last executing test programs: 4m4.906637476s ago: executing program 2 (id=168): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80000000}], 0x1c) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) syz_open_procfs(r1, &(0x7f0000000200)='net/ip_mr_vif\x00') socket$igmp(0x2, 0x3, 0x2) sendto$inet6(r0, &(0x7f0000000080)='M', 0x1, 0x400c040, &(0x7f0000000140)={0xa, 0x4e20, 0xfffff169, @private1, 0x3}, 0x1c) 4m4.812502725s ago: executing program 2 (id=169): mbind(&(0x7f00003d1000/0x4000)=nil, 0x4000, 0x8003, &(0x7f0000000000)=0xc76, 0x7, 0x6) r0 = fsopen(&(0x7f0000000000)='udf\x00', 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) syz_io_uring_setup(0x3dbc, &(0x7f0000000040)={0x0, 0x7b, 0x200, 0x3, 0x4d}, &(0x7f00000000c0)=0x0, &(0x7f0000000100), &(0x7f0000000140)) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ca6000/0x1000)=nil, 0x1000, 0x8, 0x2010, r0, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000b27000/0x1000)=nil, 0x1000, 0x1000001, 0x13, 0xffffffffffffffff, 0x10000000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000180)={'erspan0\x00', 0x0, 0x80, 0x80, 0x6fa09cd4, 0x2, {{0x6, 0x4, 0x1, 0x7, 0x18, 0x64, 0x0, 0xe, 0x2d, 0x0, @rand_addr=0x64010100, @private=0xa010101, {[@noop]}}}}}) r5 = syz_io_uring_setup(0x7b6, &(0x7f0000000080)={0x0, 0xe5e4, 0x3001, 0x0, 0x400000, 0x0, 0x0}, &(0x7f0000000940)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x6, 0x4000, @fd, 0x8, 0x0, 0x0, 0x0, 0x0, {0x0, r9}}) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x4c, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000008c0)={&(0x7f0000000200)=@can={0x1d, r4}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000280)="d70d73736f0cd911a6a49c4e21a82be3964ca5f778d039393cada8d22571b804bf95fed119a70c96823b2a13730e8e5701cc5e8da38cf988c4f5b39951fd87163ef36dfdfdc13ac0c2644b69960f9725daebecf32cd68fb18ce32e7dbf126c1f22da2f202583544a84a85f05079dfb5c9be37b038a9551ab0b04ce70e08d2ff12164214d129bb01a", 0x88}, {&(0x7f0000000340)="5bf6568deac6ba4ac7bc6682bdfc3b3014bcaea7cac50f72cd52916cd0e8027abc1877adbc8413d5169e6b9a7fa271171d4d57c86f67afab2ea295bc25e485e9b377d477ac467ad0e68f27fa22ebfc159cc73c040ca92271cc60df60f92b504069161dc009a27488c7f59dcc33558adf369afe0604fda95c4f3d13548838665b7eb5922133b72332023609d90d395f0623802a0f223ea0a5fce1dd93882f20a595f52d0a6c60b2e8b49f1902ccd500d60b45685a4e91d0c5ae8232e899d9adf46cd4a3965f50d200cca5f7b82ae89bc1db7393fdaf6f2eb08bd9cf33e8cac56933514b586734e2", 0xe7}], 0x2, &(0x7f0000000480)=[{0x108, 0x29, 0x419, "52c9d5731b7cba9245ea79b58e9b795dbacdd9966cb9381f3e4d1d0f2eb41fa49ede2e6beb3f6d027166cbe2ddfd422025eaf3658b545281f448b9bd4a43ef9d586de2ca0ca57f0ba6e7adf03ffca0037b47d1e426e4f79db9878090906081d5c0ca5cfced65f0c976f332264a980c67e2057ad15bfcd04903f0e0c7924fff96332023bb1074c0d1678639854ae2d270b1361346beb60e7444caa26d6352ca47bd73a0b316a8b04981c293abd82c8e7b296472b146760d303f1773c0be7fb61ffeab5805e516712370e4708f0a57715d4ff3fae745f3eba09a2c6e6dc3466fd97e095ece84e9e3839f7793fc1525285c1208"}, {0x110, 0x101, 0x1, "33b41181a634b1face8c92f051324fc28c143940ebdb8dca27b4cdb81a5c296c228c993a987a8f3de1d54f47b6632808fb21e0f6344f6a119969ff806e9089a611fd23c6756f6e9cc4905bef7c51e39d394ecd84ef0378e7997c850d3a970811118d0f3cb395e012cc82db4e2aa44e3bda581ce7587ec7972c02219e7140b8429917eb9ed3b2ed7d4b171447f6bf75f39da9ed6b31b2c294d22ec2189ad7eee9317885672cd61b9830712ee2ebf1101c3d4ae1f142df5e9cc8b26fec4e8d6bb61ca58c6ddb238fc2f1b08d2bf049b9e849857454ec3100e3e51cb1702a74e11aec599585b2d72b6042c3a97dc2cde3919fc57d79b38b43bed5a76a0e93"}, {0x48, 0x112, 0x8, "913b078ebcb076b0cae5e7542a837309b1d0d9d2fb4ba0c420873a976b2985b53abe9488704e7aacfc6def3190f3c2622affbc49e34566d3"}, {0xe8, 0x10d, 0x20000000, "d6c56c9eeb97c0f43313e7bba653363d727f6a32ed40204ec4779463530ecbf8b34c97ad8bebc9098c2c4ccc04a1199b48b37deffafcbac586e9b2d79a0493053d23963fdb381188c71879d19d98098fb07dbf378d4746d8137cce39523968ff47c72ee5d27b01aefdbb417d280fe86a6c81a17dbe20a1bb9edb4c02b87ce6df80b3b64f290c6e7355f4eabec1f9911cd1114c37491ca7740fed1057a6ed19f763fa2cfcbec946bbc51eea175138ed47643a46e3690d3aed533e5a6685f1ebd0276c8e60308c316a614b7e084938cdd323376f499b0752d5"}, {0xe0, 0x115, 0xfffffffc, "77f998e65e236cfb2eaa34229cbce77042ddc9af9a5191e714e240e85ad862e97ce1e30db79ab38cc90973c49bf0d3f821af6d3df4a52de1734d97a5698d350c7e6b2e2cfcdb8f9f48310b292821206f2346c5834498ca0d221b4c587dc450af9fcff0310a3098831bd61a73238ee3359463a1ad80f764dd092d8d145a734db60e0512374a51fa154bbf5f74ff0859d9bcf40e2f978f1087c35976398cb9a75bf99aa6781f8336084f2457ee2798c34dce3ac8e02160d34001d309f05091c5aef624b44d5a37a4c03f19be88f0e5"}], 0x428}, 0x0, 0x20000000, 0x0, {0x0, r9}}) 4m4.616803963s ago: executing program 2 (id=172): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = memfd_create(&(0x7f0000001000)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r1, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x3) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x400048ba, &(0x7f0000000340)={0x0, 0xfffffffd, 0x20, 0xfffffff7, 0x182}, &(0x7f0000000300), &(0x7f0000ff4000), &(0x7f0000000000)) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, 0x0) syz_usb_connect$rtl8150(0x0, 0x46, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1d}}]}}, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x3b, 0x100000000000000, 0x8, 0x10000000}, 0x0, &(0x7f0000001340)={0x1f, 0xfffffffffffff7fe, 0x0, 0x0, 0x2000, 0x6, 0xfffffffffffffffe, 0x2}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) userfaultfd(0x801) (async) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) (async) memfd_create(&(0x7f0000001000)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0x0) (async) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r1, 0x0) (async) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x3) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) (async) syz_io_uring_setup(0x400048ba, &(0x7f0000000340)={0x0, 0xfffffffd, 0x20, 0xfffffff7, 0x182}, &(0x7f0000000300), &(0x7f0000ff4000), &(0x7f0000000000)) (async) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, 0x0) (async) syz_usb_connect$rtl8150(0x0, 0x46, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1d}}]}}, 0x0) (async) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x3b, 0x100000000000000, 0x8, 0x10000000}, 0x0, &(0x7f0000001340)={0x1f, 0xfffffffffffff7fe, 0x0, 0x0, 0x2000, 0x6, 0xfffffffffffffffe, 0x2}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) (async) 4m3.896012194s ago: executing program 2 (id=173): r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') io_setup(0x8, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x6, r0, &(0x7f0000000080)="f6", 0x1, 0xbc5, 0x0, 0x0, r0}]) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$inet6(r3, &(0x7f0000000200)={&(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0xc}, 0x1c, 0x0, 0x0, &(0x7f0000002d40)=[@flowinfo={{0x12, 0x29, 0xb, 0x8}}], 0x18}, 0x40004) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000100)='./file0\x00') r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0/../file0/../file0/file0\x00', 0x4) 4m3.739202434s ago: executing program 2 (id=174): symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) socket$netlink(0x10, 0x3, 0x6) socket$kcm(0xa, 0x1, 0x87) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async) r0 = syz_io_uring_setup(0x4fa6, &(0x7f0000000100)={0x0, 0xc412, 0x2, 0x1, 0x221}, &(0x7f0000000180), &(0x7f00000002c0), &(0x7f0000000280)) r1 = syz_io_uring_setup(0x3cbc, &(0x7f0000000380)={0x0, 0x4b50, 0x800, 0x1, 0x1e1, 0x0, r0}, &(0x7f0000000400), &(0x7f0000000640), &(0x7f0000000480)) r2 = io_uring_setup(0x1b7b, &(0x7f00000004c0)={0x0, 0xceb1, 0x8000, 0x7, 0x322, 0x0, r1}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0xfffffffffffffec7, 0x0, &(0x7f0000000580), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffb}, 0x50) r3 = socket$inet(0x2, 0x800, 0x8) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x60}], 0x1}, 0x0) (async) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r4, 0xc01464a6, &(0x7f0000000340)) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) (async) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) r7 = eventfd2(0xd, 0x800) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000000)={0x8, 0x0, 0x0, r7}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (rerun: 32) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r7, &(0x7f0000000040)={0x4000}) r10 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_RUN(r10, 0xae80, 0x0) (async) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r11) 4m3.436386798s ago: executing program 2 (id=177): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="cc0000001b0001000000000000000000fc000000000000000000000000000001640101020000000000000000000000000000000000000000e26400002f000000bcb36a141ed97a40f27bdcaa494601d538a67ee139bf2d18eed84b052c3c6af1d6929261d5093b477e26f0b2dbd68e63b752f52ffe3f8687d1049cac9fb667a0b1167a362e57d2e6e7d9f985eaa5458ddb0fe8be9148d37688681cab3103dd78c89b56085d71dfd4e385b06b5923164e2d0c4b77827bda738ef4f0252c08921d219a79a7f8062f599decc68908917b06af04609485efda7ae6afce5b4190a2681e6bfdddf47cddaf4bade37444f8670918670887cbfc17b827d7764d7ba53990df0292732f10c0493c79ffe1d3a969c87a2e463f834a0ab21faa321ac89ba119a59f4d09df2a01fa941e933d8454975bc1e817fc6a122fdd009139b2a2b8", @ANYRES32=r0, @ANYRES16=r1, @ANYBLOB="645b5d7e34a545f4c3cb0a1d0ecd3d70a1ab909f3e155451f558e5241ff8588fa0b85d60eadd3efd2149f98ef467569997ea329b389eab6c6c1dda1fbadcffd72792ae408358c0018fb635f80dff0ce0471dcd42171be4ad6fa5ca5e31790a676fbeb6cb65d11681ba3d2d877adf7e1b62d7357f4eb8850221f7c70ddc8028696ad8a3d8cd3c8c9d82ae670213df57e53ab8063976e27164f6050593de1980e9d870"], 0xcc}}, 0x4080) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0xfd87, 0x5}) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo\x00') getdents64(r3, 0xffffffffffffffff, 0x43) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), 0xffffffffffffffff) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES16=r5, @ANYBLOB="010000000000000000000200000008000300", @ANYRESOCT, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0xd37697ff280d3c4e}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$getregset(0x4204, r7, 0x2, &(0x7f00000001c0)={0x0}) 4m2.767664631s ago: executing program 32 (id=177): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYRES16=r1, @ANYBLOB="645b5d7e34a545f4c3cb0a1d0ecd3d70a1ab909f3e155451f558e5241ff8588fa0b85d60eadd3efd2149f98ef467569997ea329b389eab6c6c1dda1fbadcffd72792ae408358c0018fb635f80dff0ce0471dcd42171be4ad6fa5ca5e31790a676fbeb6cb65d11681ba3d2d877adf7e1b62d7357f4eb8850221f7c70ddc8028696ad8a3d8cd3c8c9d82ae670213df57e53ab8063976e27164f6050593de1980e9d870"], 0xcc}}, 0x4080) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0xfd87, 0x5}) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo\x00') getdents64(r3, 0xffffffffffffffff, 0x43) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), 0xffffffffffffffff) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES16=r5, @ANYBLOB="010000000000000000000200000008000300", @ANYRESOCT, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0xd37697ff280d3c4e}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$getregset(0x4204, r7, 0x2, &(0x7f00000001c0)={0x0}) 1m41.956485171s ago: executing program 4 (id=794): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000b"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0x8800) mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002f00)='fdinfo\x00') syz_open_procfs$namespace(0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000004c0)={r4, r3, 0x9, 0x0, @val=@netkit={@void, @value=r3}}, 0x1c) setsockopt$packet_int(r4, 0x107, 0x3, 0x0, 0x0) kexec_load(0x0, 0x0, 0x0, 0x0) getpid() syz_io_uring_setup(0xcaf, &(0x7f0000000100)={0x0, 0xb601, 0x859, 0x805, 0x32c}, 0x0, &(0x7f00000000c0), &(0x7f0000000000)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x10) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x0, 0xd, 0x0, 0x0, "5deb13561a5fbf61048955f6f876b2ff", 0x0, 0x0, 0xfc}) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r6, r6, r6}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7b13000000000000200012800b00010067656e657665000010000280060005004e2000000400060008000a00b5"], 0x48}}, 0x4000) 1m41.906394077s ago: executing program 0 (id=796): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xf) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2000, 0x0) mknod$loop(&(0x7f0000000340)='./file0\x00', 0x208c, 0x1) fsopen(&(0x7f0000000000)='sockfs\x00', 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mbind(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000180)=0x7fffffffffffffff, 0x77b, 0x3) syz_emit_ethernet(0xae, &(0x7f0000000880)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x78, 0x0, 0x0, @local, @local, {[@dstopts={0x89, 0xe, '\x00', [@generic={0x31, 0x6e, "fa913621b5a2df267f483e43d9b58309590995aa46d548ffd3b795fef52731d3896c94289df9d986f67309f7573613633974f50accf3710d8c5ed7363d4d7ac5f11c7a7961f11a5041acb384f3db60a99de868dd37d1548349c7523845a3342d37511a3d492aed55c4375f97da03"}]}]}}}}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000480)=[@nested_amd_vmload={0x182, 0x18, 0x3}, @wr_drn={0x68, 0x20, {0x3, 0xc4}}, @nested_amd_invlpga={0x17d, 0x20, {0x0, 0xdaae}}, @out_dx={0x6a, 0x28, {0x1581, 0x0, 0x1}}, @nested_create_vm={0x12d, 0x18, 0x8}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @save_area=0x457, 0x10, 0xffff, 0x2}}, @uexit={0x0, 0x18, 0x2}, @enable_nested={0x12c, 0x18}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0x56, 0x2, 0x4, 0x2}}], 0x138}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x1, &(0x7f0000000140)=@raw=[@exit], &(0x7f0000000100)='syzkaller\x00', 0x9}, 0x94) syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ppoll(&(0x7f0000000340)=[{r3, 0x80}], 0x1, &(0x7f0000000480), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004580)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000004000000000000000eb83cf99630000050000000095"], &(0x7f0000000040)='syzkaller\x00', 0x6, 0x1a, &(0x7f0000000200)=""/26, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7ffff, &(0x7f0000006680)) 1m41.261057601s ago: executing program 1 (id=797): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01"], 0x7c}}, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x6e, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffc2, &(0x7f0000000040)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x0, 0x0, 0xf9, 0xfaa, 0x50, @ipv4={'\x00', '\xff\xff', @loopback}, @loopback={0x29, 0xffff888101827518}, 0x20, 0x20, 0x1, 0xfffffff8}}) 1m41.081034371s ago: executing program 3 (id=798): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000208060001080006040001aaaa"], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x100}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0xa}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_OIF={0x8}}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="9fd2d8c9f1f5bcb903f4bd2d87b68b54d24c7b0ff78cad4e0300000000510040ded79af34cda2d", @ANYRESOCT=r0], 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000208060001080006040001aaaa"], 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x100}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0xa}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_OIF={0x8}}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="9fd2d8c9f1f5bcb903f4bd2d87b68b54d24c7b0ff78cad4e0300000000510040ded79af34cda2d", @ANYRESOCT=r0], 0x0, 0x0, 0x0) (async) 1m40.826661803s ago: executing program 3 (id=799): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcb, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/tty/drivers\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x15}, 0x48) (async) pread64(r1, &(0x7f0000000000)=""/75, 0x4b, 0x7984e2f5) 1m40.374260553s ago: executing program 3 (id=800): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10290}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1d, 0x0, 0x0, 0x6}]}}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r3 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000140)={'virt_wifi0\x00', 0x1}) (async) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x80) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) (async) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000480)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2f}}, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e20, 0x0, @empty, 0xfff}, @in={0x2, 0x4e23, @rand_addr=0x64010102}], 0x4c) (async, rerun: 64) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) (rerun: 64) r5 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) (async) r6 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) write$binfmt_script(r6, &(0x7f0000000040)={'#! ', './control/file0'}, 0x13) (async) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r7, 0x6, 0x5, 0xffffffffffffffff, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {0x77359400}, {0x1, 0xc, 0x9, 0xc, 0x3, 0x8, "c12400"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000}) (async) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1) (async, rerun: 32) lgetxattr(0x0, 0x0, &(0x7f00000002c0)=""/203, 0xcb) (async, rerun: 32) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000180)={0x1, 0x6bd4}, 0x8) (async) syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') 1m40.172579738s ago: executing program 4 (id=801): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)) write(0xffffffffffffffff, &(0x7f0000000340), 0x11000) io_setup(0x3fc, &(0x7f0000000500)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x3be2b02884f95c63}]) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) r2 = open(0x0, 0x66842, 0x90) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000100)={0x6, &(0x7f0000000080)=[{0x85, 0xf, 0x53, 0x8}, {0x4, 0x9, 0x0, 0x1}, {0x2, 0x3, 0x5, 0x2}, {0xd, 0x9, 0x0, 0x7}, {0x4, 0x6, 0xfd, 0x79}, {0x4, 0x1, 0x3, 0x2}]}) rt_tgsigqueueinfo(0x0, 0x0, 0xf, &(0x7f0000000000)={0x2b, 0x46, 0x80000001}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a1400000011000180000000000000000000000a00"], 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 1m39.156639058s ago: executing program 1 (id=802): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) (async) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r4, 0xc) lseek(0xffffffffffffffff, 0x6, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x43}, 0x48) r5 = fsmount(0xffffffffffffffff, 0x0, 0x8) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r5, 0x40044104, &(0x7f0000000000)=0x2) 1m39.146545737s ago: executing program 5 (id=803): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r0, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x4ff}) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000000c0)={0xc000000a}) (async) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x8000, 0x85) ioctl$XFS_IOC_FSGETXATTRA(r1, 0x801c582d, &(0x7f0000000140)) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r1, 0x40086e81, &(0x7f0000000180)=0x6778e8ba) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r0, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x1d, &(0x7f0000000280)=[{}, {}], 0x10, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x9d, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0)=r3, 0x4) (async, rerun: 64) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000500)={0x1, @pix_mp={0x8, 0x1, 0x31435641, 0x5, 0x6, [{0x9, 0x8000}, {0x15, 0x2}, {0x5, 0x101}, {0xb062, 0x3}, {0x3ff, 0x800}, {0x7, 0x5}, {0x6b2, 0x9}, {0xffffff7c, 0x3}], 0x7, 0x5, 0x6, 0x2, 0x1}}) (async, rerun: 64) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000600)={0xe, @raw_data="8cd6c9e8fa21c833feb9f1fb3f520b8260f08168e8f6af85f9ffb4cffecacbcc1a564e54288c77855f633868563a6deba65fe8ab66b353653f2657892dd0dcbd3e9167bdd6c23cf56b8bb1aee39eb72d1453ea60bf5746f9b3354405e2a10c13ccd6aed22d79d3d459004d6937da8ea0577eaebe5fc3fedc95acaedae1a0cf77cce41512633e9f5ad4e2637d83041c69e4e09fe641f8b7c3fc672fc9780d9aa7bc3300b53ffd8c46b3b93f9179c66a9679f40bdaf06902fbbd47bdb39235eddaf4ff65332b02a18a"}) (async) connect$unix(r1, &(0x7f0000000700)=@abs={0x0, 0x0, 0x4e20}, 0x6e) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000780)='\x00', &(0x7f00000007c0)='/dev/ocfs2_control\x00', 0x0) (async) ioctl$NILFS_IOCTL_GET_SUSTAT(r4, 0x80306e85, &(0x7f0000000800)) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000840)={0x2, @sliced={0x5, [0x7, 0x7, 0x3, 0x3, 0x7, 0x9, 0x5, 0x4, 0xa, 0x1, 0x401, 0x1000, 0x80, 0x8a2, 0x8, 0x2, 0x4, 0xd2eb, 0xd511, 0x70d, 0x5, 0x9, 0x1, 0x91a, 0xef9, 0x10, 0x6, 0xfff, 0x4, 0x7, 0xf29, 0x3, 0x6, 0x6, 0x0, 0x2, 0xe, 0xdf, 0x1000, 0x1c00, 0xbd1e, 0x9, 0x5, 0xcf8, 0x9, 0x8, 0x4, 0x86], 0x1}}) (async) r5 = syz_open_dev$mouse(&(0x7f0000000980), 0xffff, 0x408100) syz_genetlink_get_family_id$l2tp(&(0x7f0000000940), r5) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE(r5, 0x6, &(0x7f0000000a00)={0x7, 0x0, &(0x7f00000009c0)=[r5, r0, r4, r0, r5, r5, r5, r1]}, 0x8) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x488800, 0x0) ioctl$TUNSETDEBUG(r6, 0x400454c9, &(0x7f0000000a80)=0x2) r7 = syz_open_dev$hiddev(&(0x7f0000000ac0), 0x6, 0x400000) ioctl$HIDIOCGCOLLECTIONINDEX(r7, 0x40184810, &(0x7f0000000b00)={0x3, 0xffffffff, 0x6, 0x7e, 0x3, 0x6}) (async, rerun: 32) syz_open_dev$sndctrl(&(0x7f0000000b40), 0x7fffffff, 0x202000) (async, rerun: 32) ioctl$BLKDISCARDZEROES(r0, 0x127c, &(0x7f0000000b80)) (async) socket$key(0xf, 0x3, 0x2) (async) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000c00)={0x0, &(0x7f0000000bc0)}, 0x10) ioctl$VIDIOC_ENCODER_CMD(r5, 0xc028564d, &(0x7f0000000c40)={0x3, 0x1, [0x8, 0x72, 0x3, 0x800, 0x1, 0x6, 0x10001, 0x5]}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x50, r1, 0xb7c67000) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000e00)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000cc0)=@delqdisc={0xd0, 0x25, 0x10, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x731b8b7658824fa5, 0xe}, {0x2, 0xf}, {0x5, 0xf}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}, @TCA_STAB={0x64, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x52, 0x8, 0x1ff, 0x101, 0x0, 0xaff, 0xfffffffd, 0xa}}, {0x18, 0x2, [0x40, 0x5, 0x9, 0x8, 0x346a, 0x10, 0x9, 0x6, 0xab5, 0x0]}}, {{0x1c, 0x1, {0x40, 0x5, 0x1, 0x5, 0x1, 0x6, 0x4f9, 0x5}}, {0xe, 0x2, [0x2, 0x1, 0xf001, 0x1, 0x5]}}]}, @qdisc_kind_options=@q_mq={0x7}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xfa, 0x4, 0x9bd, 0x80000000, 0x0, 0x4, 0xffffffff, 0x1}}, {0x6, 0x2, [0x92]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x80}, @TCA_RATE={0x6, 0x5, {0xfb, 0x3}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40}, 0x4800) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000e40)="f1b9698ca3db15d2ff609710981c110fd456083a4f5814a35ea477110ceb2704a7df574d7c7d87d62ddd11993ac2d4cd1a01a3aff4803f2f7efd5954c2fa1d892cff648ad04921959eb7e7c5174df90cc26824bf8f07a5ded07e481f104fbdb51c4cf360f4a925f316e0481c49d166ae821cb460e5d48d6b822c185149533c300f2ba1ec7446b644bb39f967b20e5a290a0c6dafef650116e51c3c05de3fca78bebfc052a4f402ead823e038c35880377e1ab4b639d82f7844c554ce68412afc2a01686eeeda31cdd129a68c", 0xcc) read$alg(r6, &(0x7f0000000f40)=""/154, 0x9a) 1m38.993312355s ago: executing program 0 (id=804): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xa9525000) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000580)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0xcc318a6691743d71, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x40702) ioctl$USBDEVFS_CONNECTINFO(r4, 0x80045505, &(0x7f0000002a40)) 1m38.840850838s ago: executing program 3 (id=805): syz_usb_connect$uac1(0x3, 0xa3, &(0x7f00000000c0)=ANY=[@ANYBLOB="12015002000000081e043b3240000102030d09027000030102a0090904000000010100000a240100001a00020102092403040104030681072405060065fd09040100000102000009040101010102000000240201ef010a0673527600240107000100090501090002d008070725010c0808000904020000010200000904020101010200000905820900028061000725010c044a000f8989fb5bd5c86ba9d8cc4d800943b5d51f924c9d1708779f7bee116ec8a326c575ae6ee562c0c7c86bf49c2c5977ed738953d4451c066800d70d9a5eb7cb52fd37a9462592f81e02dc3d001b0b9226125efb42639ce6f15211bd08777e37ba0d701ccf2a"], &(0x7f0000000b00)={0x0, 0x0, 0x12, 0x0}) syz_usb_connect(0x5, 0x1266, &(0x7f0000000b40)={{0x12, 0x1, 0x201, 0xf1, 0xbc, 0xaa, 0x40, 0x413c, 0x81e6, 0x2a27, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1254, 0x4, 0x9, 0xe, 0x40, 0xe, "", [{{0x9, 0x4, 0x0, 0x4, 0x10, 0x31, 0xb0, 0x8f, 0x4, [@hid_hid={0x9, 0x21, 0x9, 0x3, 0x1, {0x22, 0x884}}], [{{0x9, 0x5, 0xd, 0x0, 0x0, 0xc, 0x19, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x16, 0x3}]}}, {{0x9, 0x5, 0xd, 0x3, 0x200, 0x4, 0x0, 0x9}}, {{0x9, 0x5, 0xf0782bdb34c1bedb, 0x0, 0x40, 