last executing test programs: 7m35.701552914s ago: executing program 2 (id=64): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42002) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000300)="b81b010f00d09a81008500baf80c66b8c0991f8c66efbafc0cedf30fc7b20f00ba2000b004ee0f01c26766c7442400000000006766c74424025d4700006766c744240600000000670f011424f3d93b64640f086766c7442400030000006766c7442402b2a600006766c744240600000000670f011424", 0x76}], 0x1, 0x1, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz0\x00', {0xfff7, 0xc, 0x100, 0x81}, 0x1d, [0x7b, 0xb7e2, 0x3, 0x9, 0x100, 0x3, 0x1, 0x7, 0x9, 0x2, 0x7, 0xa, 0x3, 0x0, 0x7f, 0xfffffffd, 0x7fff, 0x9, 0x6, 0xb60, 0x2, 0x6, 0x7, 0x6, 0xff, 0x2, 0xa5f2b87a, 0x409, 0x0, 0xfc75, 0x8, 0x9, 0x4, 0x2, 0xffff, 0x81, 0xfffff765, 0x2, 0x3, 0x6, 0xa, 0x2, 0x5, 0x0, 0x3ff, 0x6, 0x7, 0x8000, 0xfffffffd, 0x80, 0x8, 0x8, 0x9, 0x5, 0x101, 0xc3c, 0x1734, 0x7fff, 0x7ffc, 0x1, 0x6, 0x5, 0x1, 0x4], [0x8, 0x3, 0x8, 0x8, 0x0, 0x8, 0x4, 0x200, 0x0, 0x10, 0x6, 0x7, 0x8, 0xe61, 0xffffff73, 0x1000, 0x6, 0x13e5, 0x3, 0x3, 0x1000, 0x7, 0x1, 0x3b40, 0x4, 0x1000, 0x5, 0x7fff, 0x8, 0x5a, 0xffff2503, 0x7fffffff, 0x6995, 0x1, 0x80000000, 0x8, 0xdab, 0x5, 0x2, 0x76c4, 0xfffffffd, 0x5, 0x3, 0x10000, 0xd, 0x2, 0x9, 0x10, 0x4000e, 0x9, 0x7, 0xa, 0x9, 0x3, 0x8, 0x3, 0x2, 0x3a6, 0x80000000, 0xc0d, 0xfffffffd, 0xc, 0xc, 0xfffffffb], [0x3, 0x6, 0x6, 0xa670, 0x1000, 0x0, 0x80000000, 0x5, 0x7f, 0xa, 0xfc, 0x1003, 0xf1, 0x6, 0x6, 0x10000, 0x72, 0xc, 0x633, 0xd, 0x7, 0x6, 0x80000000, 0x6, 0x0, 0x7, 0x8, 0x2ef3adcb, 0x10, 0x2, 0x8, 0x8, 0x74, 0x4, 0x7, 0x7ff, 0xfffffff2, 0x63, 0x7, 0x2, 0x3, 0xfffffff3, 0x20a7fd9e, 0xfffffffd, 0x2, 0xa1, 0x0, 0x9d, 0x7, 0xa8a, 0x2, 0x6, 0x77, 0x8, 0x1ff, 0x7, 0x7, 0x2, 0x0, 0x3, 0x8, 0x2, 0x3, 0x4], [0x4, 0x4, 0x5, 0x8000, 0x493e, 0x3, 0x8, 0x7, 0x5, 0x5, 0x5d3a, 0x5, 0x9, 0x3ff, 0xb88f, 0xffff0000, 0x9, 0xf79f, 0x2, 0x10, 0x8, 0x2, 0xff, 0x6, 0x4, 0x8, 0x200, 0x0, 0x7, 0x4e6, 0x8, 0x40000000, 0x5ef, 0x8400, 0xc, 0x41, 0x400, 0x1, 0x5, 0x0, 0x9a8, 0x99f, 0x231, 0x3ff, 0x8, 0x1, 0xffff0001, 0x1, 0x215c, 0x10, 0x8, 0x5396, 0x6161, 0x9, 0x101, 0x206, 0x8, 0x431, 0x6, 0x5, 0x4, 0x7b, 0x7fc, 0x9]}, 0x45c) syz_ublk_setup_io_uring(0x6086, &(0x7f0000000100)={0x0, 0xb517, 0x50c0, 0x1, 0x67}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r4, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000001500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r5, 0xc0145b0e, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x3, 0x5, 0x9c, '\x00', 0x1bd}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000005c0)={0x2, 0x0, @ioapic={0x60000, 0x1, 0x2, 0xfffffffe, 0x0, [{0x2, 0x4, 0x3}, {0x9, 0x8, 0x9, '\x00', 0xf}, {0xfd, 0x7f, 0xd3, '\x00', 0xe9}, {0xfd, 0x5, 0xf5, '\x00', 0x13}, {0x7, 0x9, 0xf5, '\x00', 0xb4}, {0xf, 0x4, 0x54, '\x00', 0x2}, {0x75, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x5, 0xc, '\x00', 0x59}, {0x7f, 0x5, 0x4a, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0x9c}, {0xfb, 0x1, 0xff, '\x00', 0x1}, {0xd, 0x5, 0x26}, {0xcf, 0xe, 0x1, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x1, 0x2, 0x6, '\x00', 0xc}, {0x9, 0x6, 0x2, '\x00', 0x9}, {0x4, 0x11, 0x2, '\x00', 0xe9}, {0x7, 0x2, 0x1, '\x00', 0xc2}, {0x2, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xe, 0x87, '\x00', 0x7d}, {0x10, 0x9, 0x92, '\x00', 0x10}, {0xb8, 0x3, 0xf3, '\x00', 0x4}, {0x7, 0x22, 0xa}]}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f00, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0xf3, @time={0xffff, 0x400006}, 0x0, {0x0, 0x9a}}) syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4a300", 0x48, 0x3a, 0x1, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x6, {0xc, 0x6, "f6cd53", 0xffff, 0x3c, 0x1, @dev={0xfe, 0x80, '\x00', 0x35}, @local, [@dstopts={0x2f, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x7}, @jumbo={0xc2, 0x4, 0xe}]}]}}}}}}}, 0x0) 7m33.829715415s ago: executing program 2 (id=70): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r2, &(0x7f0000002080)={0xfc, {"a2336848149e516d4b5e071887f70e09d0381edd7fc6e5539b0d430a8b089b3f38356e030890e0879b0a71c6e70a9b334a959b669a242f0a0af3988f7ef319520100ffe8d178708c523c921b1b3e31070d0773090acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9903f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928d28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f2730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b81305c038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849cd9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484539ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1f93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb8843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b2804563407308c58c89d9e99c81769177e6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463373b4b87c9050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e080000007ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e3933ed07c2b8081c128ad2706f48261ff07000000000000613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59500000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadbac5c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) r3 = eventfd2(0x0, 0x80800) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x2, 0x0, 0x0, r3}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xfffffffe, @vifc_lcl_addr=@local, @empty}, 0x10) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@broadcast, @loopback}, 0x10) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x2, 0x20, 0x68, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@rr={0x7, 0x3, 0xb2}]}}, @echo={0x8, 0x0, 0x0, 0x6, 0x1}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) prctl$PR_SET_VMA(0x4f, 0x0, &(0x7f0000122000/0x1000)=nil, 0x1000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r4, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) r7 = socket$inet_sctp(0x2, 0x5, 0x84) close(r7) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="200000000000000084000000020000000a000416280000000b000002bfde96c0430211c4bc7c1b8dff692412e86a37a572311bf352d493f18bd7721b5ca2344d49cfe9887c3b310a3875b41bacb111747ea7fd1df0706d424963389db59492869c89dc6e290393d910", @ANYRES32=r9], 0x20, 0x2400e044}, 0x20001080) syz_ublk_setup_io_uring(0xacd, &(0x7f0000000340)={0x0, 0xdb33, 0x4, 0x3, 0x194}, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) 7m32.776754733s ago: executing program 2 (id=75): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0x0, 0xb47, 0x8, 0x0, 0xfffffff7, 0x401}, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) preadv2(r0, &(0x7f0000000200)=[{&(0x7f0000000180)=""/61, 0x3d}], 0x1, 0x40, 0x4, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) 7m31.756924344s ago: executing program 2 (id=83): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x88101) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', 0x10) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r2, &(0x7f0000004200)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000000300)="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") prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) bind$unix(r3, &(0x7f0000000100)=@file={0x1, './bus\x00'}, 0x6e) r4 = syz_usb_connect(0x2, 0x4b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000040480b03100001000000010902390002010080fa0904000000ff0000000904010000ff0000000904010103ff000000070501024000000705810240"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_ep_read(r4, 0x1, 0x0, 0x0) syz_usb_ep_write(r4, 0x81, 0x21, &(0x7f0000000200)='\x00'/33) syz_usb_ep_read(r4, 0x1, 0x40, &(0x7f0000000100)=""/64) syz_usb_control_io(r4, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x40, 0x6, 0x50, {0x50, 0x9, "db26b98043c695eebafdbf24746de7811d76b67615058a77a60dee1e35b7accca3da924cd2562cd411834f3d8c38902a26aaa9b8bd1e34d8ca26afb73d7867468c3688463728fa16991074e3fe80"}}, &(0x7f0000000480)={0x0, 0x3, 0x2c, @string={0x2c, 0x3, "71f74613c8ace40d7c0479b147d337ac3cdf8ca5dc28c1fd0e191cf4d846eb5a8bc2d010c69bb5996fab"}}, &(0x7f00000005c0)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x5, 0x5, 0x6}]}}, &(0x7f0000000680)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x8, 0x81, 0x7, "9156b0c7", "b7ef695d"}}, &(0x7f00000006c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x40, 0x2, 0x2, 0x81, 0x0, 0x8, 0xc}}}, &(0x7f0000000c00)={0x84, &(0x7f0000000740)={0x0, 0x10, 0xe2, "21145d0787a6f96fad03249a336e92f460f959d16abcc71c478d329d5916ad7f2ae6867d5faaf5060dfc99c6173d87137e95bdffe2e59f363bdd0722db9e386c92bcb4b63692b547fe35dc109b73b99fa600d7485f2725931aa44a3a7bfd3db10e4b35b94fd6a675b9db09fb4eeebf0c2929a88c50a2e4377e58f9332a0d914028ee38cae7124a39af28fcbe98c92df99d05ae2b5d544713f461105707c4c7853aa18b21c0848a64a723acb8f461d0c1c5cab36f44eaf0a2d31bb8281f92448e14a0767e9a4592134d75cf47906d1b9daf2083ee3c37e81a7d1f803663b3da1593e8"}, &(0x7f0000000840)={0x0, 0xa, 0x1}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000008c0)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000900)={0x20, 0x0, 0x4, {0x20, 0xee}}, &(0x7f0000000940)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000980)={0x40, 0x9, 0x1, 0x8}, &(0x7f00000009c0)={0x40, 0xb, 0x2, "2784"}, &(0x7f0000000a00)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000a40)={0x40, 0x13, 0x6, @link_local}, &(0x7f0000000a80)={0x40, 0x17, 0x6, @local}, &(0x7f0000000ac0)={0x40, 0x19, 0x2, "b399"}, &(0x7f0000000b00)={0x40, 0x1a, 0x2}, &(0x7f0000000b40)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000b80)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000bc0)={0x40, 0x21, 0x1, 0xff}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x100, 0x399}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) io_uring_enter(r5, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}, 0x1, 0x0, 0x0, 0x40800}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newlink={0x50, 0x10, 0x503, 0x70bd2d, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1200}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x28452, 0x40900}}}}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040804}, 0x2000000) 7m28.23854249s ago: executing program 2 (id=98): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x4) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000100)={0x0, 0x40000200, 0x0, 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv6_newrule={0x44, 0x20, 0x1, 0x4, 0x25dfdbfb, {0xa, 0x40, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x8}, [@FRA_SRC={0x14, 0x2, @private2}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x44}}, 0x40000) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x539, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1010, 0x5010}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0xff}}]}}}]}, 0x5c}}, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x3b, 0x0, 0x7fff}]}) 7m26.494252567s ago: executing program 2 (id=103): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newchain={0x6c, 0x64, 0x10, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x1, 0xc}, {0xffe0, 0x2}, {0x4, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0x1, 0xc0}}, @TCA_RATE={0x6, 0x5, {0xcf}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_RATE={0x6, 0x5, {0x9, 0x7f}}, @TCA_RATE={0x6, 0x5, {0x1, 0x66}}, @TCA_RATE={0x6, 0x5, {0xf3, 0x7}}, @TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_RATE={0x6, 0x5, {0x6, 0x1}}]}, 0x6c}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048044) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r2, 0x40049366, &(0x7f0000000080)=0x2) r3 = syz_usb_connect$uac1(0x2, 0x72, &(0x7f0000000200)=ANY=[@ANYBLOB="12010102000000106b1d01014000010203010912600003010980000904000000010100000a240100000a0002010209040100000102000009040101010102f80009050109200003ff0a0725010c03000409040200000102000009040201010102000009058209080000091c0725010c02ff7f"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, &(0x7f0000000900)={0x2c, 0x0, &(0x7f0000000740)={0x0, 0x3, 0x48, @string={0x48, 0x3, "26a0f18501697521e93441dbc2e38b5ecc305d635e5f2858c1aeddb87b09484300a8a67243062ef365c94676a566553d33c79e4ea1d94de56e266ef9559807beecddb2dbecdd"}}, 0x0, 0x0, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x3) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0x9b, {"a2e3ad09ed0d09f91a5e070987f70e06d038e7ff7fc6e5539b0d3e0e8b089b3f360768030890e0879b0a72c6e70a9b334a959b669a240d0a0af3988f7ef319520100ffe8d178708c526db51b1b5b31070d0773090acd3b78130daa61d8e8040001000000b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f6709000000a141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7af1d0e54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c01008e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e1a63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0d8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0xfffffffffffffebd}}, 0x1006) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20000000000, 0xfffffffffffffffd, 0x10000000, 0x3}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) fsopen(&(0x7f00000000c0)='9p\x00', 0x1) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x21182, 0x0) read$FUSE(r7, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040840}, 0x40) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r8, 0x0, 0x40000100) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000007, 0x200000005c832, 0xffffffffffffffff, 0x9dc0d000) 7m25.842893412s ago: executing program 32 (id=103): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newchain={0x6c, 0x64, 0x10, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x1, 0xc}, {0xffe0, 0x2}, {0x4, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0x1, 0xc0}}, @TCA_RATE={0x6, 0x5, {0xcf}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_RATE={0x6, 0x5, {0x9, 0x7f}}, @TCA_RATE={0x6, 0x5, {0x1, 0x66}}, @TCA_RATE={0x6, 0x5, {0xf3, 0x7}}, @TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_RATE={0x6, 0x5, {0x6, 0x1}}]}, 0x6c}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048044) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r2, 0x40049366, &(0x7f0000000080)=0x2) r3 = syz_usb_connect$uac1(0x2, 0x72, &(0x7f0000000200)=ANY=[@ANYBLOB="12010102000000106b1d01014000010203010912600003010980000904000000010100000a240100000a0002010209040100000102000009040101010102f80009050109200003ff0a0725010c03000409040200000102000009040201010102000009058209080000091c0725010c02ff7f"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, &(0x7f0000000900)={0x2c, 0x0, &(0x7f0000000740)={0x0, 0x3, 0x48, @string={0x48, 0x3, "26a0f18501697521e93441dbc2e38b5ecc305d635e5f2858c1aeddb87b09484300a8a67243062ef365c94676a566553d33c79e4ea1d94de56e266ef9559807beecddb2dbecdd"}}, 0x0, 0x0, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x3) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0x9b, {"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", 0xfffffffffffffebd}}, 0x1006) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20000000000, 0xfffffffffffffffd, 0x10000000, 0x3}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) fsopen(&(0x7f00000000c0)='9p\x00', 0x1) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x21182, 0x0) read$FUSE(r7, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040840}, 0x40) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r8, 0x0, 0x40000100) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000007, 0x200000005c832, 0xffffffffffffffff, 0x9dc0d000) 6m51.474936628s ago: executing program 4 (id=219): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x60000, 0x10c04}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) r3 = socket$netlink(0x10, 0x3, 0x0) unshare(0x4020400) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r4, 0x0, 0xffffffffffffff9c, 0x0, 0x44) unshare(0x2c020400) move_mount(r4, 0x0, 0xffffffffffffff9c, 0x0, 0x75) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r6, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd00ac6700000000000000000000c2888e7d52164ec480e79200000100", [0x0, 0x2000000000001]}}) r7 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r8 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x80041) ioctl$SG_IO(r8, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffd, 0x6, 0x0, @buffer={0x20, 0x0, 0x0}, &(0x7f0000000100)='5\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0x0, 0x0}) getsockname$packet(r7, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x63148, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r9}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004081}, 0x40000) 6m51.07061327s ago: executing program 4 (id=220): openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000d80)=[{{&(0x7f0000000300)={0xa, 0x4e24, 0xb01, @empty, 0x6}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="0dc785c4cb69d0b3d461ca5d", 0xc}], 0x1}}], 0x1, 0x48000) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x83, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) creat(&(0x7f0000000280)='./file0\x00', 0x15) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 9) 6m49.649415893s ago: executing program 4 (id=222): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x1, 0x1}, 0x26) r2 = accept4(r0, 0x0, 0x0, 0x800) r3 = openat$procfs(0xffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x8000, 0x8006, 0xfffff800, 0x0, {{0x21, 0x4, 0x3, 0x39, 0x84, 0x5, 0x0, 0x8, 0x29, 0x0, @rand_addr=0x64010102, @remote, {[@timestamp_addr={0x44, 0x24, 0x28, 0x1, 0xe, [{@multicast2, 0x8}, {@remote, 0x8}, {@multicast2, 0x2}, {@rand_addr=0x64010100, 0xc33}]}, @cipso={0x86, 0x17, 0x0, [{0x1, 0xa, "7cf608510315e6b8"}, {0x0, 0x7, "b177cd4408"}]}, @ssrr={0x89, 0xf, 0x89, [@private=0xa010102, @local, @rand_addr=0x64010102]}, @rr={0x7, 0x23, 0x5d, [@multicast1, @local, @local, @multicast1, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @private=0xa010101]}]}}}}}) sendmsg$xdp(r3, &(0x7f0000000500)={&(0x7f0000000240)={0x2c, 0xb, r4, 0x2b}, 0x10, &(0x7f00000004c0)=[{&(0x7f00000002c0)="93e9933844ba7da30ac37ed0ee3e7f5bf95b46124735c2fd988deac1ceb80975266ebf972d09f04ad448cc6e95a9b1bbe1ef48e3677b65d9459f200d875e495dc1c3b2340f01ce0554d9b760b6eeb263e0e891ec35e516ed17805d51c59bb24d46ed42d4868880e233ee20e83610fe1284faa7e6855e3b8affc34d8e8ca461e8fc12ca067d1d3aa4bac9b3d539f774900ae938d3deafb965747759de841d1eba33d381", 0xa3}, {&(0x7f0000000380)="ca738f8e935c62106119ce186f3d24d0168800ac8b2ad1f27f3c9e8105116d0ccb7111922ecb28adaf25e1c46590726ba35e1fc1323b", 0x36}, {&(0x7f00000003c0)="beed7e0a05b3", 0x6}, {&(0x7f0000000400)="d45b2edb51ab27c93ac79cfe56123d9d436774f9813d74d78b14ae319d9c29cde9b9c8e3ecb5438b5290d7ab0e0d22b2fd7744fa6102ee5d497fc1c155fa31ba455eda4ef34d63e1443e02706a113909938f167ecb3be8e16419f7dac0ee3459cb3386ab360b35dcd804a0362789bd7896f7dfe40b44e7174af1dfbe6db9a24342b6b231bf034e3a679b1c971e0205c60d5c15f05059df301bd9f89d2fca8ac79915b63b4e7345b815b920bc", 0xac}], 0x4, 0x0, 0x0, 0x60000880}, 0x24000011) sendfile(r2, r3, 0x0, 0x100) 6m49.154089821s ago: executing program 4 (id=226): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="c5e300705c64a4d26262af2c8297eebebb48726590375e026d8d515e1f3d681d8722cb86188620dd62803cd8077941bb81bdf49a608d132721fd9c8360c2ba14feaf465e3a87d62e6708e1bbf9690103d73f443f0ecd149191d0ff2c51f33729fc21a2a5735dfc62af6f55a6efa6c1d37c92c796906000b332385e4f59bdeefe71327dbddf34105a26a04229ac790a15af425abf3efbaf19ea04c92b393f1921ad1fb4d31095c43f04f0d997af4e545b80f9cdc33707992a24aaf3df2207a94f54c126944cc861513717af6dffd5887036c4b76f", @ANYRES64=0x0, @ANYRES32, @ANYRESOCT, @ANYRESOCT], 0x50) ioctl$NILFS_IOCTL_GET_SUSTAT(r0, 0x80306e85, &(0x7f0000000240)) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="77933605903e8c2ca07a3941f93e0e7808a5415636", 0x15}], 0x1, 0x0, 0x0, 0x4000800}], 0x1, 0x24004041) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x4031, &(0x7f0000000180)=ANY=[@ANYBLOB="2c326052d741ec0b177237a853c74186b6abe02c"], 0x0, 0x0, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) (async) ptrace$setregset(0x4205, r4, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4adec8438c571a70e7ca7b0451a6cc55c", 0x98}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000080)=@x86={0x5, 0x8, 0xf5, 0x0, 0x6, 0x9, 0x5, 0x8, 0x87, 0x4, 0x7, 0x6, 0x0, 0x6, 0x21bd, 0x8, 0x3, 0x5, 0x3, '\x00', 0xe4, 0xd2}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r5, 0x0) (async) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f0000000000)=0x3) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r7 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x74, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbba, {0x0, 0x0, 0x0, r8, {0xc, 0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x5}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x84, 0x2}, {0x5, 0x3, 0x2}}}]}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xfc4, 0x1, 0x8}, {0xc, 0x0, 0x2, 0x1, 0x4, 0x0, 0x1}}}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20041090}, 0x40c0) (async) sendmmsg(r2, &(0x7f00000004c0)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0xf271, @loopback, 0xa, 0x1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)='B', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="f5ffffff0000000084000000d58bbd0f"], 0x10}}], 0x2, 0x20044015) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000e7000000000000000400200018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x3b, &(0x7f0000000200)=""/59, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) ioctl$BTRFS_IOC_SEND(r9, 0x40489426, &(0x7f0000000180)={{r9}, 0x3, &(0x7f0000000000)=[0x2, 0x6, 0x9], 0xba6}) (async) r10 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002220000090582020002"], 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r7, 0x0, 0xcb, &(0x7f00000002c0)={0x0, 0x8, 0xf, 0x3ff, @vifc_lcl_ifindex=r8, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 6m47.322099738s ago: executing program 4 (id=238): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000780)={0x29e9c934, 0x3, 0x7f, 0x404}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x0, r0}, 0x10) bind$xdp(0xffffffffffffffff, &(0x7f0000000240)={0x2c, 0x1, r0}, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, 0x0, 0x4044800) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r2 = inotify_init1(0x0) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$TIOCGSOFTCAR(r3, 0x5419, &(0x7f0000000400)) inotify_add_watch(r2, &(0x7f0000000000)='./file1\x00', 0x2000775) syz_emit_vhci(0x0, 0x9) r4 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0x44080) ftruncate(r4, 0x2) write$binfmt_elf64(r1, 0x0, 0x378) 6m46.898519694s ago: executing program 4 (id=239): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20045081}, 0x4880) 6m46.607423448s ago: executing program 33 (id=239): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20045081}, 0x4880) 2m54.929480191s ago: executing program 3 (id=1115): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc01ff}]}) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = msgget$private(0x0, 0x1) r1 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_disconnect(r1) write$char_usb(0xffffffffffffffff, &(0x7f00000003c0)='0', 