mcp2221 0003:04D8:00DD.0020: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 754.003644][T11744] usb usb2-port1: attempt power cycle [ 754.179922][ T5744] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 754.350072][ T5744] usb 3-1: Using ep0 maxpacket: 32 [ 754.358416][ T5744] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 754.363080][T19978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 754.370507][T11744] usb 2-1: new low-speed USB device number 17 using dummy_hcd [ 754.381158][T19978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 754.386051][ T5744] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 754.406586][ T5744] usb 3-1: New USB device found, idVendor=25dd, idProduct=f3d2, bcdDevice=d2.37 [ 754.416431][ T5744] usb 3-1: New USB device strings: Mfr=84, Product=45, SerialNumber=0 [ 754.424818][ T5744] usb 3-1: Product: syz [ 754.429188][ T5744] usb 3-1: Manufacturer: syz [ 754.434050][T11744] usb 2-1: device descriptor read/8, error -71 [ 754.443573][ T5744] usb 3-1: config 0 descriptor?? [ 754.459116][T19978] binfmt_misc: register: failed to install interpreter file ./file0 [ 754.690072][T11744] usb 2-1: new low-speed USB device number 18 using dummy_hcd [ 754.722042][T11744] usb 2-1: device descriptor read/8, error -71 [ 754.832623][T11744] usb usb2-port1: unable to enumerate USB device [ 754.864288][ T5744] hid-generic 0003:25DD:F3D2.0021: hiddev0,hidraw0: USB HID v0.00 Device [syz syz] on usb-dummy_hcd.2-1/input0 [ 755.120032][T19984] FAULT_INJECTION: forcing a failure. [ 755.120032][T19984] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 755.156252][T19984] CPU: 1 UID: 0 PID: 19984 Comm: syz.0.3531 Tainted: G L syzkaller #0 PREEMPT(full) [ 755.156280][T19984] Tainted: [L]=SOFTLOCKUP [ 755.156286][T19984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 755.156296][T19984] Call Trace: [ 755.156306][T19984] [ 755.156315][T19984] dump_stack_lvl+0xe8/0x150 [ 755.156342][T19984] should_fail_ex+0x412/0x560 [ 755.156369][T19984] _copy_to_user+0x31/0xb0 [ 755.156389][T19984] video_usercopy+0xe0a/0x1450 [ 755.156408][T19984] ? __pfx___video_do_ioctl+0x10/0x10 [ 755.156422][T19984] ? __pfx_video_usercopy+0x10/0x10 [ 755.156448][T19984] ? __fget_files+0x2a/0x420 [ 755.156470][T19984] ? __fget_files+0x2a/0x420 [ 755.156487][T19984] ? __fget_files+0x3a0/0x420 [ 755.156509][T19984] v4l2_ioctl+0x18d/0x1e0 [ 755.156530][T19984] ? __pfx_v4l2_ioctl+0x10/0x10 [ 755.156544][T19984] __se_sys_ioctl+0xfc/0x170 [ 755.156559][T19984] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.156569][T19984] do_syscall_64+0x15f/0xf80 [ 755.156585][T19984] ? trace_irq_disable+0x3b/0x140 [ 755.156629][T19984] ? clear_bhb_loop+0x40/0x90 [ 755.156649][T19984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.156666][T19984] RIP: 0033:0x7fad5419ce59 [ 755.156683][T19984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 755.156692][T19984] RSP: 002b:00007fad523f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 755.156704][T19984] RAX: ffffffffffffffda RBX: 00007fad54415fa0 RCX: 00007fad5419ce59 [ 755.156711][T19984] RDX: 0000200000000000 RSI: 00000000c0405602 RDI: 0000000000000003 [ 755.156717][T19984] RBP: 00007fad523f6090 R08: 0000000000000000 R09: 0000000000000000 [ 755.156722][T19984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 755.156728][T19984] R13: 00007fad54416038 R14: 00007fad54415fa0 R15: 00007fad5453fa48 [ 755.156744][T19984] [ 755.600103][T11762] usb 6-1: USB disconnect, device number 44 [ 755.717655][T19991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 755.758126][T19991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 756.176440][T20004] loop8: detected capacity change from 0 to 7 [ 756.195046][T20004] Dev loop8: unable to read RDB block 7 [ 756.234332][T20004] loop8: unable to read partition table [ 756.255425][T20004] loop8: partition table beyond EOD, truncated [ 756.263042][ T5710] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 756.267843][T20004] loop_reread_partitions: partition scan of loop8 (被x ) failed (rc=-5) [ 756.289395][T20006] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3537'. [ 756.329987][ T5689] usb 3-1: reset high-speed USB device number 87 using dummy_hcd [ 756.407517][T20009] xt_hashlimit: size too large, truncated to 1048576 [ 756.450312][ T5710] usb 6-1: Using ep0 maxpacket: 16 [ 756.487387][ T5710] usb 6-1: unable to get BOS descriptor or descriptor too short [ 756.513772][ T5710] usb 6-1: config 7 has an invalid interface number: 106 but max is 3 [ 756.548209][ T5710] usb 6-1: config 7 has an invalid interface number: 182 but max is 3 [ 756.574804][ T5710] usb 6-1: config 7 has an invalid interface number: 148 but max is 3 [ 756.593815][ T5710] usb 6-1: config 7 has an invalid interface number: 227 but max is 3 [ 756.609991][ T5710] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 756.637871][ T5710] usb 6-1: config 7 has no interface number 0 [ 756.658831][ T5710] usb 6-1: config 7 has no interface number 1 [ 756.685250][ T5710] usb 6-1: config 7 has no interface number 2 [ 756.714881][ T5710] usb 6-1: config 7 has no interface number 3 [ 756.748056][ T5710] usb 6-1: config 7 interface 106 altsetting 89 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 756.776617][ T5710] usb 6-1: config 7 interface 106 altsetting 89 has a duplicate endpoint with address 0x2, skipping [ 756.803295][ T5710] usb 6-1: config 7 interface 106 altsetting 89 has a duplicate endpoint with address 0x2, skipping [ 756.837938][ T5710] usb 6-1: config 7 interface 106 altsetting 89 