last executing test programs: 25m48.596795783s ago: executing program 32 (id=51): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x88, r3, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x54, 0xe, {{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x0, @random=0x1, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x1, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x2, 0x3, 0x6, 0x8}}}}], @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x2}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x88}}, 0x20000014) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @void}}, ["", "", "", "", "", ""]}, 0x1c}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/power/mem_sleep', 0x82803, 0x8e) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) r5 = dup(0xffffffffffffffff) write$uinput_user_dev(r5, &(0x7f00000004c0)={'syz0\x00', {0x87, 0x3, 0x1, 0x9}, 0xb, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x0, 0xa9ba, 0xc1f, 0x1, 0x7f5b, 0x3, 0x4, 0x5, 0x10004, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x0, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x9, 0xb, 0xcc, 0x4, 0x80, 0x401, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x3, 0x80000000, 0x1, 0xa, 0x7, 0x8, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x10000, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x6, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0xb, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x8, 0x10d, 0x1, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x4, 0x6f, 0x80b, 0x1, 0x1, 0x525ba681, 0x4f74, 0x7, 0x1, 0x1, 0xfffffffd, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x200, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xa9, 0x7, 0x49, 0x6, 0x4, 0x5, 0xa3, 0x40003, 0x2, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x4, 0xd21e, 0x9, 0x12, 0x0, 0x2, 0xfff, 0x926, 0x800100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x81, 0x47, 0x7, 0x0, 0x11, 0x2, 0xffd, 0x4, 0x7, 0x7ffd, 0x7ff, 0x10, 0x9, 0x10001, 0x8000001, 0x10001, 0x6, 0x71c], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x7, 0xfffffff3, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x7fff, 0x4, 0x9, 0x6, 0xc41f, 0x5, 0x8b6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0x9, 0xfffffff8, 0x9, 0x7, 0x7, 0x101, 0x7, 0x7, 0x4, 0x0, 0xb, 0x400400, 0x8, 0x0, 0x8, 0x7, 0x9, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40048080) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000240), 0x10) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x400) r6 = gettid() timer_create(0x9, &(0x7f0000000180)={0x0, 0x1e, 0x4, @tid=r6}, &(0x7f00000000c0)=0x0) timer_settime(r7, 0x1, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_gettime(r7, 0x0) rt_sigsuspend(0x0, 0x0) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000140)=0xfffffffd, 0x4) 25m35.328363958s ago: executing program 33 (id=70): syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xb8, &(0x7f0000000140)=""/184, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0208"], 0x48) r4 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r4, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f00000010c0)=0x1006) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 23m30.680355495s ago: executing program 34 (id=187): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="180400000004000000000000feffffe318010000202069250000000000202020db1af8ffa1000000bda100000000000007010000f8ffffffb702000008000000b7030000fffffff885000000a000000095"], &(0x7f0000000940)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000805000100070000000900020073797a30000000001400078008001240001500000500150000100000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x408, 0x7) ioctl$TCSETS(r4, 0x804c4700, &(0x7f0000000040)={0x80000001, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) select(0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000040)={0x1d, r6, 0x8000000000000003}, 0x18) sendmsg$GTP_CMD_DELPDP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x14008045) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x200448d0) 19m12.112031767s ago: executing program 35 (id=1021): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r5, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 19m11.161896955s ago: executing program 36 (id=1025): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000080)={'tunl0\x00', 0x0}) 19m10.133339446s ago: executing program 37 (id=1029): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$inet6(0x10, 0x3, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x60bd27, 0x25dfdbfc, {0x2, 0x1f, 0x0, 0xff, r5}, [@IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_FLAGS={0x8, 0x8, 0x100}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_FLAGS={0x8, 0x8, 0x312}, @IFA_RT_PRIORITY={0x8, 0x9, 0x3}, @IFA_RT_PRIORITY={0x8, 0x9, 0x107}]}, 0x48}, 0x1, 0x0, 0x0, 0x40014}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x884) sendto$inet6(r3, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, 0x0) 19m8.074668112s ago: executing program 38 (id=1036): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x800, 0x7) sendmmsg$inet6(r2, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)='B', 0x1}], 0x1}}], 0x1, 0x400c404) exit(0xfe) sendmmsg$inet6(r2, &(0x7f00000005c0)=[{{&(0x7f00000004c0)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10001}, 0x1c, &(0x7f00000007c0)}}, {{&(0x7f0000000800)={0xa, 0x4e21, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, &(0x7f0000000c40)=[{0x0}, {0x0}, {&(0x7f0000000940)}, {0x0}, {0x0}], 0x5}}, {{0x0, 0x0, &(0x7f00000045c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000680)="597a6b789cd5110caaa8e68623b0d55cfdff26cc78f16da427c07a314759cf6ca6867f2cda685d0f6a6723b953cb682580a11d0f01f7d7c16d7fb344aea09f9c6aa7639fc31813f85abae92cc838632e169851ff784e77c611e47d0a0269651bb766f9668aa38a809267f6afb294fecbee8cc438", 0x74}], 0x5}}], 0x3, 0x48c0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r3 = syz_open_procfs(0x0, &(0x7f0000002340)='fdinfo\x00') getdents(r3, &(0x7f0000000000)=""/43, 0x2b) getdents64(r3, 0x0, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0xfffffffd, 0x4, 0x800}, 0x3c) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000200)={@rand_addr=0x64010101, @private, 0x0, "606b177019311f4d7ed79c11e2e0f1da000000002300000020fff20000000600", 0x1, 0x1, 0x3}, 0x3c) socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x4000054) r5 = socket(0x10, 0x3, 0x0) readlinkat(r3, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000980)=""/193, 0xc1) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) 18m4.931651766s ago: executing program 39 (id=1293): socket$inet6(0xa, 0x3, 0x8) socket$l2tp(0x2, 0x2, 0x73) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0xfe1, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002e9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x2000c0c0}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 16m45.650098566s ago: executing program 9 (id=1655): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x80) 16m45.352402257s ago: executing program 3 (id=1658): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000400)=ANY=[], 0x1a4}}, 0x0) 16m45.330319783s ago: executing program 9 (id=1659): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a3100000000090001"], 0xa4}}, 0x40) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[], 0x44}}, 0x44) 16m44.98836137s ago: executing program 3 (id=1662): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000016c0)=""/4086, 0xff6}, {&(0x7f0000003700)=""/4087, 0xff7}, {&(0x7f0000000280)=""/58, 0x3a}, {&(0x7f00000026c0)=""/4083, 0xff3}, {&(0x7f0000000440)=""/178, 0xb2}, {&(0x7f0000004700)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/58, 0x3a}, {&(0x7f00000001c0)=""/8, 0x8}, {&(0x7f00000002c0)=""/214, 0xd6}], 0x9}, 0x32120) 16m44.939059165s ago: executing program 9 (id=1663): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x1}, 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 16m44.652027906s ago: executing program 9 (id=1666): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x204) 16m44.527825812s ago: executing program 9 (id=1668): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000780)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0}) r2 = fsopen(&(0x7f0000000040)='udf\x00', 0x1) r3 = fcntl$dupfd(r2, 0x406, r2) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000080), 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x5b03, 0x0) 16m43.676511036s ago: executing program 40 (id=1671): socket$l2tp(0x2, 0x2, 0x73) socket$l2tp(0x2, 0x2, 0x73) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x88f, &(0x7f00000010c0)={0x0, 0xc941, 0x0, 0x2, 0xbfdffffc}, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) socket$inet6(0xa, 0x80002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x100, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}}}, 0x24}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) sendmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='-', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 16m43.669163868s ago: executing program 3 (id=1674): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 16m43.406447818s ago: executing program 3 (id=1678): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x204) 16m43.201249159s ago: executing program 3 (id=1679): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, 0x0) 16m42.423767518s ago: executing program 9 (id=1683): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x80) 16m41.798681983s ago: executing program 41 (id=1683): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x80) 16m41.787386887s ago: executing program 3 (id=1685): r0 = epoll_create1(0x0) r1 = syz_open_dev$media(0x0, 0x103, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)={0x2}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x37b, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x1, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x7, 0x3, 0xfffffffc, 0x9, 0x4, 0x102, 0x7, 0x3c5b, 0x80000001, 0x7, 0xd, 0x1, 0x0, 0x7, 0x7ff, 0x1000, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x4003, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x4000200, 0x3e, 0xc0, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x3c], [0x10000004, 0x9, 0x8200012f, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x9, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x8, 0x2f, 0xe, 0x312, 0x7c, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x5, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x5, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x8, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x5, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x40000004, 0x5, 0xfffffffe, 0x1, 0x8d2, 0xa, 0x5, 0x7ffe, 0xffff0000, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x4000000, 0x4, 0x3, 0x303c, 0x7f, 0xa, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x3a, 0x800003, 0x200, 0x80, 0x2c, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x9, 0x1c, 0x120000, 0x3, 0x2006, 0x7, 0x4, 0x25], [0x9, 0xbb33, 0x80000002, 0x800, 0x5, 0xb, 0x8, 0x1000006, 0x7ff, 0xb9, 0xcea, 0x1ff, 0x2, 0x8, 0x4, 0x3, 0x101, 0xfa4a, 0x4, 0x9a5, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x0, 0x14c, 0x60a7, 0x7fff, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x6, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x7ff, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 16m41.344506879s ago: executing program 42 (id=1685): r0 = epoll_create1(0x0) r1 = syz_open_dev$media(0x0, 0x103, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)={0x2}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x37b, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x1, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x7, 0x3, 0xfffffffc, 0x9, 0x4, 0x102, 0x7, 0x3c5b, 0x80000001, 0x7, 0xd, 0x1, 0x0, 0x7, 0x7ff, 0x1000, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x4003, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x4000200, 0x3e, 0xc0, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x3c], [0x10000004, 0x9, 0x8200012f, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x9, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x8, 0x2f, 0xe, 0x312, 0x7c, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x5, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x5, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x8, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x5, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x40000004, 0x5, 0xfffffffe, 0x1, 0x8d2, 0xa, 0x5, 0x7ffe, 0xffff0000, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x4000000, 0x4, 0x3, 0x303c, 0x7f, 0xa, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x3a, 0x800003, 0x200, 0x80, 0x2c, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x9, 0x1c, 0x120000, 0x3, 0x2006, 0x7, 0x4, 0x25], [0x9, 0xbb33, 0x80000002, 0x800, 0x5, 0xb, 0x8, 0x1000006, 0x7ff, 0xb9, 0xcea, 0x1ff, 0x2, 0x8, 0x4, 0x3, 0x101, 0xfa4a, 0x4, 0x9a5, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x0, 0x14c, 0x60a7, 0x7fff, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x6, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x7ff, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 5m31.576143764s ago: executing program 0 (id=6233): r0 = landlock_create_ruleset(&(0x7f0000000080)={0x10}, 0x10, 0x0) landlock_restrict_self(r0, 0x4) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x8172, 0x2}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 5m31.408644532s ago: executing program 0 (id=6236): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x1c, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1b}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa8}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) unshare(0x400) pipe2(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r4, 0x407, 0x5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x19}}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newlink={0x20, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r3, 0xff7f}}, 0x20}}, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5m29.831762036s ago: executing program 0 (id=6241): r0 = socket$inet_sctp(0x2, 0x1, 0x84) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote}, @nl=@proc={0x10, 0x0, 0x25dfdbfb, 0x60009008}, @sco={0x1f, @none}, 0xed, 0x0, 0x0, 0x0, 0x51, 0x0, 0x2, 0x8, 0xfff9}) listen(r0, 0xda90) accept4(r0, 0x0, 0x0, 0x0) 5m29.742005057s ago: executing program 6 (id=6243): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=000000000']) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x3000) 5m29.424476975s ago: executing program 6 (id=6245): chdir(&(0x7f0000000540)='./cgroup\x00') ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000100)={"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"}) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x400) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x4dbcb8767b59d72c, 0x0, 0x5000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000200)={[0x1000000, 0x6, 0xfffffffffffffffd, 0x0, 0xfffd, 0x1, 0x4002004c4, 0x1000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3], 0x25000, 0x2011c0}) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000100)={[{0x800, 0x93, 0x86, 0xc4, 0x10, 0x66, 0xcf, 0xb, 0x6, 0xa, 0x0, 0x7, 0x69}, {0x6, 0x2, 0xfc, 0x8, 0xdd, 0xff, 0xd, 0x3, 0x5, 0x9, 0xf, 0xa}, {0x6, 0xfff, 0x3, 0x7, 0x1d, 0x1, 0x8, 0x1, 0x8, 0x8a, 0xc, 0xff, 0x6}], 0xfffffffa}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x33455aed6cbf4c1b) open(&(0x7f0000000280)='.\x00', 0x80, 0x122) lsetxattr$security_capability(&(0x7f0000000840)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x1) 5m29.17636096s ago: executing program 6 (id=6247): socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) futex(&(0x7f0000000040)=0x2, 0x6, 0x1, &(0x7f0000000080)={0x77359400}, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x3, 0x0, 0x7, 0xfa11, 0xffffffff}, 0x0) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000004340), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc0f8565c, &(0x7f0000000000)={0x0, 0x6, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x41414270, 0x0, 0x3, [{}, {}, {0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x7}], 0x7}}, 0xfffffffc}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000300)='cgroup.threads\x00', 0x2, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_DQEVENT(r3, 0x80885659, &(0x7f0000000240)={0x0, @src_change}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGLED(r4, 0x80404519, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="f800000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000005000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0xf8}}, 0x4810) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100), 0x2, 0x6}}, 0x20) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="cc0000002100010000000000fefff7ff00000000000000000000000000000000fc020000000000000000000000000001fffc0000000000000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="02000000000000005000110000000000000000000000ffff7f000001fc00000000000000000000000000000164010102000000000000000000000000fc0200000000000000000000000000003c00000000000000020008002c0013"], 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x42000) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af60, 0x0) syz_usb_connect(0x0, 0x12, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x0) r9 = socket$inet(0x2, 0x3, 0x100) setsockopt$sock_int(r9, 0x1, 0x6, &(0x7f0000000500)=0x8, 0x4) 5m28.488538298s ago: executing program 0 (id=6250): r0 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x61b5, 0x4) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x2002, 0x0) 5m28.218401855s ago: executing program 0 (id=6251): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x394}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x7, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35}, 0x94) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000e001400400000004000000041"], 0x50) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 5m27.727699736s ago: executing program 0 (id=6253): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0x10}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) mknod(&(0x7f00000048c0)='./file0\x00', 0x0, 0xffffffff) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f000000a380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f00000006c0)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x0, 0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x80}}, 0x50) syz_fuse_handle_req(r6, &(0x7f0000008380)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r6, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lseek(r8, 0x0, 0x2) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x488, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x45c, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x1, 0x7, 0xd988, 0x3, 0x3, 0xa08b, 0x1, 0x3ff, 0x5, 0x5, 0x6, 0x4, 0x1, 0x92c, 0x7, 0xffffffb2, 0xeaac, 0x2, 0xe13, 0xffffffff, 0x10000, 0xded, 0x8, 0x10000000, 0x1, 0x10001, 0xc6d, 0x80000001, 0x8, 0x6, 0x7, 0x7, 0x5, 0x7, 0x800, 0x9, 0x100, 0x8, 0x9, 0x8, 0x3, 0x5, 0x6, 0x9, 0x3, 0xd, 0x7, 0x8, 0x13f6, 0x81, 0x53, 0x14, 0x4, 0x1, 0x6, 0x4, 0x8, 0x800, 0x1, 0x8, 0xfffffff9, 0x5, 0x1, 0x200003, 0x5, 0x5, 0x80000000, 0xf3, 0xd, 0x8, 0xfffffff9, 0x800, 0x2726a3ed, 0x6, 0x4, 0x2, 0x6, 0x8, 0x2, 0x7ff, 0x100, 0x1ff, 0x7, 0x3, 0x4, 0x8, 0x5, 0x8000002, 0x5, 0x0, 0x4, 0x3, 0x16, 0xff, 0x1, 0xc, 0x9, 0xb, 0x5, 0x8080, 0x8, 0x6, 0xa, 0xfa, 0x7, 0x0, 0x10, 0x1ff, 0x3, 0x4, 0x60200000, 0x8, 0x2, 0x4000000d, 0x3, 0x2, 0x401, 0xa955, 0x5000, 0x1, 0xe6, 0x2, 0x62, 0x6e4, 0x1, 0x5, 0xe, 0xb, 0x6, 0x4, 0x80000001, 0x3, 0x99b, 0x9c4, 0x40007f, 0x3, 0x70, 0xff800, 0x1, 0x7, 0x5, 0xff, 0x7, 0x6, 0xfff, 0x800, 0xa3, 0x10000, 0xff, 0x80000000, 0xc, 0x7, 0x8, 0xff, 0x0, 0x0, 0x8, 0x6, 0xe2f3, 0x4, 0x0, 0x1000, 0x1, 0xffff, 0x3, 0x9, 0x7474, 0x8, 0x7, 0xfffffc00, 0x0, 0x40, 0x400, 0x64c, 0x8, 0x7, 0x8, 0x6, 0xfffffffe, 0x6, 0x5, 0x7ff, 0xc7, 0x7, 0xf30, 0x800, 0x0, 0xee3, 0x5, 0x4, 0x8, 0x7, 0x1000, 0x8, 0x7, 0xa37f, 0x8, 0x9, 0x3, 0x1, 0xff, 0x9, 0x10000, 0xb, 0xcf9, 0x8, 0xfc, 0x40, 0x3, 0x1731, 0x3b, 0xff, 0x6, 0x6ad880, 0x266d, 0x207, 0x4c28, 0x2, 0x400, 0x7d75, 0x52, 0xd3, 0x8, 0x0, 0x4, 0xfffffff8, 0xa00, 0x6, 0x6, 0x8, 0xe, 0xe459, 0x7ff, 0xc4, 0x80, 0x40, 0x0, 0x9, 0x0, 0x800, 0x100, 0x100, 0x8, 0xfffffb98, 0xfffffffb, 0x7, 0x20001, 0x8, 0x8, 0x1, 0x15b9, 0x4, 0xff, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x1, 0x7a94, 0x7, 0x6, {0x7, 0x2, 0x1, 0x80, 0x6572, 0x6}, {0x2, 0x1, 0x400, 0x8, 0x8}, 0x3, 0x4, 0x7fffffff}}]}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r12, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x1b0, 0x3d8, 0x3d8, 0x1b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xec, 0x148}, @unspec}, {{@uncond, 0x0, 0xc8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @common=@inet=@SYNPROXY={0x0, 'SYNPROXY\x00', 0x0, {0x8, 0x9, 0xfffc}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3aa) 5m25.799651043s ago: executing program 4 (id=6258): r0 = landlock_create_ruleset(&(0x7f0000000080)={0x10}, 0x10, 0x0) landlock_restrict_self(r0, 0x4) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x8172, 0x2}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 5m25.594036447s ago: executing program 4 (id=6259): socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000040)={0x8, 0x9, 0x4, {0x2, @win={{0x4, 0x1295d1cd, 0xfa, 0x347c}, 0x1, 0xdb0, &(0x7f0000000300)={{0x4e, 0x7, 0xef1, 0x1}, &(0x7f00000002c0)={{0x8, 0x9, 0xb, 0x3}, &(0x7f00000001c0)={{0x2, 0xc2b, 0x81, 0x3ff}}}}, 