last executing test programs: 18.047484602s ago: executing program 0 (id=87): syz_emit_ethernet(0x4e, &(0x7f00000003c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xb, 0x0, 0x0, 0x0, 0x0, {[@mss, @sack_perm={0x4, 0x2}, @generic={0x0, 0xfffffffffffffc7e, "a2898405704bcf372ce6"}]}}}}}}}, 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f00000003c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xb, 0x0, 0x0, 0x0, 0x0, {[@mss, @sack_perm={0x4, 0x2}, @generic={0x0, 0xfffffffffffffc7e, "a2898405704bcf372ce6"}]}}}}}}}, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000080), 0x80002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd01000000000014000000600000"], 0xfdef) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000040)={0x0, 0x110000}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x60, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x28031, 0x8}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x4}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0xffffffff}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x4}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x60}}, 0x8000) (async) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x60, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x28031, 0x8}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x4}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0xffffffff}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x4}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x60}}, 0x8000) 17.579129905s ago: executing program 0 (id=88): openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000300), 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0) r4 = syz_io_uring_setup(0x23c, &(0x7f0000000700)={0x0, 0x1, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r8, 0x0, &(0x7f0000000240)="352f1938d141676d9b6c59065f664735c08b9d697a645f85b19ba9030648cd046d1f26aad0196458046b81", 0xfffffffffffffe08, 0xebec93e830f96115}) io_uring_enter(r4, 0x49d, 0xc000000, 0x0, 0x0, 0x0) shutdown(r7, 0x1) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, &(0x7f0000000480)) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x12020) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000580)) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, r10) syz_emit_ethernet(0x46, &(0x7f0000000780)=ANY=[], 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x327cf3e4, 0xfffffffffffffffc, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000, 0xd67, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x3, 0x0, 0x5, 0x3, 0x2, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x4, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff]}) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r11, &(0x7f00000001c0)=[{{&(0x7f0000000240)={0xa, 0x4e22, 0x1, @empty, 0xa}, 0x1c, 0x0}}], 0x1, 0x200880c0) 15.521956304s ago: executing program 0 (id=94): r0 = openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x80800, 0x0) unshare(0x6a040000) socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000840) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f", 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071104200e166014a1bd98f8920ba2229e6000000001e"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffff8}, 0x10}, 0x94) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000180)={"000000149c0286e08ffad43c40fc0a000000ab65a29e23546aad0281b3aff5eb", r5, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r6, 0xc0383e04, &(0x7f0000000000)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, 0x0) write$uinput_user_dev(r0, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55f8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_GET_SYSNAME(r3, 0x8040552c, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="3400010110090000000000000000000000000000a500b088c7900fbe5ad77b3b8773d3090000001116d362961b64ae0c9c271022c03ee9998cb0cf055a32cb368ee84aa1c2fa0c007085cea776386b4ee24f8e3958afc918221da9e0f8cbf00a16ab0a6f63f21c8df4a5e995dc0912ffa698f538793036ea263d10dd8154d1bebb7abd19e9bbfe7c28f60d5f6f83256c720e674cfe5bed9cad90f1d89afe74e431166c4c0080d83246ffd11e92487f4f3597eea490562c8a5f5a84a05fc617f2814b82885000010000", @ANYRES32=0x0, @ANYBLOB="000500000000000014"], 0x34}, 0x1, 0x0, 0x0, 0x20000804}, 0x8004) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x23, &(0x7f0000000640), 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0) 13.05957133s ago: executing program 0 (id=98): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x880) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x1000, 0x8, 0xc1}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x20) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x80000000000000a, 0x2, 0x0) r3 = syz_usb_connect(0x4, 0x3f, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r2], 0x0) ioctl$SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)={'netpci0\x00', 0x200}) syz_usb_control_io(r3, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0x5b16, 0x0) r5 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$sierra_net(0xffffffffffffffff, &(0x7f0000000240)={0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="2009f1000000f12210017bc27f0b0319414b8f3509070366a09ba56e922e265a0b6ef2a576da2829b2fcf79d7628fd179e94410d95580313f425fa3736c0d8613d9979b6906678b70ce15cc051a95b1d52717fa8e1fdc0c5edbec66dd897e8a9b5d174c8f2ef9c454911ef76c1376239c373d2e887d9f7190260946842e03c8ee955179927ce00615306df71d22b14f6646d028cc1975d28dddb0bc288d4cca9ff63782875a7ba1edc74763240a8603b4c32c45e7790f5e3560bdc025aae6481976d32af11737a2ed7457ef9c4053fe21fb4ac9ca716964a33b2ceb72c832354d970d9abc022303622b03559678fa0c17c95364c133d7b"], 0x0}, &(0x7f0000000300)={0x1c, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r5, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 12.102486646s ago: executing program 2 (id=103): syz_usb_connect(0x4, 0x90, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x13, 0x8d, 0x8b, 0x20, 0x1908, 0x1320, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7e, 0x1, 0x0, 0x2, 0x0, 0x0, [{{0x9, 0x4, 0xae, 0xe, 0x5, 0x19, 0x66, 0x85, 0x8f, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "3a6af75c8282"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x10, 0x4, 0xfffd, 0x6}, {0x6, 0x24, 0x1a, 0x8d, 0x8}}], [{{0x9, 0x5, 0x3, 0x8, 0x400, 0x2, 0x8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x1}]}}, {{0x9, 0x5, 0x9, 0x0, 0x10, 0xa9, 0x3, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x34}]}}, {{0x9, 0x5, 0xc, 0x10, 0x400, 0x8, 0x1, 0x8d, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0xe6f}]}}, {{0x9, 0x5, 0xb, 0x10, 0x200, 0xf, 0xab, 0x8}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x8, 0x1, 0x2}}]}}]}}]}}, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002"], 0x0) syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x0) 11.357975258s ago: executing program 4 (id=106): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r1, &(0x7f0000002040)={'#! ', './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x1002) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=@getneigh={0x14, 0x1e, 0x800, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x24006004) 11.274953424s ago: executing program 4 (id=108): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r3, 0x1, 0x48, 0x0, &(0x7f0000000240)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r4 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r5, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x100}, &(0x7f00000001c0)=0x8) r6 = syz_open_dev$video4linux(&(0x7f0000000400), 0x100, 0x181c00) ioctl$VIDIOC_QUERYSTD(r6, 0x8008563f, 0x0) pwritev(r6, &(0x7f0000000100)=[{&(0x7f00000005c0)="fed9f9f2c4a674fd74181968a9a7b088bc17b077c15019a892bb77c8a49a56acbaecef480aab4492d50fbec18545611519c09ed97d6ae1693f3af374e64ac7015ee39c13a7b6c45ef4ea79613a1a0d0efb5048842043923e3862150c8e33d3b236d7ddecb8be0dc7fdbf2bf968b7dea077f95bf3e741173183b1f372264457451bac36ca18e2a5c485f5892c18308daed10ab42ff79537d14086", 0x9a}, {&(0x7f00000006c0)="2a56bc3847ff710994a9f50c57cbfc91c1a1398530acfa119863fe2b4d3eb338749873e614cca39fc2815f99ce39951e5d0e88b082d02fb80dabe20a2f43d36d0298661c1faa50e97530ecebd2c6ce05aba1406a3e2b81e219f45fc8d51930957c9865733e79376b705b0c2fd95d1faf4522ff24050ffd1e0086260fba639c7ace3fcd9b6c0bcde10ff2ca3ea48b34b0759340bce72942086d9293bc00d0385065351f71d1d6a4b2d3e0c1b1a6eb87053d74549701e5f50d78973cf8365e31c1e8539f5152", 0xc5}], 0x2, 0x4, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x0, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$FBIOBLANK(r3, 0x4611, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000540)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x3, @loopback, 0x3}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000240)="dc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{0x0}], 0x1}}], 0x2, 0x3404c891) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000007c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="f70002000400030050c9a7de8e7d7eabc231b2a6e57e462cbd8d8e68c04cf5fb582d2ef8a3aa5d309aeceede79a5b67f8879d07aa5062ecf9f9e954c8c7adbe21927d2f8b68d462458c6ce958ec91020971b7ba57162"], 0xc) syz_usb_connect(0x0, 0x49, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a52bfb0821048f79548601020301090237000100000000090400000002fe1700052406"], 0x0) 10.717999967s ago: executing program 2 (id=111): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ppoll(&(0x7f0000000240)=[{r1, 0x4080}, {r1, 0x400}], 0x2, 0x0, 0x0, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89101) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f0000000040)={0xc}) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2406000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r2, @ANYBLOB="05", @ANYRES16=r2], 0x0) 9.959891994s ago: executing program 0 (id=112): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x90, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7e, 0x2, 0x1, 0x40, 0x90, 0x89, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "d4e421ec"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x6, 0x5, 0x7}, {0x6, 0x24, 0x1a, 0x5, 0x6}, [@acm={0x4, 0x24, 0x2, 0x9}, @acm={0x4, 0x24, 0x2, 0x7}, @mdlm_detail={0x16, 0x24, 0x13, 0x1, "692a64109ae136f9068acbd8c54b967e25c1"}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x1, 0x2, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x10, 0x0, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x8, 0x9, 0x7d}}}}}}}]}}, &(0x7f00000007c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x8, 0x10, 0x5, 0xff, 0x5}, 0xe8, &(0x7f00000003c0)={0x5, 0xf, 0xe8, 0x4, [@ssp_cap={0x10, 0x10, 0xa, 0x2, 0x1, 0x3, 0xf, 0xc26, [0x0]}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x1, 0x4, 0x9}, @ssp_cap={0x14, 0x10, 0xa, 0x7, 0x2, 0xdf6, 0xff00, 0x2, [0xc0, 0x30]}, @generic={0xb8, 0x10, 0x0, "829d91d24ad75ebeffcda525bc721e85319ebc1deada4b47544d8a34a1c8f8fcdfb7e4f70a45b07b56c25f30a2f1807b0cd02e39552e7768c6a5296824865e6e19930d7cab562429966b433fa73629f2775234c8a6d15996829d0faba845aeb6d2f4d9975ba5ce82fd19ea07e63d8e558c7731964f8f67fdaec5dca4efe8207a3d004b7985106101dd032c2888987f1fd87452e2f45741756d9d9231c9ef9c4b8488e49a9ef699ddd36888dcd187d5b323a1a677c8"}]}, 0xa, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x1c0a}}, {0xc1, &(0x7f00000005c0)=@string={0xc1, 0x3, "90fc5f2f116ceffe6485927461c1baeaa67d167d1a8473e04d0427bc8ae89a6f4d3600ad6d50324fd6425035929d836cedfa8fb9989e9d81bc56a27c993d1274bd78084bcefbde5a82fc88b1887c05c4515a018f5c834cb6088cb32f5d7f22e416fe0939d1614bb1c99c53be38b09bb94aa5a37f844c529eb9ae540487126d4cc1d6f38ff52fe8d9b5db084c1fc917f9f787d27ccd63c13f2a405767a7538a753fd0d2c6b402bf73727424395ef753d2700ef74cde6a174cdda79ce7b2f69e"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x448}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x42a}}, {0x2e, &(0x7f0000000200)=@string={0x2e, 0x3, "62c267a84cdb646c3eafa2147f597b37c324d35fde757bc4d9216b32bdc25e08af985a1bf8c30568c29806b7"}}, {0xb0, &(0x7f00000006c0)=@string={0xb0, 0x3, "3d3b053adfed726f4b608eea83d38f37e0a03ee123da62b8463bac6bd7a5290e6363b212be96fbb4aabf4886a58db54e3339d648fb9316434df9a7484206404b6bbfb78dbee589addecf6f9e8cac0c0b225472b4d685cc99144e833bd4a5639b9c4b6b1aebfc45f3914d40ebfd18eff6328c4536f0bfd253c1eaf8fad4442ff483aeaa60f3a5a253e8bb82b5a868fa8d7505aeabaeb5c92ca3048f8fe24bb48acad2aadb8c628fe550fcca852d85"}}, {0x55, &(0x7f0000000240)=@string={0x55, 0x3, "11fc560dfda716ec315bd70bb768183cfd5ac1daab0d4a8d682e026eb52ff7c41e513743211d742ddb234d4a06df6dbecc7672d0af7d56d83d72d1ce6b8bcba5b874f718d384cab0e0739453e246f400ea7ac0"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x42c}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x459}}, {0x8, &(0x7f0000000780)=@string={0x8, 