last executing test programs: 1m29.159450417s ago: executing program 0 (id=1): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = msgget$private(0x0, 0x0) msgrcv(r2, 0x0, 0x0, 0x1, 0x0) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000580)={{0x1, 0x0, 0xee00, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0x40aa, 0x1, 0x2, 0x3, 0x9, 0xb, 0x2, 0x3037}) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) r4 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f00000001c0)={0x82, 0x0, 0x20, 0x0, 0x4000, 0xfffffe00, 0x0}) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001ac0)={r0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x106547, 0x0, 0x0, 0x0, 0x9, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1aa654fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x10000]}}) dup(r3) read$FUSE(r3, &(0x7f0000001c00)={0x2020}, 0x2020) 1m27.20236738s ago: executing program 0 (id=14): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) (async) r1 = syz_io_uring_setup(0x3, &(0x7f00000002c0)={0x0, 0x89b8, 0x1, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x18, r5, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async, rerun: 64) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) (async, rerun: 64) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, r6, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x9, 0xfffffffd, 0x5, 0x2}}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c000}, 0x8010) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x12}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1m26.66370903s ago: executing program 0 (id=16): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000070000000090a010400000000000000000100fffd08000a40000000000900020073797a31000000000900010073797a30000000000800054000000025340011800a0001006c696d6974000000240002800c00024000000000000000030c000140ffffffffffffffff080003"], 0xb8}, 0x1, 0x0, 0x0, 0x40c0}, 0xc4) (async, rerun: 32) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (rerun: 32) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) setsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000380)=0x6905, 0x4) (async, rerun: 64) r3 = dup(r2) (rerun: 64) sendmsg$inet(r3, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0) (async) recvfrom$inet(r2, 0x0, 0x0, 0x162, 0x0, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f, 0x7fffffff}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x7}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1400000004000000040000002200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000952a"], 0x50) (async) r8 = socket$inet(0x2, 0x3, 0x6) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r7, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r8}, 0x20) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4054886}, 0x40844) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) (rerun: 64) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000500)={"34b30f02c5ccf6e3b71cda04b68b6891370cd0a442844b737a7254514f9ff20d0954650127067cd50d8f25db5fc9ccd4dbb2ecc29dc8dc51bcd2291a6a12912a3ce524ba851af6d1366d2b46f9f063dde6bea45fb0f4ab6a35088ea81c8a5ea6d0c3fbc6a89ae582119699a04f2be00b3aa3766c9f658af98e3122b00522a2ee14e3746ec2266e538c13710185ec5a7e4936e212c07483e1798957ffbb6311f2a13a7109d4293b216f78d59d41eb3af775e48d7a82a6c8f6476e2456a1a4288c672fbf1072ae9c51060f80707d1bc48eb1802a805df2ee990bcece5fe8b0ebba31c4d5efa47b3353aa02663aca26e817c88dc094d75330fbe2fea0037d4f92435d2eed5585bfaeddfdb50bb10bed6860313613f4a96d7d0b263cb0930f155ed09f2ff433f90d5065a376d43502ac8f17257c0fe5f448d9805a835286f2ff887e02e8a243902c124d3d52a1057f20a29ca1c012869a6d606e3440cc51cca66021bae0cf8c0a5af7a21c79481b1a31b98fe0c29fb5dfc5737442cdfad6421ec95345bd0165c6f6123e616873d97282e5098add56b95e805782aa67f237269b5b2b3e24edd1dc78f25130926496f5623ae306bc3d72d2b80f8939e60526330f873d00360441d906627f0183607151b1f03602050670984a3640871c2690496bbc8949fb63abd5033e508055dc0dd759913beba87e39e7af72170d622e2ecf9aeb4e479bbff8ad292a3a5bd70f8f433bc4b89be144ace57501f8f016868ed7dd8bab97f4f3feb242f4f620913c478058c036df363abbf7c239d340017c2de6b688e322c9b51c269aa110def3ad16337d197f3c452ac661bac7c0531c4d98618f99d750b0c3d8539051188a0f4583dd3538982e8a84121055cd721571ca98bb0c3ec3e446c4c7bc5c9b800367a859a00ef3a505327f9f2da247ce118a82deeb04ad22eeaf97dbd454518defd5adeb288a7842e9e2839ec587e3275abf3a812154080aa60182e60cb73b2020d2865551141ac1e077a3a3a764fff1b024346594f3a004197673c896069dc253f81dac7ca4e906bf2c0d241f59e4b8dad8549871e94b33755db2526223d1e290e300701a0a926033d515429f751f72a87f2eb0336cc72be75af2b75b82c70807718604aa9c6b3c2bc27551f1a0dcffc5eef025f86c13f1fbb426de372b15e4d6a63c4754cecd5071e25e8d6f5796830e7ef62b65c5c076ad2a9ab0850f97c5765ece5885caf0ca0d63a56c45d09c77553ba254983c05d7c722bd7e2061bb71e8e9a7cc444a24643ff32bb80f95ddf50455ed9b59288df68da87510cc3ff08521b39002fe8ea04ee30135324934c286cebc277a9189ac3322b96e8df8bd2a00a0a3da54b3dbe4e9cd46b762ac7f2c7ded1aa8c9741b675f7fe2dc699ab9a2615924fda6e879fc2ae27030d149ed88482945304447d8d027"}) 1m26.267721315s ago: executing program 0 (id=19): r0 = syz_io_uring_setup(0x1114, &(0x7f0000000200)={0x0, 0x2f2, 0x80, 0x0, 0x821e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0xfffffffffffffffc, 0x0, 0x200, 0x0, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') (async) fchdir(r0) (async) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) (async) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) (async, rerun: 32) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000000)='./file1\x00', 0x0, 0x18}, 0x18) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000000850000007b00000095"], 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r3, @ANYRES32=r4, @ANYBLOB="4b0303e9", @ANYRESOCT=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000700)='signal_deliver\x00', r6}, 0x18) (async, rerun: 64) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) (async, rerun: 64) mknod$loop(&(0x7f0000000300)='./control\x00', 0x800, 0x0) (async, rerun: 64) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) (rerun: 64) 1m25.952042253s ago: executing program 0 (id=21): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x1}, 0x18) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x8000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) keyctl$clear(0x5, 0xffffffffffffffff) r2 = getpid() syz_pidfd_open(r2, 0x0) syz_usb_connect(0x6, 0x75, &(0x7f0000000780)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x5) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x5) getpid() (async) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x6c}}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) (async) sched_setaffinity(0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40186f40, &(0x7f0000000440)=0x1f) (async) ioctl$FS_IOC_SETFLAGS(r6, 0x40186f40, &(0x7f0000000440)=0x1f) syz_clone(0x120e1100, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x120e1100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0xffff, 0x100}}) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, 0x0) r8 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffff8, 0x119100) ioctl$EVIOCSABS20(r8, 0x401845e0, &(0x7f0000000080)={0xd8a, 0x9, 0x3, 0x1, 0x8000, 0x8}) (async) ioctl$EVIOCSABS20(r8, 0x401845e0, &(0x7f0000000080)={0xd8a, 0x9, 0x3, 0x1, 0x8000, 0x8}) 1m25.633621379s ago: executing program 0 (id=23): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002b00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000002c00000018000180140002006e657464657673696d30"], 0x2c}}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x11, @loopback, 0x15, 0x0, 'wlc\x00', 0x39, 0x6, 0x1f}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x5, 0x22, 0x2, 0x40, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x20, 0x9, 0x1}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100108}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x4c, r3, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4044000}, 0x20000) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000180)={0x2, 0x14, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) 1m24.819713033s ago: executing program 32 (id=23): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002b00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000002c00000018000180140002006e657464657673696d30"], 0x2c}}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x11, @loopback, 0x15, 0x0, 'wlc\x00', 0x39, 0x6, 0x1f}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x5, 0x22, 0x2, 0x40, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x20, 0x9, 0x1}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100108}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x4c, r3, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4044000}, 0x20000) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000180)={0x2, 0x14, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) 19.381631377s ago: executing program 1 (id=211): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5013, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x20, [{{0x9, 0x4, 0x0, 0x68, 0x1, 0x3, 0x0, 0x81657b94fb2d95c9, 0x0, {0x9, 0x21, 0x6, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x5}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000080)={0x60, 0x1, &(0x7f0000fee000/0x2000)=nil, &(0x7f0000ff6000/0x4000)=nil, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x14, 0x10}) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@global=@item_4={0x3, 0x1, 0x5, "2e9ec08c"}, @global=@item_012={0x1, 0x1, 0x3, "ff"}]}}, 0x0}, 0x0) 16.936324547s ago: executing program 1 (id=216): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) (async) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x1646, 0x3c00, 0xffffffff, 0x1b9}, &(0x7f0000000000)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) r5 = socket$key(0xf, 0x3, 0x2) syz_usb_connect$cdc_ncm(0x2, 0x75, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000082505a1a4400001020301090263000201000000090480000102090000052406000105240000000d240f0100000000000000000006341a00000107241400efffff08058103"], 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) (async) r6 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) (async) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r7, 0x6, 0x21, 0x0, &(0x7f0000000100)) read$msr(r6, &(0x7f0000002700)=""/102392, 0x18ff8) sendmmsg(r5, 0x0, 0x0, 0x4) (async) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r8 = open(&(0x7f0000000040)='./bus\x00', 0x103a42, 0x80) ftruncate(r8, 0x2007ffb) (async) sendfile(r8, r8, 0x0, 0x1000000201005) ftruncate(r8, 0x30) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x49, 0x0, 0x0) (async) syz_usb_connect(0x6, 0x8b, &(0x7f0000000380)={{0x12, 0x1, 0x300, 0x7b, 0xb6, 0x4a, 0xff, 0x19d2, 0x21, 0xb019, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x79, 0x1, 0x8, 0xf9, 0x8, 0x4, [{{0x9, 0x4, 0x5a, 0x8c, 0x3, 0xff, 0xff, 0xff, 0x40, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x80, 0xe, 0x4}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0xffff, 0x2, 0x6}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x5, 0x1, 0x4, 0x5, '1\r'}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xb, 0x4, 0x2, 0x7, "", "81d61d"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x7, 0x3, 0x4, 0x7, "3a845f"}]}], [{{0x9, 0x5, 0xf, 0x4, 0x200, 0x7, 0x8, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x40}]}}, {{0x9, 0x5, 0x4, 0x10, 0x20, 0x0, 0x4, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x3ff}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x7f, 0x1}]}}, {{0x9, 0x5, 0x5, 0x4, 0x3ff, 0xf7, 0x7, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x4}]}}]}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x250, 0x6, 0x3, 0x3, 0x40}, 0xa3, &(0x7f0000000440)={0x5, 0xf, 0xa3, 0x5, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x19, 0x3, 0x1, 0xbc, 0x5}, @generic={0x7b, 0x10, 0x3, "58e657ee6895197de6119bab46653be94128cfd59ead4dc2cdb35f3e866b8e8bdf5aad33ffc20661bd305cb691a41a87e2cb9c33ed36b277d84575c58cfb2ec1e596ca339d730811a1fa584ddd62283ad62d928fc9cdf86cdd563ad8ad6cc9308e780ea9e017f33926f003ee51667c6f5beb9d544c434926"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x1a, 0x3, 0xa, 0x665a, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x9c, 0x3, 0x8d1}]}, 0x2, [{0xfc, &(0x7f0000000500)=@string={0xfc, 0x3, "43ed1c0847694f3141aa87e73fae5600da84190b1e9e981359de815d0eac7c3cd9962ac950fdafe02dc73c05bbbb0daaa17606fad4e5ac9d9f881043a5f532c31f1626a5707982d393ac6d7d06cc7cbb53a33b9af6e77327212668cc16640975274b54af25f3da1ab52ca7a2af2acd7647c310686efb886fe718706097e8f9c38a40b78d4e01d71c91d0426eba0cab7c05de4f8b08ec6b6636cc1b94ec417930ea89eb8c3b9d687a831718da9a7a86abccd327839d1aa5a68cd3c01debeb437208305954433b1dd08d3ba569cadd2a5f11199e51d3ddc99fd2570c293225f7139f5c3936be11a6e2584fe3362619a32feb2f545e79a0785e9eeb"}}, {0xe3, &(0x7f0000000600)=@string={0xe3, 0x3, "6da8c8da5fa39168adf26e3447e9f4515c14becc6731d58d818fbfcffad609ab2ad4b96b333156e6fe14b435d2a18f7cda2ef7a704dbf35ac0d7ea554c8c29b29911b3a845ff95c04213a323939f34a5b5249acd70008aec3d3d9524f9714eaf6f3203940a2c5a20412898122cb751ed23647590659c91942e44d609e136cc208807e164dc7a02f1d0f7d38f148aa5312f952f03079f7da08feea1234980918d19d5eb363ef49e06e94c4868c6da527c63711358c12be9ea2b47377656610608118b26815b835f200664bc3077af8f06cb54d4cd8d427aee95a9d2b06af5c50ceb"}}]}) (async) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x8000000000000003}, 0x18) sendmmsg$inet(r0, &(0x7f00000033c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x881) 14.73678031s ago: executing program 3 (id=218): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='qdisc_enqueue\x00', r7}, 0x18) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 14.715061324s ago: executing program 1 (id=219): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000023000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000000005000000150000b900000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r6}, 0x18) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/time_for_children\x00') openat$urandom(0xffffffffffffff9c, 0x0, 0x42, 0x0) sendmmsg$sock(r5, &(0x7f0000002780)=[{{&(0x7f0000000340)=@ieee802154={0x24, @none={0x0, 0x1}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000005c0)="0ef1c816b86b5b0b6e7bdb81ea8d7c01c7658b879ed0f4cdc151cc4f523e9c36496e412c089b9eecfc8aeab4d9aae6f24200bf97192bb1039e25bb6571fcc77442c3dc2c7703a480ec80d707a4f57584678dc805b132175f502d1cd18578f4af4ce9d4", 0x63}], 0x1}}, {{&(0x7f0000000640)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(ecb(arc4),sha224-neon)\x00'}, 0x80, &(0x7f0000002580)=[{&(0x7f00000006c0)="c0f5bed003169850a3bf45bc55555575dbdaa6034d2ae29619234d01ebf922a816f873e92f864c20e12340e92b53e4f7910262f6fddb0d189e11821fe1048aa7b148af56e3d88f9d6f5e144daf7020aec54875a1ab5366dec67c27d9a7c74b247979fa1289ccbbd72edb965549b011611d2f9d36a9df59b08ffe1b5e767a0c7951933a23c30ce6e85beb52c4e76c932868fe4ff03b6b73f161142ab07017bb5184bb2c8bb3a2d072764b17f9c2c7ec157c0ebfdc01b74ad16195062b5a81509c3d3a7f5902925e3e1c1d0209f11d3074fe54ca6aeac556d5467719eb2e6899702acb0b8cde4c687f516e70afb25c46cc9bc61069cbfb5cb068", 0xf9}, {&(0x7f00000001c0)="d379b5983ad859c30067e0818d5f10681d", 0x11}, {&(0x7f0000000cc0)="c99a6bd47e57e0e35dbc5126a0245567187229c22a6bd39a3cecc5682bc814e07ac1ca58c6482084f719d9d96d2f120e72cd0933ae6c4ba0aeb514bdb0cdfac42fdc6240a0d72901e5a1ba3076ea5db37a097668a8e4dd7e89c8f138ad292684441422b8c365939804cc6e10a7e4228fba0d23060d2859790bb312dbe6692f98fabcb1aad9dbc286d3c6fa0582c7f91fd17f10118c2c89f2ba241683e84e8e98d383537a780401cfa2cdb0fa2f520c64102eb6183492d334a6c6614faf9f384804eba2f246b89c1443f25dbbfe5a0fb33629f62ea2af59680759598bc389dc44e620ca214cd2d50bc259636f3cf0df086027", 0xf2}, {&(0x7f00000008c0)="4f663a021b3c16733f5ed5029d92778a39408377e7e9bbe35bd359fe2bb324ab582265e15d99bcae7cb88affad0ac224d966e0f461ed646b6b4239ba4f0f56ca8d61b3968582f5059ec22e4dee156719434eea2d66ab575371", 0x59}, {&(0x7f0000000840)="4c48a3221c125a2a198246de59b73803f86036c80311cde8f232f71215f686fa06281ad0ae8573fbf447c68e5988190fa84ffb0e59cbc058f588cfc76422c4d4d3eb549273e477898ae7e6d899c02f5a77360589a015b4d66aee4b475cdf1af64c072cc5982560862bc69dd82ba390304f184b8da61ec24d48706369cf", 