0x40, &(0x7f00000005c0)="b7c6439a99fa853387349fb9162d24e63b45cc4d2667ff6be837de33c1cea451c86f079289c002493ed49a0c0bd730a389372f82a2416a48b9dfddb1195ba01164ef37ab5173d7fe9c4456d1821d83000381c266f03352ae023f7d0f8b1be93ed98f01874df5102cb5d948a6bc0e57d7e0a00dc59c64789eaa416ee304894d73d746e75afebf37fab0503e28c06b86640bad562575b8dd0dcd671fce8545885865b1a4172e619d80c3c9c094c14e245295dd46e5db9f7df6cdc447", 0x5}}, 0x8}) r3 = socket(0x1d, 0x2, 0x6) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001880)=ANY=[@ANYRESHEX, @ANYBLOB="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", @ANYRESOCT=r4, @ANYRESHEX=r3], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000050) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xffffffffffffff8a}}, 0x0) socket(0x10, 0x3, 0x0) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000380)=""/196) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x80400, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000200)=0x8001100) 5m24.161389442s ago: executing program 4 (id=6263): bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x87, &(0x7f0000000180)=ANY=[], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122ebbff6884b3de82f8a3df9a2d0b67e46c349917110300b94240185146e52ac1540130161b6534e99e466173af4c775f238fae344b198915446b576be455f251e79f7ec703f937", 0x83, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000003c0), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) open$dir(&(0x7f0000000000)='./file0\x00', 0x353841, 0x0) rmdir(&(0x7f0000000180)='./file0\x00') keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_emit_ethernet(0x141, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x30) 5m24.106469894s ago: executing program 6 (id=6264): socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) 5m21.640636054s ago: executing program 6 (id=6270): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x34, r1, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x1}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x9}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x40}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 5m21.395850096s ago: executing program 6 (id=6271): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x64, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x9, 0xfff3}, {}, {0x10, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x1000, 0x0, 0x5}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x3, 0x7, 0x1}, {{0x4, 0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40004}, 0x2008c010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40080204}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)=@mpls_getroute={0x104, 0x1a, 0x200, 0x70bd28, 0x25dfdbfc, {0x1c, 0x0, 0x0, 0x7, 0xfd, 0x4, 0xc8, 0x9, 0x1000}, [@RTA_DST={0x8, 0x1, {0x200}}, @RTA_VIA={0x14, 0x12, {0x18, "ce90f7bd38fe5569c8c7c2c23a56"}}, @RTA_NEWDST={0x84, 0x13, [{0x2}, {0x101, 0x0, 0x1}, {0xff}, {0x7ff, 0x0, 0x1}, {0xff, 0x0, 0x1}, {0x3}, {0x9, 0x0, 0x1}, {0x9}, {0x5, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x9}, {0xffff}, {0x5, 0x0, 0x1}, {0x2}, {0x80}, {0x5}, {0x9ecb, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0xf06c}, {0xe28, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xd8b6}, {0x7fff, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x1}, {0x7}, {0x81b, 0x0, 0x1}, {0x40, 0x0, 0x1}, {0xd}, {0x3}, {0x6}]}, @RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x20, 0x10}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x6}, @RTA_VIA={0x14, 0x12, {0x1e, "4c35d63e666c72441cd3f533e989"}}, @RTA_MULTIPATH={0xc, 0x9, {0x80, 0x0, 0xfd, r2}}, @RTA_VIA={0x14, 0x12, {0x2a, "be79886f97d330d692e389aba61d"}}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x8011) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000100)={@val={0x2000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x300, 0x4, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0xfc}}}}}}}}, 0x36) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002f40)=ANY=[@ANYBLOB="500000001000370400"/20, @ANYRES32=r6, @ANYBLOB="8b04040000000000300012800b00010065727370616e0000200002800400120006001800000040000500160002000000050017"], 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x40000) setsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, 0x0, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) ioctl$PPPIOCGCHAN(r7, 0x80047437, &(0x7f0000000100)) bind$inet6(r8, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x4c, &(0x7f0000000040)={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x1, 0x0, 0x0, 0x3, 0x0, @void}, '\x00\x00\x00\x00\x00\x00\x00\x00`\x00'}}}}}}}, 0x0) 5m21.200378209s ago: executing program 4 (id=6273): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0xfd67, &(0x7f0000001400), 0x1}}], 0x4000210, 0x10002, 0x0) recvmmsg$unix(r0, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000020, 0x0) 5m20.232165219s ago: executing program 4 (id=6275): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x8, 0x11, 0x0, @remote, @mcast2, {[], {0x4e20, 0xe22, 0x8}}}}}}, 0x0) 5m20.077613984s ago: executing program 4 (id=6278): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) write$cgroup_devices(r0, 0x0, 0xffdd) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x40000000}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x63, @loopback, 0x7}, 0x1c) syz_open_procfs(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000001c0), &(0x7f0000000240)=0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/address_bits', 0x40000, 0x0) getdents64(r4, 0x0, 0x0) lseek(r4, 0x24, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @multicast1}}, 0xa, 0x0, 0xdd5, 0x7ff, 0x38fa8b00d923ddd5}, 0x9c) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x6, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) connect$unix(r5, &(0x7f00000001c0)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(r6, &(0x7f0000005200), 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x208, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_STAB={0x188, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x2, 0x6, 0x0, 0x2, 0x4, 0x200, 0x3}}, {0xa, 0x2, [0x5, 0x0, 0x8097]}}, {{0x1c, 0x1, {0x2, 0x80, 0x4, 0x0, 0x1, 0xc, 0x0, 0x6}}, {0x10, 0x2, [0x4, 0x0, 0x3, 0x0, 0x8001, 0xc]}}, {{0x1c, 0x1, {0x9, 0xf, 0x5c, 0x10, 0x0, 0x5, 0x9, 0x2}}, {0x8, 0x2, [0x8, 0x3]}}, {{0x1c, 0x1, {0xe, 0x8, 0x5, 0x0, 0x2, 0xffffffff, 0x8000, 0x4}}, {0xc, 0x2, [0x7, 0x8, 0x6, 0xc486]}}, {{0x1c, 0x1, {0x94, 0x6, 0xe59, 0xd, 0x1, 0xdbb2, 0xb91, 0x1}}, {0x6, 0x2, [0x71b]}}, {{0x1c, 0x1, {0x6, 0x2, 0x4, 0xe, 0x2, 0xe0, 0x6, 0x3}}, {0xa, 0x2, [0x1, 0x5, 0x7]}}, {{0x1c, 0x1, {0x2, 0x98, 0x7b, 0x5, 0x2, 0x783b, 0x7, 0x4}}, {0xc, 0x2, [0xd, 0x8, 0xaeea, 0x0]}}, {{0x1c, 0x1, {0xa, 0x2, 0x8, 0x0, 0xd8ab8ce4a7f28687, 0x8, 0x3858, 0x2}}, {0x8, 0x2, [0x2a7, 0x2]}}, {{0x1c, 0x1, {0x4c, 0x0, 0x1, 0x3, 0x0, 0x8, 0x8, 0x4}}, {0xc, 0x2, [0x4, 0x55, 0x1, 0x18b]}}, {{0x1c, 0x1, {0x10, 0xf3, 0xb527, 0x0, 0x2, 0x0, 0xd2f, 0x1}}, {0x6, 0x2, [0x7]}}]}, @qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{0x2, 0x800, 0xfffffffc, 0x8, 0x5, 0x1}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x9b59, 0x9294}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0xab1, 0x164}}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x8, 0x9, 0x9, 0x1, 0x3}}]}]}}}]}, 0x208}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 5m12.596822225s ago: executing program 43 (id=6253): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0x10}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) mknod(&(0x7f00000048c0)='./file0\x00', 0x0, 0xffffffff) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f000000a380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f00000006c0)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x0, 0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x80}}, 0x50) syz_fuse_handle_req(r6, &(0x7f0000008380)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r6, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lseek(r8, 0x0, 0x2) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x488, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x45c, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x1, 0x7, 0xd988, 0x3, 0x3, 0xa08b, 0x1, 0x3ff, 0x5, 0x5, 0x6, 0x4, 0x1, 0x92c, 0x7, 0xffffffb2, 0xeaac, 0x2, 0xe13, 0xffffffff, 0x10000, 0xded, 0x8, 0x10000000, 0x1, 0x10001, 0xc6d, 0x80000001, 0x8, 0x6, 0x7, 0x7, 0x5, 0x7, 0x800, 0x9, 0x100, 0x8, 0x9, 0x8, 0x3, 0x5, 0x6, 0x9, 0x3, 0xd, 0x7, 0x8, 0x13f6, 0x81, 0x53, 0x14, 0x4, 0x1, 0x6, 0x4, 0x8, 0x800, 0x1, 0x8, 0xfffffff9, 0x5, 0x1, 0x200003, 0x5, 0x5, 0x80000000, 0xf3, 0xd, 0x8, 0xfffffff9, 0x800, 0x2726a3ed, 0x6, 0x4, 0x2, 0x6, 0x8, 0x2, 0x7ff, 0x100, 0x1ff, 0x7, 0x3, 0x4, 0x8, 0x5, 0x8000002, 0x5, 0x0, 0x4, 0x3, 0x16, 0xff, 0x1, 0xc, 0x9, 0xb, 0x5, 0x8080, 0x8, 0x6, 0xa, 0xfa, 0x7, 0x0, 0x10, 0x1ff, 0x3, 0x4, 0x60200000, 0x8, 0x2, 0x4000000d, 0x3, 0x2, 0x401, 0xa955, 0x5000, 0x1, 0xe6, 0x2, 0x62, 0x6e4, 0x1, 0x5, 0xe, 0xb, 0x6, 0x4, 0x80000001, 0x3, 0x99b, 0x9c4, 0x40007f, 0x3, 0x70, 0xff800, 0x1, 0x7, 0x5, 0xff, 0x7, 0x6, 0xfff, 0x800, 0xa3, 0x10000, 0xff, 0x80000000, 0xc, 0x7, 0x8, 0xff, 0x0, 0x0, 0x8, 0x6, 0xe2f3, 0x4, 0x0, 0x1000, 0x1, 0xffff, 0x3, 0x9, 0x7474, 0x8, 0x7, 0xfffffc00, 0x0, 0x40, 0x400, 0x64c, 0x8, 0x7, 0x8, 0x6, 0xfffffffe, 0x6, 0x5, 0x7ff, 0xc7, 0x7, 0xf30, 0x800, 0x0, 0xee3, 0x5, 0x4, 0x8, 0x7, 0x1000, 0x8, 0x7, 0xa37f, 0x8, 0x9, 0x3, 0x1, 0xff, 0x9, 0x10000, 0xb, 0xcf9, 0x8, 0xfc, 0x40, 0x3, 0x1731, 0x3b, 0xff, 0x6, 0x6ad880, 0x266d, 0x207, 0x4c28, 0x2, 0x400, 0x7d75, 0x52, 0xd3, 0x8, 0x0, 0x4, 0xfffffff8, 0xa00, 0x6, 0x6, 0x8, 0xe, 0xe459, 0x7ff, 0xc4, 0x80, 0x40, 0x0, 0x9, 0x0, 0x800, 0x100, 0x100, 0x8, 0xfffffb98, 0xfffffffb, 0x7, 0x20001, 0x8, 0x8, 0x1, 0x15b9, 0x4, 0xff, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x1, 0x7a94, 0x7, 0x6, {0x7, 0x2, 0x1, 0x80, 0x6572, 0x6}, {0x2, 0x1, 0x400, 0x8, 0x8}, 0x3, 0x4, 0x7fffffff}}]}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r12, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x1b0, 0x3d8, 0x3d8, 0x1b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xec, 0x148}, @unspec}, {{@uncond, 0x0, 0xc8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @common=@inet=@SYNPROXY={0x0, 'SYNPROXY\x00', 0x0, {0x8, 0x9, 0xfffc}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3aa) 5m6.080843712s ago: executing program 44 (id=6271): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x64, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x9, 0xfff3}, {}, {0x10, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x1000, 0x0, 0x5}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x3, 0x7, 0x1}, {{0x4, 0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40004}, 0x2008c010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40080204}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)=@mpls_getroute={0x104, 0x1a, 0x200, 0x70bd28, 0x25dfdbfc, {0x1c, 0x0, 0x0, 0x7, 0xfd, 0x4, 0xc8, 0x9, 0x1000}, [@RTA_DST={0x8, 0x1, {0x200}}, @RTA_VIA={0x14, 0x12, {0x18, "ce90f7bd38fe5569c8c7c2c23a56"}}, @RTA_NEWDST={0x84, 0x13, [{0x2}, {0x101, 0x0, 0x1}, {0xff}, {0x7ff, 0x0, 0x1}, {0xff, 0x0, 0x1}, {0x3}, {0x9, 0x0, 0x1}, {0x9}, {0x5, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x9}, {0xffff}, {0x5, 0x0, 0x1}, {0x2}, {0x80}, {0x5}, {0x9ecb, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0xf06c}, {0xe28, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xd8b6}, {0x7fff, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x1}, {0x7}, {0x81b, 0x0, 0x1}, {0x40, 0x0, 0x1}, {0xd}, {0x3}, {0x6}]}, @RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x20, 0x10}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x6}, @RTA_VIA={0x14, 0x12, {0x1e, "4c35d63e666c72441cd3f533e989"}}, @RTA_MULTIPATH={0xc, 0x9, {0x80, 0x0, 0xfd, r2}}, @RTA_VIA={0x14, 0x12, {0x2a, "be79886f97d330d692e389aba61d"}}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x8011) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000100)={@val={0x2000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x300, 0x4, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0xfc}}}}}}}}, 0x36) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002f40)=ANY=[@ANYBLOB="500000001000370400"/20, @ANYRES32=r6, @ANYBLOB="8b04040000000000300012800b00010065727370616e0000200002800400120006001800000040000500160002000000050017"], 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x40000) setsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, 0x0, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) ioctl$PPPIOCGCHAN(r7, 0x80047437, &(0x7f0000000100)) bind$inet6(r8, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x4c, &(0x7f0000000040)={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x1, 0x0, 0x0, 0x3, 0x0, @void}, '\x00\x00\x00\x00\x00\x00\x00\x00`\x00'}}}}}}}, 0x0) 5m4.604338489s ago: executing program 45 (id=6278): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) write$cgroup_devices(r0, 0x0, 0xffdd) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x40000000}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x63, @loopback, 0x7}, 0x1c) syz_open_procfs(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000001c0), &(0x7f0000000240)=0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/address_bits', 0x40000, 0x0) getdents64(r4, 0x0, 0x0) lseek(r4, 0x24, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @multicast1}}, 0xa, 0x0, 0xdd5, 0x7ff, 0x38fa8b00d923ddd5}, 0x9c) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x6, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) connect$unix(r5, &(0x7f00000001c0)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(r6, &(0x7f0000005200), 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x208, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_STAB={0x188, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x2, 0x6, 0x0, 0x2, 0x4, 0x200, 0x3}}, {0xa, 0x2, [0x5, 0x0, 0x8097]}}, {{0x1c, 0x1, {0x2, 0x80, 0x4, 0x0, 0x1, 0xc, 0x0, 0x6}}, {0x10, 0x2, [0x4, 0x0, 0x3, 0x0, 0x8001, 0xc]}}, {{0x1c, 0x1, {0x9, 0xf, 0x5c, 0x10, 0x0, 0x5, 0x9, 0x2}}, {0x8, 0x2, [0x8, 0x3]}}, {{0x1c, 0x1, {0xe, 0x8, 0x5, 0x0, 0x2, 0xffffffff, 0x8000, 0x4}}, {0xc, 0x2, [0x7, 0x8, 0x6, 0xc486]}}, {{0x1c, 0x1, {0x94, 0x6, 0xe59, 0xd, 0x1, 0xdbb2, 0xb91, 0x1}}, {0x6, 0x2, [0x71b]}}, {{0x1c, 0x1, {0x6, 0x2, 0x4, 0xe, 0x2, 0xe0, 0x6, 0x3}}, {0xa, 0x2, [0x1, 0x5, 0x7]}}, {{0x1c, 0x1, {0x2, 0x98, 0x7b, 0x5, 0x2, 0x783b, 0x7, 0x4}}, {0xc, 0x2, [0xd, 0x8, 0xaeea, 0x0]}}, {{0x1c, 0x1, {0xa, 0x2, 0x8, 0x0, 0xd8ab8ce4a7f28687, 0x8, 0x3858, 0x2}}, {0x8, 0x2, [0x2a7, 0x2]}}, {{0x1c, 0x1, {0x4c, 0x0, 0x1, 0x3, 0x0, 0x8, 0x8, 0x4}}, {0xc, 0x2, [0x4, 0x55, 0x1, 0x18b]}}, {{0x1c, 0x1, {0x10, 0xf3, 0xb527, 0x0, 0x2, 0x0, 0xd2f, 0x1}}, {0x6, 0x2, [0x7]}}]}, @qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{0x2, 0x800, 0xfffffffc, 0x8, 0x5, 0x1}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x9b59, 0x9294}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0xab1, 0x164}}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x8, 0x9, 0x9, 0x1, 0x3}}]}]}}}]}, 0x208}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 50.809439727s ago: executing program 7 (id=7534): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0x401, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7fffffff}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000004) 50.53512922s ago: executing program 7 (id=7537): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c00078008000640"], 0x5c}}, 0x20084884) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x300, 0x0, 0x10040003}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000280)={0x1, 0xd, 0x0, 0x2, 0x2, 0x53ecfbd8}) ioctl$PIO_SCRNMAP(r1, 0x4b41, 0x0) 50.225149735s ago: executing program 7 (id=7541): socket$inet6_icmp(0xa, 0x2, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="160000000000000004000000"], 0x48) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/4\x00') read$FUSE(r0, &(0x7f0000000480)={0x2020}, 0x2020) 49.581084339s ago: executing program 7 (id=7542): r0 = io_uring_setup(0x4822, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x3, 0xfb}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000380)='g', 0x1, 0x8812, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x10122, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 49.351075026s ago: executing program 7 (id=7545): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) r3 = dup2(r2, r2) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x40, 0xe, 0x1, 0x5, 0x10}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@local}}, &(0x7f0000000400)=0xe8) lstat(&(0x7f0000000440)='./file0\x00', 0x0) lchown(&(0x7f00000001c0)='./file0\x00', r4, 0x0) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) 49.020792372s ago: executing program 7 (id=7549): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x38}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) fanotify_init(0x200, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000000)=0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002380)=[{{0x0, 0x3f, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) 19.932031378s ago: executing program 8 (id=7691): socket(0x400000000010, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000080), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="0500000000e0ffffffffffff", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}}, 0x40000) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32], 0x48}}, 0x0) 19.811989743s ago: executing program 8 (id=7692): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept$unix(r1, 0x0, 0x0) 19.659521165s ago: executing program 8 (id=7694): socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x2000000000006, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42, 0x80}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}, @IFLA_XFRM_LINK={0x8, 0x1, 0x4}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x4048050) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x25, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x4000}, 0x90) 16.41977926s ago: executing program 2 (id=7703): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept$unix(r1, 0x0, 0x0) 16.126326609s ago: executing program 2 (id=7705): syz_open_dev$video4linux(&(0x7f00000001c0), 0x1000000000000401, 0x100) r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f00000012c0)='./binderfs2/binder1\x00', 0x800, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff, 0x5, 0x0, @val=@uprobe_multi={&(0x7f0000001240)='./file0\x00', &(0x7f0000001280)=[0x7fffffff, 0x1, 0x1, 0x3ff, 0x4, 0x8], &(0x7f00000012c0), 0xffffffffffff8000, 0x6}}, 0x40) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$kcm(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x80, 0x0, 0x1ff, 0x7d, 0x0, 0x0, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x40000000004, 0xf, 0x80000006}, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e24, @rand_addr=0x64010100}}, 0x200, 0x1, 0xfffffbff, 0x9, 0x1}, &(0x7f00000000c0)=0x98) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000100)={0x1, 0x144, 0x8, 0x216, 0x4, 0x7ff, 0x9, 0x1, r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r4, 0x6, 0xd, &(0x7f00000000c0), 0x4) setsockopt$sock_attach_bpf(r4, 0x1, 0x31, &(0x7f0000000000), 0x4) sendmsg$nl_xfrm(r0, &(0x7f00000011c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=@newspdinfo={0x3c, 0x24, 0x20, 0x70bd26, 0x25dfdbfc, 0x2, [@XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2408c880}, 0x48800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r3, 0x18000000000002a0, 0xfe2a, 0x0, &(0x7f0000001840)="b9ff0307683a268cb8091a99888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xffffffffffffffb9, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40011) mprotect(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x1) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, 0x0, 0x0) 11.759790982s ago: executing program 2 (id=7712): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) fcntl$lock(0xffffffffffffffff, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xffff}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0xfffffffffffffdb1, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) read$msr(r3, &(0x7f0000025300)=""/102392, 0x18ff8) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000406000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000a96000/0x2000)=nil) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x18) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010006030000000044000500fe880000000000000000000000000101000000003c00000002000000000000000000000000000000000000010600000004"], 0xfc}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x20) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9.526482205s ago: executing program 8 (id=7715): syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000002c0)={&(0x7f0000000580)=[{0xd5, 0x4c01, 0x0, 0x0}], 0x1}) 9.486313148s ago: executing program 2 (id=7716): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090527bd7000fcdbdf25021f00ff", @ANYRES32=r2, @ANYBLOB="0800040064010104080008000001000008000200e0000002080001040a0101020800090003000000080009"], 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x18}}, 0x0) syz_pidfd_open(0x0, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 9.383669738s ago: executing program 1 (id=7717): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8953, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x1, 0x20004840) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x420}, 0x1, 0x0, 0x0, 0x20004}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0xc, 0x5, 0x7, 0xc1}, 0x50) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400109d}, 0x4c855) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d000014000000f0ffffff0000000005000600000000000a0080ff00000000fc0100000000000000ffffffff000000000000000000000005000500000000000a000000000000000000000000000000000000000000080000000000000000000800120002000200000000000000000030002b0002"], 0xa0}}, 0x0) 9.28571008s