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 756.866057][ T5710] usb 6-1: config 7 interface 106 altsetting 89 has 6 endpoint descriptors, different from the interface descriptor's value: 13 [ 756.903792][ T5710] usb 6-1: config 7 interface 182 altsetting 248 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 756.936660][ T5710] usb 6-1: config 7 interface 182 altsetting 248 has a duplicate endpoint with address 0xD, skipping [ 756.951528][ T5710] usb 6-1: config 7 interface 182 altsetting 248 has a duplicate endpoint with address 0xD, skipping [ 756.963885][ T5710] usb 6-1: config 7 interface 182 altsetting 248 has an invalid descriptor for endpoint zero, skipping [ 756.982607][T11755] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 757.024061][ T5710] usb 6-1: config 7 interface 148 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 757.055056][ T5710] usb 6-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 757.067850][ T5710] usb 6-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 757.079861][ T5710] usb 6-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 757.098280][ T5710] usb 6-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 757.110065][ T5710] usb 6-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 757.121228][ T5710] usb 6-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x2, skipping [ 757.132365][ T5710] usb 6-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 757.144306][ T5710] usb 6-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xE, skipping [ 757.160052][T11755] usb 2-1: Using ep0 maxpacket: 8 [ 757.181284][T11755] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 757.194933][ T5710] usb 6-1: config 7 interface 148 altsetting 5 has an endpoint descriptor with address 0x52, changing to 0x2 [ 757.208309][T11755] usb 2-1: config 0 has an invalid descriptor of length 100, skipping remainder of the config [ 757.231015][T11755] usb 2-1: config 0 has no interface number 0 [ 757.237729][ T5710] usb 6-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x2, skipping [ 757.255087][T11755] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 757.267682][ T5710] usb 6-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x6, skipping [ 757.285762][T11755] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.299559][T11755] usb 2-1: Product: syz [ 757.305292][ T5710] usb 6-1: config 7 interface 148 altsetting 5 has 13 endpoint descriptors, different from the interface descriptor's value: 12 [ 757.319558][T20026] FAULT_INJECTION: forcing a failure. [ 757.319558][T20026] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 757.333013][T11755] usb 2-1: Manufacturer: syz [ 757.338109][T11755] usb 2-1: SerialNumber: syz [ 757.348423][T11755] usb 2-1: config 0 descriptor?? [ 757.355186][T20026] CPU: 1 UID: 0 PID: 20026 Comm: syz.0.3543 Tainted: G L syzkaller #0 PREEMPT(full) [ 757.355214][T20026] Tainted: [L]=SOFTLOCKUP [ 757.355219][T20026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 757.355229][T20026] Call Trace: [ 757.355235][T20026] [ 757.355243][T20026] dump_stack_lvl+0xe8/0x150 [ 757.355266][T20026] should_fail_ex+0x412/0x560 [ 757.355290][T20026] _copy_to_user+0x31/0xb0 [ 757.355312][T20026] simple_read_from_buffer+0xe1/0x170 [ 757.355334][T20026] proc_fail_nth_read+0x1bb/0x230 [ 757.355375][T20026] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 757.355396][T20026] ? rw_verify_area+0x2a6/0x4d0 [ 757.355418][T20026] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 757.355438][T20026] vfs_read+0x20c/0xa70 [ 757.355463][T20026] ? __pfx___mutex_lock+0x10/0x10 [ 757.355486][T20026] ? __pfx_vfs_read+0x10/0x10 [ 757.355507][T20026] ? __fget_files+0x2a/0x420 [ 757.355528][T20026] ? __fget_files+0x3a0/0x420 [ 757.355544][T20026] ? __fget_files+0x2a/0x420 [ 757.355567][T20026] ksys_read+0x150/0x270 [ 757.355591][T20026] ? __pfx_ksys_read+0x10/0x10 [ 757.355619][T20026] ? __pfx_v4l2_ioctl+0x10/0x10 [ 757.355645][T20026] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.355661][T20026] do_syscall_64+0x15f/0xf80 [ 757.355681][T20026] ? trace_irq_disable+0x3b/0x140 [ 757.355704][T20026] ? clear_bhb_loop+0x40/0x90 [ 757.355724][T20026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.355737][T20026] RIP: 0033:0x7fad5415d68e [ 757.355752][T20026] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 757.355764][T20026] RSP: 002b:00007fad523f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 757.355780][T20026] RAX: ffffffffffffffda RBX: 00007fad523f66c0 RCX: 00007fad5415d68e [ 757.355791][T20026] RDX: 000000000000000f RSI: 00007fad523f60a0 RDI: 0000000000000004 [ 757.355800][T20026] RBP: 00007fad523f6090 R08: 0000000000000000 R09: 0000000000000000 [ 757.355808][T20026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 757.355817][T20026] R13: 00007fad54416038 R14: 00007fad54415fa0 R15: 00007fad5453fa48 [ 757.355841][T20026] [ 757.356875][ T5710] usb 6-1: config 7 interface 227 altsetting 187 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 757.708456][T20028] loop5: detected capacity change from 0 to 7 [ 757.724540][T20028] Dev loop5: unable to read RDB block 7 [ 757.735041][ T5710] usb 6-1: config 7 interface 106 has no altsetting 0 [ 757.736051][T20028] loop5: unable to read partition table [ 757.742532][ T5710] usb 6-1: config 7 interface 182 has no altsetting 0 [ 757.771635][ T5710] usb 6-1: config 7 interface 148 has no altsetting 0 [ 757.781624][T20028] loop5: partition table beyond EOD, truncated [ 757.788742][T20028] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 757.793506][ T5710] usb 6-1: config 7 interface 227 has no altsetting 0 [ 757.808715][T11755] uvcvideo 2-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 757.824492][T11746] usb 3-1: USB disconnect, device number 87 [ 757.834132][T11755] uvcvideo 2-1:0.31: No valid video chain found. [ 757.872354][T11755] usb 2-1: USB disconnect, device number 19 [ 757.893718][ T5710] usb 6-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=c7.5a [ 757.909407][ T5710] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.964860][ T5710] usb 6-1: Product: syz [ 757.988989][ T5710] usb 6-1: Manufacturer: syz [ 758.011383][ T5710] usb 6-1: SerialNumber: syz [ 758.372260][T20042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 758.404882][T20044] loop8: detected capacity change from 0 to 7 [ 758.412746][T20044] Dev loop8: unable to read RDB block 7 [ 758.427691][T20042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 758.448699][T20044] loop8: unable to read partition table [ 758.468196][T20044] loop8: partition table beyond EOD, truncated [ 758.489684][T20044] loop_reread_partitions: partition scan of loop8 (被x ) failed (rc=-5) [ 758.578285][ T5710] usb 6-1: USB disconnect, device number 45 [ 758.597936][T20046] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 759.099905][T11746] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 759.253272][T20056] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 759.259902][T11746] usb 2-1: Using ep0 maxpacket: 32 [ 759.269747][T11746] usb 2-1: config 0 has an invalid interface number: 68 but max is 0 [ 759.279202][T11746] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 759.292168][T11746] usb 2-1: config 0 has no interface number 0 [ 759.310906][T11746] usb 2-1: New USB device found, idVendor=045e, idProduct=0703, bcdDevice=6e.c0 [ 759.320638][T11746] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.328920][T11746] usb 2-1: Product: syz [ 759.334303][T11746] usb 2-1: Manufacturer: syz [ 759.341288][T11746] usb 2-1: SerialNumber: syz [ 759.355121][T11746] usb 2-1: config 0 descriptor?? [ 759.370292][T20056] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3555'. [ 759.505188][T20062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 759.519061][T20062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 759.560171][T11760] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 759.567877][T11746] uvcvideo 2-1:0.68: Found Unit with invalid ID 0 [ 759.586062][T11746] uvcvideo 2-1:0.68: Found UVC 0.40 device syz (045e:0703) [ 759.598678][T11746] uvcvideo 2-1:0.68: No valid video chain found. [ 759.616480][T11746] usb 2-1: USB disconnect, device number 20 [ 759.742917][T11760] usb 3-1: unable to get BOS descriptor or descriptor too short [ 759.761795][T11760] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 759.772046][T11760] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 759.787436][T11760] usb 3-1: string descriptor 0 read error: -22 [ 759.794274][T11760] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 759.803798][T11760] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.821656][T11760] usb 3-1: selecting invalid altsetting 1 [ 759.831194][T11760] usb 3-1: unit 3 not found! [ 760.027415][T11760] usb 3-1: cannot request logical cluster ID: 0 (err: -5) [ 760.046551][T11760] usb 3-1: invalid MIXER UNIT descriptor 6 [ 760.149157][T20064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 760.173433][T20064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 760.189391][T11760] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -5 [ 760.231431][T20058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 760.267557][T20058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 760.295090][T11760] usb 3-1: USB disconnect, device number 88 [ 760.344586][T20071] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3559'. [ 760.439564][T20076] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3560'. [ 760.484031][T20073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 760.626474][T20086] netlink: 'syz.5.3562': attribute type 21 has an invalid length. [ 760.635781][T20086] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3562'. [ 761.030576][T11746] usb 6-1: new full-speed USB device number 46 using dummy_hcd [ 761.081811][ T5744] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 761.180213][T11746] usb 6-1: device descriptor read/64, error -71 [ 761.272161][ T5744] usb 2-1: config 2 has an invalid interface number: 207 but max is 1 [ 761.296144][ T5744] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 761.328838][ T5744] usb 2-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 761.347920][ T5744] usb 2-1: config 2 has no interface number 0 [ 761.369929][ T5744] usb 2-1: config 2 interface 207 altsetting 73 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 761.388218][ T5744] usb 2-1: config 2 interface 207 has no altsetting 0 [ 761.397685][T20107] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3569'. [ 761.400611][ T5744] usb 2-1: New USB device found, idVendor=1410, idProduct=9010, bcdDevice=95.7e [ 761.444350][ T5744] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.457973][T11746] usb 6-1: new full-speed USB device number 47 using dummy_hcd [ 761.469933][ T5744] usb 2-1: Product: syz [ 761.474851][T20110] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 761.483954][ T5744] usb 2-1: Manufacturer: syz [ 761.504297][ T5744] usb 2-1: SerialNumber: syz [ 761.610348][T20114] fuse: Unknown parameter 'rootmOde' [ 761.620211][T11746] usb 6-1: device descriptor read/64, error -71 [ 761.730858][T11746] usb