0x7d}, {&(0x7f0000000fc0)="8487db6c1bf6188d6ab922d354cbf1eb67738766979449368af105111ebada88286ffc6b3772a5a547b17f2d11f2b504929386a64e0ec216a501ba345eca1c19978a018f27a15c13d8d3f8441b9746cbebe517930ee4c91c3e456037e37a1467ffe7b0d0467f729783ff607f205b9b4b4e50650bef083646db1616b02427b924bd230e33ba873c488614bc2a4ba44305978e0bf9327dfe492a6e06faa9a858d4c3c255a277dbd5027b0e9d8003aa3c54dec0ca654c3a104dba9aa6e3869e4ea7deaef6310c8f8aaab8124d027d2687cebc13740bc8d7ab5e1111b4f42fba5b33998624cc0555dc56cc81489576dc42200edcf9e64fa4bcd8d3", 0xf9}], 0x6}}, {{&(0x7f0000000940)=@nl=@kern={0x10, 0x0, 0x0, 0x8000000}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000a00)="4da0c99e52cd1c7cfbe232c4e7a24445859138ac094e43c6bbb9edac65563928cdc02a5e1086cc60398d210cc4938b7af7a2d7c9dd32d0d23c7cb8fd513f0f8675bb44b59a648bdcb4911c0421e21b40f88a8ed3f3df7111e1e0a9129583697831e5e813aa76a375be674621bb65f30b4f6fe1febe4b34720811ce96dc4634dc30aa3923faaa41b32a94ad6460f78e426333c224d7cabb19", 0x98}], 0x1}}, {{&(0x7f0000000ac0)=@qipcrtr={0x2a, 0x0, 0x4001}, 0x80, &(0x7f0000000400)=[{&(0x7f00000010c0)="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", 0xffd}, {&(0x7f0000000b40)="e4f8de774712103f712df991a3ad379ba8244cd805d0d42a9e65172f0a51ddf5393dc6e4df22c3fc78d555ca82d75248ed3483b04cf6bdd867fb12d22669d0f50ca44f87319f975d88f20d281cf65d6f57ded690082b8349106b74e9858aeef69f5e928d31f7189d9a3ca071ff03fa6129ba7d443d26acd665d101f96a79e620cbec289c10f337f2cd137a6213814dba07469ec3399226356081627b2a489325f1dd714f0426ef94b0", 0xa9}, {&(0x7f0000000c00)="262376c27286e294729dcfa73ead67e3357b5879fc5b5f650d75604e3a0ca4e6c42f01653d7b8c407ddb670d5afd69d937dbb1aa7d9cce11a280b3cfaaf51773b000ec18fbd82185b6a1b4ad57efcc7bf031255be30352542c3b527cc02c523574b8a37c98d312af0c92bfc6", 0x6c}, {&(0x7f00000020c0)="26468f7554727a7342fe3428b9eaddb9bce96186cf12b1961e6746a7b4766bece7de5437910dfee3f576e8c7b97419c0c8d80af264052275ec2df9babea466bb2ca84a366704dbd3552e28276c7b2d5e3524de5444977ef721f3d38193c307ce9ff43c4f6755b6bfd1ba3cf7ffffff90fc9bdc3830b7faa634846dc4883e040004c735ff35ea6a0d", 0x88}], 0x4, &(0x7f0000002180)=[@timestamping={{0x14, 0x1, 0x25, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}], 0x90}}, {{&(0x7f0000002280)=@nfc={0x27, 0x0, 0x1, 0x2}, 0x80, &(0x7f0000002640)=[{&(0x7f0000002300)="0b8592b9faa8e802257212afe6613a2ae9e8673637060e75356f445a4c50f2ba550e749ae7e46e5d6920fd2ff35e8a9bef3c7046198e9af638bc4a71ceb1e3c31739e4408ecae443a02b53df9889d2c2e3ebd221b9b738e195783f420c546305f4c686af5e88557a2c824dac226e0eff4c761d91fe3779532ae233eec5e744f1c9d3", 0x82}, {&(0x7f00000023c0)="a58f00963d62eb343fe35b30432a594026db7dad56cb2212071d62cef37583abaefafde5217cb2ca07accf28109d905e7df39f5755a606dd01b8b5308d3c95b6423a9dfc52a77c5fffe48177413bb1ea3e46dd2ed771c0fc345e3ab42160fc4ab82da2e3498361488d2f42e8ef42ecf6e5dd36a2b4af8e0494185ba40bda91e15ea022fe513a09fe1a839a7e3593a512a3c124aa28b36393b829f765d8985c92ea11c8899c7facc8101f0d8a832d3d637c4270192d8feeb95bf0f785aa669d1527b83bfb7bedd1e591ccedc9f838575d4ab800bf497144dbcc9a", 0xda}, {&(0x7f00000024c0)="e8556ede7f700bccb1bc7f97613a1d80718c18453fdcb351605db98d7645f42b93fdeb1e58a861741deca9dcbad9908c4e6336a27e9af2fa428561216cdd15eee890146cce26b4155ba6f56735468a3b6fa2e1e1d3d8512ab8fbaaecfa8051bbd42d5ffd7230eebeaa5dc6afbbf56469c67025b3de16d62c09a12294835146ff7f6922ef067cdd63c2dccd6bcc5fe22452ace3c75193175075c7d486900a7f", 0x9f}, {&(0x7f00000007c0)="b64eaa0debcb20614193d511e758971898f984a13d99a3a47e8b009eb2b95e60650d3c26f89a7da915678915dc09aa542ed5684dd68b96d2cf66124a207614d59f0dde79", 0x44}, {&(0x7f0000002600)="ca08ab26c4f764e147a26a1467f551aa5d60689c518082f3e140606f2a136f2fd27e06b6", 0x24}], 0x5, &(0x7f00000026c0)=[@timestamping={{0x14, 0x1, 0x25, 0xe87}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @mark={{0x14, 0x1, 0x24, 0xffffff7f}}, @timestamping={{0x14, 0x1, 0x25, 0x80000001}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}], 0xc0}}], 0x5, 0x40001) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2}}, 0x20) r7 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r7, 0xc05c6104, &(0x7f0000000140)={"09025a26", 0x4, 0x3, 0xfc, 0x6, 0xfff, "e840fe213981327944dea0ab8de591", "ddf9e8f5", "84708d56", "b0ae9f2e", ["93a03a7ae19776071eebf3e2", "155199e846586bd6df78ec79", "69fe3745d21db04d44490f86", "4c95443ed5fb833211e14aa2"]}) 13.509251181s ago: executing program 3 (id=224): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async, rerun: 64) munlockall() (rerun: 64) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000380)={{0x0, 0x400, 0x4b, 0x9}, 'syz0\x00', 0x11}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) (async) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="6eab", 0x2}], 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="580000000206010100000000000000000700000005000100070000000900020073797a30000000000c0007800810bb000000000000000300686173683a69702c6d61726b0000000005000500020000000500040001000000"], 0x58}}, 0x0) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="543efd1829000103000000000000000007000000", @ANYRESOCT=r0, @ANYBLOB="4000a6080a000200ffffffffffff00000c000e8005000100fd0000000600050001"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async, rerun: 32) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000340)={0xd, 0x200200090}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000040)=0x7) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) (async) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async, rerun: 64) r7 = socket$unix(0x1, 0x2, 0x0) (rerun: 64) connect$unix(r7, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r7, &(0x7f00000008c0)=[{&(0x7f0000000580)='`', 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) (async) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f00000000c0)=0x3f9, 0x4) (async) recvmmsg(r6, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 13.340370128s ago: executing program 1 (id=225): socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$inet6_sctp(0xa, 0x1, 0x84) ioprio_set$pid(0x1, 0x0, 0x6000) (async) ioprio_set$pid(0x1, 0x0, 0x6000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000040)={0x4, 0x0, 0x3, 0xa, 0x100, &(0x7f00000000c0)="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"}) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000500)=r0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140), 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140), 0x4) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) socket$phonet(0x23, 0x2, 0x1) (async) r4 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x23, 0x0, 0x2}, 0x10) add_key(&(0x7f00000018c0)='big_key\x00', &(0x7f0000001900)={'syz', 0x1}, &(0x7f0000001940)='\f', 0xfffff, 0xfffffffffffffffe) rseq(0x0, 0x0, 0x400000000, 0x0) shmctl$IPC_RMID(0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f00003c8000/0x4000)=nil, 0x4000, &(0x7f0000000040)='[:Q%@\x00') r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, &(0x7f00000006c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x9b}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000a40)='syzkaller\x00'}, 0x94) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, &(0x7f00000006c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x9b}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000a40)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYBLOB="010000000000000000000c000000280005801400f48004000200000000000800010000000000080001"], 0x3c}}, 0x0) r7 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x0) sendto$inet6(r7, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 12.356469921s ago: executing program 5 (id=228): r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ec13b2106d04d308280b0102030109022900010000000009046900000e01000008240501020205050764f7edb276"], 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) r2 = syz_pidfd_open(r1, 0x0) pidfd_send_signal(r2, 0x2, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000540)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 11.373864249s ago: executing program 1 (id=229): ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, 0x0) r0 = socket(0x2, 0x3, 0xff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000200)={0x80a, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x29, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0xa, @empty}, 0x5) r3 = socket(0x9, 0x1, 0x80000000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e21, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0xf36}], 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) write(r3, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000280)="12f0dda7f17f60b7c78be42301125e6cb51c467f", 0x14, 0x800, &(0x7f00000001c0)={0x2, 0x4e22, @multicast2}, 0x10) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x105042, 0x44) readv(r5, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000100)=r5) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, &(0x7f0000000080)='\x00\x00\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800020006000c00060006000364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r6 = syz_usb_connect(0x4, 0x2d, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0], 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10, 0x0}}], 0x65, 0x8014) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) 10.546798087s ago: executing program 4 (id=232): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000580)=0x0) sendmsg$NFC_CMD_SE_IO(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000a00)={0x2c, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_SE_APDU={0x6, 0x19, "d8a0"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 10.279774947s ago: executing program 4 (id=233): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d617463680000003000028008000240000000011800030051b1ef41816fd67a0527f76ec1720000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a00"/152], 0x98}}, 0x4048010) sched_setscheduler(r3, 0x6, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x5) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r7, 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="8ecbd8c93c2a29b1646405110b0d8c916157eda9c087055adf3d9f3b102f15d27b9120971ec56b30239a8ab3a932c5b74bbed480d23eff2c819e83f4c0474529ad67334aa90846df6447a94b062a82f16db3bafeff26722ad488b2d2b8a3521e062e6b26e222bacc2907cf90e5"]) r8 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IP_VS_SO_GET_INFO(r8, 0x0, 0x481, &(0x7f0000000500), &(0x7f00000003c0)=0xc) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000040)='ceph\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r9 = fsopen(&(0x7f0000000100)='binder\x00', 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e22, @multicast2}, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x4) r10 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x103200, 0x0) syz_open_dev$sndmidi(&(0x7f0000000400), 0xbfcf, 0x200000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r10, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) bind$802154_dgram(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) 10.120266806s ago: executing program 3 (id=234): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e030800d3ff"], 0xffdd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="0a00000016000000b30000007f00000000000000", @ANYRES32, @ANYBLOB="000e0097cf2c0000000000000000000000000000000000000000000000000000aaa01238b9c8735a676deab106e81d6b7507ce2dee7a0ed530bbf13f728691aec632fc088526a98215d25191b2f2382d7b0485394b4579adb78b64addddfc0a18395ca34b70992cc39f6b669d278962efc07cc987200e76885441053e37749ee37ec9c3f1e928e31a6d11749e4dd4a89ca67", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e1f, @remote}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r6, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb38c8557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a0e354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00b", 0x81}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3d, &(0x7f0000000080), 0x8) sendmmsg$sock(r5, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) setsockopt$inet_int(r4, 0x0, 0x12, &(0x7f0000000300)=0x1, 0x4) sendto$inet(r4, &(0x7f0000000000)="f461c5bbd75c3583", 0x8, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r4, &(0x7f000000e280), 0x58a, 0x42, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='contention_end\x00', r7}, 0x18) 8.748453255s ago: executing program 5 (id=236): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_QBUF(r1, 0xc058565d, &(0x7f0000000200)=@multiplanar_mmap={0xdb1, 0x6, 0x4, 0x40, 0x2, {0x0, 0xea60}, {0x3, 0x2, 0x0, 0x0, 0xd6, 0x6, "4d2ac5a5"}, 0x5, 0x1, {0x0}, 0x10000}) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f0000000100)='/sys/fs/smackfs/cipso2\x00', 0x2, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}, 0x1, 0x0, 0x0, 0x8084}, 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r7, 0x0, 0x20, 0x8810, &(0x7f0000000080)={0xa, 0x4ea0, 0x4, @loopback={0xff00000000000000}, 0x2ab8f1b6}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$rxrpc(0x21, 0x2, 0xa) mount(0x0, 0x0, 0x0, 0x10, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) r8 = syz_init_net_socket$ax25(0x3, 0x2, 0x8) setsockopt$ax25_int(r8, 0x101, 0x8, &(0x7f0000000080)=0xffffffff, 0x4) 8.678953931s ago: executing program 2 (id=237): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2244, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) socket(0x40000000015, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0xffffffe8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x70, 0x18, &(0x7f00000005c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x15}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x29}, @fda={0x66646185, 0x5, 0x1, 0xc8}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r7, 0xc0106407, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x7) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0xe9) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158"], 0x66) close(r8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r8, 0x8b0b, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00 \x00'}) 5.934207431s ago: executing program 5 (id=238): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000fc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000180)={0x38, r1, 0x1, 0x70bd2e, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x38}}, 0x2004000) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x1b, 0x61, 0xe3, 0x8, 0x16d0, 0x10a9, 0x3052, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x7f, 0x88}}]}}]}}, 0x0) 5.768070991s ago: executing program 2 (id=239): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000002000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000400000f9ff00"/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r1}, &(0x7f0000000280), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000f7ffffff00000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x18) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00') pread64(r4, 0x0, 0x0, 0x1c4) setitimer(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x60, 0x10, &(0x7f0000000340), 0xfffffffffffffdef, 0x0, 0xffffffffffffffff, 0xfffffffffffffe96}, 0x42) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) fchdir(0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtaction={0x74, 0x30, 0xb, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_ID={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="fdb9742080ef1342b5759c4660d630bc1aa262fbc262f493cc077ee166e9fe05c702b3f6eceb5dbca14e237c038f9aa77a9852c059ee9a66aafdb8bfbb217e59661991e90e8182d787e9ada45a8b84ab448d6f9e2eddeead77262fd66df844187b631f059d9faa14418aa124e635"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r6, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x7dca, &(0x7f0000000340)={0x0, 0x4, 0x1000, 0x0, 0x353}, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, 0x0, 0x0, 0x0) 5.70135305s ago: executing program 4 (id=240): r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.log\x00', 0x201, 0x100) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000000)=0x5, 0x5, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') read$FUSE(r1, &(0x7f0000000b40)={0x2020}, 0x2020) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0xfffffdf0, &(0x7f0000000080)={&(0x7f0000000280)={0x3c, 0x0, 0x20, 0x70b92d, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0xc0000}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0xc2}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x10001}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x80}]}, 0x3c}, 0x1, 0x0, 0x0, 0x851}, 0x4014) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x4, 0x6, 0x4, 0x0, 0xffffffffffffffff, 0x3}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0x4, 0x4, 0x5, 0x0, 0x1, 0x2004}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000070000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c0017800400ad0014"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) 5.545878422s ago: executing program 3 (id=241): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) openat$nullb(0xffffffffffffff9c, 0x0, 0xfa2a965f22f5f366, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) r3 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x3}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r3, 0x2, &(0x7f0000000080)={0x3, 0x2b4}, 0x0) landlock_restrict_self(r3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x2b4, 0x0, @empty}, 0x1c) connect$inet(r2, &(0x7f0000000200)={0x2, 0x1, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) syz_emit_ethernet(0xfe, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) 4.560296245s ago: executing program 4 (id=242): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xae00, 0x0) r1 = fanotify_init(0x18, 0x0) fanotify_mark(r1, 0x105, 0x4800003a, r0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000440)='.