0x2, 0x7, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x2, 0x22}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x9}]}}, {{0x9, 0x5, 0x5, 0x10, 0x58, 0x4, 0x7f, 0x80}}, {{0x9, 0x5, 0x9, 0x4, 0x3ff, 0x28, 0x0, 0x7}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x5, 0x0, 0xb, [@generic={0x12, 0x10, "a30175f126a977d078e93b4e09608f9b"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x10, 0x5, 0x2, 0xfb, [@uac_iso={0x7, 0x25, 0x1, 0x9967e79011d95df1, 0xf, 0x2}]}}, {{0x9, 0x5, 0x4, 0x10, 0x400, 0x60, 0xa, 0x4}}, {{0x9, 0x5, 0x5, 0x10, 0x20, 0xc4, 0xdb, 0x5, [@generic={0x7e, 0x1, "653b917224fa5532f95e2ffd66265d3003b33b11e9335d9c1f80017dd207a3493b5cf890ee7f190d30b689a3aedf8d97e55d77cc13e5f224c112e4edf888f92bdbd79638d58a4e5c689037952c711172d5991f93b5b719d26024823ed9834136561f1377b0d0ca7d60dc345d4c088ef77706e5589fcda31c3d28323f"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x401}]}}, {{0x9, 0x5, 0xd, 0x3, 0x8, 0x1, 0x5, 0x9}}, {{0x9, 0x5, 0xa, 0x4, 0x200, 0x3, 0x0, 0x10}}, {{0x9, 0x5, 0x80, 0x10, 0x200, 0x9, 0xc0, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x13, 0x1}, @generic={0x18, 0x21, "3438a476c2d003e8cddb159fb6c1d5ad1ebe631d71cb"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x40, 0xff, 0xc3, 0x8d, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x6, 0x604b}]}}, {{0x9, 0x5, 0x9, 0xe, 0x3ff, 0x0, 0x4, 0x4}}, {{0x9, 0x5, 0x3, 0x3, 0x200, 0x80, 0x60, 0x1, [@generic={0x80, 0x7, "3e65b73ebd6c1e9db74e16006fb704381f0d9134990198b3cfe0adf6c059ab8ca8211498acc10352aad465482da808f58a7a085f975f27ae30d1c94871aeaa3e8b1bffe93e5fece81f56a18479b4f998557f466a1d6a4f799fad2d2553bad4500c698d527e5bc4e8dffa9e4fc55fb167489a559a56149461158c5a45ae8e"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x40, 0x7, 0x1, 0xff, [@generic={0x21, 0xb, "1acea6e3c9dd18a860348d719b8fd107380576fb4d3b70c05923ecde46df16"}, @generic={0x3f, 0x23, "edcc4c56cb0f8fa8a7695f5da4adfc29d819146a76a6f6974b2833886e1f5a4bf69d8133be57a880f03b2b12855ff9a8c941a116d81891b675d9c63ee9"}]}}]}}, {{0x9, 0x4, 0x15, 0x3, 0xf, 0x67, 0x76, 0xbe, 0x9, [@uac_control={{0xa, 0x24, 0x1, 0x1, 0x47}, [@selector_unit={0xb, 0x24, 0x5, 0x1, 0x10, "1679bf0458f1"}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x207, 0x2, 0x7, 0x1, 0x7, 0x9}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x305, 0x4, 0x5, 0xae}, @feature_unit={0xf, 0x24, 0x6, 0x4, 0x2, 0x4, [0x3, 0x5, 0x2, 0x2], 0x1}, @mixer_unit={0x8, 0x24, 0x4, 0x1, 0xbc, "6a72ef"}, @selector_unit={0x6, 0x24, 0x5, 0x5, 0x89, '$'}]}], [{{0x9, 0x5, 0x3, 0x10, 0x3ff, 0x6, 0xd4, 0x7, [@generic={0x94, 0x28, "f671be132cb41e53ff9ba453f7f5fb62e37c57a4485b4a56050fd79258adcdd1deadd95d87ba60d9b2749cae5e45fdaac4f3dd33c0da86ec3a11c8e800eba098aca1f02cbfd0de4cd880a4d24dbcdd8a82055b5f2e13804dd93a81b8207c4dda657ec50600c7b2c7d2882b924e5a1d43b40520b5be9c34eb88f80a7f6a8d79b4f516b68ba427e8c296fd997154bbee32817b"}]}}, {{0x9, 0x5, 0x1, 0x3, 0x10, 0x9, 0x8f, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x72, 0x4}, @generic={0x12, 0x1, "3e291ebcf6d66dcbfa0728643833185e"}]}}, {{0x9, 0x5, 0x6, 0x8, 0x7df, 0x5, 0x0, 0x9, [@generic={0xfa, 0x10, "3c7429b1b55a1ee83ce35004f2431b03eadd1b784477e3c8af39486633f002b3b563b3858f8185e7e548237f541e05890c3be3bc08a93c9a2bf7b235db41cac2174d9727e1a9b4e239c27a09be7545b712176a6115c8842044bc9f64731e191b74d590b49ce1a5c01fb6a291dbc571bac1f9a31e3bb3484a592dc5240daf7b49f8262fb9764782b859a40504b5ebd364961e57883601dbf1bda344863ceea8a80df446598aaf20773243c99cd20c9646d23b72bd5f9a4d29d78fe684abde1e2a668c40eb7bf4dbec928657499dd8cb14145f3fe97c2e9ecbf297a874d603f382ea931fe87498a523d194790151581c94bf667cff73e90a13"}]}}, {{0x9, 0x5, 0x7, 0xc, 0x8, 0x3, 0x2, 0x2d, [@generic={0x7e, 0xc, "2a85d14e96b1ebecb9a6421a4e76923464c8ba64413f11c52dd8c5334d95a08ce036f9b65caa02f4cf7f33f87b7e959878c8f07bc7818570c2ab53f8d5a6bddcc94553b76a6256112b679d9b61e8bfbd751e2a4b68e9616ab2846df8142a4c3c9f242e5da70164385d0d3e376086ff949bb65bc00f30a416e02e5a4a"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0x2, 0x7, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x7, 0x3}]}}, {{0x9, 0x5, 0xb, 0x2, 0x428, 0x3, 0x6, 0x2, [@generic={0xed, 0x23, "422c8d5c26b688497184303bf145b6d0e2dc8b993a3991dd4c10c54b81d5c26561171ddbd4c82032bb73a1b6e94b03af32ef4dc0c5806a84725c31daf32d3b82b043d08bea8cf5b44cdf710d4c2a5b8bf1412a503e618e1bfc8eb53d192c7ddca359ff8ea4fcc8e9d8dfb3226e30aed939dadba0e60295d9c2712a82ded1f76be75197cd9078684852c5ab601219b0aba0d38805f06d3bc7ca57b303f2e7f1da59f91af1d4538f3a1b4b4ac34f9c066dc935d01a967d7692b3d8b058744249487a97a83d9889268fd53f9561721c087460c8372ef51c52539c29c2cd522a82f3fbad0276084dc7e744ea31"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0xe, 0xa6, 0x37, [@generic={0xdd, 0x23, "041c42ab6167679bebbc7bddc1aaacce6e11f184d66aa96024258b6b52f1042c0ab484489e24263e5e35d5d1bf9c5456c0e139c6d2c3a1061c9857f3a0248dc46e7773dbc8cc2edd0d6c578e2d66915c514f33876e75c38b19b392b4938cd11bf4949678bd5c145eb101b91f1c9b92df1cf6ef5c94c93d8a2b8ec31ee3bc98bf16cb1a2619f42989bf62bdbd1ca47b1f0681816e02d44093472fcb746d629d044d12c77a106b03609f022eb1f2189930d26c7c7f3c3307d203fcc05ea4b3fafe05a151c2d6622efa6ef209748041d26e076e8e7b1ce7ef538483dd"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x0, 0xf94}]}}, {{0x9, 0x5, 0xf, 0x4, 0x3ff, 0x9, 0x81, 0x5, [@generic={0x99, 0x11, "60e7cc41310ebe5bc82756b5547ed1b724edf55c040b72d2f51f0fbd52257327458bf701510d363c05392c31da564ff8ca918d7a76369fec37ece5e3511a20952dfc243a515e18ffb20d5f0f421cf68b88c565bb8589d79b88551af4a4eef7c85cb6ab79d0b5149a4cbdce4f8be09fe17659e107266f651fbbffa09400694a015810da65d39a970b8d19480de6a56f45e30f8afe63f5d0"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x200, 0x6, 0x5, 0xc8, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x7, 0xff}, @generic={0xa4, 0x9, "dcca42e73ea357776bce5e2892ee1bdba0d6073ea76ab41f08787a4350f2faeab43d90f162e331640cd2ee87ca453f76f1b61c0c80cd27309fa741064543709119b33a696af3dc11864b1a516256f4da04ebd53946368cda08fcb4901a71e8ffca11814f0d8be97474604ca8194b9b11cb86f6ea69fb06aa7a371b2550563663408f638cd53c1b94dc73b80cdeb12ee7105e2f0f1ba9ae6206db461e21aea37b11fb"}]}}, {{0x9, 0x5, 0xf, 0xc, 0x200, 0x98, 0xe, 0x3, [@generic={0x43, 0x4, "bb7fd96a37f4a3cd52844e8a7ca86315f0d5222cb030286accec7847fcb83d2d4f781e0c0e6bc01503db9689d0c01800b174624b1c5de6bb33ad34b1e83c173d28"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x0, 0x2, 0x5, 0x5}}, {{0x9, 0x5, 0x1, 0x10, 0x400, 0xf5, 0x3, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xc, 0xffff}]}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x80, 0x5, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x4, 0x40}, @generic={0xe9, 0x10, "2767ec52974a0cd0949b9497e3bb32290c8ab06952d405bb341b8e7ba3811698994395d6e80609fd2bdfee6bf023993d3479f4448d6a36c393b8ad2f3fa9f740754879030fba015a2d685ce0b9fcf9cbc2f660c37d69320d09d7621831b82fe47a1023788dde1546bd2e5b9705fafc9e03ffabf0e11af70a0205efef7c17a14574cb961db5f7969881ce48f3ca318635443fb060c005f1dd03774be62f6b3ce8ec97bed11072ba9a8dc222549fc05c27828745dccd88c1ef16c91847aeaa8b3c8b7b5265004944f04125616fcceac440fc6eea448eca4e1dd8cd1465e288f37d77dc96454311af"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x400, 0xc, 0x9, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0xfffa}]}}, {{0x9, 0x5, 0xe, 0x3, 0x400, 0x9, 0x7, 0x54}}]}}, {{0x9, 0x4, 0x2f, 0x3, 0xb, 0xef, 0xfe, 0x71, 0x80, [@generic={0x100, 0x5, "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"}], [{{0x9, 0x5, 0x2, 0x10, 0x658, 0x3, 0xff, 0xab}}, {{0x9, 0x5, 0x0, 0x10, 0x8, 0xe, 0xf9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x80, 0x8}]}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0x10, 0x80, 0xe7}}, {{0x9, 0x5, 0x6, 0x8, 0x3ff, 0x3, 0x3, 0x8}}, {{0x9, 0x5, 0x7, 0x1, 0x20, 0x3, 0x6, 0x9}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0xfa, 0x9b, 0x4, [@generic={0xa7, 0x23, "3b868baca2d9bebe7d478ee1ba2ff18aa1963b4acbe2fc73fd494db71db2cd1fd480780fc923a493d6dc6a6e81866a4389d6bdd7216020258ba6ad29b089f024585cfc8961adc6a93ba06c1f968374e1240ee54bb4c61799370520b2c97cdc58a4bf31a0962eeb919c9050375bdadfa709ae3fa3634fef1b5af21e1dc31b17aa7d97f42a5b2d89626a8b2801bce78efae77a49138e56a24a479d8eb75f667a0ae423d79fdf"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x10, 0x34, 0xa5, 0xfa}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0xd1, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x2, 0xad}, @generic={0x30, 0x23, "4abb66fe658fef537e3a21ff49876637190caa561d1d7ee09b741e9be17f0fd63f1f9e02a8c90c545d242708abfb"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x400, 0x6, 0x1, 0x3}}, {{0x9, 0x5, 0xf, 0x10, 0x3ff, 0x7, 0x3, 0x8, [@generic={0x70, 0x7, "6d9aa9cdcd984134ccf53ceee4b53fdebf706756eee7ee089b289bae1c7acae0b1276bf2d5f112a91e55c4f166ec2623000176c6d4ec04ff0da6e4bf7d336564010f6085edc4e3393608218a53eaed2295ba1eb76bd3f736d15a5d2382bb97045fe020ad553303cde9cc49854407"}]}}, {{0x9, 0x5, 0x504c98041a1aa555, 0x1, 0x640, 0x0, 0x7f, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x3}, @generic={0xb2, 0x2, "a8c7c032c2944bd5647af33962ec216d3e1aa4040a6dfb2bcf011c2b323591b72cae248813f0c9bc9a9c3b3aa278213dcfa5e6dd05b41453a15793ab03d29f6de4169112f523d560e906db40621b8dd78334ea09127694fbddac63cbfefbc82386a05d73f06764e8efc0424905174f540384bda2b3140f44d5646a651d910778d71361f7252510ca40741b52948b885866f4ce2c3b0fa52c04bf5a0521298f51c85da3ccd78556ab1ef701915f98e0c8"}]}}]}}, {{0x9, 0x4, 0xa9, 0x8, 0xf, 0xf5, 0xe6, 0x3, 0xf, [], [{{0x9, 0x5, 0x9, 0x0, 0x10, 0x5c, 0x3, 0x2, [@generic={0xc3, 0x21, "7ec8f78496f010716533b40e9326b6889546bac3fda697dca2340b5ed5957020bc68843b50c5bf11cc0a2f6ff41974d194b969b4bbb316695dcba4da0659f65df3556e3947b4406d16b43d8f4f962ecb140e6db7959751f7b642950037daa7a42dfabafecfb99fbd229b5750da8ee36018782d3de20b3f23f8bf42b701f61e156919e8b6b499e0552dd85259ed4b8e4b58d529c48c3252b8927393989cccfef65cf319582bab0ac1b313c8f7eccd647ed72bac5057273a4755253c1d32a1daccfa"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x7fff}]}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0x0, 0x7, 0xf0}}, {{0x9, 0x5, 0x0, 0x1, 0x200, 0x92, 0x7, 0x7}}, {{0x9, 0x5, 0xf, 0x3, 0x10, 0x1, 0xf9, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xc1, 0x8}]}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x9, 0x7, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x8, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x3}]}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x7, 0x9, 0xf, [@generic={0x100, 0x21, "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"}]}}, {{0x9, 0x5, 0x7, 0x4, 0x3ff, 0x9, 0x5, 0x3}}, {{0x9, 0x5, 0x9, 0x0, 0x10, 0x3, 0x7, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x1}]}}, {{0x9, 0x5, 0xb, 0x10, 0x200, 0x6, 0x7, 0x6}}, {{0x9, 0x5, 0x6, 0x2, 0x10, 0x7, 0x63, 0x0, [@generic={0x2f, 0x24, "ae02e379d93ad26bb86041cff70cad53fe2a15bf1808d574a6e2ac9bede58cfc8d1331e83abf183180a2f45c3f"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x33, 0x28, 0x1, [@generic={0x12, 0xf, "f5d807fe0758f2ef432891f749eb7da4"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x40, 0x5, 0xe8, 0x4}}, {{0x9, 0x5, 0xd, 0x10, 0x7bb, 0x6, 0x8c, 0x9, [@generic={0xd9, 0x8, "dbac4fe41ddf25dc8e22813e86fad13013d68624b3a3da4117f307e11a9b1ecfa4e49ccc13dcacf49fba698592cc7904710f59daa3d68781259e57f7ddfcc28d001099280db9e49159101826c69548d56dd66fc4aaa9ffdc60f7ad732005250064381d1f8c3247653023da52dbf738a743dc1a60f79a7e5d62ab0c69902ed094a09f301ff6a137ccac17c8f5883458bca9cdb3850cb84a63d9c4a20655c0e3d338115479b57b0d637274bbba7bb049d285b2e48506e621e9fa8ad85cba2c450e068af1ebb12e47076e5770d6a16edee2363f81842b8db3"}, @generic={0x46, 0x24, "31636005042c6818d54b98e9e4aa2e3755baf183db44e7c9712c6dd8cefd837894d61519f4fb8dd34d9fbec880eecd6bd7afc8b23d24b5cdfbf1c2b6f08cb0f23fa3f6a5"}]}}, {{0x9, 0x5, 0x9, 0x4, 0x10, 0x6, 0x1b, 0x1, [@generic={0xcd, 0x10, "38a24a6e4702aaa7d274e1e75038e5df7ed1b96235fd54590839e5c510fd8ec1795e5c31999cd40fe67d5936e546cb1cf547534c9d4642f930a2d4e00a88505190594ff538c3db7c0431b7a57d0b04bc90204c2a27615b43b8b772764f4b8b15c768db33948aee993811e61337f28fb6e0cf2bd5fc8a72bcf72583ddfa441feff75ea16d85f8a812d10b939e23d3eced6039eefa6432e0262da64625048bd2bb2fcb5113a804f414fbf6531bd8c595c1dde2192b683bfeb128c0506379b34ce5d0c91f5c1cf68f7ac18053"}]}}, {{0x9, 0x5, 0x9, 0x4, 0x400, 0x9f, 0xf, 0x9, [@generic={0x73, 0x23, "bfe9426f2e9063dd775a41df167c0f2836c9d1bade4dfef03c5411a136d39f5beca4d1aa3c58827ec4c5052f5dc16da152f8e82fce856cdfbf0a79b3d7d0d96c663d4b35baa4b4ca192549c2f3bfbbb0b1d8de6abf466a40fcae83e10fd2772fb146d33586697c14cadfb337f09515a138"}]}}]}}]}}]}}, &(0x7f0000001f80)={0xa, &(0x7f0000001dc0)={0xa, 0x6, 0x0, 0xfb, 0xa5, 0x6f, 0x10, 0x7}, 0x74, &(0x7f0000001e00)={0x5, 0xf, 0x74, 0x2, [@wireless={0xb, 0x10, 0x1, 0x8, 0x20, 0x9, 0x5, 0x3}, @generic={0x64, 0x10, 0xb, "804c713e6b380551cebf02142b7e73bb7a1ac1b4c1311f1554058fd5053bba7dff4df3351fdb27b1bf4ec7a39470a6834b5561539f28a887a97c0104c755337323130a314f9e7584735d246d939f1613084b3001e9bafd58b33057438499220e28"}]}, 0x4, [{0x4, &(0x7f0000001e80)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f0000001ec0)=@lang_id={0x4, 0x3, 0x340a}}, {0x4, &(0x7f0000001f00)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000001f40)=@lang_id={0x4, 0x3, 0x804}}]}) 1m38.840263548s ago: executing program 5 (id=806): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$caif_stream(0x25, 0x1, 0x2) splice(r0, &(0x7f0000000040)=0x9, r1, &(0x7f0000000080)=0xbf, 0x74d, 0x7) fcntl$getflags(r1, 0xb) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000100)={0x0, 0x97, "6feae62d1a706bcfefe46978e7ba0669f6c508c036016d7c5c560dee607e147190f87766e0747c0c2dfdc95c2d16021663a17dc4f62b332e1af871801ba0dc78c3e607b81ae5a1af3d107e14d39891a9e4de66b2e61ec8038ad972e3f64f6d5e4f51297c31fd0e7ec5967d3f216f7890de09c98bf6337385b882af029f9ec659ee32bb2447d217282c114620e28cab58df84a9e7e7c02a"}) listen(r1, 0xfffffff9) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000001c0)=0xf) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x18) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={0x0, @l2tp={0x2, 0x0, @local, 0x3}, @phonet={0x23, 0x7, 0xff, 0x3}, @tipc=@id={0x1e, 0x3, 0x1, {0x4e21, 0x3}}, 0x2b4, 0x0, 0x0, 0x0, 0x2537, &(0x7f0000000280)='gretap0\x00', 0x80000000, 0x7f, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0xa002, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000380)={0x80000000, 0x240, "a84cc84604de7d6d145d290ddc013454fda19644f656530a0acee2d184758785", 0x0, 0x6, 0x8000000000000000, 0x790, 0x7f, 0xddfe, 0x1c2, 0x1, [0x3, 0x21e8, 0x10, 0x2]}) io_uring_setup(0x7dd3, &(0x7f0000000480)={0x0, 0x1cc2, 0x4, 0x1, 0xbf, 0x0, r3}) vmsplice(0xffffffffffffffff, &(0x7f0000001700)=[{&(0x7f0000000500)="57fc08729f69f35cfe6635dcc44ef20f9a4320150590210ef55e0ce9fb9a3a909f4b1a7469e620ef99fc0d8d9be1579822d57bc55e1fbf64edafe718165442972a481fe4741f0289a39cd3fe1723ad47edebf5f0e650804f7c6a997d69cd2629775a6f23b264efef087feb5f5cfe82513cc9ca04a3d535645d92dea455a174bd76b1602b9e5fa1236d55216d6f5f957ba1bab4a722aeae5ac91ca60aadb6048e2f18590cad6a95bc19fd24fdaf7a5af7adbdb6031626d7b3707d132191ba16b1164012449e", 0xc5}, {&(0x7f0000000600)="40d5ca0d9c9343526532ab2b8c1cc540b36a89076b6695566b27c4c270db4a11c633b0e11a616e757e3bce5af75626", 0x2f}, {&(0x7f0000000640)="0fe26881dadee1b67b2cc8ad26f423ae820833b664d5e6b0067ffe80e699cd9716a4ab8df1331951f3ff01515f521e21e24667724eecb24cb3bd72e7eba926d9e6541948eff1759a13f2a22c2930c84ca79d0de4e700269bfcae758c483d5f7584c9480e7c2be0379c94b37c5b6564059a43d3d171f4f04dc8d18a969a0999da19b4a388257d9d55bc86cc76ddaa06204bbab7de74ef792e24a95c875a1a14567633c87275", 0xa5}, {&(0x7f0000000700)="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", 0x1000}], 0x4, 0xa) syncfs(r0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001780), r3) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r3, &(0x7f0000001840)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x14, r4, 0x4, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24044080}, 0x8800) r5 = accept(r1, &(0x7f0000001880)=@l2tp6, &(0x7f0000001900)=0x80) setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f0000001940)=0x400, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000001980)={@in6={{0xa, 0x4e23, 0x10, @local}}, 0x0, 0x0, 0x47, 0x0, "9823b82023006993b068b5fc6f764d2ff36bd48f9ad0dc78b7433e983d4845ffebb32e7f2573ae89cc75f407de5c5408c98fd8134a84a4c5bf773c71270d736c0d545cc4fdedf65063484f575be15fef"}, 0xd8) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000001a80), &(0x7f0000001ac0)=0x14) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000001b00)={0x10004, 0x0, 0xeeef0000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) ioctl$AUTOFS_IOC_FAIL(r5, 0x9361, 0x8) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f0000001b40)=0x6, 0x8) ioctl$BLKFLSBUF(r3, 0x1261, &(0x7f0000001b80)=0x9) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000001c80)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x40000c0}, 0x814) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000001dc0)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x1c, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20001004}, 0x48c0) 1m38.623596001s ago: executing program 5 (id=807): socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'pim6reg\x00', @link_local}) r2 = syz_open_dev$cec(&(0x7f0000000680), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000580)={"a0453822", 0x0, 0x6, 0x2, 0xc1, 0x8000003, "3377f877c734c40400", "0001d615", "0200", "04ffffbf", ["c386afeefff8ffffff7eec01", "0080000000000000001000", "000000000000000000c40800", "0000000000000100"]}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x80104592, &(0x7f0000000200)={0x0, 0x2, 0x0, 0x1000101, "0020946fc67f0000201b14700c1e0ac74f000000001600000000000900"}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd6076b2af00062f00fc000004cba1414ec4b4b50000000000ff0200000000000000000000000000010000883e"], 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x50, 0x0, 0x1, 0xb01, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @rand_addr=0x64010100}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x50}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) syz_open_dev$dri(0x0, 0x1, 0x0) io_setup(0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896) r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) ioctl$USBDEVFS_DISCSIGNAL(r7, 0x8010550e, &(0x7f0000000140)={0x0, 0x0}) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) write$tun(r0, 0x0, 0xfdef) 1m38.155989251s ago: executing program 4 (id=808): r0 = memfd_create(&(0x7f0000000600)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xc0=\x8f\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xde\xc3\x1e\xb8\xd6w\xb0\"~\x15G\xe6\xe5U\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#S\xd9\xe3~Sj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j\x15U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\x11\xe7\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0x78) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000140), 0x10) sendfile(r1, r0, &(0x7f00000001c0), 0x10000000000074) syz_usb_connect$uac2(0x0, 0x1, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3048, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x82, 0x3, 0x1, 0x5, 0x30, 0x6, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x9, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0x9, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x4, 0x1ccc, 0x5}, @as_header={0x10, 0x24, 0x1, 0x2, 0x1, 0x0, 0x4, 0x8, 0xb8, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) 1m37.554689261s ago: executing program 5 (id=809): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000040)={0x6, 'xfrm0\x00', {0x1}, 0x2}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000000f80)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x86, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fffffff}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000280), 0x48}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40000c0) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000300)={0x0, 0x5}, &(0x7f0000000340)=0x8) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x3}, 0x50) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r3, 0x40086e81, &(0x7f0000000140)=0x5) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000240)=@sack_info={r2, 0x2}, &(0x7f0000000280)=0xffa6) 1m37.439054902s ago: executing program 4 (id=810): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0xfffd, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00'}) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x3c, 0x68, 0x1, 0x0, 0x25dfdbfd, {0x2}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x4}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_HOPLIMIT={0x5, 0x4, 0x1}}, @NHA_ID={0x8, 0x6, 0xf2}, @NHA_OIF={0x8, 0x5, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd00ac6700000000000000000000c2888e7d52164ec480e79200000100", [0x0, 0x2000000000001]}}) 1m37.369913811s ago: executing program 5 (id=811): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000b"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0x8800) mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002f00)='fdinfo\x00') syz_open_procfs$namespace(0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000004c0)={r4, r3, 0x9, 0x0, @val=@netkit={@void, @value=r3}}, 0x1c) setsockopt$packet_int(r4, 0x107, 0x3, 0x0, 0x0) kexec_load(0x0, 0x0, 0x0, 0x0) getpid() syz_io_uring_setup(0xcaf, &(0x7f0000000100)={0x0, 0xb601, 0x859, 0x805, 0x32c}, 0x0, &(0x7f00000000c0), &(0x7f0000000000)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x10) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x0, 0xd, 0x0, 0x0, "5deb13561a5fbf61048955f6f876b2ff", 0x0, 0x0, 0xfc}) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r6, r6, r6}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7b13000000000000200012800b00010067656e657665000010000280060005004e2000000400060008000a00b5"], 0x48}}, 0x4000) 1m37.287611493s ago: executing program 1 (id=812): unshare(0x26020480) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x20940, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x400c744d, 0x0) 1m37.140942395s ago: executing program 1 (id=813): openat$kvm(0xffffffffffffff9c, 0x0, 0xc2400, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f00000010c0)={0x0}) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000140)={0x4000000, 0x4000002, 0x2}) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000001100)={0x4000000, 0x4, 0x4}) (async, rerun: 64) close(r2) (async, rerun: 64) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) (async) r3 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, 0x0, 0x0) (async) read$char_usb(0xffffffffffffffff, &(0x7f0000000040)=""/4109, 0x100d) (async, rerun: 64) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000006, 0x4010, 0xffffffffffffffff, 0xa7bf8000) (rerun: 64) openat(0xffffffffffffffff, 0x0, 0xd40, 0x82) (async) lsm_get_self_attr(0x64, 0xffffffffffffffff, 0x0, 0x1) socket$can_bcm(0x1d, 0x2, 0x2) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x200000000000, 0x0) syz_usb_disconnect(r4) syz_usb_connect(0x5, 0x1b, &(0x7f0000000540)={{0x12, 0x1, 0x300, 0x30, 0x5a, 0xbd, 0x40, 0x22b8, 0x6425, 0x8ae, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0xae, 0x5, 0x10, 0x2}}]}}, 0x0) ioctl$EVIOCRMFF(r4, 0x40085507, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c73d8a0870272091776c0102ef01090212"], 0x0) r5 = io_uring_setup(0x4dc2, &(0x7f0000000200)={0x0, 0x9153, 0x8, 0x2, 0x112}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x18, &(0x7f0000000000), 0x1) (async, rerun: 64) syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x8537d, 0x10100, 0x0, 0x250}, &(0x7f0000000880), &(0x7f0000000280), &(0x7f0000001080)) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) socket$nl_xfrm(0x10, 0x3, 0x6) 1m36.693588733s ago: executing program 4 (id=814): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x109001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000000000dcf3900f000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x1, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000eaffff5900000000000000fcffffffffffffff0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x30, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24000000190001000000000000c3b2000a0000000003c8000000000008000600ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000440)={0xe9, 0x1a, &(0x7f0000000040)}) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101b8298a20030478fa0203135f19010902120001000010000904846600"], 0x0) read$rfkill(r3, &(0x7f0000000040), 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x341c00, 0x175) read$FUSE(r4, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x9, 0x2, 0x0, 0x6}, 0x20) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)={0x43, 