0x3, "4e143a48ae64"}}]}) syz_usb_control_io$hid(r0, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0x8}]}}, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000880)={0x18, 0x0, 0x0, &(0x7f0000000d80)={0x0, 0xf, 0x60, {0x5, 0xf, 0x60, 0x3, [@generic={0x3, 0x10, 0xb}, @wireless={0xb, 0x10, 0x1, 0x4, 0x60, 0xff, 0x0, 0x1, 0x6}, @generic={0x4d, 0x10, 0x1, "02447d08334bea7b1d94d35f8620b1a756e793ca3a663e4917f621b68f2e0b08b094da0a25f2d4c19ef1c368e16c11bd31d59bbe0dfcc0fb33291a7f013e709db7e6fea962557c49564b"}]}}, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 9.269957389s ago: executing program 3 (id=114): unshare(0x22020600) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x406, r1) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)={0x20000002}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x20000001}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40, 0x21) fanotify_mark(r2, 0x200, 0x40000000, r4, &(0x7f00000000c0)='./file0\x00') ppoll(&(0x7f0000000040)=[{r0, 0x1708}], 0x1, 0x0, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) ioctl$SIOCGSTAMPNS(r5, 0x8907, &(0x7f0000000000)) 9.147824444s ago: executing program 1 (id=115): ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0x1) (async) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f0000000080)={[0x8000000, 0x1000, 0xffff1000, 0xffff1000], 0x1000, 0x8, 0x5}) ioctl$KVM_RUN(r0, 0xae80, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x7, 0x1, 0x301, 0x0, 0x0, {0x5, 0x0, 0x3}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4008804) (async) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000200)={0x5, 0x7, 0x3, 0x0, 0x4}) (async) getsockopt$inet_int(r2, 0x0, 0x31, &(0x7f0000000240), &(0x7f0000000280)=0x4) (async) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f00000002c0)={@local, @local, 0x1, 0x4, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @local]}, 0x20) (async) sendmsg$sock(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)="3a42b33c35f5", 0x6}, {&(0x7f0000000340)="52c47c2809ad3e4d75fcaa2d381dba697e2e805c62217748764064bc765fc6fd0c73aa60bf7314f2ccb550494d9f3ef69515a27f2ec7091674e24e3861f66581b031681f4bd11b4ae9e6459b30fdd0f3366b0426f633735100e0c4c9071caf4550f77433e5bde1b737a4d199c8713d254b65ac1ac97693ba4f0836aaf3dc138f4e5e433d13e29facd3dd85db6acacf3049ec43f83218e7d5f677eede1b5014bb6325073d15488538601743702d5e8466311bf20cd3f55906b75066b0146867", 0xbf}, {&(0x7f0000000400)="619b9af8dfd26ad7509c245f51e4dd49aebc7812dd4deb4e1ecee239d7f7b9aa8730c2918366ed0f4b3063bcfa22a0d3b651d14f3e6b42132e8e3a6e4813f64c6955e4cc9d62859321f47a63d976ec54b3adb0f4c91453ba368cb9ae989801c4ce", 0x61}], 0x3, &(0x7f00000004c0)=[@txtime={{0x18, 0x1, 0x3d, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0xfff}}, @mark={{0x14, 0x1, 0x24, 0x7}}], 0x48}, 0x4000000) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000580)=0x1) ioctl$KVM_RUN(r0, 0xae80, 0x0) r3 = signalfd4(r0, &(0x7f00000005c0)={[0x7ff]}, 0x8, 0x80000) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'erspan0\x00', 0x0, 0x7, 0x8, 0x6, 0x7, {{0x16, 0x4, 0x1, 0x0, 0x58, 0x64, 0x0, 0x8, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x42}, @multicast1, {[@generic={0x86, 0x4, "d7f1"}, @ssrr={0x89, 0x13, 0x1b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @local, @remote]}, @ssrr={0x89, 0x23, 0x58, [@rand_addr=0x64010102, @private=0xa010101, @loopback, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x16}, @broadcast, @broadcast]}, @timestamp={0x44, 0x8, 0x18, 0x0, 0x8, [0x81]}]}}}}}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000006c0)={@private1, 0x4c, r4}) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), r3) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000800)={'gretap0\x00', &(0x7f0000000780)={'erspan0\x00', r4, 0x80, 0x8, 0x0, 0x1, {{0xf, 0x4, 0x0, 0x3, 0x3c, 0x64, 0x0, 0x6, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast2, {[@generic={0x82, 0x4, 'YI'}, @end, @timestamp_addr={0x44, 0x1c, 0x73, 0x1, 0x9, [{@rand_addr=0x64010102, 0x8}, {@rand_addr=0x64010101, 0x7fff}, {@rand_addr=0x64010102, 0xffff}]}, @end, @ra={0x94, 0x4}]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000a40)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a00)={&(0x7f0000000840)={0x184, r5, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x37c6d306bc8e4821}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x4000040}, 0x4010) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000a80)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) ioctl$F2FS_IOC_COMPRESS_FILE(r7, 0xf518, 0x0) ioctl$sock_inet6_SIOCDELRT(r7, 0x890c, &(0x7f0000000ac0)={@empty, @private1, @dev={0xfe, 0x80, '\x00', 0x22}, 0x8000, 0xd6, 0x0, 0x0, 0x401, 0x1000000, r4}) (async) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r7, 0x7ab, &(0x7f0000000f80)={&(0x7f0000000b40)={{@local, 0x3}, {@host, 0x8}, 0x400, "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"}, 0x418, 0x1}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r7, 0x84, 0xf, &(0x7f0000000fc0)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x1000, 0x9, 0x9, 0x1, 0x8001}, &(0x7f0000001080)=0x98) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f00000010c0)={r8, 0x246c3451}, &(0x7f0000001100)=0x8) (async) openat$snapshot(0xffffffffffffff9c, &(0x7f0000001140), 0x2, 0x0) (async) ioctl$F2FS_IOC_RESIZE_FS(r3, 0x4008f510, &(0x7f0000001180)=0x9) (async) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000011c0)={0x4, 0x5, 0x8000, 0x5, 0x3bb, 0x800}) (async) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000013c0)={'ip6gre0\x00', &(0x7f0000001340)={'syztnl1\x00', 0x0, 0x2f, 0xa, 0x2, 0x4, 0x1f, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}, @private1, 0x80, 0x10, 0x7, 0x1}}) 9.107657163s ago: executing program 2 (id=116): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x7ffe, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}, {0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x94}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) add_key(&(0x7f00000018c0)='big_key\x00', &(0x7f0000001900)={'syz', 0x1}, &(0x7f0000001940)='\f', 0xfffff, 0xfffffffffffffffe) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) setpriority(0x2, 0x0, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 8.929594901s ago: executing program 1 (id=117): r0 = socket$key(0xf, 0x3, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x80000000) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000300)) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@broadcast, @random="000000000400", @void, {@ipv4={0x800, @tipc={{0x7, 0x4, 0x3, 0x3, 0x3c, 0x64, 0x0, 0x5, 0x6, 0x0, @empty, @empty, {[@timestamp_prespec={0x44, 0x4, 0x84, 0x3, 0x3}, @ra={0x94, 0x4, 0x400}]}}, @payload_direct={{{{0x20, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x2, 0x8, 0x4, 0x3, 0x8000, 0x4936, 0x0, 0x4e23, 0x4e21}, 0x3, 0x3}}}}}}}, 0x0) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x2, 0x0, 0x9, 0xb, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x8}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0xa0000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x58}, 0x1, 0x7}, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x358, 0xffff8880b870dfff) ptrace$getregset(0x4204, r2, 0x200, &(0x7f0000000140)={&(0x7f0000000380)=""/237, 0xed}) sched_setattr(r2, &(0x7f0000000040)={0x38, 0x0, 0x14, 0x7, 0x3, 0x2, 0x2, 0x6, 0x0, 0x10b}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000140)=[@in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e22, 0xffffffff, @private0={0xfc, 0x0, '\x00', 0x1}, 0xaa55}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e22, @private=0xa010102}, @in6={0xa, 0x4e24, 0xfffffff7, @loopback, 0xffff8895}, @in={0x2, 0x4e20, @loopback}], 0x78) 8.595711216s ago: executing program 1 (id=118): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb0000080003"], 0x68}}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="5400000010000100"/20, @ANYRES32=r5, @ANYBLOB="7240146c00000000340012800c0001006d6163766c616e0024"], 0x54}}, 0x0) (async, rerun: 32) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) (rerun: 32) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f000000e000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000340)="0f78ae0000008066baa000ec2e6445dee70f01c348b800700000000000000f23c00f21f83500000e000f23f866ba430066b8a50066ef3665f340a60f01c8400f3066460f3882587b", 0x48}], 0x1, 0x28, &(0x7f00000003c0)=[@flags={0x3, 0x210}, @cr4={0x1, 0x124120}], 0x2) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) chdir(&(0x7f0000000480)='./cgroup\x00') (rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000740)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f00000006c0)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0), &(0x7f0000000180)=[0x0, 0x0], &(0x7f0000000100)=[0x0], 0x0, 0x2, 0x7, 0x0, r8}) (async, rerun: 32) r9 = signalfd4(0xffffffffffffffff, &(0x7f0000000740)={[0x8000000000000001]}, 0x8, 0x80000) (rerun: 32) poll(&(0x7f0000000800)=[{r9, 0x200}], 0x1, 0x1ad) (async) write$P9_RWRITE(r9, &(0x7f0000000240)={0xb, 0x77, 0x1, 0x3f}, 0xb) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x400001, 0x0) (async) openat(0xffffffffffffff9c, 0x0, 0x80c40, 0x0) (async) fspick(0xffffffffffffffff, 0x0, 0x0) 8.226359641s ago: executing program 3 (id=119): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x32, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000001c0), &(0x7f0000000280), 0x8, 0xbe, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000440)={r0}, 0x4) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@hyper}) r2 = syz_open_dev$video4linux(&(0x7f0000000c80), 0x40000007, 0x80e01) ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0xc0585604, &(0x7f0000000200)={0x1, 0x0, {0xfffff982, 0x8, 0x1009, 0x4, 0x5, 0x4, 0x0, 0x4}}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f00000000c0)={{@host, 0xffffffff}, @host, 0x1, 0x0, 0x1, 0x4}) 8.114650362s ago: executing program 1 (id=120): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000100)={0x1, 0x5, 0x1, 0x7, 0x8a0}, 0x14) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/key-users\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x29, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000180)={0x2, 'dvmrp1\x00', {0x80}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100088613300011870fd00090582020002000400"], 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201500200000040ac054e02400001020301090224000101494008190400080203010212224b9e565898521675b1ac81030004d00f02"], &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x12, &(0x7f0000000040)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b", @ANYRES32]) 7.908054608s ago: executing program 3 (id=121): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x80011d5, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000071000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="2c000180"], 0x44}}, 0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) 7.748357929s ago: executing program 3 (id=122): socket(0x10, 0x803, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket(0x400000000010, 0x3, 0x0) syz_usb_connect(0x5, 0x255, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x144020080, &(0x7f00000000c0)="b0b6d73507829d86e0d189ec9a926caf5856ff06b2130c8b89591903af082f144968047504f1e4f6e8105e6a198b4c660a0fff35c029ed133c72da7ea6b046ad03083a045d58972a20d5d6b5830eccf50f5adde9d3a6e1fb0500ae6553f25befc0f14121", 0x64, &(0x7f0000000000), &(0x7f0000000140), &(0x7f0000000340)) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x1370, &(0x7f00000001c0)={0x0, 0x49fa, 0x10, 0x0, 0x4e}, &(0x7f0000000180), 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x640100ff, 0x4e21, 0x3, 'lblc\x00', 0x0, 0xa7e, 0x400070}, 0x2c) sendmsg$sock(r1, 0x0, 0x0) r2 = syz_io_uring_setup(0x1108, &(0x7f0000000880)={0x0, 0x2, 0x80, 0x2, 0x21e}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x471b, 0xfffffffe, 0x20, 0x0, 0xffffffffffffff68) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r5, 0x0, &(0x7f00000002c0)={0x0, 0xfe96, 0x0}, 0x0, 0x20042, 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc0) socket$packet(0x11, 0x3, 0x300) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10004893}, 0x44080) 7.686377671s ago: executing program 4 (id=123): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f}, 