ago: executing program 2 (id=7718): r0 = socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0x0) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000500)="14", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 9.224067621s ago: executing program 5 (id=7719): sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000006c0)="1dbd6f9c8e984fef0d3fec6e980353c78af818a54952d864dcf59c49ceceba5799c67186529a08", 0x27}], 0x1}}], 0x1, 0x404c840) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="0815000000051104000000000000000001000005540201"], 0x1508}, 0x1, 0x0, 0x0, 0x40000d0}, 0x10) writev(r0, &(0x7f0000000040), 0x2) 8.383219996s ago: executing program 5 (id=7720): syz_usb_connect(0x0, 0x1d4, &(0x7f0000000480)={{0x12, 0x1, 0x310, 0xd3, 0xc8, 0xd7, 0x10, 0xc45, 0x6288, 0xe54c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1c2, 0x2, 0x2, 0x7f, 0x10, 0x0, "", [{{0x9, 0x4, 0x1a, 0xa9, 0x3, 0x94, 0xcc, 0xad, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0x9, 0x33}, [@selector_unit={0x8, 0x24, 0x5, 0x4, 0x8, "817940"}, @selector_unit={0x5, 0x24, 0x5, 0x6, 0x18}, @output_terminal={0x9, 0x24, 0x3, 0x7, 0x405, 0x2, 0x4, 0x10}, @mixer_unit={0x7, 0x24, 0x4, 0x1, 0x6, '$:'}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x201, 0x4, 0x1, 0xfe6, 0x2, 0x5}]}], [{{0x9, 0x5, 0xf, 0x10, 0x3ff, 0x2, 0x2, 0x6}}, {{0x9, 0x5, 0xd, 0x10, 0x3ff, 0x2, 0x81, 0x2}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0xa2, 0x10, 0x4}}]}}, {{0x9, 0x4, 0x32, 0x8, 0x9, 0xff, 0xff, 0xff, 0x6, [], [{{0x9, 0x5, 0x9, 0x1, 0x8, 0x7, 0xb2, 0x1b, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0xd}, @generic={0x8, 0xb, "fd7c8c635b0e"}]}}, {{0x9, 0x5, 0xf, 0x14, 0x220, 0x1, 0xbd, 0xa1}}, {{0x9, 0x5, 0x83, 0x10, 0x40, 0xfc, 0x0, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x0, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x18, 0x79, 0x6}]}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0x9, 0x9, 0xb2, [@generic={0xd4, 0x0, "15aff66b4136ae54af134752b3a3f9a221f14987744ee59209ed8ede990eaf857cbc715113b20b34d3c6c441af70b64967f73891c986c5de221adc62e0aa739dffa230ca30c6fec6e889e266ce0a20ce9c9c6f0948f8173881cf6b9456f92042ea16275c0ea19512e18c2218de6d2b15f531f6f510b166f3d4e290058f5a7ab6aaad26001c96aa2edd0f88ddc771db6f8a021fabf61a023a07465e9b0ca10517b955b9ff3b8e75f23436c858040693e149f5d518ba23050c8fffc3699b5eaabce514e33814d1657aa19ef7acc3fc94f73dc1"}]}}, {{0x9, 0x5, 0xc, 0x2, 0x400, 0x80, 0x5, 0x1}}, {{0x9, 0x5, 0xb, 0x0, 0x40, 0x0, 0x6, 0x6}}, {{0x9, 0x5, 0x5, 0x0, 0x20, 0x2, 0x6, 0x6}}, {{0x9, 0x5, 0x4, 0x10, 0x200, 0x3, 0x6, 0xd, [@generic={0x10, 0x7, "166aaee4668cf12df742336414db"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x4, 0xfa}]}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x0, 0x5, 0xe0}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f00000008c0)={0xa, 0x6, 0x250, 0x2, 0x1, 0xe6, 0x78, 0x1c}, 0x5, &(0x7f0000000900)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x427}}, {0x63, &(0x7f00000009c0)=@string={0x63, 0x3, "811f71d69f0b78eb109a48d2cb20225cf2c04ba4b8b9c9aab56e18ea03fd12ae776e41e96bb3810111a300a5e2379a8c454642c38c622c2e7c421c50a2b56ae97fefa03a43ac9db4d2e6ff5535fe4173c2ed7791a072bd66c3b9b1c03c144d9da8"}}, {0x0, 0x0}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x1603}}]}) 7.694507572s ago: executing program 2 (id=7721): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = userfaultfd(0x801) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="8c45000043000701fefffffffcdbdf25017c000004004580744501"], 0x458c}, 0x1, 0x0, 0x0, 0xbbe21a6a6c087afd}, 0xc000) ioctl$UFFDIO_COPY(r1, 0xc028aa03, 0x0) 7.255011344s ago: executing program 8 (id=7722): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x4, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xc, 0xb}, {0xffe0, 0xffe0}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x3466}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x4890) 6.487628596s ago: executing program 1 (id=7723): r0 = socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0x0) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r5, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9e", 0x78}], 0x1}}, {{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000001040)="39e6f0f5240525bf127de94fe5cfc0b0f2c98c4ac8bf0568e948e0274b0445d03a56f1bfe147fb8ac1da60b16f07dbe40e90d68b4619d12165154b679949da907d460d298e92e0d24077e89d302255e0a9626f61e6dc304713126dd04ca5e168c8f7894d2d189c22945826101c5199f90c3734146364f2195120530ab5e42614a3cb5651b1fc7b17d61955840b5c9adbeffa334d38da282e42b01ea9d6b5a7", 0x9f}, {&(0x7f0000001100)}, {&(0x7f0000001200)="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", 0x35f}], 0x3, &(0x7f0000002340)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8004}}, @ip_retopts={{0x10}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}], 0x40}}, {{&(0x7f0000002440)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0xc054) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 6.381271899s ago: executing program 8 (id=7724): socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x2000000000006, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42, 0x80}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}, @IFLA_XFRM_LINK={0x8, 0x1, 0x4}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x4048050) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x25, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x4000}, 0x90) 6.327443136s ago: executing program 5 (id=7725): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) fcntl$lock(0xffffffffffffffff, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xffff}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0xfffffffffffffdb1, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) read$msr(r3, &(0x7f0000025300)=""/102392, 0x18ff8) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000406000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000a96000/0x2000)=nil) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x18) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010006030000000044000500fe880000000000000000000000000101000000003c00000002000000000000000000000000000000000000010600000004"], 0xfc}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x20) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.183909733s ago: executing program 1 (id=7726): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000580)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, 0x0, 0x0, 0x5}, 0x94) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0xf4e) writev(r3, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) 3.778764446s ago: executing program 1 (id=7727): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090527bd7000fcdbdf25021f00ff", @ANYRES32=r2, @ANYBLOB="0800040064010104080008000001000008000200e0000002080001040a0101020800090003000000080009"], 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x18}}, 0x0) syz_pidfd_open(0x0, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 2.792856603s ago: executing program 1 (id=7728): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x1, {0x2, 0xff, 0x4}, 0xfe}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x106, 0x8}}, 0x20) ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0245628, &(0x7f00000002c0)={0x0, 0x7, 0xb, '\x00', &(0x7f0000000280)=0x7}) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001440)={'veth1_to_batadv\x00'}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000000)={0x7bb4, {{0x2, 0x0, @multicast1}}}, 0x88) getsockopt$inet_buf(r2, 0x0, 0x30, &(0x7f0000001480)=""/4100, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8000) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) openat2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = syz_io_uring_setup(0x3f82, &(0x7f0000000080)={0x0, 0xecb0, 0x10000, 0x2, 0x1d8}, &(0x7f0000000280), &(0x7f0000000140), 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r5, 0x13, 0x0, 0x2) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_XSAVE2(r7, 0x9000aecf, &(0x7f00005c8000/0x3000)=nil) sched_setscheduler(r6, 0x6, &(0x7f00000013c0)=0x10001) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40880}, 0x0) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 2.367874241s ago: executing program 5 (id=7729): sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000006c0)="1dbd6f9c8e984fef0d3fec6e980353c78af818a54952d864dcf59c49ceceba5799c67186529a08", 0x27}], 0x1}}], 0x1, 0x404c840) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="0815000000051104000000000000000001000005540201"], 0x1508}, 0x1, 0x0, 0x0, 0x40000d0}, 0x10) writev(r0, &(0x7f0000000040), 0x2) 1.95276978s ago: executing program 5 (id=7730): r0 = socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0x0) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000500)="14", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 729.957737ms ago: executing program 5 (id=7731): syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000002c0)={&(0x7f0000000580)=[{0xd5, 0x4c01, 0x0, 0x0}], 0x1}) 0s ago: executing program 1 (id=7732): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8953, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x1, 0x20004840) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x420}, 0x1, 0x0, 0x0, 0x20004}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0xc, 0x5, 0x7, 0xc1}, 0x50) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400109d}, 0x4c855) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d000014000000f0ffffff0000000005000600000000000a0080ff00000000fc0100000000000000ffffffff000000000000000000000005000500000000000a000000000000000000000000000000000000000000080000000000000000000800120002000200000000000000000030002b0002"], 0xa0}}, 0x0) kernel console output (not intermixed with test programs): [ 1436.552268][ T5613] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1436.552288][ T5613] usb 9-1: Product: syz [ 1436.552301][ T5613] usb 9-1: Manufacturer: syz [ 1436.552314][ T5613] usb 9-1: SerialNumber: syz [ 1436.569508][ T5613] usb 9-1: config 0 descriptor?? [ 1436.623570][ T5613] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1436.623600][ T5613] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 1437.038458][T22030] Bluetooth: hci1: command tx timeout [ 1437.190114][ T5613] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 1437.408481][ T5613] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1437.408508][ T5613] em28xx 9-1:0.0: board has no eeprom [ 1437.549496][ T5613] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1437.549531][ T5613] em28xx 9-1:0.0: dvb set to bulk mode. [ 1437.550898][T13337] em28xx 9-1:0.0: Binding DVB extension [ 1437.669960][ T5613] usb 9-1: USB disconnect, device number 3 [ 1437.710934][ T5613] em28xx 9-1:0.0: Disconnecting em28xx [ 1437.974704][T13337] em28xx 9-1:0.0: Registering input extension [ 1437.981535][ T5613] em28xx 9-1:0.0: Closing input extension [ 1438.161143][ T5613] em28xx 9-1:0.0: Freeing device [ 1438.182972][T27282] fuse: Unknown parameter '00000000000000000000' [ 1439.115680][T22030] Bluetooth: hci1: command tx timeout [ 1439.171707][T27303] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6589'. [ 1439.651216][T27136] bridge0: port 1(bridge_slave_0) entered blocking state [ 1439.651338][T27136] bridge0: port 1(bridge_slave_0) entered disabled state [ 1439.651555][T27136] bridge_slave_0: entered allmulticast mode [ 1439.667282][T27136] bridge_slave_0: entered promiscuous mode [ 1439.850258][T27136] bridge0: port 2(bridge_slave_1) entered blocking state [ 1439.850336][T27136] bridge0: port 2(bridge_slave_1) entered disabled state [ 1439.850547][T27136] bridge_slave_1: entered allmulticast mode [ 1439.862502][T27136] bridge_slave_1: entered promiscuous mode [ 1440.148326][T27136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1440.166590][T27136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1440.321057][T27136] team0: Port device team_slave_0 added [ 1440.333959][T27136] team0: Port device team_slave_1 added [ 1440.492425][ T1442] bridge_slave_1: left allmulticast mode [ 1440.492458][ T1442] bridge_slave_1: left promiscuous mode [ 1440.492673][ T1442] bridge0: port 2(bridge_slave_1) entered disabled state [ 1440.527232][T27328] fuse: Unknown parameter '00000000000000000000' [ 1440.586414][ T1442] bridge_slave_0: left allmulticast mode [ 1440.586444][ T1442] bridge_slave_0: left promiscuous mode [ 1440.586665][ T1442] bridge0: port 1(bridge_slave_0) entered disabled state [ 1442.589848][ T1442] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1442.688723][ T1442] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1442.767916][ T1442] bond0 (unregistering): Released all slaves [ 1443.199549][T27136] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1443.199565][T27136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1443.199594][T27136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1443.411567][ T1442] hsr_slave_0: left promiscuous mode [ 1443.460948][ T1442] hsr_slave_1: left promiscuous mode [ 1443.461867][ T1442] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1443.510075][ T1442] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1443.631147][T27365] fuse: Unknown parameter '00000000000000000000' [ 1443.738475][ T1442] veth1_vlan: left promiscuous mode [ 1443.738626][ T1442] veth0_vlan: left promiscuous mode [ 1443.758301][ T37] audit: type=1800 audit(1777685286.925:704): pid=27370 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.6611" name="fd=,rootmode=000000000" dev="tmpfs" ino=913 res=0 errno=0 [ 1444.125243][ T5613] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1444.295441][ T5613] usb 3-1: Using ep0 maxpacket: 8 [ 1444.318035][ T5613] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1444.318073][ T5613] usb 3-1: config 0 has an invalid descriptor of length 133, skipping remainder of the config [ 1444.318094][ T5613] usb 3-1: config 0 has no interface number 0 [ 1444.318132][ T5613] usb 3-1: config 0 interface 55 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1444.318171][ T5613] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1444.318194][ T5613] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1444.403771][ T5613] usb 3-1: config 0 descriptor?? [ 1444.889961][ T5613] usb 3-1: string descriptor 0 read error: -71 [ 1444.913776][ T5613] ldusb 3-1:0.55: Interrupt in endpoint not found [ 1444.942423][ T5613] usb 3-1: USB disconnect, device number 51 [ 1445.408104][ T1442] team0 (unregistering): Port device team_slave_1 removed [ 1445.489511][ T1442] team0 (unregistering): Port device team_slave_0 removed [ 1445.811576][ T37] audit: type=1800 audit(1777685288.975:705): pid=27397 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.6621" name="0xffffffffffffffff,rootmode=000000000" dev="tmpfs" ino=925 res=0 errno=0 [ 1446.215302][T27136] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1446.215321][T27136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1446.215351][T27136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1446.581135][ T5613] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1446.629579][T27136] hsr_slave_0: entered promiscuous mode [ 1446.644847][T27136] hsr_slave_1: entered promiscuous mode [ 1446.664006][T27136] debugfs: 'hsr0' already exists in 'hsr' [ 1446.664034][T27136] Cannot create hsr debugfs directory [ 1446.822985][ T5613] usb 3-1: Using ep0 maxpacket: 8 [ 1446.835541][ T5613] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1446.835570][ T5613] usb 3-1: config 0 has no interface number 0 [ 1446.835618][ T5613] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1446.835645][ T5613] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1446.835674][ T5613] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1446.835702][ T5613] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1446.835747][ T5613] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1446.835772][ T5613] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1446.998504][ T5613] usb 3-1: config 0 descriptor?? [ 1447.058930][ T5613] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1447.070220][T27410] fuse: Unknown parameter '00000000000000000000' [ 1448.275264][T24979] usb 3-1: USB disconnect, device number 52 [ 1448.282389][T24979] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 1448.885026][ T37] audit: type=1800 audit(1777685292.045:706): pid=27434 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.7.6632" name="0xffffffffffffffff,rootmode=000000000" dev="tmpfs" ino=1835 res=0 errno=0 [ 1449.245372][T13337] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1449.415256][T13337] usb 9-1: Using ep0 maxpacket: 16 [ 1449.418680][T13337] usb 9-1: config 2 has an invalid interface number: 26 but max is 1 [ 1449.418702][T13337] usb 9-1: config 2 has an invalid interface number: 50 but max is 1 [ 1449.418723][T13337] usb 9-1: config 2 has no interface number 0 [ 1449.418739][T13337] usb 9-1: config 2 has no interface number 1 [ 1449.418783][T13337] usb 9-1: config 2 interface 26 altsetting 169 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 1449.418809][T13337] usb 9-1: config 2 interface 26 altsetting 169 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 1449.418834][T13337] usb 9-1: config 2 interface 26 altsetting 169 has an invalid descriptor for endpoint zero, skipping [ 1449.418875][T13337] usb 9-1: config 2 interface 50 altsetting 8 has a duplicate endpoint with address 0xF, skipping [ 1449.418900][T13337] usb 9-1: config 2 interface 50 altsetting 8 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 1449.418925][T13337] usb 9-1: config 2 interface 50 altsetting 8 bulk endpoint 0xC has invalid maxpacket 1024 [ 1449.418949][T13337] usb 9-1: config 2 interface 50 altsetting 8 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 1449.418975][T13337] usb 9-1: config 2 interface 50 altsetting 8 has a duplicate endpoint with address 0x9, skipping [ 1449.418996][T13337] usb 9-1: config 2 interface 50 altsetting 8 has a duplicate endpoint with address 0x4, skipping [ 1449.419019][T13337] usb 9-1: config 2 interface 50 altsetting 8 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 1449.419046][T13337] usb 9-1: config 2 interface 50 altsetting 8 has a duplicate endpoint with address 0xB, skipping [ 1449.419069][T13337] usb 9-1: config 2 interface 26 has no altsetting 0 [ 1449.419088][T13337] usb 9-1: config 2 interface 50 has no altsetting 0 [ 1449.449749][T13337] usb 9-1: Dual-Role OTG device on HNP port [ 1449.454004][T13337] usb 9-1: New USB device found, idVendor=0c45, idProduct=6288, bcdDevice=e5.4c [ 1449.454066][T13337] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1449.454121][T13337] usb 9-1: Manufacturer: ᾁ홱ட騐퉈⃋尢샲ꑋ릸꫉溵ﴃ긒湷덫Ɓꌑꔀ㟢貚䙅썂抌⸬䉼倜떢㪠걃뒝嗿︵獁酷犠暽맃삱ᐼ鵍 [ 1449.454183][T13337] usb 9-1: SerialNumber: ᘃ [ 1449.659311][ T5261] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1449.841846][ T37] audit: type=1326 audit(1777685293.005:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27435 comm="syz.8.6633" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88addacdd9 code=0x7ffc0000 [ 1449.847065][ T37] audit: type=1326 audit(1777685293.005:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27435 comm="syz.8.6633" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88addacdd9 code=0x7ffc0000 [ 1449.878011][ T37] audit: type=1326 audit(1777685293.015:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27435 comm="syz.8.6633" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f88addacdd9 code=0x7ffc0000 [ 1449.972733][T27437] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6633'. [ 1449.990771][ T37] audit: type=1326 audit(1777685293.085:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27435 comm="syz.8.6633" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88addacdd9 code=0x7ffc0000 [ 1449.990808][ T37] audit: type=1326 audit(1777685293.105:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27435 comm="syz.8.6633" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88addacdd9 code=0x7ffc0000 [ 1449.990838][ T37] audit: type=1326 audit(1777685293.135:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27435 comm="syz.8.6633" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f88addacdd9 code=0x7ffc0000 [ 1450.278358][T27461] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6639'. [ 1451.272935][T16022] bridge_slave_1: left allmulticast mode [ 1451.310147][T16022] bridge_slave_1: left promiscuous mode [ 1451.310991][T16022] bridge0: port 2(bridge_slave_1) entered disabled state [ 1451.388556][T16022] bridge_slave_0: left allmulticast mode [ 1451.388591][T16022] bridge_slave_0: left promiscuous mode [ 1451.389094][T16022] bridge0: port 1(bridge_slave_0) entered disabled state [ 1451.606115][T16022] tipc: Resetting bearer [ 1454.252738][T16022] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1454.451649][T16022] tipc: Disabling bearer [ 1454.946201][T16022] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1455.025760][T16022] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1455.184094][T16022] bond0 (unregistering): Released all slaves [ 1455.241275][T16022] bond1 (unregistering): Released all slaves [ 1455.496100][T24973] usb 9-1: USB disconnect, device number 4 [ 1455.947763][T16022] tipc: Left network mode [ 1458.027577][T16022] hsr_slave_0: left promiscuous mode [ 1458.045604][T16022] hsr_slave_1: left promiscuous mode [ 1458.048163][T16022] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1458.048190][T16022] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1458.111829][T16022] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1458.111848][T16022] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1458.434523][T16022] veth1_macvtap: left promiscuous mode [ 1458.434640][T16022] veth0_macvtap: left promiscuous mode [ 