0x0, 0x1, 0x3}, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x6) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000200)={'batadv_slave_1\x00', @random="0000008000"}) 1m36.540832522s ago: executing program 3 (id=815): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x200480d0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfa, {0x0, 0x0, 0x0, r6, {0x8}, {0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400d8}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r8, {0xf000, 0xffff}, {}, {0x5, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x4, 0xfff1}}]}}]}, 0x38}}, 0x200c8080) 1m36.381076744s ago: executing program 0 (id=816): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) rmdir(&(0x7f0000000200)='./file0\x00') ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x9, 0xfff, 0x1, {0xb, @sdr={0x30314142, 0x6}}, 0xffffffff}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48, 0x0, 0x0, 0xb928}, {0x6, 0xd, 0x0, 0x9}]}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="94000000000101040000000000000000020000060800074000000687f49e05f111b0018008000100e000000108000200ac1414270c0002800500010000000000240001801400018008000100e000000108000200ac1414000c000280050001005ce0e874f482c67a6b0000000230000e802c00018014000300000000000000000000000000000000011400040000000000000100000000000000000002"], 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_emit_ethernet(0x67, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa1886dd6000000000311100fe"], 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, &(0x7f00000001c0)=[0x800, 0x10000], 0x2) 1m36.241895155s ago: executing program 3 (id=817): socket$netlink(0x10, 0x3, 0x0) r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000180)=0x14, 0x80000) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f00000001c0)) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond_slave_1\x00'}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000240)=0x1) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x2f5, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x0) r2 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r3, &(0x7f0000006800)="10", 0x1) write$char_usb(r3, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1m36.19115838s ago: executing program 0 (id=818): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x2, 0xffffffff}, 0x0) socket(0x10, 0x803, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x4000010) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x64044000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000313541, 0x0) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000003140), 0x800) poll(&(0x7f0000003180)=[{r5, 0x40c5}], 0x1, 0x1) r6 = dup(r4) r7 = socket(0xa, 0x3, 0xff) unshare(0x22020600) setsockopt$MRT_DEL_MFC(r7, 0x0, 0xcd, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) 1m35.864953989s ago: executing program 1 (id=819): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRESDEC=r0], 0x50) (async) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000100)={0x10001, 0x40000080}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r1], 0x28}}, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x900, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4008000) (async, rerun: 64) io_uring_setup(0x2b3b, 0xffffffffffffffff) (async, rerun: 64) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) (async) listen(r3, 0x3) pipe2(0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x101402) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000180)={0x2, 0x3, 0x3fe, 0x1, 0x401}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x0, 0xc004}}], 0x1, 0x0) recvmmsg(r5, &(0x7f0000000c40)=[{{&(0x7f0000000340)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000540)=""/104, 0x68}, {&(0x7f00000005c0)=""/37, 0x25}, {&(0x7f0000000600)=""/70, 0x46}, {&(0x7f0000000c80)=""/181, 0xb5}, {&(0x7f0000000740)=""/186, 0xba}, {&(0x7f0000000800)=""/131, 0x83}, {&(0x7f00000008c0)=""/100, 0x64}, {&(0x7f0000000980)=""/102, 0x66}, {&(0x7f0000000a00)=""/197, 0xc5}], 0x9, &(0x7f0000000bc0)=""/112, 0x70}, 0x6}], 0x1, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x4}, 0x0) (async) r6 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000300)) connect$inet(r6, 0x0, 0x0) (async) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) (async) r8 = accept4(r4, 0x0, 0x0, 0x0) sendto(r8, &(0x7f0000000400)="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", 0x2a, 0x40, 0x0, 0x0) 1m35.773462331s ago: executing program 1 (id=820): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7f, 0x0, 0x9, 0xffffffffffffffff, 0xfffffe0000000005, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$USBDEVFS_BULK(r8, 0xc0185502, &(0x7f0000000300)={{{0xc, 0x1}}, 0x91, 0xc, &(0x7f00000003c0)="b648489ede2a3a891565dacc795bd2036709d23170c475cd602af46621461810925f89ead9f8a6ec485d603be96fb3d76121328733d27a5becc6eac413bc526cb8604e7b0c4d3d0ec5bce8a4a8e9abb73c6b70338cb675776514883113dc1ece4f21d6178860b95f87c79cffa5fea4aeb1f80ab20b1b3313709022a4fbd3aea41ca47d717ba96bf85e88fd755eb12eecca"}) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xa7}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x60, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x3}}}, @TCF_EM_META={0xc, 0x2}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x9f, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) 1m35.751937083s ago: executing program 5 (id=821): r0 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x10, 0x2}) socket$inet6(0xa, 0x3, 0xff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000f80)=ANY=[], 0x48}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x34, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20048010) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r5 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x1, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) write$binfmt_misc(r6, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x31]}}) 1m35.116268707s ago: executing program 0 (id=822): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) lsm_list_modules(0x0, &(0x7f0000000000), 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x1f26, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) sendto(r0, &(0x7f0000000740)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3bf52a6b2cdb77ef9af2a603a3e78adff59fbb22bae1b2443011fd801251bcef8f165533aac58c7556dd51edc5a6865d4e29f0bbd0ed602050000000000002944de604d849a1e", 0x5f, 0x4008044, 0x0, 0x0) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3", 0x92, 0x241, 0x0, 0x0) 1m34.984279202s ago: executing program 0 (id=823): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async, rerun: 64) r2 = socket(0x1, 0x800, 0x2) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001600010000000000000000000a0000000000000014000100f90100000000000000000000d800000117000280"], 0x44}}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) (async, rerun: 32) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000700)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4000001}, 0x40) (async) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={0x0, 0xa8}, 0x1, 0x0, 0x0, 0x400c0}, 0x46050) (async, rerun: 64) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x42240, 0x0) (async) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000340)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r6, 0x3ba0, &(0x7f0000000680)={0x48, 0x1, r7, 0x0, 0x7, 0x4000000000009}) (async, rerun: 64) bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) (async, rerun: 64) listen(r5, 0x2) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(morus1280)\x00'}, 0x25) (async) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) (async) r9 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000880)="f6ac757d8cee5dfefc8539306aa49541475372c585eb097b4ac55d59706830d9ee8c3b0a0b6137038d8b9cc56bd4239928494a481840c85bd598e95ac08d972a6aca20a94f191ae0ac9db02c95bfc595e2b92785bc685a1996427b605a0184c4897cca5cb12b8b051e630e80ee5322a13962dc140b688362425fdeb13532829972bee6668c2b74b5a4fe237e2770b980c070fcf2f266e54b9b8572c31eecd911e5a321ec4ba05376cf4e1b3017fe1bd769a7ca72a7b925fc1a47b2766e2dbf41ace38db4b70a33480ed6e36c1cd130d4e91d75fbee25c2c2740fc08b72253f81464468e37ed94e4ae1daa1db", 0xec}, {&(0x7f0000000800)="7ae1527d542da4356c94c86818177dc52683fb6edf57c83f5de6f141ecbb4b556903a5ea8898ce82be3dcf9314", 0x2d}], 0x2, &(0x7f0000000380)=ANY=[@ANYBLOB="20000000000000001701000002000000080000004c9cc4ca596ac82d00000000c7371cc195eac26d05bd31eeb44a923e6767deb58cf2b941a176f4a9c12c9add497e894d95ba8a535496338d14d14e99ff8d89eb3635245c0594906b4b021742035fdc33caa1f5d1"], 0x20}], 0x1, 0x40800) (async) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x2020) syz_emit_ethernet(0x4e, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6000fcff00180601fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES64=r0, @ANYRES32=0x41424344, @ANYBLOB="60c20058007800001e020000"], 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) r10 = socket$inet6(0xa, 0x80002, 0x0) (rerun: 64) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) sendmmsg$inet6(r10, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) 1m34.564795973s ago: executing program 4 (id=824): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xc000, 0xfec00000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0x3000, 0x0, 0xc, 0x0, 0x0, 0x10, 0x0, 0x3, 0x7, 0x7, 0x0, 0xfc}, {0x2000, 0x5000, 0xc, 0xff, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x2, 0x2, 0x6}, {0xeeee8000, 0xdddd0000, 0x9, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x3d, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x0, 0x0, 0x8, 0x5}, {0x0, 0x0, 0xa, 0xfe, 0x0, 0xfc, 0x3}, {0x50000, 0x3000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xca, 0x6}, {0x80a0000}, {0x30000}, 0xfdf8fffb, 0x0, 0x10000, 0x50, 0x4, 0xf801, 0x0, [0x5, 0x0, 0x1]}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000180)) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00'}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="04002dbd7000ffdbdf250b0000001400018008000300030000000800030000000000"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4800) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3400000010000108000000000000000000000000f3da820a228276799aceba556adc74e2d2c537a5fc5e5824ad65fce9818569a93c6511b40642ad99311910a3951d347ea51edfa4d09c2c845d865e22663592bc78dc0b2478e1f4b82bdaa6f90c29283ab251da1a1c6928a1c4ba3e71c62e9b3bc9028b0f507de98a15e91a2aba763a19697d14ea37a1c2c33ce31440bf0529d8", @ANYRES32=0x0, @ANYBLOB="31240000000000000c002b80080003000200000008001b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r9 = syz_open_procfs(0x0, 0x0) r10 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r10, 0xc0405602, &(0x7f0000000040)={0x1, 0x1, 0x539e09df839dfe94, "d3fa5b89042b7205fe7bafe9e6415dbf6b34944d164ce8cd4e0d4c7b546787a7", 0x35315241}) r11 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_tcp_int(r9, 0x6, 0x2, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r11, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r11, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r11, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) 0s ago: executing program 33 (id=820): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7f, 0x0, 0x9, 0xffffffffffffffff, 0xfffffe0000000005, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$USBDEVFS_BULK(r8, 0xc0185502, &(0x7f0000000300)={{{0xc, 0x1}}, 0x91, 0xc, &(0x7f00000003c0)="b648489ede2a3a891565dacc795bd2036709d23170c475cd602af46621461810925f89ead9f8a6ec485d603be96fb3d76121328733d27a5becc6eac413bc526cb8604e7b0c4d3d0ec5bce8a4a8e9abb73c6b70338cb675776514883113dc1ece4f21d6178860b95f87c79cffa5fea4aeb1f80ab20b1b3313709022a4fbd3aea41ca47d717ba96bf85e88fd755eb12eecca"}) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xa7}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x60, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x3}}}, @TCF_EM_META={0xc, 0x2}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x9f, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 30][ T7523] ? __pfx___mm_populate+0x10/0x10 [ 171.978544][ T7523] do_mlock+0x646/0x750 [ 171.978673][ T7523] ? __pfx_do_mlock+0x10/0x10 [ 171.978772][ T7523] ? fput+0xa0/0xd0 [ 171.978880][ T7523] ? ksys_write+0x242/0x270 [ 171.978945][ T7523] ? __pfx_ksys_write+0x10/0x10 [ 171.979024][ T7523] __x64_sys_mlock+0x60/0x70 [ 171.979091][ T7523] do_syscall_64+0x14d/0xf80 [ 171.979174][ T7523] ? trace_irq_disable+0x3b/0x150 [ 171.979221][ T7523] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.979250][ T7523] ? clear_bhb_loop+0x40/0x90 [ 171.979315][ T7523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.979363][ T7523] RIP: 0033:0x7f4f4c79c819 [ 171.979402][ T7523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.979446][ T7523] RSP: 002b:00007f4f4d677028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 171.979496][ T7523] RAX: ffffffffffffffda RBX: 00007f4f4ca15fa0 RCX: 00007f4f4c79c819 [ 171.979526][ T7523] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 171.979560][ T7523] RBP: 00007f4f4d677090 R08: 0000000000000000 R09: 0000000000000000 [ 171.979589][ T7523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.979617][ T7523] R13: 00007f4f4ca16038 R14: 00007f4f4ca15fa0 R15: 00007f4f4cb3fa48 [ 171.979679][ T7523] [ 172.921593][ T7535] loop5: detected capacity change from 0 to 7 [ 173.058263][ T7535] Dev loop5: unable to read RDB block 7 [ 173.231936][ T5267] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 173.337579][ T7535] loop5: AHDI p1 [ 173.359545][ T7535] loop5: partition table partially beyond EOD, truncated [ 173.618274][ T5267] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 173.627642][ T5267] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.635699][ T5267] usb 1-1: Product: syz [ 173.640326][ T5267] usb 1-1: Manufacturer: syz [ 173.656787][ T5267] usb 1-1: SerialNumber: syz [ 173.734575][ T5267] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 173.800298][ T7555] netlink: 12 bytes leftover after parsing attributes in process `syz.5.395'. [ 173.891427][ T24] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 173.901187][ T7558] netlink: 'syz.5.395': attribute type 1 has an invalid length. [ 173.909053][ T7558] netlink: 56 bytes leftover after parsing attributes in process `syz.5.395'. [ 173.997573][ T5886] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 174.152388][ T5886] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 174.181323][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.216081][ T5886] usb 4-1: Product: syz [ 174.240849][ T5886] usb 4-1: Manufacturer: syz [ 174.245494][ T5886] usb 4-1: SerialNumber: syz [ 174.513758][ T5886] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 174.571853][ T5886] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 174.618251][ T5886] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 174.651306][ T5886] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 174.676164][ T5886] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 174.709930][ T7541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.729408][ T5886] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 174.738312][ T7541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.749505][ T5906] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 174.781102][ T5886] usb 4-1: USB disconnect, device number 17 [ 174.939964][ T7579] FAULT_INJECTION: forcing a failure. [ 174.939964][ T7579] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 174.954656][ T7579] CPU: 1 UID: 0 PID: 7579 Comm: syz.1.402 Tainted: G L syzkaller #0 PREEMPT(full) [ 174.954689][ T7579] Tainted: [L]=SOFTLOCKUP [ 174.954696][ T7579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 174.954708][ T7579] Call Trace: [ 174.954716][ T7579] [ 174.954723][ T7579] dump_stack_lvl+0xe8/0x150 [ 174.954756][ T7579] should_fail_ex+0x412/0x560 [ 174.954781][ T7579] prepare_alloc_pages+0x22a/0x650 [ 174.954815][ T7579] __alloc_frozen_pages_noprof+0x12f/0x380 [ 174.954855][ T7579] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 174.954884][ T7579] ? __pfx_policy_nodemask+0x10/0x10 [ 174.954913][ T7579] ? __lock_acquire+0x6b5/0x2cf0 [ 174.954941][ T7579] alloc_pages_mpol+0x232/0x4a0 [ 174.954972][ T7579] vma_alloc_folio_noprof+0xea/0x210 [ 174.955000][ T7579] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 174.955036][ T7579] do_pte_missing+0x1656/0x3490 [ 174.955074][ T7579] handle_mm_fault+0x1bec/0x3310 [ 174.955117][ T7579] ? handle_mm_fault+0xee/0x3310 [ 174.955153][ T7579] ? __pfx_handle_mm_fault+0x10/0x10 [ 174.955183][ T7579] ? follow_page_pte+0x841/0x1450 [ 174.955209][ T7579] ? __pfx_follow_page_pte+0x10/0x10 [ 174.955237][ T7579] __get_user_pages+0x165b/0x29d0 [ 174.955297][ T7579] populate_vma_page_range+0x2be/0x3c0 [ 174.955329][ T7579] ? __pfx_populate_vma_page_range+0x10/0x10 [ 174.955361][ T7579] ? down_read+0x272/0x2e0 [ 174.955378][ T7579] ? __mm_populate+0x173/0x390 [ 174.955408][ T7579] __mm_populate+0x25f/0x390 [ 174.955437][ T7579] ? __pfx___mm_populate+0x10/0x10 [ 174.955473][ T7579] do_mlock+0x646/0x750 [ 174.955508][ T7579] ? __pfx_do_mlock+0x10/0x10 [ 174.955534][ T7579] ? fput+0xa0/0xd0 [ 174.955566][ T7579] ? rcu_is_watching+0x15/0xb0 [ 174.955601][ T7579] __x64_sys_mlock+0x60/0x70 [ 174.955625][ T7579] do_syscall_64+0x14d/0xf80 [ 174.955653][ T7579] ? trace_irq_disable+0x3b/0x150 [ 174.955669][ T7579] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.955688][ T7579] ? clear_bhb_loop+0x40/0x90 [ 174.955711][ T7579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.955730][ T7579] RIP: 0033:0x7f0e3b99c819 [ 174.955747][ T7579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.955762][ T7579] RSP: 002b:00007f0e3c919028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 174.955782][ T7579] RAX: ffffffffffffffda RBX: 00007f0e3bc15fa0 RCX: 00007f0e3b99c819 [ 174.955795][ T7579] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 174.955807][ T7579] RBP: 00007f0e3c919090 R08: 0000000000000000 R09: 0000000000000000 [ 174.955818][ T7579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.955829][ T7579] R13: 00007f0e3bc16038 R14: 00007f0e3bc15fa0 R15: 00007f0e3bd3fa48 [ 174.955858][ T7579] [ 175.065629][ T5906] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 175.281525][ T5916] usb 1-1: USB disconnect, device number 22 [ 175.347505][ T24] usb 1-1: Service connection timeout for: 256 [ 175.347822][ T5906] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.354530][ T24] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 175.371806][ T5906] usb 5-1: config 0 interface 0 has no altsetting 0 [ 175.379796][ T5906] usb 5-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00 [ 175.389720][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.392476][ T24] ath9k_htc: Failed to initialize the device [ 175.409348][ T5916] usb 1-1: ath9k_htc: USB layer deinitialized [ 175.439010][ T5906] usb 5-1: config 0 descriptor?? [ 175.667585][ T7586] loop5: detected capacity change from 0 to 7 [ 175.674636][ T7586] Dev loop5: unable to read RDB block 7 [ 175.680342][ T7586] loop5: AHDI p1 [ 175.684066][ T7586] loop5: partition table partially beyond EOD, truncated [ 175.862774][ T5906] hid (null): bogus close delimiter [ 175.872777][ T5194] Dev loop5: unable to read RDB block 7 [ 175.879476][ T5194] loop5: AHDI p1 [ 175.886368][ T5194] loop5: partition table partially beyond EOD, truncated [ 176.005306][ T5906] uclogic 0003:28BD:0078.0008: interface is invalid, ignoring [ 176.079423][ T5906] usb 5-1: USB disconnect, device number 29 [ 176.217695][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 176.378731][ T24] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 176.478770][ T5886] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 176.559771][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 176.569655][ T24] usb 6-1: config 4 interface 0 has no altsetting 0 [ 176.581814][ T24] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 176.591237][ T24] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 176.599932][ T24] usb 6-1: Manufacturer: Ñ• [ 176.605788][ T7601] netlink: 4 bytes leftover after parsing attributes in process `syz.1.410'. [ 176.736873][ T5886] usb 1-1: Using ep0 maxpacket: 32 [ 176.746076][ T5886] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 176.766222][ T5886] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 176.781381][ T5886] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 176.791391][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.801398][ T5886] usb 1-1: Product: ᑈ [ 176.805649][ T5886] usb 1-1: Manufacturer: Ñ• [ 176.811357][ T5886] usb 1-1: SerialNumber: ᗎ敎ᭌ嗿ᯘ㲜⭩ã¦äš»ì‰«å‚®í—°ï½¾î¬¤ìœ ì˜¥ëŸ•ì—¦ï˜©è’ªá¿’뉫⢺ⅲå¿åŽ®ã–’鑦Ⲃᜳᅎ̪높碟୿馵倨ä²ï·™ï¦Ÿã£µá²é€°î¶æ·¯á±‘뽋ë–磭䄭쿿砭굛ä³á„꿎ꊓ癌㯺撦횉㊪ï™êž¸â“¨á“‡ëª³éŒ¨îª‘㣆㟼茬å­ä‹¹é…¾í‘¤à¼±â¥šé±â¼Žç¯»è¦€é¥žé”©ïƒ‰ê‚¹ë‰¾ç©£ç”¸ [ 176.970091][ T24] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 176.990452][ T24] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 177.001529][ T24] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 177.017273][ T24] usb 6-1: media controller created [ 177.061537][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 177.143438][ T24] zl10353_read_register: readreg error (reg=127, ret==0) [ 177.251674][ T24] usb 6-1: USB disconnect, device number 9 [ 177.288609][ T5886] cdc_ncm 1-1:1.0: bind() failure [ 177.337791][ T5886] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 177.351638][ T5886] cdc_ncm 1-1:1.1: bind() failure [ 177.397710][ T5886] usb 1-1: USB disconnect, device number 23 [ 177.443353][ T7623] FAULT_INJECTION: forcing a failure. [ 177.443353][ T7623] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 177.527615][ T7623] CPU: 0 UID: 0 PID: 7623 Comm: syz.1.414 Tainted: G L syzkaller #0 PREEMPT(full) [ 177.527648][ T7623] Tainted: [L]=SOFTLOCKUP [ 177.527655][ T7623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 177.527667][ T7623] Call Trace: [ 177.527675][ T7623] [ 177.527701][ T7623] dump_stack_lvl+0xe8/0x150 [ 177.527735][ T7623] should_fail_ex+0x412/0x560 [ 177.527763][ T7623] prepare_alloc_pages+0x22a/0x650 [ 177.527800][ T7623] __alloc_frozen_pages_noprof+0x12f/0x380 [ 177.527835][ T7623] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 177.527868][ T7623] ? __pfx_policy_nodemask+0x10/0x10 [ 177.527902][ T7623] ? __lock_acquire+0x6b5/0x2cf0 [ 177.527935][ T7623] alloc_pages_mpol+0x232/0x4a0 [ 177.527968][ T7623] vma_alloc_folio_noprof+0xea/0x210 [ 177.528000][ T7623] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 177.528041][ T7623] do_pte_missing+0x1656/0x3490 [ 177.528090][ T7623] handle_mm_fault+0x1bec/0x3310 [ 177.528140][ T7623] ? handle_mm_fault+0xee/0x3310 [ 177.528180][ T7623] ? __pfx_handle_mm_fault+0x10/0x10 [ 177.528215][ T7623] ? follow_page_pte+0x841/0x1450 [ 177.528246][ T7623] ? __pfx_follow_page_pte+0x10/0x10 [ 177.528277][ T7623] __get_user_pages+0x165b/0x29d0 [ 177.528341][ T7623] populate_vma_page_range+0x2be/0x3c0 [ 177.528378][ T7623] ? __pfx_populate_vma_page_range+0x10/0x10 [ 177.528415][ T7623] ? down_read+0x272/0x2e0 [ 177.528435][ T7623] ? __mm_populate+0x173/0x390 [ 177.528468][ T7623] __mm_populate+0x25f/0x390 [ 177.528503][ T7623] ? __pfx___mm_populate+0x10/0x10 [ 177.528546][ T7623] do_mlock+0x646/0x750 [ 177.528585][ T7623] ? __pfx_do_mlock+0x10/0x10 [ 177.528616][ T7623] ? fput+0xa0/0xd0 [ 177.528652][ T7623] ? ksys_write+0x242/0x270 [ 177.528679][ T7623] ? __pfx_ksys_write+0x10/0x10 [ 177.528713][ T7623] __x64_sys_mlock+0x60/0x70 [ 177.528742][ T7623] do_syscall_64+0x14d/0xf80 [ 177.528774][ T7623] ? trace_irq_disable+0x3b/0x150 [ 177.528793][ T7623] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.528815][ T7623] ? clear_bhb_loop+0x40/0x90 [ 177.528842][ T7623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.528863][ T7623] RIP: 0033:0x7f0e3b99c819 [ 177.528883][ T7623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.528913][ T7623] RSP: 002b:00007f0e3c919028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 177.528935][ T7623] RAX: ffffffffffffffda RBX: 00007f0e3bc15fa0 RCX: 00007f0e3b99c819 [ 177.528950][ T7623] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 177.528963][ T7623] RBP: 00007f0e3c919090 R08: 0000000000000000 R09: 0000000000000000 [ 177.528976][ T7623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.528988][ T7623] R13: 00007f0e3bc16038 R14: 00007f0e3bc15fa0 R15: 00007f0e3bd3fa48 [ 177.529020][ T7623] [ 178.117997][ T7636] netlink: 12 bytes leftover after parsing attributes in process `syz.5.417'. [ 178.530682][ T7652] netlink: 28 bytes leftover after parsing attributes in process `syz.3.423'. [ 178.633435][ T7652] openvswitch: netlink: Flow key attr not present in new flow. [ 179.731314][ T7675] FAULT_INJECTION: forcing a failure. [ 179.731314][ T7675] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 179.857818][ T7675] CPU: 1 UID: 0 PID: 7675 Comm: syz.1.429 Tainted: G L syzkaller #0 PREEMPT(full) [ 179.857860][ T7675] Tainted: [L]=SOFTLOCKUP [ 179.857867][ T7675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 179.857881][ T7675] Call Trace: [ 179.857889][ T7675] [ 179.857899][ T7675] dump_stack_lvl+0xe8/0x150 [ 179.857933][ T7675] should_fail_ex+0x412/0x560 [ 179.857962][ T7675] prepare_alloc_pages+0x22a/0x650 [ 179.858000][ T7675] __alloc_frozen_pages_noprof+0x12f/0x380 [ 179.858033][ T7675] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 179.858066][ T7675] ? __pfx_policy_nodemask+0x10/0x10 [ 179.858100][ T7675] ? __lock_acquire+0x6b5/0x2cf0 [ 179.858132][ T7675] alloc_pages_mpol+0x232/0x4a0 [ 179.858168][ T7675] vma_alloc_folio_noprof+0xea/0x210 [ 179.858200][ T7675] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 179.858242][ T7675] do_pte_missing+0x1656/0x3490 [ 179.858288][ T7675] handle_mm_fault+0x1bec/0x3310 [ 179.858339][ T7675] ? handle_mm_fault+0xee/0x3310 [ 179.858381][ T7675] ? __pfx_handle_mm_fault+0x10/0x10 [ 179.858417][ T7675] ? follow_page_pte+0x841/0x1450 [ 179.858447][ T7675] ? __pfx_follow_page_pte+0x10/0x10 [ 179.858479][ T7675] __get_user_pages+0x165b/0x29d0 [ 179.858545][ T7675] populate_vma_page_range+0x2be/0x3c0 [ 179.858581][ T7675] ? __pfx_populate_vma_page_range+0x10/0x10 [ 179.858620][ T7675] ? down_read+0x272/0x2e0 [ 179.858641][ T7675] ? __mm_populate+0x173/0x390 [ 179.858675][ T7675] __mm_populate+0x25f/0x390 [ 179.858710][ T7675] ? __pfx___mm_populate+0x10/0x10 [ 179.858753][ T7675] do_mlock+0x646/0x750 [ 179.858793][ T7675] ? __pfx_do_mlock+0x10/0x10 [ 179.858834][ T7675] ? fput+0xa0/0xd0 [ 179.858900][ T7675] ? ksys_write+0x242/0x270 [ 179.858923][ T7675] ? __pfx_ksys_write+0x10/0x10 [ 179.858952][ T7675] __x64_sys_mlock+0x60/0x70 [ 179.858976][ T7675] do_syscall_64+0x14d/0xf80 [ 179.859004][ T7675] ? trace_irq_disable+0x3b/0x150 [ 179.859020][ T7675] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.859039][ T7675] ? clear_bhb_loop+0x40/0x90 [ 179.859061][ T7675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.859080][ T7675] RIP: 0033:0x7f0e3b99c819 [ 179.859097][ T7675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.859113][ T7675] RSP: 002b:00007f0e3c919028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 179.859134][ T7675] RAX: ffffffffffffffda RBX: 00007f0e3bc15fa0 RCX: 00007f0e3b99c819 [ 179.859147][ T7675] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 179.859159][ T7675] RBP: 00007f0e3c919090 R08: 0000000000000000 R09: 0000000000000000 [ 179.859171][ T7675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.859182][ T7675] R13: 00007f0e3bc16038 R14: 00007f0e3bc15fa0 R15: 00007f0e3bd3fa48 [ 179.859210][ T7675] [ 180.339569][ T7652] geneve2: entered promiscuous mode [ 180.344851][ T7652] geneve2: entered allmulticast mode [ 180.565471][ T7678] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.430'. [ 180.586241][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 180.586258][ T30] audit: type=1326 audit(1776159521.235:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7679 comm="syz.5.