\x00', 0x12000021) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) 4.436241437s ago: executing program 1 (id=243): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r1, 0x56) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_ifreq(r2, 0x8970, &(0x7f00000000c0)={'\x00', @ifru_data=&(0x7f0000000080)="a54b99721026bc7c7702ecca525c212865247748fca3011e4bb77388d2ea90ad"}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="3800000018000100fcffffff0000000002000004e05a785e65310000000900070000060015000400000014001680100008800c0003800500"], 0x38}}, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="c84128217cfafa45382b5a6309d2086049e17a45ace09ab144ed87ee9e664db02b7a13f4477b8f3c52b71c80114851c22ca9239e95e9e1c7f777ed58ab873306546982854bd5fd0c92dad905f0f615b938bf2ee780cf5fdc58c99675489c6b9b753b15d6d83c446cd710b9d31f2843d10c5059c81d786d85b00d06f4a0a5468aa943cf956e9d930dd461ae112a472057b27b8226c70af4b3c965aa76db2575f3bb0d65e0468835f76d4b2a5c432b99658f841d09dd9dfb3b195aa8f13b1c9fa2ddec39b67762926c43a1ba9179cf8f43a4", @ANYRESDEC=r4, @ANYRESOCT=r4, @ANYRES32=r6, @ANYRES16=r5, @ANYBLOB="b578351ff2f378f63cfa8fd1e02a96e54f0401c93a7826a2"], 0x18) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, 0x1c) setsockopt$inet6_int(r6, 0x29, 0x3a, &(0x7f0000000040)=0x2, 0x4) r7 = syz_open_dev$dmmidi(&(0x7f0000000240), 0x80, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0x1}], 0x1) 4.413941909s ago: executing program 2 (id=244): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f00000003c0)={0x4c, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0xfffffffffffffe94, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc081}, 0x48040) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000806000003"], 0xfdef) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f00000006c0)={'raw\x00', 0x2, [{}, {}]}, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) futex(0x0, 0xb, 0x3, 0xffffffffffffffff, 0x0, 0x40000000) unshare(0x600) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) cachestat(r4, &(0x7f0000000140)={0x1, 0x7fc001}, 0x0, 0x0) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) r7 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRESHEX, @ANYRES32, @ANYBLOB="01000000000000001c0012000c00000100000000000000000c00020008007fc019"], 0x3c}, 0x1, 0x0, 0x0, 0xd0}, 0x4008054) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@ifindex, 0xffffffffffffffff, 0x1f, 0x8}, 0x20) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0xc) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r6, r4, 0x6, 0x4, 0x0, @void, @value=r8}, 0x20) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000000c0)={0x0, 0x2, 0x2}) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x5, 0x60ff, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "3acf1ec7ae70bb24"}}, 0x48}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r6, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r7, {0x8df}}, './file0\x00'}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYBLOB='\n\x00:'], 0x74}}, 0x0) 4.196304791s ago: executing program 4 (id=245): fanotify_init(0x8, 0x0) r0 = fanotify_init(0x40, 0x80000) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x4, 0x47, &(0x7f0000000000)="8b480485ba1db7113174de71d883b3b0f3413e42e7634007f5bce8eb969001d4dfe2fedde10f19b50ada6fd1c207420d9df303fb8c711bd5c1a41060cc5f04140ae0e7505e3d36") sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000000800)={'sit0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="060000000400"], 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/4\x00') preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0xb6, 0x0) fanotify_mark(r0, 0x20, 0x8000021, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) 3.709272426s ago: executing program 5 (id=246): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000001d040)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x20000000, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x0, 0xd, 0x0, 0x100, 0x10000, 0x2, 0x0, 0x0, 0xfffffffc, r3, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000004300)={0x50, 0x0, r2, {0x7, 0x26, 0x8, 0xfffffffff323ca46, 0x0, 0xfffc, 0x6, 0x5d3186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) creat(0x0, 0x1) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x3) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='oom_score_adj\x00') write$khugepaged_scan(r4, &(0x7f0000000300), 0x8) r5 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/stat\x00', 0x0, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000400)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x6, 0x0, 0x0, 0xa, 0x1c, "fee8a2ab78fc97fb0000e60080b8785d000100000000000000000000000000000500000000000000000000000000bec74a9700", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f422741b13103e52f400", [0x0, 0x2000000000001]}}) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x12, 0x12, 0x9, "8f4d0ae712e9db98522e581d38bc7144bf538c7f69bbd403c90d84d1ac2043bdc97f98fe08a0bc708006e5a2838642f4cfedac8bb9c5e434a7221790f5576253", "031438010ea45ca40e4044320f0daefce75ff1110800c67fee7e5069e11393f07a308a1cfe04000400a7ee5efa19e8055f9863d7802e0021d55e71b67800", "30d511dd8225bcd90de20e62aa8aa993618164198dae9f38b908ae00f1515b68", [0x2d01, 0x5]}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$inet(0x2b, 0x801, 0x0) listen(r9, 0x0) splice(r9, 0x0, r8, 0x0, 0x8ec0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRES32=r7, @ANYRES32=r4], 0x1c8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3.251689254s ago: executing program 3 (id=247): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0xffffffffffffffaf}, 0x1, 0x7}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x40}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000000000000000008847", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='kfree\x00', r1}, 0x18) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000001340), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000427bd7000fe05c8000c61dbdf2501696d0000000f0002006e657464657673"], 0x34}, 0x1, 0x0, 0x0, 0x24000011}, 0x804) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r4, 0x4b2f, 0x7) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="9feb010018000000000000007800000078000000030000001000196900000000000000000046b5e22b98e5f332824bb92a00000003000000000500000005000000010000000c00000006000093040000000b00000004000000060000000300000009000000040000000100000001800000050000000200000003000000090000000400000040cb0000010000000d0000000400"], &(0x7f0000000380)=""/243, 0x93, 0xf3}, 0x28) read$msr(r5, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f00000000c0)={0x1000, 0x0, {}, {0xffffffffffffffff}, 0x4, 0x2}) syz_open_procfs(0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000880)=""/202, 0x8f, 0x200000000004, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 3.156061752s ago: executing program 2 (id=248): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0], &(0x7f0000000180)='syzkaller\x00', 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffff8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0, 0x0, 0x6f2}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40000) bind$inet6(r2, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x140}}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}) r3 = syz_io_uring_setup(0x49f, &(0x7f0000000080)={0x0, 0xe7a8, 0x1, 0x7ffc, 0x8040024e}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r6 = eventfd2(0xff, 0x80001) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000300)=r6, 0x1) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r3, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r3, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0) 2.939131064s ago: executing program 5 (id=249): r0 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$negate(0xd, r0, 0x8, r0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$join(0x1, 0x0) keyctl$clear(0x7, r0) r2 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$invalidate(0x15, r2) keyctl$KEYCTL_MOVE(0x1e, r1, r1, r0, 0x0) 1.544363418s ago: executing program 4 (id=250): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x254, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xfa, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000200)={0x40, 0xe, 0x6, {0x6, 0x8, "0f65259b"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.480200109s ago: executing program 2 (id=251): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000000)={0x2005}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getrlimit(0x4, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0x4, 0x4, 0x4b8, 0xffffffff, 0xe8, 0x0, 0x260, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffffff, 0xff, 0xff, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'macvtap0\x00', 'veth1_to_hsr\x00', {}, {}, 0x87, 0x6, 0x4, 0xa}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbc, 0x7, 0x5aa9, @remote, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3980}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x0, {0x2000000}}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x0, @loopback, @mcast1, @private1, [0x0, 0x0, 0xff], [], [], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00032dbd7000fbdbdf2519b94cdb877a38ee61473c6d54246134bfde2daae4508a5719aa166e91a1119440e6272800c7bbd63a1b193ee6feab20646ac255c53492d3ba485216e4"], 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x48490) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="210000000000000000000000000000400004"], 0x48) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000340)=[@text32={0x20, 0x0}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0x4048aec9, &(0x7f0000000080)={0x1, 0x0, @ioapic={0x4, 0x7, 0x3, 0x2, 0x0, [{0xf, 0x0, 0x0, '\x00', 0xe}, {0x6, 0x0, 0x0, '\x00', 0xfc}, {0x1, 0x1, 0x7, '\x00', 0x3}, {0xfa, 0x8, 0x11, '\x00', 0xa0}, {0x1, 0xa}, {0xa, 0x3, 0x5}, {0xb8, 0xd6, 0xd, '\x00', 0x59}, {0xb, 0x1, 0xc, '\x00', 0x3}, {0x9, 0x7, 0x81, '\x00', 0x7}, {0x4, 0x6, 0x4, '\x00', 0x9}, {0x7, 0x5, 0xd, '\x00', 0xa}, {0x0, 0x4b, 0x45, '\x00', 0xc2}, {0x8, 0x4, 0x8, '\x00', 0x3}, {0x1, 0x3, 0xc5, '\x00', 0x7}, {0x5, 0xfb, 0x1, '\x00', 0x2}, {0xfe, 0x4, 0x6, '\x00', 0x9}, {0xc2, 0x9, 0x7, '\x00', 0x1}, {0x4, 0x7, 0x4, '\x00', 0x9}, {0xab, 0xef, 0x40, '\x00', 0x6}, {0x8, 0x10, 0x80, '\x00', 0x10}, {0x5, 0x3, 0x2, '\x00', 0x86}, {0x9, 0x49, 0xa, '\x00', 0xb0}, {0x86, 0x8e, 0x5, '\x00', 0x9}, {0x56, 0x3, 0x4, '\x00', 0x77}]}}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000200)={0x81, 0x0, 0x2}) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, 0x0) pipe2(&(0x7f00000002c0)={0xffffffffffffffff}, 0x80080) read$FUSE(r7, &(0x7f0000002600)={0x2020}, 0x2020) 1.450411901s ago: executing program 5 (id=252): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000200000008bd287500000000000001090224000100009000090400000103000100092100000701220b000905810300000a000097b65730f8d224606dc414b6d1ec853fd155b3b1bde4463086090000000000003274b2043e52709250b1a38b0a0386995cc3eec2cc1c9b09bf260a230a922c8568518cd55a3b563fe8b881f0fb7b77753db885560f61a42bd4fb0786ebedc63b3e0c9d2e25f11e43c7eb49fb3f45dda4d8b53dbd1d24f950685ac8ae58b6cffb932c4477040fe0d7"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0x15, &(0x7f0000000a80)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@x25={0x805, {0x3, 0x80, 0x89a6ef88c89f1828}}}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) unshare(0x2040400) r2 = socket(0x40000000015, 0x805, 0x0) getsockopt(r2, 0x114, 0x3, 0x0, &(0x7f0000000000)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) socket$rds(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) close(r6) socket$kcm(0x10, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYRES32=r6], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r7}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2c}, 0x78, r9}) socket(0xa, 0x1, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 213.523701ms ago: executing program 2 (id=253): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x120182}) set_mempolicy(0x4004, 0x0, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f0000000680)) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r5, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x1000000, 0x4}, 0x48) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000000c0)={[0x4958, 0xfffffffffffffffe, 0x4, 0x20000e695, 0x9, 0x400, 0x6, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffc00, 0xfffffffffffffffc, 0x6, 0x4, 0x0, 0xfffffffffffffe], 0x0, 0x8340}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2}, 0x50) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 3 (id=254): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (rerun: 64) r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @remote, @broadcast}, &(0x7f00000000c0)=0xc) sendmsg$xdp(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x2c, 0x8, r1, 0x36}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000200)="235aea963de8fe2bcb024a61daf1b09dd6a8d909626f4b0edf947abeb06e41c7e194574547ae72a0d5d69c3178ca6b616b2a5868", 0x34}], 0x1, 0x0, 0x0, 0x44001}, 0x8048000) (async) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card1/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="524144494f0a434420274d6963204374707475726520537769746368272030303030303030303030303030303030303030300a494741494e0a545245424c45202743442043617074757265205377697463682720303030b0303030103030303030303030303030300a524144494f0a535045414b455220274d696320436170747531dbd6c7587265205377697463682720303030303034"], 0xd3) (async, rerun: 32) close_range(r2, 0xffffffffffffffff, 0x0) (rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000440), r3) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'vxcan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000004c0)) (async) socket(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYBLOB="050000000000000000", @ANYBLOB="3d000e0080000000ffffffffffff080211000000ffffffffffff0000feffffffffffffff070001000406f0027f0006a7000c006400000008000d000000000073f68ac399765b7ab289a21d254ebf1c30920188d7e0527bff31151da7c57628327841e9"], 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) (rerun: 32) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce0702000000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r4 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d7", 0x6, 0xfffffffffffffffe) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000100005040000000000000000", @ANYBLOB="ebffffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) (async) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) (async) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x101ff, 0x3, 0x2000, 0x2000, &(0x7f0000017000/0x2000)=nil}) (async) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.171' (ED25519) to the list of known hosts. [ 83.718730][ T5824] cgroup: Unknown subsys name 'net' [ 83.894549][ T5824] cgroup: Unknown subsys name 'cpuset' [ 83.903725][ T5824] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.636193][ T5824] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.534051][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.549356][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.557538][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.579734][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.588632][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.697812][ T5156] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.706227][ T5156] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.714380][ T5156] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.722621][ T5156] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.746026][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.765438][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.774238][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.782306][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.790818][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.798855][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.807827][ T5156] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.841331][ T5850] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.860713][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.862671][ T5850] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.869187][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.882876][ T5850] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.883681][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.898572][ T5850] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.898641][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.913751][ T5850] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.366419][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 89.667862][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 89.818390][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.825872][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.834184][ T5834] bridge_slave_0: entered allmulticast mode [ 89.841889][ T5834] bridge_slave_0: entered promiscuous mode [ 89.850211][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 89.862793][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 89.899946][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.907232][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.915110][ T5834] bridge_slave_1: entered allmulticast mode [ 89.923583][ T5834] bridge_slave_1: entered promiscuous mode [ 90.006441][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 90.054982][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.068242][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.220628][ T5834] team0: Port device team_slave_0 added [ 90.262639][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.270321][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.277476][ T5840] bridge_slave_0: entered allmulticast mode [ 90.287949][ T5840] bridge_slave_0: entered promiscuous mode [ 90.297318][ T5834] team0: Port device team_slave_1 added [ 90.346443][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.353891][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.363939][ T5846] bridge_slave_0: entered allmulticast mode [ 90.371229][ T5846] bridge_slave_0: entered promiscuous mode [ 90.380548][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.387942][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.395290][ T5846] bridge_slave_1: entered allmulticast mode [ 90.403744][ T5846] bridge_slave_1: entered promiscuous mode [ 90.410875][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.418014][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.425385][ T5840] bridge_slave_1: entered allmulticast mode [ 90.433316][ T5840] bridge_slave_1: entered promiscuous mode [ 90.473996][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.481434][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.488647][ T5841] bridge_slave_0: entered allmulticast mode [ 90.496987][ T5841] bridge_slave_0: entered promiscuous mode [ 90.536768][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.543800][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.569962][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.601330][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.608584][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.616135][ T5841] bridge_slave_1: entered allmulticast mode [ 90.623713][ T5841] bridge_slave_1: entered promiscuous mode [ 90.663159][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.676172][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.683689][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.683788][ T5850] Bluetooth: hci0: command tx timeout [ 90.709742][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.751444][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.763512][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.776070][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.802890][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.812479][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.820071][ T5843] bridge_slave_0: entered allmulticast mode [ 90.827375][ T5843] bridge_slave_0: entered promiscuous mode [ 90.837023][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.844714][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.852447][ T5843] bridge_slave_1: entered allmulticast mode [ 90.860983][ T5843] bridge_slave_1: entered promiscuous mode [ 90.871205][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.884716][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.909816][ T5850] Bluetooth: hci1: command tx timeout [ 90.969849][ T5840] team0: Port device team_slave_0 added [ 90.989261][ T5850] Bluetooth: hci3: command tx timeout [ 90.990005][ T5837] Bluetooth: hci2: command tx timeout [ 90.994875][ T5845] Bluetooth: hci4: command tx timeout [ 91.035588][ T5846] team0: Port device team_slave_0 added [ 91.046633][ T5846] team0: Port device team_slave_1 added [ 91.055142][ T5840] team0: Port device team_slave_1 added [ 91.078700][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.090832][ T5841] team0: Port device team_slave_0 added [ 91.144559][ T5834] hsr_slave_0: entered promiscuous mode [ 91.151711][ T5834] hsr_slave_1: entered promiscuous mode [ 91.160722][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.184819][ T5841] team0: Port device team_slave_1 added [ 91.219310][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.226302][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.252505][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.292549][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.299883][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.326961][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.339407][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.346660][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.372687][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.387259][ T5843] team0: Port device team_slave_0 added [ 91.397507][ T5843] team0: Port device team_slave_1 added [ 91.404526][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.411749][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.438198][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.451316][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.458294][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.484658][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.496867][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.503880][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.529880][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.642093][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.649165][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.675177][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.687276][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.694325][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.720590][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.818066][ T5840] hsr_slave_0: entered promiscuous mode [ 91.824855][ T5840] hsr_slave_1: entered promiscuous mode [ 91.831421][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.839372][ T5840] Cannot create hsr debugfs directory [ 91.864281][ T5841] hsr_slave_0: entered promiscuous mode [ 91.871043][ T5841] hsr_slave_1: entered promiscuous mode [ 91.877208][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.884909][ T5841] Cannot create hsr debugfs directory [ 91.953416][ T5846] hsr_slave_0: entered promiscuous mode [ 91.960006][ T5846] hsr_slave_1: entered promiscuous mode [ 91.966151][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.975727][ T5846] Cannot create hsr debugfs directory [ 92.015483][ T5843] hsr_slave_0: entered promiscuous mode [ 92.021987][ T5843] hsr_slave_1: entered promiscuous mode [ 92.028152][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.036030][ T5843] Cannot create hsr debugfs directory [ 92.128549][ T43] cfg80211: failed to load regulatory.db [ 92.647466][ T5834] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.661439][ T5834] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.684529][ T5834] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.716434][ T5834] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.760376][ T5845] Bluetooth: hci0: command tx timeout [ 92.789328][ T5840] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.808238][ T5840] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.838645][ T5840] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.862630][ T5840] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.961466][ T5843] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.976662][ T5843] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.990138][ T5845] Bluetooth: hci1: command tx timeout [ 93.005904][ T5843] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.049387][ T5843] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.069519][ T5845] Bluetooth: hci2: command tx timeout [ 93.075151][ T5845] Bluetooth: hci4: command tx timeout [ 93.079242][ T5850] Bluetooth: hci3: command tx timeout [ 93.136424][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.144524][ T5841] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.184841][ T5841] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.226813][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.236899][ T5841] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.248183][ T5841] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.316225][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.323629][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.367263][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.374479][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.426466][ T5846] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.457200][ T5846] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.483833][ T5846] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.514002][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.566993][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.576525][ T5846] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.645697][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.658212][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.685903][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.693557][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.773957][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.781190][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.806460][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.813644][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.868640][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.875912][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.048130][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.137217][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.215273][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.235185][ T1082] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.242457][ T1082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.265652][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.278431][ T1082] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.285697][ T1082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.388331][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.436407][ T3494] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.443681][ T3494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.518639][ T3494] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.525900][ T3494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.616439][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.626980][ T5834] veth0_vlan: entered promiscuous mode [ 94.658808][ T5834] veth1_vlan: entered promiscuous mode [ 94.713273][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.830624][ T5837] Bluetooth: hci0: command tx timeout [ 94.873531][ T5834] veth0_macvtap: entered promiscuous mode [ 94.917816][ T5843] veth0_vlan: entered promiscuous mode [ 94.958202][ T5834] veth1_macvtap: entered promiscuous mode [ 94.987479][ T5843] veth1_vlan: entered promiscuous mode [ 95.069618][ T5837] Bluetooth: hci1: command tx timeout [ 95.143167][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.154547][ T5837] Bluetooth: hci3: command tx timeout [ 95.160312][ T5837] Bluetooth: hci4: command tx timeout [ 95.162001][ T5843] veth0_macvtap: entered promiscuous mode [ 95.165748][ T5837] Bluetooth: hci2: command tx timeout [ 95.216340][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.267238][ T5843] veth1_macvtap: entered promiscuous mode [ 95.298401][ T5834] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.325160][ T5834] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.334101][ T5834] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.342983][ T5834] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.361791][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.404623][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.454712][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.570376][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.582422][ T5843] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.591454][ T5843] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.601341][ T5843] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.610243][ T5843] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.642035][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.663637][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.693841][ T5846] veth0_vlan: entered promiscuous mode [ 95.806852][ T5846] veth1_vlan: entered promiscuous mode [ 95.816577][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.829389][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.861848][ T5841] veth0_vlan: entered promiscuous mode [ 95.886712][ T5841] veth1_vlan: entered promiscuous mode [ 95.913921][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.928495][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.958333][ T5840] veth0_vlan: entered promiscuous mode [ 95.991636][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.049437][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.052867][ T5841] veth0_macvtap: entered promiscuous mode [ 96.057312][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.073633][ T5840] veth1_vlan: entered promiscuous mode [ 96.190393][ T5841] veth1_macvtap: entered promiscuous mode [ 96.202350][ T5846] veth0_macvtap: entered promiscuous mode [ 96.253115][ T5846] veth1_macvtap: entered promiscuous mode [ 96.398744][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.767885][ T5957] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.960637][ T5837] Bluetooth: hci0: command tx timeout [ 97.149481][ T5837] Bluetooth: hci1: command tx timeout [ 97.231017][ T5845] Bluetooth: hci4: command tx timeout [ 97.231030][ T5850] Bluetooth: hci3: command tx timeout [ 97.242191][ T5837] Bluetooth: hci2: command tx timeout [ 97.262480][ T5840] veth0_macvtap: entered promiscuous mode [ 97.366017][ T5964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 