1458.434915][T16022] veth1_vlan: left promiscuous mode [ 1458.460133][T16022] veth0_vlan: left promiscuous mode [ 1459.579235][T16022] team0 (unregistering): Port device team_slave_1 removed [ 1459.808982][T16022] team0 (unregistering): Port device team_slave_0 removed [ 1460.134273][ T5261] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1460.731898][T27621] netlink: 'syz.7.6679': attribute type 2 has an invalid length. [ 1460.756293][ T37] audit: type=1800 audit(1777685303.915:713): pid=27620 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.6678" name="fd0xffffffffffffffff,rootmode=000000000" dev="tmpfs" ino=158 res=0 errno=0 [ 1461.051971][T27136] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1461.191447][T27136] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1461.193065][T27136] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1461.315214][ T31] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1461.371506][T27136] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1461.379566][T27136] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1461.459386][T27136] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1461.463662][T27136] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1461.479129][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 1461.483234][ T31] usb 2-1: config 2 has an invalid interface number: 26 but max is 1 [ 1461.483262][ T31] usb 2-1: config 2 has an invalid interface number: 50 but max is 1 [ 1461.483285][ T31] usb 2-1: config 2 has no interface number 0 [ 1461.483301][ T31] usb 2-1: config 2 has no interface number 1 [ 1461.483358][ T31] usb 2-1: config 2 interface 26 altsetting 169 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 1461.483386][ T31] usb 2-1: config 2 interface 26 altsetting 169 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 1461.483412][ T31] usb 2-1: config 2 interface 26 altsetting 169 has an invalid descriptor for endpoint zero, skipping [ 1461.483448][ T31] usb 2-1: config 2 interface 50 altsetting 8 has a duplicate endpoint with address 0xF, skipping [ 1461.483472][ T31] usb 2-1: config 2 interface 50 altsetting 8 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 1461.483499][ T31] usb 2-1: config 2 interface 50 altsetting 8 bulk endpoint 0xC has invalid maxpacket 1024 [ 1461.483526][ T31] usb 2-1: config 2 interface 50 altsetting 8 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 1461.483550][ T31] usb 2-1: config 2 interface 50 altsetting 8 has a duplicate endpoint with address 0x9, skipping [ 1461.483572][ T31] usb 2-1: config 2 interface 50 altsetting 8 has a duplicate endpoint with address 0x4, skipping [ 1461.483595][ T31] usb 2-1: config 2 interface 50 altsetting 8 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 1461.483623][ T31] usb 2-1: config 2 interface 50 altsetting 8 has a duplicate endpoint with address 0xB, skipping [ 1461.483644][ T31] usb 2-1: config 2 interface 26 has no altsetting 0 [ 1461.483662][ T31] usb 2-1: config 2 interface 50 has no altsetting 0 [ 1461.652860][ T31] usb 2-1: Dual-Role OTG device on HNP port [ 1461.659885][ T31] usb 2-1: New USB device found, idVendor=0c45, idProduct=6288, bcdDevice=e5.4c [ 1461.659927][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1461.659949][ T31] usb 2-1: Manufacturer: ᾁ홱ட騐퉈⃋尢샲ꑋ릸꫉溵ﴃ긒湷덫Ɓꌑꔀ㟢貚䙅썂抌⸬䉼倜떢㪠걃뒝嗿︵獁酷犠暽맃삱ᐼ鵍 [ 1461.659973][ T31] usb 2-1: SerialNumber: ᘃ [ 1461.827007][T27136] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1461.965349][ T37] audit: type=1326 audit(1777685305.125:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27629 comm="syz.1.6682" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9179cdd9 code=0x7ffc0000 [ 1461.965412][ T37] audit: type=1326 audit(1777685305.125:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27629 comm="syz.1.6682" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9179cdd9 code=0x7ffc0000 [ 1461.965520][ T37] audit: type=1326 audit(1777685305.125:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27629 comm="syz.1.6682" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4f9179cdd9 code=0x7ffc0000 [ 1461.965568][ T37] audit: type=1326 audit(1777685305.125:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27629 comm="syz.1.6682" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9179cdd9 code=0x7ffc0000 [ 1461.968567][ T37] audit: type=1326 audit(1777685305.135:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27629 comm="syz.1.6682" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9179cdd9 code=0x7ffc0000 [ 1461.973844][ T37] audit: type=1326 audit(1777685305.135:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27629 comm="syz.1.6682" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4f9179cdd9 code=0x7ffc0000 [ 1461.974533][ T37] audit: type=1326 audit(1777685305.135:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27629 comm="syz.1.6682" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9179cdd9 code=0x7ffc0000 [ 1461.975007][ T37] audit: type=1326 audit(1777685305.135:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27629 comm="syz.1.6682" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9179cdd9 code=0x7ffc0000 [ 1462.000346][ T37] audit: type=1326 audit(1777685305.165:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27629 comm="syz.1.6682" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4f9179cdd9 code=0x7ffc0000 [ 1462.000481][T27630] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6682'. [ 1462.279165][ T31] usb 2-1: USB disconnect, device number 5 [ 1462.732543][ T5261] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1462.780550][T27136] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1462.922942][T27136] 8021q: adding VLAN 0 to HW filter on device team0 [ 1462.960180][T16022] bridge0: port 1(bridge_slave_0) entered blocking state [ 1462.960274][T16022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1463.061439][T11430] bridge0: port 2(bridge_slave_1) entered blocking state [ 1463.061660][T11430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1463.266760][T27677] netlink: 'syz.8.6692': attribute type 2 has an invalid length. [ 1464.686607][ T5261] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1464.836855][T13053] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1464.995771][T13053] usb 2-1: Using ep0 maxpacket: 8 [ 1464.997561][T13053] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 1464.997579][T13053] usb 2-1: config 0 has no interface number 0 [ 1464.997619][T13053] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1464.997636][T13053] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1464.997655][T13053] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1464.997674][T13053] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1464.997704][T13053] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1464.997721][T13053] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1465.004096][T13053] usb 2-1: config 0 descriptor?? [ 1465.280192][T13053] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1465.301248][T13053] usb 2-1: USB disconnect, device number 6 [ 1465.314720][T13053] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 1465.561994][T27136] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1466.340919][T27743] netlink: 'syz.7.6704': attribute type 2 has an invalid length. [ 1466.903793][T27136] veth0_vlan: entered promiscuous mode [ 1466.946019][T27136] veth1_vlan: entered promiscuous mode [ 1467.115430][T13053] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1467.258027][T27136] veth0_macvtap: entered promiscuous mode [ 1467.275216][T13053] usb 9-1: Using ep0 maxpacket: 16 [ 1467.276581][T13053] usb 9-1: too many configurations: 123, using maximum allowed: 8 [ 1467.279613][T13053] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1467.283244][T13053] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1467.351858][T13053] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1467.385259][T13053] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1467.391384][T27136] veth1_macvtap: entered promiscuous mode [ 1467.411143][T13053] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1467.436693][T13053] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1467.438761][T13053] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1467.442848][T13053] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1467.478599][T13053] usb 9-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1467.478626][T13053] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 1467.478646][T13053] usb 9-1: SerialNumber: syz [ 1467.548213][T27136] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1467.549538][T13053] usb 9-1: config 0 descriptor?? [ 1467.590425][T13053] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input40 [ 1467.691968][T27136] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1467.804311][T11429] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1467.848631][ T1319] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1467.848752][ T1319] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1467.848796][ T1319] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1469.421027][ T1442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1469.421067][ T1442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1469.969651][ T4951] bcm5974 9-1:0.0: could not read from device [ 1470.191032][ T1132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1470.191053][ T1132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1470.269148][ T4951] bcm5974 9-1:0.0: could not read from device [ 1470.291098][T13053] usb 9-1: USB disconnect, device number 5 [ 1470.694898][T27801] : renamed from vlan0 (while UP) [ 1470.908800][T27808] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6723'. [ 1470.947175][T27811] netlink: 'syz.1.6725': attribute type 2 has an invalid length. [ 1472.118119][T27853] netlink: 'syz.2.6738': attribute type 2 has an invalid length. [ 1473.204972][T27896] kAFS: unable to lookup cell '' [ 1473.222209][T27897] netlink: 'syz.7.6753': attribute type 2 has an invalid length. [ 1478.239334][T28046] vxcan1: tx drop: invalid da for name 0x0000000000000001 [ 1478.436554][ T1755] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1478.605259][ T1755] usb 3-1: Using ep0 maxpacket: 8 [ 1478.609342][ T1755] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1478.609381][ T1755] usb 3-1: config 0 has no interface number 0 [ 1478.609427][ T1755] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1478.609452][ T1755] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1478.609481][ T1755] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1478.609507][ T1755] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1478.609555][ T1755] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1478.609579][ T1755] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1478.661312][ T1755] usb 3-1: config 0 descriptor?? [ 1478.755738][ T1755] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1479.266993][T24973] usb 3-1: USB disconnect, device number 53 [ 1479.322204][T24973] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 1479.415189][ T1755] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1479.571210][ T1755] usb 9-1: Using ep0 maxpacket: 16 [ 1479.572438][ T1755] usb 9-1: too many configurations: 123, using maximum allowed: 8 [ 1479.574670][ T1755] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1479.578417][ T1755] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1479.617251][ T1755] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1479.667949][ T1755] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1479.670463][ T1755] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1479.676290][ T1755] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1479.731051][ T1755] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1479.761392][ T1755] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1479.787699][ T1755] usb 9-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1479.787730][ T1755] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 1479.787751][ T1755] usb 9-1: SerialNumber: syz [ 1479.831298][ T1755] usb 9-1: config 0 descriptor?? [ 1479.894916][ T1755] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input42 [ 1480.145909][ T37] kauditd_printk_skb: 3 callbacks suppressed [ 1480.145929][ T37] audit: type=1800 audit(1777685323.315:726): pid=28097 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.5.6814" name="bus" dev="tmpfs" ino=115 res=0 errno=0 [ 1480.580936][ T4951] bcm5974 9-1:0.0: could not read from device [ 1480.640063][ T1755] usb 9-1: USB disconnect, device number 6 [ 1481.456073][T28123] vxcan1: tx drop: invalid da for name 0x0000000000000001 [ 1481.721828][ T37] audit: type=1800 audit(1777685324.885:727): pid=28143 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.6828" name="bus" dev="tmpfs" ino=340 res=0 errno=0 [ 1482.514460][T28167] fuse: Bad value for 'user_id' [ 1482.514480][T28167] fuse: Bad value for 'user_id' [ 1482.515838][ T1755] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1482.665296][ T1755] usb 6-1: Using ep0 maxpacket: 16 [ 1482.666062][ T1755] usb 6-1: too many configurations: 123, using maximum allowed: 8 [ 1482.667245][ T1755] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1482.668572][ T1755] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1482.669856][ T1755] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1482.671078][ T1755] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1482.672270][ T1755] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1482.673566][ T1755] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1482.674636][ T1755] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1482.767756][ T1755] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1482.773075][ T1755] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1482.773108][ T1755] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 1482.773130][ T1755] usb 6-1: SerialNumber: syz [ 1482.791373][ T1755] usb 6-1: config 0 descriptor?? [ 1482.824070][ T1755] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input44 [ 1483.407003][ T4951] bcm5974 6-1:0.0: could not read from device [ 1483.561121][ T1755] usb 6-1: USB disconnect, device number 2 [ 1483.561545][ T4951] bcm5974 6-1:0.0: could not read from device [ 1484.134044][T28191] vxcan1: tx drop: invalid da for name 0x0000000000000001 [ 1484.401291][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.147242][T28234] binder: 28233:28234 ioctl 4018620d 0 returned -22 [ 1485.465217][ T1755] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1485.645183][ T1755] usb 9-1: Using ep0 maxpacket: 16 [ 1485.646073][ T1755] usb 9-1: too many configurations: 123, using maximum allowed: 8 [ 1485.647479][ T1755] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1485.648802][ T1755] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1485.651553][ T1755] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1485.653860][ T1755] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1485.679522][ T1755] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1485.727286][ T1755] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1485.731739][ T1755] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1485.787349][ T1755] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1485.792521][ T1755] usb 9-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1485.792553][ T1755] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 1485.792575][ T1755] usb 9-1: SerialNumber: syz [ 1485.878844][ T1755] usb 9-1: config 0 descriptor?? [ 1485.953066][ T1755] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input46 [ 1486.200630][T28239] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1486.478243][ T4951] bcm5974 9-1:0.0: could not read from device [ 1486.539814][ T1755] usb 9-1: USB disconnect, device number 7 [ 1486.555859][ T4951] bcm5974 9-1:0.0: could not read from device [ 1486.770108][T28249] vxcan1: tx drop: invalid da for name 0x0000000000000001 [ 1487.387868][T28295] binder: 28294:28295 ioctl 4018620d 0 returned -22 [ 1487.502707][T28301] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6872'. [ 1487.502730][T28301] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6872'. [ 1487.574067][T28301] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6872'. [ 1487.574094][T28301] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6872'. [ 1487.574217][T16022] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1487.617367][T11429] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1487.617417][T11429] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1487.617452][T11429] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1487.979605][T28311] netlink: 'syz.1.6876': attribute type 2 has an invalid length. [ 1488.022254][T28309] netlink: 136 bytes leftover after parsing attributes in process `syz.5.6875'. [ 1488.022301][T28309] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 1488.273596][T28319] kAFS: unable to lookup cell '' [ 1488.986617][ T5733] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1489.125502][T28321] vxcan1: tx drop: invalid da for name 0x0000000000000001 [ 1489.136722][ T5733] usb 3-1: Using ep0 maxpacket: 8 [ 1489.165808][ T5733] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1489.165836][ T5733] usb 3-1: config 0 has an invalid descriptor of length 133, skipping remainder of the config [ 1489.165858][ T5733] usb 3-1: config 0 has no interface number 0 [ 1489.165903][ T5733] usb 3-1: config 0 interface 55 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1489.165947][ T5733] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1489.165972][ T5733] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1489.250728][ T5733] usb 3-1: config 0 descriptor?? [ 1489.464353][T28348] binder: 28347:28348 ioctl 4018620d 0 returned -22 [ 1489.548902][ T5733] usb 3-1: string descriptor 0 read error: -71 [ 1489.553344][ T5733] ldusb 3-1:0.55: Interrupt in endpoint not found [ 1489.588480][ T5733] usb 3-1: USB disconnect, device number 54 [ 1490.473516][ T5261] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1491.437904][ T10] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1491.597029][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 1491.603429][ T10] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1491.603454][ T10] usb 3-1: config 0 has no interface number 0 [ 1491.603510][ T10] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1491.603533][ T10] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1491.603558][ T10] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1491.603583][ T10] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1491.603622][ T10] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1491.603644][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1491.689297][ T10] usb 3-1: config 0 descriptor?? [ 1491.829542][ T10] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1492.209682][ T5733] usb 3-1: USB disconnect, device number 55 [ 1492.247788][ T5733] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 1493.027840][T28408] warn_alloc: 1 callbacks suppressed [ 1493.027860][T28408] syz.5.6900: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1493.027930][T28408] CPU: 1 UID: 0 PID: 28408 Comm: syz.5.6900 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1493.027977][T28408] Tainted: [L]=SOFTLOCKUP [ 1493.027985][T28408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1493.027999][T28408] Call Trace: [ 1493.028016][T28408] [ 1493.028026][T28408] dump_stack_lvl+0xe8/0x150 [ 1493.028059][T28408] warn_alloc+0x263/0x3e0 [ 1493.028096][T28408] ? stack_trace_save+0xa9/0x100 [ 1493.028129][T28408] ? __pfx_warn_alloc+0x10/0x10 [ 1493.028165][T28408] ? kasan_save_track+0x4f/0x80 [ 1493.028186][T28408] ? kasan_save_track+0x3e/0x80 [ 1493.028206][T28408] ? __kasan_kmalloc+0x93/0xb0 [ 1493.028229][T28408] ? xskq_create+0x56/0x170 [ 1493.028249][T28408] ? xsk_init_queue+0x8a/0xe0 [ 1493.028281][T28408] ? xsk_setsockopt+0x54c/0x990 [ 1493.028311][T28408] ? do_sock_setsockopt+0x17c/0x1b0 [ 1493.028342][T28408] __vmalloc_node_range_noprof+0x132/0x1750 [ 1493.028404][T28408] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1493.028459][T28408] ? __kasan_kmalloc+0x93/0xb0 [ 1493.028489][T28408] vmalloc_user_noprof+0xad/0xe0 [ 1493.028516][T28408] ? xskq_create+0xbf/0x170 [ 1493.028539][T28408] xskq_create+0xbf/0x170 [ 1493.028565][T28408] xsk_init_queue+0x8a/0xe0 [ 1493.028603][T28408] xsk_setsockopt+0x54c/0x990 [ 1493.028640][T28408] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1493.028689][T28408] ? __fget_files+0x2a/0x420 [ 1493.028710][T28408] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1493.028735][T28408] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1493.028769][T28408] do_sock_setsockopt+0x17c/0x1b0 [ 1493.028804][T28408] __x64_sys_setsockopt+0x143/0x1b0 [ 1493.028836][T28408] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1493.028863][T28408] do_syscall_64+0x15f/0xf80 [ 1493.028887][T28408] ? trace_irq_disable+0x3b/0x140 [ 1493.028915][T28408] ? clear_bhb_loop+0x40/0x90 [ 1493.028944][T28408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1493.028968][T28408] RIP: 0033:0x7f648b67cdd9 [ 1493.028991][T28408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1493.029019][T28408] RSP: 002b:00007f64898b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1493.029042][T28408] RAX: ffffffffffffffda RBX: 00007f648b8f6090 RCX: 00007f648b67cdd9 [ 1493.029060][T28408] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 1493.029074][T28408] RBP: 00007f648b712d69 R08: 0000000000000029 R09: 0000000000000000 [ 1493.029089][T28408] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1493.029104][T28408] R13: 