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3afbf9c819 code=0x7ffc0000 [ 180.691426][ T30] audit: type=1326 audit(1776159521.235:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7679 comm="syz.5.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3afbf9c819 code=0x7ffc0000 [ 180.723685][ T30] audit: type=1326 audit(1776159521.275:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7679 comm="syz.5.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f3afbf9c819 code=0x7ffc0000 [ 180.795028][ T30] audit: type=1326 audit(1776159521.275:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7679 comm="syz.5.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3afbf9c582 code=0x7ffc0000 [ 180.807772][ T24] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 180.877393][ T7689] syzkaller1: entered promiscuous mode [ 180.883003][ T7689] syzkaller1: entered allmulticast mode [ 180.912408][ T30] audit: type=1326 audit(1776159521.275:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7679 comm="syz.5.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3afbf9c582 code=0x7ffc0000 [ 180.957049][ T30] audit: type=1326 audit(1776159521.275:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7679 comm="syz.5.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3afbf9c819 code=0x7ffc0000 [ 181.017677][ T30] audit: type=1326 audit(1776159521.275:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7679 comm="syz.5.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f3afbf9c819 code=0x7ffc0000 [ 181.087599][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 181.096183][ T24] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 181.105709][ T24] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 181.125465][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 181.156794][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 181.156828][ T5916] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 181.174511][ T30] audit: type=1326 audit(1776159521.275:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7679 comm="syz.5.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3afbf9c819 code=0x7ffc0000 [ 181.201156][ T24] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 181.216758][ T30] audit: type=1326 audit(1776159521.275:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7679 comm="syz.5.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3afbf9c819 code=0x7ffc0000 [ 181.241137][ T24] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 181.251541][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.377610][ T5916] usb 2-1: Using ep0 maxpacket: 16 [ 181.401212][ T5916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 181.514470][ T7672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.530229][ T7672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.547377][ T24] usb 5-1: usb_control_msg returned -32 [ 181.553610][ T24] usbtmc 5-1:16.0: can't read capabilities [ 181.559912][ T7672] binder: 7670:7672 ioctl 4018620d 0 returned -22 [ 181.568926][ T5916] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 181.600154][ T5916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 56664, setting to 1024 [ 181.635663][ T5916] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 181.670133][ T5916] usb 2-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 181.687542][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.713090][ T5916] usb 2-1: Product: syz [ 181.740578][ T5916] usb 2-1: Manufacturer: syz [ 181.745206][ T5916] usb 2-1: SerialNumber: syz [ 181.815636][ T5916] usb 2-1: config 0 descriptor?? [ 181.822395][ T7689] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 181.837655][ T7689] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 181.852406][ C0] port100 2-1:0.0: NFC: Urb failure (status -71) [ 181.877835][ C0] port100 2-1:0.0: NFC: Urb failure (status -71) [ 181.917187][ T5916] port100 2-1:0.0: NFC: Could not get supported command types [ 181.946796][ T7699] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 181.955236][ T7699] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 182.000225][ T7695] usbtmc 5-1:16.0: INITIATE_ABORT_BULK_IN returned 0 [ 182.074831][ T5916] usb 2-1: USB disconnect, device number 22 [ 182.202731][ T5899] usb 5-1: USB disconnect, device number 30 [ 182.601792][ T7709] netlink: 4 bytes leftover after parsing attributes in process `syz.5.439'. [ 182.617530][ T5916] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 182.742017][ T7713] netlink: 12 bytes leftover after parsing attributes in process `syz.5.439'. [ 182.814233][ T7713] netlink: 56 bytes leftover after parsing attributes in process `syz.5.439'. [ 182.897485][ T5916] usb 4-1: Using ep0 maxpacket: 8 [ 182.930369][ T7715] loop5: detected capacity change from 0 to 7 [ 182.948994][ T5916] usb 4-1: config 2 has an invalid interface number: 72 but max is 0 [ 182.965267][ T5916] usb 4-1: config 2 has no interface number 0 [ 182.976353][ T7165] Dev loop5: unable to read RDB block 7 [ 183.035852][ T7165] loop5: AHDI p2 [ 183.040586][ T5916] usb 4-1: config 2 interface 72 has no altsetting 0 [ 183.051111][ T7165] loop5: partition table partially beyond EOD, truncated [ 183.069266][ T5916] usb 4-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=cf.6f [ 183.087628][ T7715] Dev loop5: unable to read RDB block 7 [ 183.093350][ T7715] loop5: AHDI p2 [ 183.097175][ T7715] loop5: partition table partially beyond EOD, truncated [ 183.110082][ T7721] netlink: 16 bytes leftover after parsing attributes in process `syz.4.441'. [ 183.119335][ T7721] openvswitch: netlink: Flow actions attr not present in new flow. [ 183.289945][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.311855][ T5916] usb 4-1: Product: syz [ 183.322340][ T5916] usb 4-1: Manufacturer: syz [ 183.330752][ T5916] usb 4-1: SerialNumber: syz [ 183.354982][ T7723] geneve2: entered promiscuous mode [ 183.360356][ T7723] geneve2: entered allmulticast mode [ 183.640613][ T7705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.662381][ T7705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.686290][ T5916] usb 4-1: bad CDC descriptors [ 183.755027][ T5916] usb 4-1: USB disconnect, device number 18 [ 184.063921][ T7731] netlink: 20 bytes leftover after parsing attributes in process `syz.0.443'. [ 184.123290][ T7731] netlink: 12 bytes leftover after parsing attributes in process `syz.0.443'. [ 184.768325][ T7738] netlink: 'syz.4.446': attribute type 1 has an invalid length. [ 184.838553][ T7738] binder: 7737:7738 ioctl c018620b 200000000240 returned -14 [ 184.987550][ T5925] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 185.221428][ T5925] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 185.245359][ T5925] usb 4-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 185.289046][ T5925] usb 4-1: Product: syz [ 185.307349][ T5925] usb 4-1: Manufacturer: syz [ 185.332629][ T5925] usb 4-1: SerialNumber: syz [ 185.363019][ T5925] usb 4-1: config 0 descriptor?? [ 185.407170][ T7763] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 185.461289][ T5925] ch341 4-1:0.0: ch341-uart converter detected [ 185.498260][ T7766] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 185.645325][ T7763] netlink: 376 bytes leftover after parsing attributes in process `syz.1.452'. [ 185.674544][ T5906] IPVS: starting estimator thread 0... [ 185.742205][ T5925] usb 4-1: failed to receive control message: -121 [ 185.752978][ T5925] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 185.767616][ T7772] IPVS: using max 32 ests per chain, 76800 per kthread [ 185.807761][ T5886] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 185.988051][ T5886] usb 5-1: Using ep0 maxpacket: 32 [ 186.204539][ T5886] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 186.216385][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.249429][ T5886] usb 5-1: config 0 descriptor?? [ 186.286921][ T5886] gspca_main: sq930x-2.14.0 probing 041e:403c [ 186.629729][ T7777] netlink: 56 bytes leftover after parsing attributes in process `syz.0.455'. [ 186.638825][ T7777] netlink: 56 bytes leftover after parsing attributes in process `syz.0.455'. [ 186.666552][ T7777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.455'. [ 186.686292][ T7768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.697959][ T7768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.947593][ T5886] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 186.953548][ T5886] sq930x 5-1:0.0: probe with driver sq930x failed with error -71 [ 186.986413][ T5886] usb 5-1: USB disconnect, device number 31 [ 187.075678][ T7787] openvswitch: netlink: Flow actions attr not present in new flow. [ 187.120351][ T7788] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 187.222862][ T7789] geneve2: entered promiscuous mode [ 187.228210][ T7789] geneve2: entered allmulticast mode [ 187.777806][ T24] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 187.989159][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 188.014707][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.035627][ T30] audit: type=1326 audit(1776159528.685:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7795 comm="syz.4.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4c79c819 code=0x7ffc0000 [ 188.067553][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.077315][ T24] usb 2-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 188.096006][ T30] audit: type=1326 audit(1776159528.685:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7795 comm="syz.4.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4c79c819 code=0x7ffc0000 [ 188.118821][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.131977][ T24] usb 2-1: config 0 descriptor?? [ 188.180024][ T30] audit: type=1326 audit(1776159528.685:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7795 comm="syz.4.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4c79c819 code=0x7ffc0000 [ 188.338633][ T30] audit: type=1326 audit(1776159528.745:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7795 comm="syz.4.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f4f4c79c819 code=0x7ffc0000 [ 188.473236][ T30] audit: type=1326 audit(1776159528.745:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7795 comm="syz.4.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4c79c819 code=0x7ffc0000 [ 188.605460][ T24] razer 0003:1532:011B.0009: unbalanced collection at end of report description [ 188.686767][ T30] audit: type=1326 audit(1776159528.745:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7795 comm="syz.4.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4c79c819 code=0x7ffc0000 [ 188.711787][ T24] razer 0003:1532:011B.0009: probe with driver razer failed with error -22 [ 188.761036][ T30] audit: type=1326 audit(1776159528.745:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7795 comm="syz.4.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4c79c819 code=0x7ffc0000 [ 188.825366][ T7808] loop5: detected capacity change from 0 to 7 [ 188.840018][ T7801] netlink: 'syz.0.459': attribute type 10 has an invalid length. [ 188.857902][ T7801] team0: Port device dummy0 added [ 188.877129][ T30] audit: type=1326 audit(1776159528.745:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7795 comm="syz.4.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4c79c819 code=0x7ffc0000 [ 188.877159][ T7165] Dev loop5: unable to read RDB block 7 [ 188.905872][ T30] audit: type=1326 audit(1776159528.795:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7795 comm="syz.4.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4f4c79c4ab code=0x7ffc0000 [ 188.945003][ T24] usb 4-1: USB disconnect, device number 19 [ 188.948120][ T30] audit: type=1326 audit(1776159528.805:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7795 comm="syz.4.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4c79c819 code=0x7ffc0000 [ 189.005349][ T24] ch341 4-1:0.0: device disconnected [ 189.013015][ T7165] loop5: AHDI p1 [ 189.016722][ T7165] loop5: partition table partially beyond EOD, truncated [ 189.043022][ T7808] Dev loop5: unable to read RDB block 7 [ 189.118268][ T7808] loop5: AHDI p1 [ 189.128408][ T7808] loop5: partition table partially beyond EOD, truncated [ 189.716417][ T7820] syzkaller0: entered promiscuous mode [ 189.737722][ T7820] syzkaller0: entered allmulticast mode [ 189.773856][ T7820] tipc: Started in network mode [ 189.801428][ T7820] tipc: Node identity b22dd6f7daa8, cluster identity 4711 [ 189.824776][ T7820] tipc: Enabled bearer , priority 0 [ 189.852924][ T7818] tipc: Resetting bearer [ 189.872953][ T7818] tipc: Disabling bearer [ 189.923385][ T7827] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 190.031914][ T7832] tipc: Enabling of bearer rejected, failed to enable media [ 190.043523][ T7832] __nla_validate_parse: 1 callbacks suppressed [ 190.043540][ T7832] netlink: 12 bytes leftover after parsing attributes in process `syz.3.468'. [ 190.072996][ T7832] program syz.3.468 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 190.187520][ T5925] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 190.400186][ T5925] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 190.424930][ T5925] usb 5-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 190.461866][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.481171][ T5925] usb 5-1: config 0 descriptor?? [ 190.673344][ T7840] netlink: 16 bytes leftover after parsing attributes in process `syz.0.470'. [ 190.682703][ T7840] openvswitch: netlink: Flow actions attr not present in new flow. [ 190.752119][ T24] usb 2-1: USB disconnect, device number 23 [ 190.910868][ T5925] usbhid 5-1:0.0: can't add hid device: -71 [ 190.922254][ T5925] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 190.949100][ T5925] usb 5-1: USB disconnect, device number 32 [ 191.119773][ T7850] geneve2: entered promiscuous mode [ 191.125181][ T7850] geneve2: entered allmulticast mode [ 191.607531][ T5925] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 191.777515][ T5925] usb 2-1: Using ep0 maxpacket: 16 [ 191.792012][ T5925] usb 2-1: unable to get BOS descriptor or descriptor too short [ 191.808885][ T5925] usb 2-1: config 8 has an invalid interface number: 11 but max is 1 [ 191.817303][ T5925] usb 2-1: config 8 has an invalid interface number: 179 but max is 1 [ 191.825859][ T5925] usb 2-1: config 8 has no interface number 0 [ 191.852588][ T5925] usb 2-1: config 8 has no interface number 1 [ 191.867387][ T5925] usb 2-1: config 8 interface 11 has no altsetting 0 [ 191.895006][ T5925] usb 2-1: config 8 interface 179 has no altsetting 0 [ 191.921469][ T5925] usb 2-1: New USB device found, idVendor=12d1, idProduct=3e9e, bcdDevice= d.d6 [ 191.934215][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.942379][ T5925] usb 2-1: Product: syz [ 191.946581][ T5925] usb 2-1: Manufacturer: syz [ 191.952771][ T5925] usb 2-1: SerialNumber: syz [ 192.008044][ T24] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 192.209999][ T24] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 192.241436][ T24] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 192.278641][ T24] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 192.298715][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.317326][ T7862] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 192.347277][ T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 192.375504][ T5925] option 2-1:8.11: GSM modem (1-port) converter detected [ 192.621294][ T5925] usb 2-1: USB disconnect, device number 24 [ 192.640579][ T5925] option 2-1:8.11: device disconnected [ 192.947839][ T12] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 193.295022][ T5899] usb 5-1: USB disconnect, device number 33 [ 193.489982][ T7882] netlink: 28 bytes leftover after parsing attributes in process `syz.5.482'. [ 193.499040][ T7882] openvswitch: netlink: Flow key attr not present in new flow. [ 193.619917][ T7893] warning: `syz.0.485' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 193.773339][ T7901] geneve2: entered promiscuous mode [ 193.781310][ T7901] geneve2: entered allmulticast mode [ 193.917541][ T5925] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 193.967511][ T5886] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 194.100245][ T5899] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 194.117517][ T5925] usb 2-1: Using ep0 maxpacket: 16 [ 194.130649][ T5925] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 194.161933][ T5925] usb 2-1: config 0 interface 0 has no altsetting 0 [ 194.172518][ T7900] netdevsim0: mtu less than device minimum [ 194.187495][ T5886] usb 1-1: Using ep0 maxpacket: 8 [ 194.194350][ T5886] usb 1-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 194.226537][ T5886] usb 1-1: config 1 interface 0 has no altsetting 0 [ 194.242594][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.249071][ T5925] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 194.259337][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.273640][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.285135][ T5925] usb 2-1: Product: syz [ 194.289619][ T5925] usb 2-1: Manufacturer: syz [ 194.300982][ T5925] usb 2-1: SerialNumber: syz [ 194.317787][ T5925] usb 2-1: config 0 descriptor?? [ 194.323859][ T5899] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 194.332150][ T5899] usb 5-1: config 0 has no interface number 0 [ 194.342889][ T5899] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.496595][ T5899] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.506646][ T5899] usb 5-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 194.531112][ T5886] usb 1-1: string descriptor 0 read error: -22 [ 194.544533][ T5925] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input14 [ 194.549534][ T5899] usb 5-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 194.576391][ T5886] usb 1-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.40 [ 194.587796][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.648483][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.719349][ T5899] usb 5-1: config 0 descriptor?? [ 194.959850][ T5925] rc_core: IR keymap rc-imon-pad not found [ 194.967549][ T5925] Registered IR keymap rc-empty [ 194.986122][ T5925] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 195.017383][ T5886] usbhid 1-1:1.0: can't add hid device: -32 [ 195.023963][ T5886] usbhid 1-1:1.0: probe with driver usbhid failed with error -32 [ 195.037456][ T5925] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 195.079756][ T5925] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 195.093742][ T5925] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input15 [ 195.107349][ T5925] imon 2-1:0.0: iMON device (15c2:0041, intf0) on usb<2:25> initialized [ 195.644745][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 195.652323][ T5886] usb 2-1: USB disconnect, device number 25 [ 195.681140][ T5899] input: HID 28bd:0042 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0042.000A/input/input16 [ 195.790115][ T5899] uclogic 0003:28BD:0042.000A: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.4-1/input1 [ 195.841224][ T5899] usb 5-1: USB disconnect, device number 34 [ 195.928978][ T7931] fido_id[7931]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 195.963086][ T7933] openvswitch: netlink: Flow actions attr not present in new flow. [ 196.097367][ T7936] geneve3: entered promiscuous mode [ 196.123945][ T7936] geneve3: entered allmulticast mode [ 196.226627][ T7941] loop5: detected capacity change from 0 to 7 [ 196.234336][ T7941] Dev loop5: unable to read RDB block 7 [ 196.247932][ T7941] loop5: AHDI p1 [ 196.251629][ T7941] loop5: partition table partially beyond EOD, truncated [ 196.664602][ T5906] usb 1-1: USB disconnect, device number 24 [ 196.757698][ T7946] netlink: 'syz.0.499': attribute type 30 has an invalid length. [ 196.765511][ T7946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.499'. [ 196.825630][ T7946] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.062664][ T7960] loop2: detected capacity change from 0 to 7 [ 197.072755][ T7165] Dev loop2: unable to read RDB block 7 [ 197.078656][ T7165] loop2: unable to read partition table [ 197.087896][ T7165] loop2: partition table beyond EOD, truncated [ 197.107949][ T7960] Dev loop2: unable to read RDB block 7 [ 197.120775][ T7960] loop2: unable to read partition table [ 197.130756][ T7960] loop2: partition table beyond EOD, truncated [ 197.136975][ T7960] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 197.358554][ T5925] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 197.576744][ T5925] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 197.788532][ T5906] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 197.957578][ T5906] usb 2-1: Using ep0 maxpacket: 16 [ 197.974531][ T5906] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 197.985527][ T5906] usb 2-1: config 0 has no interface number 0 [ 198.000410][ T5906] usb 2-1: too many endpoints for config 0 interface 133 altsetting 0: 33, using maximum allowed: 30 [ 198.021676][ T5906] usb 2-1: config 0 interface 133 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 129 [ 198.042541][ T5906] usb 2-1: config 0 