0x1) msgsnd(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="21000034beda437c"], 0x8, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="f80000001600210200000000fedbdf250000000c00000058679dd8e054b57e3a000000ffffac1414aafe8000000000000000000000000000aa00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe800000000000000000000000000020000004d633000000fe8000000000000000000000000000ca0900000000000000000000000000000000000000000000000000000000000000ffffff7fffffffffeeffffffffffffff000800000000000000000000000000000200000000000000fdffffffffffffff0200000000000000fefffffffffffbff00000000000000009607000000000000000000000a000002be0000000000000000000000b1a00100"], 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000002700)={&(0x7f0000810000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00001d8000/0x11000)=nil, &(0x7f00009ba000/0x2000)=nil, &(0x7f00004f3000/0x4000)=nil, &(0x7f000072c000/0x2000)=nil, &(0x7f00009d2000/0x1000)=nil, &(0x7f00004c2000/0x3000)=nil, &(0x7f00005e6000/0x4000)=nil, &(0x7f0000046000/0x1000)=nil, &(0x7f00005d4000/0x3000)=nil, 0x0, 0x0, r3}, 0x68) 2m51.669310823s ago: executing program 3 (id=1126): r0 = creat(&(0x7f0000000040)='./file0\x00', 0xdafbe5d6891b6e4) write$binfmt_elf32(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c46800d040001000200010000000200060001000000dd00000038000000450300000800000000002000010005000900000100000000030000000500000005000000060000008008"], 0x85) close(r0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 2m51.422850304s ago: executing program 3 (id=1129): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000e40)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2508007a0000000000030700000008000300", @ANYRES32=r2, @ANYBLOB="1400060064756d6d7930000000000000000000001400040076657468315f746f5f626f0164000000050053"], 0x54}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000007c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\f\n5', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r5, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x2, @scatter={0x0, 0x24000, 0x0}, &(0x7f0000000040)="41c5150d98c6", 0x0, 0x7, 0x0, 0x8000000, 0x0}) r6 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_int(r6, 0x6, 0x17, &(0x7f00000000c0)=0x5, 0x4) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4) setsockopt$packet_rx_ring(r7, 0x107, 0x5, 0x0, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000540)=ANY=[@ANYBLOB="5b685c7e778fbbbbbbbbbbbb86dd6a00000000641100fe8000000000000000000000000000aaff0200000000000000000000000000014e1d4e20006490780200000002000000010000002e46c1c5274bfad707406bd55db60bf33c125f4cf999196aa6cefa7be08864902bea6a9d710cbce85e65a090c11d73170e8016d6bdca858c16470500000000000000e337b7acddad3b22de49438a1f39"], 0x0) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) r9 = socket$packet(0x11, 0x3, 0x300) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r10, &(0x7f0000000300)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @remote}, 0x14) bind$packet(r9, &(0x7f00000006c0)={0x11, 0x0, r11, 0x1, 0xb, 0x6, @remote}, 0x14) syz_emit_ethernet(0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0xf500, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 2m49.972879264s ago: executing program 3 (id=1134): capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000100)={0x9, 0xfff, 0xfffffff2, 0xffffffff, 0x2, 0x5f}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0x100001, 0x4) setsockopt$inet_int(r1, 0x0, 0x1, &(0x7f0000000000)=0xffffff7e, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) r2 = syz_open_dev$dri(&(0x7f0000000080), 0xa5000000000, 0x412441) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x100, 0x70bd2c, 0x25dfdbff, {0x60, 0x0, 0x0, 0x0, {0x5, 0xfff2}, {0x8, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r4, 0xc0585605, &(0x7f00000005c0)={0x1, 0x1, @start={0xffffffff, 0x1}}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf5230051f02caa212951d1b15a557b4afaa708e0d1bb958ae9af13a5443fc9b4cc613e43bb1d5c22603adf8958cf97f7b959ceea107aa3be319691f80da74e1ada09a5a85bc2f935978d66082d54f6594993a749aecc547752ba22c6c461f6589a49c5980563d7b405d28a9fe5bfcf00ca517740e3a3076374230410276bc55fe3f0758ff8c78e820f68899a7c71993ddb1309a4854838670aae65c11faf3bd0db32a685f297d00a548ec92500000000", @ANYRES32=r5, @ANYBLOB="000000000000800028001280edff010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x7, 0x6776, 0x4}) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40) ioctl$SNDRV_TIMER_IOCTL_INFO(r6, 0x80e85411, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x3, 0x11, r2, 0x100000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r7, &(0x7f0000000000), 0xe591) 2m49.70257265s ago: executing program 3 (id=1136): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000068a00800000000004000000cb2004005000000095"], &(0x7f0000000240)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x41}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000300)=0x208) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000d09000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x10000}, 0x28) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=0x6, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f280, 0x0, 0x10a}) r2 = getpid() fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000000)={0x1, r2}) io_uring_enter(r1, 0x8ae, 0xfbb9, 0x1f, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000100), 0x4) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100003b7431087d077a6201000102030109022400010000000009040000020338a20009050e"], 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x82c1, 0x0) pwritev(r4, &(0x7f0000000280)=[{&(0x7f0000000800)="b5", 0x1}], 0x1, 0x7fffffffffffffff, 0x0) ftruncate(r3, 0x2000009) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x50, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0) clock_adjtime(0x6, &(0x7f0000004dc0)={0x100000b, 0x9, 0xffffffff80000000, 0x4, 0x27ed5044, 0x7cca, 0x9, 0xfffffffffffffff7, 0x1000000000002, 0x4, 0x5, 0x1000000000006, 0x6, 0x80, 0xcff, 0x81f, 0x4, 0x40000080000, 0x774, 0xffffffffffff7eff, 0x2, 0x80000000000009, 0x1, 0x9014, 0x11, 0x2}) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa3286dd6c00001e00008401fe040000000000000000000000000101ff02007d01582e4fe756310000000000"], 0x0) 2m46.36728288s ago: executing program 3 (id=1154): syz_emit_ethernet(0x0, 0x0, 0x0) syz_usb_connect$uac2(0x3, 0x0, 0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0}) userfaultfd(0x801) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000400)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c12106803200e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a60800000f00510066b87a000f02d86161300f300fc79d53bf0000c4b961edc30101220f27c3", 0x62}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp\x00') (async, rerun: 32) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) setxattr$incfs_metadata(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040), 0x0, 0x0, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async, rerun: 32) set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) (rerun: 32) r5 = io_uring_setup(0x168f, &(0x7f0000000400)={0x0, 0x631d, 0x2, 0x1, 0x9c}) io_uring_register$IORING_REGISTER_BUFFERS2(r5, 0xf, &(0x7f0000002700)={0x119f, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/264, 0xf9}, {&(0x7f00000015c0)=""/4096, 0x400400}, {&(0x7f0000002a00)=""/88, 0x8}], 0x0}, 0x20) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) sendmmsg$unix(r4, &(0x7f0000000740), 0x1, 0x20040041) (async) write$tun(r4, &(0x7f00000008c0)=ANY=[@ANYRES64=r3, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="508000009078000055858f59a5fa9bf08340ddf52a99349eb8f648a239b540f74c04d1682a5754e61ec44cd025161251da8647148387852eed1c6c8e99d8536b4fcead5da7d82eea160735afb906bc0c67fa00364bb4317f8cf4397646a19024975823ed15828c7218665f2d3c9765958f68fc7bf043e5ada7e6057c83a9a131a54836e624ff046b750c53b71cf456cd8ecc663342e8f189fe68330cdf34f36aad8842dd82a8ba1741bb2ae2554b47c063174b2ec2a341293a5dfe06b240"], 0xec) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_freezer_state(r6, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_freezer_state(r7, &(0x7f0000000040)='FROZEN\x00', 0x7) (async) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r9 = openat$cgroup_procs(r6, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000100)=r8, 0x12) (async) syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) 2m31.074022768s ago: executing program 34 (id=1154): syz_emit_ethernet(0x0, 0x0, 0x0) syz_usb_connect$uac2(0x3, 0x0, 0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0}) userfaultfd(0x801) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000400)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c12106803200e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a60800000f00510066b87a000f02d86161300f300fc79d53bf0000c4b961edc30101220f27c3", 0x62}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp\x00') (async, rerun: 32) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) setxattr$incfs_metadata(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040), 0x0, 0x0, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async, rerun: 32) set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) (rerun: 32) r5 = io_uring_setup(0x168f, &(0x7f0000000400)={0x0, 0x631d, 0x2, 0x1, 0x9c}) io_uring_register$IORING_REGISTER_BUFFERS2(r5, 0xf, &(0x7f0000002700)={0x119f, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/264, 0xf9}, {&(0x7f00000015c0)=""/4096, 0x400400}, {&(0x7f0000002a00)=""/88, 0x8}], 0x0}, 0x20) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) sendmmsg$unix(r4, &(0x7f0000000740), 0x1, 0x20040041) (async) write$tun(r4, &(0x7f00000008c0)=ANY=[@ANYRES64=r3, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="508000009078000055858f59a5fa9bf08340ddf52a99349eb8f648a239b540f74c04d1682a5754e61ec44cd025161251da8647148387852eed1c6c8e99d8536b4fcead5da7d82eea160735afb906bc0c67fa00364bb4317f8cf4397646a19024975823ed15828c7218665f2d3c9765958f68fc7bf043e5ada7e6057c83a9a131a54836e624ff046b750c53b71cf456cd8ecc663342e8f189fe68330cdf34f36aad8842dd82a8ba1741bb2ae2554b47c063174b2ec2a341293a5dfe06b240"], 0xec) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_freezer_state(r6, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_freezer_state(r7, &(0x7f0000000040)='FROZEN\x00', 0x7) (async) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r9 = openat$cgroup_procs(r6, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000100)=r8, 0x12) (async) syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) 2m15.505009677s ago: executing program 7 (id=1287): io_uring_setup(0x136b, &(0x7f0000000400)={0x0, 0x1f8a, 0x0, 0xffffffff, 0x28c}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) msgget$private(0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x5, 0x4, 0xf06, 0x0, 0x84, 0x81, 0x5}, 0x9c) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x14, r5, 0x983a736bbcf11bbd, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x40084) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'batadv0\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000500)={'veth1\x00', 0x0}) syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0xd90a, 0x80, 0x6, 0x167}, &(0x7f0000000340), &(0x7f0000000240), &(0x7f0000000000)) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000700)="ffffffffffff0011223344554305000f32000000000100112233445500112233445500ff0000", 0x26, 0x0, &(0x7f0000000800)={0x11, 0x300, r6, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$nl_route(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@dellink={0x34, 0x11, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}]}, 0x34}}, 0x0) r8 = dup(r0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000740)='team_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f00000014c0)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x2, 0xfffc, 0xe652, 0x2, 0x85, 0x8, 0xff}, 0x9c) timerfd_create(0x0, 0x0) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595e, 0x10000, 0x1, 0x52}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r9, r10, r11, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x8, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x1, {0x2, 0x0, 0x0, '\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}}}) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0x5, @empty, 0xb055}}, 0xff80, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg(r12, &(0x7f00000004c0)={&(0x7f0000000140)=@rc={0x1f, @any, 0xd}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000300)="4325f61afdbf469e3aaf64c1f4aa83a655089ff10a0f1f22afc2ef010634", 0x1e}, {&(0x7f0000000340)="aa6cfbdca05c", 0x6}, {&(0x7f00000003c0)="a0c76ce6d5e91ecaf80f96974f6a85ba5536536fbf52bdd6a1dfa163e61e743acdb25a736f05c6b03930902f185c2b91192f2b5285368f", 0x37}], 0x3}, 0x48000) 2m14.625708693s ago: executing program 7 (id=1293): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x42002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f00000003c0)={0x0, 0x30b5, 0x0, 0x2, 0x1000158}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@any_dev={0x3, 0xe29, 0x0, 0x0, 0x1000, 0xfffffff8, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000180)={0x400, 0x2, 0x1, 0x0, 0xfe}) ioctl$vim2m_VIDIOC_EXPBUF(r6, 0xc0405668, &(0x7f0000000000)={0x2, 0x0, 0x2, 0x800}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r5, &(0x7f0000000180)={0x0, 0x9593, 0x400, 0x3, 0x257}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0xfffffffe, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x4000, 0x1, 0x1f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x10, 0x1000, 0x3, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r8, 0xc0107520, 0xfffffff5, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfbf9, 0x4, 0x0, 0x0}}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004"], 0x48) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r9, 0x0, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="84000000", @ANYRES16, @ANYBLOB="020029bd7000fedbdf2514008000000002802400038008000100760200000840000001"], 0x84}, 0x1, 0x0, 0x0, 0x4000004}, 0x8000) ioctl$VIDIOC_G_TUNER(r8, 0xc054561d, &(0x7f0000000280)={0x4, "d9574b44be70b916751d9855b297ea694682992aa89b307434e5256d065bb476", 0x2, 0x2, 0x5, 0x3, 0x8, 0x4, 0x1, 0x28000000}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000140)={0xffffffff, 0x0, 0x1, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x1, 0x0, 0x0, @time={0x3, 0x83}, {0x0, 0x2}, {0x20}, @raw32={[0x0, 0xb2d1]}}], 0x1c) poll(&(0x7f0000000240)=[{r0, 0x20}], 0x1, 0xfbe) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000000c0)={0x2, @tick=0x401, 0x7, {0x3, 0xbb}, 0x41, 0x2, 0x9}) 2m12.928765504s ago: executing program 7 (id=1299): msgsnd(0x0, &(0x7f00000001c0)={0x3}, 0x8, 0x0) msgrcv(0x0, &(0x7f0000000340)={0x0, ""/127}, 0x87, 0x3, 0x800) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000094000000050a01020000000000000000010020000c00024000000000000000010900010073797a31000000005c0004801400030076657468315f6d61637674617000000008000140"], 0x130}}, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x4, 0x5, [0x6d, 0x8, 0x8, 0x4, 0x9]}, &(0x7f0000000100)=0x12) 2m12.702861317s ago: executing program 7 (id=1300): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x800000, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) chroot(&(0x7f0000000100)='./file0/file0\x00') umount2(&(0x7f0000000440)='./file0/file0\x00', 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xffff, 0xfff3}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x10}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x44000) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006100)=@delchain={0x24, 0x65, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xffff, 0xc}, {}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004004) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x3, &(0x7f0000000600)=@raw=[@call={0x85, 0x0, 0x0, 0xaa}, @exit, @exit], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m11.577157105s ago: executing program 7 (id=1302): socket$inet6(0xa, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) r2 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000004c0)='j\x95\'\x8aC\x16\xca\\', &(0x7f0000000c40)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\x83w\xf9ZR\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?^\xc9\xef\xe0Q\x01\x00\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\x80\x1a\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf?\xc1\rv\xd3j\r6\x7f\x00'/141, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000140)='\x00\xe5\xff\xff\xff\xff\xff\xff\xff2', &(0x7f0000000180)='%*.\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f00000002c0)='\xe6\xdf\xf4\x89\b,\xcd\x9dP\x9e\xd7\xe3/\xd2=#\xc8\xb7\x98\f\x87\xcf\x00\x00\x00\x00\x00\x00\x00\x9a\x8e\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000200)="82", 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b80)='\xe0\"\xef\xb1\xea\xe6\x9c\xe6\xc8M\xdb\x86\xb3\x8b\xbe\xd5\xbdB\x92\xa0\x19-+a\x13qQ\xd5f39hSr\xafbB\xe2\xe8\xcd\x1bf\x18\x7f\xf27E#\"\xab\x99\xec\x88\x8d\xd8C\x0f\x95\xff\xfeG\xf9t\xb1 \xcc\xc5\xbb\x88\xb6\xd2\xf2Jwq\xf8oG0xffffffffffffffff) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000180)={0xa20000, 0x4b0e, 0x4, r3, 0x0, &(0x7f0000000140)={0xa00964, 0x101, '\x00', @value64=0xffffffffffffffff}}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000040), &(0x7f0000000080)=0x4) 2m10.958897946s ago: executing program 35 (id=1303): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) shutdown(r0, 0x2) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000880)={@in6={{0xa, 0x4e24, 0xf37, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8000}}, 0x0, 0x0, 0x1e, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e24740bd4c0b42a21d7214bff16d2ccd00"}, 0xd8) sendto$inet6(r0, &(0x7f0000000300)="71e9", 0x2, 0x20008045, &(0x7f0000000340)={0xa, 0x2, 0x28, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x8, &(0x7f0000000000)) mprotect(0x0, 0x0, 0x2000003) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000100)=0xffffffffffffffff) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000180)={0xa20000, 0x4b0e, 0x4, r3, 0x0, &(0x7f0000000140)={0xa00964, 0x101, '\x00', @value64=0xffffffffffffffff}}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000040), &(0x7f0000000080)=0x4) 1m40.06345404s ago: executing program 6 (id=1416): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x2, 0x8}}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0xdf, 0x87, 0x7ffc0201}]}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x50, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc8, 0x202}, {0xd06, 0x5, 0x1, 0x1198, 0x2, 0x101}]}) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='attr\x00') bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$evdev(&(0x7f0000002780), 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000001c0)={0x1fe, 0x2, 0x1, 0x2000, &(0x7f0000003000/0x2000)=nil}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000382bb6680000000040000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r4, &(0x7f0000000080), 0x0}, 0x20) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000580)=ANY=[@ANYBLOB="1201000300000008"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[], 0x0) syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[], 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4433000041000701fefffffffeffffff017c0000040042800c00018006000600800a0000203302801c3317800400150004008b80080086800400b2800633018024", @ANYRES8=r5, @ANYRES64=r5], 0x3344}, 0x1, 0x0, 0x0, 0x4040044}, 0xc000) 1m36.795024159s ago: executing program 6 (id=1427): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000002e80)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000340)="01", 0x1}], 0x1}}, {{&(0x7f0000000380)={0x2, 0x4e22, @private=0xa010100}, 0x10, &(0x7f0000000800)=[{&(0x7f00000003c0)="c7a4", 0x2}], 0x1}}], 0x2, 0x1) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x8, 0x1, 0x200, 0x3, 0x2, 0x7ff, 0xfff, 0x6e4c8f, r2}, 0x20) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) 1m33.644793549s ago: executing program 6 (id=1435): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf0}}, 0xffc00003}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x24088000) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x13, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2827e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac008000000000000200", "f4bd000000801900000000000000000000000000000000000000000700", [0x8, 0xffffffff9673e359]}}) 1m33.458628973s ago: executing program 6 (id=1436): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) (async) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', r1, &(0x7f0000000300)='./file0\x00', 0x41) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYRES8=r1, @ANYRES64=r2, @ANYBLOB="e5c898c98306c8e11b5f877704af3e6e808eb704752ba86f2c7855fdc0f6ba1a6b4b7627c26846ce5af07f782de96f46d5a5e0ed37f89cc916470368ea51a4dc7f836ed711cfca109207da4af545a7fc76bc2bb61ab25bf9d39796c93f2c21e1350aa1f81655df9ef0048b43aebf33787fe1b58839dec959e47e08258fe9819465a19e0d89e7d1730d8a3cf7a3304acbe8e6122c1884629858f5f28af29de1cb"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004000) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYRES8=r1, @ANYRES64=r2, @ANYBLOB="e5c898c98306c8e11b5f877704af3e6e808eb704752ba86f2c7855fdc0f6ba1a6b4b7627c26846ce5af07f782de96f46d5a5e0ed37f89cc916470368ea51a4dc7f836ed711cfca109207da4af545a7fc76bc2bb61ab25bf9d39796c93f2c21e1350aa1f81655df9ef0048b43aebf33787fe1b58839dec959e47e08258fe9819465a19e0d89e7d1730d8a3cf7a3304acbe8e6122c1884629858f5f28af29de1cb"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x58}, 0x1, 0x0, 0x0, 0xb0}, 0x20008890) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000100)='./file0\x00', 0x220) (async) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000100)='./file0\x00', 0x220) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)={0x30, 0x41, 0x107, 0x70bd2d, 0x25dfdbfe, {0x4, 0x7c}, [@nested={0x1c, 0x2d, 0x0, 0x1, [@nested={0x18, 0x9, 0x0, 0x1, [@nested={0x11, 0x99, 0x0, 0x1, [@generic="32881935c6d6e2c0dea5ea75b6"]}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) 1m33.389852346s ago: executing program 6 (id=1437): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) syz_emit_ethernet(0x66, 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) r3 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) (async) r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x5b) read$watch_queue(r0, &(0x7f00000002c0)=""/1, 0x1) (async) keyctl$revoke(0x3, r4) ioctl$OCFS2_IOC_GROUP_EXTEND(r5, 0x40046f01, &(0x7f0000000200)=0x1) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) (async) fsopen(&(0x7f0000000000)='nfs4\x00', 0x0) (async) unshare(0x2040680) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000001200), 0x8a400, 0x0) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0xfffe, 0x6, 0xfffa}, 0x52, [0x95, 0xc95a, 0x10, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0xa, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x20, 