00007f648b8f6128 R14: 00007f648b8f6090 R15: 00007fff94260ee8 [ 1493.029140][T28408] [ 1493.029162][T28408] Mem-Info: [ 1493.029173][T28408] active_anon:576 inactive_anon:7321 isolated_anon:0 [ 1493.029173][T28408] active_file:21775 inactive_file:2604 isolated_file:0 [ 1493.029173][T28408] unevictable:2809 dirty:293 writeback:0 [ 1493.029173][T28408] slab_reclaimable:12311 slab_unreclaimable:119671 [ 1493.029173][T28408] mapped:30042 shmem:1819 pagetables:1640 [ 1493.029173][T28408] sec_pagetables:0 bounce:0 [ 1493.029173][T28408] kernel_misc_reclaimable:0 [ 1493.029173][T28408] free:1314155 free_pcp:2906 free_cma:0 [ 1493.029237][T28408] Node 0 active_anon:2304kB inactive_anon:29284kB active_file:87080kB inactive_file:10268kB unevictable:9700kB isolated(anon):0kB isolated(file):0kB mapped:120160kB dirty:1172kB writeback:0kB shmem:5740kB kernel_stack:13988kB pagetables:6412kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1493.031684][T28408] Node 1 active_anon:0kB inactive_anon:0kB active_file:20kB inactive_file:148kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:96kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1493.031745][T28408] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1493.031812][T28408] lowmem_reserve[]: 0 2506 2506 2506 2506 [ 1493.031853][T28408] Node 0 DMA32 free:1311920kB boost:0kB min:3928kB low:6464kB high:9000kB reserved_highatomic:0KB free_highatomic:0KB active_anon:2304kB inactive_anon:29384kB active_file:87080kB inactive_file:10268kB unevictable:9700kB writepending:1172kB zspages:0kB present:3129332kB managed:2566592kB mlocked:8164kB bounce:0kB free_pcp:11580kB local_pcp:2844kB free_cma:0kB [ 1493.031923][T28408] lowmem_reserve[]: 0 0 0 0 0 [ 1493.031961][T28408] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:216kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1493.032034][T28408] lowmem_reserve[]: 0 0 0 0 0 [ 1493.032073][T28408] Node 1 Normal free:3929340kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:20kB inactive_file:148kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1493.032142][T28408] lowmem_reserve[]: 0 0 0 0 0 [ 1493.032180][T28408] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1493.032315][T28408] Node 0 DMA32: 3159*4kB (UME) 5203*8kB (UME) 3904*16kB (UME) 824*32kB (UME) 602*64kB (UM) 852*128kB (UME) 671*256kB (UME) 409*512kB (UME) 203*1024kB (UME) 49*2048kB (UM) 81*4096kB (UM) = 1311860kB [ 1493.032515][T28408] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1493.032631][T28408] Node 1 Normal: 3*4kB (U) 8*8kB (UM) 5*16kB (U) 3*32kB (UM) 6*64kB (UM) 5*128kB (UM) 2*256kB (M) 3*512kB (UM) 2*1024kB (UM) 0*2048kB 958*4096kB (UM) = 3929340kB [ 1493.032803][T28408] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1493.032824][T28408] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1493.032854][T28408] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1493.032873][T28408] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1493.032892][T28408] 26070 total pagecache pages [ 1493.032901][T28408] 1 pages in swap cache [ 1493.032909][T28408] Free swap = 124996kB [ 1493.032917][T28408] Total swap = 124996kB [ 1493.032926][T28408] 2097051 pages RAM [ 1493.032934][T28408] 0 pages HighMem/MovableOnly [ 1493.032942][T28408] 423734 pages reserved [ 1493.032952][T28408] 0 pages cma reserved [ 1494.385470][T13053] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1494.463107][ T37] audit: type=1800 audit(1777685337.625:728): pid=28452 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.7.6912" name="bus" dev="tmpfs" ino=2190 res=0 errno=0 [ 1494.535421][T13053] usb 6-1: Using ep0 maxpacket: 16 [ 1494.541684][T13053] usb 6-1: config 2 has an invalid interface number: 26 but max is 1 [ 1494.541705][T13053] usb 6-1: config 2 has an invalid interface number: 50 but max is 1 [ 1494.541722][T13053] usb 6-1: config 2 has no interface number 0 [ 1494.541734][T13053] usb 6-1: config 2 has no interface number 1 [ 1494.541775][T13053] usb 6-1: config 2 interface 26 altsetting 169 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 1494.541796][T13053] usb 6-1: config 2 interface 26 altsetting 169 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 1494.541817][T13053] usb 6-1: config 2 interface 26 altsetting 169 has an invalid descriptor for endpoint zero, skipping [ 1494.541894][T13053] usb 6-1: config 2 interface 50 altsetting 8 has a duplicate endpoint with address 0xF, skipping [ 1494.541996][T13053] usb 6-1: config 2 interface 50 altsetting 8 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 1494.542032][T13053] usb 6-1: config 2 interface 50 altsetting 8 bulk endpoint 0xC has invalid maxpacket 1024 [ 1494.542053][T13053] usb 6-1: config 2 interface 50 altsetting 8 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 1494.542072][T13053] usb 6-1: config 2 interface 50 altsetting 8 has a duplicate endpoint with address 0x9, skipping [ 1494.542090][T13053] usb 6-1: config 2 interface 50 altsetting 8 has a duplicate endpoint with address 0x4, skipping [ 1494.542107][T13053] usb 6-1: config 2 interface 50 altsetting 8 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 1494.542141][T13053] usb 6-1: config 2 interface 50 altsetting 8 has a duplicate endpoint with address 0xB, skipping [ 1494.542157][T13053] usb 6-1: config 2 interface 26 has no altsetting 0 [ 1494.542171][T13053] usb 6-1: config 2 interface 50 has no altsetting 0 [ 1494.724451][T13053] usb 6-1: Dual-Role OTG device on HNP port [ 1494.724871][T13053] usb 6-1: New USB device found, idVendor=0c45, idProduct=6288, bcdDevice=e5.4c [ 1494.724891][T13053] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1494.724905][T13053] usb 6-1: Manufacturer: ᾁ홱ட騐퉈⃋尢샲ꑋ릸꫉溵ﴃ긒湷덫Ɓꌑꔀ㟢貚䙅썂抌⸬䉼倜떢㪠걃뒝嗿︵獁酷犠暽맃삱ᐼ鵍 [ 1494.724923][T13053] usb 6-1: SerialNumber: ᘃ [ 1495.050227][ T37] audit: type=1326 audit(1777685338.215:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28435 comm="syz.5.6909" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648b67cdd9 code=0x7ffc0000 [ 1495.054374][ T37] audit: type=1326 audit(1777685338.215:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28435 comm="syz.5.6909" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648b67cdd9 code=0x7ffc0000 [ 1495.082413][ T37] audit: type=1326 audit(1777685338.225:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28435 comm="syz.5.6909" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f648b67cdd9 code=0x7ffc0000 [ 1495.130534][ T37] audit: type=1326 audit(1777685338.265:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28435 comm="syz.5.6909" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648b67cdd9 code=0x7ffc0000 [ 1495.188064][T28437] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6909'. [ 1495.207151][ T37] audit: type=1326 audit(1777685338.315:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28435 comm="syz.5.6909" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f648b67cdd9 code=0x7ffc0000 [ 1495.207628][ T37] audit: type=1326 audit(1777685338.345:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28435 comm="syz.5.6909" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648b67cdd9 code=0x7ffc0000 [ 1495.207682][ T37] audit: type=1326 audit(1777685338.345:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28435 comm="syz.5.6909" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648b67cdd9 code=0x7ffc0000 [ 1495.208937][ T37] audit: type=1326 audit(1777685338.345:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28435 comm="syz.5.6909" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f648b67cdd9 code=0x7ffc0000 [ 1495.208977][ T37] audit: type=1326 audit(1777685338.355:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28435 comm="syz.5.6909" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648b67cdd9 code=0x7ffc0000 [ 1495.553161][T13053] usb 6-1: USB disconnect, device number 3 [ 1497.419673][T28484] vxcan1: tx drop: invalid da for name 0x0000000000000001 [ 1499.391175][T28539] program syz.8.6935 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1500.555827][ T5261] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1500.940322][ T37] kauditd_printk_skb: 6 callbacks suppressed [ 1500.940346][ T37] audit: type=1800 audit(1777685344.095:744): pid=28572 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.6944" name="bus" dev="tmpfs" ino=483 res=0 errno=0 [ 1501.939945][T22030] Bluetooth: hci7: command 0x0406 tx timeout [ 1501.939986][T22030] Bluetooth: hci6: command 0x0406 tx timeout [ 1504.777144][T28591] loop5: detected capacity change from 0 to 7 [ 1504.889689][T28591] Dev loop5: unable to read RDB block 7 [ 1504.889714][T28591] loop5: AHDI p1 p2 p3 [ 1504.889734][T28591] loop5: partition table partially beyond EOD, truncated [ 1504.889915][T28591] loop5: p1 start 7562610 is beyond EOD, truncated [ 1504.889930][T28591] loop5: p2 start 1702059890 is beyond EOD, truncated [ 1506.018852][ T5261] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1506.266676][ T37] audit: type=1800 audit(1777685349.435:745): pid=28618 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.7.6956" name="bus" dev="tmpfs" ino=2262 res=0 errno=0 [ 1506.611350][T28605] vxcan1: tx drop: invalid da for name 0x0000000000000001 [ 1508.220632][ T5261] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1508.515217][ T31] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1508.979465][T28676] vlan0: entered promiscuous mode [ 1508.979541][T28676] bridge0: entered promiscuous mode [ 1509.665217][ T31] usb 9-1: Using ep0 maxpacket: 32 [ 1509.667809][ T31] usb 9-1: config index 0 descriptor too short (expected 156, got 27) [ 1509.667848][ T31] usb 9-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1509.667887][ T31] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1509.667913][ T31] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 42299, setting to 1024 [ 1509.667940][ T31] usb 9-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1509.667967][ T31] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1509.671620][ T31] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1509.671645][ T31] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1509.671666][ T31] usb 9-1: Product: syz [ 1509.671679][ T31] usb 9-1: Manufacturer: syz [ 1509.671693][ T31] usb 9-1: SerialNumber: syz [ 1509.791944][ T31] usb 9-1: config 0 descriptor?? [ 1509.793155][T28674] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1509.830182][ T31] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1509.844796][ T31] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1510.073058][T28684] syz_tun: entered allmulticast mode [ 1510.155462][T28678] vxcan1: tx drop: invalid da for name 0x0000000000000001 [ 1510.664260][T28693] syzkaller0: entered promiscuous mode [ 1510.664299][T28693] syzkaller0: entered allmulticast mode [ 1511.118338][ C0] raw-gadget.1 gadget.8: ignoring, device is not running [ 1511.153357][ T31] usb 9-1: USB disconnect, device number 8 [ 1511.153539][ C0] ldusb 9-1:0.0: usb_submit_urb failed (-19) [ 1511.188285][T28674] ldusb 9-1:0.0: Couldn't submit HID_REQ_SET_REPORT -32 [ 1511.211407][ T31] ldusb 9-1:0.0: LD USB Device #0 now disconnected [ 1513.989030][T28683] syz_tun: left allmulticast mode [ 1515.284465][T11428] kworker/u8:10 (11428) used greatest stack depth: 14912 bytes left [ 1516.889380][T28781] vxcan1: tx drop: invalid da for name 0x0000000000000001 [ 1516.937172][T28796] syz_tun: entered allmulticast mode [ 1519.915573][T28841] fuse: Unknown parameter '00000000000000000000' [ 1519.939454][T28796] syz_tun: left allmulticast mode [ 1520.165676][T28851] netlink: 48 bytes leftover after parsing attributes in process `syz.7.7027'. [ 1520.503371][T28835] vxcan1: tx drop: invalid da for name 0x0000000000000001 [ 1521.889194][T28878] syz_tun: entered allmulticast mode [ 1521.902291][T28877] syz_tun: left allmulticast mode [ 1522.352806][T28898] lo speed is unknown, defaulting to 1000 [ 1522.352889][T28898] lo speed is unknown, defaulting to 1000 [ 1522.356074][T28898] lo speed is unknown, defaulting to 1000 [ 1522.358254][T28898] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1522.358279][T28898] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1522.358308][T28898] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1522.362100][T28898] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1522.371194][T28898] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1522.413663][T28898] lo speed is unknown, defaulting to 1000 [ 1522.415622][T28898] lo speed is unknown, defaulting to 1000 [ 1522.417705][T28898] lo speed is unknown, defaulting to 1000 [ 1522.419551][T28898] lo speed is unknown, defaulting to 1000 [ 1522.421344][T28898] lo speed is unknown, defaulting to 1000 [ 1522.423045][T28898] lo speed is unknown, defaulting to 1000 [ 1522.536894][T28898] smbdirect: ib_dev[syz2] removed [ 1523.518362][T28909] vxcan1: tx drop: invalid da for name 0x0000000000000001 [ 1523.708361][T28931] syzkaller0: entered promiscuous mode [ 1523.708388][T28931] syzkaller0: entered allmulticast mode [ 1524.215661][T28945] syz_tun: entered allmulticast mode [ 1524.250836][T28944] syz_tun: left allmulticast mode [ 1524.657430][T28959] overlayfs: missing 'lowerdir' [ 1528.341509][T28975] vxcan1: tx drop: invalid da for name 0x0000000000000001 [ 1528.973726][T29011] syz_tun: entered allmulticast mode [ 1528.987635][T29010] syz_tun: left allmulticast mode [ 1529.129138][T28967] syz.8.7058: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1529.129242][T28967] CPU: 1 UID: 0 PID: 28967 Comm: syz.8.7058 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1529.129276][T28967] Tainted: [L]=SOFTLOCKUP [ 1529.129284][T28967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1529.129298][T28967] Call Trace: [ 1529.129306][T28967] [ 1529.129317][T28967] dump_stack_lvl+0xe8/0x150 [ 1529.129351][T28967] warn_alloc+0x263/0x3e0 [ 1529.129382][T28967] ? stack_trace_save+0xa9/0x100 [ 1529.129413][T28967] ? __pfx_warn_alloc+0x10/0x10 [ 1529.129448][T28967] ? kasan_save_track+0x4f/0x80 [ 1529.129468][T28967] ? kasan_save_track+0x3e/0x80 [ 1529.129489][T28967] ? __kasan_kmalloc+0x93/0xb0 [ 1529.129511][T28967] ? xskq_create+0x56/0x170 [ 1529.129531][T28967] ? xsk_init_queue+0x8a/0xe0 [ 1529.129562][T28967] ? xsk_setsockopt+0x54c/0x990 [ 1529.129598][T28967] ? do_sock_setsockopt+0x17c/0x1b0 [ 1529.129648][T28967] __vmalloc_node_range_noprof+0x132/0x1750 [ 1529.129711][T28967] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1529.129747][T28967] ? __kasan_kmalloc+0x93/0xb0 [ 1529.129776][T28967] vmalloc_user_noprof+0xad/0xe0 [ 1529.129802][T28967] ? xskq_create+0xbf/0x170 [ 1529.129825][T28967] xskq_create+0xbf/0x170 [ 1529.129850][T28967] xsk_init_queue+0x8a/0xe0 [ 1529.129888][T28967] xsk_setsockopt+0x54c/0x990 [ 1529.129925][T28967] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1529.129973][T28967] ? __fget_files+0x2a/0x420 [ 1529.129994][T28967] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1529.130018][T28967] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1529.130054][T28967] do_sock_setsockopt+0x17c/0x1b0 [ 1529.130087][T28967] __x64_sys_setsockopt+0x143/0x1b0 [ 1529.130119][T28967] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1529.130145][T28967] do_syscall_64+0x15f/0xf80 [ 1529.130170][T28967] ? trace_irq_disable+0x3b/0x140 [ 1529.130197][T28967] ? clear_bhb_loop+0x40/0x90 [ 1529.130226][T28967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1529.130258][T28967] RIP: 0033:0x7f88addacdd9 [ 1529.130281][T28967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1529.130301][T28967] RSP: 002b:00007f88abfe5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1529.130324][T28967] RAX: ffffffffffffffda RBX: 00007f88ae026090 RCX: 00007f88addacdd9 [ 1529.130342][T28967] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 1529.130356][T28967] RBP: 00007f88ade42d69 R08: 0000000000000029 R09: 0000000000000000 [ 1529.130370][T28967] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1529.130386][T28967] R13: 00007f88ae026128 R14: 00007f88ae026090 R15: 00007ffdea4b7e18 [ 1529.130422][T28967] [ 1529.220721][T28967] Mem-Info: [ 1529.220766][T28967] active_anon:579 inactive_anon:8240 isolated_anon:0 [ 1529.220766][T28967] active_file:21785 inactive_file:2465 isolated_file:0 [ 1529.220766][T28967] unevictable:2783 dirty:283 writeback:0 [ 1529.220766][T28967] slab_reclaimable:12305 slab_unreclaimable:119693 [ 1529.220766][T28967] mapped:31051 shmem:1826 pagetables:1975 [ 1529.220766][T28967] sec_pagetables:0 bounce:0 [ 1529.220766][T28967] kernel_misc_reclaimable:0 [ 1529.220766][T28967] free:1310677 free_pcp:6026 free_cma:0 [ 1529.232085][T28967] Node 0 active_anon:2316kB inactive_anon:32960kB active_file:87120kB inactive_file:9712kB unevictable:9596kB isolated(anon):0kB isolated(file):0kB mapped:124204kB dirty:1132kB writeback:0kB shmem:5768kB kernel_stack:14660kB pagetables:7752kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1529.232233][T28967] Node 1 active_anon:0kB inactive_anon:0kB active_file:20kB inactive_file:148kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:96kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1529.232385][T28967] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1529.232576][T28967] lowmem_reserve[]: 0 2506 2506 2506 2506 [ 1529.232694][T28967] Node 0 DMA32 free:1298008kB boost:0kB min:3928kB low:6464kB high:9000kB reserved_highatomic:0KB free_highatomic:0KB active_anon:2316kB inactive_anon:33060kB active_file:87120kB inactive_file:9712kB unevictable:9596kB writepending:1132kB zspages:0kB present:3129332kB managed:2566592kB mlocked:8112kB bounce:0kB free_pcp:24100kB local_pcp:17024kB free_cma:0kB [ 1529.260110][T28967] lowmem_reserve[]: 0 0 0 0 0 [ 1529.260150][T28967] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:216kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1529.260214][T28967] lowmem_reserve[]: 0 0 0 0 0 [ 1529.260254][T28967] Node 1 Normal free:3929340kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:20kB inactive_file:148kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1529.260323][T28967] lowmem_reserve[]: 0 0 0 0 0 [ 1529.260361][T28967] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1529.260504][T28967] Node 0 DMA32: 3205*4kB (UME) 4499*8kB (UME) 3327*16kB (UME) 873*32kB (UME) 604*64kB (UM) 860*128kB (UME) 672*256kB (UM) 411*512kB (UM) 204*1024kB (UME) 47*2048kB (UM) 81*4096kB (UM) = 1298108kB [ 1529.260685][T28967] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1529.262945][T28967] Node 1 Normal: 3*4kB (U) 8*8kB (UM) 5*16kB (U) 3*32kB (UM) 6*64kB (UM) 5*128kB (UM) 2*256kB (M) 3*512kB (UM) 2*1024kB (UM) 0*2048kB 958*4096kB (UM) = 3929340kB [ 1529.263385][T28967] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1529.263431][T28967] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1529.263488][T28967] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1529.263524][T28967] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1529.263540][T28967] 26072 total pagecache pages [ 1529.263548][T28967] 0 pages in swap cache [ 1529.263556][T28967] Free swap = 124996kB [ 1529.263577][T28967] Total swap = 124996kB [ 1529.263606][T28967] 2097051 pages RAM [ 1529.263630][T28967] 0 pages HighMem/MovableOnly [ 1529.263654][T28967] 423734 pages reserved [ 1529.263679][T28967] 0 pages cma reserved [ 1529.858201][T29016] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7072'. [ 1530.052677][T29022] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7073'. [ 1530.054117][T29022] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7073'. [ 1531.434746][T29044] vxcan1: tx drop: invalid da for name 0x0000000000000001 [ 1533.098427][T29118] vlan2: entered promiscuous mode [ 1533.098453][T29118] bridge0: entered promiscuous mode [ 1534.124819][T29157] binder: 29156:29157 ioctl c0306201 0 returned -14 [ 1534.171132][T29157] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7116'. [ 1535.465432][T13337] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1535.635220][T13337] usb 9-1: Using ep0 maxpacket: 16 [ 1535.651549][T13337] usb 9-1: config 2 has an invalid interface number: 26 but max is 1 [ 1535.651580][T13337] usb 9-1: config 2 has an invalid interface number: 50 but max is 1 [ 1535.651603][T13337] usb 9-1: config 2 has no interface number 0 [ 1535.651616][T13337] usb 9-1: config 2 has no interface number 1 [ 1535.651690][T13337] usb 9-1: config 2 interface 26 altsetting 169 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 1535.651720][T13337] usb 9-1: config 2 interface 26 altsetting 169 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 1535.651745][T13337] usb 9-1: config 2 interface 26 altsetting 169 has an invalid descriptor for endpoint zero, skipping [ 1535.651779][T13337] usb 9-1: config 2 interface 50 altsetting 8 has a duplicate endpoint with address 0xF, skipping [ 1535.651807][T13337] usb 9-1: config 2 interface 50 altsetting 8 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 1535.651824][T13337] usb 9-1: config 2 interface 50 altsetting 8 bulk endpoint 0xC has invalid maxpacket 1024 [ 1535.651841][T13337] usb 9-1: config 2 interface 50 altsetting 8 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 1535.651859][T13337] usb 9-1: config 2 interface 50 altsetting 8 has a duplicate endpoint with address 0x9, skipping [ 1535.651873][T13337] usb 9-1: config 2 interface 50 altsetting 8 has a duplicate endpoint with address 0x4, skipping [ 1535.651888][T13337] usb 9-1: config 2 interface 50 altsetting 8 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 1535.651905][T13337] usb 9-1: config 2 interface 50 altsetting 8 has a duplicate endpoint with address 0xB, skipping [ 1535.651919][T13337] usb 9-1: config 2 interface 