interface 133 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 198.069159][ T5906] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=a7.3d [ 198.078507][ T5906] usb 2-1: New USB device strings: Mfr=214, Product=216, SerialNumber=142 [ 198.087069][ T5906] usb 2-1: Product: syz [ 198.101480][ T5906] usb 2-1: Manufacturer: syz [ 198.106124][ T5906] usb 2-1: SerialNumber: syz [ 198.121534][ T5906] usb 2-1: config 0 descriptor?? [ 198.127841][ T7972] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 198.227513][ T5925] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 198.378776][ T7972] binder: 7971:7972 ioctl c018620c 0 returned -14 [ 198.385604][ T5925] usb 6-1: Using ep0 maxpacket: 32 [ 198.390219][ T7972] netlink: 'syz.1.507': attribute type 5 has an invalid length. [ 198.401293][ T5925] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 198.409516][ T5925] usb 6-1: config 0 has no interface number 0 [ 198.415625][ T5925] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 198.444385][ T5925] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 198.475069][ T5925] usb 6-1: config 0 interface 85 has no altsetting 0 [ 198.494429][ T5925] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 198.504345][ T5925] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.524441][ T5925] usb 6-1: Product: syz [ 198.535150][ T5925] usb 6-1: Manufacturer: syz [ 198.540960][ T5925] usb 6-1: SerialNumber: syz [ 198.559108][ T5925] usb 6-1: config 0 descriptor?? [ 198.594114][ T7981] loop5: detected capacity change from 0 to 7 [ 198.602183][ T5846] Dev loop5: unable to read RDB block 7 [ 198.616560][ T5846] loop5: AHDI p1 [ 198.620853][ T5846] loop5: partition table partially beyond EOD, truncated [ 198.638676][ T5906] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected [ 198.657289][ T5906] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81 [ 198.666675][ T7981] Dev loop5: unable to read RDB block 7 [ 198.674424][ T7981] loop5: AHDI p1 [ 198.678622][ T7981] loop5: partition table partially beyond EOD, truncated [ 198.686533][ T5906] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1 [ 198.698298][ T5906] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2 [ 198.714043][ T5906] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 198.740792][ T5906] usb 2-1: USB disconnect, device number 26 [ 198.756633][ T5906] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 198.771525][ T5906] keyspan 2-1:0.133: device disconnected [ 199.059877][ T5925] appletouch 6-1:0.85: Failed to request geyser raw mode [ 199.077821][ T5925] appletouch 6-1:0.85: probe with driver appletouch failed with error -5 [ 199.098870][ T5925] usb 6-1: USB disconnect, device number 10 [ 199.186877][ T7994] loop2: detected capacity change from 0 to 7 [ 199.197161][ T7994] Dev loop2: unable to read RDB block 7 [ 199.204541][ T7994] loop2: unable to read partition table [ 199.212533][ T7994] loop2: partition table beyond EOD, truncated [ 199.220786][ T7994] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 199.407502][ T5906] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 199.557794][ T5916] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 199.579232][ T5906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.678276][ T5906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.703792][ T5906] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 199.737637][ T5906] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 199.767474][ T5916] usb 4-1: Using ep0 maxpacket: 32 [ 199.868576][ T5916] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 199.877553][ T5916] usb 4-1: config 0 has no interface number 0 [ 199.883718][ T5916] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 199.893825][ T5906] usb 1-1: Manufacturer: syz [ 199.902464][ T5916] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 199.911872][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.921982][ T5906] usb 1-1: config 0 descriptor?? [ 200.003967][ T5916] usb 4-1: Product: syz [ 200.022856][ T5916] usb 4-1: Manufacturer: syz [ 200.044422][ T5916] usb 4-1: SerialNumber: syz [ 200.070674][ T5916] usb 4-1: config 0 descriptor?? [ 200.086016][ T7996] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 200.302000][ T7996] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 200.484455][ T5906] uclogic 0003:256C:006D.000C: failed retrieving Huion firmware version: -71 [ 200.511348][ T5906] uclogic 0003:256C:006D.000C: failed probing parameters: -71 [ 200.521951][ T5906] uclogic 0003:256C:006D.000C: probe with driver uclogic failed with error -71 [ 200.563639][ T5906] usb 1-1: USB disconnect, device number 25 [ 200.844571][ T7996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.868306][ T7996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.207561][ T5906] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 201.227766][ T5899] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 201.379361][ T5906] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 201.409126][ T5906] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 201.415071][ T8041] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 201.432293][ T5839] Bluetooth: hci3: command 0x0406 tx timeout [ 201.433434][ T5842] Bluetooth: hci0: command 0x0406 tx timeout [ 201.443331][ T5839] Bluetooth: hci2: command 0x0406 tx timeout [ 201.444876][ T5842] Bluetooth: hci4: command 0x0406 tx timeout [ 201.474204][ T5906] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 201.483390][ T5899] usb 1-1: Using ep0 maxpacket: 16 [ 201.503565][ T5899] usb 1-1: unable to get BOS descriptor or descriptor too short [ 201.511907][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 201.528593][ T5906] usb 2-1: SerialNumber: syz [ 201.534462][ T5899] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 201.575132][ T5899] usb 1-1: string descriptor 0 read error: -22 [ 201.586789][ T5899] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 201.596348][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.619097][ T5899] usb 1-1: 1:1 : invalid channels 0 [ 201.673187][ T5925] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 201.688668][ T8041] ptrace attach of "./syz-executor exec"[5848] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿÇ0HÇÁ 2HƒÈ H!ÐHÇ @ yÐHÇÁ‚ 2HƒÈ H!ÐHÇÂ@ yÐHÇÂ@ HÇÀ yÐHÇÁƒ 2H\x0dÿo H!ÐHÇÂ\x0c@ yÐHÇÁ„ 2H\x0dÿ H!ÐHÇÂ@ yÐHÇÂ, HÇÀ yÐHÇ ( HÇÀÿÿÿÿyÐHÇÂ\x0c HÇÀP yÐHÇÀX HÇ \x0c yÐHÇÂ\x0c yÐHÇÂ\x0c yÐHÇÂ\x0c yÐHÇÂ\x0a\x0c yÐHÇÀØ HÇÂ\x0c\x0c yÐHÇÂ, HÇÀ  yÐHÇ L HÇÀP yÐHÇÂl HÇÀ yÐHÇÂl HÇÀ yÐ ÀHÇ l H‰ÀyÐ ØHÇÂl H‰ÀyÐ àHÇÂl H‰ÀyÐHÇÂl HÇÀ yÐHÇÂl HÇÀ yÐHÇÂ\x0al HÇÀ : yÐHÇÂ\x0cl HÇÀ  yÐHÇÂl HÇÀ 8 yÐHÇÂl HÇÀ yÐHÇÂl H‹%_ yÐHÇ HÇÀ yÐHÇ HÇÀ yÐHÇ HÇÀ yÐHÇ HÇÀ yÐHÇ HÇÀ yÐHÇ HÇÀ yÐHÇÁw 2HÁâ H\x09ÐHÇ , H‰ÀyÐHÇÂ@ HÇÀ yÐHÇÂ\x0a@ HÇÀ yÐHÇÂ@ HÇÀ yÐHÇÂ@ HÇÀ yÐHÇÂ@ HÇÀ yÐHÇÂ@ HÇÀ yÐHÇ ` HÇÀÿÿÿÿyÐHÇÂ` HÇÀÿÿÿÿyÐHÇ HÇÀ yÐHÇ HÇÀ yÐHÇ HÇÀ y [ 201.734492][ T5916] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 201.905303][ T5916] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 201.918726][ T5925] usb 6-1: Using ep0 maxpacket: 16 [ 201.928620][ T5925] usb 6-1: config 0 has no interfaces? [ 201.935374][ T5916] asix 4-1:0.188: probe with driver asix failed with error -71 [ 201.945975][ T5925] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 201.962582][ T5916] usb 4-1: USB disconnect, device number 20 [ 201.989313][ T5925] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 202.087368][ T5925] usb 6-1: Manufacturer: syz [ 202.103693][ T5925] usb 6-1: config 0 descriptor?? [ 203.951991][ T5906] usb 2-1: 0:2 : does not exist [ 203.986503][ T5899] usb 1-1: USB disconnect, device number 26 [ 204.051208][ T5906] usb 2-1: USB disconnect, device number 27 [ 204.141621][ T5925] usb 6-1: USB disconnect, device number 11 [ 204.189182][ T7165] udevd[7165]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 204.312103][ T8083] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 204.408365][ T5899] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 204.477534][ T5906] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 204.569180][ T5899] usb 1-1: Using ep0 maxpacket: 16 [ 204.588394][ T5899] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 204.613010][ T5899] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 204.627235][ T5899] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 204.636623][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.645026][ T5899] usb 1-1: Product: syz [ 204.650275][ T5899] usb 1-1: Manufacturer: syz [ 204.656065][ T5899] usb 1-1: SerialNumber: syz [ 204.661431][ T5906] usb 2-1: config 9 has an invalid interface number: 88 but max is 0 [ 204.671913][ T5906] usb 2-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 204.682856][ T5899] usb 1-1: config 0 descriptor?? [ 204.704134][ T5899] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 204.714608][ T5906] usb 2-1: config 9 has no interface number 0 [ 204.733543][ T5906] usb 2-1: too many endpoints for config 9 interface 88 altsetting 44: 119, using maximum allowed: 30 [ 204.747076][ T5899] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 204.764048][ T5906] usb 2-1: config 9 interface 88 altsetting 44 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 204.789337][ T5906] usb 2-1: config 9 interface 88 altsetting 44 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 204.801807][ T5906] usb 2-1: config 9 interface 88 altsetting 44 endpoint 0x85 has invalid wMaxPacketSize 0 [ 204.813357][ T5906] usb 2-1: config 9 interface 88 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 119 [ 204.827064][ T5906] usb 2-1: config 9 interface 88 has no altsetting 0 [ 204.841103][ T8091] netlink: 'syz.4.539': attribute type 5 has an invalid length. [ 204.851014][ T5906] usb 2-1: New USB device found, idVendor=0a07, idProduct=00da, bcdDevice=be.7f [ 204.866858][ T8091] ip6erspan0: entered promiscuous mode [ 204.873326][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.884891][ T5906] usb 2-1: Product: syz [ 204.890326][ T5906] usb 2-1: Manufacturer: syz [ 204.896252][ T5906] usb 2-1: SerialNumber: syz [ 205.143122][ T5906] adutux 2-1:9.88: interrupt endpoints not found [ 205.162319][ T5906] usb 2-1: USB disconnect, device number 28 [ 205.372784][ T8102] netlink: 20 bytes leftover after parsing attributes in process `syz.0.535'. [ 205.415681][ T8102] netlink: 20 bytes leftover after parsing attributes in process `syz.0.535'. [ 205.797939][ T5899] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 205.811229][ T5899] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 205.830029][ T5899] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 205.840383][ T5899] em28xx 1-1:0.0: No AC97 audio processor [ 205.884936][ T5899] usb 1-1: USB disconnect, device number 27 [ 205.915299][ T5899] em28xx 1-1:0.0: Disconnecting em28xx [ 205.929452][ T8117] dlm: no locking on control device [ 205.954202][ T5899] em28xx 1-1:0.0: Freeing device [ 206.040424][ T8115] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 206.089641][ T8115] bond1 (unregistering): Released all slaves [ 206.101104][ T8125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.133083][ T8125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.142270][ T8125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.153476][ T8125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.164347][ T8125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.175479][ T8125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.186087][ T8125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.195385][ T8125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.205602][ T8125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.216651][ T8117] ip6tnl1: entered promiscuous mode [ 206.232349][ T8125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.258348][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807cadfc00: rx timeout, send abort [ 206.268202][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807cadfc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 206.357901][ T5834] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 206.409835][ T8130] netlink: 12 bytes leftover after parsing attributes in process `syz.3.547'. [ 206.566593][ T8130] syzkaller0: entered promiscuous mode [ 206.588768][ T8130] syzkaller0: entered allmulticast mode [ 206.882914][ T8145] loop2: detected capacity change from 0 to 7 [ 206.890304][ T8145] Dev loop2: unable to read RDB block 7 [ 206.897274][ T8145] loop2: unable to read partition table [ 206.904983][ T8145] loop2: partition table beyond EOD, truncated [ 206.912123][ T8145] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 207.097477][ T5899] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 207.478250][ T5899] usb 1-1: Using ep0 maxpacket: 16 [ 207.680802][ T5899] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 207.694847][ T8150] raw_sendmsg: syz.3.554 forgot to set AF_INET. Fix it! [ 207.733249][ T5899] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 207.872030][ T5899] usb 1-1: New USB device found, idVendor=046d, idProduct=0921, bcdDevice=ab.34 [ 207.917980][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.946386][ T5899] usb 1-1: Product: syz [ 207.956519][ T5899] usb 1-1: Manufacturer: syz [ 207.971317][ T5899] usb 1-1: SerialNumber: syz [ 208.008894][ T5899] usb 1-1: config 0 descriptor?? [ 208.569699][ T5886] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 208.599446][ T5925] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 208.743293][ T5886] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 208.772684][ T5925] usb 4-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 208.787676][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.806678][ T5886] usb 2-1: Product: syz [ 208.817469][ T5925] usb 4-1: config 1 interface 0 has no altsetting 0 [ 208.824385][ T5886] usb 2-1: Manufacturer: syz [ 208.836555][ T5886] usb 2-1: SerialNumber: syz [ 208.847939][ T5925] usb 4-1: string descriptor 0 read error: -22 [ 208.859010][ T5925] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.40 [ 208.886175][ T5886] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 208.901292][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.924348][ T5267] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 209.466339][ T5925] usbhid 4-1:1.0: can't add hid device: -32 [ 209.472726][ T5925] usbhid 4-1:1.0: probe with driver usbhid failed with error -32 [ 209.988970][ T5267] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 210.014424][ T5267] ath9k_htc: Failed to initialize the device [ 210.047136][ T5899] gspca_main: tv8532-2.14.0 probing 046d:0921 [ 210.119388][ T5899] usb 1-1: USB disconnect, device number 28 [ 210.120288][ T5267] usb 2-1: ath9k_htc: USB layer deinitialized [ 210.287840][ T8193] netlink: 12 bytes leftover after parsing attributes in process `syz.0.565'. [ 210.517778][ T24] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 210.726757][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 210.740319][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 210.783679][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 210.799417][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 210.834148][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 210.853362][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 210.907930][ T24] usb 5-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 210.920055][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.946339][ T24] usb 5-1: Product: syz [ 210.963415][ T24] usb 5-1: Manufacturer: syz [ 210.980747][ T24] usb 5-1: SerialNumber: syz [ 211.006822][ T24] usb 5-1: config 0 descriptor?? [ 211.031382][ T24] ti_usb_3410_5052 5-1:0.0: TI USB 5052 2 port adapter converter detected [ 211.041051][ T24] ti_usb_3410_5052 5-1:0.0: missing endpoints [ 211.442731][ T5886] usb 4-1: USB disconnect, device number 22 [ 211.467430][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 211.508137][ T24] usb 2-1: USB disconnect, device number 29 [ 211.700612][ T24] hid-generic 00A0:0006:0003.000D: unknown main item tag 0x0 [ 211.708130][ T24] hid-generic 00A0:0006:0003.000D: unknown main item tag 0x0 [ 211.715680][ T24] hid-generic 00A0:0006:0003.000D: unknown main item tag 0x0 [ 211.749648][ T24] hid-generic 00A0:0006:0003.000D: unknown main item tag 0x0 [ 211.776963][ T24] hid-generic 00A0:0006:0003.000D: unknown main item tag 0x0 [ 211.799738][ T24] hid-generic 00A0:0006:0003.000D: unknown main item tag 0x0 [ 211.827751][ T24] hid-generic 00A0:0006:0003.000D: unknown main item tag 0x0 [ 211.844709][ T24] hid-generic 00A0:0006:0003.000D: unknown main item tag 0x0 [ 211.862843][ T24] hid-generic 00A0:0006:0003.000D: unknown main item tag 0x0 [ 211.880447][ T24] hid-generic 00A0:0006:0003.000D: unknown main item tag 0x0 [ 211.897569][ T5899] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 211.915138][ T24] hid-generic 00A0:0006:0003.000D: hidraw0: HID v0.05 Device [syz0] on syz0 [ 211.977927][ T5886] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 212.060448][ T5899] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 212.090006][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.113233][ T5899] usb 4-1: config 0 descriptor?? [ 212.136893][ T5899] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 212.144086][ T5886] usb 2-1: config 0 has an invalid interface number: 238 but max is 0 [ 212.152462][ T5886] usb 2-1: config 0 has no interface number 0 [ 212.159449][ T5886] usb 2-1: config 0 interface 238 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 212.174155][ T5886] usb 2-1: config 0 interface 238 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 212.196589][ T5886] usb 2-1: config 0 interface 238 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 212.216430][ T5886] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=76.6a [ 212.225876][ T5886] usb 2-1: New USB device strings: Mfr=7, Product=2, SerialNumber=3 [ 212.239906][ T5886] usb 2-1: Product: syz [ 212.244488][ T5886] usb 2-1: Manufacturer: syz [ 212.252876][ T5886] usb 2-1: SerialNumber: syz [ 212.266661][ T5886] usb 2-1: config 0 descriptor?? [ 212.306612][ T5886] ni6501 2-1:0.238: driver 'ni6501' failed to auto-configure device. [ 212.718993][ T5906] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 212.867780][ T5906] usb 6-1: device descriptor read/64, error -71 [ 213.048462][ T5834] usb 2-1: USB disconnect, device number 30 [ 213.128160][ T5906] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 213.327772][ T5906] usb 6-1: device descriptor read/64, error -71 [ 213.437839][ T5906] usb usb6-port1: attempt power cycle [ 213.832134][ T5906] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 213.868522][ T5906] usb 6-1: device descriptor read/8, error -71 [ 213.935621][ T24] usb 5-1: USB disconnect, device number 35 [ 214.117504][ T5906] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 214.154057][ T5899] gspca_stv06xx: Photobit pb0100 sensor detected [ 214.161207][ T5906] usb 6-1: device descriptor read/8, error -71 [ 214.298011][ T5906] usb usb6-port1: unable to enumerate USB device [ 214.357576][ T30] kauditd_printk_skb: 69 callbacks suppressed [ 214.357595][ T30] audit: type=1326 audit(1776159554.995:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8220 comm="syz.4.573" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4f4c79c819 code=0x0 [ 214.372816][ T8227] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 214.854453][ T8232] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 215.112008][ T5899] input: STV06xx as /devices/platform/dummy_hcd.3/usb4/4-1/input/input18 [ 215.161002][ T5899] usb 4-1: USB disconnect, device number 23 [ 215.872215][ T8243] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 215.912624][ T8245] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 215.940537][ T8245] bond1 (unregistering): Released all slaves [ 216.959355][ T8266] syzkaller0: entered promiscuous mode [ 216.965008][ T8266] syzkaller0: entered allmulticast mode [ 217.094328][ T8274] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 217.395974][ T30] audit: type=1326 audit(1776159558.045:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8278 comm="syz.1.587" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0e3b99c819 code=0x0 [ 217.576621][ T30] audit: type=1326 audit(1776159558.225:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8285 comm="syz.4.589" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4f4c79c819 code=0x0 [ 217.694106][ T8274] geneve2: entered promiscuous mode [ 217.699684][ T8274] geneve2: entered allmulticast mode [ 217.887509][ T5886] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 218.097608][ T5886] usb 6-1: Using ep0 maxpacket: 32 [ 218.104967][ T5886] usb 6-1: unable to get BOS descriptor or descriptor too short [ 218.119637][ T5886] usb 6-1: config 128 has an invalid interface number: 127 but max is 3 [ 218.131099][ T5886] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 218.147839][ T5886] usb 6-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 218.170035][ T5886] usb 6-1: config 128 has no interface number 0 [ 218.194984][ T5886] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 218.218638][ T5886] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 218.236914][ T5886] usb 6-1: config 128 interface 127 has no altsetting 0 [ 218.244616][ T8296] tipc: Enabling of bearer rejected, failed to enable media [ 218.255280][ T5886] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 218.264819][ T5886] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.273077][ T5886] usb 6-1: Product: syz [ 218.278105][ T5886] usb 6-1: Manufacturer: syz [ 218.282735][ T5886] usb 6-1: SerialNumber: syz [ 218.487585][ T5906] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 218.617704][ T5906] usb 4-1: device descriptor read/64, error -71 [ 218.648773][ T5886] usb 6-1: USB disconnect, device number 16 [ 218.672225][ T7165] udevd[7165]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 218.857620][ T5906] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 219.007511][ T5906] usb 4-1: device descriptor read/64, error -71 [ 219.117811][ T5906] usb usb4-port1: attempt power cycle [ 219.352584][ T8306] loop2: detected capacity change from 0 to 7 [ 219.362045][ T7165] Dev loop2: unable to read RDB block 7 [ 219.368025][ T7165] loop2: unable to read partition table [ 219.374414][ T7165] loop2: partition table beyond EOD, truncated [ 219.386459][ T8306] Dev loop2: unable to read RDB block 7 [ 219.394115][ T8306] loop2: unable to read partition table [ 219.400444][ T8306] loop2: partition table beyond EOD, truncated [ 219.410346][ T8306] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 219.467527][ T5906] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 219.514961][ T5906] usb 4-1: device descriptor read/8, error -71 [ 219.663467][ T8316] binder: BINDER_SET_CONTEXT_MGR already set [ 219.669858][ T8316] binder: 8309:8316 ioctl 4018620d 200000000040 returned -16 [ 219.881732][ T5906] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 219.958433][ T5906] usb 4-1: device descriptor read/8, error -71 [ 220.070480][ T5906] usb usb4-port1: unable to enumerate USB device [ 220.997684][ T5906] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 221.182917][ T8328] netlink: 12 bytes leftover after parsing attributes in process `syz.0.602'. [ 221.192908][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.206855][ T8328] ipvlan2: entered allmulticast mode [ 221.212288][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.212331][ T5906] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 221.212352][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.267970][ T5906] usb 5-1: config 0 descriptor?? [ 221.322572][ T8330] netlink: 44 bytes leftover after parsing attributes in process `syz.0.602'. [ 221.331794][ T8328] syz_tun: entered allmulticast mode [ 221.416205][ T8333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.606'. [ 221.770409][ T8345] No such timeout policy "syz1" [ 221.786450][ T8345] fuse: Bad value for 'user_id' [ 221.791560][ T8345] fuse: Bad value for 'user_id' [ 221.849436][ T8348] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.738901][ T8354] loop2: detected capacity change from 0 to 7 [ 222.748963][ T8354] Dev loop2: unable to read RDB block 7 [ 222.754623][ T8354] loop2: unable to read partition table [ 222.760927][ T8354] loop2: partition table beyond EOD, truncated [ 222.772302][ T8354] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 223.247593][ T5899] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 