usb6-port1: attempt power cycle [ 761.773073][ T5744] qmi_wwan 2-1:2.207: skipping garbage [ 761.784782][ T5744] qmi_wwan 2-1:2.207: skipping garbage [ 761.798457][ T5744] qmi_wwan 2-1:2.207: bogus CDC Union: master=0, slave=0 [ 761.808032][ T5744] qmi_wwan 2-1:2.207: probe with driver qmi_wwan failed with error -22 [ 761.825341][T20121] loop7: detected capacity change from 0 to 16384 [ 761.837729][ T5744] usb 2-1: USB disconnect, device number 21 [ 762.070175][T11746] usb 6-1: new full-speed USB device number 48 using dummy_hcd [ 762.100471][T11746] usb 6-1: device descriptor read/8, error -71 [ 762.351254][T11746] usb 6-1: new full-speed USB device number 49 using dummy_hcd [ 762.381015][T11746] usb 6-1: device descriptor read/8, error -71 [ 762.465218][T20127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 762.476866][T20127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 762.510200][T11746] usb usb6-port1: unable to enumerate USB device [ 762.968091][T20133] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 763.137989][T20135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 763.160436][T20135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 763.512870][T20141] : entered promiscuous mode [ 763.558255][T20143] fuse: Unknown parameter 'rootmOde' [ 764.016828][T20158] syzkaller1: entered promiscuous mode [ 764.025153][T20158] syzkaller1: entered allmulticast mode [ 764.077327][T20160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 764.089674][T20160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 764.179731][T20162] bridge4: entered promiscuous mode [ 764.186322][T20162] bridge4: entered allmulticast mode [ 764.879455][T20179] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3593'. [ 765.271294][T20192] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3596'. [ 765.619918][ T5744] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 765.779927][ T5744] usb 3-1: Using ep0 maxpacket: 8 [ 765.795115][ T5744] usb 3-1: unable to get BOS descriptor or descriptor too short [ 765.804518][ T5744] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 765.855115][ T5744] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 765.864518][ T5744] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 765.895606][ T5744] usb 3-1: New USB device found, idVendor=0582, idProduct=0121, bcdDevice= 0.40 [ 765.904970][ T5744] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.914780][ T5744] usb 3-1: Product: syz [ 765.919108][ T5744] usb 3-1: Manufacturer: syz [ 765.926954][ T5744] usb 3-1: SerialNumber: syz [ 765.970757][T20199] netlink: 'syz.5.3598': attribute type 13 has an invalid length. [ 765.978935][T20199] netlink: 'syz.5.3598': attribute type 5 has an invalid length. [ 766.148760][ T5744] usb 3-1: unit 1 not found! [ 766.202723][ T5744] usb 3-1: USB disconnect, device number 89 [ 766.246058][T16977] udevd[16977]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 766.736459][T20212] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3601'. [ 766.745641][T20212] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3601'. [ 767.056001][T20227] ip6gretap0: entered promiscuous mode [ 767.063751][T20227] macsec1: entered promiscuous mode [ 767.095736][T20227] macsec1: entered allmulticast mode [ 767.106159][T20227] ip6gretap0: entered allmulticast mode [ 767.149598][T20229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 767.176211][T20229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 767.205529][T20231] kAFS: unable to lookup cell '' [ 768.005386][T20246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 768.022879][T20246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 768.219897][T11746] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 768.379891][T11746] usb 2-1: Using ep0 maxpacket: 8 [ 768.397513][T11746] usb 2-1: config 0 interface 0 has no altsetting 0 [ 768.412252][T11746] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 768.439199][T11746] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.467962][T11746] usb 2-1: Product: syz [ 768.482258][T11746] usb 2-1: Manufacturer: syz [ 768.487226][T11746] usb 2-1: SerialNumber: syz [ 768.503489][T11746] usb 2-1: config 0 descriptor?? [ 768.513641][T11746] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 768.626459][T20258] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3614'. [ 768.735055][T11746] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 768.752151][T11746] snd_usb_toneport 2-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 768.935744][T20245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 768.952219][T20245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 768.963887][T11760] usb 2-1: USB disconnect, device number 22 [ 769.889995][T11744] usb 3-1: new full-speed USB device number 90 using dummy_hcd [ 769.929992][T11760] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 770.030014][T11744] usb 3-1: device descriptor read/64, error -71 [ 770.080314][T11760] usb 6-1: device descriptor read/64, error -71 [ 770.279924][T11744] usb 3-1: new full-speed USB device number 91 using dummy_hcd [ 770.319907][T11760] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 770.411429][T11744] usb 3-1: device descriptor read/64, error -71 [ 770.459937][T11760] usb 6-1: device descriptor read/64, error -71 [ 770.521311][T11744] usb usb3-port1: attempt power cycle [ 770.570176][T11760] usb usb6-port1: attempt power cycle [ 770.859933][T11744] usb 3-1: new full-speed USB device number 92 using dummy_hcd [ 770.900650][T11744] usb 3-1: device descriptor