0x94) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001400b595000000000000000002000000899b0b9b906b0b5fbe8479f9a9bc36b1893290f4eaa0fed02b352d496a10f281f8fa69674b6ea27e3d4466161192042a1c24230000000089a393ce2ce822035b5b95662fe07a39359ce8ff71b8495ad06019b908d9f04ac2ae9913c25beccab58fa6b11ed8f588d1ac84f1543c2f19ba190e9cbf43ab82434f337a700001000000000000bbdd9f33081027c7505d7ffc6a1386130d6e524027b46ed909c0", @ANYRES32=r0, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, 'lo\x00'}}, 0x1e) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = fcntl$getown(r1, 0x9) mount$fuse(0x0, 0x0, 0x0, 0x2010080, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@private2={0xfc, 0x2, '\x00', 0x1}, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80000, 0x6, 0x0, 0x0, 0x6, 0x900066}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="14045200d3fc03fc01004788031c09100628", 0xfd35, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) sched_setscheduler(r4, 0x2, &(0x7f0000000580)=0x5) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x2, @multicast, 'wlan1\x00'}}) r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000003c0), 0x4) ioctl$EXT4_IOC_GET_ES_CACHE(r7, 0xc020662a, &(0x7f0000000440)={0x6ce9, 0x53, 0x1, 0x8, 0x5, 0x0, [{0x8, 0x14b46d23, 0xab, '\x00', 0x4}, {0x7fffffffffffffff, 0x200, 0x4, '\x00', 0x80}, {0x9, 0x3, 0x41, '\x00', 0x200}, {0x4, 0x5363, 0xff3, '\x00', 0x8}, {0x400, 0x4, 0x3, '\x00', 0x206}]}) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0xb0, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_ADT={0x78, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0xa7}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xf}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @broadcast}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xf7fffff9}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004184) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f00000001c0)={@mcast2, @local, @private0, 0x2, 0x1, 0x2, 0x900, 0x0, 0x802a0, r10}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x20008824}, 0x4800) 7.379913589s ago: executing program 4 (id=124): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x2) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010010b753b5086d049608113a0102030109021200010000000009040d181c51c74975"], 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x0, 0x204031, 0xffffffffffffffff, 0xba6eb000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x27, 0x2}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffe, 0xfffffffc}, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r2 = dup(0xffffffffffffffff) r3 = open(&(0x7f0000000000)='./bus\x00', 0x40542, 0x1c8) ftruncate(r3, 0xee72) sendfile(r2, r3, 0x0, 0x8000fffffffe) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0x19) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000780)=""/4080, 0xff0}, {0x0}], 0x2) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) r5 = gettid() r6 = getpid() rt_tgsigqueueinfo(r6, r5, 0x7, &(0x7f0000000000)={0xb, 0x5, 0x9}) read$FUSE(r4, &(0x7f0000000700)={0x2020}, 0x2020) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x0, 0x40010003, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x3746, &(0x7f0000001480)={0x0, 0x66d9, 0x400, 0x0, 0x13c, 0x0, r4}, &(0x7f0000000040), &(0x7f00000000c0)) 7.157391234s ago: executing program 0 (id=125): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x30, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000002c0)) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e21, 0xb744, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffd}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b700000000000000180818000000000000000000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x4, 0xd3, &(0x7f0000000f80)=""/211, 0x0, 0x28}, 0x94) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r4, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x19}, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x5e}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x3a}}}], 0x30}, 0xc4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f00000001c0)) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4138ae84, &(0x7f0000000080)=@x86={0x6, 0xa, 0x7, 0x0, 0x3, 0x8d, 0xce, 0x1c, 0x89, 0xa0, 0x7, 0x8, 0x0, 0x8000, 0xb, 0x2, 0x8, 0x2, 0x1, '\x00', 0x9, 0x3fb}) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x8, 0x80, 0x0, '\x00', 0x5c8d}) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x1}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r9, 0x2, &(0x7f00000000c0)={0x3}, 0x0) syz_usb_connect(0x4, 0x823, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000e00)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x10, 0x0, 0x15, 0x66, 0x40, 0x8b}, 0x19, &(0x7f0000000340)={0x5, 0xf, 0x19, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x8, 0x21, 0xf0}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x5, 0x3, 0xd}]}, 0x4, [{0x0, 0x0}, {0x27, &(0x7f0000000e80)=ANY=[@ANYBLOB="270379204a220ba6a052dca752c7fabea369beb9c7fd1f1caa6883ee8ac40aac4f494b1b2b640755f6d38c166f17e4ebb488352b7ee857df57274829c33b69be20a1bc72b10e6be52982525af228c53658c01b5750c52a0aca985043d08a73cbb8e28dd791252ebc477d01cfdeaa137414101260ea29addbd103400d4a87fb92725530e70bec5f675ed73328d6a35adf3fba433e87e02493f9b234fa1ab182c1ff55ab600da467af13b1ac6cd57b93fd0397c200"/193]}, {0x7f, &(0x7f0000000d80)=ANY=[@ANYBLOB="7f039811916ebd5e5df6395154736cb0a1dd20231bf488eec9cdbbb55ffd429bd18a295b26cfcfa1293f80607100384d032c4ff2f322d8f15f8a212adc33223813ae40d67a9e6712566e390dd57c654bbf57fd2b040caddfe0cc4e0246af824b72fb0ddf48d83daa2299ecfe21af62ffe1f55f30d21cfdb600000000000000"]}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1001}}]}) 7.154609838s ago: executing program 1 (id=126): capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x0, 0x7c7, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x3, 0x14, 0x0, 0x0, 0x86, 0x4, 0x0, @empty, @empty}}}}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) close(r1) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCSETAF(r2, 0x5434, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f00000000c0)={0x6, 'pimreg\x00', {0xf71}, 0x81}) syz_usb_connect$uac1(0x2, 0xa0, &(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0x0) 6.504071332s ago: executing program 2 (id=127): r0 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r0, 0x0, 0x0, 0x44800, 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000001280)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x1}}, 0x24) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) socket$netlink(0x10, 0x3, 0x1) 6.067840911s ago: executing program 4 (id=128): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40000) ioctl$FS_IOC_RESVSP(r1, 0x80086601, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = io_uring_setup(0x21a4, &(0x7f0000000000)={0x0, 0x75f, 0x10, 0x1, 0x11cb}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40000) (async) ioctl$FS_IOC_RESVSP(r1, 0x80086601, 0x0) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) io_uring_setup(0x21a4, &(0x7f0000000000)={0x0, 0x75f, 0x10, 0x1, 0x11cb}) (async) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) (async) close(r0) (async) 5.961052768s ago: executing program 2 (id=129): unshare(0x22020600) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3", 0xa3}], 0x3}], 0x1, 0x40800) syz_emit_ethernet(0x52, &(0x7f0000000740)=ANY=[@ANYBLOB="0180c20000020180c2000000810000000800450000400000000001019078ac1e0001ac1414aa05009078e00000e0490000000000000000110000ac1414aaac1414aa00440c000300000000010000040000009cac2a7eafe5fb4358bf6e32e9b43386ac165559d6cfe4360d1e503fe18a52ee5dfc05959053f6f93cf79f3ba586930125fd2946bdfe7ccd82408091b1705886bd3ecf2fcbe5260846760224d5b5154b0fe526843f26d5abef7a3d869e9b18e125187fd6ee8f9b8063054f0b02f82d3c69c377bd"], 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004c00048024000180090001006d65746100000000140002800800014000000001080002400000001724000180090001006d6173710000000014000280080002400000000808"], 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x1708}], 0x1, 0x0, 0x0, 0x0) 4.801147521s ago: executing program 2 (id=130): bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket(0x400000000010, 0x3, 0x0) (async) socket(0x400000000010, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0xa0842, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000f80)={0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="00061c"], 0x0, 0x0, 0x0, 0x0, 0x0}) connect$unix(r1, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x301140, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x301140, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x9c8) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x76, 0x0, 0x0) r7 = mq_open(0x0, 0x42, 0x0, 0x0) lseek(r7, 0x3, 0x3) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x7, "3e430d52b72fe8365990ac0fc8ac8c8e9aa34423204dcbd18059f78f4b00e89c"}) ioctl$KVM_RUN(r6, 0xae80, 0x0) execve(0x0, 0x0, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000000), 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000003c0007010000000000400000017c00000400fc80100001805fd05a607fd48040ffc30000080002"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000003c0007010000000000400000017c00000400fc80100001805fd05a607fd48040ffc30000080002"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 4.535927132s ago: executing program 3 (id=131): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'vlan0\x00'}) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x24b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x45}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x2}}}}}]}}]}}, 0x0) (async) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x24b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x45}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, &(0x7f0000000140)={0x0, 0x1, 0x46, {0x46, 0xe, "f9d9855d539b05fb0f4526c99263e5d04046bd6e16e4b2368edc697a47e365f91576f85e877a54394e0516a6516a69f346f27665c294e6d0be5c203de45ffba21b1ee622"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x20, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x18}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) readv(r2, &(0x7f0000000500), 0x100000000000031a) r3 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) (async) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x28, 0x10, 0x400, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4b310}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x69d72}]}, 0x28}}, 0x18) 3.938594234s ago: executing program 1 (id=132): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x5}, 0x94) timer_create(0x0, 0x0, &(0x7f0000000180)) timer_create(0x7, 0x0, &(0x7f0000000140)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000200)=""/122, 0x7a}], 0x1, 0x62, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100ff2bbe11a5ce7879edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x20000000, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r4 = dup(r3) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)=@x86={0xa0, 0xfd, 0x5, 0x0, 0x3, 0x3, 0xb, 0x1, 0xf8, 0x19, 0x7, 0x3, 0x0, 0x9d, 0x1, 0x7, 0x6, 0x40, 0x0, '\x00', 0x4, 0xcaa}) sendto$packet(r4, &(0x7f0000000180)="ff03ca7ad7f8594366bc53e037c1de6a4ee3e61dc87222b74e7aa64829a1030085c5675f4af4bd67f7cfe5215e39a8fed984aab722f6dda9ca8ba203c1bc6a8f29da", 0x42, 0x4000884, &(0x7f0000000080)={0x11, 0x2, 0x0, 0x1, 0x4, 0x6, @link_local}, 0x14) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f00000029c0)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30000001) sendmsg$inet(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000f00)='p', 0x1}], 0x1}, 0x800) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000300)={[0xea, 0x2, 0xffffffff, 0x4, 0xfffffffffffffffd, 0x7, 0x9, 0xb, 0x4, 0x80, 0x6, 0x794, 0xa, 0x43, 0xc976, 0x6], 0x2, 0x20200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.878840667s ago: executing program 4 (id=133): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r2, 0x80047437, &(0x7f0000000100)) socket$inet6(0x10, 0x80000, 0x3) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0xff2b}], 0x2) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0106418, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES8=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000200)={@empty, @rand_addr, 0x0}, &(0x7f0000000240)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) utime(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={0x8000000000000000}) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x8c000003, 0x0, {[0x3]}}, 0x0, 