97.474116][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.678984][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 97.883718][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 97.953539][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.265292][ T5841] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.286217][ T5841] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.296615][ T5841] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.305450][ T5841] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.318470][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.335088][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.528555][ T5840] veth1_macvtap: entered promiscuous mode [ 98.552814][ T5846] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.572254][ T5846] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.581910][ T5846] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.591116][ T5846] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.805475][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 98.916407][ T5972] Zero length message leads to an empty skb [ 99.010216][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 99.215000][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 99.440363][ T5835] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 99.463666][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.487877][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.640192][ T5840] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.656892][ T5840] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.665773][ T5840] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.678855][ T5840] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.682878][ T5835] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.710309][ T1082] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.726229][ T1082] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.730703][ T5835] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 99.774432][ T5835] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.833491][ T5835] usb 2-1: config 0 descriptor?? [ 99.846573][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.868903][ T5835] pwc: Askey VC010 type 2 USB webcam detected. [ 99.877740][ T5980] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.883813][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.074493][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.100742][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.192933][ T1082] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.240476][ T1082] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.270918][ T5835] pwc: recv_control_msg error -32 req 02 val 2b00 [ 100.292527][ T5835] pwc: recv_control_msg error -32 req 02 val 2700 [ 100.327701][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.342334][ T5835] pwc: recv_control_msg error -32 req 02 val 2c00 [ 100.369621][ T5835] pwc: recv_control_msg error -32 req 04 val 1000 [ 100.388458][ T5835] pwc: recv_control_msg error -32 req 04 val 1300 [ 100.418541][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.588842][ T5835] pwc: recv_control_msg error -32 req 04 val 1400 [ 100.628892][ T5987] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 101.150186][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 101.263394][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 101.336901][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.351026][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.434901][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 101.462011][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 102.412559][ T5835] pwc: recv_control_msg error -71 req 02 val 2000 [ 102.515208][ T6004] loop6: detected capacity change from 0 to 2098 [ 102.906694][ T5835] pwc: recv_control_msg error -71 req 02 val 2100 [ 102.909479][ T5917] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 102.914424][ T5835] pwc: recv_control_msg error -71 req 04 val 1500 [ 103.490160][ T5835] pwc: recv_control_msg error -71 req 02 val 2500 [ 103.530913][ T5835] pwc: recv_control_msg error -71 req 02 val 2400 [ 103.586901][ T5835] pwc: recv_control_msg error -71 req 02 val 2600 [ 103.627424][ T5835] pwc: recv_control_msg error -71 req 02 val 2900 [ 103.662370][ T5835] pwc: recv_control_msg error -71 req 02 val 2800 [ 103.689413][ T5917] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 103.705545][ T5835] pwc: recv_control_msg error -71 req 04 val 1100 [ 103.734502][ T5835] pwc: recv_control_msg error -71 req 04 val 1200 [ 103.754997][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.786509][ T5835] pwc: Registered as video103. [ 103.878663][ T5835] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5 [ 103.895472][ T5917] usb 4-1: config 0 descriptor?? [ 103.942556][ T5917] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 103.980148][ T5835] usb 2-1: USB disconnect, device number 2 [ 105.242834][ T5928] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 105.345376][ T6044] tipc: Started in network mode [ 105.351586][ T6044] tipc: Node identity 6aa3c7e5e065, cluster identity 4711 [ 105.361397][ T6044] tipc: Enabled bearer , priority 0 [ 105.370589][ T6044] syzkaller0: entered promiscuous mode [ 105.376475][ T6044] syzkaller0: entered allmulticast mode [ 105.420620][ T6044] tipc: Resetting bearer [ 105.429235][ T5928] usb 2-1: Using ep0 maxpacket: 16 [ 105.447495][ T6043] tipc: Resetting bearer [ 105.466499][ T5928] usb 2-1: config 1 has an invalid interface number: 230 but max is 0 [ 105.507241][ T6043] tipc: Disabling bearer [ 105.513346][ T5928] usb 2-1: config 1 has no interface number 0 [ 105.525807][ T5928] usb 2-1: config 1 interface 230 has no altsetting 0 [ 105.570279][ T5928] usb 2-1: New USB device found, idVendor=093a, idProduct=2628, bcdDevice=55.d0 [ 105.582427][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.601356][ T5928] usb 2-1: Product: syz [ 105.605679][ T5928] usb 2-1: Manufacturer: syz [ 105.615099][ T5928] usb 2-1: SerialNumber: syz [ 105.701944][ T5928] gspca_main: gspca_pac7302-2.14.0 probing 093a:2628 [ 105.793355][ T6000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.811022][ T1082] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.850634][ T6000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.913697][ T6010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.954245][ T6010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.966496][ T5917] usb 4-1: USB disconnect, device number 2 [ 106.001208][ T1082] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.168145][ T1082] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.273762][ T1082] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.346124][ T5928] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 106.372744][ T5928] gspca_pac7302 2-1:1.230: probe with driver gspca_pac7302 failed with error -71 [ 106.409718][ T5928] usb 2-1: USB disconnect, device number 3 [ 106.837651][ T1082] bridge_slave_1: left allmulticast mode [ 106.858938][ T1082] bridge_slave_1: left promiscuous mode [ 106.901101][ T1082] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.040738][ T1082] bridge_slave_0: left allmulticast mode [ 107.096590][ T1082] bridge_slave_0: left promiscuous mode [ 107.119271][ T1082] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.138777][ T6062] netlink: 12 bytes leftover after parsing attributes in process `syz.3.27'. [ 107.408672][ T6067] comedi comedi2: comedi_config --init_data is deprecated [ 107.905638][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 107.918329][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 107.932037][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 107.940747][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 107.950702][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 108.125612][ T6085] Cannot find add_set index 0 as target [ 109.963510][ T1082] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.040042][ T1082] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.082072][ T1082] bond0 (unregistering): Released all slaves [ 110.123146][ T6062] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 110.143016][ T6086] tipc: Enabling of bearer rejected, failed to enable media [ 110.169741][ T5908] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 110.379078][ T5908] usb 5-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 110.388292][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.446178][ T5908] usb 5-1: config 0 descriptor?? [ 110.837496][ T5845] Bluetooth: hci4: command tx timeout [ 110.940539][ T5908] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 110.969204][ T5908] asix 5-1:0.0: probe with driver asix failed with error -71 [ 111.472189][ T5908] usb 5-1: USB disconnect, device number 2 [ 111.809313][ T1082] hsr_slave_0: left promiscuous mode [ 111.846941][ T1082] hsr_slave_1: left promiscuous mode [ 111.877086][ T1082] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.899358][ T1082] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.121090][ T1082] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.336222][ T6156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.39'. [ 112.623178][ T3494] Bluetooth: Error in BCSP hdr checksum [ 112.795185][ T5928] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 112.804655][ T1082] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.909547][ T5837] Bluetooth: hci4: command tx timeout [ 112.939768][ T1082] veth1_macvtap: left promiscuous mode [ 112.946679][ T1082] veth0_macvtap: left promiscuous mode [ 112.954510][ T1082] veth1_vlan: left promiscuous mode [ 112.964900][ T1082] veth0_vlan: left promiscuous mode [ 112.969409][ T5928] usb 5-1: Using ep0 maxpacket: 16 [ 113.001127][ T5928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.043575][ T5928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.096680][ T5928] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 113.147473][ T5928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.169827][ T5928] usb 5-1: config 0 descriptor?? [ 113.588888][ T5928] usbhid 5-1:0.0: can't add hid device: -71 [ 113.597592][ T5928] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 113.609474][ T5928] usb 5-1: USB disconnect, device number 3 [ 113.850516][ T1082] team0 (unregistering): Port device team_slave_1 removed [ 113.903413][ T1082] team0 (unregistering): Port device team_slave_0 removed [ 114.317530][ T6155] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 114.317571][ T6155] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 114.320984][ T6157] netlink: 72 bytes leftover after parsing attributes in process `syz.1.39'. [ 114.437546][ T5837] Bluetooth: hci5: command 0x1003 tx timeout [ 114.437652][ T5845] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 114.462995][ T6171] netlink: 4 bytes leftover after parsing attributes in process `syz.4.42'. [ 114.704715][ T6176] pimreg: entered allmulticast mode [ 114.784150][ T6177] mmap: syz.2.44 (6177): VmData 37523456 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 114.999161][ T5845] Bluetooth: hci4: command tx timeout [ 115.139519][ T6176] pimreg: left allmulticast mode [ 115.147932][ T6198] netlink: 4 bytes leftover after parsing attributes in process `syz.1.47'. [ 115.483182][ T6200] tipc: Enabling of bearer rejected, failed to enable media [ 116.004272][ T6217] block nbd3: shutting down sockets [ 116.030652][ T6077] chnl_net:caif_netlink_parms(): no params data found [ 116.107442][ T6215] process 'syz.3.50' launched './file2' with NULL argv: empty string added [ 116.478930][ T6220] ======================================================= [ 116.478930][ T6220] WARNING: The mand mount option has been deprecated and [ 116.478930][ T6220] and is ignored by this kernel. Remove the mand [ 116.478930][ T6220] option from the mount to silence this warning. [ 116.478930][ T6220] ======================================================= [ 116.514219][ C0] vkms_vblank_simulate: vblank timer overrun [ 116.721569][ T6220] option changes via remount are deprecated (pid=6214 comm=syz.4.51) [ 117.072541][ T5845] Bluetooth: hci4: command tx timeout [ 117.479492][ T6238] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 118.195632][ T6247] netlink: 'syz.4.55': attribute type 4 has an invalid length. [ 118.203357][ T6247] netlink: 152 bytes leftover after parsing attributes in process `syz.4.55'. [ 118.246425][ T6247] Ã: renamed from bond0 (while UP) [ 118.387199][ T6077] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.423059][ T6077] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.440486][ T6077] bridge_slave_0: entered allmulticast mode [ 118.458342][ T6077] bridge_slave_0: entered promiscuous mode [ 118.533527][ T6077] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.554826][ T6077] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.573434][ T6077] bridge_slave_1: entered allmulticast mode [ 118.593030][ T6077] bridge_slave_1: entered promiscuous mode [ 118.669710][ T6253] hugetlbfs: syz.2.57 (6253): Using mlock ulimits for SHM_HUGETLB is obsolete [ 119.219121][ T5901] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 119.453440][ T5901] usb 2-1: no configurations [ 119.473669][ T5901] usb 2-1: can't read configurations, error -22 [ 119.636682][ T6260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.60'. [ 119.826384][ T6077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.829566][ T5901] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 119.878761][ T6077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.040251][ T5901] usb 2-1: no configurations [ 120.044942][ T5901] usb 2-1: can't read configurations, error -22 [ 120.549581][ T5901] usb usb2-port1: attempt power cycle [ 120.929855][ T5901] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 120.981994][ T5901] usb 2-1: no configurations [ 121.009050][ T5901] usb 2-1: can't read configurations, error -22 [ 121.063797][ T6269] tipc: Enabling of bearer rejected, failed to enable media [ 121.089543][ T6077] team0: Port device team_slave_0 added [ 121.133396][ T6077] team0: Port device team_slave_1 added [ 121.169232][ T5901] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 121.239764][ T5901] usb 2-1: no configurations [ 121.252402][ T5901] usb 2-1: can't read configurations, error -22 [ 121.307947][ T5901] usb usb2-port1: unable to enumerate USB device [ 121.347216][ T6287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.62'. [ 121.481207][ T6077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.529107][ T6077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.036890][ T6077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.133988][ T6077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.192748][ T6077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.219288][ C1] vkms_vblank_simulate: vblank timer overrun [ 122.230424][ T6077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.359794][ T6306] netlink: 4 bytes leftover after parsing attributes in process `syz.1.66'. [ 123.063405][ T6077] hsr_slave_0: entered promiscuous mode [ 123.100691][ T6077] hsr_slave_1: entered promiscuous mode [ 123.117496][ T6077] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 123.160046][ T6316] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 123.166966][ T6316] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 123.180696][ T6316] vhci_hcd vhci_hcd.0: Device attached [ 123.214857][ T6077] Cannot create hsr debugfs directory [ 124.274879][ T5928] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 124.665678][ T6319] vhci_hcd: connection reset by peer [ 124.673099][ T49] vhci_hcd: stop threads [ 124.693125][ T49] vhci_hcd: release socket [ 124.734090][ T49] vhci_hcd: disconnect device [ 124.758642][ T6335] trusted_key: syz.4.72 sent an empty control message without MSG_MORE. [ 125.086093][ T6340] tipc: Enabling of bearer rejected, failed to enable media [ 126.998573][ T6077] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 127.008356][ T6365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.085859][ T6365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.166980][ T6077] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 