read/8, error -71 [ 770.930209][T11760] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 770.963862][T11760] usb 6-1: device descriptor read/8, error -71 [ 770.965250][T20295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 770.979178][T20295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 771.152916][T11744] usb 3-1: new full-speed USB device number 93 using dummy_hcd [ 771.191487][T11744] usb 3-1: device descriptor read/8, error -71 [ 771.228061][T20311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 771.236735][T11760] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 771.245075][T20311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 771.276296][T11760] usb 6-1: device descriptor read/8, error -71 [ 771.300411][T11744] usb usb3-port1: unable to enumerate USB device [ 771.390489][T11760] usb usb6-port1: unable to enumerate USB device [ 771.430596][T20309] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 772.504766][T20328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 772.519295][T20328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 772.801206][T20333] IPv6: addrconf: prefix option has invalid lifetime [ 773.091121][ T5744] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 773.140988][T11744] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 773.286241][ T5744] usb 3-1: unable to get BOS descriptor or descriptor too short [ 773.311867][T11744] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 773.328862][ T5744] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 773.361760][T11744] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 773.385613][ T5744] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 773.407602][T11744] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 773.420331][ T5744] usb 3-1: config 1 has no interface number 0 [ 773.439945][ T5744] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 773.452443][T11744] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.517961][ T5744] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 773.600336][T11744] usb 6-1: config 0 descriptor?? [ 773.620815][ T5744] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 773.649171][ T5744] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.723895][ T5744] usb 3-1: Product: syz [ 773.747568][T20342] fuse: Bad value for 'fd' [ 773.753996][ T5744] usb 3-1: Manufacturer: syz [ 773.766500][ T5744] usb 3-1: SerialNumber: syz [ 774.066159][T11744] cm6533_jd 0003:0D8C:0022.0022: unknown main item tag 0x0 [ 774.091122][ T5744] usb 3-1: USB disconnect, device number 94 [ 774.101164][T11744] cm6533_jd 0003:0D8C:0022.0022: item fetching failed at offset 4/5 [ 774.177163][T20344] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 774.359894][T11744] cm6533_jd 0003:0D8C:0022.0022: parse failed [ 774.366630][T11744] cm6533_jd 0003:0D8C:0022.0022: probe with driver cm6533_jd failed with error -22 [ 774.496676][T11744] usb 6-1: USB disconnect, device number 54 [ 775.043831][T20352] program syz.6.3642 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 775.147483][T20355] loop8: detected capacity change from 0 to 7 [ 775.195391][T20355] Dev loop8: unable to read RDB block 7 [ 775.279685][T20355] loop8: unable to read partition table [ 775.318051][T20355] loop8: partition table beyond EOD, truncated [ 775.325016][T20355] loop_reread_partitions: partition scan of loop8 (被x ) failed (rc=-5) [ 776.970046][ T30] kauditd_printk_skb: 310 callbacks suppressed [ 776.970065][ T30] audit: type=1326 audit(1778956234.487:2181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20365 comm="syz.2.3647" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc51f9ce59 code=0x7ffc0000 [ 779.506836][ T30] audit: type=1326 audit(1778956234.487:2182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20365 comm="syz.2.3647" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc51f9ce59 code=0x7ffc0000 [ 780.439499][ T30] audit: type=1326 audit(1778956236.537:2183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20365 comm="syz.2.3647" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbc51f9ce59 code=0x7ffc0000 [ 780.795546][ T30] audit: type=1326 audit(1778956236.537:2184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20365 comm="syz.2.3647" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc51f9ce59 code=0x7ffc0000 [ 781.162705][ T30] audit: type=1326 audit(1778956236.547:2185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20365 comm="syz.2.3647" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fbc51f9ce59 code=0x7ffc0000 [ 781.435673][ T30] audit: type=1326 audit(1778956236.557:2186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20365 comm="syz.2.3647" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc51f9ce59 code=0x7ffc0000 [ 782.279941][ T30] audit: type=1326 audit(1778956236.557:2187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20365 comm="syz.2.3647" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fbc51f9ce59 code=0x7ffc0000 [ 782.307076][ T30] audit: type=1326 audit(1778956237.117:2188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20365 comm="syz.2.3647" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc51f9ce59 code=0x7ffc0000 [ 782.422292][T20379] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 782.715343][ T30] audit: type=1326 audit(1778956237.117:2189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20365 comm="syz.2.3647" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc51f9ce59 code=0x7ffc0000 [ 783.150003][T11762] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 