0x8, &(0x7f0000000440)) unshare(0x6c049f00) r7 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r7, 0x0, 0x400000000000000, 0x7) 0s ago: executing program 3 (id=134): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000040), 0x4) write$tun(r0, &(0x7f0000000580)={@val={0x0, 0x88a8}, @val={0x2, 0x80, 0x32c0, 0x8, 0x46, 0x3}, @ipv4=@gre={{0xa, 0x4, 0x0, 0x20, 0x1e6, 0x67, 0x0, 0x1, 0x2f, 0x0, @remote, @multicast1, {[@end, @generic={0x44, 0x12, "e3b9363304bbf112ce08d56b6ddb647a"}, @noop]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x20, 0x1, [0x8], "0976a7d3f3079ceb689a15b6c427a5af0f74f10351f428f5a8a6616ea698eda0"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [], "d7f9f4ce223cb70dd2c53da0732c611245a3af75347ec47b4eedcb7b07676f9cfc4f5fa79d4a6c4509526f6690d8887226616282daeaed8e7c60a3a394c596dd1b75ca5a867b716f649f85a9fc93c0ec32509ea65ddc328974938871fc4820aefda46331205c2ee0dd6e1bfd4e17286b540827b7519855c130319e6c9d6b91d66dc13085afa07fa597527a0e36f2c841d9499ed17fe5860fdc0261a58b3664474723115da7ecd54187849d506f00fc492d0cc2f34a0b70584d069d3c948a077319ef4d79d965"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [0x3f7, 0x1], "4eb69691b3ecdd48be6b58afaa15a73eb75d7a66dd72d43d2523f22328e62ea8bf052c0eff0684581757784532b1247d0f6b5d7fe4b40c2b071dd1f9c5c463d3ed522054a1db4f167f86e5edb280ced7343566bdae388edbf27b30e8b3ccc93dd8d5225d2a3437638a9510e5a661c2e88cdc08c2277aae277a386389bc49746cee6cf4b3e8c45e"}, {0x8, 0x88be, 0x4, {{0xc, 0x1, 0x7f, 0x2, 0x1, 0x3, 0x0, 0xc}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x2, {{0x9, 0x2, 0xe, 0x2, 0x1, 0x2, 0x7, 0xa1}, 0x2, {0x3, 0x2, 0x3, 0x1f, 0x0, 0x1}}}, {0x8, 0x6558, 0x1, "ba0cbf32e6d4b9"}}}}, 0x1f4) r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x2, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000000)={0x0, 0x3631564e, 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e6400000000180002801400088008"], 0x48}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a78000000060a030400000000000000000a0000010900010073797a31000000004c000480480001800b000100746172676574000038000280240003000739f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700000000000000000800024000000000080001004c4f47000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) sendmmsg$inet(r2, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.135' (ED25519) to the list of known hosts. [ 86.230659][ T5816] cgroup: Unknown subsys name 'net' [ 86.389467][ T5816] cgroup: Unknown subsys name 'cpuset' [ 86.399159][ T5816] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 88.173852][ T5816] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 90.883401][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.892112][ T5828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.900143][ T5828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.908500][ T5828] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.909240][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.916604][ T5828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.931979][ T5148] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.940549][ T5828] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.953244][ T5148] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.962267][ T5148] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.992831][ T5828] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.001384][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.001611][ T5828] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.018687][ T5828] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.027324][ T5828] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.030704][ T5831] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.043035][ T5828] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.043846][ T5831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.058387][ T5831] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.062236][ T5828] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.078612][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.096184][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.105957][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.114715][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.123039][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.687418][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 91.780026][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 92.057087][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 92.071200][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.079887][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.087916][ T5835] bridge_slave_0: entered allmulticast mode [ 92.096328][ T5835] bridge_slave_0: entered promiscuous mode [ 92.105877][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 92.118723][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.126002][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.133167][ T5835] bridge_slave_1: entered allmulticast mode [ 92.147384][ T5835] bridge_slave_1: entered promiscuous mode [ 92.239189][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.246876][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.254113][ T5838] bridge_slave_0: entered allmulticast mode [ 92.262661][ T5838] bridge_slave_0: entered promiscuous mode [ 92.330466][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.338895][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.346617][ T5838] bridge_slave_1: entered allmulticast mode [ 92.354528][ T5838] bridge_slave_1: entered promiscuous mode [ 92.363915][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 92.408620][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.467979][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.536781][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.594483][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.650822][ T5835] team0: Port device team_slave_0 added [ 92.659498][ T5835] team0: Port device team_slave_1 added [ 92.680439][ T5838] team0: Port device team_slave_0 added [ 92.710080][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.717753][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.725394][ T5837] bridge_slave_0: entered allmulticast mode [ 92.732750][ T5837] bridge_slave_0: entered promiscuous mode [ 92.766865][ T5838] team0: Port device team_slave_1 added [ 92.774290][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.781587][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.807547][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.825292][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.832724][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.840183][ T5840] bridge_slave_0: entered allmulticast mode [ 92.847804][ T5840] bridge_slave_0: entered promiscuous mode [ 92.855517][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.862673][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.870355][ T5837] bridge_slave_1: entered allmulticast mode [ 92.877764][ T5837] bridge_slave_1: entered promiscuous mode [ 92.898658][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.905742][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.931978][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.958559][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.966253][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.973445][ T5840] bridge_slave_1: entered allmulticast mode [ 92.981026][ T5840] bridge_slave_1: entered promiscuous mode [ 93.015919][ T5828] Bluetooth: hci1: command tx timeout [ 93.016000][ T5831] Bluetooth: hci0: command tx timeout [ 93.029143][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.036230][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.062672][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.095544][ T5831] Bluetooth: hci2: command tx timeout [ 93.095551][ T5828] Bluetooth: hci3: command tx timeout [ 93.124555][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.131945][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.158309][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.175702][ T5831] Bluetooth: hci4: command tx timeout [ 93.183333][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.190661][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.197953][ T5839] bridge_slave_0: entered allmulticast mode [ 93.205334][ T5839] bridge_slave_0: entered promiscuous mode [ 93.227668][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.241128][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.265059][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.272430][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.280646][ T5839] bridge_slave_1: entered allmulticast mode [ 93.288564][ T5839] bridge_slave_1: entered promiscuous mode [ 93.299769][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.351767][ T5838] hsr_slave_0: entered promiscuous mode [ 93.358767][ T5838] hsr_slave_1: entered promiscuous mode [ 93.380595][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.429186][ T5837] team0: Port device team_slave_0 added [ 93.466746][ T5840] team0: Port device team_slave_0 added [ 93.481518][ T5835] hsr_slave_0: entered promiscuous mode [ 93.488932][ T5835] hsr_slave_1: entered promiscuous mode [ 93.495685][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 93.501528][ T5835] Cannot create hsr debugfs directory [ 93.524627][ T5837] team0: Port device team_slave_1 added [ 93.533978][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.545351][ T5840] team0: Port device team_slave_1 added [ 93.573886][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.671690][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.678890][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.705220][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.731252][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.738347][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.764570][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.794753][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.802063][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.828292][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.841246][ T5839] team0: Port device team_slave_0 added [ 93.858557][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.865598][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.892486][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.930885][ T5839] team0: Port device team_slave_1 added [ 94.058087][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.065621][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.091990][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.141180][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.148755][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.176412][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.193679][ T5840] hsr_slave_0: entered promiscuous mode [ 94.200531][ T5840] hsr_slave_1: entered promiscuous mode [ 94.206883][ T5840] debugfs: 'hsr0' already exists in 'hsr' [ 94.212654][ T5840] Cannot create hsr debugfs directory [ 94.247432][ T5837] hsr_slave_0: entered promiscuous mode [ 94.254145][ T5837] hsr_slave_1: entered promiscuous mode [ 94.260737][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 94.266627][ T5837] Cannot create hsr debugfs directory [ 94.449812][ T5839] hsr_slave_0: entered promiscuous mode [ 94.456353][ T5839] hsr_slave_1: entered promiscuous mode [ 94.462710][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 94.468812][ T5839] Cannot create hsr debugfs directory [ 94.632600][ T5838] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.647545][ T5838] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.705976][ T5838] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.748586][ T5838] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.850935][ T5835] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.863413][ T5835] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.901004][ T5835] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.936832][ T5835] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.997217][ T5840] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 95.008763][ T5840] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 95.062699][ T5840] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 95.079839][ T5840] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 95.098298][ T5831] Bluetooth: hci0: command tx timeout [ 95.102911][ T5828] Bluetooth: hci1: command tx timeout [ 95.175719][ T5828] Bluetooth: hci3: command tx timeout [ 95.178694][ T5831] Bluetooth: hci2: command tx timeout [ 95.184631][ T5837] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.199195][ T5837] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.210632][ T5837] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.238249][ T5837] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.256651][ T5831] Bluetooth: hci4: command tx timeout [ 95.352660][ T5839] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.363291][ T5839] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.393095][ T5839] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.407183][ T5839] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.438120][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.474176][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.528041][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.542618][ T684] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.550102][ T684] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.582133][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.589342][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.644412][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.680794][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.694817][ T684] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.702049][ T684] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.735210][ T684] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.742369][ T684] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.772761][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.790711][ T5838] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.808340][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.824343][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.831726][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.879177][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.886400][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.916693][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.961194][ T684] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.968581][ T684] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.017486][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.024746][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.044619][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.067867][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.142304][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.161279][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.172512][ T684] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.179752][ T684] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.211073][ T684] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.218492][ T684] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.270571][ T5838] veth0_vlan: entered promiscuous mode [ 96.280835][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.312719][ T5839] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.333541][ T5838] veth1_vlan: entered promiscuous mode [ 96.371489][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.406989][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.474740][ T5838] veth0_macvtap: entered promiscuous mode [ 96.490726][ T5840] veth0_vlan: entered promiscuous mode [ 96.514749][ T5835] veth0_vlan: entered promiscuous mode [ 96.523760][ T5838] veth1_macvtap: entered promiscuous mode [ 96.552529][ T5840] veth1_vlan: entered promiscuous mode [ 96.566595][ T5835] veth1_vlan: entered promiscuous mode [ 96.609295][ T5837] veth0_vlan: entered promiscuous mode [ 96.628205][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.649742][ T5839] veth0_vlan: entered promiscuous mode [ 96.660965][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.680273][ T5837] veth1_vlan: entered promiscuous mode [ 96.708844][ T5835] veth0_macvtap: entered promiscuous mode [ 96.729007][ T5840] veth0_macvtap: entered promiscuous mode [ 96.741351][ T684] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.751495][ T684] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.763345][ T5839] veth1_vlan: entered promiscuous mode [ 96.772580][ T5835] veth1_macvtap: entered promiscuous mode [ 96.782582][ T5840] veth1_macvtap: entered promiscuous mode [ 96.790355][ T684] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.799795][ T684] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.844266][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.889105][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.903800][ T60] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.914066][ T60] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.926572][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.956099][ T60] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.968733][ T60] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.982823][ T5837] veth0_macvtap: entered promiscuous mode [ 97.011622][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.028963][ T5837] veth1_macvtap: entered promiscuous mode [ 97.064048][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.074121][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.098523][ T5839] veth0_macvtap: entered promiscuous mode [ 97.108388][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.120797][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.126745][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.132875][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.176655][ T5831] Bluetooth: hci1: command tx timeout [ 97.176715][ T5828] Bluetooth: hci0: command tx timeout [ 97.206834][ T5839] veth1_macvtap: entered promiscuous mode [ 97.253287][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.267437][ T5828] Bluetooth: hci3: command tx timeout [ 97.268338][ T5831] Bluetooth: hci2: command tx timeout [ 97.276693][ T985] cfg80211: failed to load regulatory.db [ 97.288076][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.321173][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.333866][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.343344][ T5831] Bluetooth: hci4: command tx timeout [ 97.368280][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.374062][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.382856][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.412747][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.464836][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.469506][ T5838] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.488583][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.507375][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.541886][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.570043][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.588440][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.641116][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.652129][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.663193][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.673076][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.691608][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.702557][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.724287][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.732566][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.824842][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.848196][ T5899] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 97.858145][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.010450][ T684] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.036161][ T684] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.045597][ T5920] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 98.053434][ T5899] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.109984][ T5899] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.120313][ T5899] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 98.131893][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.160249][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.171855][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.176677][ T5899] usb 3-1: config 0 descriptor?? [ 98.250568][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.269159][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.277747][ T5883] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 98.427302][ T5883] usb 1-1: device descriptor read/64, error -71 [ 98.621048][ T5934] process 'syz.1.2' launched '/dev/fd/3/./file0' with NULL argv: empty string added [ 98.638006][ T5899] hid-led 0003:0FC5:B080.0001: item fetching failed at offset 0/3 [ 98.686315][ T985] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 98.696349][ T5883] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 98.766161][ T5899] hid-led 0003:0FC5:B080.0001: probe with driver hid-led failed with error -22 [ 98.820323][ T5917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.820972][ T5917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.826256][ T5883] usb 1-1: device descriptor read/64, error -71 [ 98.889392][ T985] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 98.889426][ T985] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.889448][ T985] usb 5-1: Product: syz [ 98.889463][ T985] usb 5-1: Manufacturer: syz [ 98.889481][ T985] usb 5-1: SerialNumber: syz [ 98.922799][ T985] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 98.939295][ T5883] usb usb1-port1: attempt power cycle [ 99.051511][ T5926] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 99.176288][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.185212][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 99.257084][ T5831] Bluetooth: hci0: command tx timeout [ 99.270109][ T5831] Bluetooth: hci1: command tx timeout [ 99.295877][ T5883] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 99.337028][ T5831] Bluetooth: hci3: command tx timeout [ 99.338927][ T5828] Bluetooth: hci2: command tx timeout [ 99.349333][ T5883] usb 1-1: device descriptor read/8, error -71 [ 99.417602][ T5828] Bluetooth: hci4: command tx timeout [ 99.471695][ T115] usb 5-1: USB disconnect, device number 2 [ 99.605569][ T5883] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 99.629661][ T5883] usb 1-1: device descriptor read/8, error -71 [ 99.746333][ T5883] usb usb1-port1: unable to enumerate USB device [ 99.985659][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.136316][ T5926] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 100.143830][ T5926] ath9k_htc: Failed to initialize the device [ 100.170526][ T115] usb 5-1: ath9k_htc: USB layer deinitialized [ 100.601748][ T5906] usb 3-1: USB disconnect, device number 2 [ 100.641631][ T115] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 100.666006][ T5965] loop8: detected capacity change from 0 to 16384 [ 100.716208][ T5965] loop8: detected capacity change from 16384 to 16383 [ 100.837920][ T115] usb 5-1: Using ep0 maxpacket: 16 [ 100.867044][ T115] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.883741][ T115] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.893916][ T115] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 100.906868][ T115] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 100.916369][ T115] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.928561][ T115] usb 5-1: config 0 descriptor?? [ 101.040143][ T5971] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15'. [ 101.390559][ T5983] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.156540][ T115] microsoft 0003:045E:07DA.0002: unknown main item tag 0x3 [ 102.171324][ T115] microsoft 0003:045E:07DA.0002: unknown global tag 0xe [ 102.178818][ T115] microsoft 0003:045E:07DA.0002: item 0 2 1 14 parsing failed [ 102.181606][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 102.190092][ T115] microsoft 0003:045E:07DA.0002: parse failed [ 102.283630][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 102.440950][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.462478][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.472153][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.472789][ T115] microsoft 0003:045E:07DA.0002: probe with driver microsoft failed with error -22 [ 102.481588][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 102.501113][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 102.735273][ T5915] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 102.936470][ T5915] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 102.955576][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.014707][ T5915] usb 3-1: config 0 descriptor?? [ 103.015801][ T115] usb 5-1: USB disconnect, device number 3 [ 103.162203][ T5915] cp210x 3-1:0.0: cp210x converter detected [ 103.394129][ T5915] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 103.401972][ T5915] cp210x 3-1:0.0: querying part number failed [ 103.426623][ T5915] usb 3-1: cp210x converter now attached to ttyUSB0 [ 103.861688][ T6002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23'. [ 104.301402][ T5915] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 104.654776][ T5915] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.666555][ T5915] usb 2-1: config 0 has no interfaces? [ 104.684820][ T6005] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 104.705110][ T5915] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 104.714532][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.722772][ T5915] usb 2-1: Product: syz [ 104.727178][ T5915] usb 2-1: Manufacturer: syz [ 104.734106][ T5915] usb 2-1: SerialNumber: syz [ 104.769304][ T5915] usb 2-1: config 0 descriptor?? [ 105.048928][ T6011] loop2: detected capacity change from 0 to 7 [ 105.094106][ T6011] Dev loop2: unable to read RDB block 7 [ 105.105966][ T6011] loop2: unable to read partition table [ 105.119376][ T6011] loop2: partition table beyond EOD, truncated [ 105.126980][ T6011] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 105.206693][ T5198] Dev loop2: unable to read RDB block 7 [ 105.213198][ T5198] loop2: unable to read partition table [ 105.239389][ T5198] loop2: partition table beyond EOD, truncated [ 105.346394][ T985] usb 3-1: USB disconnect, device number 3 [ 105.368639][ T985] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 105.425696][ T985] cp210x 3-1:0.0: device disconnected [ 105.504862][ T6013] netlink: 16 bytes leftover after parsing attributes in process `syz.4.27'. [ 105.995628][ T5906] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 106.161959][ T5906] usb 3-1: Using ep0 maxpacket: 8 [ 106.267782][ T5906] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.301929][ T5906] usb 3-1: config 0 has no interfaces? [ 106.315708][ T5929] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 106.328298][ T5906] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 106.352261][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.400332][ T5906] usb 3-1: config 0 descriptor?? [ 106.485291][ T5929] usb 4-1: device descriptor read/64, error -71 [ 106.823834][ T30] audit: type=1326 audit(1759931502.198:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6014 comm="syz.2.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe66098eec9 code=0x7ffc0000 [ 106.909858][ T30] audit: type=1326 audit(1759931502.198:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6014 comm="syz.2.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe66098d710 code=0x7ffc0000 [ 106.935695][ T5929] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 106.971229][ T30] audit: type=1326 audit(1759931502.198:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6014 comm="syz.2.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe66098d710 code=0x7ffc0000 [ 106.996038][ T30] audit: type=1326 audit(1759931502.198:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6014 comm="syz.2.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe66098eec9 code=0x7ffc0000 [ 107.020409][ T30] audit: type=1326 audit(1759931502.198:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6014 comm="syz.2.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7fe66098eec9 code=0x7ffc0000 [ 107.050845][ T30] audit: type=1326 audit(1759931502.198:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6014 comm="syz.2.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe66098eec9 code=0x7ffc0000 [ 107.092019][ T30] audit: type=1326 audit(1759931502.198:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6014 comm="syz.2.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe66098eec9 code=0x7ffc0000 [ 107.121031][ T30] audit: type=1400 audit(1759931502.198:9): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=6014 comm="syz.2.29" [ 107.121635][ T5929] usb 4-1: device descriptor read/64, error -71 [ 107.150528][ T30] audit: type=1326 audit(1759931502.198:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6014 comm="syz.2.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe66098eec9 code=0x7ffc0000 [ 107.174885][ T30] audit: type=1326 audit(1759931502.198:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6014 comm="syz.2.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe66098eec9 code=0x7ffc0000 [ 107.207791][ T10] usb 2-1: USB disconnect, device number 2 [ 107.225406][ T5906] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 107.309016][ T5929] usb usb4-port1: attempt power cycle [ 107.395938][ T5906] usb 1-1: Using ep0 maxpacket: 32 [ 107.404960][ T5906] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 107.414290][ T5906] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 107.429909][ T5906] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 107.514731][ T5906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 107.535208][ T5906] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 107.545527][ T5906] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 107.574081][ T5906] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 107.595342][ T5906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.615604][ T10] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 107.656146][ T5906] usb 1-1: config 0 descriptor?? [ 107.680724][ T5929] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 107.706287][ T5929] usb 4-1: device descriptor read/8, error -71 [ 107.779550][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 107.792316][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 107.805033][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 107.818953][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 107.843251][ T10] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 107.853542][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.862449][ T10] usb 2-1: Product: syz [ 107.867426][ T10] usb 2-1: Manufacturer: syz [ 107.872586][ T10] usb 2-1: SerialNumber: syz [ 107.900185][ T5906] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 107.926257][ T10] usb 2-1: config 0 descriptor?? [ 107.951562][ T10] input: KB Gear Tablet as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input5 [ 107.965318][ T5929] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 108.008007][ T5929] usb 4-1: device descriptor read/8, error -71 [ 108.104177][ T10] usb 1-1: USB disconnect, device number 6 [ 108.161281][ C0] kbtab 2-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 108.187051][ T985] usb 2-1: USB disconnect, device number 3 [ 108.201668][ T10] usblp0: removed [ 108.246745][ T5929] usb usb4-port1: unable to enumerate USB device [ 108.639575][ T5929] usb 3-1: USB disconnect, device number 4 [ 109.102861][ T6046] loop2: detected capacity change from 0 to 7 [ 109.110147][ T6043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.36'. [ 109.126855][ T6046] Dev loop2: unable to read RDB block 7 [ 109.147098][ T6043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.36'. [ 109.158878][ T6046] loop2: unable to read partition table [ 109.183476][ T6046] loop2: partition table beyond EOD, truncated [ 109.191936][ T6046] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 109.250515][ T6043] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 109.537937][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 109.685284][ T10] usb 1-1: device descriptor read/64, error -71 [ 109.935464][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 110.031645][ T6054] netlink: 124 bytes leftover after parsing attributes in process `syz.2.41'. [ 110.082359][ T6054] netlink: 124 bytes leftover after parsing attributes in process `syz.2.41'. [ 110.107842][ T10] usb 1-1: device descriptor read/64, error -71 [ 110.191727][ T6054] Zero length message leads to an empty skb [ 110.252400][ T10] usb usb1-port1: attempt power cycle [ 110.572882][ T6066] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 110.584984][ T6066] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 110.615301][ T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 110.617633][ T6068] netlink: 'syz.4.45': attribute type 5 has an invalid length. [ 110.705972][ T10] usb 1-1: device descriptor read/8, error -71 [ 110.965289][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 111.096145][ T10] usb 1-1: device descriptor read/8, error -71 [ 111.240316][ T10] usb usb1-port1: unable to enumerate USB device [ 111.537712][ T6080] netlink: 24 bytes leftover after parsing attributes in process `syz.4.47'. [ 111.576680][ T6080] netlink: 24 bytes leftover after parsing attributes in process `syz.4.47'. [ 113.044535][ T6107] vlan2: entered promiscuous mode [ 113.062274][ T6107] macvlan1: entered promiscuous mode [ 113.110185][ T115] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 113.347453][ T6111] netlink: 'syz.0.53': attribute type 10 has an invalid length. [ 113.356882][ T115] usb 3-1: device descriptor read/64, error -71 [ 113.420918][ T6111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.438791][ T6111] team0: Port device bond0 added [ 113.550525][ T5906] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 113.715225][ T115] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 113.885314][ T5906] usb 4-1: Using ep0 maxpacket: 32 [ 113.893565][ T5906] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.936171][ T115] usb 3-1: device descriptor read/64, error -71 [ 113.943896][ T5906] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 113.953541][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.974545][ T5906] usb 4-1: Product: syz [ 113.992320][ T5906] usb 4-1: Manufacturer: syz [ 114.014495][ T5906] usb 4-1: SerialNumber: syz [ 114.032513][ T5906] usb 4-1: config 0 descriptor?? [ 114.046071][ T115] usb usb3-port1: attempt power cycle [ 114.091275][ T5906] smsc95xx v2.0.0 [ 114.095017][ T5906] smsc95xx 4-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 114.109530][ T5906] smsc95xx 4-1:0.0: probe with driver smsc95xx failed with error -22 [ 114.125331][ T5929] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 114.281196][ T5929] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 114.289533][ T5929] usb 2-1: config 0 has no interface number 0 [ 114.300013][ T5929] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 114.323768][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.347607][ T5929] usb 2-1: Product: syz [ 114.355384][ T5929] usb 2-1: Manufacturer: syz [ 114.362525][ T5929] usb 2-1: SerialNumber: syz [ 114.389044][ T5929] usb 2-1: config 0 descriptor?? [ 114.395259][ T115] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 114.458560][ T115] usb 3-1: device descriptor read/8, error -71 [ 114.597408][ T5929] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state [ 114.608990][ T5929] usb 2-1: Direct firmware load for dvb-usb-ec168.fw failed with error -2 [ 114.618414][ T5929] usb 2-1: Falling back to sysfs fallback for: dvb-usb-ec168.fw [ 114.705488][ T115] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 114.736282][ T115] usb 3-1: device descriptor read/8, error -71 [ 114.930640][ T6117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.959161][ T115] usb usb3-port1: unable to enumerate USB device [ 114.988564][ T6117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.535498][ T5926] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 115.761996][ T5926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.784869][ T5926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.832089][ T5926] usb 5-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 115.844341][ T5926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.884271][ T5926] usb 5-1: config 0 descriptor?? [ 116.306001][ T985] usb 4-1: USB disconnect, device number 6 [ 116.349260][ T5926] hid_mf 0003:0079:1846.0003: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.4-1/input0 [ 116.391425][ T5926] hid_mf 0003:0079:1846.0003: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler [ 116.478090][ T115] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 116.612107][ T5926] usb 5-1: USB disconnect, device number 4 [ 116.646786][ T115] usb 3-1: Using ep0 maxpacket: 8 [ 116.682732][ T115] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 116.699845][ T115] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.771395][ T115] pvrusb2: Hardware description: Terratec Grabster AV400 [ 116.830484][ T115] pvrusb2: ********** [ 116.834537][ T115] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 116.922742][ T115] pvrusb2: Important functionality might not be entirely working. [ 116.924389][ T6143] fido_id[6143]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 116.979502][ T115] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 117.020635][ T115] pvrusb2: ********** [ 117.082736][ T2346] pvrusb2: Invalid write control endpoint [ 117.118224][ T115] usb 3-1: USB disconnect, device number 9 [ 117.192917][ T2346] pvrusb2: Invalid write control endpoint [ 117.201202][ T2346] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 117.230263][ T2346] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 117.284818][ T2346] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 117.330319][ T2346] pvrusb2: Device being rendered inoperable [ 117.377149][ T2346] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 117.393393][ T2346] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 117.435076][ T2346] pvrusb2: Attached sub-driver cx25840 [ 117.499768][ T2346] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 117.521559][ T2346] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 118.055399][ T115] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 118.786037][ T115] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 118.802718][ T115] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 118.805440][ T985] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 118.850511][ T115] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.907443][ T115] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 119.005339][ T985] usb 5-1: device descriptor read/64, error -71 [ 119.017910][ T115] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 119.325241][ T6169] delete_channel: no stack [ 119.363877][ T115] usb 3-1: USB disconnect, device number 10 [ 119.398514][ T6142] udevd[6142]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 119.553948][ T985] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 119.716167][ T6185] kernel profiling enabled (shift: 17) [ 119.801228][ T985] usb 5-1: device descriptor read/64, error -71 [ 119.965711][ T985] usb usb5-port1: attempt power cycle [ 120.357539][ T985] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 120.585713][ T985] usb 5-1: device not accepting address 7, error -71 [ 120.899327][ T6194] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 121.339414][ T6201] capability: warning: `syz.3.74' uses deprecated v2 capabilities in a way that may be insecure [ 121.370240][ T6198] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 121.557835][ T6210] syz.3.76 uses obsolete (PF_INET,SOCK_PACKET) [ 121.643053][ T6205] netlink: 'syz.4.73': attribute type 4 has an invalid length. [ 122.705248][ T985] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 122.866083][ T985] usb 1-1: Using ep0 maxpacket: 8 [ 122.868571][ T985] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 122.868605][ T985] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.871550][ T985] usb 1-1: config 0 descriptor?? [ 122.904810][ T6224] dlm: non-version read from control device 36 [ 124.126851][ T6226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.81'. [ 124.184964][ T6228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.81'. [ 124.205861][ T6228] vlan2: entered promiscuous mode [ 124.211447][ T6228] syz_tun: entered promiscuous mode [ 124.685309][ T5926] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 124.725310][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 124.861506][ T5926] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 124.880753][ T5926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 124.899744][ T985] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 124.915512][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 124.916015][ T985] asix 1-1:0.0: probe with driver asix failed with error -71 [ 124.927836][ T10] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 124.936549][ T5926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 124.948840][ T985] usb 1-1: USB disconnect, device number 11 [ 124.956644][ T10] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 124.967685][ T5926] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 124.980913][ T5926] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 124.987128][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 124.990558][ T5926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.013087][ T5926] usb 4-1: config 0 descriptor?? [ 125.027386][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 125.042384][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 125.058289][ T10] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 125.069880][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.085692][ T10] usb 5-1: Product: syz [ 125.095213][ T10] usb 5-1: Manufacturer: syz [ 125.099887][ T10] usb 5-1: SerialNumber: syz [ 125.119714][ T10] usb 5-1: config 0 descriptor?? [ 125.127999][ T10] hub 5-1:0.0: bad descriptor, ignoring hub [ 125.133990][ T10] hub 5-1:0.0: probe with driver hub failed with error -5 [ 125.147553][ T10] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input6 [ 125.300564][ T6244] netlink: 'syz.2.84': attribute type 12 has an invalid length. [ 125.412808][ T5906] usb 5-1: USB disconnect, device number 9 [ 125.429688][ T6233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.447382][ T6233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.962096][ T985] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 126.138528][ T985] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 126.171386][ T985] usb 5-1: config 0 has no interface number 0 [ 126.263262][ T985] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 126.308835][ T985] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.335299][ T985] usb 5-1: Product: syz [ 126.353769][ T985] usb 5-1: Manufacturer: syz [ 126.362449][ T985] usb 5-1: SerialNumber: syz [ 126.378641][ T985] usb 5-1: config 0 descriptor?? [ 126.774205][ T6249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.902263][ T6249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.976041][ T5926] usbhid 4-1:0.0: can't add hid device: -71 [ 126.982228][ T5926] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 127.012353][ T985] keyspan 5-1:0.133: Keyspan 1 port adapter converter detected [ 127.034132][ T5926] usb 4-1: USB disconnect, device number 7 [ 127.060490][ T985] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 81 [ 127.093922][ T985] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 1 [ 127.103243][ T985] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 2 [ 127.152732][ T985] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 127.314694][ T6268] netlink: 'syz.2.90': attribute type 1 has an invalid length. [ 127.416600][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.432636][ T5883] usb 5-1: USB disconnect, device number 10 [ 127.443218][ T5883] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 127.492987][ T5883] keyspan 5-1:0.133: device disconnected [ 127.521396][ T6268] dlm: no locking on control device [ 127.667411][ T6269] veth3: entered promiscuous mode [ 127.906693][ T6273] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 128.193344][ T6277] netlink: 28 bytes leftover after parsing attributes in process `syz.1.93'. [ 128.204595][ T6277] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 128.211034][ T6277] [U] J"—e:ÀÆ" [ 128.866492][ T115] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 129.509092][ T115] usb 3-1: Using ep0 maxpacket: 32 [ 129.523890][ T115] usb 3-1: config 0 has an invalid interface number: 38 but max is 0 [ 129.539342][ T115] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.563696][ T115] usb 3-1: config 0 has no interface number 0 [ 129.582069][ T115] usb 3-1: config 0 interface 38 altsetting 157 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 129.640228][ T115] usb 3-1: config 0 interface 38 has no altsetting 0 [ 129.708492][ T115] usb 3-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=7f.b3 [ 129.785273][ T115] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.876734][ T115] usb 3-1: Product: syz [ 129.904870][ T115] usb 3-1: Manufacturer: syz [ 129.941882][ T115] usb 3-1: SerialNumber: syz [ 129.988568][ T115] usb 3-1: config 0 descriptor?? [ 130.224881][ T115] hub 3-1:0.38: bad descriptor, ignoring hub [ 130.232507][ T115] hub 3-1:0.38: probe with driver hub failed with error -5 [ 130.246244][ T115] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 130.254758][ T115] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 130.274034][ T115] gspca_pac7302 3-1:0.38: probe with driver gspca_pac7302 failed with error -71 [ 130.350403][ T115] usb 3-1: USB disconnect, device number 11 [ 130.895857][ T115] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 131.036750][ T115] usb 1-1: device descriptor read/64, error -71 [ 131.325601][ T115] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 131.465249][ T115] usb 1-1: device descriptor read/64, error -71 [ 131.597213][ T115] usb usb1-port1: attempt power cycle [ 131.827041][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 131.835409][ T5883] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 131.935297][ T115] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 131.977748][ T115] usb 1-1: device descriptor read/8, error -71 [ 131.989304][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 131.990966][ T5883] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 132.001724][ T9] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 132.014340][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.022880][ T9] usb 4-1: Product: syz [ 132.024722][ T5883] usb 3-1: config 1 has an invalid descriptor of length 158, skipping remainder of the config [ 132.028380][ T9] usb 4-1: Manufacturer: syz [ 132.042306][ T9] usb 4-1: SerialNumber: syz [ 132.053187][ T5883] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 132.070714][ T5883] usb 3-1: config 1 has no interface number 1 [ 132.074692][ T9] usb 4-1: config 0 descriptor?? [ 132.089864][ T5883] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 132.093022][ T9] ums-onetouch 4-1:0.0: USB Mass Storage device detected [ 132.105657][ T5883] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 132.126905][ T5883] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 132.139153][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.147915][ T5883] usb 3-1: Product: syz [ 132.152177][ T5883] usb 3-1: Manufacturer: syz [ 132.156959][ T5883] usb 3-1: SerialNumber: syz [ 132.255273][ T115] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 132.290866][ T115] usb 1-1: device descriptor read/8, error -71 [ 132.402350][ T5883] usb 3-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 132.416050][ T115] usb usb1-port1: unable to enumerate USB device [ 132.426863][ T5883] usb 3-1: MIDIStreaming interface descriptor not found [ 132.501505][ T6334] 8021q: adding VLAN 0 to HW filter on device bond1 [ 132.524314][ T6333] bond1: option mode: unable to set because the bond device is up [ 132.562851][ T115] usb 4-1: USB disconnect, device number 8 [ 132.563626][ T5883] usb 3-1: USB disconnect, device number 12 [ 132.796762][ T5918] udevd[5918]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 133.125356][ T5926] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 133.326049][ T5926] usb 5-1: Using ep0 maxpacket: 8 [ 133.342405][ T5926] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.398553][ T5926] usb 5-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 133.407872][ T5883] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 133.425503][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.441473][ T5926] usb 5-1: Product: syz [ 133.448702][ T5926] usb 5-1: Manufacturer: syz [ 133.457767][ T5926] usb 5-1: SerialNumber: syz [ 133.475606][ T5926] usb 5-1: config 0 descriptor?? [ 133.533265][ T5926] cdc_phonet 5-1:0.0: probe with driver cdc_phonet failed with error -22 [ 133.596386][ T5883] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.607010][ T5883] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 133.682581][ T5883] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 133.693616][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 133.716789][ T5883] usb 3-1: SerialNumber: syz [ 133.767844][ T6349] netlink: 28 bytes leftover after parsing attributes in process `syz.1.110'. [ 133.840083][ T6349] syzkaller1: entered promiscuous mode [ 133.849200][ T6349] syzkaller1: entered allmulticast mode [ 133.968757][ T5883] usb 3-1: 0:2 : does not exist [ 133.984351][ T5883] usb 3-1: USB disconnect, device number 13 [ 134.017805][ T6362] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 134.055374][ T5915] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 134.093045][ T6353] udevd[6353]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 134.134977][ T6362] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 134.190452][ T6362] Cannot find add_set index 0 as target [ 134.266613][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.280152][ T5915] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 134.366589][ T5915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.389153][ T5915] usb 1-1: config 0 descriptor?? [ 134.826005][ T6360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.837160][ T6360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.892851][ T5915] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 134.936850][ T5915] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0004/input/input7 [ 135.074604][ T5915] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 135.828045][ T985] usb 1-1: USB disconnect, device number 16 [ 135.934820][ T5915] usb 5-1: USB disconnect, device number 11 [ 136.108297][ T6400] netlink: 60 bytes leftover after parsing attributes in process `syz.4.123'. [ 136.665275][ T985] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 136.825202][ T985] usb 5-1: Using ep0 maxpacket: 8 [ 136.914038][ T985] usb 5-1: unable to get BOS descriptor or descriptor too short [ 136.998016][ T985] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 137.025248][ T985] usb 5-1: can't read configurations, error -71 [ 137.991973][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 137.992020][ T30] audit: type=1326 audit(1759931533.378:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6429 comm="syz.2.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe66098eec9 code=0x7ffc0000 [ 138.066646][ T30] audit: type=1326 audit(1759931533.378:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6429 comm="syz.2.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fe66098eec9 code=0x7ffc0000 [ 138.089560][ T30] audit: type=1326 audit(1759931533.378:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6429 comm="syz.2.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe66098eec9 code=0x7ffc0000 [ 138.111644][ C0] vkms_vblank_simulate: vblank timer overrun [ 138.119469][ T30] audit: type=1326 audit(1759931533.378:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6429 comm="syz.2.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7fe66098eec9 code=0x7ffc0000 [ 138.141515][ C0] vkms_vblank_simulate: vblank timer overrun [ 138.178450][ T30] audit: type=1326 audit(1759931533.378:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6429 comm="syz.2.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe66098eec9 code=0x7ffc0000 [ 138.202202][ T30] audit: type=1326 audit(1759931533.378:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6429 comm="syz.2.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fe66098eec9 code=0x7ffc0000 [ 138.224434][ C0] vkms_vblank_simulate: vblank timer overrun [ 138.245296][ T30] audit: type=1326 audit(1759931533.378:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6429 comm="syz.2.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe66098eec9 code=0x7ffc0000 [ 138.246289][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.268084][ T30] audit: type=1326 audit(1759931533.378:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6429 comm="syz.2.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe66098d97f code=0x7ffc0000 [ 138.296413][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.412879][ T30] audit: type=1326 audit(1759931533.378:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6429 comm="syz.2.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe66098eec9 code=0x7ffc0000 [ 138.563561][ T30] audit: type=1326 audit(1759931533.378:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6429 comm="syz.2.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe66098eec9 code=0x7ffc0000 [ 139.214983][ T6434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.241542][ T6434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.499821][ T5915] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 139.668363][ T5915] usb 4-1: Using ep0 maxpacket: 16 [ 139.677672][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.695264][ T5906] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 139.695539][ T5915] usb 4-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 139.949301][ T5906] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 139.973861][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.988304][ T5906] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 140.073899][ T5915] usb 4-1: config 0 descriptor?? [ 140.234281][ T5906] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 140.299866][ T6443] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 140.355286][ T5915] usbhid 4-1:0.0: can't add hid device: -71 [ 140.361357][ T5915] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 140.592464][ T5906] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 140.633602][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.729493][ T5906] usb 3-1: Product: syz [ 140.955290][ T5915] usb 4-1: USB disconnect, device number 9 [ 140.985915][ T5906] usb 3-1: Manufacturer: syz [ 141.027019][ T5906] usb 3-1: SerialNumber: syz [ 141.343579][ T5906] usb 3-1: config 0 descriptor?? [ 141.405917][ T6437] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 141.413275][ T6437] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 143.068731][ T5906] usb 3-1: ucan: probing device on interface #0 [ 144.605173][ C1] sched: DL replenish lagged too much [ 199.840905][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.884762][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 247.525091][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 247.532132][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6411/1:b..l [ 247.540439][ C0] rcu: (detected by 0, t=10503 jiffies, g=16333, q=834827 ncpus=2) [ 247.548529][ C0] task:syz.3.122 state:R running task stack:20904 pid:6411 tgid:6411 ppid:5837 task_flags:0x40064c flags:0x00080003 [ 247.562955][ C0] Call Trace: [ 247.566273][ C0] [ 247.569240][ C0] __schedule+0x1798/0x4cc0 [ 247.573809][ C0] ? __pfx___schedule+0x10/0x10 [ 247.578673][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 247.583968][ C0] ? unwind_get_return_address+0x4d/0x90 [ 247.589642][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 247.595315][ C0] preempt_schedule_irq+0xb5/0x150 [ 247.600450][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 247.606207][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 247.612052][ C0] irqentry_exit+0x6f/0x90 [ 247.616549][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 247.622582][ C0] RIP: 0010:unwind_next_frame+0x12d6/0x2390 [ 247.628514][ C0] Code: 8b 7c 24 18 e8 ab 02 b2 00 48 8b 44 24 18 48 8b 10 48 c7 c7 00 6e 68 8b 89 de e8 05 62 b4 ff e9 43 06 00 00 49 89 d5 48 89 d5 <48> 89 d8 48 29 e8 48 89 c1 48 c1 f9 02 48 c1 e8 3f 48 01 c8 48 83 [ 247.648148][ C0] RSP: 0018:ffffc9001ae06d98 EFLAGS: 00000246 [ 247.654223][ C0] RAX: ffffffff90206584 RBX: ffffffff9020658c RCX: ffffffff9020658c [ 247.662197][ C0] RDX: ffffffff90206584 RSI: ffffffff90d2ab96 RDI: ffffffff8bc07480 [ 247.670169][ C0] RBP: ffffffff9020658c R08: 0000000000000010 R09: ffffffff81731db5 [ 247.678144][ C0] R10: ffffc9001ae06eb8 R11: ffffffff81abbcd0 R12: ffffffff8b4b404a [ 247.686117][ C0] R13: ffffffff90206588 R14: ffffc9001ae06e68 R15: ffffffff90206588 [ 247.694106][ C0] ? exc_page_fault+0xaa/0x100 [ 247.698879][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 247.705036][ C0] ? unwind_next_frame+0xa5/0x2390 [ 247.710162][ C0] ? unwind_next_frame+0xd4/0x2390 [ 247.715280][ C0] ? unwind_next_frame+0xa5/0x2390 [ 247.720419][ C0] ? exc_page_fault+0xab/0x100 [ 247.725204][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 247.731403][ C0] arch_stack_walk+0x11c/0x150 [ 247.736190][ C0] ? exc_page_fault+0xab/0x100 [ 247.740966][ C0] stack_trace_save+0x9c/0xe0 [ 247.745666][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 247.751060][ C0] save_stack+0xf5/0x1f0 [ 247.755340][ C0] ? __pfx_save_stack+0x10/0x10 [ 247.760216][ C0] ? free_unref_folios+0xdb3/0x14f0 [ 247.765422][ C0] ? folios_put_refs+0x584/0x670 [ 247.770381][ C0] ? shmem_undo_range+0x49e/0x14b0 [ 247.775510][ C0] ? shmem_evict_inode+0x272/0xa70 [ 247.780636][ C0] ? evict+0x501/0x9c0 [ 247.784713][ C0] ? __dentry_kill+0x209/0x660 [ 247.789474][ C0] ? dput+0x19f/0x2b0 [ 247.793460][ C0] ? __fput+0x68e/0xa70 [ 247.797630][ C0] ? task_work_run+0x1d1/0x260 [ 247.802418][ C0] ? do_exit+0x6b5/0x2300 [ 247.806757][ C0] ? do_group_exit+0x21c/0x2d0 [ 247.811529][ C0] ? get_signal+0x1285/0x1340 [ 247.816214][ C0] ? arch_do_signal_or_restart+0xa0/0x790 [ 247.821938][ C0] ? irqentry_exit_to_user_mode+0x7e/0x110 [ 247.827745][ C0] ? exc_page_fault+0xab/0x100 [ 247.832515][ C0] ? page_ext_put+0x97/0xc0 [ 247.837031][ C0] __reset_page_owner+0x71/0x1f0 [ 247.841980][ C0] free_unref_folios+0xdb3/0x14f0 [ 247.847043][ C0] ? folio_unqueue_deferred_split+0x93/0x230 [ 247.853028][ C0] folios_put_refs+0x584/0x670 [ 247.857804][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 247.863094][ C0] ? folio_batch_remove_exceptionals+0x18c/0x1f0 [ 247.869432][ C0] shmem_undo_range+0x49e/0x14b0 [ 247.874389][ C0] ? __pfx_shmem_undo_range+0x10/0x10 [ 247.879819][ C0] ? kernel_text_address+0xa5/0xe0 [ 247.884935][ C0] ? __kernel_text_address+0xd/0x40 [ 247.890154][ C0] ? stack_depot_save_flags+0x40/0x860 [ 247.895614][ C0] ? kernel_text_address+0xa5/0xe0 [ 247.900746][ C0] ? kasan_save_stack+0x4d/0x60 [ 247.905602][ C0] ? kasan_save_stack+0x3e/0x60 [ 247.910455][ C0] ? kasan_record_aux_stack+0xbd/0xd0 [ 247.915852][ C0] ? call_rcu+0x157/0x9c0 [ 247.920192][ C0] shmem_evict_inode+0x272/0xa70 [ 247.925142][ C0] ? inode_wait_for_writeback+0xf9/0x290 [ 247.930785][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 247.936278][ C0] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 247.942360][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 247.947568][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 247.953036][ C0] evict+0x501/0x9c0 [ 247.956944][ C0] ? __pfx_evict+0x10/0x10 [ 247.961389][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 247.966607][ C0] ? _raw_spin_unlock+0x28/0x50 [ 247.971464][ C0] ? iput+0x946/0xc50 [ 247.975452][ C0] __dentry_kill+0x209/0x660 [ 247.980040][ C0] ? dput+0x37/0x2b0 [ 247.983940][ C0] dput+0x19f/0x2b0 [ 247.987839][ C0] __fput+0x68e/0xa70 [ 247.991833][ C0] task_work_run+0x1d1/0x260 [ 247.996431][ C0] ? __pfx_task_work_run+0x10/0x10 [ 248.001547][ C0] ? do_exit+0x6b0/0x2300 [ 248.005896][ C0] ? kmem_cache_free+0x19b/0x690 [ 248.010866][ C0] do_exit+0x6b5/0x2300 [ 248.015039][ C0] ? __pfx_do_exit+0x10/0x10 [ 248.019752][ C0] do_group_exit+0x21c/0x2d0 [ 248.024345][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 248.029548][ C0] get_signal+0x1285/0x1340 [ 248.034078][ C0] arch_do_signal_or_restart+0xa0/0x790 [ 248.039635][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 248.045803][ C0] ? __bad_area_nosemaphore+0x3fb/0x780 [ 248.051362][ C0] ? local_irq_enable_exit_to_user+0x5/0x10 [ 248.057270][ C0] irqentry_exit_to_user_mode+0x7e/0x110 [ 248.062913][ C0] exc_page_fault+0xab/0x100 [ 248.067507][ C0] asm_exc_page_fault+0x26/0x30 [ 248.072355][ C0] RIP: 0033:0x2141f1c0 [ 248.076436][ C0] RSP: 002b:0000200000000128 EFLAGS: 00010217 [ 248.082500][ C0] RAX: 0000000000000000 RBX: 00007fdd939e6090 RCX: 00007fdd9378eec9 [ 248.090470][ C0] RDX: 0000200000000000 RSI: 0000200000000120 RDI: 0000000144020080 [ 248.098439][ C0] RBP: 00007fdd93811f91 R08: 0000200000000340 R09: 0000200000000340 [ 248.106411][ C0] R10: 0000200000000140 R11: 0000000000000202 R12: 0000000000000000 [ 248.114381][ C0] R13: 00007fdd939e6128 R14: 00007fdd939e6090 R15: 00007fdd93b0fa28 [ 248.122387][ C0]