0xd, 0x1, 0x80, 0xffffffff, 0xe65d, 0x2, 0x7, 0x205, 0x8, 0x4c74, 0xffff7fff, 0xe06, 0x3, 0xe, 0x10000000, 0x3fc0000, 0x7, 0x1000017, 0xffffffff, 0x7, 0x5, 0x80003e, 0x18e, 0x6, 0x6, 0x0, 0x8, 0x0, 0x8, 0x3ff, 0x80, 0xfffffffe, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2009, 0xfffffffc, 0x573a, 0x0, 0x0, 0x5, 0x2f, 0x8, 0x312, 0x66abcbd2, 0xea4, 0x20000000, 0x4, 0x1007, 0x0, 0x8, 0x400, 0x401, 0x6, 0x3, 0x20000ff, 0x7, 0x1000005, 0x5f2f, 0xd, 0x4e0, 0x48, 0x1, 0xb, 0x4, 0x9, 0x8, 0x41, 0x6, 0x47, 0x8003, 0x1, 0xfe000000, 0xffef, 0x2, 0x10000, 0xff, 0x3, 0x3, 0x4000008, 0x7, 0x0, 0x3, 0x9, 0x0, 0x42, 0x3], [0x6, 0x40a, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7, 0x0, 0x7fffffff, 0x81, 0x4, 0x3, 0x5, 0x0, 0x1ef, 0x3, 0x8, 0x86, 0x1000515, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6cff, 0x6, 0x5, 0x200, 0x1fd, 0x80, 0x7, 0x4, 0x2950b7af, 0x1000, 0xa2, 0x7, 0xcc, 0x5, 0x10000006, 0xac8, 0xbf, 0x2, 0x3, 0x8, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x40, 0x1c, 0x120000, 0x7ef, 0x2006, 0x80a2cd, 0x4, 0x25], [0xc, 0xbb33, 0x7, 0x8001, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb8, 0xce1, 0x1ff, 0xd, 0x57, 0x5, 0x4003, 0x2, 0x10000, 0x1, 0x7fff, 0xfffc, 0x800a620, 0x5, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x9, 0x4, 0x5, 0xca, 0x1, 0xfffff000, 0x10000, 0xf, 0x7e, 0x9, 0xa, 0x7, 0xaf, 0x20000008, 0x3, 0x226, 0x4, 0x5, 0x4, 0x30b1d693, 0xa1f, 0xfffffc00, 0x3cedc876, 0x530e, 0xe1c4, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0xfffffeff, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) (async) ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f0000000080)=0x200000000) (async) dup2(r6, r6) write(r0, &(0x7f0000000180)='transport=tcp,traddr=127.0.0.1,trsvcid=4420,nqn=n', 0x31) 1m32.976057529s ago: executing program 6 (id=1440): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) r2 = dup3(r1, r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r3 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r3, 0x2219, 0xcf74, 0x16, 0x0, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PTP_PIN_GETFUNC2(r2, 0xc0603d0f, &(0x7f0000000180)={'\x00', 0x5, 0x2, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m32.34814237s ago: executing program 36 (id=1440): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) r2 = dup3(r1, r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r3 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r3, 0x2219, 0xcf74, 0x16, 0x0, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PTP_PIN_GETFUNC2(r2, 0xc0603d0f, &(0x7f0000000180)={'\x00', 0x5, 0x2, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.385458025s ago: executing program 0 (id=1728): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) fchdir(0xffffffffffffffff) chdir(&(0x7f0000000540)='./cgroup\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000004380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB='/\x00']) read$FUSE(r3, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2082) statx(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x4800, 0x100, 0x0) write$FUSE_INIT(r3, &(0x7f0000004300)={0x50, 0x0, r4, {0x7, 0x29, 0x0, 0x11812410, 0x0, 0x1ff, 0x81, 0xfffffff6}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004480)={0x90, 0xfffffffffffffff5, 0x6, {0x1, 0x0, 0x7fffffff, 0x1fffffffffffd, 0x400, 0xc, {0x1, 0x9, 0x8, 0x1, 0x1, 0x4, 0xc, 0x123, 0xdab5, 0xc000, 0x0, r5, r6, 0x6, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r3, &(0x7f0000002280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r3, &(0x7f0000002200)={0x10, 0x0, r7}, 0x10) umount2(&(0x7f00000021c0)='./file0/file0\x00', 0x3) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) ptrace(0x11, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$netlink(0x10, 0x3, 0x4) fcntl$lock(r8, 0x410, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000004540)=ANY=[@ANYBLOB="3c00000010001fff00000000010400000000000091e358cfb0d417dc09f9a17a64db7fd61c77f3b8591094c2386d0f5d6ed56c489de7d294f8d88d6c6465dc8c2ad17656b0b6ea65e795de925f5dd509e669a7269320545bc9fa0ee672646bbe26eb4a03899bd472", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$inet(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 7.43274496s ago: executing program 0 (id=1731): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mremap(&(0x7f0000fd9000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) (async) ioctl$KVM_GET_PIT(r1, 0xc048ae65, 0x0) (async) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1044, 0x7a4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x10, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x361}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x1, 0xa, 0x70}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x22, 0x371, {0xfffffffffffffef6, 0x21, 0x2}}}, &(0x7f0000000ac0)={0xffffffa3, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket(0x10, 0x3, 0x0) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="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", 0xfffffcbb, 0x4, 0x0, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x30}, [@alu={0x4, 0x0, 0x6, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f00000002c0)='GPL\x00', 0xf, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) (async, rerun: 64) madvise(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xd) (async) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x4800c0, 0x0) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f00000002c0)={0x60, 0x1, &(0x7f0000ea8000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x1000, &(0x7f0000000240)=[{0x7, 0x7297, 0x6}, {0x0, 0x100, 0x1}, {0x3c0, 0x0, 0x3}, {0x6, 0x76d, 0x4}], 0x4, 0x0, 0x1, 0x4, 0x28, 0x14}) 7.346676155s ago: executing program 5 (id=1732): mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) r0 = syz_io_uring_setup(0x38, &(0x7f0000000580)={0x0, 0xbbd8, 0x100, 0x0, 0xfffffffe}, &(0x7f0000000040), &(0x7f0000000480), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000002840)={0x0, 0x0, 0x3, 0x2}, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000400}, 0xc, 0x0}, 0x850) socket$netlink(0x10, 0x3, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) socket$inet6(0xa, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x89101) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000b40)=@newlink={0x48, 0x10, 0x1, 0x70bd3a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}, @IFLA_MTU={0x8, 0x4, 0xd4}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r4}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8014}, 0x4000040) r5 = socket(0x2000000015, 0x80005, 0x0) socket$xdp(0x2c, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xb2000, 0x0) write$dsp(r6, &(0x7f0000000540)="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", 0xff0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x723080, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000070900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004540000000c0a090000000000000000000a0000060900020073797a31000000000900010073797a310000000028000380180000800c00018006000100d103000008000340000000010c00008008000340000000022c0000000e0a0102000000000000"], 0xec}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x34, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0x8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}]}, @NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x0, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_SET_EXPRESSIONS={0x14, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}]}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @last={{0x9}, @void}}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_SET_EXPRESSIONS={0x14, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}]}, @NFTA_SET_FLAGS={0x8}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x40}]}], {0x14}}, 0xe4}}, 0x24040884) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r7, @ANYBLOB='\a'], 0x0) 6.586918477s ago: executing program 8 (id=1734): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf0}}, 0xffc00003}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x24088000) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x13, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2827e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac008000000000000200", "f4bd00000080190000000000000000000000000000000000000000c900", [0x8, 0xffffffff9673e359]}}) 6.244321415s ago: executing program 8 (id=1735): syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000094d9d4084e080110aeed010203010902220001000000000904000001437b6a0009050000000000000007050283e9fe7ff1"], 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000004440)=@acquire={0x128, 0x17, 0x1, 0x10000000, 0xfffffffd, {{@in6=@remote, 0x200}, @in=@multicast1, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@broadcast, 0x0, 0x0, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x73}, {{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0xffff, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x120000}}, 0x128}}, 0x0) (async, rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x4, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000000) 5.982822982s ago: executing program 9 (id=1736): r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000001000)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x35, 0x5, 0x57e, 0x330, 0x0, 0x0, "0600ff0901a101150026ff007508951f852009018102852109018102852209018102851609019102851709019102851509019102c0"}}, 0x14d) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000200), 0x6) 5.786579334s ago: executing program 5 (id=1738): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003bc0)={0x1, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x8}, [@map_idx_val={0x18, 0xa, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000003a40)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x38, 0xe1, 0xd, 0x8, 0x13d8, 0x1, 0x324c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x22, 0xff, 0x40, 0x4, "", [{{0x9, 0x4, 0x74, 0x3, 0x0, 0x34, 0xa3, 0xf1, 0x63}}]}}]}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003bc0)={0x1, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x8}, [@map_idx_val={0x18, 0xa, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000003a40)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) (async) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) (async) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x38, 0xe1, 0xd, 0x8, 0x13d8, 0x1, 0x324c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x22, 0xff, 0x40, 0x4, "", [{{0x9, 0x4, 0x74, 0x3, 0x0, 0x34, 0xa3, 0xf1, 0x63}}]}}]}}, 0x0) (async) 5.726552907s ago: executing program 9 (id=1739): socket$netlink(0x10, 0x3, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000002000010327bd7000ffdbdf250200000800000000f9"], 0x1c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x8401, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) syz_emit_ethernet(0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}}) r4 = socket$inet(0x2, 0xa, 0x6) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}, 'veth1_to_bridge\x00'}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x1e, 0x1, 0x70bd26, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1}, [@FRA_DST={0x8, 0x1, @empty}]}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x0, @local}, 0x2, 0x0, 0x1}}, 0x26) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x90, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f5, {0x0, 0x0, 0x0, r10, {0x1, 0x3}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x60, 0x2, [@TCA_FLOWER_ACT={0x5c, 0x3, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xb75}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xc}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x0, 0xffffffffffffffff, 0x3, 0x403}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20005891}, 0x0) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r11, 0x64, 0xfffffffffffffffd}, 0x33) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r7, 0x1, 0x60bd27, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6}]}, 0x34}}, 0x824) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="34000000450001000200080004000000030000000400cb80100001800c00108008000200050000000c0002"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) ioctl$sock_inet_SIOCSARP(r4, 0x8953, &(0x7f0000000640)={{0x2, 0x0, @dev}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x4a, {0x2, 0x0, @broadcast}, 'veth1_to_team\x00'}) 5.429518396s ago: executing program 0 (id=1741): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000100)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x1c, &(0x7f0000000080)=[{&(0x7f00000000c0)='\t', 0x1}], 0x1}}], 0x1, 0x20044015) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0a41, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000240)={@val={0x60, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x8016, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @broadcast}, {{0xa200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x1}}}}, 0xfdef) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000002c0)={0x0, 0x6, 0x40, 0xbdb}, &(0x7f0000000300)=0x10) 5.314677443s ago: executing program 9 (id=1742): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc01ff}]}) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) clock_nanosleep(0x0, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x1, 0x2000) r0 = syz_usb_connect(0x3, 0x2d, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_disconnect(r0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) msgsnd(0x0, 0x0, 0x8, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="f80000001600210200000000fedbdf250000000c00000058679dd8e054b57e3a000000ffffac1414aafe8000000000000000000000000000aa00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe800000000000000000000000000020000004d633000000fe8000000000000000000000000000ca0900000000000000000000000000000000000000000000000000000000000000ffffff7fffffffffeeffffffffffffff000800000000000000000000000000000200000000000000fdffffffffffffff0200000000000000fefffffffffffbff00000000000000009607000000000000000000000a000002be0000000000000000000000b1a00100"], 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000002700)={&(0x7f0000810000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00001d8000/0x11000)=nil, &(0x7f00009ba000/0x2000)=nil, &(0x7f00004f3000/0x4000)=nil, &(0x7f000072c000/0x2000)=nil, &(0x7f00009d2000/0x1000)=nil, &(0x7f00004c2000/0x3000)=nil, &(0x7f00005e6000/0x4000)=nil, &(0x7f0000046000/0x1000)=nil, &(0x7f00005d4000/0x3000)=nil, 0x0, 0x0, r2}, 0x68) 4.833708328s ago: executing program 0 (id=1743): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0xe, &(0x7f0000000040)=0x1fe, 0x4) socket$inet(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x4) getsockopt$inet6_tcp_buf(r2, 0x6, 0xb, 0x0, &(0x7f00000001c0)) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$FUSE_NOTIFY_POLL(r4, &(0x7f0000000040)={0x18, 0x1, 0x0, {0x13c9}}, 0x18) splice(r3, 0x0, r1, 0x0, 0x4, 0x1) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xce5d, 0x200, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_ublk_add_dev(r3, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0x3b5, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4f}}}, &(0x7f0000000480)) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, 0x0, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x5, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x0, 0x2100, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe79c, 0x0, 0x20000000, 0xe4, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x2, 0x2, 0x80000250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) r10 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) ioctl$EVIOCGBITSND(r10, 0x40044591, 0x0) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r11, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20084884) preadv2(r0, &(0x7f0000000940)=[{&(0x7f0000000480)=""/210, 0xd2}, {&(0x7f0000000580)=""/21, 0x15}, {&(0x7f00000005c0)=""/47, 0x2f}, {&(0x7f0000000600)=""/242, 0xf2}, {&(0x7f0000000700)=""/156, 0x9c}, {&(0x7f00000007c0)=""/227, 0xe3}, {&(0x7f00000008c0)=""/66, 0x42}], 0x7, 0xc, 0x404, 0xf) getsockopt$inet_opts(r0, 0x0, 0x9, 0x0, &(0x7f0000000200)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x6c}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) r12 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r12, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/200, 0xc8}], 0x1, 0xe4, 0x0) 4.774988506s ago: executing program 8 (id=1744): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x8, &(0x7f0000000080)=0xe, 0x4) setsockopt$inet6_int(r2, 0x29, 0xb, &(0x7f0000000100)=0x3, 0x4) (async) getsockopt$inet6_buf(r2, 0x29, 0x6, 0xffffffffffffffff, &(0x7f0000000000)) (async) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r3, 0x80106f53, &(0x7f0000000000)={0x4, &(0x7f0000000740)=[{0x30, '\x00', @data=0x2, 0x6}, {0x45, '\x00', @buffer={"cec7e8a5407e73aa9ca1561afb47e0da56cb11df4ca7013b3ef1b32c23490994", 0x20}, 0x2}, {0x1b, '\x00', @st={0x4, [{0x1, @svalue=0x2368}, {0x3, @uvalue=0x6}, {0x1, @uvalue=0x7}, {0x1, @svalue=0x6}]}, 0x5}, {0x42, '\x00', @st={0x4, [{0x1, @uvalue=0x3}, {0x1}, {0x3, @uvalue=0x6}, {0x3, @uvalue=0xfffffffffffffff7}]}, 0x3}]}) (async) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)=""/245, 0xf5}], 0x1, &(0x7f0000000640)=""/16, 0x10}, 0x3}], 0x1, 0x23, 0x0) (async) sendto$inet6(r0, &(0x7f0000000140)="d0", 0x1, 0x0, 0x0, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5\x00', 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="64000000100001002bbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8a43010000000000300016802c000180280001000a000000aaaaaaaaaaaa00000000000000000000000000000000220000000000000000645f736c6101000100000000000000000000000000db676c6621674812499a919b0300000069e37881f5e3af2efc24ab50699e4f179ae063007f8ad141a28619670256f9de4febf686e084e4ca0249e2751f2bf3915ea47c62151137e4fa9bc5b7262610558d4573fc753c5a2ac17db713ffee4769d64656b749695416b424397c8b8c45da2b33cebbfb8c"], 0x64}, 0x1, 0x0, 0x0, 0x4000880}, 0x4) 4.482081742s ago: executing program 0 (id=1745): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) syz_clone3(&(0x7f0000000100)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x9) ioctl$PPPIOCGIDLE32(r0, 0x8008743f, 0x0) syz_io_uring_setup(0x27c8, &(0x7f0000000540)={0x0, 0x800069ea, 0x3000, 0x7, 0x14b}, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xe, [0xa, 0x1, 0x7fff, 0x3ff, 0xfff, 0x9, 0x1, 0xffb, 0x407, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x5, 0xf3, 0x0, 0xfffffffa, 0x0, 0x5, 0x9, 0x4, 0x9, 0x4, 0x2, 0x762, 0x3, 0x80, 0x3, 0x2b12, 0x100, 0x7, 0x1c04, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x1, 0x0, 0x11000, 0x80000000, 0x5, 0x79b, 0x2, 0x10000, 0x7d, 0x4, 0x2, 0xa, 0xd, 0x101, 0xd7, 0x1fa0860a, 0x7, 0x9, 0x81, 0x8, 0x180000, 0x400a, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x5, 0x6, 0x9, 0x9, 0xb, 0x4009, 0xfffffffe, 0x4, 0xffffff01, 0x8, 0x752, 0x0, 0x1005, 0x5, 0x10001, 0x2, 0xffffffff, 0x106, 0x7, 0x9, 0x7ffffffe, 0xc, 0xfffffffe, 0x2, 0x8084, 0x800100, 0x5, 0x252, 0xfffffffa, 0xb, 0x1, 0x20006, 0x5, 0xffffffff, 0xb, 0x100, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x2, 0x4, 0x5, 0x1, 0x0, 0x0, 0x2, 0x40, 0x8, 0x4, 0x3, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00001ea000/0x400000)=nil) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000580)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x45}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000500)={0x0, 0x1fffd, 0x0, 0x3, 0x2000000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x3, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf7ff, 0x0, 0xfffffffe, 0x33e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x10, 0x2, 0xe3, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x29a7, 0x8200, 0x0, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r6, '\x00', {0x2, 0x0, 0x0, 0x0}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000340)={[0x40000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffb, 0x7, 0x5, 0xb, 0x81, 0xfffffffffffffff8, 0x9, 0x7fffffff], 0x25000, 0x304}) r10 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r1, &(0x7f0000000380)={0x15}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) 4.271497633s ago: executing program 9 (id=1746): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @remote}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)=@newqdisc={0x150, 0x24, 0x605, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xfff3}, {0x0, 0xa}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x20, 0x10, 0x80, 0x20, 0xe, 0x8}}, @TCA_RED_STAB={0x104, 0x2, "0000000000000000000000004d0000000000000000000000000000000000000000000000000000010000800000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000025016e540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000"}, @TCA_RED_MAX_P={0x8, 0x3, 0x3ffc000}]}}]}, 0x150}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xd54895b78f6044ae) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000080)={0x50, 0x0, r3, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r2, &(0x7f00000042c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8ffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d520075900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ebffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000c400)={0xb0, 0x0, 0x3, [{{0x6, 0x0, 0x8, 0xd0e, 0x6, 0x80000001, {0x3, 0xffffffffffffffff, 0x5, 0x6, 0x10000, 0x7, 0x0, 0x1, 0x83, 0x2000, 0x5, r4, r5, 0xfffffff9, 0x6}}, {0x1, 0x6, 0x3, 0x5, '*$)'}}]}, 0x0, 0x0, 0x0}) getdents(r6, 0x0, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r7, &(0x7f00000000c0)={0x1d, r8}, 0x10) sendmsg$can_bcm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="010000006b0100000100000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="000000000100000002000040050104"], 0x48}}, 0x20004800) 4.159276436s ago: executing program 8 (id=1747): syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x17b7, 0x1, 0x3, 0x338}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeb90, 0x0, 0x1, 0x263}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2f59, 0x1, 0x3, 0x3ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8922, 0x18087, 0x0, 0x44}}], 0x4, &(0x7f0000001500)={0x2e, 0x47, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x7}, 0x0, 0x0, '\x00', {0x3, 0x74b, 0x0, &(0x7f0000000500)=@buf_max_buf="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"}}, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xe, 0x492f, 0x7f, 0x1, 0x1}, 0x50) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r2, 0xc0485619, &(0x7f0000001b00)={0x5, 0xc02000, "779f1823f68b10b8be8307a8bf4ae24c5832cfd8c4372fd2", {0x400, 0x2}, 0x40006}) socket$nl_route(0x10, 0x3, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r1, &(0x7f00000005c0), &(0x7f0000000580)=""/24}, 0x20) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x224e02, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000001580)={'vlan1\x00', @local}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'macsec0\x00', 