223.397517][ T5899] usb 4-1: Using ep0 maxpacket: 16 [ 223.404739][ T5899] usb 4-1: config 0 has no interfaces? [ 223.412688][ T5899] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 223.422384][ T5899] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 223.435367][ T5899] usb 4-1: Manufacturer: syz [ 223.465288][ T5899] usb 4-1: config 0 descriptor?? [ 223.782812][ T5906] usbhid 5-1:0.0: can't add hid device: -71 [ 223.790036][ T5906] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 223.834522][ T5906] usb 5-1: USB disconnect, device number 36 [ 224.105521][ T8350] geneve3: entered promiscuous mode [ 224.117848][ T8350] geneve3: entered allmulticast mode [ 224.194602][ T8365] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 224.347807][ T5267] usb 4-1: USB disconnect, device number 28 [ 224.460036][ T8374] netlink: 4 bytes leftover after parsing attributes in process `syz.0.617'. [ 224.681795][ T8389] loop2: detected capacity change from 0 to 7 [ 224.699201][ T8389] Dev loop2: unable to read RDB block 7 [ 224.704843][ T8389] loop2: unable to read partition table [ 224.723158][ T8389] loop2: partition table beyond EOD, truncated [ 224.737793][ T8389] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 224.951038][ T13] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 225.002311][ T8394] loop5: detected capacity change from 0 to 7 [ 225.063491][ T8394] Dev loop5: unable to read RDB block 7 [ 225.069226][ T8394] loop5: AHDI p2 [ 225.073099][ T8394] loop5: partition table partially beyond EOD, truncated [ 225.757128][ T5267] IPVS: starting estimator thread 0... [ 225.851376][ T8409] IPVS: using max 29 ests per chain, 69600 per kthread [ 226.327894][ T5899] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 226.579264][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.607545][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.648460][ T5899] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 226.690648][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.728576][ T5899] usb 4-1: config 0 descriptor?? [ 226.881243][ T5906] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 226.960832][ T8423] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.049246][ T5906] usb 5-1: Using ep0 maxpacket: 16 [ 227.063755][ T5906] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.092216][ T5906] usb 5-1: config 0 interface 0 has no altsetting 0 [ 227.201342][ T5899] hid-steam 0003:28DE:1142.000E: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 227.212863][ T5906] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 227.231561][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.270578][ T5906] usb 5-1: config 0 descriptor?? [ 227.297602][ T5899] hid-steam 0003:28DE:1142.000E: Steam wireless receiver connected [ 227.335549][ T8423] geneve2: entered promiscuous mode [ 227.361780][ T5899] hid-steam 0003:28DE:1142.000F: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 227.393490][ T8423] geneve2: entered allmulticast mode [ 227.708023][ T5906] mcp2221 0003:04D8:00DD.0010: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 228.001637][ T8446] loop2: detected capacity change from 0 to 7 [ 228.013167][ T8446] Dev loop2: unable to read RDB block 7 [ 228.019027][ T8446] loop2: unable to read partition table [ 228.025055][ T8446] loop2: partition table beyond EOD, truncated [ 228.031471][ T8446] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 228.080019][ T5267] usb 4-1: USB disconnect, device number 29 [ 228.121306][ T5906] usb 5-1: USB disconnect, device number 37 [ 228.123170][ T5267] hid-steam 0003:28DE:1142.000E: Steam wireless receiver disconnected [ 228.289651][ T5886] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 228.378209][ T8462] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 228.644472][ T5886] usb 2-1: device descriptor read/64, error -71 [ 229.007502][ T5906] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 229.084103][ T8473] loop5: detected capacity change from 0 to 7 [ 229.132195][ T8473] Dev loop5: unable to read RDB block 7 [ 229.138124][ T8473] loop5: AHDI p2 [ 229.143080][ T8473] loop5: partition table partially beyond EOD, truncated [ 229.187782][ T5886] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 229.227574][ T5906] usb 6-1: Using ep0 maxpacket: 32 [ 229.236128][ T5906] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.259541][ T5906] usb 6-1: config 0 has no interfaces? [ 229.270294][ T5906] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 229.329963][ T5886] usb 2-1: device descriptor read/64, error -71 [ 229.356960][ T5906] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.431814][ T8481] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 229.441517][ T5886] usb usb2-port1: attempt power cycle [ 229.479542][ T5906] usb 6-1: config 0 descriptor?? [ 229.514350][ T8478] delete_channel: no stack [ 229.773136][ T8486] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 229.788719][ T5886] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 229.839353][ T5886] usb 2-1: device descriptor read/8, error -71 [ 229.867516][ T5267] usb 6-1: USB disconnect, device number 17 [ 230.025548][ T8490] geneve2: entered promiscuous mode [ 230.030954][ T8490] geneve2: entered allmulticast mode [ 230.138747][ T5886] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 230.173844][ T5886] usb 2-1: device descriptor read/8, error -71 [ 230.301927][ T5886] usb usb2-port1: unable to enumerate USB device [ 230.471909][ T8492] loop2: detected capacity change from 0 to 7 [ 230.481965][ T8492] Dev loop2: unable to read RDB block 7 [ 230.492087][ T8492] loop2: unable to read partition table [ 230.498046][ T8492] loop2: partition table beyond EOD, truncated [ 230.504389][ T8492] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 230.637572][ T5916] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 230.664842][ T8498] netlink: 48 bytes leftover after parsing attributes in process `syz.0.649'. [ 230.851099][ T5916] usb 4-1: Using ep0 maxpacket: 32 [ 230.862884][ T5916] usb 4-1: unable to get BOS descriptor or descriptor too short [ 230.875578][ T5916] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 230.887553][ T5886] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 230.917814][ T5916] usb 4-1: New USB device found, idVendor=041e, idProduct=3263, bcdDevice= 0.40 [ 230.935864][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.954358][ T5916] usb 4-1: Product: syz [ 230.966351][ T5916] usb 4-1: Manufacturer: syz [ 230.976464][ T5916] usb 4-1: SerialNumber: syz [ 231.071513][ T5886] usb 6-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 231.080672][ T5886] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.099107][ T5886] usb 6-1: Product: syz [ 231.103360][ T5886] usb 6-1: Manufacturer: syz [ 231.126434][ T5886] usb 6-1: SerialNumber: syz [ 231.279121][ T5145] Bluetooth: hci4: unexpected event 0x04 length: 4 < 10 [ 231.373639][ T8496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.382465][ T8496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.398266][ T5916] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 231.427629][ T5916] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 231.687698][ T5916] usb 4-1: USB disconnect, device number 30 [ 231.844299][ T5827] udevd[5827]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 233.061876][ T8540] loop2: detected capacity change from 0 to 7 [ 233.111768][ T7165] Dev loop2: unable to read RDB block 7 [ 233.177522][ T7165] loop2: unable to read partition table [ 233.194862][ T7165] loop2: partition table beyond EOD, truncated [ 233.214340][ T8540] Dev loop2: unable to read RDB block 7 [ 233.220397][ T8540] loop2: unable to read partition table [ 233.234357][ T8540] loop2: partition table beyond EOD, truncated [ 233.252485][ T8540] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 233.486531][ T8542] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 233.549985][ T8547] x_tables: duplicate underflow at hook 2 [ 233.738024][ T5886] usb 6-1: 1:1: invalid format type 0x1001 is detected, processed as PCM [ 233.746535][ T5886] usb 6-1: 1:1 : sample bitwidth 9 in over sample bytes 1 [ 233.830013][ T8555] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 233.894784][ T5886] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 234.203742][ T5886] usb 6-1: USB disconnect, device number 18 [ 234.333464][ T5846] udevd[5846]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 234.460882][ T8560] geneve3: entered promiscuous mode [ 234.474936][ T8560] geneve3: entered allmulticast mode [ 234.820415][ T5267] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 234.887475][ T5886] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 235.010970][ T5267] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 235.026946][ T5267] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 235.073985][ T5886] usb 6-1: config 0 has an invalid interface number: 39 but max is 0 [ 235.172325][ T5886] usb 6-1: config 0 has no interface number 0 [ 235.185856][ T5886] usb 6-1: config 0 interface 39 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 235.228717][ T5886] usb 6-1: New USB device found, idVendor=0499, idProduct=4d3f, bcdDevice=d2.2a [ 235.238374][ T5267] usb 4-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 235.253146][ T5267] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.264137][ T5886] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.273441][ T5267] usb 4-1: Product: syz [ 235.278793][ T5267] usb 4-1: Manufacturer: syz [ 235.284595][ T5886] usb 6-1: Product: syz [ 235.289357][ T5267] usb 4-1: SerialNumber: syz [ 235.294028][ T5886] usb 6-1: Manufacturer: syz [ 235.383371][ T5886] usb 6-1: SerialNumber: syz [ 235.406371][ T5267] snd-ua101 4-1:1.1: invalid num_altsetting [ 235.413015][ T5267] snd-ua101 4-1:1.0: invalid format type [ 235.420146][ T5886] usb 6-1: config 0 descriptor?? [ 235.591039][ T8569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.601766][ T8569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.627026][ T8569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.710138][ T8569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.756978][ T8569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.791418][ T8569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.833795][ T8569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.892691][ T8569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.977672][ T24] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 236.007682][ T5886] usb 6-1: USB disconnect, device number 19 [ 236.026924][ T8569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.061653][ T8587] atomic_op ffff88807772f998 conn xmit_atomic 0000000000000000 [ 236.080888][ T8569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.115682][ T7165] udevd[7165]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.39/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 236.132693][ T24] usb 5-1: device descriptor read/64, error -71 [ 236.142637][ T8587] netlink: 20 bytes leftover after parsing attributes in process `syz.1.670'. [ 236.172089][ T8587] netlink: 20 bytes leftover after parsing attributes in process `syz.1.670'. [ 236.196832][ T5906] usb 4-1: USB disconnect, device number 31 [ 236.407489][ T24] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 236.547129][ T8590] loop2: detected capacity change from 0 to 7 [ 236.551067][ T24] usb 5-1: device descriptor read/64, error -71 [ 236.564569][ T8590] Dev loop2: unable to read RDB block 7 [ 236.571749][ T8590] loop2: unable to read partition table [ 236.579511][ T8590] loop2: partition table beyond EOD, truncated [ 236.589182][ T8590] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 236.615382][ T5194] Dev loop2: unable to read RDB block 7 [ 236.627573][ T5194] loop2: unable to read partition table [ 236.641904][ T5194] loop2: partition table beyond EOD, truncated [ 236.667734][ T24] usb usb5-port1: attempt power cycle [ 237.047530][ T24] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 237.057526][ T5906] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 237.068106][ T24] usb 5-1: device descriptor read/8, error -71 [ 237.227526][ T5906] usb 4-1: Using ep0 maxpacket: 8 [ 237.237588][ T5906] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 237.259805][ T5906] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 237.274051][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.289759][ T5906] usb 4-1: Product: syz [ 237.299385][ T5906] usb 4-1: Manufacturer: syz [ 237.307476][ T24] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 237.318592][ T5906] usb 4-1: SerialNumber: syz [ 237.331914][ T24] usb 5-1: device descriptor read/8, error -71 [ 237.341747][ T5906] usb 4-1: config 0 descriptor?? [ 237.577543][ T24] usb usb5-port1: unable to enumerate USB device [ 237.623307][ T5906] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 238.257493][ T5916] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 238.265274][ T5906] gspca_zc3xx: reg_w_i err -71 [ 238.401717][ T8614] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 238.447485][ T5916] usb 6-1: Using ep0 maxpacket: 32 [ 238.468482][ T5916] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.625856][ T8614] geneve2: entered promiscuous mode [ 238.631591][ T8614] geneve2: entered allmulticast mode [ 238.703214][ T5916] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.723348][ T5916] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 238.765525][ T5916] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.794796][ T5916] usb 6-1: config 0 descriptor?? [ 238.821066][ T5916] hub 6-1:0.0: USB hub found [ 238.857503][ T5906] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 238.863986][ T5906] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 238.901986][ T5906] usb 4-1: USB disconnect, device number 32 [ 239.026317][ T5916] hub 6-1:0.0: 26 ports detected [ 239.033297][ T5916] hub 6-1:0.0: insufficient power available to use all downstream ports [ 239.391149][ T8623] netlink: 28 bytes leftover after parsing attributes in process `syz.0.682'. [ 239.401316][ T8623] netlink: 28 bytes leftover after parsing attributes in process `syz.0.682'. [ 239.441361][ T5916] usb 6-1: USB disconnect, device number 20 [ 239.466902][ T8631] xt_l2tp: missing protocol rule (udp|l2tpip) [ 239.764197][ T8638] loop2: detected capacity change from 0 to 7 [ 239.771559][ T8638] Dev loop2: unable to read RDB block 7 [ 239.777234][ T8638] loop2: unable to read partition table [ 239.784280][ T8638] loop2: partition table beyond EOD, truncated [ 239.791557][ T8638] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 239.998475][ T5906] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 240.130373][ T24] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 240.170344][ T5906] usb 1-1: config 3 has an invalid interface number: 242 but max is 0 [ 240.179628][ T5906] usb 1-1: config 3 has no interface number 0 [ 240.185769][ T5906] usb 1-1: config 3 interface 242 altsetting 124 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 240.200507][ T8652] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 240.403353][ T5906] usb 1-1: config 3 interface 242 altsetting 124 has an invalid descriptor for endpoint zero, skipping [ 240.414738][ T5906] usb 1-1: config 3 interface 242 has no altsetting 0 [ 240.424903][ T5906] usb 1-1: New USB device found, idVendor=1b3d, idProduct=011f, bcdDevice=84.47 [ 240.434646][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 240.436527][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.451342][ T5906] usb 1-1: Product: syz [ 240.455542][ T5906] usb 1-1: Manufacturer: syz [ 240.461488][ T5906] usb 1-1: SerialNumber: syz [ 240.465850][ T24] usb 5-1: not running at top speed; connect to a high speed hub [ 240.503838][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 240.532594][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 240.557141][ T24] usb 5-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 240.570334][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.656937][ T24] usb 5-1: Product: syz [ 240.683170][ T24] usb 5-1: Manufacturer: syz [ 240.688538][ T24] usb 5-1: SerialNumber: syz [ 240.694282][ T5906] ftdi_sio 1-1:3.242: FTDI USB Serial Device converter detected [ 240.722072][ T5906] ftdi_sio ttyUSB0: unknown device type: 0x8447 [ 240.786211][ T5906] usb 1-1: USB disconnect, device number 29 [ 240.798343][ T5886] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 240.810340][ T5906] ftdi_sio 1-1:3.242: device disconnected [ 240.951326][ T8640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.960288][ T8640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.044933][ T5886] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.045483][ T8640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.064462][ T5886] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 241.080605][ T5886] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 241.090210][ T8640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.099457][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.108145][ T5886] usb 2-1: Product: syz [ 241.112436][ T5886] usb 2-1: Manufacturer: syz [ 241.117080][ T5886] usb 2-1: SerialNumber: syz [ 241.133327][ T5886] cdc_ncm 2-1:1.0: skipping garbage [ 241.148781][ T5886] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 241.155669][ T5886] cdc_ncm 2-1:1.0: bind() failure [ 241.172016][ T5886] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 241.184797][ T5886] cdc_ncm 2-1:1.1: bind() failure [ 241.225227][ T24] usb 5-1: 3:0: failed to get current value for ch 0 (-71) [ 241.257100][ T24] usb 5-1: 3:0: failed to get current value for ch 0 (-71) [ 241.338465][ T5267] usb 2-1: USB disconnect, device number 35 [ 241.381194][ T24] usb 5-1: USB disconnect, device number 42 [ 241.455926][ T7165] udevd[7165]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 241.908119][ T8673] loop2: detected capacity change from 0 to 7 [ 241.915079][ T8673] Dev loop2: unable to read RDB block 7 [ 241.920805][ T8673] loop2: unable to read partition table [ 241.926858][ T8673] loop2: partition table beyond EOD, truncated [ 241.935343][ T8673] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 242.224516][ T8681] binder: 8674:8681 ioctl c0306201 0 returned -14 [ 242.481338][ T8688] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 242.624130][ T8690] netlink: 12 bytes leftover after parsing attributes in process `syz.5.700'. [ 242.722833][ T8688] geneve2: entered promiscuous mode [ 242.731938][ T8688] geneve2: entered allmulticast mode [ 243.319153][ T8699] loop5: detected capacity change from 0 to 7 [ 243.454179][ T8699] Dev loop5: unable to read RDB block 7 [ 243.460654][ T8699] loop5: AHDI p2 [ 243.494600][ T8699] loop5: partition table partially beyond EOD, truncated [ 244.092850][ T8716] netlink: 24 bytes leftover after parsing attributes in process `syz.1.704'. [ 244.144519][ T8716] netlink: 'syz.1.704': attribute type 6 has an invalid length. [ 244.327508][ T5906] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 244.478250][ T5906] usb 4-1: Using ep0 maxpacket: 8 [ 244.486174][ T5906] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 244.498105][ T5906] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 244.507351][ T5906] usb 4-1: config 0 has no interface number 0 [ 244.513982][ T5906] usb 4-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 244.534350][ T5906] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 244.548986][ T5906] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 244.596354][ T5906] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 244.606705][ T5906] usb 4-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 244.615787][ T5906] usb 4-1: Product: syz [ 244.621610][ T5906] usb 4-1: Manufacturer: syz [ 244.682415][ T5906] usb 4-1: config 0 descriptor?? [ 245.007221][ T5899] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 245.088859][ T5906] usb 4-1: USB disconnect, device number 33 [ 245.190014][ T5899] usb 1-1: device descriptor read/64, error -71 [ 245.450018][ T5899] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 245.539408][ T8750] IPVS: Scheduler module ip_vs_ not found [ 245.616057][ T5906] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 245.627229][ T5899] usb 1-1: device descriptor read/64, error -71 [ 245.642770][ T8755] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 245.748076][ T5899] usb usb1-port1: attempt power cycle [ 245.779864][ T5906] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 245.796521][ T5906] usb 2-1: config 1 interface 0 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 245.889869][ T5906] usb 2-1: config 1 interface 0 has no altsetting 0 [ 245.915138][ T5906] usb 2-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.40 [ 245.926292][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.946936][ T8762] geneve2: entered promiscuous mode [ 245.952355][ T8762] geneve2: entered allmulticast mode [ 246.070483][ T5906] usb 2-1: Product: syz [ 246.079468][ T5906] usb 2-1: Manufacturer: syz [ 246.084778][ T5906] usb 2-1: SerialNumber: syz [ 246.089495][ T5899] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 246.195776][ T5899] usb 1-1: device descriptor read/8, error -71 [ 246.439613][ T8770] FAULT_FLAG_ALLOW_RETRY missing 801 [ 246.445084][ T8770] CPU: 0 UID: 0 PID: 8770 Comm: syz.1.716 Tainted: G L syzkaller #0 PREEMPT(full) [ 246.445113][ T8770] Tainted: [L]=SOFTLOCKUP [ 246.445118][ T8770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 246.445126][ T8770] Call Trace: [ 246.445132][ T8770] [ 246.445138][ T8770] dump_stack_lvl+0xe8/0x150 [ 246.445162][ T8770] handle_userfault+0x1532/0x17f0 [ 246.445194][ T8770] ? __pfx___folio_put+0x10/0x10 [ 246.445213][ T8770] ? __pfx_handle_userfault+0x10/0x10 [ 246.445249][ T8770] handle_mm_fault+0x1bec/0x3310 [ 246.445279][ T8770] ? handle_mm_fault+0xee/0x3310 [ 246.445305][ T8770] ? __pfx_handle_mm_fault+0x10/0x10 [ 246.445326][ T8770] ? follow_page_pte+0x841/0x1450 [ 246.445345][ T8770] ? __pfx_follow_page_pte+0x10/0x10 [ 246.445358][ T8770] ? __get_user_pages+0xa2e/0x29d0 [ 246.445382][ T8770] __get_user_pages+0x165b/0x29d0 [ 246.445420][ T8770] populate_vma_page_range+0x2be/0x3c0 [ 246.445442][ T8770] ? __pfx_populate_vma_page_range+0x10/0x10 [ 246.445462][ T8770] ? vma_wants_writenotify+0xb3/0x2a0 [ 246.445484][ T8770] ? vma_set_page_prot+0xc3/0x100 [ 246.445507][ T8770] mprotect_fixup+0x893/0xa80 [ 246.445529][ T8770] ? __pfx_mprotect_fixup+0x10/0x10 [ 246.445547][ T8770] ? apparmor_file_mprotect+0x1d0/0x400 [ 246.445566][ T8770] ? security_file_mprotect+0x1a/0x290 [ 246.445589][ T8770] do_mprotect_pkey+0x8ab/0xcd0 [ 246.445615][ T8770] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 246.445641][ T8770] ? __se_sys_futex+0x3a8/0x450 [ 246.445664][ T8770] ? rcu_is_watching+0x15/0xb0 [ 246.445689][ T8770] __x64_sys_mprotect+0x80/0x90 [ 246.445707][ T8770] do_syscall_64+0x14d/0xf80 [ 246.445728][ T8770] ? trace_irq_disable+0x3b/0x150 [ 246.445739][ T8770] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.445754][ T8770] ? clear_bhb_loop+0x40/0x90 [ 246.445770][ T8770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.445784][ T8770] RIP: 0033:0x7f0e3b99c819 [ 246.445797][ T8770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.445808][ T8770] RSP: 002b:00007f0e3c8f8028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 246.445823][ T8770] RAX: ffffffffffffffda RBX: 00007f0e3bc16090 RCX: 00007f0e3b99c819 [ 246.445832][ T8770] RDX: 000000000000000f RSI: 0000000000004000 RDI: 0000200000ffc000 [ 246.445841][ T8770] RBP: 00007f0e3ba32c91 R08: 0000000000000000 R09: 0000000000000000 [ 246.445850][ T8770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 246.445857][ T8770] R13: 00007f0e3bc16128 R14: 00007f0e3bc16090 R15: 00007f0e3bd3fa48 [ 246.445877][ T8770] [ 246.705348][ T5834] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 246.892640][ T5899] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 246.907678][ T5906] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input21 [ 246.921641][ T5906] usb 2-1: USB disconnect, device number 36 [ 247.007168][ T5899] usb 1-1: device descriptor read/8, error -71 [ 247.057457][ T5834] usb 4-1: Using ep0 maxpacket: 16 [ 247.064187][ T5834] usb 4-1: config 0 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 247.130744][ T5899] usb usb1-port1: unable to enumerate USB device [ 247.196687][ T5834] usb 4-1: config 0 interface 0 has no altsetting 0 [ 247.337568][ T5834] usb 