127.239339][ T5908] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 127.257985][ T6077] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 127.338490][ T6077] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 127.459123][ T5908] usb 4-1: Using ep0 maxpacket: 32 [ 127.490086][ T5908] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 127.520673][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.549537][ T6387] input: syz1 as /devices/virtual/input/input6 [ 127.591684][ T5908] usb 4-1: Product: syz [ 127.661752][ T5908] usb 4-1: Manufacturer: syz [ 127.667850][ T5908] usb 4-1: SerialNumber: syz [ 127.678593][ T5908] usb 4-1: config 0 descriptor?? [ 127.709548][ T5901] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 127.718257][ T5908] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 127.778153][ T6077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.855916][ T6077] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.889346][ T5901] usb 2-1: Using ep0 maxpacket: 32 [ 127.898390][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.905737][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.907096][ T5901] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 127.927595][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.935027][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.020133][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.162960][ T5901] usb 2-1: config 0 descriptor?? [ 128.577595][ T5908] gspca_stk1135: reg_w 0x5 err -71 [ 128.604162][ T5908] gspca_stk1135: serial bus timeout: status=0x00 [ 128.662652][ T5901] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 128.680887][ T5908] gspca_stk1135: Sensor write failed [ 128.743058][ T5908] gspca_stk1135: serial bus timeout: status=0x00 [ 128.759396][ T5908] gspca_stk1135: Sensor write failed [ 128.764791][ T5908] gspca_stk1135: serial bus timeout: status=0x00 [ 128.803912][ T5901] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 128.816041][ T5908] gspca_stk1135: Sensor read failed [ 128.821371][ T5908] gspca_stk1135: serial bus timeout: status=0x00 [ 128.871568][ T5901] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 128.880900][ T5908] gspca_stk1135: Sensor read failed [ 128.886166][ T5908] gspca_stk1135: Detected sensor type unknown (0x0) [ 128.921224][ T5901] usb 2-1: media controller created [ 128.929097][ T5908] gspca_stk1135: serial bus timeout: status=0x00 [ 128.969372][ T5908] gspca_stk1135: Sensor read failed [ 128.974672][ T5908] gspca_stk1135: serial bus timeout: status=0x00 [ 129.038602][ T5901] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 129.059284][ T5908] gspca_stk1135: Sensor read failed [ 129.077854][ T5908] gspca_stk1135: serial bus timeout: status=0x00 [ 129.094001][ T5908] gspca_stk1135: Sensor write failed [ 129.122294][ T5908] gspca_stk1135: serial bus timeout: status=0x00 [ 129.153975][ T5908] gspca_stk1135: Sensor write failed [ 129.177641][ T5908] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 129.210951][ T5901] az6027: usb out operation failed. (-71) [ 129.239469][ T5908] usb 4-1: USB disconnect, device number 3 [ 129.249683][ T5901] az6027: usb out operation failed. (-71) [ 129.292986][ T5901] stb0899_attach: Driver disabled by Kconfig [ 129.313229][ T5901] az6027: no front-end attached [ 129.313229][ T5901] [ 129.349329][ T5901] az6027: usb out operation failed. (-71) [ 129.390213][ T5901] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 129.460388][ T5901] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input7 [ 129.482505][ T5928] vhci_hcd: vhci_device speed not set [ 129.574606][ T5901] dvb-usb: schedule remote query interval to 400 msecs. [ 129.632014][ T5901] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 129.643111][ T5901] usb 2-1: USB disconnect, device number 8 [ 129.671997][ T6410] netlink: 76 bytes leftover after parsing attributes in process `syz.3.85'. [ 129.919724][ T6415] kvm: kvm [6414]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x11e) = 0x3 [ 130.073304][ T6415] kvm: kvm [6414]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x186) = 0x3 [ 130.084972][ T6424] tipc: Enabling of bearer rejected, failed to enable media [ 130.094417][ T6415] kvm: kvm [6414]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x187) = 0x3 [ 130.128766][ T5901] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 130.225596][ T6415] kvm_intel: kvm [6414]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x1d9) = 0x3 [ 130.287913][ T6077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.895902][ T6446] netlink: 16 bytes leftover after parsing attributes in process `syz.3.90'. [ 130.931558][ T6447] /dev/nullb0: Can't open blockdev [ 131.578155][ T6470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.93'. [ 131.599238][ T6470] netlink: 4 bytes leftover after parsing attributes in process `syz.3.93'. [ 131.609961][ C1] Unknown status report in ack skb [ 132.145177][ T30] audit: type=1804 audit(1754920217.953:2): pid=6469 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.97" name="/newroot/25/bus/bus" dev="overlay" ino=155 res=1 errno=0 [ 132.168011][ T6469] evm: overlay not supported [ 132.246856][ T30] audit: type=1800 audit(1754920217.983:3): pid=6469 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.97" name="bus" dev="overlay" ino=155 res=0 errno=0 [ 132.912482][ T6077] veth0_vlan: entered promiscuous mode [ 132.937831][ T6077] veth1_vlan: entered promiscuous mode [ 132.971502][ T6480] tipc: Enabling of bearer rejected, failed to enable media [ 133.087599][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.094523][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.165625][ T6077] veth0_macvtap: entered promiscuous mode [ 133.217927][ T6077] veth1_macvtap: entered promiscuous mode [ 134.894737][ T6077] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.010453][ T6503] netlink: 'syz.1.103': attribute type 12 has an invalid length. [ 135.019100][ T6503] netlink: 'syz.1.103': attribute type 29 has an invalid length. [ 135.037947][ T6503] netlink: 148 bytes leftover after parsing attributes in process `syz.1.103'. [ 135.066175][ T6503] netlink: 'syz.1.103': attribute type 2 has an invalid length. [ 135.084213][ T6503] netlink: 'syz.1.103': attribute type 3 has an invalid length. [ 135.135652][ T6507] netlink: 'syz.1.103': attribute type 12 has an invalid length. [ 135.153574][ T6507] netlink: 'syz.1.103': attribute type 29 has an invalid length. [ 135.163973][ T6507] netlink: 148 bytes leftover after parsing attributes in process `syz.1.103'. [ 135.173364][ T6507] netlink: 'syz.1.103': attribute type 2 has an invalid length. [ 135.181478][ T6507] netlink: 'syz.1.103': attribute type 3 has an invalid length. [ 135.189908][ T6508] netlink: 'syz.1.103': attribute type 12 has an invalid length. [ 135.197776][ T6508] netlink: 'syz.1.103': attribute type 29 has an invalid length. [ 135.207676][ T6508] netlink: 148 bytes leftover after parsing attributes in process `syz.1.103'. [ 135.226617][ T6508] netlink: 51 bytes leftover after parsing attributes in process `syz.1.103'. [ 135.281992][ T6525] usb usb8: usbfs: process 6525 (syz.3.108) did not claim interface 0 before use [ 135.288603][ T6077] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.334103][ T6077] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.365858][ T6077] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.385324][ T6077] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.405567][ T6077] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.569377][ T5939] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 135.673500][ T6536] netlink: 224 bytes leftover after parsing attributes in process `syz.1.111'. [ 135.696463][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.727318][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.739262][ T5939] usb 4-1: Using ep0 maxpacket: 32 [ 135.769546][ T5939] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 135.793696][ T5939] usb 4-1: config 0 has no interface number 0 [ 135.809719][ T5939] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 135.852459][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.861586][ T5928] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 135.870112][ T5939] usb 4-1: config 0 interface 89 has no altsetting 0 [ 135.901553][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.916729][ T5939] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=2e.4e [ 135.941991][ T5939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.950495][ T5939] usb 4-1: Product: syz [ 135.954696][ T5939] usb 4-1: Manufacturer: syz [ 135.968608][ T5939] usb 4-1: SerialNumber: syz [ 135.988700][ T5939] usb 4-1: config 0 descriptor?? [ 136.015730][ T5939] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 136.056038][ T5939] em28xx 4-1:0.89: Video interface 89 found: isoc [ 136.099094][ T5908] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 136.280240][ T5908] usb 5-1: Using ep0 maxpacket: 32 [ 136.303052][ T5908] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.304622][ T6558] tipc: Started in network mode [ 136.336206][ T6558] tipc: Node identity 7e48f4df3d02, cluster identity 4711 [ 136.379367][ T6558] tipc: Enabled bearer , priority 0 [ 136.408555][ T5908] usb 5-1: config 0 interface 0 altsetting 16 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 136.420961][ T6562] netlink: 4 bytes leftover after parsing attributes in process `syz.5.24'. [ 136.437880][ T5908] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 136.469061][ T5908] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x8F has invalid wMaxPacketSize 0 [ 136.495947][ T5908] usb 5-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 136.521143][ T5939] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 136.535484][ T5908] usb 5-1: config 0 interface 0 has no altsetting 0 [ 136.564814][ T5908] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 136.613325][ T5939] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 136.622519][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.644983][ T5939] em28xx 4-1:0.89: board has no eeprom [ 136.773359][ T6558] tipc: Resetting bearer [ 136.809979][ T5908] usb 5-1: config 0 descriptor?? [ 136.820686][ T6556] tipc: Disabling bearer [ 136.839639][ T5939] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 136.854481][ T5939] em28xx 4-1:0.89: analog set to isoc mode. [ 136.867803][ T6005] em28xx 4-1:0.89: Registering V4L2 extension [ 136.937827][ T5939] usb 4-1: USB disconnect, device number 4 [ 136.965623][ T5939] em28xx 4-1:0.89: Disconnecting em28xx [ 137.203541][ T6543] ÿ: renamed from bond_slave_0 (while UP) [ 137.239537][ T6005] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 137.282537][ T6005] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 137.302364][ T6005] em28xx 4-1:0.89: No AC97 audio processor [ 137.342210][ T6005] usb 4-1: Decoder not found [ 137.346930][ T6005] em28xx 4-1:0.89: failed to create media graph [ 137.375763][ T6005] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 137.412825][ T6005] em28xx 4-1:0.89: Registering snapshot button... [ 137.463968][ T6571] ip6erspan0: entered promiscuous mode [ 137.473584][ T6005] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input9 [ 137.847668][ T6005] em28xx 4-1:0.89: Remote control support is not available for this card. [ 138.242076][ T5939] em28xx 4-1:0.89: Closing input extension [ 138.256344][ T5908] usbhid 5-1:0.0: can't add hid device: -71 [ 138.280647][ T5908] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 138.299728][ T5939] em28xx 4-1:0.89: Deregistering snapshot button [ 138.304393][ T5908] usb 5-1: USB disconnect, device number 4 [ 138.450703][ T5939] em28xx 4-1:0.89: Freeing device [ 138.639029][ C0] wlan0: beacon TX faster than countdown (channel/color switch) completion [ 139.799208][ T5939] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 141.239943][ T6597] overlay: ./file0 is not a directory [ 142.898700][ T6630] tipc: Enabled bearer , priority 0 [ 143.977407][ T5908] tipc: Node number set to 2328283109 [ 144.870680][ T6637] tipc: Resetting bearer [ 145.147611][ T6628] tipc: Disabling bearer [ 145.496802][ T6642] netlink: 76 bytes leftover after parsing attributes in process `syz.4.133'. [ 146.199995][ T5908] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 146.639198][ T5908] usb 2-1: Using ep0 maxpacket: 8 [ 147.492718][ T5908] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 147.501166][ T5908] usb 2-1: config 0 has no interface number 0 [ 147.507317][ T5908] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 147.518502][ T5908] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 147.528612][ T5908] usb 2-1: config 0 interface 55 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 147.538435][ T5908] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 147.553081][ T5908] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 147.562668][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.610184][ T5908] usb 2-1: config 0 descriptor?? [ 147.627219][ T5908] ldusb 2-1:0.55: Interrupt in endpoint not found [ 147.910255][ T5908] usb 2-1: USB disconnect, device number 10 [ 148.280716][ T6670] netlink: 20 bytes leftover after parsing attributes in process `syz.2.138'. [ 150.303386][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 150.459220][ T9] usb 4-1: device descriptor read/64, error -71 [ 150.557633][ T6695] netlink: 96 bytes leftover after parsing attributes in process `syz.2.144'. [ 150.885233][ T6698] netlink: 76 bytes leftover after parsing attributes in process `syz.5.145'. [ 151.253425][ T6701] validate_nla: 3 callbacks suppressed [ 151.253444][ T6701] netlink: 'syz.4.146': attribute type 10 has an invalid length. [ 151.379906][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 151.981672][ T9] usb 4-1: device descriptor read/64, error -71 [ 152.117444][ T6701] veth0_vlan: left promiscuous mode [ 152.125969][ T9] usb usb4-port1: attempt power cycle [ 152.163586][ T6701] veth0_vlan: entered promiscuous mode [ 152.188425][ T6701] team0: Device veth0_vlan failed to register rx_handler [ 152.354173][ T6701] syz.4.146 (6701) used greatest stack depth: 19576 bytes left [ 152.449193][ T5901] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 152.475538][ T6728] netlink: 4 bytes leftover after parsing attributes in process `syz.4.152'. [ 152.490064][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 152.546551][ T9] usb 4-1: device descriptor read/8, error -71 [ 152.639077][ T5901] usb 2-1: Using ep0 maxpacket: 8 [ 152.661872][ T5901] usb 2-1: config 162 has an invalid interface number: 222 but max is 1 [ 152.677999][ T5901] usb 2-1: config 162 has an invalid descriptor of length 123, skipping remainder of the config [ 152.697713][ T5901] usb 2-1: config 162 has 1 interface, different from the descriptor's value: 2 [ 152.712002][ T5901] usb 2-1: config 162 has no interface number 0 [ 152.718663][ T5901] usb 2-1: config 162 interface 222 has no altsetting 0 [ 152.732510][ T5901] usb 2-1: New USB device found, idVendor=12d1, idProduct=140d, bcdDevice= 0.00 [ 152.749239][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.758291][ T5901] usb 2-1: Product: syz [ 152.767876][ T5901] usb 2-1: Manufacturer: syz [ 152.775042][ T5901] usb 2-1: SerialNumber: syz [ 152.875964][ T6733] veth1_macvtap: left promiscuous mode [ 152.968606][ T6737] Bluetooth: MGMT ver 1.23 [ 152.987439][ T6737] Bluetooth: hci0: invalid length 2, exp 1 for type 31 [ 153.000766][ T5901] usb-storage 2-1:162.222: USB Mass Storage device detected [ 153.015766][ T30] audit: type=1326 audit(1754920238.823:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6736 comm="syz.5.155" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9ce978ebe9 code=0x0 [ 153.092470][ T6741] overlayfs: missing 'lowerdir' [ 153.139504][ T5901] usb 2-1: USB disconnect, device number 11 [ 153.193067][ T6746] netlink: 12 bytes leftover after parsing attributes in process `syz.4.156'. [ 153.231271][ T6746] netlink: 12 bytes leftover after parsing attributes in process `syz.4.156'. [ 154.319144][ T43] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 154.720476][ T6761] netlink: 76 bytes leftover after