0x0}) (rerun: 64) sendto$packet(r4, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a883", 0xf, 0x0, &(0x7f0000000000)={0x11, 0x0, r6, 0x1, 0xb, 0x6, @random="c28cee6af9b7"}, 0x14) (async) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) (async) r7 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x2, 0x1000, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xe50, 0x0, 0x0, 0x1000, 0x2000003, 0x0, 0x0, 0x16}}}, &(0x7f0000000280)) (async) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f00000015c0)) (async) futex(0x0, 0x100, 0x1, 0x0, 0x0, 0x1) (async) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000001600)) (async, rerun: 64) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (rerun: 64) inotify_rm_watch(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) (async) sigaltstack(&(0x7f0000000200)={0x0, 0x80000001}, 0x0) (async, rerun: 32) sigaltstack(0x0, &(0x7f0000000180)={0x0}) (async, rerun: 32) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (rerun: 32) sched_setattr(0x0, 0x0, 0x0) (async, rerun: 64) sendfile(r11, r11, 0x0, 0x20000005) (rerun: 64) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) 4.153368118s ago: executing program 5 (id=1748): r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000700)={0x14, &(0x7f0000000480)={0x20, 0x30, 0x60, {0x60, 0x6, "da324180de7cbdcfd8a49b89ea9b55dbc5fb0aa3464835e0ab2a6018de71f63438e3584f4a78be8ea6ed4722e3abe4dcd0b55740e0adf46a79f140d73ad68ec878849ca3c6ca7a3c36d863944fb054784ed60df3b5df4b546a9d32de9244"}}, &(0x7f00000006c0)={0x0, 0x3, 0x17, @string={0x17, 0x3, "70a2f8e710fb26484505881ec416737f7f08c922a1"}}}, &(0x7f00000008c0)={0x2c, &(0x7f0000000740)={0x20, 0x3, 0x54, "313702b38c3735017d26889b77de5ca3b2d10c4b36f44c7c8fa5686ce2b396d112d155e3dd7141224621f6499afcab91156a79106e94724e27e5a83adf5a10b00bb13c7d488da9588a09e76a1693e4a6e6546274"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x13}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0xab}, &(0x7f0000000840)={0xc0, 0x5, 0x2, "a98b"}, &(0x7f0000000880)={0x40, 0x5, 0x6, "a53a07a06b98"}}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x12, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, [@jmp={0x5, 0x1, 0xc, 0x4, 0x5, 0x1, 0x1}, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @tail_call]}, &(0x7f0000000300)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x40f00, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0x9, 0x6, 0x40}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000003c0)=[0xffffffffffffffff], &(0x7f0000000400)=[{0x1, 0x1, 0x2, 0x6}, {0x2, 0x5, 0x9, 0xc}, {0x2, 0x4, 0x8, 0xa}, {0x5, 0x3, 0x6, 0x3}, {0x2, 0x1, 0x1, 0xa}], 0x10, 0x200}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000680)=r2, 0x4) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) 3.826542788s ago: executing program 8 (id=1751): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x9, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES64=r2, @ANYBLOB="0000000000000000b703000000000000850000002f000000b709000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001300)=r3, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_devices(r0, 0x0, 0xffdd) r4 = socket(0x15, 0x5, 0x0) r5 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_disconnect(r5) syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x1, 0x802) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @mcast2={0xff, 0x5}, 0x1ff}, 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="010000003f0500001c00128009003880d6e7f9651a0100626f62cda6d3611364"], 0x3c}}, 0x0) 3.788742814s ago: executing program 0 (id=1752): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_smc(0x2b, 0x1, 0x0) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f00000001c0)={'filter\x00', 0x0, 0x0, 0x0, [0x8, 0x401, 0x5, 0x10000003, 0x911f, 0x100000001]}, &(0x7f0000000080)=0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) syz_open_dev$video4linux(&(0x7f00000001c0), 0x2, 0x60180) (async) r2 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x2, 0x60180) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000000)={0x0, 0x3, 0x1008, 0x1}) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000180)={0x8, 0x120, 0xfa00, {0x1, {0x7fffffff, 0x5, "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", 0x0, 0x4b, 0x8, 0x6, 0x8, 0x7, 0x6}}}, 0x128) (async) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000180)={0x8, 0x120, 0xfa00, {0x1, {0x7fffffff, 0x5, "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", 0x0, 0x4b, 0x8, 0x6, 0x8, 0x7, 0x6}}}, 0x128) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) (async) syz_usb_control_io$uac1(r3, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r4 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x1922, 0x40, 0x8, 0x143}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, 0x0, &(0x7f0000000680)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) io_uring_enter(r4, 0x1912, 0x71, 0x0, 0x0, 0x0) (async) io_uring_enter(r4, 0x1912, 0x71, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000480)={{0x8, 0x3, 0x77ba, 0x100, 'syz1\x00', 0xfffffff1}, 0x0, [0x4, 0x5, 0x7, 0x5, 0x1, 0x4, 0x4a, 0x7fffffff, 0x0, 0x5, 0x64, 0xfffffffffffffffa, 0xa, 0x6, 0x1, 0x10000, 0x3, 0x9, 0x400000000, 0x0, 0x7f, 0x5f7a, 0xffffffff00000001, 0xeb, 0x8, 0x4, 0xc, 0x80000000, 0x1, 0x1ff, 0x7fffffffffffffff, 0x4, 0x80, 0x77, 0x2, 0x40, 0x1, 0x5, 0x8, 0x2, 0x7, 0x0, 0x843, 0x8, 0xfffffffffffffff8, 0x6219, 0x4, 0x13, 0x4, 0xffffffffffffff68, 0x80, 0x5, 0x39b, 0x2, 0x800, 0x0, 0x21, 0xb, 0x9, 0x5, 0x4, 0x7fffffff, 0x0, 0x4, 0x1, 0x100000001, 0x3ff, 0x1, 0x9, 0x92, 0x100, 0x9, 0x9554, 0x1, 0x6, 0x3, 0x87a, 0x6, 0x10063b, 0x40, 0x2, 0xffffffffffffffff, 0x6, 0x3, 0x4004, 0x3, 0x85a4, 0x9, 0x378, 0x3, 0x10000, 0xb147, 0x4, 0x1ff, 0x2c14, 0x2, 0xb1, 0x8b5b, 0x0, 0x2, 0xca89, 0x7, 0x1e9, 0x7, 0x669c6cf9, 0x1, 0x6, 0xffffffffffffffff, 0x2, 0x1, 0xfffffffffffffffe, 0x6, 0x6, 0x6, 0xc43, 0x0, 0x1, 0x2, 0x8, 0x7, 0x5, 0x80000000, 0x7, 0x1, 0xcb, 0x0, 0x7fff, 0xf7a]}) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000480)={{0x8, 0x3, 0x77ba, 0x100, 'syz1\x00', 0xfffffff1}, 0x0, [0x4, 0x5, 0x7, 0x5, 0x1, 0x4, 0x4a, 0x7fffffff, 0x0, 0x5, 0x64, 0xfffffffffffffffa, 0xa, 0x6, 0x1, 0x10000, 0x3, 0x9, 0x400000000, 0x0, 0x7f, 0x5f7a, 0xffffffff00000001, 0xeb, 0x8, 0x4, 0xc, 0x80000000, 0x1, 0x1ff, 0x7fffffffffffffff, 0x4, 0x80, 0x77, 0x2, 0x40, 0x1, 0x5, 0x8, 0x2, 0x7, 0x0, 0x843, 0x8, 0xfffffffffffffff8, 0x6219, 0x4, 0x13, 0x4, 0xffffffffffffff68, 0x80, 0x5, 0x39b, 0x2, 0x800, 0x0, 0x21, 0xb, 0x9, 0x5, 0x4, 0x7fffffff, 0x0, 0x4, 0x1, 0x100000001, 0x3ff, 0x1, 0x9, 0x92, 0x100, 0x9, 0x9554, 0x1, 0x6, 0x3, 0x87a, 0x6, 0x10063b, 0x40, 0x2, 0xffffffffffffffff, 0x6, 0x3, 0x4004, 0x3, 0x85a4, 0x9, 0x378, 0x3, 0x10000, 0xb147, 0x4, 0x1ff, 0x2c14, 0x2, 0xb1, 0x8b5b, 0x0, 0x2, 0xca89, 0x7, 0x1e9, 0x7, 0x669c6cf9, 0x1, 0x6, 0xffffffffffffffff, 0x2, 0x1, 0xfffffffffffffffe, 0x6, 0x6, 0x6, 0xc43, 0x0, 0x1, 0x2, 0x8, 0x7, 0x5, 0x80000000, 0x7, 0x1, 0xcb, 0x0, 0x7fff, 0xf7a]}) r5 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$uac3(r5, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac3(r5, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000cc0)=ANY=[@ANYBLOB="200a83"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000cc0)=ANY=[@ANYBLOB="200a83"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, &(0x7f00000000c0)={0x14, &(0x7f0000000040)={0x20, 0x10, 0x2, {0x2, 0xc}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000300)={0x44, &(0x7f0000000100)={0x0, 0x34, 0x7, "859e67c70fa47c"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0xf}, &(0x7f00000001c0)={0x20, 0x80, 0x1c, {0x6, 0xf, 0x4d, 0x0, 0x4, 0x9, 0x101, 0x9, 0x7fff, 0x8, 0xcb20, 0x7fff}}, &(0x7f0000000200)={0x20, 0x85, 0x4, 0x401}, &(0x7f0000000240)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000280)={0x20, 0x87, 0x2, 0x7}, &(0x7f00000002c0)={0x20, 0x89, 0x2, 0x1}}) r6 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000040)={0x0, 0x0, {0x3, 0x0, 0x1, 0x0, 0x4}, 0x3}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000040)={0x0, 0x0, {0x3, 0x0, 0x1, 0x0, 0x4}, 0x3}) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r7, 0x0, 0x0) 3.197337634s ago: executing program 9 (id=1755): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x1000}]}, 0x34}, 0x1, 0x0, 0x0, 0x4920}, 0x44860) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, 0x0, 0x7, 0xa04, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xffffffffffffff81}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x401}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2060040}, 0x20044040) 2.980453631s ago: executing program 1 (id=1756): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc01ff}]}) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) clock_nanosleep(0x0, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x1, 0x2000) r0 = syz_usb_connect(0x3, 0x2d, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_disconnect(r0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) msgsnd(0x0, 0x0, 0x8, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000002700)={&(0x7f0000810000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00001d8000/0x11000)=nil, &(0x7f00009ba000/0x2000)=nil, &(0x7f00004f3000/0x4000)=nil, &(0x7f000072c000/0x2000)=nil, &(0x7f00009d2000/0x1000)=nil, &(0x7f00004c2000/0x3000)=nil, &(0x7f00005e6000/0x4000)=nil, &(0x7f0000046000/0x1000)=nil, &(0x7f00005d4000/0x3000)=nil, 0x0, 0x0, r2}, 0x68) 2.927102448s ago: executing program 9 (id=1757): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000500)={0x20071026}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x3, 0x7}) (async) capset(&(0x7f0000000500)={0x20071026}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x3, 0x7}) socket$unix(0x1, 0x1, 0x0) (async) r0 = socket$unix(0x1, 0x1, 0x0) getrandom(&(0x7f0000000240)=""/286, 0x11e, 0x3) r1 = io_uring_setup(0x7d3f, &(0x7f0000000300)={0x0, 0x4454, 0x1, 0xfffffffd, 0xc0}) io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000005b00)=[{0x94, 0x0, 0x0}], 0x1) (async) io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000005b00)=[{0x94, 0x0, 0x0}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x16) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mprotect(&(0x7f0000de5000/0x2000)=nil, 0x2000, 0x8) r2 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) socket$netlink(0x10, 0x3, 0x5) (async) socket$netlink(0x10, 0x3, 0x5) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f00000003c0)=[&(0x7f0000ffc000/0x4000)=nil], 0x0, &(0x7f0000001680), 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0x5}, 0x94) mprotect(&(0x7f00001fc000/0x4000)=nil, 0x4000, 0x3) clock_settime(0xfffffffb, &(0x7f0000000140)) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="8d0000e664030dcf75ecfb9043beb2ce190000064c000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r2, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="8d0000e664030dcf75ecfb9043beb2ce190000064c000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = socket(0x840000000002, 0x3, 0x100) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) fsopen(&(0x7f00000014c0)='proc\x00', 0x0) (async) fsopen(&(0x7f00000014c0)='proc\x00', 0x0) getsockopt$inet_pktinfo(r3, 0x0, 0x34, 0x0, &(0x7f0000000100)=0x2) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000428000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/173, 0xad, 0x0, &(0x7f00000000c0)=""/137, 0x89}, &(0x7f00000001c0)=0x40) connect$unix(r0, &(0x7f0000000640)=@abs={0x1, 0x0, 0x4e21}, 0x6e) socket$netlink(0x10, 0x3, 0xb) (async) socket$netlink(0x10, 0x3, 0xb) 2.13780555s ago: executing program 1 (id=1758): fanotify_init(0x240, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000001380)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x4, 0xe}, {}, {0x6, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r5, {0xc, 0xc}, {0x0, 0xfff1}, {0xc, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x20040004) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0x3, 0x2) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r8, 0xaf01, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r8, 0x4004af61, &(0x7f00000000c0)=0x1) sendmsg$inet(r7, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac141410ac1414aa000000001c00000000000000000000000700000001940400e4b907"], 0x40}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x3, 0x0) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000000)={0x4800, 0x0, 0x6}, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x55, &(0x7f0000000200)={&(0x7f0000003900)=ANY=[@ANYBLOB="3b0300001600010a00000000000000002800000015000002"], 0x18}}, 0x8040) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller1\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x4}}}]}]}], {0x14}}, 0x50}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x44080) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100006"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) 1.925670463s ago: executing program 1 (id=1759): r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file2\x00') r1 = socket$pppl2tp(0x18, 0x1, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = dup(r4) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r5, 0xae80, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3) (async) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3) read(r1, &(0x7f0000000500)=""/142, 0x68) openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) (async) openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) 1.790781796s ago: executing program 1 (id=1760): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x258, r1, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PEERS={0x20c, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x194, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ALLOWEDIPS={0x16c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0xa}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x3, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x258}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 1.750201426s ago: executing program 1 (id=1761): r0 = syz_open_dev$media(&(0x7f0000000000), 0xa, 0x41) (async) r1 = syz_ublk_setup_io_uring(0x1e, &(0x7f0000000580)={0x0, 0x9f03, 0x80, 0x6, 0x10001d8}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40001}, 0x40080) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) (async) r9 = dup(r6) syz_ublk_setup_queues(r9, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4f3f, 0x4, 0x2100, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x19b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0x2, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r10 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r10, 0xc0286687, 0x0) (async, rerun: 64) r11 = socket$rxrpc(0x21, 0x2, 0x2) (rerun: 64) bind$rxrpc(r11, 0x0, 0x0) (async, rerun: 64) listen(r11, 0xa) (rerun: 64) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffee6}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) (async) r12 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x214a, 0xc000, 0x20000082, 0x62}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) (async) io_uring_enter(r12, 0x2219, 0xcf74, 0x16, 0x0, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66667a4, 0x0, &(0x7f0000000fc0)}) 1.139901414s ago: executing program 5 (id=1762): openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000280), 0x80a00, 0x0) (async) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000280), 0x80a00, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x1, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c", 0xffffffffffffffff}) syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000300)) (async) r2 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x7, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)) (async) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x7, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x80002, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) dup3(r1, r0, 0x0) 891.462793ms ago: executing program 5 (id=1763): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0xe8b4b594cf0898c, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x40000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000180)=[@cr4={0x1, 0x40002}], 0x1) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r3 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x5) r5 = socket(0x10, 0x803, 0x0) r6 = syz_open_procfs(0x0, 0x0) preadv(r6, &(0x7f0000000580)=[{&(0x7f0000000100)=""/212, 0xd4}], 0x1, 0x800001fe, 0x12) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r8 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/mnt\x00') ioctl$NS_GET_USERNS(r8, 0xb701, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYRES16=r5], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) pread64(r9, &(0x7f00000000c0)=""/70, 0x46, 0x4) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r10 = syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x80000) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x2000001, 0x2012, r10, 0x1fff000) 730.393442ms ago: executing program 1 (id=1764): r0 = syz_usb_connect(0x3, 0x50, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040ca08100100010102030109023e0001010080fa0904000002ff00000007058302000200070504020002"], 0x0) syz_usb_ep_read(r0, 0x4, 0x0, 0x0) syz_usb_ep_write(r0, 0x83, 0x0, 0x0) syz_usb_ep_read(r0, 0x4, 0x0, 0x0) syz_usb_ep_read(r0, 0x4, 0x0, 0x0) syz_usb_ep_write(r0, 0x83, 0x0, 0x0) syz_usb_ep_read(r0, 0x4, 0x0, 0x0) syz_usb_ep_read(r0, 0x4, 0x0, 0x0) syz_usb_ep_write(r0, 0x83, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) r2 = socket$inet_tcp(0x2, 0x1, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) syz_usb_ep_read(r0, 0x4, 0x0, 0x0) syz_usb_ep_read(r0, 0x4, 0x0, 0x0) syz_usb_ep_write(r0, 0x83, 0x0, 0x0) syz_usb_ep_read(r0, 0x4, 0x0, 0x0) syz_usb_ep_write(r0, 0x83, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r5 = dup(r4) fallocate(r5, 0x10, 0x0, 0x76000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000019c0)) socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x541b, 0xb) 366.286667ms ago: executing program 5 (id=1765): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) add_key$user(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="047f6c4b8b47d80f", 0x8, 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038540000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002800038024000080040002800400078004000180080003"], 0xe8}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000200)=0xc) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'syzkaller1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000500)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, r5}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', 0x41}) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x60e6, 0x4003, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e24, 0x7, @mcast2, 0x7}, 0x1c) write$tun(r3, &(0x7f0000000700)=ANY=[@ANYBLOB="010530000a00280006000000600000000030114020010000000000000000000000000001200100000000000000000000000000024e2060e6"], 0x64) write$binfmt_script(r1, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb080003"], 0x2c}}, 0x0) sendfile(r6, r0, 0x0, 0x100000000) 0s ago: executing program 8 (id=1766): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$sock(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000004900)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, &(0x7f0000001180)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000040)={0x0, 0xfffb, 0x90}, 0x8) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x801, &(0x7f0000000200)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b', @ANYRES32=r5, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000540)={@dev={0xfe, 0x80, '\x00', 0x20}, @ipv4={'\x00', '\xff\xff', @multicast2}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x21, 0x11f, 0x7, 0x0, 0x2000, 0x800010, r5}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) write$sndseq(r10, 0x0, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) read$char_usb(r11, &(0x7f0000000480)=""/244, 0xf4) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00240000000000001800128008000100677470000c000280050005000000000008000300", @ANYRES32=r9, @ANYBLOB="6cf48dd037f204741407ca7239c4149574af3f2661873c5e7b1c29054ccc6c51ff3f7999753d651acdb8fe0e53ffceba877ed4c1dd62ba9a6601b5c850cba56ef64c637046ead06d905d5033357e432edc9ad97c46ae4c2d0ebbf16cc5682092c7ada74b89fc20abecfb7c282cf7af0e932a9ef8f7600c2ac0ee41c9804cbb5694fd741d31aa6fe4d41836e824b9cc7736971fb251b88d0801dee56009b3a041f48869f246c3b14f26c28f3a57d772991c8071bbfa0a063ec21932"], 0x40}}, 0x4000000) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, &(0x7f0000000040)=""/184, &(0x7f0000000500)=0xb8) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x1, 0x0, 0x2, 0x5}}) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) syz_usb_connect$cdc_ncm(0x4, 0x90, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7e, 0x2, 0x1, 0x47, 0xa0, 0x0, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "1863376101"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x53e7, 0x1, 0xb1}, {0x6, 0x24, 0x1a, 0x438c, 0x5}, [@network_terminal={0x7, 0x24, 0xa, 0x0, 0x2, 0x2, 0x5}, @mdlm_detail={0x16, 0x24, 0x13, 0xc7, "4c65c0d7c6bed59db36789e49a2ddce17c22"}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x40, 0x6, 0x10}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x8, 0x2, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x2, 0x7, 0x2}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0x40, 0x7, 0x6, 0x8, 0x7}, 0x16, &(0x7f00000001c0)={0x5, 0xf, 0x16, 0x3, [@ptm_cap={0x3}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x40, 0x8, 0x400, 0x90}]}, 0x5, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x455}}, {0xd9, &(0x7f0000000240)=@string={0xd9, 0x3, "0ec9183b62130499519a3c3ef3c732246d5555e77014715947707af58f2dc4bf076059aa4fb56e48c261e73f0c334a90b0bebb36721fcd59957f6e214162d0ed621df23637a3d71047f16076b67741ebac0abbeeac34e37390a38e1e77c2bfa29f72948dc102cd1e63b4db855b4c48b51430ec4b17f2b3a778920e80231312ef556572773389d81f48f5653995a30b68b7eabcbd449109f2d30a60628054a14548445cfda30039c6eb2b5b11d00a1e814854360c6083039ac2e9473b8f4fe2b1606adda918166404cbadf39e2a58675079ff81e39ef0e7"}}, {0xba, &(0x7f0000000340)=@string={0xba, 0x3, "136afc915b48e0dc8275237ce148eb8f84f3ffb740cb5fe85844de01dada596536f86ad7074126da64d2a11cc3671684e5a3d92ac6d0a7bc5721e4eaa9474c03848385b6caaa53573f55a81e097abd174e4d990dd85b2fc386deda7da11df2c4ec49fe1302971204532bd7b0f07b20f1cd19ac22ae7b21fae51a5def737e5262dccd653cba344da895bde102294f4095f7804eeb0acddcc9695f0619a773efa4b4e9bf35fff2f10783829af209a5c4907a9060709e189faa"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x40a}}, {0xa1, &(0x7f0000000440)=@string={0xa1, 0x3, "7fa860cf0eac8266337c8c9bbedb360bedaa081c22bb799ded2e7510f63eacec9aa444b51147f52d119231cc61fa13afa2e14c543aec659054214409e31ffafc83f996c1ad508cebb8fafb60571d32e2175d6d2b93c6ce3a9f143f124505fe55d37043c0d13265926913d4036a3172fc0bd2935e9d96e79ecb6bff3646f025291e27ebd23c0a15d9b8afd81c49e4dc59dbe6030fee365785fcee3e47395ac9"}}]}) r12 