4-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 247.377158][ T5834] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.395305][ T5834] usb 4-1: config 0 descriptor?? [ 247.412683][ T5834] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 247.862209][ T8781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.939445][ T8781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.005206][ T8785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.724'. [ 248.025291][ T8785] netlink: 16 bytes leftover after parsing attributes in process `syz.1.724'. [ 248.078703][ T5899] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 248.099968][ T8785] netlink: 16 bytes leftover after parsing attributes in process `syz.1.724'. [ 248.192155][ T8785] syzkaller0: entered promiscuous mode [ 248.255056][ T8786] netlink: 192 bytes leftover after parsing attributes in process `syz.1.724'. [ 248.271023][ T5899] usb 1-1: device descriptor read/64, error -71 [ 248.273408][ T8785] syzkaller0: entered allmulticast mode [ 248.731683][ T8791] loop5: detected capacity change from 0 to 7 [ 248.786012][ T8791] Dev loop5: unable to read RDB block 7 [ 248.792198][ T8791] loop5: AHDI p2 [ 248.796006][ T8791] loop5: partition table partially beyond EOD, truncated [ 248.977854][ T5899] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 249.118168][ T5899] usb 1-1: device descriptor read/64, error -71 [ 249.228931][ T5899] usb usb1-port1: attempt power cycle [ 249.577613][ T5899] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 249.730125][ T5899] usb 1-1: device descriptor read/8, error -71 [ 249.828455][ T5267] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 249.967757][ T5267] usb 5-1: device descriptor read/64, error -71 [ 249.996538][ T5899] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 250.041173][ T5899] usb 1-1: device descriptor read/8, error -71 [ 250.157743][ T5899] usb usb1-port1: unable to enumerate USB device [ 250.207499][ T5267] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 250.337490][ T5267] usb 5-1: device descriptor read/64, error -71 [ 250.375627][ T5899] usb 4-1: USB disconnect, device number 34 [ 250.475076][ T5267] usb usb5-port1: attempt power cycle [ 250.897563][ T5267] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 250.920878][ T5267] usb 5-1: device descriptor read/8, error -71 [ 250.957706][ T5899] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 250.997916][ T8819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.733'. [ 251.118017][ T5899] usb 4-1: device descriptor read/64, error -71 [ 251.226473][ T5267] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 251.442895][ T5267] usb 5-1: device descriptor read/8, error -71 [ 251.477515][ T5899] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 251.557841][ T5267] usb usb5-port1: unable to enumerate USB device [ 251.607485][ T5899] usb 4-1: device descriptor read/64, error -71 [ 251.650321][ T8828] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 251.868076][ T5899] usb usb4-port1: attempt power cycle [ 251.887096][ T8829] geneve2: entered promiscuous mode [ 251.903521][ T8829] geneve2: entered allmulticast mode [ 252.138700][ T5886] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 252.237577][ T5899] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 252.268175][ T5899] usb 4-1: device descriptor read/8, error -71 [ 252.297471][ T5886] usb 2-1: Using ep0 maxpacket: 32 [ 252.306680][ T5886] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 252.316235][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.324410][ T5886] usb 2-1: Product: syz [ 252.328813][ T5886] usb 2-1: Manufacturer: syz [ 252.358765][ T5886] usb 2-1: SerialNumber: syz [ 252.365358][ T5886] usb 2-1: config 0 descriptor?? [ 252.380236][ T5886] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 252.517897][ T5899] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 252.541245][ T8835] loop5: detected capacity change from 0 to 7 [ 252.552615][ T8835] Dev loop5: unable to read RDB block 7 [ 252.558354][ T8835] loop5: AHDI p1 [ 252.562029][ T8835] loop5: partition table partially beyond EOD, truncated [ 252.588248][ T5899] usb 4-1: device descriptor read/8, error -71 [ 252.627592][ T5830] Bluetooth: hci1: command 0x0406 tx timeout [ 252.727913][ T5899] usb usb4-port1: unable to enumerate USB device [ 252.847506][ T5267] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 253.051036][ T8851] netlink: 4 bytes leftover after parsing attributes in process `syz.0.739'. [ 253.417552][ T24] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 253.567795][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 253.584526][ T24] usb 1-1: config 0 has no interfaces? [ 253.604041][ T24] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 253.617332][ T24] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 253.635365][ T24] usb 1-1: Manufacturer: syz [ 253.654210][ T24] usb 1-1: config 0 descriptor?? [ 254.160188][ T8831] netlink: 8 bytes leftover after parsing attributes in process `syz.1.736'. [ 254.366906][ T8876] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.746'. [ 254.616697][ T8878] macvtap1: entered allmulticast mode [ 254.623095][ T8878] vlan0: entered allmulticast mode [ 254.695543][ T8878] veth0_vlan: entered allmulticast mode [ 254.705535][ T8878] team0: Device macvtap1 failed to register rx_handler [ 254.717161][ T8878] vlan0: left allmulticast mode [ 254.722490][ T8878] veth0_vlan: left allmulticast mode [ 254.837889][ T5886] gspca_ov534_9: sccb_write failed [ 255.055528][ T5886] gspca_ov534_9: reg_w failed -71 [ 255.257500][ T5267] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 255.307511][ T5886] gspca_ov534_9: Unknown sensor 0000 [ 255.307593][ T5886] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 255.323385][ T5886] usb 2-1: USB disconnect, device number 37 [ 255.424435][ T5267] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 255.433841][ T5267] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.447038][ T5267] usb 5-1: Product: syz [ 255.608727][ T5267] usb 5-1: Manufacturer: syz [ 255.618628][ T8887] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 255.681773][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.682410][ T5267] usb 5-1: SerialNumber: syz [ 255.694787][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.293049][ T8895] fuse: Invalid gid '00000000000000000000003' [ 256.409635][ T8887] geneve2: entered promiscuous mode [ 256.415048][ T8887] geneve2: entered allmulticast mode [ 256.668082][ T5925] usb 1-1: USB disconnect, device number 38 [ 256.723362][ T5267] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 256.774591][ T5267] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 256.949544][ T1104] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 257.590538][ T5925] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 257.810847][ T5925] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 257.905288][ T5925] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 257.917596][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 257.949998][ T5925] usb 2-1: Product: syz [ 257.960791][ T5925] usb 2-1: Manufacturer: syz [ 257.974563][ T5925] usb 2-1: SerialNumber: syz [ 258.141490][ T5267] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 258.248828][ T5925] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 38 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 258.515638][ T8914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.525196][ T8914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.593758][ T5899] usb 2-1: USB disconnect, device number 38 [ 258.614626][ T5899] usblp0: removed [ 259.137564][ T5906] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 259.287489][ T5906] usb 1-1: Using ep0 maxpacket: 16 [ 259.295670][ T5906] usb 1-1: config 0 has no interfaces? [ 259.301440][ T5906] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 259.323033][ T5906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.408454][ T5906] usb 1-1: config 0 descriptor?? [ 259.782893][ T8929] netlink: 16 bytes leftover after parsing attributes in process `syz.3.759'. [ 259.822482][ T8932] kvm: kvm [8931]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 259.851355][ T8932] kvm: kvm [8931]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 260.036289][ T8932] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 260.056880][ T5906] usb 1-1: USB disconnect, device number 39 [ 260.111164][ T5267] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 260.170616][ T5267] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 260.240272][ T5267] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 260.291346][ T5267] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 260.320515][ T5267] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 260.384341][ T5267] usb 5-1: USB disconnect, device number 48 [ 260.452420][ T8940] ip6tnl1: entered promiscuous mode [ 260.767631][ T5925] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 260.785893][ T8953] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 260.913150][ T5267] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 260.959386][ T8953] geneve3: entered promiscuous mode [ 260.964738][ T8953] geneve3: entered allmulticast mode [ 260.981561][ T5925] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.997555][ T8956] netlink: 'syz.0.769': attribute type 1 has an invalid length. [ 261.005343][ T5925] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 261.055160][ T5925] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 261.110824][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.139584][ T8962] netlink: 56 bytes leftover after parsing attributes in process `syz.0.769'. [ 261.197577][ T5925] usb 4-1: Product: syz [ 261.259485][ T8956] 8021q: adding VLAN 0 to HW filter on device bond3 [ 261.682719][ T5925] usb 4-1: Manufacturer: syz [ 261.702940][ T5267] usb 5-1: New USB device found, idVendor=050d, idProduct=0121, bcdDevice=6f.3b [ 261.715176][ T5925] usb 4-1: SerialNumber: syz [ 261.729800][ T5267] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.769628][ T8959] bond3: (slave gretap2): making interface the new active one [ 261.782270][ T5267] pegasus 5-1:254.0: Missing or invalid endpoints [ 261.805584][ T8959] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 261.986209][ T8970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.996863][ T8970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.017873][ T24] usb 5-1: USB disconnect, device number 49 [ 262.301053][ T8973] netlink: 12 bytes leftover after parsing attributes in process `syz.1.771'. [ 262.388414][ T8976] netlink: 184 bytes leftover after parsing attributes in process `syz.5.772'. [ 262.700927][ T30] audit: type=1326 audit(1776159603.275:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8977 comm="syz.5.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3afbf9c819 code=0x7ffc0000 [ 262.727450][ T5834] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 262.747156][ T30] audit: type=1326 audit(1776159603.275:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8977 comm="syz.5.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f3afbf9c819 code=0x7ffc0000 [ 262.770751][ T30] audit: type=1326 audit(1776159603.285:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8977 comm="syz.5.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3afbf9c819 code=0x7ffc0000 [ 262.794896][ T30] audit: type=1326 audit(1776159603.285:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8977 comm="syz.5.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3afbf9c819 code=0x7ffc0000 [ 262.825502][ T30] audit: type=1326 audit(1776159603.285:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8977 comm="syz.5.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f3afbf9c819 code=0x7ffc0000 [ 262.852535][ T30] audit: type=1326 audit(1776159603.285:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8977 comm="syz.5.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3afbf9c819 code=0x7ffc0000 [ 262.952374][ T5834] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 262.964437][ T5834] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.993716][ T5834] usb 2-1: config 0 descriptor?? [ 263.003810][ T30] audit: type=1326 audit(1776159603.285:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8977 comm="syz.5.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3afbf9c819 code=0x7ffc0000 [ 263.029993][ T5834] cp210x 2-1:0.0: cp210x converter detected [ 263.040034][ T30] audit: type=1326 audit(1776159603.285:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8977 comm="syz.5.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3afbf5d04e code=0x7ffc0000 [ 263.066165][ T30] audit: type=1326 audit(1776159603.285:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8977 comm="syz.5.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3afbf9c819 code=0x7ffc0000 [ 263.121782][ T30] audit: type=1326 audit(1776159603.285:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8977 comm="syz.5.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3afbf9c819 code=0x7ffc0000 [ 263.229296][ T8973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.238468][ T8973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.251758][ T8973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.269059][ T8973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.284321][ T8973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.296865][ T8973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.310421][ T8973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.323342][ T8973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.396988][ T8973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.423176][ T8973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.441048][ T5834] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -121 [ 263.491368][ T5925] cdc_ncm 4-1:1.0: bind() failure [ 263.504938][ T5925] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 263.513790][ T5925] cdc_ncm 4-1:1.1: bind() failure [ 263.564306][ T5925] usb 4-1: USB disconnect, device number 39 [ 263.655834][ T5834] cp210x 2-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 263.691495][ T5834] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 263.717967][ T5834] usb 2-1: cp210x converter now attached to ttyUSB0 [ 263.762391][ T8999] fuse: Invalid gid '00000000000000000004' [ 263.801079][ T5834] usb 2-1: USB disconnect, device number 39 [ 263.860265][ T5834] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 263.953377][ T5834] cp210x 2-1:0.0: device disconnected [ 264.259726][ T9013] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 264.546229][ T9013] geneve2: entered promiscuous mode [ 264.551832][ T9013] geneve2: entered allmulticast mode [ 265.765540][ T9022] rtc_cmos 00:00: Alarms can be up to one day in the future [ 265.937479][ T5834] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 266.089253][ T5834] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 266.097757][ T5834] usb 5-1: config 0 has no interface number 0 [ 266.124726][ T5834] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 266.158859][ T9034] netlink: 72 bytes leftover after parsing attributes in process `syz.0.787'. [ 266.217785][ T5834] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 266.233781][ T5834] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 266.244667][ T5834] usb 5-1: Manufacturer: syz [ 266.252987][ T5834] usb 5-1: SerialNumber: syz [ 266.269520][ T5925] rtc_cmos 00:00: Alarms can be up to one day in the future [ 266.278447][ T5925] rtc_cmos 00:00: Alarms can be up to one day in the future [ 266.285344][ T5834] usb 5-1: config 0 descriptor?? [ 266.286197][ T5925] rtc_cmos 00:00: Alarms can be up to one day in the future [ 266.354509][ T5925] rtc_cmos 00:00: Alarms can be up to one day in the future [ 266.374814][ T5925] rtc rtc0: __rtc_set_alarm: err=-22 [ 266.801671][ T9044] netlink: 80 bytes leftover after parsing attributes in process `syz.3.790'. [ 266.997510][ T5906] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 267.035656][ T5834] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.214/input/input22 [ 267.262812][ T5267] usb 5-1: USB disconnect, device number 50 [ 267.280449][ T5906] usb 6-1: config 5 has an invalid interface number: 123 but max is 0 [ 267.293601][ T5906] usb 6-1: config 5 has no interface number 0 [ 267.311453][ T5906] usb 6-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 267.330680][ T5906] usb 6-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 267.485057][ T5906] usb 6-1: config 5 interface 123 has no altsetting 0 [ 267.638249][ T5906] usb 6-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 267.657754][ T5906] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.698153][ T5906] usb 6-1: Product: syz [ 267.710395][ T5906] usb 6-1: Manufacturer: syz [ 267.720877][ T5906] usb 6-1: SerialNumber: syz [ 268.129146][ T9063] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 268.307076][ T9064] geneve2: entered promiscuous mode [ 268.313674][ T9064] geneve2: entered allmulticast mode [ 268.859432][ T10] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 268.916233][ T9074] fuse: Bad value for 'user_id' [ 268.921247][ T9074] fuse: Bad value for 'user_id' [ 268.939701][ T9074] fuse: Bad value for 'user_id' [ 268.972472][ T9074] fuse: Bad value for 'user_id' [ 269.121561][ T10] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 269.140518][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.164368][ T10] usb 2-1: Product: syz [ 269.174706][ T10] usb 2-1: Manufacturer: syz [ 269.181607][ T10] usb 2-1: SerialNumber: syz [ 269.292217][ T10] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 269.323900][ T5899] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 270.032757][ T5834] usb 2-1: USB disconnect, device number 40 [ 270.387666][ T5899] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 270.403507][ T5899] ath9k_htc: Failed to initialize the device [ 270.438070][ T5834] usb 2-1: ath9k_htc: USB layer deinitialized [ 270.682056][ T5906] ni6501 6-1:5.123: driver 'ni6501' failed to auto-configure device. [ 270.765716][ T5906] usb 6-1: USB disconnect, device number 21 [ 271.351024][ T5267] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 271.438547][ T9108] hub 9-0:1.0: USB hub found [ 271.463006][ T9108] hub 9-0:1.0: 1 port detected [ 271.558009][ T5267] usb 4-1: Using ep0 maxpacket: 8 [ 271.574218][ T5267] usb 4-1: unable to get BOS descriptor or descriptor too short [ 271.600551][ T5267] usb 4-1: too many configurations: 13, using maximum allowed: 8 [ 271.634692][ T5267] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 271.680775][ T5267] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 271.703683][ T5267] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 271.727263][ T5267] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 271.741517][ T5267] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 271.775255][ T5267] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 271.799169][ T5267] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 271.809877][ T5267] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 271.820089][ T5267] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 271.838705][ T5267] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 271.851036][ T5267] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 271.861675][ T5267] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 271.881913][ T5267] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 271.897527][ T5267] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 271.916863][ T5267] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 272.074912][ T5267] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 272.085417][ T5267] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 272.104656][ T5267] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 272.135133][ T5267] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 272.155805][ T5267] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 272.180878][ T5267] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 272.215436][ T5267] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 272.236089][ T5267] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 272.265402][ T5267] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 272.306134][ T5267] usb 4-1: New USB device found, idVendor=041e, idProduct=323b, bcdDevice= 0.40 [ 272.329700][ T5267] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.377453][ T5267] usb 4-1: Product: syz [ 272.390137][ T5267] usb 4-1: Manufacturer: syz [ 272.405772][ T5267] usb 4-1: SerialNumber: syz [ 272.643246][ T9104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.682639][ T9104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.726741][ T5267] usb 4-1: 0:2 : does not exist [ 272.762559][ T9124] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 272.845906][ T5267] usb 4-1: USB disconnect, device number 40 [ 272.939178][ T7165] udevd[7165]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 273.133448][ T9124] geneve2: entered promiscuous mode [ 273.138838][ T9124] geneve2: entered allmulticast mode [ 273.536369][ T9136] netlink: 120 bytes leftover after parsing attributes in process `syz.0.816'. [ 273.537711][ T5267] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 273.717490][ T5267] usb 5-1: Using ep0 maxpacket: 32 [ 273.741849][ T5267] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 273.767200][ T5267] usb 5-1: config 0 has no interface number 0 [ 273.791747][ T5267] usb 5-1: config 0 interface 132 has no altsetting 0 [ 273.820401][ T5267] usb 5-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice= 3.02 [ 273.877343][ T5267] usb 5-1: New USB device strings: Mfr=19, Product=95, SerialNumber=25 [ 273.900436][ T5267] usb 5-1: Product: syz [ 273.911732][ T5267] usb 5-1: Manufacturer: syz [ 273.924277][ T5267] usb 5-1: SerialNumber: syz [ 273.941783][ T5267] usb 5-1: config 0 descriptor?? [ 273.957487][ T5899] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 273.976996][ T5267] ftdi_sio 5-1:0.132: FTDI USB Serial Device converter detected [ 273.998147][ T5267] ftdi_sio ttyUSB0: unknown device type: 0x302 [ 274.137968][ T5899] usb 4-1: Using ep0 maxpacket: 32 [ 274.149204][ T5899] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 274.162266][ T5899] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 274.177540][ T5899] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 274.189556][ T5899] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 274.206223][ T5899] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 274.216886][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.225959][ T5899] usb 4-1: Product: syz [ 274.233332][ T5899] usb 4-1: Manufacturer: syz [ 274.238295][ T5899] usb 4-1: SerialNumber: syz [ 274.259092][ T9154] netlink: 12 bytes leftover after parsing attributes in process `syz.1.820'. [ 274.321660][ C0] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 274.346278][ T9157] loop5: detected capacity change from 0 to 7 [ 274.361785][ T5899] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input23 [ 274.389121][ T9157] Dev loop5: unable to read RDB block 7 [ 274.409533][ T9157] loop5: AHDI p2 [ 274.426389][ T5267] usb 5-1: USB disconnect, device number 51 [ 274.444659][ T5267] ftdi_sio 5-1:0.132: device disconnected [ 274.691005][ T9157] loop5: partition table partially beyond EOD, truncated [ 274.698173][ T5899] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 274.698206][ T5899] (id 0x00) [ 274.807852][ T5899] rc_core: IR keymap rc-imon-pad not found [ 274.814902][ T5899] Registered IR keymap rc-empty [ 274.830173][ T5899] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 274.861005][ T5899] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 274.909789][ T5899] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 274.929442][ T5899] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input24 [ 275.102857][ T5899] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:41> initialized [ 275.481301][ T9170] netlink: 20 bytes leftover after parsing attributes in process `syz.4.824'. [ 275.723772][ T9172] netlink: 28 bytes leftover after parsing attributes in process `syz.3.817'. [ 277.485632][ T0] NOHZ tick-stop error: local softirq work is pending, handler #88!!! [ 277.892301][ T9169] imon:send_packet: task interrupted [ 277.915016][ T9169] imon:send_packet: packet tx failed (-512) [ 278.021804][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 