783.316761][T11762] usb 6-1: config 0 interface 0 has no altsetting 0 [ 783.347013][T11762] usb 6-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 783.403752][T11762] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.592540][T11762] usb 6-1: config 0 descriptor?? [ 783.895872][T20389] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:003e with DS=0x3 [ 784.051828][T20387] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:003e with DS=0x3 [ 784.086885][T20391] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3654'. [ 784.528911][T11762] video4linux radio48: keene_cmd_set failed (-71) [ 784.609493][T11762] radio-keene 6-1:0.0: V4L2 device registered as radio48 [ 784.813258][T11762] usb 6-1: USB disconnect, device number 55 [ 785.461037][T20397] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 786.559961][T11762] usb 6-1: new full-speed USB device number 56 using dummy_hcd [ 786.936622][T11762] usb 6-1: config 0 has no interfaces? [ 786.967761][T11762] usb 6-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 787.025860][T11762] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.096950][T11762] usb 6-1: config 0 descriptor?? [ 787.106097][T20416] fuse: Bad value for 'fd' [ 787.327643][T20410] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 787.336741][T20410] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 787.362802][T20410] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 787.369156][T20410] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 787.393889][T20410] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 787.422027][T20410] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 787.428461][T20410] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 787.444576][T20410] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 787.458211][T20410] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 787.465378][T20410] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 787.486539][T20410] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 787.525533][T20399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 787.567823][T20399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 787.607825][ T5732] usb 6-1: USB disconnect, device number 56 [ 787.766090][T11762] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 787.830070][T11744] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 787.953452][T11762] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 787.970023][T11762] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.988070][T11762] usb 2-1: config 0 descriptor?? [ 787.996496][T11744] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 788.030886][T11744] usb 3-1: config 0 has no interfaces? [ 788.046661][T11744] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 788.066910][T11744] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.359932][ T5626] Bluetooth: hci5: command 0x0406 tx timeout [ 789.440865][ T5626] Bluetooth: hci4: command 0x0c1a tx timeout [ 789.447041][ T5626] Bluetooth: hci1: command 0x0c1a tx timeout [ 789.510185][ T5632] Bluetooth: hci0: command 0x0c1a tx timeout [ 790.596197][T11744] usb 3-1: config 0 descriptor?? [ 791.429906][ T5632] Bluetooth: hci5: command 0x0406 tx timeout [ 791.510219][ T5632] Bluetooth: hci1: command 0x0c1a tx timeout [ 791.516690][ T5626] Bluetooth: hci4: command 0x0c1a tx timeout [ 791.601816][ T5632] Bluetooth: hci0: command 0x0c1a tx timeout [ 792.323468][T11744] usb 3-1: can't set config #0, error -71 [ 793.726152][ T5632] Bluetooth: hci1: command 0x0c1a tx timeout [ 793.742816][ T5632] Bluetooth: hci4: command 0x0c1a tx timeout [ 793.748866][ T5632] Bluetooth: hci0: command 0x0c1a tx timeout [ 794.191972][T11744] usb 3-1: USB disconnect, device number 95 [ 794.319092][T11762] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 794.394133][T11762] [drm:udl_init] *ERROR* Selecting channel failed [ 796.930684][T20468] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3673'. [ 797.065350][T11762] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 798.968523][T11762] [drm] Initialized udl on minor 2 [ 801.761933][T11762] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 802.690824][T20519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 802.770683][T20519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 803.225806][T11762] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 803.644792][ T30] audit: type=1326 audit(1778956261.167:2190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20523 comm="syz.6.3678" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f176579ce59 code=0x0 [ 804.054054][T11762] usb 2-1: USB disconnect, device number 23 [ 804.125583][T11744] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 804.383896][T11744] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 805.645069][T20527] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3678'. [ 807.545607][ T5689] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 808.218291][ T5689] usb 3-1: unable to get BOS descriptor or descriptor too short [ 808.298827][ T5689] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 808.446833][ T5689] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 808.910745][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.946033][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.962525][ T5689] usb 3-1: config 1 has no interface number 0 [ 809.193200][ T5689] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 809.246889][ T5689] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 809.402491][ T5689] usb 3-1: string descriptor 0 read