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r12, 0x40106f52, &(0x7f0000000000)={0x2, &(0x7f00000006c0)=[{0x12, '\x00', @st={0x4, [{0x1, @svalue=0x1}, {0x0, @svalue=0xffffffffffffff22}, {0x1, @uvalue=0x8}, {0x1, @svalue=0x4}]}, 0x4}, {0x3c, '\x00', @data=0xfff, 0x1}]}) landlock_create_ruleset(&(0x7f0000000040)={0x1100, 0x5, 0x1, 0x180d, 0xb, 0x3}, 0x30, 0x1) kernel console output (not intermixed with test programs): ing preconfigured BSSID 50:50:50:50:50:50 [ 489.514166][ T9592] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.742225][T11689] veth0_macvtap: entered promiscuous mode [ 489.843633][T11689] veth1_macvtap: entered promiscuous mode [ 489.975206][T11689] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 490.033226][ T10] plantronics 0003:047F:FFFF.0021: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 490.035854][T11689] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 490.103720][ T9594] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.103805][ T9594] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.103846][ T9594] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.254439][ T154] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.534452][ T9] usb 1-1: new full-speed USB device number 101 using dummy_hcd [ 490.716887][ T9] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 490.718736][ T9] usb 1-1: config 0 has an invalid interface number: 143 but max is 0 [ 490.718767][ T9] usb 1-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 490.718789][ T9] usb 1-1: config 0 has no interface number 0 [ 490.718820][ T9] usb 1-1: too many endpoints for config 0 interface 143 altsetting 112: 149, using maximum allowed: 30 [ 490.718860][ T9] usb 1-1: config 0 interface 143 altsetting 112 has 0 endpoint descriptors, different from the interface descriptor's value: 149 [ 490.718924][ T9] usb 1-1: config 0 interface 143 has no altsetting 0 [ 490.735764][ T5693] usb 2-1: USB disconnect, device number 93 [ 490.754331][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.754406][ T9] usb 1-1: Product: syz [ 490.754450][ T9] usb 1-1: Manufacturer: syz [ 490.754510][ T9] usb 1-1: SerialNumber: syz [ 490.829216][ T9] usb 1-1: config 0 descriptor?? [ 490.867414][ T5282] 8021q: adding VLAN 0 to HW filter on device eth13 [ 490.870012][ T9594] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.870028][ T9594] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.998470][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.998497][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.131336][ T9] usb 1-1: USB disconnect, device number 101 [ 491.284418][ T31] kauditd_printk_skb: 217 callbacks suppressed [ 491.284442][ T31] audit: type=1326 audit(1790626729.678:2668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11869 comm="syz.5.1466" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0dfd9e159 code=0x7ffc0000 [ 491.284493][ T31] audit: type=1326 audit(1790626729.678:2669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11869 comm="syz.5.1466" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0dfd9e159 code=0x7ffc0000 [ 491.293158][ T31] audit: type=1326 audit(1790626729.688:2670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11869 comm="syz.5.1466" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe0dfd5e98e code=0x7ffc0000 [ 491.293211][ T31] audit: type=1326 audit(1790626729.698:2671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11869 comm="syz.5.1466" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe0dfd9ddeb code=0x7ffc0000 [ 491.293248][ T31] audit: type=1326 audit(1790626729.698:2672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11869 comm="syz.5.1466" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe0dfd9ddeb code=0x7ffc0000 [ 491.465764][ T31] audit: type=1326 audit(1790626729.858:2673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11869 comm="syz.5.1466" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe0dfd9ddeb code=0x7ffc0000 [ 491.465807][ T31] audit: type=1326 audit(1790626729.858:2674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11869 comm="syz.5.1466" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe0dfd9ddeb code=0x7ffc0000 [ 491.509755][ T154] IPVS: starting estimator thread 0... [ 491.521246][T11853] IPVS: set_ctl: invalid protocol: 44 172.30.1.1:19999 [ 491.562453][ T31] audit: type=1326 audit(1790626729.968:2675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11869 comm="syz.5.1466" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe0dfd9ddeb code=0x7ffc0000 [ 491.591926][T11873] IPVS: using max 37 ests per chain, 88800 per kthread [ 491.636669][ T31] audit: type=1326 audit(1790626730.038:2676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11869 comm="syz.5.1466" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe0dfd9ddeb code=0x7ffc0000 [ 491.691561][T11261] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 491.695798][ T31] audit: type=1326 audit(1790626730.098:2677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11869 comm="syz.5.1466" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe0dfd9ddeb code=0x7ffc0000 [ 491.840482][T11883] xt_hashlimit: overflow, try lower: 1125899906842624/134217732 [ 491.843174][T11261] usb 6-1: Using ep0 maxpacket: 16 [ 491.863827][T11261] usb 6-1: unable to get BOS descriptor or descriptor too short [ 491.863884][T11261] usb 6-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7 [ 491.866786][T11261] usb 6-1: config 9 has an invalid interface number: 57 but max is 0 [ 491.866813][T11261] usb 6-1: config 9 has no interface number 0 [ 491.866864][T11261] usb 6-1: config 9 interface 57 has no altsetting 0 [ 491.922747][T11261] usb 6-1: string descriptor 0 read error: -22 [ 491.922890][T11261] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.155979][T11871] netlink: 252 bytes leftover after parsing attributes in process `syz.5.1466'. [ 492.423674][T11261] (null): keene_cmd_main failed (-71) [ 492.454811][T11261] video4linux radio48: keene_cmd_main failed (-71) [ 492.454842][T11261] radio-keene 6-1:9.57: V4L2 device registered as radio48 [ 492.479626][T11261] usb 6-1: USB disconnect, device number 78 [ 492.584114][ T5282] 8021q: adding VLAN 0 to HW filter on device eth14 [ 493.197233][T11916] veth0: entered promiscuous mode [ 493.197945][T11916] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1473'. [ 493.197971][T11916] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1473'. [ 493.252748][T11916] bond1: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 493.252782][T11916] bond1: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 493.257447][T11916] bond1 (unregistering): Released all slaves [ 493.348566][ T990] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 493.540385][ T990] usb 10-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 8.00 [ 493.545437][ T990] usb 10-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 493.545512][ T990] usb 10-1: Product: syz [ 493.566508][ T990] usb 10-1: config 0 descriptor?? [ 493.589111][ T990] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected [ 493.601203][ T990] usb 10-1: Detected FT4232H [ 493.661533][ T44] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 493.784781][ T990] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 493.786862][ T990] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 493.808992][ T990] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 493.812351][ T44] usb 2-1: Using ep0 maxpacket: 8 [ 493.856101][ T990] usb 10-1: USB disconnect, device number 2 [ 493.896745][ T990] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 493.897475][ T990] ftdi_sio 10-1:0.0: device disconnected [ 493.902897][T11915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.903403][T11915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.959449][T11915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.960083][T11915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.022845][T11915] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 494.338475][T11909] veth0: left promiscuous mode [ 494.606120][ T5282] 8021q: adding VLAN 0 to HW filter on device eth15 [ 494.608622][ T44] usb 2-1: unable to get BOS descriptor or descriptor too short [ 494.608674][ T44] usb 2-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 494.608711][ T44] usb 2-1: no configurations [ 494.608725][ T44] usb 2-1: can't read configurations, error -22 [ 494.623135][T11938] syzkaller0: entered promiscuous mode [ 494.623159][T11938] syzkaller0: entered allmulticast mode [ 495.464187][ T990] usb 1-1: new full-speed USB device number 102 using dummy_hcd [ 495.633791][ T990] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 495.640987][ T990] usb 1-1: config 0 has an invalid interface number: 143 but max is 0 [ 495.641021][ T990] usb 1-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 495.641045][ T990] usb 1-1: config 0 has no interface number 0 [ 495.641087][ T990] usb 1-1: too many endpoints for config 0 interface 143 altsetting 112: 149, using maximum allowed: 30 [ 495.641127][ T990] usb 1-1: config 0 interface 143 altsetting 112 has 0 endpoint descriptors, different from the interface descriptor's value: 149 [ 495.641158][ T990] usb 1-1: config 0 interface 143 has no altsetting 0 [ 495.642169][ T44] usb 2-1: new full-speed USB device number 95 using dummy_hcd [ 495.685467][ T990] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.685560][ T990] usb 1-1: Product: syz [ 495.685605][ T990] usb 1-1: Manufacturer: syz [ 495.685640][ T990] usb 1-1: SerialNumber: syz [ 495.728458][ T990] usb 1-1: config 0 descriptor?? [ 495.798089][ T44] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 495.799729][ T44] usb 2-1: config index 0 descriptor too short (expected 12856, got 57) [ 495.799757][ T44] usb 2-1: config 137 has an invalid descriptor of length 254, skipping remainder of the config [ 495.799780][ T44] usb 2-1: config 137 has 0 interfaces, different from the descriptor's value: 1 [ 495.799818][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.982816][ T990] usb 1-1: USB disconnect, device number 102 [ 496.025465][T11972] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1487'. [ 496.089955][ T44] usb 2-1: string descriptor 0 read error: -71 [ 496.102852][ T44] usb 2-1: USB disconnect, device number 95 [ 496.201645][T11943] IPVS: set_ctl: invalid protocol: 44 172.30.1.1:19999 [ 496.502650][ T9] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 496.524147][ T5693] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 496.652042][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 496.652996][ T9] usb 6-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 496.654574][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 255 [ 496.658428][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.658460][ T9] usb 6-1: Product: syz [ 496.658478][ T9] usb 6-1: Manufacturer: syz [ 496.658495][ T9] usb 6-1: SerialNumber: syz [ 496.714459][ T5693] usb 9-1: New USB device found, idVendor=0af0, idProduct=6711, bcdDevice= 0.00 [ 496.731666][ T5693] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 496.731722][ T5693] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 496.731748][ T5693] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 496.733047][ T9] usb 6-1: config 0 descriptor?? [ 496.736397][T11980] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 496.740066][ T5693] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 496.740096][ T5693] usb 9-1: Product: syz [ 496.740113][ T5693] usb 9-1: Manufacturer: syz [ 496.834783][ T5693] hso 9-1:1.0: Can't find BULK endpoints [ 496.876900][ T9] mcba_usb 6-1:0.0: Microchip CAN BUS Analyzer connected [ 496.972831][ T5282] 8021q: adding VLAN 0 to HW filter on device eth16 [ 496.973882][ C0] mcba_usb 6-1:0.0 can0: Tx URB aborted (-71) [ 496.973973][ C0] mcba_usb 6-1:0.0 can0: Tx URB aborted (-71) [ 496.975483][ T44] usb 6-1: USB disconnect, device number 79 [ 497.024592][ T44] mcba_usb 6-1:0.0 can0: device disconnected [ 497.056855][T11981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.057361][T11981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.080888][T11988] fuse: Bad value for 'rootmode' [ 497.102857][T11976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.103247][T11976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.104286][T11995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.106831][T11995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.110209][ T9] usb 9-1: USB disconnect, device number 9 [ 497.179617][T11988] fuse: Unknown parameter 'g 6 5 fec0ffff000000000000000000000001 0 [ 497.179617][T11988] ' [ 497.401668][T11998] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1491'. [ 497.674229][ T31] kauditd_printk_skb: 116 callbacks suppressed [ 497.674251][ T31] audit: type=1326 audit(1790626736.078:2794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12002 comm="syz.1.1492" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f39e4f9e159 code=0x0 [ 498.141517][ T5693] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 498.292556][ T5693] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 498.294052][ T5693] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 498.294088][ T5693] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 498.300223][ T5693] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.300244][ T5693] usb 6-1: Product: syz [ 498.300256][ T5693] usb 6-1: Manufacturer: syz [ 498.300267][ T5693] usb 6-1: SerialNumber: syz [ 499.081572][ T5769] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 499.203282][ T5693] usb 6-1: failed to set cport flags for port 0 [ 499.203375][ T5693] greybus greybus1: 0/0:0: failed to enable host cport: -110 [ 499.256683][ T5693] es2_ap_driver 6-1:1.0: probe with driver es2_ap_driver failed with error -110 [ 499.264506][ T5769] usb 2-1: Using ep0 maxpacket: 16 [ 499.272354][ T5769] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 499.275117][ T5769] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 499.277441][ T5769] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.277469][ T5769] usb 2-1: Product: syz [ 499.277484][ T5769] usb 2-1: Manufacturer: syz [ 499.277500][ T5769] usb 2-1: SerialNumber: syz [ 499.303510][ T5769] usb 2-1: config 0 descriptor?? [ 499.368170][ T5769] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 499.651552][ T5693] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 499.676011][T12032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.679396][T12032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.823314][ T5693] usb 10-1: Using ep0 maxpacket: 16 [ 499.824059][ T5693] usb 10-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice= 3.b3 [ 499.825149][ T5693] usb 10-1: config 1 has an invalid interface number: 193 but max is 0 [ 499.825177][ T5693] usb 10-1: config 1 has no interface number 0 [ 499.825210][ T5693] usb 10-1: config 1 interface 193 has no altsetting 0 [ 499.874372][ T5693] usb 10-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 499.874405][ T5693] usb 10-1: Manufacturer: syz [ 499.874423][ T5693] usb 10-1: SerialNumber: syz [ 499.939897][ T281] usb 2-1: Failed to submit usb control message: -71 [ 499.939940][ T281] usb 2-1: unable to send the bmi data to the device: -71 [ 499.939960][ T281] usb 2-1: unable to get target info from device [ 499.939978][ T281] usb 2-1: could not get target info (-71) [ 499.940088][ T281] usb 2-1: could not probe fw (-71) [ 499.963833][ T44] usb 2-1: USB disconnect, device number 96 [ 500.196484][T12052] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 500.196544][T12052] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 500.199328][T12052] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 500.199349][T12052] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 500.702484][ T5693] usb 10-1: USB disconnect, device number 3 [ 500.981074][ T5693] usb 6-1: USB disconnect, device number 80 [ 501.133099][ T5631] usb 2-1: new full-speed USB device number 97 using dummy_hcd [ 501.294319][ T5631] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 501.300497][ T5631] usb 2-1: config 0 has an invalid interface number: 143 but max is 0 [ 501.300518][ T5631] usb 2-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 501.300533][ T5631] usb 2-1: config 0 has no interface number 0 [ 501.300554][ T5631] usb 2-1: too many endpoints for config 0 interface 143 altsetting 112: 149, using maximum allowed: 30 [ 501.300586][ T5631] usb 2-1: config 0 interface 143 altsetting 112 has 0 endpoint descriptors, different from the interface descriptor's value: 149 [ 501.300607][ T5631] usb 2-1: config 0 interface 143 has no altsetting 0 [ 501.391914][ T5631] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.391949][ T5631] usb 2-1: Product: syz [ 501.391967][ T5631] usb 2-1: Manufacturer: syz [ 501.391985][ T5631] usb 2-1: SerialNumber: syz [ 501.402352][ T5631] usb 2-1: config 0 descriptor?? [ 501.594976][T12067] @0: renamed from dummy0 (while UP) [ 501.637739][ T5631] usb 2-1: USB disconnect, device number 97 [ 501.711455][ T5693] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 501.772004][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.772070][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.847833][T12056] IPVS: set_ctl: invalid protocol: 44 172.30.1.2:19999 [ 501.875096][ T5693] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 501.900322][ T5693] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.900354][ T5693] usb 6-1: Product: syz [ 501.900371][ T5693] usb 6-1: Manufacturer: syz [ 501.900389][ T5693] usb 6-1: SerialNumber: syz [ 502.417042][ T5693] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 502.448060][ T5693] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 502.613517][ T9] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 502.761728][ T5714] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 502.787212][ T9] usb 10-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice=34.15 [ 502.790301][ T9] usb 10-1: config 9 interface 0 has no altsetting 0 [ 502.825055][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.825124][ T9] usb 10-1: Product: syz [ 502.825137][ T9] usb 10-1: Manufacturer: syz [ 502.825149][ T9] usb 10-1: SerialNumber: syz [ 502.911603][ T5631] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 502.912412][ T5714] usb 9-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice=34.15 [ 502.914028][ T5714] usb 9-1: config 9 interface 0 has no altsetting 0 [ 502.918639][ T5714] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.918666][ T5714] usb 9-1: Product: syz [ 502.918689][ T5714] usb 9-1: Manufacturer: syz [ 502.918701][ T5714] usb 9-1: SerialNumber: syz [ 503.084701][ T5631] usb 1-1: Using ep0 maxpacket: 16 [ 503.085551][ T5631] usb 1-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 503.087215][ T5631] usb 1-1: config 0 interface 0 has no altsetting 0 [ 503.087292][ T5631] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.098686][T12084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.106278][T12084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.155287][ T5631] usb 1-1: config 0 descriptor?? [ 503.186986][T12084] netlink: 10724 bytes leftover after parsing attributes in process `syz.9.1510'. [ 503.201186][T12090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.214883][T12090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.259733][T12090] netlink: 10724 bytes leftover after parsing attributes in process `syz.8.1512'. [ 503.293399][ T9] snd-usb-caiaq 10-1:9.0: can't set alt interface. [ 503.293430][ T9] usb 10-1: unable to init card! (ret=-5) [ 503.293955][ T9] snd-usb-caiaq 10-1:9.0: probe with driver snd-usb-caiaq failed with error -5 [ 503.297035][ T9] usb 10-1: USB disconnect, device number 4 [ 503.347077][ T5714] snd-usb-caiaq 9-1:9.0: can't set alt interface. [ 503.347128][ T5714] usb 9-1: unable to init card! (ret=-5) [ 503.347516][ T5714] snd-usb-caiaq 9-1:9.0: probe with driver snd-usb-caiaq failed with error -5 [ 503.374461][ T5714] usb 9-1: USB disconnect, device number 10 [ 503.394682][ T5751] udevd[5751]: setting owner of /dev/bus/usb/009/010 to uid=0, gid=0 failed: No such file or directory [ 503.473585][T12095] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 503.473618][T12095] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 503.573916][T12095] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 503.573945][T12095] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 503.647898][T12095] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 503.647924][T12095] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 503.699066][T12095] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 503.699095][T12095] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 503.790268][T12095] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 503.790298][T12095] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 503.814009][T12095] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 503.814037][T12095] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 504.333639][ T5631] usbhid 1-1:0.0: can't add hid device: -71 [ 504.333852][ T5631] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 504.361990][ T5713] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 504.365267][ T5631] usb 1-1: USB disconnect, device number 103 [ 504.512568][ T5713] usb 10-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 504.515955][ T5713] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 504.522972][ T5713] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.523004][ T5713] usb 10-1: Product: syz [ 504.523022][ T5713] usb 10-1: Manufacturer: syz [ 504.523040][ T5713] usb 10-1: SerialNumber: syz [ 504.591171][ T5713] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 504.747915][ T5693] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO [ 504.747979][ T5693] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 504.748749][ T5693] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 504.936264][ T5693] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 504.964361][T12107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.970336][T12107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.008109][ T5693] usb 6-1: USB disconnect, device number 81 [ 505.091713][ T5713] gspca_mr97310a: reg write [21] error -110 [ 505.091811][ T5713] mr97310a 10-1:1.0: probe with driver mr97310a failed with error -110 [ 505.708331][T12133] sctp: [Deprecated]: syz.5.1522 (pid 12133) Use of int in maxseg socket option. [ 505.708331][T12133] Use struct sctp_assoc_value instead [ 507.008474][T12149] netlink: 'syz.0.1528': attribute type 1 has an invalid length. [ 507.201846][ T990] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 507.324485][ T5713] usb 10-1: USB disconnect, device number 5 [ 507.359175][ T990] usb 