278.044809][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 278.112491][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 278.135213][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 278.158186][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 278.182316][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 278.205693][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 282.857407][ C1] sched: DL replenish lagged too much [ 284.706707][ T9169] imon:vfd_write: send packet #1 failed [ 289.401180][ T1104] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 317.413570][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.432515][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 399.286543][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 399.305405][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 419.753407][ T9175] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 440.604071][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.623384][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 476.727312][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 476.734321][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5847/1:b..l P9152/1:b..l P9170/1:b..l [ 476.744973][ C0] rcu: (detected by 0, t=10503 jiffies, g=39025, q=1603681 ncpus=2) [ 476.753111][ C0] task:syz.4.824 state:R running task stack:25312 pid:9170 tgid:9167 ppid:5848 task_flags:0x40054c flags:0x00080003 [ 476.767627][ C0] Call Trace: [ 476.770935][ C0] [ 476.773901][ C0] __schedule+0x15dd/0x52d0 [ 476.778460][ C0] ? __pfx___schedule+0x10/0x10 [ 476.783371][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 476.788366][ C0] preempt_schedule_irq+0x4d/0xa0 [ 476.793444][ C0] irqentry_exit+0x599/0x620 [ 476.798074][ C0] ? trace_irq_disable+0x3b/0x150 [ 476.803152][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 476.809217][ C0] RIP: 0010:lock_release+0x7f/0x3d0 [ 476.814445][ C0] Code: 26 3c 70 0e 00 0f 84 1c 02 00 00 65 8b 05 09 5e 7b 11 85 c0 0f 85 0d 02 00 00 65 4c 8b 3d 51 18 7b 11 41 83 bf 54 0b 00 00 00 <0f> 85 f7 01 00 00 49 81 3e 20 c4 e0 93 0f 84 ea 01 00 00 9c 5b fa [ 476.834068][ C0] RSP: 0018:ffffc900033d72d0 EFLAGS: 00000246 [ 476.840178][ C0] RAX: 0000000000000000 RBX: ffffffff90b36501 RCX: 0000000080000001 [ 476.848185][ C0] RDX: ffffc900033d7401 RSI: ffffffff8c27d860 RDI: ffffffff8c27d820 [ 476.856195][ C0] RBP: dffffc0000000000 R08: ffffc900033d78c8 R09: 0000000000000000 [ 476.864212][ C0] R10: ffffc900033d7458 R11: fffff5200067ae8d R12: ffffc900033d78d8 [ 476.872214][ C0] R13: ffffffff81769a55 R14: ffffffff8e75e5e0 R15: ffff88802e8dbd00 [ 476.880236][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 476.885407][ C0] ? deref_stack_reg+0x19f/0x230 [ 476.890396][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 476.895554][ C0] unwind_next_frame+0x1aaa/0x23c0 [ 476.900715][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 476.905863][ C0] ? __kmalloc_cache_noprof+0x31c/0x660 [ 476.911445][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 476.917641][ C0] arch_stack_walk+0x11b/0x150 [ 476.922451][ C0] ? kvm_uevent_notify_change+0x226/0x3a0 [ 476.928215][ C0] stack_trace_save+0xa9/0x100 [ 476.933037][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 476.938486][ C0] save_stack+0x122/0x230 [ 476.942858][ C0] ? __pfx_save_stack+0x10/0x10 [ 476.947759][ C0] ? __free_frozen_pages+0xc2b/0xdb0 [ 476.953336][ C0] ? __slab_free+0x263/0x2b0 [ 476.957969][ C0] ? qlist_free_all+0x97/0x100 [ 476.962773][ C0] ? kasan_quarantine_reduce+0x148/0x160 [ 476.968445][ C0] ? __kasan_kmalloc+0x22/0xb0 [ 476.973440][ C0] ? __kmalloc_cache_noprof+0x31c/0x660 [ 476.979063][ C0] ? page_ext_put+0x97/0xc0 [ 476.983615][ C0] __reset_page_owner+0x71/0x1f0 [ 476.988575][ C0] __free_frozen_pages+0xc2b/0xdb0 [ 476.993739][ C0] __slab_free+0x263/0x2b0 [ 476.998202][ C0] qlist_free_all+0x97/0x100 [ 477.002835][ C0] kasan_quarantine_reduce+0x148/0x160 [ 477.008327][ C0] __kasan_kmalloc+0x22/0xb0 [ 477.012971][ C0] __kmalloc_cache_noprof+0x31c/0x660 [ 477.018380][ C0] ? kvm_uevent_notify_change+0x226/0x3a0 [ 477.024133][ C0] ? __kmalloc_cache_noprof+0x15b/0x660 [ 477.029691][ C0] kvm_uevent_notify_change+0x226/0x3a0 [ 477.035302][ C0] ? __pfx_kvm_vm_release+0x10/0x10 [ 477.040539][ C0] kvm_put_kvm+0xaa/0xa80 [ 477.044901][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 477.050134][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 477.055409][ C0] ? __pfx_kvm_vm_release+0x10/0x10 [ 477.060634][ C0] kvm_vm_release+0x43/0x50 [ 477.065141][ C0] __fput+0x44f/0xa70 [ 477.069151][ C0] task_work_run+0x1d9/0x270 [ 477.073779][ C0] ? __pfx_task_work_run+0x10/0x10 [ 477.078928][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 477.084105][ C0] do_exit+0x70f/0x23c0 [ 477.088309][ C0] ? __pfx_do_exit+0x10/0x10 [ 477.092940][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 477.098013][ C0] do_group_exit+0x21b/0x2d0 [ 477.102641][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 477.107859][ C0] get_signal+0x1284/0x1330 [ 477.112427][ C0] arch_do_signal_or_restart+0xbc/0x830 [ 477.118018][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 477.124231][ C0] exit_to_user_mode_loop+0x86/0x480 [ 477.129575][ C0] ? rcu_is_watching+0x15/0xb0 [ 477.134384][ C0] do_syscall_64+0x32d/0xf80 [ 477.139028][ C0] ? trace_irq_disable+0x3b/0x150 [ 477.144087][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.150176][ C0] ? clear_bhb_loop+0x40/0x90 [ 477.154882][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.160784][ C0] RIP: 0033:0x7f4f4c79c819 [ 477.165242][ C0] RSP: 002b:00007f4f4d656028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 477.173723][ C0] RAX: fffffffffffffe00 RBX: 00007f4f4ca16090 RCX: 00007f4f4c79c819 [ 477.181729][ C0] RDX: 000000000000fdef RSI: 0000200000000580 RDI: 000000000000000c [ 477.189778][ C0] RBP: 00007f4f4c832c91 R08: 0000000000000000 R09: 0000000000000000 [ 477.197833][ C0] R10: 0000000010008095 R11: 0000000000000246 R12: 0000000000000000 [ 477.205835][ C0] R13: 00007f4f4ca16128 R14: 00007f4f4ca16090 R15: 00007f4f4cb3fa48 [ 477.213841][ C0] [ 477.216884][ C0] task:syz.1.820 state:R running task stack:25608 pid:9152 tgid:9148 ppid:5847 task_flags:0x40044c flags:0x00080001 [ 477.230409][ C0] Call Trace: [ 477.233687][ C0] [ 477.236644][ C0] __schedule+0x15dd/0x52d0 [ 477.241195][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 477.246183][ C0] ? __pfx___schedule+0x10/0x10 [ 477.251087][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 477.256080][ C0] preempt_schedule_irq+0x4d/0xa0 [ 477.261136][ C0] irqentry_exit+0x599/0x620 [ 477.265761][ C0] ? trace_irq_disable+0x3b/0x150 [ 477.270825][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 477.276871][ C0] RIP: 0010:unwind_next_frame+0x2b4/0x23c0 [ 477.282708][ C0] Code: 00 00 fc ff df 0f 84 1c 04 00 00 4a 8d 14 ad 54 30 24 90 45 29 e8 4a 8d 1c 82 48 83 c3 fc 49 89 d5 48 39 da 0f 86 21 02 00 00 <49> 29 d5 49 c1 fd 02 4a 8d 04 6d 00 00 00 00 4c 01 e8 48 8d 14 46 [ 477.302340][ C0] RSP: 0018:ffffc90003916b38 EFLAGS: 00000202 [ 477.308438][ C0] RAX: ffffffff9033f380 RBX: ffffffff9033f384 RCX: ffffffff9033f388 [ 477.316439][ C0] RDX: ffffffff9033f384 RSI: ffffffff90b4fe8c RDI: ffffffff8c27d820 [ 477.324423][ C0] RBP: ffffffff9033f388 R08: 0000000000000001 R09: ffffffff8e75e5e0 [ 477.332421][ C0] R10: ffffc90003916c58 R11: ffffffff81b0eba0 R12: ffffffff823a7760 [ 477.340427][ C0] R13: ffffffff9033f384 R14: ffffc90003916c08 R15: ffffffff9033f384 [ 477.348435][ C0] ? __reset_page_owner+0x70/0x1f0 [ 477.353600][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 477.359789][ C0] ? unwind_next_frame+0xd4/0x23c0 [ 477.364946][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 477.370129][ C0] ? __reset_page_owner+0x71/0x1f0 [ 477.375298][ C0] ? __reset_page_owner+0x71/0x1f0 [ 477.380460][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 477.386699][ C0] arch_stack_walk+0x11b/0x150 [ 477.391532][ C0] ? __reset_page_owner+0x71/0x1f0 [ 477.396697][ C0] stack_trace_save+0xa9/0x100 [ 477.401493][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 477.406891][ C0] ? stack_depot_save_flags+0x33/0x810 [ 477.412402][ C0] save_stack+0x122/0x230 [ 477.416773][ C0] ? __pfx_save_stack+0x10/0x10 [ 477.421697][ C0] ? page_ext_put+0x97/0xc0 [ 477.426230][ C0] __reset_page_owner+0x71/0x1f0 [ 477.431213][ C0] free_unref_folios+0xed5/0x16d0 [ 477.436309][ C0] folios_put_refs+0x789/0x8d0 [ 477.441132][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 477.446449][ C0] ? free_swap_cache+0x109/0x300 [ 477.451418][ C0] free_pages_and_swap_cache+0x2e7/0x5b0 [ 477.457108][ C0] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 477.463367][ C0] ? unmap_page_range+0x3bf2/0x48f0 [ 477.468625][ C0] tlb_flush_mmu+0x6d3/0xa30 [ 477.473262][ C0] ? unmap_page_range+0x3bf2/0x48f0 [ 477.478499][ C0] ? unmap_page_range+0x3bf2/0x48f0 [ 477.483744][ C0] unmap_page_range+0x3c1d/0x48f0 [ 477.488852][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 477.494291][ C0] ? mas_find+0xb0e/0xd30 [ 477.498760][ C0] ? unmap_vmas+0x1c4/0x6a0 [ 477.503325][ C0] unmap_vmas+0x48f/0x6a0 [ 477.507754][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 477.512690][ C0] exit_mmap+0x280/0xa10 [ 477.516989][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 477.521812][ C0] ? __pfx_exit_aio+0x10/0x10 [ 477.526532][ C0] ? uprobe_clear_state+0x27c/0x290 [ 477.531763][ C0] __mmput+0x118/0x430 [ 477.535878][ C0] exit_mm+0x168/0x220 [ 477.539984][ C0] do_exit+0x6a2/0x23c0 [ 477.544169][ C0] ? __pfx_do_exit+0x10/0x10 [ 477.548794][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 477.553866][ C0] do_group_exit+0x21b/0x2d0 [ 477.558490][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 477.563744][ C0] get_signal+0x1284/0x1330 [ 477.568296][ C0] arch_do_signal_or_restart+0xbc/0x830 [ 477.573859][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 477.580031][ C0] ? __x64_sys_recvmmsg+0x198/0x250 [ 477.585286][ C0] exit_to_user_mode_loop+0x86/0x480 [ 477.590602][ C0] ? rcu_is_watching+0x15/0xb0 [ 477.595414][ C0] do_syscall_64+0x32d/0xf80 [ 477.600045][ C0] ? trace_irq_disable+0x3b/0x150 [ 477.605113][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.611215][ C0] ? clear_bhb_loop+0x40/0x90 [ 477.615916][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.621814][ C0] RIP: 0033:0x7f0e3b99c819 [ 477.626252][ C0] RSP: 002b:00007f0e3c8f8028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 477.634698][ C0] RAX: 0000000000010106 RBX: 00007f0e3bc16090 RCX: 00007f0e3b99c819 [ 477.642715][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 477.650800][ C0] RBP: 00007f0e3ba32c91 R08: 0000000000000000 R09: 0000000000000000 [ 477.658797][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 477.666823][ C0] R13: 00007f0e3bc16128 R14: 00007f0e3bc16090 R15: 00007f0e3bd3fa48 [ 477.674842][ C0] [ 477.677909][ C0] task:syz-executor state:R running task stack:22496 pid:5847 tgid:5847 ppid:1 task_flags:0x40054c flags:0x00080003 [ 477.691442][ C0] Call Trace: [ 477.694743][ C0] [ 477.697702][ C0] __schedule+0x15dd/0x52d0 [ 477.702270][ C0] ? __pfx___schedule+0x10/0x10 [ 477.707157][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 477.712394][ C0] ? irqentry_exit+0x59e/0x620 [ 477.717220][ C0] preempt_schedule_notrace+0x57/0x90 [ 477.722649][ C0] preempt_schedule_notrace_thunk+0x16/0x30 [ 477.728580][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 477.734774][ C0] rcu_is_watching+0x7f/0xb0 [ 477.739381][ C0] ? get_signal+0x1284/0x1330 [ 477.744104][ C0] lock_acquire+0x57/0x2e0 [ 477.748578][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 477.753736][ C0] ? get_signal+0x1284/0x1330 [ 477.758448][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 477.763614][ C0] unwind_next_frame+0xc2/0x23c0 [ 477.768596][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 477.773770][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 477.778930][ C0] ? do_group_exit+0x21b/0x2d0 [ 477.783723][ C0] ? get_signal+0x1284/0x1330 [ 477.788415][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 477.794611][ C0] arch_stack_walk+0x11b/0x150 [ 477.799411][ C0] ? get_signal+0x1284/0x1330 [ 477.804125][ C0] stack_trace_save+0xa9/0x100 [ 477.808916][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 477.814340][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 477.819303][ C0] save_stack+0x122/0x230 [ 477.823633][ C0] ? __pfx_save_stack+0x10/0x10 [ 477.828487][ C0] ? __free_frozen_pages+0xc2b/0xdb0 [ 477.833808][ C0] ? vfree+0x25a/0x400 [ 477.837935][ C0] ? kcov_close+0x28/0x50 [ 477.842308][ C0] ? __fput+0x44f/0xa70 [ 477.846506][ C0] ? task_work_run+0x1d9/0x270 [ 477.851304][ C0] ? do_exit+0x70f/0x23c0 [ 477.855664][ C0] ? do_group_exit+0x21b/0x2d0 [ 477.860451][ C0] ? get_signal+0x1284/0x1330 [ 477.865146][ C0] __reset_page_owner+0x71/0x1f0 [ 477.870102][ C0] __free_frozen_pages+0xc2b/0xdb0 [ 477.875259][ C0] ? ___free_pages+0xb2/0x220 [ 477.880006][ C0] vfree+0x25a/0x400 [ 477.883945][ C0] ? __pfx_kcov_close+0x10/0x10 [ 477.888847][ C0] kcov_close+0x28/0x50 [ 477.893057][ C0] __fput+0x44f/0xa70 [ 477.897106][ C0] task_work_run+0x1d9/0x270 [ 477.901743][ C0] ? __pfx_task_work_run+0x10/0x10 [ 477.906892][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 477.912063][ C0] do_exit+0x70f/0x23c0 [ 477.916244][ C0] ? __pfx_do_exit+0x10/0x10 [ 477.920861][ C0] ? schedule+0x90/0x360 [ 477.925158][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 477.930227][ C0] do_group_exit+0x21b/0x2d0 [ 477.934862][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 477.940143][ C0] get_signal+0x1284/0x1330 [ 477.944715][ C0] arch_do_signal_or_restart+0xbc/0x830 [ 477.950309][ C0] ? __pfx_get_timespec64+0x10/0x10 [ 477.955549][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 477.961720][ C0] ? __se_sys_clock_nanosleep+0x35b/0x3b0 [ 477.967524][ C0] exit_to_user_mode_loop+0x86/0x480 [ 477.972883][ C0] ? rcu_is_watching+0x15/0xb0 [ 477.977698][ C0] do_syscall_64+0x32d/0xf80 [ 477.982328][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.988420][ C0] ? clear_bhb_loop+0x40/0x90 [ 477.993142][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.999076][ C0] RIP: 0033:0x7f0e3b95d04e [ 478.003502][ C0] RSP: 002b:00007f0e3bd3fd28 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 478.011919][ C0] RAX: 0000000000000000 RBX: 000055557ecac500 RCX: 00007f0e3b95d04e [ 478.019927][ C0] RDX: 00007f0e3bd3fd80 RSI: 0000000000000000 RDI: 0000000000000000 [ 478.027924][ C0] RBP: 00007f0e3bd3fdec R08: 0000000000000000 R09: 0000000000000000 [ 478.036016][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000000ae [ 478.044025][ C0] R13: 0000000000000063 R14: 000000000004327f R15: 00007f0e3bd3fe40 [ 478.052052][ C0] [ 478.055098][ C0] rcu: rcu_preempt kthread starved for 5424 jiffies! g39025 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 478.066228][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 478.076208][ C0] rcu: RCU grace-period kthread stack dump: [ 478.082138][ C0] task:rcu_preempt state:R running task stack:27616 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 478.095647][ C0] Call Trace: [ 478.098973][ C0] [ 478.101936][ C0] __schedule+0x15dd/0x52d0 [ 478.106476][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 478.111473][ C0] ? __pfx___schedule+0x10/0x10 [ 478.116373][ C0] ? schedule+0x90/0x360 [ 478.120652][ C0] schedule+0x164/0x360 [ 478.124842][ C0] schedule_timeout+0x158/0x2c0 [ 478.129733][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 478.135115][ C0] ? __pfx_process_timeout+0x10/0x10 [ 478.140407][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 478.146276][ C0] ? prepare_to_swait_event+0x340/0x370 [ 478.151866][ C0] rcu_gp_fqs_loop+0x312/0x11d0 [ 478.156783][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 478.162971][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 478.168300][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 478.173576][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 478.178195][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 478.183465][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 478.189309][ C0] ? __kthread_parkme+0x7a/0x1f0 [ 478.194284][ C0] ? __kthread_parkme+0x19c/0x1f0 [ 478.199355][ C0] kthread+0x388/0x470 [ 478.203464][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 478.208701][ C0] ? __pfx_kthread+0x10/0x10 [ 478.213331][ C0] ret_from_fork+0x51e/0xb90 [ 478.217961][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 478.223116][ C0] ? __switch_to+0xc7d/0x1450 [ 478.227806][ C0] ? __pfx_kthread+0x10/0x10 [ 478.232463][ C0] ret_from_fork_asm+0x1a/0x30 [ 478.237278][ C0] [ 478.240327][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 478.246689][ C0] Sending NMI from CPU 0 to CPUs 1: [ 478.251932][ C1] NMI backtrace for cpu 1 [ 478.251955][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 478.251980][ C1] Tainted: [L]=SOFTLOCKUP [ 478.251987][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 478.251998][ C1] RIP: 0010:__lock_acquire+0x2be/0x2cf0 [ 478.252038][ C1] Code: 24 18 0f 83 14 28 00 00 48 89 6c 24 28 48 8d 04 ad 00 00 00 00 48 01 e8 89 f1 81 e1 ff 1f 00 00 ba 00 e0 ff ff 41 23 54 c7 20 <09> ca 41 89 54 c7 20 4d 89 44 c7 08 4d 89 4c c7 10 48 8b 94 24 20 [ 478.252054][ C1] RSP: 0018:ffffc90000a077d8 EFLAGS: 00000006 [ 478.252069][ C1] RAX: 000000000000000f RBX: 0000000000000000 RCX: 0000000000000007 [ 478.252080][ C1] RDX: 0000000000022000 RSI: 0000000000000007 RDI: 0000000000000000 [ 478.252090][ C1] RBP: 0000000000000003 R08: ffffffff81769a55 R09: ffffffff8e75e5e0 [ 478.252103][ C1] R10: ffffc90000a07ab8 R11: ffffffff81b0eba0 R12: 0000000000000000 [ 478.252115][ C1] R13: 0000000000000002 R14: ffff88801dac0000 R15: ffff88801dac0b58 [ 478.252128][ C1] FS: 0000000000000000(0000) GS:ffff888125551000(0000) knlGS:0000000000000000 [ 478.252141][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 478.252153][ C1] CR2: 000020000033b000 CR3: 00000000772e4000 CR4: 00000000003526f0 [ 478.252169][ C1] Call Trace: [ 478.252175][ C1] [ 478.252186][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 478.252215][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 478.252243][ C1] lock_acquire+0xf0/0x2e0 [ 478.252269][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 478.252295][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 478.252320][ C1] ? nft_do_chain_inet+0x29d/0x380 [ 478.252346][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 478.252370][ C1] unwind_next_frame+0xc2/0x23c0 [ 478.252394][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 478.252421][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 478.252446][ C1] ? nft_do_chain+0x45e/0x1990 [ 478.252471][ C1] ? nft_do_chain_inet+0x29d/0x380 [ 478.252495][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 478.252514][ C1] arch_stack_walk+0x11b/0x150 [ 478.252559][ C1] ? nft_do_chain_inet+0x29d/0x380 [ 478.252585][ C1] ? dst_alloc+0x105/0x170 [ 478.252612][ C1] stack_trace_save+0xa9/0x100 [ 478.252630][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 478.252651][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 478.252675][ C1] kasan_save_track+0x3e/0x80 [ 478.252694][ C1] ? kasan_save_track+0x3e/0x80 [ 478.252713][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 478.252733][ C1] ? kmem_cache_alloc_noprof+0x2bc/0x650 [ 478.252752][ C1] ? dst_alloc+0x105/0x170 [ 478.252777][ C1] ? ip_route_output_key_hash_rcu+0x14d0/0x25d0 [ 478.252802][ C1] ? ip_route_output_key_hash+0x18d/0x2a0 [ 478.252826][ C1] ? ip_route_output_flow+0x2a/0x150 [ 478.252847][ C1] ? ip_route_me_harder+0x742/0xf90 [ 478.252872][ C1] ? synproxy_send_tcp+0x34c/0x670 [ 478.252895][ C1] ? synproxy_send_client_synack+0x8c1/0xe30 [ 478.252918][ C1] ? nft_synproxy_eval_v4+0x34a/0x4e0 [ 478.252945][ C1] ? nft_synproxy_do_eval+0x305/0x580 [ 478.252970][ C1] ? nft_do_chain+0x45e/0x1990 [ 478.252995][ C1] ? nft_do_chain_inet+0x29d/0x380 [ 478.253052][ C1] __kasan_slab_alloc+0x6c/0x80 [ 478.253072][ C1] kmem_cache_alloc_noprof+0x2bc/0x650 [ 478.253089][ C1] ? dst_alloc+0x105/0x170 [ 478.253113][ C1] ? __pfx_find_exception+0x10/0x10 [ 478.253133][ C1] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 478.253152][ C1] dst_alloc+0x105/0x170 [ 478.253178][ C1] ip_route_output_key_hash_rcu+0x14d0/0x25d0 [ 478.253224][ C1] ? ip_route_output_key_hash+0xd8/0x2a0 [ 478.253249][ C1] ip_route_output_key_hash+0x18d/0x2a0 [ 478.253280][ C1] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 478.253326][ C1] ip_route_output_flow+0x2a/0x150 [ 478.253346][ C1] ? ip_route_me_harder+0x730/0xf90 [ 478.253371][ C1] ip_route_me_harder+0x742/0xf90 [ 478.253399][ C1] ? __pfx_ip_route_me_harder+0x10/0x10 [ 478.253429][ C1] ? __cookie_v4_init_sequence+0x25d/0x500 [ 478.253451][ C1] synproxy_send_tcp+0x34c/0x670 [ 478.253475][ C1] synproxy_send_client_synack+0x8c1/0xe30 [ 478.253504][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 478.253526][ C1] ? nft_synproxy_do_eval+0x218/0x580 [ 478.253550][ C1] ? synproxy_pernet+0x45/0x270 [ 478.253577][ C1] nft_synproxy_eval_v4+0x34a/0x4e0 [ 478.253604][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 478.253630][ C1] ? nf_ip_checksum+0x13c/0x510 [ 478.253657][ C1] nft_synproxy_do_eval+0x305/0x580 [ 478.253702][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 478.253735][ C1] nft_do_chain+0x45e/0x1990 [ 478.253767][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 478.253801][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 478.253837][ C1] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 478.253854][ C1] nft_do_chain_inet+0x29d/0x380 [ 478.253878][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 478.253901][ C1] ? ipt_do_table+0x2b2/0x1630 [ 478.253919][ C1] ? nf_nat_ipv4_local_in+0x223/0x720 [ 478.253960][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 478.253983][ C1] nf_hook_slow+0xc5/0x220 [ 478.254024][ C1] NF_HOOK+0x21f/0x3c0 [ 478.254041][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 478.254059][ C1] ? NF_HOOK+0x9e/0x3c0 [ 478.254074][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 478.254090][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 478.254109][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 478.254130][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 478.254148][ C1] NF_HOOK+0x336/0x3c0 [ 478.254165][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 478.254182][ C1] ? NF_HOOK+0x9e/0x3c0 [ 478.254198][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 478.254216][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 478.254235][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 478.254257][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 478.254273][ C1] ? process_backlog+0x3eb/0x1950 [ 478.254293][ C1] process_backlog+0xaa3/0x1950 [ 478.254320][ C1] __napi_poll+0xae/0x340 [ 478.254337][ C1] ? skb_defer_free_flush+0x233/0x260 [ 478.254357][ C1] net_rx_action+0x627/0xf70 [ 478.254376][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 478.254405][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 478.254435][ C1] handle_softirqs+0x22a/0x870 [ 478.254459][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 478.254484][ C1] __irq_exit_rcu+0x5f/0x150 [ 478.254506][ C1] irq_exit_rcu+0x9/0x30 [ 478.254526][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 478.254549][ C1] [ 478.254555][ C1] [ 478.254561][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 478.254580][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 478.254604][ C1] Code: 1e 6b 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 22 19 00 fb f4 fc e9 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 478.254619][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000242 [ 478.254632][ C1] RAX: 0000000000cfd5cb RBX: ffffffff819aac7a RCX: 0000000080000001 [ 478.254644][ C1] RDX: 0000000000000001 RSI: ffffffff8defcc34 RDI: ffffffff8c27d880 [ 478.254656][ C1] RBP: ffffc90000197f10 R08: ffff8880b873399b R09: 1ffff110170e6733 [ 478.254669][ C1] R10: dffffc0000000000 R11: ffffed10170e6734 R12: 0000000000000001 [ 478.254681][ C1] R13: 1ffff11003b58000 R14: 0000000000000001 R15: 1ffff11003b58000 [ 478.254694][ C1] ? do_idle+0x36a/0x5f0 [ 478.254721][ C1] default_idle+0x9/0x20 [ 478.254736][ C1] default_idle_call+0x72/0xb0 [ 478.254771][ C1] do_idle+0x36a/0x5f0 [ 478.254811][ C1] ? __pfx_do_idle+0x10/0x10 [ 478.254836][ C1] ? do_idle+0xa/0x5f0 [ 478.254859][ C1] cpu_startup_entry+0x43/0x60 [ 478.254901][ C1] start_secondary+0x101/0x110 [ 478.254935][ C1] common_startup_64+0x13e/0x147 [ 478.254958][ C1]