26 has no altsetting 0 [ 1535.651931][T13337] usb 9-1: config 2 interface 50 has no altsetting 0 [ 1535.870763][T13337] usb 9-1: Dual-Role OTG device on HNP port [ 1535.871993][T13337] usb 9-1: New USB device found, idVendor=0c45, idProduct=6288, bcdDevice=e5.4c [ 1535.872011][T13337] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1535.872024][T13337] usb 9-1: Manufacturer: ᾁ홱ட騐퉈⃋尢샲ꑋ릸꫉溵ﴃ긒湷덫Ɓꌑꔀ㟢貚䙅썂抌⸬䉼倜떢㪠걃뒝嗿︵獁酷犠暽맃삱ᐼ鵍 [ 1535.872040][T13337] usb 9-1: SerialNumber: ᘃ [ 1536.304584][ T37] audit: type=1326 audit(1777685379.465:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29178 comm="syz.8.7120" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88addacdd9 code=0x7ffc0000 [ 1536.304655][ T37] audit: type=1326 audit(1777685379.465:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29178 comm="syz.8.7120" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88addacdd9 code=0x7ffc0000 [ 1536.304700][ T37] audit: type=1326 audit(1777685379.465:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29178 comm="syz.8.7120" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f88addacdd9 code=0x7ffc0000 [ 1536.413461][ T37] audit: type=1326 audit(1777685379.575:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29178 comm="syz.8.7120" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88addacdd9 code=0x7ffc0000 [ 1536.439860][ T37] audit: type=1326 audit(1777685379.575:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29178 comm="syz.8.7120" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f88addacdd9 code=0x7ffc0000 [ 1536.478318][ T37] audit: type=1326 audit(1777685379.635:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29178 comm="syz.8.7120" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88addacdd9 code=0x7ffc0000 [ 1536.484633][T29203] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7120'. [ 1536.533864][ T37] audit: type=1326 audit(1777685379.645:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29178 comm="syz.8.7120" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88addacdd9 code=0x7ffc0000 [ 1536.824262][T13337] usb 9-1: USB disconnect, device number 9 [ 1539.215373][ T5613] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1539.334899][T29263] syz_tun: entered allmulticast mode [ 1539.374140][ T5613] usb 9-1: Using ep0 maxpacket: 16 [ 1539.390048][ T5613] usb 9-1: config 2 has an invalid interface number: 26 but max is 1 [ 1539.390077][ T5613] usb 9-1: config 2 has an invalid interface number: 50 but max is 1 [ 1539.390103][ T5613] usb 9-1: config 2 has no interface number 0 [ 1539.390122][ T5613] usb 9-1: config 2 has no interface number 1 [ 1539.390184][ T5613] usb 9-1: config 2 interface 26 altsetting 169 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 1539.390215][ T5613] usb 9-1: config 2 interface 26 altsetting 169 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 1539.390262][ T5613] usb 9-1: config 2 interface 26 altsetting 169 has an invalid descriptor for endpoint zero, skipping [ 1539.390315][ T5613] usb 9-1: config 2 interface 50 altsetting 8 has a duplicate endpoint with address 0xF, skipping [ 1539.390342][ T5613] usb 9-1: config 2 interface 50 altsetting 8 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 1539.390371][ T5613] usb 9-1: config 2 interface 50 altsetting 8 bulk endpoint 0xC has invalid maxpacket 1024 [ 1539.390400][ T5613] usb 9-1: config 2 interface 50 altsetting 8 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 1539.390428][ T5613] usb 9-1: config 2 interface 50 altsetting 8 has a duplicate endpoint with address 0x9, skipping [ 1539.390453][ T5613] usb 9-1: config 2 interface 50 altsetting 8 has a duplicate endpoint with address 0x4, skipping [ 1539.390486][ T5613] usb 9-1: config 2 interface 50 altsetting 8 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 1539.390515][ T5613] usb 9-1: config 2 interface 50 altsetting 8 has a duplicate endpoint with address 0xB, skipping [ 1539.390540][ T5613] usb 9-1: config 2 interface 26 has no altsetting 0 [ 1539.390559][ T5613] usb 9-1: config 2 interface 50 has no altsetting 0 [ 1539.579763][ T5613] usb 9-1: Dual-Role OTG device on HNP port [ 1539.580109][ T5613] usb 9-1: New USB device found, idVendor=0c45, idProduct=6288, bcdDevice=e5.4c [ 1539.580139][ T5613] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1539.580163][ T5613] usb 9-1: Manufacturer: ᾁ홱ட騐퉈⃋尢샲ꑋ릸꫉溵ﴃ긒湷덫Ɓꌑꔀ㟢貚䙅썂抌⸬䉼倜떢㪠걃뒝嗿︵獁酷犠暽맃삱ᐼ鵍 [ 1539.580188][ T5613] usb 9-1: SerialNumber: ᘃ [ 1539.658907][T29262] syz_tun: left allmulticast mode [ 1539.899502][ T37] audit: type=1326 audit(1777685384.062:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29248 comm="syz.8.7140" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88addacdd9 code=0x7ffc0000 [ 1539.900056][ T37] audit: type=1326 audit(1777685384.062:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29248 comm="syz.8.7140" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f88addacdd9 code=0x7ffc0000 [ 1539.904725][ T37] audit: type=1326 audit(1777685384.062:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29248 comm="syz.8.7140" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88addacdd9 code=0x7ffc0000 [ 1540.483892][ T5613] usb 9-1: USB disconnect, device number 10 [ 1541.525338][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1541.748670][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 1541.751640][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1541.754993][ T10] usb 6-1: config 7 has an invalid interface number: 161 but max is 0 [ 1541.755724][ T10] usb 6-1: config 7 has no interface number 0 [ 1541.755866][ T10] usb 6-1: config 7 interface 161 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 1541.755942][ T10] usb 6-1: config 7 interface 161 altsetting 0 endpoint 0x8A has an invalid bInterval 128, changing to 7 [ 1541.756022][ T10] usb 6-1: config 7 interface 161 altsetting 0 endpoint 0x8A has invalid maxpacket 59091, setting to 1024 [ 1541.756094][ T10] usb 6-1: config 7 interface 161 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1541.756144][ T10] usb 6-1: config 7 interface 161 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1541.874940][ T10] usb 6-1: New USB device found, idVendor=06f8, idProduct=a302, bcdDevice=4b.85 [ 1541.874963][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1541.874979][ T10] usb 6-1: Product: syz [ 1541.874990][ T10] usb 6-1: Manufacturer: syz [ 1541.875001][ T10] usb 6-1: SerialNumber: syz [ 1542.394565][ T10] usb 6-1: USB disconnect, device number 4 [ 1543.280621][T29321] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input47 [ 1545.285411][T29326] syz_tun: entered allmulticast mode [ 1545.841191][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1547.505983][T29361] program syz.5.7172 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1548.651451][T29387] loop2: detected capacity change from 0 to 7 [ 1548.698472][T29387] Dev loop2: unable to read RDB block 7 [ 1548.698505][T29387] loop2: AHDI p2 p3 [ 1548.698531][T29387] loop2: partition table partially beyond EOD, truncated [ 1548.711601][T29387] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1548.885505][ T10] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1549.132507][ T10] usb 9-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1549.132531][ T10] usb 9-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 1549.132547][ T10] usb 9-1: Product: syz [ 1549.132556][ T10] usb 9-1: Manufacturer: syz [ 1549.132566][ T10] usb 9-1: SerialNumber: syz [ 1549.165141][ T5733] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1549.170169][ T10] usb 9-1: config 0 descriptor?? [ 1549.237730][ T10] ch341 9-1:0.0: ch341-uart converter detected [ 1549.305165][ T5733] usb 3-1: device descriptor read/64, error -71 [ 1549.575236][ T5733] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1549.705151][ T5733] usb 3-1: device descriptor read/64, error -71 [ 1549.815565][ T5733] usb usb3-port1: attempt power cycle [ 1550.515214][ T5733] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1550.535931][ T5733] usb 3-1: device descriptor read/8, error -71 [ 1550.675650][ T10] ch341-uart ttyUSB0: break control not supported, using simulated break [ 1550.713742][ T10] usb 9-1: ch341-uart converter now attached to ttyUSB0 [ 1550.732823][ T10] usb 9-1: USB disconnect, device number 11 [ 1550.784889][ T5733] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1550.806680][ T5733] usb 3-1: device descriptor read/8, error -71 [ 1550.897648][T29415] trusted_key: encrypted_key: insufficient parameters specified [ 1550.901096][T29415] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7189'. [ 1550.929654][ T5733] usb usb3-port1: unable to enumerate USB device [ 1551.163437][ T10] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 1551.173923][ T10] ch341 9-1:0.0: device disconnected [ 1551.647561][T29420] input: syz1 as /devices/virtual/input/input48 [ 1551.924175][T29432] netlink: 4768 bytes leftover after parsing attributes in process `syz.8.7194'. [ 1551.938838][T29432] netlink: 4768 bytes leftover after parsing attributes in process `syz.8.7194'. [ 1552.429182][T29440] kAFS: unable to lookup cell '' [ 1554.252806][T27061] block nbd64: NBD_DISCONNECT [ 1554.742183][T29471] binder: binder_mmap: 29469 2000003d3000-2000003d7000 bad vm_flags failed -1 [ 1556.618988][T13053] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1556.789242][T13053] usb 2-1: Using ep0 maxpacket: 32 [ 1556.791882][T13053] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 1556.791924][T13053] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1556.791984][T13053] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1556.792012][T13053] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 42299, setting to 1024 [ 1556.792040][T13053] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1556.792066][T13053] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1556.821415][T13053] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1556.821538][T13053] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1556.821619][T13053] usb 2-1: Product: syz [ 1556.821662][T13053] usb 2-1: Manufacturer: syz [ 1556.821704][T13053] usb 2-1: SerialNumber: syz [ 1556.893217][ T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1557.033596][T13053] usb 2-1: config 0 descriptor?? [ 1557.034476][T29485] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1557.066491][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 1557.072704][ T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1557.090864][ T10] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1557.090903][ T10] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1557.090924][ T10] usb 6-1: Product: syz [ 1557.090939][ T10] usb 6-1: Manufacturer: syz [ 1557.090953][ T10] usb 6-1: SerialNumber: syz [ 1557.182039][T13053] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1557.429318][ T10] usb 6-1: config 0 descriptor?? [ 1557.434804][T29488] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1557.436678][ T10] hub 6-1:0.0: bad descriptor, ignoring hub [ 1557.436704][ T10] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1557.494291][T13053] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1558.555532][ T819] usb 6-1: USB disconnect, device number 5 [ 1559.241887][T29509] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.7213'. [ 1559.311146][T29509] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.7213'. [ 1563.519941][T29502] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -110 [ 1563.744920][ T819] usb 2-1: USB disconnect, device number 7 [ 1563.783055][ T819] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 1564.401468][T29541] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.7226'. [ 1564.422265][T29541] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.7226'. [ 1567.261802][T29566] syz_tun: entered allmulticast mode [ 1567.265434][T29565] syz_tun: left allmulticast mode [ 1567.384554][T29570] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7236'. [ 1567.644068][T29576] netlink: 4768 bytes leftover after parsing attributes in process `syz.8.7239'. [ 1567.653991][T29576] netlink: 4768 bytes leftover after parsing attributes in process `syz.8.7239'. [ 1567.878028][T29578] program syz.1.7237 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1569.208079][T29599] syz_tun: entered allmulticast mode [ 1569.208790][T29598] syz_tun: left allmulticast mode [ 1570.164065][T29615] atomic_op ffff88802a882a18 conn xmit_atomic 0000000000000000 [ 1570.551713][T29627] syz_tun: entered allmulticast mode [ 1570.554668][T29625] syz_tun: left allmulticast mode [ 1574.724196][ T5733] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1574.775142][ T819] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1575.556506][ T5733] usb 2-1: no configurations [ 1575.556528][ T5733] usb 2-1: can't read configurations, error -22 [ 1575.588220][ T819] usb 9-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1575.588254][ T819] usb 9-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 1575.588276][ T819] usb 9-1: Product: syz [ 1575.588292][ T819] usb 9-1: Manufacturer: syz [ 1575.588308][ T819] usb 9-1: SerialNumber: syz [ 1575.651736][ T819] usb 9-1: config 0 descriptor?? [ 1575.669590][ T819] ch341 9-1:0.0: ch341-uart converter detected [ 1575.702394][ T5733] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1575.760808][T24974] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1575.872768][ T5733] usb 2-1: no configurations [ 1575.872849][ T5733] usb 2-1: can't read configurations, error -22 [ 1575.970470][ T5733] usb usb2-port1: attempt power cycle [ 1576.159392][T29688] program syz.2.7282 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1576.310120][ T5733] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1576.334529][ T5733] usb 2-1: no configurations [ 1576.334549][ T5733] usb 2-1: can't read configurations, error -22 [ 1576.748626][ T819] ch341-uart ttyUSB0: failed to read break control: -71 [ 1576.748686][ T819] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1576.895753][ T819] usb 9-1: USB disconnect, device number 12 [ 1576.933829][ T819] ch341 9-1:0.0: device disconnected [ 1577.015191][ T5733] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1577.036919][ T5733] usb 2-1: no configurations [ 1577.036939][ T5733] usb 2-1: can't read configurations, error -22 [ 1577.056865][ T5733] usb usb2-port1: unable to enumerate USB device [ 1577.743135][T24974] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1577.743223][T24974] usb 6-1: no configurations [ 1577.743238][T24974] usb 6-1: can't read configurations, error -22 [ 1580.479820][T29709] netlink: zone id is out of range [ 1580.479838][T29709] netlink: zone id is out of range [ 1582.296404][T23802] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1582.463022][T23802] usb 9-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1582.463056][T23802] usb 9-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 1582.463079][T23802] usb 9-1: Product: syz [ 1582.463095][T23802] usb 9-1: Manufacturer: syz [ 1582.463111][T23802] usb 9-1: SerialNumber: syz [ 1582.520137][T23802] usb 9-1: config 0 descriptor?? [ 1582.532466][T23802] ch341 9-1:0.0: ch341-uart converter detected [ 1583.879498][T23802] ch341-uart ttyUSB0: failed to read break control: -71 [ 1583.879543][T23802] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1583.901887][T29726] vxcan1: tx drop: invalid da for name 0x0000000000000001 [ 1583.902368][T23802] usb 9-1: USB disconnect, device number 13 [ 1583.976237][T23802] ch341 9-1:0.0: device disconnected [ 1584.402534][T29741] netlink: 4768 bytes leftover after parsing attributes in process `syz.7.7300'. [ 1584.408554][T29741] netlink: 4768 bytes leftover after parsing attributes in process `syz.7.7300'. [ 1587.181502][T29769] input: syz0 as /devices/virtual/input/input49 [ 1587.397152][T29775] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.7314'. [ 1587.404417][T29775] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.7314'. [ 1590.953016][T29810] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.7326'. [ 1590.953681][T29810] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.7326'. [ 1591.748178][T29822] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1593.255243][T23802] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1593.426644][T23802] usb 3-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1593.426677][T23802] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1593.426700][T23802] usb 3-1: Product: syz [ 1593.426717][T23802] usb 3-1: Manufacturer: syz [ 1593.426733][T23802] usb 3-1: SerialNumber: syz [ 1593.436272][T23802] usb 3-1: config 0 descriptor?? [ 1593.451183][T23802] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 1593.665199][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1593.894187][T13053] usb 3-1: USB disconnect, device number 60 [ 1593.926180][ T10] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1593.926212][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1593.969990][ T10] usb 2-1: config 0 descriptor?? [ 1596.741894][T29881] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7352'. [ 1596.756786][T29881] netlink: 87 bytes leftover after parsing attributes in process `syz.2.7352'. [ 1598.236826][T29864] warn_alloc: 2 callbacks suppressed [ 1598.236846][T29864] syz.8.7346: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1598.236922][T29864] CPU: 1 UID: 0 PID: 29864 Comm: syz.8.7346 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1598.236954][T29864] Tainted: [L]=SOFTLOCKUP [ 1598.236962][T29864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1598.236977][T29864] Call Trace: [ 1598.236987][T29864] [ 1598.236998][T29864] dump_stack_lvl+0xe8/0x150 [ 1598.237032][T29864] warn_alloc+0x263/0x3e0 [ 1598.237067][T29864] ? stack_trace_save+0xa9/0x100 [ 1598.237099][T29864] ? __pfx_warn_alloc+0x10/0x10 [ 1598.237148][T29864] ? kasan_save_track+0x4f/0x80 [ 1598.237171][T29864] ? kasan_save_track+0x3e/0x80 [ 1598.237191][T29864] ? __kasan_kmalloc+0x93/0xb0 [ 1598.237215][T29864] ? xskq_create+0x56/0x170 [ 1598.237236][T29864] ? xsk_init_queue+0x8a/0xe0 [ 1598.237267][T29864] ? xsk_setsockopt+0x54c/0x990 [ 1598.237297][T29864] ? do_sock_setsockopt+0x17c/0x1b0 [ 1598.237330][T29864] __vmalloc_node_range_noprof+0x132/0x1750 [ 1598.237390][T29864] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1598.237425][T29864] ? __kasan_kmalloc+0x93/0xb0 [ 1598.237454][T29864] vmalloc_user_noprof+0xad/0xe0 [ 1598.237480][T29864] ? xskq_create+0xbf/0x170 [ 1598.237504][T29864] xskq_create+0xbf/0x170 [ 1598.237529][T29864] xsk_init_queue+0x8a/0xe0 [ 1598.237566][T29864] xsk_setsockopt+0x54c/0x990 [ 1598.237603][T29864] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1598.237649][T29864] ? __fget_files+0x2a/0x420 [ 1598.237678][T29864] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1598.237703][T29864] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1598.237738][T29864] do_sock_setsockopt+0x17c/0x1b0 [ 1598.237771][T29864] __x64_sys_setsockopt+0x143/0x1b0 [ 1598.237802][T29864] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1598.237828][T29864] do_syscall_64+0x15f/0xf80 [ 1598.237854][T29864] ? trace_irq_disable+0x3b/0x140 [ 1598.237882][T29864] ? clear_bhb_loop+0x40/0x90 [ 1598.237910][T29864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1598.237932][T29864] RIP: 0033:0x7f88addacdd9 [ 1598.237952][T29864] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1598.237972][T29864] RSP: 002b:00007f88ac006028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1598.238000][T29864] RAX: ffffffffffffffda RBX: 00007f88ae025fa0 RCX: 00007f88addacdd9 [ 1598.238017][T29864] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 1598.238031][T29864] RBP: 00007f88ade42d69 R08: 0000000000000029 R09: 0000000000000000 [ 1598.238045][T29864] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1598.238060][T29864] R13: 00007f88ae026038 R14: 00007f88ae025fa0 R15: 00007ffdea4b7e18 [ 1598.238096][T29864] [ 1598.238118][T29864] Mem-Info: [ 1598.238128][T29864] active_anon:579 inactive_anon:8461 isolated_anon:0 [ 1598.238128][T29864] active_file:21811 inactive_file:2546 isolated_file:0 [ 1598.238128][T29864] unevictable:2804 dirty:297 writeback:0 [ 1598.238128][T29864] slab_reclaimable:12306 slab_unreclaimable:122768 [ 1598.238128][T29864] mapped:32177 shmem:1821 pagetables:1914 [ 1598.238128][T29864] sec_pagetables:0 bounce:0 [ 1598.238128][T29864] kernel_misc_reclaimable:0 [ 1598.238128][T29864] free:1307840 free_pcp:6040 free_cma:0 [ 1598.238191][T29864] Node 0 active_anon:2316kB inactive_anon:33844kB active_file:87224kB inactive_file:10036kB unevictable:9680kB isolated(anon):0kB isolated(file):0kB mapped:128700kB dirty:1188kB writeback:0kB shmem:5748kB kernel_stack:14672kB pagetables:7508kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1598.238273][T29864] Node 1 active_anon:0kB inactive_anon:0kB active_file:20kB inactive_file:148kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:96kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1598.238329][T29864] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1598.238395][T29864] lowmem_reserve[]: 0 2506 2506 2506 2506 [ 1598.238437][T29864] Node 0 DMA32 free:1286660kB boost:0kB min:3928kB low:6464kB high:9000kB reserved_highatomic:0KB free_highatomic:0KB active_anon:2316kB inactive_anon:33844kB active_file:87224kB inactive_file:10036kB unevictable:9680kB writepending:1188kB zspages:0kB present:3129332kB managed:2566592kB mlocked:8112kB bounce:0kB free_pcp:24160kB local_pcp:15112kB free_cma:0kB [ 1598.238525][T29864] lowmem_reserve[]: 0 0 0 0 0 [ 1598.238563][T29864] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:216kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1598.238627][T29864] lowmem_reserve[]: 