9-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice=34.15 [ 507.360680][ T990] usb 9-1: config 9 interface 0 has no altsetting 0 [ 507.413908][ T990] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.413940][ T990] usb 9-1: Product: syz [ 507.413957][ T990] usb 9-1: Manufacturer: syz [ 507.413974][ T990] usb 9-1: SerialNumber: syz [ 507.776777][T12151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.806991][T12151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 507.956770][T12161] netlink: 10724 bytes leftover after parsing attributes in process `syz.8.1526'. [ 507.969350][ T5693] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 508.133611][ T5693] usb 10-1: Using ep0 maxpacket: 8 [ 508.135302][ T5693] usb 10-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 508.136724][ T5693] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 508.136754][ T5693] usb 10-1: config 179 has no interface number 0 [ 508.136798][ T5693] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 508.136828][ T5693] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 508.136857][ T5693] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 508.136886][ T5693] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 508.136915][ T5693] usb 10-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 508.136961][ T5693] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.263185][T12157] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 508.475026][ T5713] usb 10-1: USB disconnect, device number 6 [ 508.475036][ C0] xpad 10-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 508.475089][ C0] xpad 10-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 509.000936][T12184] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1536'. [ 509.014087][T12184] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1536'. [ 509.103322][T12185] netlink: 'syz.5.1535': attribute type 2 has an invalid length. [ 509.103348][T12185] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1535'. [ 509.146157][ T5713] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 509.272277][ T5713] usb 1-1: device descriptor read/64, error -71 [ 509.303627][T12185] : entered promiscuous mode [ 509.433495][ T44] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 509.461731][ T5769] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 509.511614][ T5713] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 509.582684][ T44] usb 2-1: Using ep0 maxpacket: 16 [ 509.583760][ T44] usb 2-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 509.585223][ T44] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 509.585270][ T44] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 509.585293][ T44] usb 2-1: config 0 has no interface number 0 [ 509.587949][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.587976][ T44] usb 2-1: Product: syz [ 509.587988][ T44] usb 2-1: Manufacturer: syz [ 509.588021][ T44] usb 2-1: SerialNumber: syz [ 509.617415][ T5769] usb 10-1: Using ep0 maxpacket: 16 [ 509.628585][ T44] usb 2-1: config 0 descriptor?? [ 509.649533][ T5713] usb 1-1: device descriptor read/64, error -71 [ 509.649710][ T5769] usb 10-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 509.700957][ T5769] usb 10-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 509.700991][ T5769] usb 10-1: Product: syz [ 509.701009][ T5769] usb 10-1: Manufacturer: syz [ 509.701053][ T5769] usb 10-1: SerialNumber: syz [ 509.726166][ T44] uvcvideo 2-1:0.105: Found UVC 0.00 device syz (046c:14e8) [ 509.726281][ T44] uvcvideo 2-1:0.105: No valid video chain found. [ 509.747531][ T5769] usb 10-1: config 0 descriptor?? [ 509.753291][ T5713] usb usb1-port1: attempt power cycle [ 509.859122][ T5693] usb 2-1: USB disconnect, device number 98 [ 509.965275][ T5769] peak_usb 10-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 509.966013][ T5769] peak_usb 10-1:0.0 can0: sending command failure: -22 [ 509.966039][ T5769] peak_usb 10-1:0.0 can0: sending command failure: -22 [ 509.966114][ T5769] peak_usb 10-1:0.0 can0: sending command failure: -22 [ 510.032425][ T990] snd-usb-caiaq 9-1:9.0: can't set alt interface. [ 510.032451][ T990] usb 9-1: unable to init card! (ret=-5) [ 510.032825][ T990] snd-usb-caiaq 9-1:9.0: probe with driver snd-usb-caiaq failed with error -5 [ 510.036005][ T990] usb 9-1: USB disconnect, device number 11 [ 510.091504][ T5713] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 510.112202][ T5713] usb 1-1: device descriptor read/8, error -71 [ 510.208512][ T5769] peak_usb 10-1:0.0: probe with driver peak_usb failed with error -22 [ 510.237968][ T5769] usb 10-1: USB disconnect, device number 7 [ 510.261097][ T5640] udevd[5640]: setting owner of /dev/bus/usb/010/007 to uid=0, gid=0 failed: No such file or directory [ 510.312502][T12206] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 510.351548][ T5713] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 510.373681][ T5713] usb 1-1: device descriptor read/8, error -71 [ 510.410971][T12208] netlink: 'syz.5.1540': attribute type 1 has an invalid length. [ 510.482847][ T5713] usb usb1-port1: unable to enumerate USB device [ 510.510451][T12208] 8021q: adding VLAN 0 to HW filter on device bond5 [ 510.564482][T12214] veth3: entered allmulticast mode [ 510.580626][T12214] bond5: (slave veth3): Enslaving as an active interface with a down link [ 510.595751][T12208] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 511.110066][T12227] syz_tun: entered allmulticast mode [ 513.813664][ T5693] usb 2-1: new full-speed USB device number 99 using dummy_hcd [ 513.985818][ T5693] usb 2-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice=34.15 [ 513.987026][ T5693] usb 2-1: config 9 interface 0 has no altsetting 0 [ 514.040594][ T5693] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.040630][ T5693] usb 2-1: Product: syz [ 514.040648][ T5693] usb 2-1: Manufacturer: syz [ 514.040665][ T5693] usb 2-1: SerialNumber: syz [ 514.420605][T12280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.421125][T12280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.521084][T12291] netlink: 10724 bytes leftover after parsing attributes in process `syz.1.1549'. [ 514.683806][ T990] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 514.834363][ T990] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 514.853932][ T990] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.853961][ T990] usb 10-1: Product: syz [ 514.853979][ T990] usb 10-1: Manufacturer: syz [ 514.853998][ T990] usb 10-1: SerialNumber: syz [ 514.876058][ T990] usb 10-1: config 0 descriptor?? [ 515.155109][ T990] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 515.379988][ T990] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 515.454549][T12326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.455020][T12326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.469839][T12349] macvlan2: entered promiscuous mode [ 516.469866][T12349] bridge0: entered promiscuous mode [ 516.746459][ T5693] snd-usb-caiaq 2-1:9.0: can't set alt interface. [ 516.746489][ T5693] usb 2-1: unable to init card! (ret=-5) [ 516.747153][ T5693] snd-usb-caiaq 2-1:9.0: probe with driver snd-usb-caiaq failed with error -5 [ 516.760861][ T5693] usb 2-1: USB disconnect, device number 99 [ 517.174386][ T5631] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 517.253296][T12371] loop0: detected capacity change from 0 to 3904 [ 517.323177][T12371] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 517.323208][T12371] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 517.323268][T12371] loop0: [ 517.351634][ T5631] usb 9-1: Using ep0 maxpacket: 32 [ 517.370423][ T5631] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 517.385159][ T5631] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 517.438266][ T5631] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 517.438303][ T5631] usb 9-1: Product: syz [ 517.438320][ T5631] usb 9-1: Manufacturer: syz [ 517.438338][ T5631] usb 9-1: SerialNumber: syz [ 517.461135][ T31] audit: type=1326 audit(1790626755.838:2795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12360 comm="syz.0.1565" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f828b197ed7 code=0x7ffc0000 [ 517.461324][ T31] audit: type=1326 audit(1790626755.838:2796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12360 comm="syz.0.1565" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f828b13f4d9 code=0x7ffc0000 [ 517.467790][ T31] audit: type=1326 audit(1790626755.868:2797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12360 comm="syz.0.1565" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f828b197ed7 code=0x7ffc0000 [ 517.467944][ T31] audit: type=1326 audit(1790626755.868:2798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12360 comm="syz.0.1565" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f828b13f4d9 code=0x7ffc0000 [ 517.468072][ T31] audit: type=1326 audit(1790626755.868:2799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12360 comm="syz.0.1565" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f828b197ed7 code=0x7ffc0000 [ 517.468200][ T31] audit: type=1326 audit(1790626755.868:2800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12360 comm="syz.0.1565" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f828b13f4d9 code=0x7ffc0000 [ 517.502624][ T5631] usb 9-1: config 0 descriptor?? [ 517.522228][ T31] audit: type=1326 audit(1790626755.898:2801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12360 comm="syz.0.1565" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f828b197ed7 code=0x7ffc0000 [ 517.522382][ T31] audit: type=1326 audit(1790626755.898:2802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12360 comm="syz.0.1565" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f828b13f4d9 code=0x7ffc0000 [ 517.522520][ T31] audit: type=1326 audit(1790626755.898:2803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12360 comm="syz.0.1565" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f828b197ed7 code=0x7ffc0000 [ 517.522641][ T31] audit: type=1326 audit(1790626755.918:2804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12360 comm="syz.0.1565" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f828b13f4d9 code=0x7ffc0000 [ 517.529308][T12359] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 517.589019][ T5631] hub 9-1:0.0: bad descriptor, ignoring hub [ 517.589104][ T5631] hub 9-1:0.0: probe with driver hub failed with error -5 [ 517.878826][ T5631] usb 10-1: USB disconnect, device number 8 [ 517.982825][T12377] netlink: 144 bytes leftover after parsing attributes in process `syz.5.1568'. [ 517.992755][T12374] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1565'. [ 518.751603][ T990] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 518.902310][ T990] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 518.903676][ T990] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 518.903706][ T990] usb 2-1: config 0 has no interface number 0 [ 518.903751][ T990] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 518.907662][ T990] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.907693][ T990] usb 2-1: Product: syz [ 518.907711][ T990] usb 2-1: Manufacturer: syz [ 518.907729][ T990] usb 2-1: SerialNumber: syz [ 518.971880][ T990] usb 2-1: config 0 descriptor?? [ 518.993995][ T990] yurex 2-1:0.50: USB YUREX device now attached to Yurex #1 [ 519.703409][ T5713] usb 6-1: new full-speed USB device number 82 using dummy_hcd [ 519.854911][ T5713] usb 6-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice=34.15 [ 519.856472][ T5713] usb 6-1: config 9 interface 0 has no altsetting 0 [ 519.886779][ T5713] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.886814][ T5713] usb 6-1: Product: syz [ 519.886832][ T5713] usb 6-1: Manufacturer: syz [ 519.886851][ T5713] usb 6-1: SerialNumber: syz [ 520.132455][ T10] usb 9-1: USB disconnect, device number 12 [ 520.161062][T12392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 520.164272][T12392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 520.202911][T12392] netlink: 10724 bytes leftover after parsing attributes in process `syz.5.1574'. [ 520.241702][ T5715] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 520.391661][ T5715] usb 1-1: Using ep0 maxpacket: 8 [ 520.392446][ T5715] usb 1-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 520.394263][ T5715] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 520.394316][ T5715] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 520.394346][ T5715] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 520.397039][ T5715] usb 1-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 520.397117][ T5715] usb 1-1: Product: syz [ 520.397137][ T5715] usb 1-1: Manufacturer: syz [ 520.397155][ T5715] usb 1-1: SerialNumber: syz [ 520.492134][ T5715] usb 1-1: config 0 descriptor?? [ 520.611498][ T5715] rc_core: IR keymap rc-imon-rsc not found [ 520.611521][ T5715] Registered IR keymap rc-empty [ 520.614750][ T5715] rc rc0: iMON Station as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 520.617224][ T5715] input: iMON Station as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input58 [ 520.716306][T12401] x_tables: duplicate underflow at hook 1 [ 520.732214][T12401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 520.732770][T12401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 520.838398][T12401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 520.839239][T12401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 520.905370][T12401] x_tables: duplicate underflow at hook 1 [ 520.923882][T12419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 520.934084][T12419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 521.000615][ T5715] usb 1-1: USB disconnect, device number 108 [ 521.323324][ T990] usb 2-1: USB disconnect, device number 100 [ 521.348862][ T990] yurex 2-1:0.50: USB YUREX #1 now disconnected [ 521.515076][T12427] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1582'. [ 521.606153][T12432] binder: BINDER_SET_CONTEXT_MGR already set [ 521.606170][T12432] binder: 12430:12432 ioctl 4018620d 200000000100 returned -16 [ 521.642852][T12432] binder: BINDER_SET_CONTEXT_MGR already set [ 521.642870][T12432] binder: 12430:12432 ioctl 4018620d 200000004a80 returned -16 [ 521.747210][T12439] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1584'. [ 521.821821][ T44] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 521.875653][T12440] netlink: 'syz.0.1584': attribute type 10 has an invalid length. [ 521.876092][T12440] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.876648][T12440] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.912129][T12440] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.912276][T12440] bridge0: port 2(bridge_slave_1) entered listening state [ 521.912818][T12440] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.912967][T12440] bridge0: port 1(bridge_slave_0) entered listening state [ 521.974235][T12440] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 521.990664][ T44] usb 10-1: Using ep0 maxpacket: 8 [ 521.996885][ T44] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 521.999131][ T44] usb 10-1: config index 0 descriptor too short (expected 74, got 45) [ 521.999189][ T44] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 521.999246][ T44] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 521.999273][ T44] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 521.999302][ T44] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 521.999331][ T44] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 521.999404][ T44] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.231625][ T5693] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 522.239876][T12442] trusted_key: encrypted_key: hex blob is missing [ 522.299479][ T44] usb 10-1: usb_control_msg returned -32 [ 522.299546][ T44] usbtmc 10-1:16.0: can't read capabilities [ 522.326228][T12429] loop2: detected capacity change from 0 to 7 [ 522.339797][T12429] loop2: [ 522.339818][T12429] loop2: partition table partially beyond EOD, truncated [ 522.396505][ T5713] snd-usb-caiaq 6-1:9.0: can't set alt interface. [ 522.396540][ T5713] usb 6-1: unable to init card! (ret=-5) [ 522.396653][ T5693] usb 1-1: New USB device found, idVendor=0af0, idProduct=6711, bcdDevice= 0.00 [ 522.396985][ T5713] snd-usb-caiaq 6-1:9.0: probe with driver snd-usb-caiaq failed with error -5 [ 522.399511][ T5693] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 522.399656][ T5693] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 522.399687][ T5693] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 522.399717][ T5693] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 522.410923][ T5693] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 522.410957][ T5693] usb 1-1: Product: syz [ 522.410976][ T5693] usb 1-1: Manufacturer: syz [ 522.505708][ T5713] usb 6-1: USB disconnect, device number 82 [ 522.938530][ T5693] hso 1-1:1.0: Can't find INT IN endpoint [ 523.109760][ T5693] usb 1-1: USB disconnect, device number 109 [ 524.321583][ T5713] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 524.322178][ T5715] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 524.381569][ T5693] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 524.471534][ T5713] usb 6-1: Using ep0 maxpacket: 32 [ 524.472561][ T5713] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 524.473473][ T5713] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 524.473494][ T5713] usb 6-1: config 0 has no interface number 0 [ 524.473524][ T5713] usb 6-1: config 0 interface 184 has no altsetting 0 [ 524.475789][ T5713] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.475823][ T5713] usb 6-1: Product: syz [ 524.475835][ T5713] usb 6-1: Manufacturer: syz [ 524.475847][ T5713] usb 6-1: SerialNumber: syz [ 524.478213][ T5713] usb 6-1: config 0 descriptor?? [ 524.512674][ T5715] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 524.533117][ T5693] usb 2-1: device descriptor read/64, error -71 [ 524.564937][ T5715] usb 9-1: config 0 has an invalid interface number: 50 but max is 0 [ 524.564970][ T5715] usb 9-1: config 0 has no interface number 0 [ 524.565017][ T5715] usb 9-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 524.569858][ T5715] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.569889][ T5715] usb 9-1: Product: syz [ 524.569907][ T5715] usb 9-1: Manufacturer: syz [ 524.569924][ T5715] usb 9-1: SerialNumber: syz [ 524.626391][ T5715] usb 9-1: config 0 descriptor?? [ 524.640482][ T990] usb 10-1: USB disconnect, device number 9 [ 524.669854][ T5715] yurex 9-1:0.50: USB YUREX device now attached to Yurex #1 [ 524.783994][ T5693] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 524.912069][ T5693] usb 2-1: device descriptor read/64, error -71 [ 525.021839][ T5693] usb usb2-port1: attempt power cycle [ 525.099936][ T5713] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 525.099973][ T5713] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 525.131816][ T990] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 525.281532][ T990] usb 10-1: Using ep0 maxpacket: 8 [ 525.282349][ T990] usb 10-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 525.288586][ T990] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.288615][ T990] usb 10-1: Product: syz [ 525.288633][ T990] usb 10-1: Manufacturer: syz [ 525.288650][ T990] usb 10-1: SerialNumber: syz [ 525.334374][ T990] usb 10-1: config 0 descriptor?? [ 525.364010][ T5693] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 525.385211][ T5693] usb 2-1: device descriptor read/8, error -71 [ 525.537881][ T990] usb 10-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 525.631799][ T5693] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 525.652437][ T5693] usb 2-1: device descriptor read/8, error -71 [ 525.730965][T12482] Cannot find set identified by id 1 to match [ 525.740167][T12482] netlink: 'syz.0.1597': attribute type 4 has an invalid length. [ 525.740192][T12482] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1597'. [ 525.762559][ T5693] usb usb2-port1: unable to enumerate USB device [ 525.771218][T12482] .