parsing attributes in process `syz.1.160'. [ 155.375210][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.398615][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.426676][ T43] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 155.437654][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.450094][ T43] usb 5-1: config 0 descriptor?? [ 155.679498][ T6780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.699486][ T6780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.804170][ T6784] syz.2.165(6784): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 156.249196][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 156.308878][ T43] hid-led 0003:27B8:01ED.0001: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.4-1/input0 [ 156.371634][ T43] hid-led 0003:27B8:01ED.0001: ThingM blink(1) initialized [ 156.389535][ T9] usb 4-1: device descriptor read/64, error -71 [ 156.524910][ T43] usb 5-1: USB disconnect, device number 5 [ 156.656480][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 156.809941][ T5901] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 156.830323][ T9] usb 4-1: device descriptor read/64, error -71 [ 156.939842][ T9] usb usb4-port1: attempt power cycle [ 156.975735][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 52, changing to 4 [ 156.997407][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 13368, setting to 1023 [ 157.034817][ T5901] usb 3-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 157.061034][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.086553][ T5901] usb 3-1: Product: syz [ 157.091224][ T5901] usb 3-1: Manufacturer: syz [ 157.095864][ T5901] usb 3-1: SerialNumber: syz [ 157.114072][ T5901] usb 3-1: config 0 descriptor?? [ 157.169205][ T5908] usb 2-1: new low-speed USB device number 12 using dummy_hcd [ 157.297422][ T6809] capability: warning: `syz.4.172' uses deprecated v2 capabilities in a way that may be insecure [ 157.309944][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 157.329131][ T5908] usb 2-1: Invalid ep0 maxpacket: 64 [ 157.361509][ T9] usb 4-1: device descriptor read/8, error -71 [ 157.444085][ T5901] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input10 [ 157.489345][ T5908] usb 2-1: new low-speed USB device number 13 using dummy_hcd [ 157.646700][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 157.673902][ T6821] netlink: 76 bytes leftover after parsing attributes in process `syz.4.174'. [ 157.722278][ T5908] usb 2-1: Invalid ep0 maxpacket: 64 [ 157.759937][ T9] usb 4-1: device descriptor read/8, error -71 [ 157.799760][ T5908] usb usb2-port1: attempt power cycle [ 157.863996][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 157.921897][ T9] usb usb4-port1: unable to enumerate USB device [ 158.350900][ T5908] usb 2-1: new low-speed USB device number 14 using dummy_hcd [ 158.373343][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.472166][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 158.550768][ T5908] usb 2-1: Invalid ep0 maxpacket: 64 [ 158.632038][ T10] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 158.724728][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 158.756075][ T5908] usb 2-1: new low-speed USB device number 15 using dummy_hcd [ 158.767545][ T10] usb 6-1: SerialNumber: syz [ 158.783956][ T5928] usb 3-1: USB disconnect, device number 2 [ 158.816025][ T5908] usb 2-1: Invalid ep0 maxpacket: 64 [ 158.823389][ T5908] usb usb2-port1: unable to enumerate USB device [ 158.898832][ T6829] netlink: 4 bytes leftover after parsing attributes in process `syz.4.176'. [ 159.594634][ T10] usb 6-1: 0:2 : does not exist [ 159.611063][ T10] usb 6-1: unit 5 not found! [ 159.656118][ T10] usb 6-1: USB disconnect, device number 2 [ 160.269120][ T5901] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 160.553253][ T5901] usb 4-1: Using ep0 maxpacket: 32 [ 160.601605][ T5901] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 160.635724][ T5901] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 160.681259][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.720972][ T5901] usb 4-1: Product: syz [ 160.725205][ T5901] usb 4-1: Manufacturer: syz [ 160.779315][ T5901] usb 4-1: SerialNumber: syz [ 160.800372][ T5901] usb 4-1: config 0 descriptor?? [ 160.809419][ T6836] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 161.848694][ T5901] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input11 [ 162.740945][ T6862] delete_channel: no stack [ 162.775793][ T5901] usb 4-1: USB disconnect, device number 14 [ 162.781859][ C0] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 162.853631][ T6848] rdma_op ffff88807a99f1f0 conn xmit_rdma 0000000000000000 [ 163.126770][ T6876] netlink: 76 bytes leftover after parsing attributes in process `syz.5.185'. [ 163.139102][ T6005] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 163.638778][ T6005] usb 5-1: Using ep0 maxpacket: 8 [ 164.005115][ T6005] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 164.015592][ T6005] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.023809][ T6005] usb 5-1: Product: syz [ 164.028188][ T6005] usb 5-1: Manufacturer: syz [ 164.033182][ T6005] usb 5-1: SerialNumber: syz [ 164.121466][ T6005] usb 5-1: config 0 descriptor?? [ 164.336074][ T6892] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 164.336074][ T6892] The task syz.3.189 (6892) triggered the difference, watch for misbehavior. [ 164.409421][ T6005] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 165.644336][ T5845] Bluetooth: hci3: Malformed Event: 0x02 [ 165.652212][ T5845] Bluetooth: hci3: Malformed Event: 0x02 [ 165.710246][ T5928] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 165.871625][ T6005] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 165.959115][ T5928] usb 6-1: Using ep0 maxpacket: 16 [ 166.046309][ T5928] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.087486][ T5928] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 166.152564][ T5928] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 166.247528][ T5928] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 166.288351][ T5928] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.337219][ T5928] usb 6-1: Product: syz [ 166.368494][ T5928] usb 6-1: Manufacturer: syz [ 166.409062][ T5928] usb 6-1: SerialNumber: syz [ 168.009316][ T5901] usb 5-1: USB disconnect, device number 6 [ 168.142472][ T6943] sctp: [Deprecated]: syz.4.198 (pid 6943) Use of int in maxseg socket option. [ 168.142472][ T6943] Use struct sctp_assoc_value instead [ 169.260558][ T5928] usb 6-1: USB disconnect, device number 3 [ 169.880288][ T6962] netlink: 76 bytes leftover after parsing attributes in process `syz.5.201'. [ 170.119239][ T6964] netlink: 4 bytes leftover after parsing attributes in process `syz.3.202'. [ 170.200031][ T6940] usb usb1: check_ctrlrecip: process 6940 (syz.1.197) requesting ep 01 but needs 81 [ 170.876871][ T6969] netlink: 96 bytes leftover after parsing attributes in process `syz.4.203'. [ 171.276386][ T6981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.316227][ T6981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.379038][ T30] audit: type=1326 audit(1754920257.183:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6983 comm="syz.3.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81dff8ebe9 code=0x7ffc0000 [ 171.420940][ T30] audit: type=1326 audit(1754920257.183:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6983 comm="syz.3.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81dff8ebe9 code=0x7ffc0000 [ 171.448895][ T30] audit: type=1326 audit(1754920257.183:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6983 comm="syz.3.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81dff8ebe9 code=0x7ffc0000 [ 171.476210][ T5835] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 171.494425][ T30] audit: type=1326 audit(1754920257.183:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6983 comm="syz.3.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81dff8ebe9 code=0x7ffc0000 [ 171.543579][ T5901] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 171.553716][ T30] audit: type=1326 audit(1754920257.183:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6983 comm="syz.3.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f81dff8ebe9 code=0x7ffc0000 [ 171.583747][ T30] audit: type=1326 audit(1754920257.183:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6983 comm="syz.3.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81dff8ebe9 code=0x7ffc0000 [ 171.632985][ T30] audit: type=1326 audit(1754920257.183:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6983 comm="syz.3.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f81dff8ebe9 code=0x7ffc0000 [ 171.659550][ T30] audit: type=1326 audit(1754920257.193:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6983 comm="syz.3.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81dff8ebe9 code=0x7ffc0000 [ 171.680956][ C0] vkms_vblank_simulate: vblank timer overrun [ 171.701081][ T5901] usb 5-1: Using ep0 maxpacket: 32 [ 171.745917][ T6005] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 171.756323][ T5901] usb 5-1: config 0 has an invalid interface number: 255 but max is 1 [ 171.769509][ T6998] netlink: 4 bytes leftover after parsing attributes in process `syz.5.210'. [ 171.920572][ T5901] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.945337][ T5835] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 171.946331][ T5901] usb 5-1: config 0 has no interface number 1 [ 171.960498][ T30] audit: type=1326 audit(1754920257.193:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6983 comm="syz.3.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81dff8ebe9 code=0x7ffc0000 [ 171.994667][ T5835] usb 3-1: config 0 has no interface number 0 [ 172.018270][ T5901] usb 5-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 172.023713][ T6005] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 172.045541][ T5835] usb 3-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 172.049723][ T30] audit: type=1326 audit(1754920257.193:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6983 comm="syz.3.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f81dff8ebe9 code=0x7ffc0000 [ 172.078749][ C0] vkms_vblank_simulate: vblank timer overrun [ 172.113212][ T5901] usb 5-1: config 0 interface 0 has no altsetting 0 [ 172.129034][ T6005] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.138865][ T5901] usb 5-1: config 0 interface 255 has no altsetting 0 [ 172.139248][ T5835] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 172.174807][ T5901] usb 5-1: New USB device found, idVendor=0582, idProduct=0033, bcdDevice=8e.57 [ 172.195538][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.218311][ T5901] usb 5-1: Product: syz [ 172.233086][ T5901] usb 5-1: Manufacturer: syz [ 172.242894][ T9] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 172.253429][ T6005] usb 4-1: Product: syz [ 172.257841][ T5901] usb 5-1: SerialNumber: syz [ 172.336305][ T6005] usb 4-1: Manufacturer: syz [ 172.394300][ T5901] usb 5-1: config 0 descriptor?? [ 172.401987][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 172.402230][ T6005] usb 4-1: SerialNumber: syz [ 172.408852][ T9] usb 2-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 172.413439][ T5835] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 172.437843][ T5901] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 172.454241][ T5901] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 172.473090][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.488162][ T5901] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 172.492647][ T6005] usb 4-1: config 0 descriptor?? [ 172.506470][ T9] usb 2-1: config 0 descriptor?? [ 172.518080][ T5835] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.04 [ 172.551006][ T5835] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 172.586039][ T5835] usb 3-1: Product: syz [ 172.613671][ T5835] usb 3-1: SerialNumber: syz [ 172.638697][ T5901] usb 5-1: USB disconnect, device number 7 [ 172.655573][ T5835] usb 3-1: config 0 descriptor?? [ 172.683279][ T5835] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 172.721813][ T5835] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input12 [ 172.734753][ T6005] usb 4-1: USB disconnect, device number 15 [ 172.932044][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 172.942540][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 172.950927][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 172.958515][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 172.965837][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 172.973025][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 172.980422][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 172.981990][ T9] kye 0003:0458:5013.0002: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 172.987705][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 173.006543][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 173.013686][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 173.024025][ T5835] usb 3-1: USB disconnect, device number 3 [ 173.030025][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 173.068919][ T5835] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 173.113225][ T9] kye 0003:0458:5013.0002: hidraw0: USB HID v0.06 Device [HID 0458:5013] on usb-dummy_hcd.1-1/input0 [ 173.142383][ T9] kye 0003:0458:5013.0002: tablet-enabling feature report not found [ 173.166943][ T9] kye 0003:0458:5013.0002: tablet enabling failed [ 173.226459][ T9] usb 2-1: USB disconnect, device number 16 [ 173.299743][ T7013] netlink: 'syz.4.212': attribute type 3 has an invalid length. [ 173.307461][ T7013] netlink: 'syz.4.212': attribute type 1 has an invalid length. [ 173.347414][ T7013] netlink: 220 bytes leftover after parsing attributes in process `syz.4.212'. [ 173.649581][ T5835] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 173.880866][ T5835] usb 5-1: Using ep0 maxpacket: 16 [ 174.031364][ T5835] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.131574][ T5835] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 174.173146][ T5835] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 175.248767][ T5835] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 175.284110][ T5835] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 176.124651][ T6005] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 176.133003][ T5835] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.141872][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 176.150599][ T5835] usb 5-1: Product: syz [ 176.154816][ T5835] usb 5-1: Manufacturer: syz [ 176.160252][ T5835] usb 5-1: SerialNumber: syz [ 176.168712][ T5835] usb 5-1: config 0 descriptor?? [ 176.329825][ T6005] usb 2-1: device descriptor read/64, error -32 [ 176.441995][ T7043] syzkaller0: entered promiscuous mode [ 176.474350][ T7043] syzkaller0: entered allmulticast mode [ 176.481919][ T5835] rc_core: IR keymap rc-xbox-dvd not found [ 176.514479][ T5835] Registered IR keymap rc-empty [ 176.549754][ T5835] rc rc0: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 176.567953][ T5835] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input13 [ 176.622952][ T5835] usb 5-1: USB disconnect, device number 8 [ 176.628940][ C1] xbox_remote 5-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 176.878903][ T7061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.222'. [ 176.899095][ T5939] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 177.639596][ T7072] syz.5.223 uses obsolete (PF_INET,SOCK_PACKET) [ 178.466025][ T7086] overlayfs: conflicting lowerdir path [ 178.475736][ T5939] usb 3-1: Using ep0 maxpacket: 32 [ 178.750474][ T5939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.789076][ T5939] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 178.810340][ T5939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.009559][ T5939] usb 3-1: config 0 descriptor?? [ 179.733832][ T5939] hub 3-1:0.0: USB hub found [ 179.778503][ T5939] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 179.797900][ T5939] usbhid 3-1:0.0: can't add hid device: -71 [ 179.829170][ T5939] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 