0 0 0 0 0 [ 1598.238666][T29864] Node 1 Normal free:3929340kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:20kB inactive_file:148kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1598.238744][T29864] lowmem_reserve[]: 0 0 0 0 0 [ 1598.238783][T29864] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1598.238913][T29864] Node 0 DMA32: 3211*4kB (UME) 4089*8kB (UME) 3317*16kB (UME) 684*32kB (UME) 616*64kB (UM) 890*128kB (UME) 702*256kB (UM) 433*512kB (UM) 215*1024kB (UME) 49*2048kB (UM) 71*4096kB (UM) = 1286596kB [ 1598.239091][T29864] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1598.239202][T29864] Node 1 Normal: 3*4kB (U) 8*8kB (UM) 5*16kB (U) 3*32kB (UM) 6*64kB (UM) 5*128kB (UM) 2*256kB (M) 3*512kB (UM) 2*1024kB (UM) 0*2048kB 958*4096kB (UM) = 3929340kB [ 1598.239369][T29864] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1598.239389][T29864] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1598.239408][T29864] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1598.239427][T29864] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1598.239446][T29864] 26174 total pagecache pages [ 1598.239454][T29864] 0 pages in swap cache [ 1598.239463][T29864] Free swap = 124996kB [ 1598.239473][T29864] Total swap = 124996kB [ 1598.239483][T29864] 2097051 pages RAM [ 1598.239491][T29864] 0 pages HighMem/MovableOnly [ 1598.239500][T29864] 423734 pages reserved [ 1598.239508][T29864] 0 pages cma reserved [ 1599.060061][ T10] usb 2-1: Cannot read MAC address [ 1599.060351][ T10] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32 [ 1599.143124][T29898] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1599.515234][T24974] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1599.666633][T24974] usb 3-1: Using ep0 maxpacket: 8 [ 1599.671836][T24974] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1599.671912][T24974] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1599.671938][T24974] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1599.671965][T24974] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1599.672004][T24974] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1599.672047][T24974] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1599.672072][T24974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1600.017796][T24974] usb 3-1: GET_CAPABILITIES returned 0 [ 1600.017832][T24974] usbtmc 3-1:16.0: can't read capabilities [ 1600.270850][ T10] usb 3-1: USB disconnect, device number 61 [ 1600.615344][T24974] usb 2-1: USB disconnect, device number 12 [ 1601.991044][T29959] binder: binder_mmap: 29958 2000003d3000-2000003d7000 bad vm_flags failed -1 [ 1605.994955][T29988] binder: binder_mmap: 29987 2000003d3000-2000003d7000 bad vm_flags failed -1 [ 1607.254566][T30007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1607.278550][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.611295][T30011] syzkaller0: entered promiscuous mode [ 1607.611325][T30011] syzkaller0: entered allmulticast mode [ 1607.637522][T30007] TC_ACT_REPEAT abuse ? [ 1609.077414][T30032] binder: binder_mmap: 30031 2000003d3000-2000003d7000 bad vm_flags failed -1 [ 1612.732019][T30073] binder: binder_mmap: 30072 2000003d3000-2000003d7000 bad vm_flags failed -1 [ 1612.855399][T30064] warn_alloc: 2 callbacks suppressed [ 1612.855414][T30064] syz.5.7419: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1612.855474][T30064] CPU: 0 UID: 0 PID: 30064 Comm: syz.5.7419 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1612.855501][T30064] Tainted: [L]=SOFTLOCKUP [ 1612.855508][T30064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1612.855521][T30064] Call Trace: [ 1612.855529][T30064] [ 1612.855538][T30064] dump_stack_lvl+0xe8/0x150 [ 1612.855564][T30064] warn_alloc+0x263/0x3e0 [ 1612.855591][T30064] ? stack_trace_save+0xa9/0x100 [ 1612.855615][T30064] ? __pfx_warn_alloc+0x10/0x10 [ 1612.855645][T30064] ? kasan_save_track+0x4f/0x80 [ 1612.855662][T30064] ? kasan_save_track+0x3e/0x80 [ 1612.855679][T30064] ? __kasan_kmalloc+0x93/0xb0 [ 1612.855696][T30064] ? xskq_create+0x56/0x170 [ 1612.855712][T30064] ? xsk_init_queue+0x8a/0xe0 [ 1612.855735][T30064] ? xsk_setsockopt+0x54c/0x990 [ 1612.855757][T30064] ? do_sock_setsockopt+0x17c/0x1b0 [ 1612.855780][T30064] __vmalloc_node_range_noprof+0x132/0x1750 [ 1612.855824][T30064] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1612.855853][T30064] ? __kasan_kmalloc+0x93/0xb0 [ 1612.855876][T30064] vmalloc_user_noprof+0xad/0xe0 [ 1612.855897][T30064] ? xskq_create+0xbf/0x170 [ 1612.855916][T30064] xskq_create+0xbf/0x170 [ 1612.855935][T30064] xsk_init_queue+0x8a/0xe0 [ 1612.855963][T30064] xsk_setsockopt+0x54c/0x990 [ 1612.855992][T30064] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1612.856028][T30064] ? __fget_files+0x2a/0x420 [ 1612.856049][T30064] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1612.856069][T30064] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1612.856099][T30064] do_sock_setsockopt+0x17c/0x1b0 [ 1612.856127][T30064] __x64_sys_setsockopt+0x143/0x1b0 [ 1612.856154][T30064] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1612.856177][T30064] do_syscall_64+0x15f/0xf80 [ 1612.856200][T30064] ? trace_irq_disable+0x3b/0x140 [ 1612.856222][T30064] ? clear_bhb_loop+0x40/0x90 [ 1612.856247][T30064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1612.856267][T30064] RIP: 0033:0x7f648b67cdd9 [ 1612.856309][T30064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1612.856327][T30064] RSP: 002b:00007f64898d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1612.856349][T30064] RAX: ffffffffffffffda RBX: 00007f648b8f5fa0 RCX: 00007f648b67cdd9 [ 1612.856365][T30064] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 1612.856379][T30064] RBP: 00007f648b712d69 R08: 0000000000000029 R09: 0000000000000000 [ 1612.856392][T30064] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1612.856406][T30064] R13: 00007f648b8f6038 R14: 00007f648b8f5fa0 R15: 00007fff94260ee8 [ 1612.856436][T30064] [ 1612.856444][T30064] Mem-Info: [ 1612.856453][T30064] active_anon:582 inactive_anon:8033 isolated_anon:0 [ 1612.856453][T30064] active_file:21815 inactive_file:2546 isolated_file:0 [ 1612.856453][T30064] unevictable:2803 dirty:164 writeback:0 [ 1612.856453][T30064] slab_reclaimable:12306 slab_unreclaimable:122331 [ 1612.856453][T30064] mapped:31140 shmem:1837 pagetables:1954 [ 1612.856453][T30064] sec_pagetables:0 bounce:0 [ 1612.856453][T30064] kernel_misc_reclaimable:0 [ 1612.856453][T30064] free:1313748 free_pcp:783 free_cma:0 [ 1612.856525][T30064] Node 0 active_anon:2328kB inactive_anon:32132kB active_file:87240kB inactive_file:10036kB unevictable:9676kB isolated(anon):0kB isolated(file):0kB mapped:124552kB dirty:656kB writeback:0kB shmem:5812kB kernel_stack:14736kB pagetables:7668kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1612.856578][T30064] Node 1 active_anon:0kB inactive_anon:0kB active_file:20kB inactive_file:148kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:96kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1612.856625][T30064] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1612.856681][T30064] lowmem_reserve[]: 0 2506 2506 2506 2506 [ 1612.856717][T30064] Node 0 DMA32 free:1310292kB boost:0kB min:3928kB low:6464kB high:9000kB reserved_highatomic:0KB free_highatomic:0KB active_anon:2328kB inactive_anon:32132kB active_file:87240kB inactive_file:10036kB unevictable:9676kB writepending:656kB zspages:0kB present:3129332kB managed:2566592kB mlocked:8160kB bounce:0kB free_pcp:3132kB local_pcp:2160kB free_cma:0kB [ 1612.856778][T30064] lowmem_reserve[]: 0 0 0 0 0 [ 1612.858320][T30064] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:216kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1612.858384][T30064] lowmem_reserve[]: 0 0 0 0 0 [ 1612.858420][T30064] Node 1 Normal free:3929340kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:20kB inactive_file:148kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1612.858485][T30064] lowmem_reserve[]: 0 0 0 0 0 [ 1612.858519][T30064] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1612.858644][T30064] Node 0 DMA32: 3769*4kB (UME) 5058*8kB (UME) 3868*16kB (UME) 828*32kB (UME) 620*64kB (UM) 890*128kB (UME) 702*256kB (UM) 433*512kB (UM) 215*1024kB (UME) 49*2048kB (UM) 71*4096kB (UM) = 1310260kB [ 1612.858815][T30064] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1612.858926][T30064] Node 1 Normal: 3*4kB (U) 8*8kB (UM) 5*16kB (U) 3*32kB (UM) 6*64kB (UM) 5*128kB (UM) 2*256kB (M) 3*512kB (UM) 2*1024kB (UM) 0*2048kB 958*4096kB (UM) = 3929340kB [ 1612.859092][T30064] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1612.859112][T30064] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1612.859136][T30064] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1612.859155][T30064] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1612.859191][T30064] 26196 total pagecache pages [ 1612.859200][T30064] 0 pages in swap cache [ 1612.859208][T30064] Free swap = 124996kB [ 1612.859217][T30064] Total swap = 124996kB [ 1612.859226][T30064] 2097051 pages RAM [ 1612.859235][T30064] 0 pages HighMem/MovableOnly [ 1612.859243][T30064] 423734 pages reserved [ 1612.859251][T30064] 0 pages cma reserved [ 1614.496911][T24979] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1615.025135][T24979] usb 9-1: Using ep0 maxpacket: 16 [ 1615.028176][T24979] usb 9-1: config 2 has an invalid interface number: 26 but max is 1 [ 1615.028200][T24979] usb 9-1: config 2 has an invalid interface number: 50 but max is 1 [ 1615.028219][T24979] usb 9-1: config 2 has no interface number 0 [ 1615.028234][T24979] usb 9-1: config 2 has no interface number 1 [ 1615.028287][T24979] usb 9-1: config 2 interface 26 altsetting 169 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 1615.028313][T24979] usb 9-1: config 2 interface 26 altsetting 169 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 1615.028337][T24979] usb 9-1: config 2 interface 26 altsetting 169 has an invalid descriptor for endpoint zero, skipping [ 1615.028359][T24979] usb 9-1: config 2 interface 26 has no altsetting 0 [ 1615.028376][T24979] usb 9-1: config 2 interface 50 has no altsetting 0 [ 1615.117100][T24979] usb 9-1: New USB device found, idVendor=0c45, idProduct=6288, bcdDevice=e5.4c [ 1615.117129][T24979] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1615.117147][T24979] usb 9-1: Manufacturer: ᾁ홱ட騐퉈⃋尢샲ꑋ릸꫉溵ﴃ긒湷덫Ɓꌑꔀ㟢貚䙅썂抌⸬䉼倜떢㪠걃뒝嗿︵獁酷犠暽맃삱ᐼ鵍 [ 1615.117169][T24979] usb 9-1: SerialNumber: ᘃ [ 1615.559593][T24979] usb 9-1: USB disconnect, device number 14 [ 1615.678101][T30104] 9p: Bad value for 'rfdno' [ 1618.360481][T30138] 9p: Bad value for 'wfdno' [ 1618.898828][T30159] blktrace: Concurrent blktraces are not allowed on loop16 [ 1621.104378][T30180] 9p: Bad value for 'wfdno' [ 1621.572679][T30192] input: syz1 as /devices/virtual/input/input50 [ 1623.978727][T30231] input: syz1 as /devices/virtual/input/input51 [ 1627.327618][T30289] vlan2: entered promiscuous mode [ 1627.327642][T30289] bridge0: entered promiscuous mode [ 1628.630910][T30316] vlan2: entered promiscuous mode [ 1628.630936][T30316] bridge0: entered promiscuous mode [ 1630.095163][T25813] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1630.255180][T25813] usb 2-1: Using ep0 maxpacket: 32 [ 1630.258760][T25813] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 1630.258803][T25813] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1630.258898][T25813] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1630.258928][T25813] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 42299, setting to 1024 [ 1630.258958][T25813] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1630.258989][T25813] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1630.337176][T25813] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1630.337212][T25813] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1630.337236][T25813] usb 2-1: Product: syz [ 1630.337251][T25813] usb 2-1: Manufacturer: syz [ 1630.337266][T25813] usb 2-1: SerialNumber: syz [ 1630.409413][T25813] usb 2-1: config 0 descriptor?? [ 1630.410302][T30335] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1630.445452][T25813] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1630.478583][T25813] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1632.007983][T24979] usb 2-1: USB disconnect, device number 13 [ 1632.008090][ C0] ldusb 2-1:0.0: usb_submit_urb failed (-19) [ 1632.050464][T24979] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 1633.021484][ T5611] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1633.047059][ T5611] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1633.074091][ T5611] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1633.102885][ T5611] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1633.136113][ T5611] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1634.925871][T24979] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1635.090426][ T1468] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1635.108391][T24979] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1635.108449][T24979] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1635.108475][T24979] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1635.181929][T24979] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1635.355134][T27139] Bluetooth: hci2: command tx timeout [ 1635.849916][ T1468] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1637.415208][T24979] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -110 [ 1637.415228][T24979] stv0680 3-1:4.0: STV(e): camera ping failed!! [ 1637.415600][T24979] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32 [ 1637.415617][T24979] stv0680 3-1:4.0: last error: 0, command = 0x0 [ 1637.435237][T27139] Bluetooth: hci2: command tx timeout [ 1637.664048][T24979] usb 3-1: USB disconnect, device number 62 [ 1637.828507][ T1468] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1638.387116][T30489] nftables ruleset with unbound set [ 1639.362643][T30512] blktrace: Concurrent blktraces are not allowed on loop16 [ 1639.523669][T27139] Bluetooth: hci2: command tx timeout [ 1640.132352][ T1468] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1641.595546][T27139] Bluetooth: hci2: command tx timeout [ 1643.514492][T27139] Bluetooth: hci7: Dropping invalid advertising data [ 1643.514744][T27139] Bluetooth: hci7: Malformed LE Event: 0x02 [ 1643.976511][T30398] bridge0: port 1(bridge_slave_0) entered blocking state [ 1643.976628][T30398] bridge0: port 1(bridge_slave_0) entered disabled state [ 1643.976870][T30398] bridge_slave_0: entered allmulticast mode [ 1644.040578][T30398] bridge_slave_0: entered promiscuous mode [ 1644.078293][T30398] bridge0: port 2(bridge_slave_1) entered blocking state [ 1644.078379][T30398] bridge0: port 2(bridge_slave_1) entered disabled state [ 1644.078511][T30398] bridge_slave_1: entered allmulticast mode [ 1644.106360][T30398] bridge_slave_1: entered promiscuous mode [ 1644.203764][T30565] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.7613'. [ 1644.211032][T30565] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.7613'. [ 1644.407717][T30398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1644.458192][T30398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1644.957497][T30398] team0: Port device team_slave_0 added [ 1644.982726][T30398] team0: Port device team_slave_1 added [ 1645.030886][T30582] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7618'. [ 1645.299415][ T1468] bridge_slave_1: left allmulticast mode [ 1645.299442][ T1468] bridge_slave_1: left promiscuous mode [ 1645.299657][ T1468] bridge0: port 2(bridge_slave_1) entered disabled state [ 1645.387528][ T1468] bridge_slave_0: left allmulticast mode [ 1645.387553][ T1468] bridge_slave_0: left promiscuous mode [ 1645.387725][ T1468] bridge0: port 1(bridge_slave_0) entered disabled state [ 1645.467590][T30591] kAFS: unable to lookup cell '' [ 1645.607399][T30595] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.7624'. [ 1645.608197][T30595] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.7624'. [ 1645.802227][T30599] binder: binder_mmap: 30598 2000003d3000-2000003d7000 bad vm_flags failed -1 [ 1646.463044][T30610] netlink: 64 bytes leftover after parsing attributes in process `syz.8.7628'. [ 1647.515307][ T1468] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1647.598319][ T1468] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1647.651048][ T1468] bond0 (unregistering): Released all slaves [ 1648.235844][T30629] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.7634'. [ 1648.278278][T30629] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.7634'. [ 1648.411437][T30398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1648.411453][T30398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1648.411481][T30398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1648.659782][T30398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1648.659795][T30398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1648.659823][T30398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1648.874522][T30637] binder: binder_mmap: 30636 2000003d3000-2000003d7000 bad vm_flags failed -1 [ 1649.062687][T30639] kAFS: unable to lookup cell '' [ 1649.267996][T30398] hsr_slave_0: entered promiscuous mode [ 1649.274566][T30398] hsr_slave_1: entered promiscuous mode [ 1649.281106][T30398] debugfs: 'hsr0' already exists in 'hsr' [ 1649.281179][T30398] Cannot create hsr debugfs directory [ 1649.854033][T30658] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.7644'. [ 1649.870923][T30658] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.7644'. [ 1650.154263][T30675] binder: binder_mmap: 30673 2000003d3000-2000003d7000 bad vm_flags failed -1 [ 1650.778875][ T5261] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1650.950961][T30702] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.7656'. [ 1650.951788][T30702] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.7656'. [ 1651.015174][ T1468] hsr_slave_0: left promiscuous mode [ 1651.056701][ T1468] hsr_slave_1: left promiscuous mode [ 1651.057564][ T1468] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1651.057583][ T1468] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1651.106393][ T1468] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1651.106419][ T1468] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1651.225762][ T1468] veth0_macvtap: left promiscuous mode [ 1651.226339][ T1468] veth1_vlan: left promiscuous mode [ 1651.226453][ T1468] veth0_vlan: left promiscuous mode [ 1651.632693][T30709] vxcan1: tx drop: invalid da for name 0x0000000000000001 [ 1652.075233][ T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1652.238134][ T10] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1652.238172][ T10] usb 6-1: can't read configurations, error -61 [ 1652.365145][ T10] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1653.568608][ T10] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1653.568649][ T10] usb 6-1: can't read configurations, error -61 [ 1653.569079][ T10] usb usb6-port1: attempt power cycle [ 1653.905156][ T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1653.952397][ T10] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1653.953863][ T10] usb 6-1: can't read configurations, error -61 [ 1654.057253][ T1468] team0 (unregistering): Port device team_slave_1 removed [ 1654.105269][ T10] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1654.130216][ T10] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1654.130256][ T10] usb 6-1: can't read configurations, error -61 [ 1654.131297][ T10] usb usb6-port1: unable to enumerate USB device [ 1654.287701][ T1468] team0 (unregistering): Port device team_slave_0 removed [ 1654.682230][T30740] netlink: 4768 bytes leftover after parsing attributes in process `syz.8.7667'. [ 1654.682811][T30740] netlink: 4768 bytes leftover after parsing attributes in process `syz.8.7667'. [ 1656.059417][T30781] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.7677'. [ 1656.061869][T30781] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.7677'. [ 1656.109642][T24979] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1656.363297][ T5261] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1656.475108][T24979] usb 9-1: Using ep0 maxpacket: 32 [ 1656.481042][T24979] usb 9-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1656.481071][T24979] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1656.481092][T24979] usb 9-1: Product: syz [ 1656.481108][T24979] usb 9-1: Manufacturer: syz [ 1656.481124][T24979] usb 9-1: SerialNumber: syz [ 1657.361926][T24979] usb 9-1: config 0 descriptor?? [ 1658.256108][T24979] peak_usb 9-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 1658.518885][T30799] vxcan1: tx drop: invalid da for name 0x0000000000000001 [ 1659.806385][ T10] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1659.810838][T24979] peak_usb 9-1:0.0: probe with driver peak_usb failed with error -71 [ 1659.846406][T24979] usb 9-1: USB disconnect, device number 15 [ 1659.850214][T30838] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.7687'. [ 1659.851723][T30838] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.7687'. [ 1659.965392][ T10] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1659.965427][ T10] usb 6-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 1659.965450][ T10] usb 6-1: Product: syz [ 1659.965465][ T10] usb 6-1: Manufacturer: syz [ 1659.965481][ T10] usb 6-1: SerialNumber: syz [ 1660.041243][ T10] usb 6-1: config 0 descriptor?? [ 1660.054092][ T10] ch341 6-1:0.0: ch341-uart converter detected [ 1660.258613][ T10] usb 6-1: failed to receive