`: renamed from bond0 (while UP) [ 526.166624][T12471] netlink: 'syz.9.1594': attribute type 17 has an invalid length. [ 526.321516][ T5693] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 526.471546][ T5693] usb 1-1: Using ep0 maxpacket: 32 [ 526.472448][ T5693] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 526.474145][ T5693] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 526.474179][ T5693] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 526.474248][ T5693] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.477936][ T5693] usb 1-1: config 0 descriptor?? [ 526.534015][ T5713] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 526.534055][ T5713] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 526.534079][ T5713] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 526.534350][ T5713] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 526.590604][ T5713] usb 6-1: USB disconnect, device number 83 [ 526.696967][T12487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.699481][T12487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.724598][T12487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.726307][T12487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.880627][ T5693] usbhid 1-1:0.0: can't add hid device: -71 [ 526.880771][ T5693] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 526.903816][ T5693] usb 1-1: USB disconnect, device number 110 [ 527.023411][ T10] usb 9-1: USB disconnect, device number 13 [ 527.029112][ T990] usb write operation failed. (-71) [ 527.031820][ T10] yurex 9-1:0.50: USB YUREX #1 now disconnected [ 527.066346][ T990] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 527.066972][ T990] dvbdev: DVB: registering new adapter (Terratec H7) [ 527.067099][ T990] usb 10-1: media controller created [ 527.067506][ T990] usb read operation failed. (-71) [ 527.068528][ T990] usb write operation failed. (-71) [ 527.110501][ T990] dvb_usb_az6007 10-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 527.128647][ T990] usb 10-1: USB disconnect, device number 10 [ 527.691793][ T5713] usb 2-1: new full-speed USB device number 105 using dummy_hcd [ 527.817931][T12506] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1605'. [ 527.853799][ T5713] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 527.855012][ T5713] usb 2-1: config 0 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 527.855046][ T5713] usb 2-1: config 0 interface 0 has no altsetting 0 [ 527.860700][ T5713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.861282][ T5713] usb 2-1: Product: syz [ 527.861301][ T5713] usb 2-1: Manufacturer: syz [ 527.902480][ T5713] usb 2-1: SerialNumber: syz [ 527.926203][ T5713] usb 2-1: config 0 descriptor?? [ 528.140665][ T5713] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 528.154022][T12513] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 528.154054][T12513] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 528.156906][T12513] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 528.156934][T12513] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 528.195462][ T990] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 528.331511][ T990] usb 1-1: device descriptor read/64, error -71 [ 528.572722][ T990] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 528.654419][ T5713] gspca_stk1135: reg_w 0x0 err -110 [ 528.655630][ T5713] gspca_stk1135: serial bus timeout: status=0x00 [ 528.655649][ T5713] gspca_stk1135: Sensor write failed [ 528.655687][ T5713] gspca_stk1135: serial bus timeout: status=0x00 [ 528.655700][ T5713] gspca_stk1135: Sensor write failed [ 528.655789][ T5713] gspca_stk1135: serial bus timeout: status=0x00 [ 528.655801][ T5713] gspca_stk1135: Sensor read failed [ 528.655840][ T5713] gspca_stk1135: serial bus timeout: status=0x00 [ 528.655852][ T5713] gspca_stk1135: Sensor read failed [ 528.655862][ T5713] gspca_stk1135: Detected sensor type unknown (0x0) [ 528.655905][ T5713] gspca_stk1135: serial bus timeout: status=0x00 [ 528.655916][ T5713] gspca_stk1135: Sensor read failed [ 528.655952][ T5713] gspca_stk1135: serial bus timeout: status=0x00 [ 528.655963][ T5713] gspca_stk1135: Sensor read failed [ 528.658990][ T5713] gspca_stk1135: serial bus timeout: status=0x00 [ 528.659004][ T5713] gspca_stk1135: Sensor write failed [ 528.659031][ T5713] gspca_stk1135: serial bus timeout: status=0x00 [ 528.659039][ T5713] gspca_stk1135: Sensor write failed [ 528.659109][ T5713] stk1135 2-1:0.0: probe with driver stk1135 failed with error -110 [ 528.786228][ T990] usb 1-1: device descriptor read/64, error -71 [ 528.892362][ T990] usb usb1-port1: attempt power cycle [ 529.177917][T12520] netlink: 76 bytes leftover after parsing attributes in process `syz.9.1608'. [ 529.241490][ T990] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 529.262250][ T990] usb 1-1: device descriptor read/8, error -71 [ 529.422391][ T10] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 529.501487][ T990] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 529.522225][ T990] usb 1-1: device descriptor read/8, error -71 [ 529.571782][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 529.574733][ T10] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 529.581227][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.631925][ T990] usb usb1-port1: unable to enumerate USB device [ 529.638247][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 529.638262][ T10] pvrusb2: ********** [ 529.638268][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 529.641217][ T10] pvrusb2: Important functionality might not be entirely working. [ 529.641232][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 529.641242][ T10] pvrusb2: ********** [ 529.853745][ T2363] pvrusb2: Invalid write control endpoint [ 530.305815][ T2363] pvrusb2: Invalid write control endpoint [ 530.305829][ T2363] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 530.305837][ T2363] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 530.305844][ T2363] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 530.305852][ T2363] pvrusb2: Device being rendered inoperable [ 530.316652][ T2363] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 530.316893][ T2363] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 530.430720][ T2363] pvrusb2: Attached sub-driver cx25840 [ 530.430737][ T2363] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 530.430745][ T2363] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 530.507040][ T5693] usb 2-1: USB disconnect, device number 105 [ 530.521539][ T990] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 530.672638][ T990] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 530.676367][ T990] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 530.676400][ T990] usb 6-1: config 0 has no interface number 0 [ 530.676470][ T990] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 530.692047][ T990] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.692079][ T990] usb 6-1: Product: syz [ 530.692096][ T990] usb 6-1: Manufacturer: syz [ 530.692112][ T990] usb 6-1: SerialNumber: syz [ 530.749083][ T990] usb 6-1: config 0 descriptor?? [ 530.782346][ T990] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 531.011574][ T5693] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 531.163520][ T5693] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 531.164772][ T5693] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 531.164807][ T5693] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 531.164865][ T5693] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.218606][ T5693] usb 2-1: config 0 descriptor?? [ 531.285228][T12536] Cannot find del_set index 3 as target [ 531.471039][T12540] sg_write: data in/out 221148/136 bytes for SCSI command 0x0-- guessing data in; [ 531.471039][T12540] program syz.0.1613 not setting count and/or reply_len properly [ 531.642923][T12533] syz_tun: entered allmulticast mode [ 531.663037][T12533] dvmrp6: entered allmulticast mode [ 531.669083][T12530] syz_tun: left allmulticast mode [ 531.671012][ T5693] usbhid 2-1:0.0: can't add hid device: -71 [ 531.671143][ T5693] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 531.686851][ T5693] usb 2-1: USB disconnect, device number 106 [ 531.741592][ T10] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 531.752703][ T5631] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 531.871778][ T10] usb 10-1: device descriptor read/64, error -71 [ 531.924861][ T5631] usb 1-1: unable to get BOS descriptor or descriptor too short [ 531.924917][ T5631] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 531.926153][ T5631] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 531.926179][ T5631] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 531.928315][ T5631] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.928335][ T5631] usb 1-1: Product: syz [ 531.928366][ T5631] usb 1-1: Manufacturer: syz [ 531.928384][ T5631] usb 1-1: SerialNumber: syz [ 531.999189][ T5631] usb 1-1: selecting invalid altsetting 1 [ 531.999937][ T5631] usb 1-1: unit 20 not found! [ 531.999960][ T5631] usb 1-1: unit 245 not found! [ 532.060233][ T5631] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 532.111238][ T5638] udevd[5638]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 532.131593][ T10] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 532.154465][ T5631] usb 9-1: USB disconnect, device number 14 [ 532.225850][ T5713] usb 1-1: USB disconnect, device number 115 [ 532.262294][ T10] usb 10-1: device descriptor read/64, error -71 [ 532.371873][ T10] usb usb10-port1: attempt power cycle [ 532.661569][ T5631] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 532.711809][ T10] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 532.742185][ T10] usb 10-1: device descriptor read/8, error -71 [ 532.812221][ T5631] usb 9-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 532.813960][ T5631] usb 9-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 532.813995][ T5631] usb 9-1: config 0 interface 0 has no altsetting 0 [ 532.814051][ T5631] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.821775][ T5631] usb 9-1: config 0 descriptor?? [ 532.975118][T12550] tipc: Started in network mode [ 532.975197][T12550] tipc: Node identity 521018ac48e9, cluster identity 4711 [ 532.975403][T12550] tipc: Enabled bearer , priority 0 [ 532.976513][T12550] syzkaller0: entered promiscuous mode [ 532.976539][T12550] syzkaller0: entered allmulticast mode [ 533.003585][ T10] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 533.024313][ T10] usb 10-1: device descriptor read/8, error -71 [ 533.036656][T12550] tipc: Resetting bearer [ 533.048708][T12549] tipc: Resetting bearer [ 533.079315][T12549] tipc: Disabling bearer [ 533.131818][ T10] usb usb10-port1: unable to enumerate USB device [ 533.219788][ T5713] usb 6-1: USB disconnect, device number 84 [ 533.239695][ T5713] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 533.302055][ T5631] ntrig 0003:1B96:0009.0022: item fetching failed at offset 5/7 [ 533.302780][ T5631] ntrig 0003:1B96:0009.0022: parse failed [ 533.302886][ T5631] ntrig 0003:1B96:0009.0022: probe with driver ntrig failed with error -22 [ 533.433989][T12552] binder: 12551:12552 ioctl c0306201 200000000100 returned -22 [ 533.434480][T12552] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1618'. [ 533.466836][T12552] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1618'. [ 533.466869][T12552] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1618'. [ 533.485283][T12552] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1618'. [ 533.485368][T12552] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1618'. [ 533.516399][T12198] usb 9-1: USB disconnect, device number 15 [ 533.549834][T12552] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1618'. [ 533.549858][T12552] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1618'. [ 533.592500][T12552] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1618'. [ 533.592525][T12552] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1618'. [ 533.653982][T12552] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1618'. [ 534.301828][ T10] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 534.451991][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 534.453733][ T10] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 534.458760][ T10] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 534.458791][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 534.458813][ T10] usb 2-1: config 0 has no interface number 0 [ 534.466967][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.466994][ T10] usb 2-1: Product: syz [ 534.467025][ T10] usb 2-1: Manufacturer: syz [ 534.467041][ T10] usb 2-1: SerialNumber: syz [ 534.527587][ T10] usb 2-1: config 0 descriptor?? [ 534.568364][ T10] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 534.568392][ T10] cx231xx 2-1:0.1: Not found matching IAD interface [ 534.582640][T12198] usb 9-1: new low-speed USB device number 16 using dummy_hcd [ 534.735118][T12563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.751275][T12563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.766053][T12198] usb 9-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 534.767941][T12198] usb 9-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 534.767996][T12198] usb 9-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 534.768054][T12198] usb 9-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 255, setting to 8 [ 534.768099][T12198] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.825552][T12573] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 534.972975][T12563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.973466][T12563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.979259][T12563] binder: BINDER_SET_CONTEXT_MGR already set [ 534.979277][T12563] binder: 12562:12563 ioctl 4018620d 200000000480 returned -16 [ 535.194130][T12590] netdevsim netdevsim5: Direct firmware load for  failed with error -2 [ 535.194195][T12590] netdevsim netdevsim5: Falling back to sysfs fallback for:  [ 535.491960][ T5715] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 535.579374][T12596] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 535.623796][ T5715] usb 10-1: device descriptor read/64, error -71 [ 535.640133][T12198] usb 9-1: string descriptor 0 read error: -71 [ 535.861639][ T5715] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 535.995583][ T5715] usb 10-1: device descriptor read/64, error -71 [ 536.077156][T12198] usb 9-1: USB disconnect, device number 16 [ 536.103472][ T5715] usb usb10-port1: attempt power cycle [ 536.281713][ T10] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 536.441526][ T5715] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 536.442557][ T10] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 536.443939][ T10] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 536.443965][ T10] usb 1-1: config 0 has no interface number 0 [ 536.444015][ T10] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 536.445466][T12603] netlink: 'syz.8.1631': attribute type 1 has an invalid length. [ 536.490878][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.490960][ T10] usb 1-1: Product: syz [ 536.491055][ T10] usb 1-1: Manufacturer: syz [ 536.491106][ T10] usb 1-1: SerialNumber: syz [ 536.532368][ T5715] usb 10-1: device descriptor read/8, error -71 [ 536.552225][ T10] usb 1-1: config 0 descriptor?? [ 536.588114][ T10] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 536.600113][T12603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 536.715625][T12606] bond0: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 536.720914][T12603] bond0: entered promiscuous mode [ 536.720942][T12603] bond0: entered allmulticast mode [ 536.775365][ T5715] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 536.793504][ T5715] usb 10-1: device descriptor read/8, error -71 [ 536.843951][T12603] macvlan3: entered promiscuous mode [ 536.843979][T12603] macvlan3: entered allmulticast mode [ 536.891660][T12603] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 536.913218][ T5715] usb usb10-port1: unable to enumerate USB device [ 537.126928][ T990] usb 2-1: USB disconnect, device number 107 [ 538.124691][T12198] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 538.265008][T12198] usb 9-1: device descriptor read/64, error -71 [ 538.389522][T12624] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 538.501527][T12198] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 538.631753][T12198] usb 9-1: device descriptor read/64, error -71 [ 538.741934][T12198] usb usb9-port1: attempt power cycle [ 538.955145][ T990] usb 1-1: USB disconnect, device number 116 [ 538.958473][ T990] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 539.092809][T12198] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 539.113459][T12198] usb 9-1: device descriptor read/8, error -71 [ 539.372376][T12198] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 539.403173][T12198] usb 9-1: device descriptor read/8, error -71 [ 539.512102][T12198] usb usb9-port1: unable to enumerate USB device [ 539.692623][ T990] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 539.843523][ T990] usb 1-1: device descriptor read/64, error -71 [ 539.861544][ T5631] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 539.896745][T12633] __nla_validate_parse: 14 callbacks suppressed [ 539.896799][T12633] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1638'. [ 539.896837][T12633] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1638'. [ 540.011539][ T5631] usb 6-1: Using ep0 maxpacket: 32 [ 540.014434][ T5631] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 540.016164][ T5631] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 540.016196][ T5631] usb 6-1: config 0 has no interface number 0 [ 540.016238][ T5631] usb 6-1: config 0 interface 12 has no altsetting 0 [ 540.019177][ T5631] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.019209][ T5631] usb 6-1: Product: syz [ 540.019221][ T5631] usb 6-1: Manufacturer: syz [ 540.019699][ T5631] usb 6-1: SerialNumber: syz [ 540.091688][ T5631] usb 6-1: config 0 descriptor?? [ 540.091915][ T990] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 540.171582][ T44] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 540.221469][ T990] usb 1-1: device descriptor read/64, error -71 [ 540.327032][ T44] usb 2-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 540.329084][ T44] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 540.333192][ T990] usb usb1-port1: attempt power cycle [ 540.345833][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.345912][ T44] usb 2-1: Product: syz [ 540.345966][ T44] usb 2-1: Manufacturer: syz [ 540.346011][ T44] usb 2-1: SerialNumber: syz [ 540.612504][ T44] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 540.620589][ T44] usb 2-1: cannot request logical cluster ID: 3 (err: -71) [ 540.621423][ T44] usb 2-1: unit 80 not found! [ 540.701569][ T990] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 540.722783][ T990] usb 1-1: device descriptor read/8, error -71 [ 540.916726][ T44] usb 2-1: USB disconnect, device number 108 [ 540.977718][ T990] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 541.004730][ T990] usb 1-1: device descriptor read/8, error -71 [ 541.029991][ T5640] udevd[5640]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 541.112258][ T990] usb usb1-port1: unable to enumerate USB device [ 541.291687][ T5713] usb 10-1: new low-speed USB device number 19 using dummy_hcd [ 541.452732][ T5713] usb 10-1: Invalid ep0 maxpacket: 64 [ 541.581533][ T5713] usb 10-1: new low-speed USB device number 20 using dummy_hcd [ 541.635245][ T44] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 541.731570][ T990] usb 9-1: new full-speed USB device number 21 using dummy_hcd [ 541.732509][ T5713] usb 10-1: Invalid ep0 maxpacket: 64 [ 541.732844][ T5713] usb usb10-port1: attempt power cycle [ 541.784940][ T44] usb 2-1: unable to get BOS descriptor or descriptor too short [ 541.784995][ T44] usb 2-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38 [ 541.786371][ T44] usb 2-1: config 114 has an invalid interface number: 240 but max is 0 [ 541.786400][ T44] usb 2-1: config 114 has no interface number 0 [ 541.786444][ T44] usb 2-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 541.786474][ T44] usb 2-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 541.786501][ T44] usb 2-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 541.786530][ T44] usb 2-1: config 114 interface 240 has no altsetting 0 [ 541.788758][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.788786][ T44] usb 2-1: Product: syz [ 541.788803][ T44] usb 2-1: Manufacturer: syz [ 541.788820][ T44] usb 2-1: SerialNumber: syz [ 541.818478][T12647] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 541.818630][T12647] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 541.909689][ T990] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 541.920617][ T990] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 541.920673][ T990] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 541.944020][ T990] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.944052][ T990] usb 9-1: Product: syz [ 541.944068][ T990] usb 9-1: Manufacturer: syz [ 541.944084][ T990] usb 9-1: SerialNumber: syz [ 541.982137][ T990] usb 9-1: 0:2 : does not exist [ 541.982214][ T990] usb 9-1: unit 9 not found! [ 542.077129][ T5631] f81534 6-1:0.12: f81534_set_register: reg: 1003 data: d8 failed: -71 [ 542.077311][ T5631] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 542.077361][ T5631] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 542.077445][ T5631] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 542.083252][ T5713] usb 10-1: new low-speed USB device number 21 using dummy_hcd [ 542.127255][ T5713] usb 10-1: Invalid ep0 maxpacket: 64 [ 542.156419][ T5631] usb 6-1: USB disconnect, device number 85 [ 542.161676][ T44] ir_usb 2-1:114.240: IR Dongle converter detected [ 542.163868][ T44] usb 2-1: IRDA class descriptor not found, device not bound [ 542.186672][T12649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.187276][T12649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.228910][ T44] usb 2-1: USB disconnect, device number 109 [ 542.271529][ T5713] usb 10-1: new low-speed USB device number 22 using dummy_hcd [ 542.293661][ T5713] usb 10-1: Invalid ep0 maxpacket: 64 [ 542.293948][ T5713] usb usb10-port1: unable to enumerate USB device [ 542.300442][ T5713] usb 9-1: USB disconnect, device number 21 [ 542.502132][T12654] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1644'. [ 542.770753][ T31] kauditd_printk_skb: 909 callbacks suppressed [ 542.770769][ T31] audit: type=1326 audit(1790626781.168:3714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12661 comm="syz.1.1646" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39e4f9e159 code=0x7ffc0000 [ 542.771323][ T31] audit: type=1326 audit(1790626781.168:3715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12661 comm="syz.1.1646" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39e4f9e159 code=0x7ffc0000 [ 542.838230][ T31] audit: type=1326 audit(1790626781.238:3716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12661 comm="syz.1.1646" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f39e4f9e159 code=0x7ffc0000 [ 542.866152][ T31] audit: type=1326 audit(1790626781.248:3717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12661 comm="syz.1.1646" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39e4f9e159 code=0x7ffc0000 [ 542.866211][ T31] audit: type=1326 audit(1790626781.248:3718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12661 comm="syz.1.1646" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f39e4f9e159 code=0x7ffc0000 [ 542.866257][ T31] audit: type=1326 audit(1790626781.248:3719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12661 comm="syz.1.1646" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39e4f9e159 code=0x7ffc0000 [ 542.866303][ T31] audit: type=1326 audit(1790626781.248:3720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12661 comm="syz.1.1646" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39e4f9e159 code=0x7ffc0000 [ 542.866357][ T31] audit: type=1326 audit(1790626781.248:3721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12661 comm="syz.1.1646" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39e4f9e159 code=0x7ffc0000 [ 542.866403][ T31] audit: type=1326 audit(1790626781.248:3722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12661 comm="syz.1.1646" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39e4f9e159 code=0x7ffc0000 [ 542.866449][ T31] audit: type=1326 audit(1790626781.248:3723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12661 comm="syz.1.1646" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7f39e4f9e159 code=0x7ffc0000 [ 543.055505][T12663] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 543.251814][T12668] fuse: fd is not a fuse device [ 543.271523][ T5713] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 543.454764][ T5713] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 543.456506][ T5713] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 543.456532][ T5713] usb 2-1: config 0 has no interface number 0 [ 543.456570][ T5713] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 543.537120][ T5713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.537150][ T5713] usb 2-1: Product: syz [ 543.537166][ T5713] usb 2-1: Manufacturer: syz [ 543.537181][ T5713] usb 2-1: SerialNumber: syz [ 543.583368][ T5713] usb 2-1: config 0 descriptor?? [ 543.610211][ T5713] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 