error: -71 [ 809.417508][ T5689] usb 3-1: New USB device found, idVendor=0763, idProduct=201a, bcdDevice= 0.40 [ 809.678891][ T5689] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.697132][ T7394] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.804913][ T5689] usb 3-1: can't set config #1, error -71 [ 810.072106][ T5689] usb 3-1: USB disconnect, device number 96 [ 810.187900][T20533] syzkaller0: entered promiscuous mode [ 810.229516][T20533] syzkaller0: entered allmulticast mode [ 810.381003][ T5632] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 810.403793][ T5632] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 810.415893][ T5632] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 810.424017][ T5632] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 810.432557][ T5632] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 810.534863][T20544] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 810.597541][T20547] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 810.618925][T20549] Cannot find set identified by id 1 to match [ 810.849406][T11744] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 810.935998][ T7394] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.022295][ T5689] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 811.032454][T11744] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 811.032486][T11744] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 811.032521][T11744] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 811.032541][T11744] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.035574][T11744] usb 2-1: config 0 descriptor?? [ 812.282480][T11744] hid-led 0003:27B8:01ED.0023: probe with driver hid-led failed with error -71 [ 812.381855][ T5689] usb 3-1: config 247 has an invalid interface number: 101 but max is 0 [ 812.530831][T11744] usb 2-1: USB disconnect, device number 24 [ 812.551021][ T5632] Bluetooth: hci2: command tx timeout [ 812.554815][ T5689] usb 3-1: config 247 has no interface number 0 [ 812.672305][ T5689] usb 3-1: config 247 interface 101 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 812.717646][ T5689] usb 3-1: config 247 interface 101 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 812.756494][ T5689] usb 3-1: config 247 interface 101 has no altsetting 0 [ 813.270029][ T7394] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.382469][ T5689] usb 3-1: New USB device found, idVendor=9f05, idProduct=4e86, bcdDevice=e1.5f [ 813.410412][ T5689] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.532270][ T5689] usb 3-1: Product: 薗㭤鳦袆＼酖羣欷᪚⥮ꩥ妺ы부⚱Ћ鄦圃袌Ờ퇸쥜膽쇗݁䎏 [ 813.578214][ T5689] usb 3-1: Manufacturer: И [ 813.846723][ T5689] usb 3-1: can't set config #247, error -71 [ 813.938335][ T5689] usb 3-1: USB disconnect, device number 97 [ 814.152282][T20574] loop3: detected capacity change from 0 to 7 [ 814.245904][T20574] Dev loop3: unable to read RDB block 7 [ 814.305807][T20574] loop3: unable to read partition table [ 814.451390][T20574] loop3: partition table beyond EOD, truncated [ 814.459326][T20574] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 814.639978][ T5632] Bluetooth: hci2: command tx timeout [ 815.106267][T20578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3693'. [ 815.218241][T20579] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3693'. [ 816.866706][ T5632] Bluetooth: hci2: command tx timeout [ 819.026315][ T5632] Bluetooth: hci2: command tx timeout [ 819.588530][ C0] sched: DL replenish lagged too much [ 870.526302][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.542382][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.593851][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.613813][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 935.274168][ T5626] Bluetooth: hci2: command 0x0406 tx timeout [ 953.489795][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 953.496772][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P20577/1:b..l [ 953.505413][ C0] rcu: (detected by 0, t=10503 jiffies, g=142769, q=427440 ncpus=2) [ 953.513504][ C0] task:syz.1.3691 state:R running task stack:23464 pid:20577 tgid:20567 ppid:19726 task_flags:0x400840 flags:0x00080000 [ 953.528733][ C0] Call Trace: [ 953.532035][ C0] [ 953.534979][ C0] __schedule+0x1821/0x5740 [ 953.539727][ C0] ? __pfx___schedule+0x10/0x10 [ 953.544650][ C0] preempt_schedule_irq+0x4d/0xa0 [ 953.549740][ C0] irqentry_exit+0x14f/0x760 [ 953.554361][ C0] ? trace_irq_disable+0x3b/0x140 [ 953.559661][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 953.565714][ C0] RIP: 0010:debug_lockdep_rcu_enabled+0x29/0x40 [ 953.571995][ C0] Code: 90 f3 0f 1e fa 31 c0 83 3d 63 bd 87 04 00 74 1d 83 3d 1a ef 87 04 00 74 14 65 48 8b 0d 58 55 90 07 31 c0 83 b9 8c 0b 00 00 00 <0f> 94 c0 c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc [ 953.591619][ C0] RSP: 0018:ffffc9000380e370 EFLAGS: 00000246 [ 953.597766][ C0] RAX: 0000000000000000 RBX: ffffffff8226ac56 RCX: ffff88803109bd80 [ 953.606101][ C0] RDX: 00000000cdac3f13 RSI: ffffffff8e21eb50 RDI: ffffffff8c28b0e0 [ 953.614101][ C0] RBP: dffffc0000000000 R08: ffffffff8176f256 R09: ffffffff8e95cde0 [ 953.622089][ C0] R10: ffffc9000380e498 R11: ffffffff81b0efc0 R12: ffffc9000380e480 [ 953.630073][ C0] R13: 1ffff92000701c89 R14: ffffc9000380e448 R15: ffffffff8176f256 [ 953.638060][ C0] ? unwind_next_frame+0xa6/0x2550 [ 953.643293][ C0] ? __x64_sys_madvise+0xa6/0xc0 [ 953.648412][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 953.654671][ C0] ? unwind_next_frame+0xa6/0x2550 [ 953.659820][ C0] unwind_next_frame+0xcc/0x2550 [ 953.664782][ C0] ? unwind_next_frame+0xa6/0x2550 [ 953.669909][ C0] ? do_madvise+0x1fa/0x2e0 [ 953.674434][ C0] ? __x64_sys_madvise+0xa6/0xc0 [ 953.679397][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 953.685571][ C0] arch_stack_walk+0x11b/0x150 [ 953.690437][ C0] ? __x64_sys_madvise+0xa6/0xc0 [ 953.695406][ C0] stack_trace_save+0xa9/0x100 [ 953.700187][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 953.705671][ C0] ? stack_depot_save_flags+0x33/0x810 [ 953.711269][ C0] save_stack+0x122/0x230 [ 953.715691][ C0] ? __pfx_save_stack+0x10/0x10 [ 953.720658][ C0] ? free_unref_folios+0xcec/0x1480 [ 953.725882][ C0] ? shrink_folio_list+0x2a26/0x52a0 [ 953.731259][ C0] ? reclaim_folio_list+0x100/0x430 [ 953.736476][ C0] ? reclaim_pages+0x45b/0x530 [ 953.741255][ C0] ? madvise_cold_or_pageout_pte_range+0x1ef5/0x2220 [ 953.747951][ C0] ? walk_pgd_range+0xfdc/0x1d90 [ 953.752905][ C0] ? __walk_page_range+0x14c/0x710 [ 953.758025][ C0] ? walk_page_range_vma_unsafe+0x309/0x410 [ 953.763927][ C0] ? madvise_vma_behavior+0x28b9/0x42c0 [ 953.769492][ C0] ? madvise_walk_vmas+0x573/0xae0 [ 953.774624][ C0] ? madvise_do_behavior+0x386/0x540 [ 953.779930][ C0] ? do_madvise+0x1fa/0x2e0 [ 953.784446][ C0] ? __x64_sys_madvise+0xa6/0xc0 [ 953.789403][ C0] ? page_ext_put+0x97/0xc0 [ 953.793926][ C0] __reset_page_owner+0x71/0x1f0 [ 953.798886][ C0] free_unref_folios+0xcec/0x1480 [ 953.803938][ C0] ? folio_unqueue_deferred_split+0x93/0x230 [ 953.809942][ C0] shrink_folio_list+0x2a26/0x52a0 [ 953.815094][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 953.820109][ C0] ? __pfx_shrink_folio_list+0x10/0x10 [ 953.825589][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 953.830551][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 953.835656][ C0] reclaim_folio_list+0x100/0x430 [ 953.840718][ C0] ? __pfx_reclaim_folio_list+0x10/0x10 [ 953.846274][ C0] ? lru_gen_update_size+0x810/0xd10 [ 953.851584][ C0] ? __mod_zone_page_state+0xd7/0x140 [ 953.856983][ C0] ? lru_gen_del_folio+0x36e/0x560 [ 953.862112][ C0] reclaim_pages+0x45b/0x530 [ 953.866728][ C0] ? __pfx_reclaim_pages+0x10/0x10 [ 953.871850][ C0] ? madvise_cold_or_pageout_pte_range+0x1ecc/0x2220 [ 953.878544][ C0] madvise_cold_or_pageout_pte_range+0x1ef5/0x2220 [ 953.885081][ C0] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 953.891952][ C0] ? css_rstat_updated+0x23a/0x530 [ 953.897090][ C0] ? __pfx_css_rstat_updated+0x10/0x10 [ 953.902571][ C0] walk_pgd_range+0xfdc/0x1d90 [ 953.907358][ C0] ? mod_memcg_lruvec_state+0xd5/0x270 [ 953.912831][ C0] ? lock_acquire+0x106/0x350 [ 953.917565][ C0] ? __pfx_walk_pgd_range+0x10/0x10 [ 953.922776][ C0] ? folios_put_refs+0xa06/0xb40 [ 953.927750][ C0] __walk_page_range+0x14c/0x710 [ 953.932706][ C0] ? folio_batch_move_lru+0x4a7/0x550 [ 953.938106][ C0] walk_page_range_vma_unsafe+0x309/0x410 [ 953.943840][ C0] ? mlock_drain_local+0x79/0x480 [ 953.948898][ C0] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 953.955161][ C0] ? mlock_drain_local+0x79/0x480 [ 953.960214][ C0] ? walk_page_range_vma+0x6b/0x90 [ 953.965348][ C0] madvise_vma_behavior+0x28b9/0x42c0 [ 953.970751][ C0] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 953.976487][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 953.981440][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 953.986400][ C0] ? unwind_next_frame+0xa6/0x2550 [ 953.991536][ C0] ? unwind_next_frame+0xa6/0x2550 [ 953.996670][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 954.001915][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 954.007131][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 954.012512][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 954.017726][ C0] ? kernel_text_address+0xa5/0xe0 [ 954.022933][ C0] ? __kernel_text_address+0xd/0x30 [ 954.028160][ C0] ? unwind_get_return_address+0x4d/0x90 [ 954.033805][ C0] ? arch_stack_walk+0xfb/0x150 [ 954.038689][ C0] ? mas_prev_slot+0xb7b/0xbf0 [ 954.043582][ C0] ? find_vma_prev+0x123/0x1b0 [ 954.048362][ C0] ? __pfx_find_vma_prev+0x10/0x10 [ 954.053503][ C0] ? file_ioctl+0x273/0x860 [ 954.058082][ C0] madvise_walk_vmas+0x573/0xae0 [ 954.063048][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 954.068020][ C0] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 954.073592][ C0] ? blk_start_plug+0x6e/0x1b0 [ 954.078584][ C0] madvise_do_behavior+0x386/0x540 [ 954.083736][ C0] ? __pfx_madvise_do_behavior+0x10/0x10 [ 954.089399][ C0] ? down_read+0x270/0x2e0 [ 954.093828][ C0] ? madvise_lock+0x146/0x2e0 [ 954.098532][ C0] do_madvise+0x1fa/0x2e0 [ 954.102894][ C0] ? __pfx_do_madvise+0x10/0x10 [ 954.107772][ C0] ? rcu_is_watching+0x15/0xb0 [ 954.112573][ C0] ? __pfx_kcov_ioctl+0x10/0x10 [ 954.117459][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.123534][ C0] __x64_sys_madvise+0xa6/0xc0 [ 954.128319][ C0] do_syscall_64+0x15f/0xf80 [ 954.132934][ C0] ? trace_irq_disable+0x3b/0x140 [ 954.137975][ C0] ? clear_bhb_loop+0x40/0x90 [ 954.142668][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.148575][ C0] RIP: 0033:0x7f1a1919ce59 [ 954.153017][ C0] RSP: 002b:00007f1a19fdd028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 954.161445][ C0] RAX: ffffffffffffffda RBX: 00007f1a19416270 RCX: 00007f1a1919ce59 [ 954.169431][ C0] RDX: 0000000000000015 RSI: 0000000000600000 RDI: 0000200000000000 [ 954.177413][ C0] RBP: 00007f1a19232d6f R08: 0000000000000000 R09: 0000000000000000 [ 954.185413][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 954.193398][ C0] R13: 00007f1a19416308 R14: 00007f1a19416270 R15: 00007f1a1953fa48 [ 954.201401][ C0]