control message: -32 [ 1660.258672][ T10] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -32 [ 1660.375912][T24979] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1660.750790][T24979] usb 2-1: Using ep0 maxpacket: 16 [ 1660.881895][T30846] netlink: 43 bytes leftover after parsing attributes in process `syz.2.7689'. [ 1660.896221][T24979] usb 2-1: config 2 has an invalid interface number: 26 but max is 1 [ 1660.896266][T24979] usb 2-1: config 2 has an invalid interface number: 50 but max is 1 [ 1660.896289][T24979] usb 2-1: config 2 has no interface number 0 [ 1660.896326][T24979] usb 2-1: config 2 has no interface number 1 [ 1660.896408][T24979] usb 2-1: config 2 interface 26 altsetting 169 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 1660.896437][T24979] usb 2-1: config 2 interface 26 altsetting 169 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 1660.896464][T24979] usb 2-1: config 2 interface 26 altsetting 169 has an invalid descriptor for endpoint zero, skipping [ 1660.896500][T24979] usb 2-1: config 2 interface 50 altsetting 8 has a duplicate endpoint with address 0xF, skipping [ 1660.896525][T24979] usb 2-1: config 2 interface 50 altsetting 8 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 1660.896552][T24979] usb 2-1: config 2 interface 50 altsetting 8 bulk endpoint 0xC has invalid maxpacket 1024 [ 1660.896580][T24979] usb 2-1: config 2 interface 50 altsetting 8 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 1660.896606][T24979] usb 2-1: config 2 interface 50 altsetting 8 has a duplicate endpoint with address 0x9, skipping [ 1660.896629][T24979] usb 2-1: config 2 interface 26 has no altsetting 0 [ 1660.896647][T24979] usb 2-1: config 2 interface 50 has no altsetting 0 [ 1660.903220][T24979] usb 2-1: Dual-Role OTG device on HNP port [ 1660.903535][T24979] usb 2-1: New USB device found, idVendor=0c45, idProduct=6288, bcdDevice=e5.4c [ 1660.903562][T24979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1660.903583][T24979] usb 2-1: Manufacturer: ᾁ홱ட騐퉈⃋尢샲ꑋ릸꫉溵ﴃ긒湷덫Ɓꌑꔀ㟢貚䙅썂抌⸬䉼倜떢㪠걃뒝嗿︵獁酷犠暽맃삱ᐼ鵍 [ 1660.903606][T24979] usb 2-1: SerialNumber: ᘃ [ 1661.445880][T24979] usb 2-1: USB disconnect, device number 14 [ 1661.960037][T23802] usb 6-1: USB disconnect, device number 12 [ 1661.976315][T23802] ch341 6-1:0.0: device disconnected [ 1662.110663][T30865] netlink: 88 bytes leftover after parsing attributes in process `syz.5.7697'. [ 1662.110744][T30865] netlink: 108 bytes leftover after parsing attributes in process `syz.5.7697'. [ 1663.106525][T30860] vxcan1: tx drop: invalid da for name 0x0000000000000001 [ 1663.590923][T30885] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.7699'. [ 1663.594830][T30885] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.7699'. [ 1664.606738][T30398] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1664.853866][T30897] netlink: 43 bytes leftover after parsing attributes in process `syz.5.7702'. [ 1665.071686][T30398] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1665.135331][T30398] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1665.172586][T30398] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1665.182961][T30398] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1665.264200][T30398] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1665.274234][T30398] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1665.324193][T27139] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 1665.335261][T27139] Bluetooth: Wrong link type (-22) [ 1665.342882][T27139] Bluetooth: hci1: link tx timeout [ 1665.343105][T27139] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1666.664143][T30398] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1667.025440][T23802] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1667.415579][T23802] usb 2-1: Using ep0 maxpacket: 16 [ 1667.418704][T23802] usb 2-1: config 2 has an invalid interface number: 26 but max is 1 [ 1667.418735][T23802] usb 2-1: config 2 has an invalid interface number: 50 but max is 1 [ 1667.418760][T23802] usb 2-1: config 2 has no interface number 0 [ 1667.418778][T23802] usb 2-1: config 2 has no interface number 1 [ 1667.418837][T23802] usb 2-1: config 2 interface 26 altsetting 169 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 1667.418869][T23802] usb 2-1: config 2 interface 26 altsetting 169 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 1667.418898][T23802] usb 2-1: config 2 interface 26 altsetting 169 has an invalid descriptor for endpoint zero, skipping [ 1667.418937][T23802] usb 2-1: config 2 interface 50 altsetting 8 has a duplicate endpoint with address 0xF, skipping [ 1667.418964][T23802] usb 2-1: config 2 interface 50 altsetting 8 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 1667.418994][T23802] usb 2-1: config 2 interface 50 altsetting 8 bulk endpoint 0xC has invalid maxpacket 1024 [ 1667.419024][T23802] usb 2-1: config 2 interface 50 altsetting 8 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 1667.419052][T23802] usb 2-1: config 2 interface 50 altsetting 8 has a duplicate endpoint with address 0x9, skipping [ 1667.419077][T23802] usb 2-1: config 2 interface 26 has no altsetting 0 [ 1667.419097][T23802] usb 2-1: config 2 interface 50 has no altsetting 0 [ 1667.452248][T27139] Bluetooth: hci1: command 0x0406 tx timeout [ 1667.460455][T23802] usb 2-1: Dual-Role OTG device on HNP port [ 1667.461148][T23802] usb 2-1: New USB device found, idVendor=0c45, idProduct=6288, bcdDevice=e5.4c [ 1667.461219][T23802] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1667.461294][T23802] usb 2-1: Manufacturer: ᾁ홱ட騐퉈⃋尢샲ꑋ릸꫉溵ﴃ긒湷덫Ɓꌑꔀ㟢貚䙅썂抌⸬䉼倜떢㪠걃뒝嗿︵獁酷犠暽맃삱ᐼ鵍 [ 1667.461397][T23802] usb 2-1: SerialNumber: ᘃ [ 1668.752973][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.026506][T23802] usb 2-1: USB disconnect, device number 15 [ 1669.080198][T30936] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.7709'. [ 1669.080851][T30936] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.7709'. [ 1669.437850][T30398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1669.518204][T30398] 8021q: adding VLAN 0 to HW filter on device team0 [ 1669.564847][T18380] bridge0: port 1(bridge_slave_0) entered blocking state [ 1669.574811][T18380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1669.631061][ T1319] bridge0: port 2(bridge_slave_1) entered blocking state [ 1669.631198][ T1319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1670.463033][T30938] vxcan1: tx drop: invalid da for name 0x0000000000000001 [ 1671.035639][T28556] Bluetooth: hci1: command 0x0406 tx timeout [ 1671.923146][T30976] netlink: 43 bytes leftover after parsing attributes in process `syz.2.7716'. [ 1672.355556][ T5613] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1672.585674][T30989] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.7719'. [ 1672.591965][T30989] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.7719'. [ 1672.651128][ T5613] usb 9-1: Using ep0 maxpacket: 8 [ 1672.654237][ T5613] usb 9-1: config index 0 descriptor too short (expected 30, got 18) [ 1672.709556][ T5613] usb 9-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1672.709867][ T5613] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1672.709894][ T5613] usb 9-1: Product: syz [ 1672.709911][ T5613] usb 9-1: Manufacturer: syz [ 1672.709928][ T5613] usb 9-1: SerialNumber: syz [ 1672.852507][ T5613] usb 9-1: config 0 descriptor?? [ 1672.903496][ T5613] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1672.903558][ T5613] usb 9-1: setting power ON [ 1672.903581][ T5613] dvb-usb: bulk message failed: -22 (2/0) [ 1673.246268][ T5613] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1673.248489][ T5613] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1673.248551][ T5613] usb 9-1: media controller created [ 1673.279749][ T5613] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1673.297382][ T5613] usb 9-1: selecting invalid altsetting 6 [ 1673.297407][ T5613] usb 9-1: digital interface selection failed (-22) [ 1673.297436][ T5613] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1673.376897][ T5613] usb 9-1: setting power OFF [ 1673.377082][ T5613] dvb-usb: bulk message failed: -22 (2/0) [ 1673.377102][ T5613] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1673.377115][ T5613] (NULL device *): no alternate interface [ 1673.473566][ T5613] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1673.571853][ T5613] usb 9-1: USB disconnect, device number 16 [ 1673.655155][ T5733] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1673.805174][ T5733] usb 6-1: Using ep0 maxpacket: 16 [ 1673.809379][ T5733] usb 6-1: config 2 has an invalid interface number: 26 but max is 1 [ 1673.809408][ T5733] usb 6-1: config 2 has an invalid interface number: 50 but max is 1 [ 1673.809431][ T5733] usb 6-1: config 2 has no interface number 0 [ 1673.809449][ T5733] usb 6-1: config 2 has no interface number 1 [ 1673.809507][ T5733] usb 6-1: config 2 interface 26 altsetting 169 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 1673.809537][ T5733] usb 6-1: config 2 interface 26 altsetting 169 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 1673.809564][ T5733] usb 6-1: config 2 interface 26 altsetting 169 has an invalid descriptor for endpoint zero, skipping [ 1673.809602][ T5733] usb 6-1: config 2 interface 50 altsetting 8 has a duplicate endpoint with address 0xF, skipping [ 1673.809628][ T5733] usb 6-1: config 2 interface 50 altsetting 8 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 1673.809657][ T5733] usb 6-1: config 2 interface 50 altsetting 8 bulk endpoint 0xC has invalid maxpacket 1024 [ 1673.809685][ T5733] usb 6-1: config 2 interface 50 altsetting 8 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 1673.809839][ T5733] usb 6-1: config 2 interface 50 altsetting 8 has a duplicate endpoint with address 0x4, skipping [ 1673.809866][ T5733] usb 6-1: config 2 interface 26 has no altsetting 0 [ 1673.809886][ T5733] usb 6-1: config 2 interface 50 has no altsetting 0 [ 1673.992827][ T5733] usb 6-1: New USB device found, idVendor=0c45, idProduct=6288, bcdDevice=e5.4c [ 1673.992858][ T5733] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1673.992880][ T5733] usb 6-1: Manufacturer: ᾁ홱ட騐퉈⃋尢샲ꑋ릸꫉溵ﴃ긒湷덫Ɓꌑꔀ㟢貚䙅썂抌⸬䉼倜떢㪠걃뒝嗿︵獁酷犠暽맃삱ᐼ鵍 [ 1673.992902][ T5733] usb 6-1: SerialNumber: ᘃ [ 1674.460202][ T5733] usb 6-1: USB disconnect, device number 13 [ 1674.569221][T30398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1678.276015][T31039] netlink: 43 bytes leftover after parsing attributes in process `syz.1.7727'. [ 1679.161150][T31051] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.7729'. [ 1679.174777][T31051] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.7729'. [ 1679.748686][T30398] veth0_vlan: entered promiscuous mode [ 1680.570822][T31046] vxcan1: tx drop: invalid da for name 0x0000000000000001 [ 1680.804911][T30398] veth1_vlan: entered promiscuous mode [ 1680.948799][T31005] netlink: set zone limit has 4 unknown bytes [ 1681.005145][T24979] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1681.062925][T30398] veth0_macvtap: entered promiscuous mode [ 1681.091779][T30398] veth1_macvtap: entered promiscuous mode [ 1681.195056][T24979] usb 6-1: Using ep0 maxpacket: 8 [ 1681.202120][T24979] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 1681.224075][T24979] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1681.224104][T24979] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1681.224125][T24979] usb 6-1: Product: syz [ 1681.224488][T24979] usb 6-1: Manufacturer: syz [ 1681.224505][T24979] usb 6-1: SerialNumber: syz [ 1681.264154][T24979] usb 6-1: config 0 descriptor?? [ 1681.274793][T24979] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1681.274844][T24979] usb 6-1: setting power ON [ 1681.274865][T24979] dvb-usb: bulk message failed: -22 (2/0) [ 1681.304717][T24979] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1681.314927][T24979] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1681.323670][T24979] usb 6-1: media controller created [ 1681.348759][T24979] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1681.388371][T24979] usb 6-1: selecting invalid altsetting 6 [ 1681.388394][T24979] usb 6-1: digital interface selection failed (-22) [ 1681.388413][T24979] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1681.389306][T24979] usb 6-1: setting power OFF [ 1681.389443][T24979] dvb-usb: bulk message failed: -22 (2/0) [ 1681.389465][T24979] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1681.389480][T24979] (NULL device *): no alternate interface [ 1681.441582][T30398] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1681.536144][T30398] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1681.572239][ T67] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1681.590593][ T67] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1681.593256][ T67] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1681.622880][T31061] ------------[ cut here ]------------ [ 1681.622894][T31061] refcount_t: addition on 0; use-after-free. [ 1681.622924][T31061] WARNING: lib/refcount.c:25 at refcount_warn_saturate+0x9f/0x110, CPU#1: syz.5.7731/31061 [ 1681.622973][T31061] Modules linked in: [ 1681.622998][T31061] CPU: 1 UID: 0 PID: 31061 Comm: syz.5.7731 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1681.623029][T31061] Tainted: [L]=SOFTLOCKUP [ 1681.623037][T31061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1681.623052][T31061] RIP: 0010:refcount_warn_saturate+0x9f/0x110 [ 1681.623078][T31061] Code: eb 66 85 db 74 3e 83 fb 01 75 4c e8 db 10 23 fd 48 8d 3d 24 d0 f1 0a 67 48 0f b9 3a eb 4a e8 c8 10 23 fd 48 8d 3d 21 d0 f1 0a <67> 48 0f b9 3a eb 37 e8 b5 10 23 fd 48 8d 3d 1e d0 f1 0a 67 48 0f [ 1681.623097][T31061] RSP: 0000:ffffc90004f9f6d8 EFLAGS: 00010287 [ 1681.623115][T31061] RAX: ffffffff84a16078 RBX: 0000000000000002 RCX: 0000000000080000 [ 1681.623131][T31061] RDX: ffffc9000fb0c000 RSI: 000000000000086b RDI: ffffffff8f9330a0 [ 1681.623147][T31061] RBP: 0000000000000000 R08: ffff888040148000 R09: 0000000000000005 [ 1681.623161][T31061] R10: 0000000000000100 R11: 0000000000000004 R12: ffffffff8c05d7c8 [ 1681.623177][T31061] R13: dffffc0000000000 R14: ffff8880774b5188 R15: dffffc0000000000 [ 1681.623194][T31061] FS: 00007f64898d66c0(0000) GS:ffff888126279000(0000) knlGS:0000000000000000 [ 1681.623214][T31061] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1681.623229][T31061] CR2: 0000001b31923ffc CR3: 00000000859d8000 CR4: 00000000003526f0 [ 1681.623248][T31061] Call Trace: [ 1681.623257][T31061] [ 1681.623267][T31061] kobject_get+0xfa/0x120 [ 1681.623390][T31061] i2c_get_adapter+0x6d/0xa0 [ 1681.623427][T31061] i2cdev_open+0x48/0x190 [ 1681.623463][T31061] chrdev_open+0x4d0/0x5f0 [ 1681.623497][T31061] ? __pfx_chrdev_open+0x10/0x10 [ 1681.623528][T31061] ? fsnotify_open_perm_and_set_mode+0x13b/0x6e0 [ 1681.623561][T31061] ? __pfx_chrdev_open+0x10/0x10 [ 1681.623601][T31061] do_dentry_open+0x83d/0x13e0 [ 1681.623646][T31061] vfs_open+0x3b/0x350 [ 1681.623675][T31061] ? path_openat+0x2e2b/0x38a0 [ 1681.623702][T31061] path_openat+0x2e43/0x38a0 [ 1681.623730][T31061] ? lockdep_hardirqs_on+0x7a/0x110 [ 1681.623779][T31061] ? rcu_is_watching+0x15/0xb0 [ 1681.623813][T31061] ? trace_sched_exit_tp+0x3a/0x130 [ 1681.623867][T31061] ? __pfx_path_openat+0x10/0x10 [ 1681.623909][T31061] ? do_raw_spin_lock+0x12b/0x2f0 [ 1681.623945][T31061] do_file_open+0x23e/0x4a0 [ 1681.623980][T31061] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1681.624007][T31061] ? __pfx_do_file_open+0x10/0x10 [ 1681.624028][T31061] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1681.624079][T31061] ? alloc_fd+0x64e/0x6c0 [ 1681.624118][T31061] do_sys_openat2+0x113/0x200 [ 1681.624150][T31061] ? lockdep_hardirqs_on+0x7a/0x110 [ 1681.624174][T31061] ? __pfx_do_sys_openat2+0x10/0x10 [ 1681.624211][T31061] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1681.624240][T31061] __x64_sys_openat+0x138/0x170 [ 1681.624266][T31061] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1681.624282][T31061] do_syscall_64+0x15f/0xf80 [ 1681.624304][T31061] ? trace_irq_disable+0x3b/0x140 [ 1681.624323][T31061] ? clear_bhb_loop+0x40/0x90 [ 1681.624342][T31061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1681.624376][T31061] RIP: 0033:0x7f648b63d60e [ 1681.624391][T31061] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1681.624404][T31061] RSP: 002b:00007f64898d5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1681.624420][T31061] RAX: ffffffffffffffda RBX: 00007f64898d66c0 RCX: 00007f648b63d60e [ 1681.624431][T31061] RDX: 0000000000002603 RSI: 00007f64898d5c00 RDI: ffffffffffffff9c [ 1681.624442][T31061] RBP: 00007f64898d5c00 R08: 0000000000000000 R09: 0000000000000000 [ 1681.624452][T31061] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1681.624463][T31061] R13: 00007f648b8f6038 R14: 00007f648b8f5fa0 R15: 00007fff94260ee8 [ 1681.624486][T31061] [ 1681.624494][T31061] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1681.624507][T31061] CPU: 1 UID: 0 PID: 31061 Comm: syz.5.7731 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1681.624528][T31061] Tainted: [L]=SOFTLOCKUP [ 1681.624534][T31061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1681.624543][T31061] Call Trace: [ 1681.624548][T31061] [ 1681.624556][T31061] vpanic+0x56c/0xa60 [ 1681.624575][T31061] ? __pfx__printk+0x10/0x10 [ 1681.624597][T31061] ? __pfx_vpanic+0x10/0x10 [ 1681.624614][T31061] ? is_bpf_text_address+0x292/0x2b0 [ 1681.624634][T31061] ? is_bpf_text_address+0x26/0x2b0 [ 1681.624661][T31061] panic+0xc5/0xd0 [ 1681.624679][T31061] ? __pfx_panic+0x10/0x10 [ 1681.624709][T31061] __warn+0x315/0x4c0 [ 1681.624726][T31061] ? refcount_warn_saturate+0x9f/0x110 [ 1681.624745][T31061] ? refcount_warn_saturate+0x9f/0x110 [ 1681.624763][T31061] __report_bug+0x29a/0x540 [ 1681.624805][T31061] ? rt_mutex_slowlock_block+0x56c/0x680 [ 1681.624829][T31061] ? refcount_warn_saturate+0x9f/0x110 [ 1681.624846][T31061] ? __pfx___report_bug+0x10/0x10 [ 1681.624867][T31061] ? rt_mutex_slowlock+0x420/0x780 [ 1681.624890][T31061] ? rt_mutex_slowlock+0x1fd/0x780 [ 1681.624914][T31061] report_bug_entry+0x19a/0x290 [ 1681.624931][T31061] ? refcount_warn_saturate+0x9f/0x110 [ 1681.624947][T31061] ? refcount_warn_saturate+0xa4/0x110 [ 1681.624993][T31061] handle_bug+0xce/0x200 [ 1681.625043][T31061] exc_invalid_op+0x1a/0x50 [ 1681.625064][T31061] asm_exc_invalid_op+0x1a/0x20 [ 1681.625080][T31061] RIP: 0010:refcount_warn_saturate+0x9f/0x110 [ 1681.625099][T31061] Code: eb 66 85 db 74 3e 83 fb 01 75 4c e8 db 10 23 fd 48 8d 3d 24 d0 f1 0a 67 48 0f b9 3a eb 4a e8 c8 10 23 fd 48 8d 3d 21 d0 f1 0a <67> 48 0f b9 3a eb 37 e8 b5 10 23 fd 48 8d 3d 1e d0 f1 0a 67 48 0f [ 1681.625112][T31061] RSP: 0000:ffffc90004f9f6d8 EFLAGS: 00010287 [ 1681.625126][T31061] RAX: ffffffff84a16078 RBX: 0000000000000002 RCX: 0000000000080000 [ 1681.625138][T31061] RDX: ffffc9000fb0c000 RSI: 000000000000086b RDI: ffffffff8f9330a0 [ 1681.625149][T31061] RBP: 0000000000000000 R08: ffff888040148000 R09: 0000000000000005 [ 1681.625160][T31061] R10: 0000000000000100 R11: 0000000000000004 R12: ffffffff8c05d7c8 [ 1681.625170][T31061] R13: dffffc0000000000 R14: ffff8880774b5188 R15: dffffc0000000000 [ 1681.625188][T31061] ? refcount_warn_saturate+0x98/0x110 [ 1681.625211][T31061] ? refcount_warn_saturate+0x98/0x110 [ 1681.625229][T31061] kobject_get+0xfa/0x120 [ 1681.625250][T31061] i2c_get_adapter+0x6d/0xa0 [ 1681.625275][T31061] i2cdev_open+0x48/0x190 [ 1681.625306][T31061] chrdev_open+0x4d0/0x5f0 [ 1681.625330][T31061] ? __pfx_chrdev_open+0x10/0x10 [ 1681.625352][T31061] ? fsnotify_open_perm_and_set_mode+0x13b/0x6e0 [ 1681.625375][T31061] ? __pfx_chrdev_open+0x10/0x10 [ 1681.625396][T31061] do_dentry_open+0x83d/0x13e0 [ 1681.625428][T31061] vfs_open+0x3b/0x350 [ 1681.625449][T31061] ? path_openat+0x2e2b/0x38a0 [ 1681.625469][T31061] path_openat+0x2e43/0x38a0 [ 1681.625489][T31061] ? lockdep_hardirqs_on+0x7a/0x110 [ 1681.625510][T31061] ? rcu_is_watching+0x15/0xb0 [ 1681.625535][T31061] ? trace_sched_exit_tp+0x3a/0x130 [ 1681.625575][T31061] ? __pfx_path_openat+0x10/0x10 [ 1681.625606][T31061] ? do_raw_spin_lock+0x12b/0x2f0 [ 1681.625650][T31061] do_file_open+0x23e/0x4a0 [ 1681.625669][T31061] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1681.625691][T31061] ? __pfx_do_file_open+0x10/0x10 [ 1681.625708][T31061] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1681.625749][T31061] ? alloc_fd+0x64e/0x6c0 [ 1681.625782][T31061] do_sys_openat2+0x113/0x200 [ 1681.625807][T31061] ? lockdep_hardirqs_on+0x7a/0x110 [ 1681.625825][T31061] ? __pfx_do_sys_openat2+0x10/0x10 [ 1681.625856][T31061] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1681.625876][T31061] __x64_sys_openat+0x138/0x170 [ 1681.625904][T31061] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1681.625922][T31061] do_syscall_64+0x15f/0xf80 [ 1681.625939][T31061] ? trace_irq_disable+0x3b/0x140 [ 1681.625958][T31061] ? clear_bhb_loop+0x40/0x90 [ 1681.626003][T31061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1681.626027][T31061] RIP: 0033:0x7f648b63d60e [ 1681.626047][T31061] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1681.626067][T31061] RSP: 002b:00007f64898d5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1681.626091][T31061] RAX: ffffffffffffffda RBX: 00007f64898d66c0 RCX: 00007f648b63d60e [ 1681.626108][T31061] RDX: 0000000000002603 RSI: 00007f64898d5c00 RDI: ffffffffffffff9c [ 1681.626129][T31061] RBP: 00007f64898d5c00 R08: 0000000000000000 R09: 0000000000000000 [ 1681.626139][T31061] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1681.626151][T31061] R13: 00007f648b8f6038 R14: 00007f648b8f5fa0 R15: 00007fff94260ee8 [ 1681.626176][T31061] [ 1681.626915][T31061] Kernel Offset: disabled