179.875950][ T5939] usb 3-1: USB disconnect, device number 4 [ 179.909864][ T5908] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 180.447155][ T5908] usb 6-1: Using ep0 maxpacket: 16 [ 180.510735][ T5908] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 180.549739][ T7070] input: syz0 as /devices/virtual/input/input14 [ 180.560166][ T5908] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.565692][ T7071] netlink: 36 bytes leftover after parsing attributes in process `syz.3.224'. [ 180.595956][ T5908] usb 6-1: config 0 has no interface number 0 [ 180.636959][ T5908] usb 6-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 180.651831][ T5908] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.663833][ T5908] usb 6-1: Product: syz [ 180.681731][ T5908] usb 6-1: Manufacturer: syz [ 180.692641][ T5908] usb 6-1: SerialNumber: syz [ 180.714711][ T5908] usb 6-1: config 0 descriptor?? [ 180.906990][ T7113] netlink: 24 bytes leftover after parsing attributes in process `syz.4.233'. [ 181.216319][ T7115] program syz.4.233 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 181.392098][ T5908] usb 6-1: Found UVC 0.00 device syz (046d:08d3) [ 181.414056][ T5908] usb 6-1: No valid video chain found. [ 181.492063][ T7128] netlink: 12 bytes leftover after parsing attributes in process `syz.2.235'. [ 181.582069][ T7130] mmap: syz.3.234 (7130) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 181.716760][ T5939] usb 6-1: USB disconnect, device number 4 [ 182.333944][ T7122] [U] . [ 182.546335][ T7140] binder: 7136:7140 unknown command 0 [ 182.552060][ T7140] binder: 7136:7140 ioctl c0306201 200000000080 returned -22 [ 182.613659][ T7140] sp0: Synchronizing with TNC [ 182.635542][ T7140] sp0: Found TNC [ 182.646538][ T7140] warning: `syz.2.237' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 185.560255][ T7153] syz.2.239 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 185.589257][ T5908] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 185.631048][ T7155] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 185.819093][ T5908] usb 6-1: Using ep0 maxpacket: 8 [ 186.393060][ T5908] usb 6-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 186.411629][ T5908] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.439702][ T5908] usb 6-1: Product: syz [ 186.469090][ T5908] usb 6-1: Manufacturer: syz [ 186.473926][ T5908] usb 6-1: SerialNumber: syz [ 186.488677][ T5908] usb 6-1: config 0 descriptor?? [ 186.700001][ T5939] usb 6-1: USB disconnect, device number 5 [ 186.910894][ T7174] netlink: 'syz.2.244': attribute type 58 has an invalid length. [ 186.946380][ T7174] netlink: 20 bytes leftover after parsing attributes in process `syz.2.244'. [ 187.009794][ T6005] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 187.339514][ T6005] usb 2-1: Using ep0 maxpacket: 16 [ 187.375007][ T6005] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 187.419005][ T6005] usb 2-1: config 0 has no interface number 0 [ 187.659067][ T6005] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 187.714411][ T6005] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 187.765127][ T6005] usb 2-1: config 0 interface 41 has no altsetting 0 [ 187.784438][ T6005] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 187.806761][ T6005] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.823191][ T6005] usb 2-1: Product: syz [ 187.828223][ T6005] usb 2-1: Manufacturer: syz [ 187.833933][ T6005] usb 2-1: SerialNumber: syz [ 187.857349][ T6005] usb 2-1: config 0 descriptor?? [ 187.872203][ T7172] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 187.899311][ T7172] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 187.909932][ T7185] support for cryptoloop has been removed. Use dm-crypt instead. [ 188.406949][ T7172] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 188.445739][ T7172] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 189.507055][ T6005] Error reading MAC address [ 189.538439][ T7172] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 189.549529][ T7172] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 189.843966][ T5908] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 189.919088][ T7204] netlink: 28 bytes leftover after parsing attributes in process `syz.1.243'. [ 190.420910][ T5939] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 190.689029][ T5908] usb 5-1: Using ep0 maxpacket: 8 [ 190.704214][ T5908] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 250, changing to 11 [ 190.741982][ T5908] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.766123][ T5908] usb 5-1: config 0 interface 0 has no altsetting 0 [ 190.773021][ T5908] usb 5-1: New USB device found, idVendor=05ac, idProduct=0254, bcdDevice= 0.00 [ 190.782198][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.870309][ T5939] usb 6-1: Using ep0 maxpacket: 8 [ 190.878628][ T5939] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.888696][ T5908] usb 5-1: config 0 descriptor?? [ 190.889684][ T5939] usb 6-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 190.978356][ T7221] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 191.024197][ T5939] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.036688][ T5939] usb 6-1: config 0 descriptor?? [ 191.228580][ T7230] ALSA: mixer_oss: invalid OSS volume '' [ 191.237077][ T7230] ALSA: mixer_oss: invalid OSS volume '' [ 191.245284][ T7230] ALSA: mixer_oss: invalid OSS volume '' [ 191.253934][ T7230] ALSA: mixer_oss: invalid OSS volume '' [ 191.260766][ T7230] ALSA: mixer_oss: invalid OSS volume '' [ 191.268685][ T7230] ALSA: mixer_oss: invalid OSS volume '' [ 191.277406][ T7230] ALSA: mixer_oss: invalid OSS volume '' [ 191.286735][ T7230] ALSA: mixer_oss: invalid OSS volume '' [ 191.294175][ T7230] ALSA: mixer_oss: invalid OSS volume '' [ 191.301108][ T7230] ALSA: mixer_oss: invalid OSS volume '' [ 191.307594][ T7230] ALSA: mixer_oss: invalid OSS volume '' [ 191.315921][ T7230] ALSA: mixer_oss: invalid OSS volume '' [ 191.323731][ T7230] ALSA: mixer_oss: invalid OSS volume '' [ 191.353126][ T7230] ALSA: mixer_oss: invalid OSS volume '' [ 191.360032][ T5908] apple 0003:05AC:0254.0003: hidraw0: USB HID v0.00 Device [HID 05ac:0254] on usb-dummy_hcd.4-1/input0 [ 191.361803][ T7230] ALSA: mixer_oss: invalid OSS volume '' [ 191.392903][ T7230] ALSA: mixer_oss: invalid OSS volume '' [ 191.407786][ T7230] ALSA: mixer_oss: invalid OSS volume '' [ 191.423377][ T6005] sr9700 2-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 191.424164][ T7236] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 191.453791][ T6005] usb 2-1: USB disconnect, device number 19 [ 191.481244][ T7238] ------------[ cut here ]------------ [ 191.487509][ T7238] WARNING: CPU: 0 PID: 7238 at ./include/linux/memcontrol.h:371 folio_memcg+0x1a8/0x310 [ 191.497687][ T7238] Modules linked in: [ 191.502826][ T7238] CPU: 0 UID: 0 PID: 7238 Comm: syz.2.253 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 191.512748][ T7238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 191.523024][ T7238] RIP: 0010:folio_memcg+0x1a8/0x310 [ 191.528322][ T7238] Code: 80 3c 28 00 74 08 4c 89 f7 e8 74 ca 1b 00 4d 8b 36 4c 89 f0 5b 41 5c 41 5d 41 5e 41 5f 5d e9 7f 20 65 09 cc e8 19 e3 bb ff 90 <0f> 0b 90 eb c5 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c fe fe ff ff [ 191.548117][ T7238] RSP: 0018:ffffc90004627250 EFLAGS: 00010283 [ 191.554695][ T7238] RAX: ffffffff820442a7 RBX: 0000000000000000 RCX: 0000000000080000 [ 191.563203][ T7238] RDX: ffffc9000f563000 RSI: 00000000000006b2 RDI: 00000000000006b3 [ 191.571632][ T7238] RBP: 0000000000000000 R08: ffffea0001d74347 R09: 1ffffd40003ae868 [ 191.580120][ T7238] R10: dffffc0000000000 R11: fffff940003ae869 R12: ffffea0001d74370 [ 191.588142][ T7238] R13: dffffc0000000000 R14: ffff88802578bd80 R15: 0000000000000002 [ 191.590142][ T5928] usb 5-1: USB disconnect, device number 9 [ 191.596699][ T7238] FS: 00007f4ec0d546c0(0000) GS:ffff888125c57000(0000) knlGS:0000000000000000 [ 191.612090][ T7238] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 191.618801][ T7238] CR2: 0000000000000000 CR3: 0000000024d48000 CR4: 00000000003526f0 [ 191.627025][ T7238] Call Trace: [ 191.630678][ T7238] [ 191.633654][ T7238] workingset_activation+0x5f/0x4a0 [ 191.639080][ T7238] ? folio_mark_accessed+0x361/0x4a0 [ 191.644429][ T7238] folio_mark_accessed+0x3b5/0x4a0 [ 191.649699][ T7238] kvm_release_page_clean+0x9a/0xe0 [ 191.654952][ T7238] kvm_tdp_page_fault+0x2dd/0x370 [ 191.660307][ T7238] kvm_mmu_do_page_fault+0x2c5/0x640 [ 191.665671][ T7238] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 191.671696][ T7238] ? vmx_handle_exit_irqoff+0x29e/0xad0 [ 191.677301][ T7238] ? __pfx_current_save_fsgs+0x10/0x10 [ 191.683620][ T7238] kvm_mmu_page_fault+0x22f/0xb70 [ 191.688722][ T7238] ? __pfx_handle_ept_violation+0x10/0x10 [ 191.694987][ T7238] vmx_handle_exit+0x1090/0x18a0 [ 191.700037][ T7238] ? vcpu_run+0x361c/0x6f70 [ 191.704608][ T7238] vcpu_run+0x432e/0x6f70 [ 191.709538][ T7238] ? vcpu_run+0x361c/0x6f70 [ 191.714153][ T7238] ? __pfx_vcpu_run+0x10/0x10 [ 191.719055][ T7238] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 191.724838][ T7238] ? rcu_is_watching+0x15/0xb0 [ 191.729703][ T7238] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 191.735484][ T7238] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 191.741624][ T7238] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 191.747671][ T7238] ? rcu_is_watching+0x15/0xb0 [ 191.752551][ T7238] ? trace_contention_end+0x39/0x120 [ 191.757901][ T7238] ? __mutex_lock+0x330/0xe80 [ 191.762691][ T7238] ? __lock_acquire+0xab9/0xd20 [ 191.767638][ T7238] kvm_vcpu_ioctl+0x95c/0xe90 [ 191.772513][ T7238] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 191.777767][ T7238] ? __lock_acquire+0xab9/0xd20 [ 191.782766][ T7238] ? __asan_memset+0x22/0x50 [ 191.788049][ T7238] ? smack_file_ioctl+0x302/0x340 [ 191.793864][ T7238] ? __pfx_smack_file_ioctl+0x10/0x10 [ 191.799380][ T7238] ? __fget_files+0x2a/0x420 [ 191.804023][ T7238] ? __fget_files+0x3a0/0x420 [ 191.808827][ T7238] ? __fget_files+0x2a/0x420 [ 191.813526][ T7238] ? bpf_lsm_file_ioctl+0x9/0x20 [ 191.818539][ T7238] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 191.823866][ T7238] __se_sys_ioctl+0xfc/0x170 [ 191.828797][ T7238] do_syscall_64+0xfa/0x3b0 [ 191.833589][ T7238] ? lockdep_hardirqs_on+0x9c/0x150 [ 191.839168][ T7238] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.845287][ T7238] ? clear_bhb_loop+0x60/0xb0 [ 191.850076][ T7238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.856024][ T7238] RIP: 0033:0x7f4ebff8ebe9 [ 191.860594][ T7238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.880367][ T7238] RSP: 002b:00007f4ec0d54038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 191.889532][ T7238] RAX: ffffffffffffffda RBX: 00007f4ec01b6180 RCX: 00007f4ebff8ebe9 [ 191.897969][ T7238] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 191.906090][ T7238] RBP: 00007f4ec0011e19 R08: 0000000000000000 R09: 0000000000000000 [ 191.914203][ T7238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.922402][ T7238] R13: 00007f4ec01b6218 R14: 00007f4ec01b6180 R15: 00007ffcf5453178 [ 191.930703][ T7238] [ 191.933801][ T7238] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 191.941217][ T7238] CPU: 0 UID: 0 PID: 7238 Comm: syz.2.253 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 191.951327][ T7238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 191.961640][ T7238] Call Trace: [ 191.964966][ T7238] [ 191.967939][ T7238] dump_stack_lvl+0x99/0x250 [ 191.972580][ T7238] ? __asan_memcpy+0x40/0x70 [ 191.977217][ T7238] ? __pfx_dump_stack_lvl+0x10/0x10 [ 191.982476][ T7238] ? __pfx__printk+0x10/0x10 [ 191.987139][ T7238] panic+0x2db/0x790 [ 191.991083][ T7238] ? __pfx_panic+0x10/0x10 [ 191.995542][ T7238] __warn+0x31b/0x4b0 [ 191.999654][ T7238] ? folio_memcg+0x1a8/0x310 [ 192.004271][ T7238] ? folio_memcg+0x1a8/0x310 [ 192.008876][ T7238] report_bug+0x2be/0x4f0 [ 192.013216][ T7238] ? folio_memcg+0x1a8/0x310 [ 192.017830][ T7238] ? folio_memcg+0x1a8/0x310 [ 192.022450][ T7238] ? folio_memcg+0x1aa/0x310 [ 192.027068][ T7238] handle_bug+0x84/0x160 [ 192.031339][ T7238] exc_invalid_op+0x1a/0x50 [ 192.035952][ T7238] asm_exc_invalid_op+0x1a/0x20 [ 192.040828][ T7238] RIP: 0010:folio_memcg+0x1a8/0x310 [ 192.046047][ T7238] Code: 80 3c 28 00 74 08 4c 89 f7 e8 74 ca 1b 00 4d 8b 36 4c 89 f0 5b 41 5c 41 5d 41 5e 41 5f 5d e9 7f 20 65 09 cc e8 19 e3 bb ff 90 <0f> 0b 90 eb c5 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c fe fe ff ff [ 192.065673][ T7238] RSP: 0018:ffffc90004627250 EFLAGS: 00010283 [ 192.071767][ T7238] RAX: ffffffff820442a7 RBX: 0000000000000000 RCX: 0000000000080000 [ 192.079836][ T7238] RDX: ffffc9000f563000 RSI: 00000000000006b2 RDI: 00000000000006b3 [ 192.088094][ T7238] RBP: 0000000000000000 R08: ffffea0001d74347 R09: 1ffffd40003ae868 [ 192.096192][ T7238] R10: dffffc0000000000 R11: fffff940003ae869 R12: ffffea0001d74370 [ 192.104208][ T7238] R13: dffffc0000000000 R14: ffff88802578bd80 R15: 0000000000000002 [ 192.112457][ T7238] ? folio_memcg+0x1a7/0x310 [ 192.117105][ T7238] workingset_activation+0x5f/0x4a0 [ 192.122327][ T7238] ? folio_mark_accessed+0x361/0x4a0 [ 192.127649][ T7238] folio_mark_accessed+0x3b5/0x4a0 [ 192.132788][ T7238] kvm_release_page_clean+0x9a/0xe0 [ 192.138012][ T7238] kvm_tdp_page_fault+0x2dd/0x370 [ 192.143083][ T7238] kvm_mmu_do_page_fault+0x2c5/0x640 [ 192.148484][ T7238] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 192.154358][ T7238] ? vmx_handle_exit_irqoff+0x29e/0xad0 [ 192.159946][ T7238] ? __pfx_current_save_fsgs+0x10/0x10 [ 192.165430][ T7238] kvm_mmu_page_fault+0x22f/0xb70 [ 192.170486][ T7238] ? __pfx_handle_ept_violation+0x10/0x10 [ 192.176221][ T7238] vmx_handle_exit+0x1090/0x18a0 [ 192.181186][ T7238] ? vcpu_run+0x361c/0x6f70 [ 192.185721][ T7238] vcpu_run+0x432e/0x6f70 [ 192.190184][ T7238] ? vcpu_run+0x361c/0x6f70 [ 192.194745][ T7238] ? __pfx_vcpu_run+0x10/0x10 [ 192.199467][ T7238] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 192.205222][ T7238] ? rcu_is_watching+0x15/0xb0 [ 192.210007][ T7238] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 192.215611][ T7238] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 192.221669][ T7238] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 192.227709][ T7238] ? rcu_is_watching+0x15/0xb0 [ 192.232529][ T7238] ? trace_contention_end+0x39/0x120 [ 192.237939][ T7238] ? __mutex_lock+0x330/0xe80 [ 192.242733][ T7238] ? __lock_acquire+0xab9/0xd20 [ 192.247632][ T7238] kvm_vcpu_ioctl+0x95c/0xe90 [ 192.252336][ T7238] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 192.257555][ T7238] ? __lock_acquire+0xab9/0xd20 [ 192.262424][ T7238] ? __asan_memset+0x22/0x50 [ 192.267130][ T7238] ? smack_file_ioctl+0x302/0x340 [ 192.272177][ T7238] ? __pfx_smack_file_ioctl+0x10/0x10 [ 192.277579][ T7238] ? __fget_files+0x2a/0x420 [ 192.282183][ T7238] ? __fget_files+0x3a0/0x420 [ 192.286912][ T7238] ? __fget_files+0x2a/0x420 [ 192.291536][ T7238] ? bpf_lsm_file_ioctl+0x9/0x20 [ 192.296693][ T7238] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 192.301944][ T7238] __se_sys_ioctl+0xfc/0x170 [ 192.306575][ T7238] do_syscall_64+0xfa/0x3b0 [ 192.311103][ T7238] ? lockdep_hardirqs_on+0x9c/0x150 [ 192.316313][ T7238] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.322397][ T7238] ? clear_bhb_loop+0x60/0xb0 [ 192.327090][ T7238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.333086][ T7238] RIP: 0033:0x7f4ebff8ebe9 [ 192.337516][ T7238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.357238][ T7238] RSP: 002b:00007f4ec0d54038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 192.365673][ T7238] RAX: ffffffffffffffda RBX: 00007f4ec01b6180 RCX: 00007f4ebff8ebe9 [ 192.373751][ T7238] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 192.381745][ T7238] RBP: 00007f4ec0011e19 R08: 0000000000000000 R09: 0000000000000000 [ 192.389731][ T7238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.397733][ T7238] R13: 00007f4ec01b6218 R14: 00007f4ec01b6180 R15: 00007ffcf5453178 [ 192.405745][ T7238] [ 192.409184][ T7238] Kernel Offset: disabled [ 192.413515][ T7238] Rebooting in 86400 seconds..