543.988084][T12672] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1649'. [ 544.246707][T12678] loop0: detected capacity change from 0 to 3904 [ 544.298872][T12678] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 544.298929][T12678] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 544.298988][T12678] loop0: [ 545.152955][ T5715] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 545.302739][ T5715] usb 6-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01 [ 545.307491][ T5715] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 545.376969][ T5715] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.377004][ T5715] usb 6-1: Product: syz [ 545.377021][ T5715] usb 6-1: Manufacturer: syz [ 545.377039][ T5715] usb 6-1: SerialNumber: syz [ 545.429912][T12694] loop4: detected capacity change from 0 to 7 [ 545.455286][T12694] loop4: [ 545.455317][T12694] loop4: partition table partially beyond EOD, truncated [ 545.494315][ T5715] etas_es58x 6-1:1.0: Starting syz syz (Serial Number syz) [ 545.785467][ T5713] usb 2-1: USB disconnect, device number 110 [ 545.802974][ T5713] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 545.961754][T12198] usb 6-1: USB disconnect, device number 86 [ 546.254975][T12709] netlink: 'syz.8.1659': attribute type 12 has an invalid length. [ 546.254995][T12709] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1659'. [ 546.463721][ T10] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 546.621068][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 546.621123][ T10] usb 1-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 546.622820][ T10] usb 1-1: config 129 has an invalid interface number: 135 but max is 0 [ 546.622860][ T10] usb 1-1: config 129 has an invalid interface number: 5 but max is 0 [ 546.622883][ T10] usb 1-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 546.622907][ T10] usb 1-1: config 129 has no interface number 0 [ 546.622926][ T10] usb 1-1: config 129 has no interface number 1 [ 546.622977][ T10] usb 1-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 546.623008][ T10] usb 1-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 546.623047][ T10] usb 1-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 546.623078][ T10] usb 1-1: config 129 interface 135 has no altsetting 0 [ 546.623099][ T10] usb 1-1: config 129 interface 5 has no altsetting 0 [ 546.756619][T12722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1662'. [ 546.758359][ T10] usb 1-1: string descriptor 0 read error: -22 [ 546.758505][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.823266][T12724] loop0: detected capacity change from 0 to 3904 [ 546.863449][T12724] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 546.863489][T12724] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 546.863549][T12724] loop0: [ 546.870655][ T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 546.870775][ T10] usb 1-1: MIDIStreaming interface descriptor not found [ 547.512329][ T5693] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 547.663005][ T5693] usb 9-1: Using ep0 maxpacket: 16 [ 547.666051][ T5693] usb 9-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 547.667919][ T5693] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 547.667939][ T5693] usb 9-1: config 0 has no interface number 0 [ 547.667968][ T5693] usb 9-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 547.667988][ T5693] usb 9-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 547.668004][ T5693] usb 9-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 547.668023][ T5693] usb 9-1: config 0 interface 1 has no altsetting 0 [ 547.668048][ T5693] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.755247][ T5693] usb 9-1: config 0 descriptor?? [ 547.844789][ T5693] usbhid 9-1:0.1: fixing wrong optional hid class descriptors count [ 548.014673][ T5693] elan 0003:04F3:074D.0023: failed to start in urb: -90 [ 548.069225][T12741] loop4: detected capacity change from 0 to 7 [ 548.116703][T12741] loop4: [ 548.116751][T12741] loop4: partition table partially beyond EOD, truncated [ 548.246212][ T5693] elan 0003:04F3:074D.0023: Get report error for parm 6: -71 [ 548.394429][ T5693] elan 0003:04F3:074D.0023: hidraw0: USB HID v0.00 Joystick [HID 04f3:074d] on usb-dummy_hcd.8-1/input1 [ 548.394479][ T5693] elan 0003:04F3:074D.0023: Input device is not registered [ 548.414230][ T5693] elan 0003:04F3:074D.0023: probe with driver elan failed with error -119 [ 548.442757][ T5693] usb 9-1: USB disconnect, device number 22 [ 548.691080][ T31] kauditd_printk_skb: 38 callbacks suppressed [ 548.691102][ T31] audit: type=1326 audit(1790626787.088:3762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12746 comm="syz.5.1670" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0dfd9e159 code=0x7ffc0000 [ 548.732378][ T31] audit: type=1326 audit(1790626787.088:3763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12746 comm="syz.5.1670" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0dfd9e159 code=0x7ffc0000 [ 548.785345][ T31] audit: type=1326 audit(1790626787.188:3764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12746 comm="syz.5.1670" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fe0dfd9e159 code=0x7ffc0000 [ 548.785388][ T31] audit: type=1326 audit(1790626787.188:3765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12746 comm="syz.5.1670" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0dfd9e159 code=0x7ffc0000 [ 548.785421][ T31] audit: type=1326 audit(1790626787.188:3766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12746 comm="syz.5.1670" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0dfd9e159 code=0x7ffc0000 [ 548.787156][ T31] audit: type=1326 audit(1790626787.188:3767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12746 comm="syz.5.1670" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe0dfd9e159 code=0x7ffc0000 [ 548.787194][ T31] audit: type=1326 audit(1790626787.188:3768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12746 comm="syz.5.1670" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0dfd9e159 code=0x7ffc0000 [ 548.787225][ T31] audit: type=1326 audit(1790626787.188:3769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12746 comm="syz.5.1670" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0dfd9e159 code=0x7ffc0000 [ 548.788965][ T31] audit: type=1326 audit(1790626787.188:3770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12746 comm="syz.5.1670" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0dfd9e159 code=0x7ffc0000 [ 548.789004][ T31] audit: type=1326 audit(1790626787.188:3771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12746 comm="syz.5.1670" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0dfd9e159 code=0x7ffc0000 [ 548.822482][T12744] fido_id[12744]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 549.154790][ T5631] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 549.308372][ T5631] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 549.330370][ T5631] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 549.330402][ T5631] usb 6-1: config 0 has no interface number 0 [ 549.330457][ T5631] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 549.424335][ T5631] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.424366][ T5631] usb 6-1: Product: syz [ 549.424383][ T5631] usb 6-1: Manufacturer: syz [ 549.424400][ T5631] usb 6-1: SerialNumber: syz [ 549.497814][ T5631] usb 6-1: config 0 descriptor?? [ 549.546986][ T5631] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 549.626870][ T5631] usb 1-1: USB disconnect, device number 121 [ 549.711070][T12757] tipc: Started in network mode [ 549.711105][T12757] tipc: Node identity 9284f200fa0b, cluster identity 4711 [ 549.711546][T12757] tipc: Enabled bearer , priority 0 [ 549.760596][T12754] syzkaller0: entered promiscuous mode [ 549.760623][T12754] syzkaller0: entered allmulticast mode [ 550.205947][T12754] usb usb7: usbfs: process 12754 (syz.8.1672) did not claim interface 0 before use [ 550.228566][T12754] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 550.313743][T12757] tipc: Resetting bearer [ 550.364151][T12753] tipc: Resetting bearer [ 550.408994][T12753] tipc: Disabling bearer [ 550.681485][ T5713] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 550.731580][T12769] loop0: detected capacity change from 0 to 3904 [ 550.831479][ T5713] usb 10-1: Using ep0 maxpacket: 16 [ 550.832796][ T5713] usb 10-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice= 3.b3 [ 550.835191][ T5713] usb 10-1: config 1 has an invalid interface number: 193 but max is 0 [ 550.835216][ T5713] usb 10-1: config 1 has no interface number 0 [ 550.835247][ T5713] usb 10-1: config 1 interface 193 has no altsetting 0 [ 550.835316][T12769] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 550.835339][T12769] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 550.835401][T12769] loop0: [ 550.839602][ T5713] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.839638][ T5713] usb 10-1: Product: syz [ 550.839656][ T5713] usb 10-1: Manufacturer: syz [ 550.839673][ T5713] usb 10-1: SerialNumber: syz [ 551.316736][ T5713] usb 10-1: USB disconnect, device number 23 [ 551.386615][ T5631] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 551.484170][T12778] loop4: detected capacity change from 0 to 7 [ 551.485710][T12778] loop4: [ 551.485736][T12778] loop4: partition table partially beyond EOD, truncated [ 551.533592][ T5631] usb 9-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 551.554967][ T5631] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 551.584187][ T5631] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.584240][ T5631] usb 9-1: Product: syz [ 551.584257][ T5631] usb 9-1: Manufacturer: syz [ 551.584305][ T5631] usb 9-1: SerialNumber: syz [ 551.657572][ T5693] usb 6-1: USB disconnect, device number 87 [ 551.673906][ T5693] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 551.857805][ T5631] usb 9-1: Limiting number of CPorts to U8_MAX [ 551.858777][ T5631] usb 9-1: Unknown endpoint type found, address 0x03 [ 551.858801][ T5631] usb 9-1: Not enough endpoints found in device, aborting! [ 552.078362][ T44] usb 9-1: USB disconnect, device number 23 [ 552.323765][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 552.324665][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 552.631546][ T5631] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 552.781714][ T5631] usb 10-1: Using ep0 maxpacket: 32 [ 552.783274][ T5631] usb 10-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 552.784325][ T5631] usb 10-1: config 0 has an invalid interface number: 184 but max is 0 [ 552.784355][ T5631] usb 10-1: config 0 has no interface number 0 [ 552.784402][ T5631] usb 10-1: config 0 interface 184 has no altsetting 0 [ 552.790406][ T5631] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.790433][ T5631] usb 10-1: Product: syz [ 552.790451][ T5631] usb 10-1: Manufacturer: syz [ 552.790468][ T5631] usb 10-1: SerialNumber: syz [ 552.842299][ T5631] usb 10-1: config 0 descriptor?? [ 553.014418][T12803] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 553.601403][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 553.962817][T12814] xt_hashlimit: overflow, try lower: 1125899906842624/134217732 [ 554.000472][ T5631] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 554.219206][T12819] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1690'. [ 554.246890][ T5631] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 554.246915][ T5631] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 554.246931][ T5631] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 554.246945][ T5631] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 554.247185][ T5631] smsc75xx 10-1:0.184: probe with driver smsc75xx failed with error -71 [ 554.250901][ T5631] usb 10-1: USB disconnect, device number 24 [ 554.511837][ T31] kauditd_printk_skb: 38 callbacks suppressed [ 554.511860][ T31] audit: type=1326 audit(1790626792.918:3810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12823 comm="syz.0.1693" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f828b19e159 code=0x7ffc0000 [ 554.513700][ T31] audit: type=1326 audit(1790626792.918:3811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12823 comm="syz.0.1693" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f828b19e159 code=0x7ffc0000 [ 554.581713][ T31] audit: type=1326 audit(1790626792.988:3812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12823 comm="syz.0.1693" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f828b19e159 code=0x7ffc0000 [ 554.581943][ T31] audit: type=1326 audit(1790626792.988:3813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12823 comm="syz.0.1693" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f828b19e159 code=0x7ffc0000 [ 554.582179][ T31] audit: type=1326 audit(1790626792.988:3814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12823 comm="syz.0.1693" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f828b19e159 code=0x7ffc0000 [ 554.583781][ T31] audit: type=1326 audit(1790626792.988:3815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12823 comm="syz.0.1693" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f828b19e159 code=0x7ffc0000 [ 554.583959][ T31] audit: type=1326 audit(1790626792.988:3816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12823 comm="syz.0.1693" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f828b19e159 code=0x7ffc0000 [ 554.585484][ T31] audit: type=1326 audit(1790626792.988:3817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12823 comm="syz.0.1693" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f828b19e159 code=0x7ffc0000 [ 554.585837][ T31] audit: type=1326 audit(1790626792.988:3818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12823 comm="syz.0.1693" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f828b19e159 code=0x7ffc0000 [ 554.586089][ T31] audit: type=1326 audit(1790626792.988:3819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12823 comm="syz.0.1693" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f828b19e159 code=0x7ffc0000 [ 554.801507][ T5631] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 554.861980][T12826] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1694'. [ 554.887589][T12828] xt_hashlimit: size too large, truncated to 1048576 [ 554.961834][ T5631] usb 6-1: Using ep0 maxpacket: 8 [ 554.963996][ T5631] usb 6-1: New USB device found, idVendor=110a, idProduct=1130, bcdDevice=b3.a3 [ 554.965593][ T5631] usb 6-1: config 2 has an invalid interface number: 241 but max is 0 [ 554.965624][ T5631] usb 6-1: config 2 has no interface number 0 [ 554.965671][ T5631] usb 6-1: config 2 interface 241 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 554.965697][ T5631] usb 6-1: config 2 interface 241 has no altsetting 0 [ 555.027010][ T5631] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.027032][ T5631] usb 6-1: Product: syz [ 555.027044][ T5631] usb 6-1: Manufacturer: syz [ 555.027056][ T5631] usb 6-1: SerialNumber: syz [ 555.060703][ T5631] ti_usb_3410_5052 6-1:2.241: TI USB 3410 1 port adapter converter detected [ 555.061206][ T5631] ti_usb_3410_5052 6-1:2.241: missing endpoints [ 555.153403][ T44] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 555.186377][T12198] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 555.273885][T12817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.275599][T12817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.345719][ T44] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 555.362044][ T44] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 555.362072][ T44] usb 1-1: config 0 has no interface number 0 [ 555.362116][ T44] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 555.378287][T12198] usb 9-1: Using ep0 maxpacket: 16 [ 555.380100][T12198] usb 9-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 555.427473][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.427495][ T44] usb 1-1: Product: syz [ 555.427507][ T44] usb 1-1: Manufacturer: syz [ 555.427518][ T44] usb 1-1: SerialNumber: syz [ 555.428876][T12198] usb 9-1: config 0 has an invalid interface number: 35 but max is 0 [ 555.428901][T12198] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 555.428922][T12198] usb 9-1: config 0 has no interface number 0 [ 555.428962][T12198] usb 9-1: config 0 interface 35 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 555.428990][T12198] usb 9-1: config 0 interface 35 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 555.441586][ T44] usb 1-1: config 0 descriptor?? [ 555.526367][T12198] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.526398][T12198] usb 9-1: Product: syz [ 555.526420][T12198] usb 9-1: Manufacturer: syz [ 555.526437][T12198] usb 9-1: SerialNumber: syz [ 555.557785][T12198] usb 9-1: config 0 descriptor?? [ 555.568239][T12198] cypress_m8 9-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 555.580534][ T44] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 555.600523][T12198] nokiaca42v2 ttyUSB0: required endpoint is missing [ 555.782220][ T5631] usb 9-1: USB disconnect, device number 24 [ 555.802998][ T5631] cypress_m8 9-1:0.35: device disconnected [ 555.963362][ T44] usb 6-1: USB disconnect, device number 88 [ 556.772767][T12853] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1701'. [ 556.772794][T12853] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1701'. [ 557.481903][ T44] usb 1-1: USB disconnect, device number 122 [ 557.485939][ T44] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 557.635921][T12859] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 557.696744][T12863] fuseblk: Unknown parameter 'audit' [ 557.802763][T12861] fuse: Bad value for 'fd' [ 558.228217][T12877] binder: BINDER_SET_CONTEXT_MGR already set [ 558.228236][T12877] binder: 12875:12877 ioctl 4018620d 200000000140 returned -16 [ 558.257672][T12879] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 558.266370][T12877] binder: BINDER_SET_CONTEXT_MGR already set [ 558.266412][T12877] binder: 12875:12877 ioctl 4018620d 200000000040 returned -16 [ 558.323796][ T44] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 558.474849][ T44] usb 10-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice= 0.01 [ 558.492399][ T44] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 16630, setting to 1024 [ 558.505360][ T44] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.505442][ T44] usb 10-1: Product: syz [ 558.505486][ T44] usb 10-1: Manufacturer: syz [ 558.505522][ T44] usb 10-1: SerialNumber: syz [ 558.591316][ T44] ums-onetouch 10-1:1.0: USB Mass Storage device detected [ 558.659460][ T44] input: syz syz as /devices/platform/dummy_hcd.9/usb10/10-1/input/input60 [ 558.678254][ T10] usb 2-1: new full-speed USB device number 111 using dummy_hcd [ 558.678845][ T44] scsi host1: usb-storage 10-1:1.0 [ 558.830296][T12873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.830668][T12873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.852805][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 558.852845][ T10] usb 2-1: New USB device found, idVendor=05a4, idProduct=1700, bcdDevice= 0.40 [ 558.857621][ T10] usb 2-1: config 1 interface 0 altsetting 7 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 558.857658][ T10] usb 2-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 558.857690][ T10] usb 2-1: config 1 interface 0 has no altsetting 0 [ 558.881022][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.881064][ T10] usb 2-1: Product: syz [ 558.881083][ T10] usb 2-1: Manufacturer: syz [ 558.881101][ T10] usb 2-1: SerialNumber: syz [ 558.950934][T12873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.951303][T12873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.998207][ T10] usb 2-1: rejected 1 configuration due to insufficient available bus power [ 558.998237][ T10] usb 2-1: no configuration chosen from 1 choice [ 558.998854][T12873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.028947][T12873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.030968][ T5713] usb 10-1: USB disconnect, device number 25 [ 559.031074][ C1] input input60: can't resubmit intr, dummy_hcd.9-1/input0, retval -19 [ 559.310553][T12899] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1712'. [ 559.561740][ T10] usb 6-1: new low-speed USB device number 89 using dummy_hcd [ 559.691615][ T10] usb 6-1: device descriptor read/64, error -71 [ 559.795882][T12911] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 559.941664][ T10] usb 6-1: new low-speed USB device number 90 using dummy_hcd [ 560.015190][ T31] kauditd_printk_skb: 40 callbacks suppressed [ 560.015212][ T31] audit: type=1326 audit(1790626798.418:3860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12918 comm="syz.9.1716" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0499e159 code=0x7ffc0000 [ 560.017085][ T31] audit: type=1326 audit(1790626798.418:3861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12918 comm="syz.9.1716" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0499e159 code=0x7ffc0000 [ 560.018783][ T31] audit: type=1326 audit(1790626798.418:3862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12918 comm="syz.9.1716" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f3e0499e159 code=0x7ffc0000 [ 560.019185][ T31] audit: type=1326 audit(1790626798.418:3863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12918 comm="syz.9.1716" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0499e159 code=0x7ffc0000 [ 560.019593][ T31] audit: type=1326 audit(1790626798.418:3864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12918 comm="syz.9.1716" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3e0499e159 code=0x7ffc0000 [ 560.019834][ T31] audit: type=1326 audit(1790626798.418:3865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12918 comm="syz.9.1716" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0499e159 code=0x7ffc0000 [ 560.020366][ T31] audit: type=1326 audit(1790626798.418:3866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12918 comm="syz.9.1716" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0499e159 code=0x7ffc0000 [ 560.020657][ T31] audit: type=1326 audit(1790626798.418:3867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12918 comm="syz.9.1716" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3e0499e159 code=0x7ffc0000 [ 560.020907][ T31] audit: type=1326 audit(1790626798.418:3868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12918 comm="syz.9.1716" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0499e159 code=0x7ffc0000 [ 560.021134][ T31] audit: type=1326 audit(1790626798.418:3869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12918 comm="syz.9.1716" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0499e159 code=0x7ffc0000 [ 560.079993][ T10] usb 6-1: device descriptor read/64, error -71 [ 560.183167][ T10] usb usb6-port1: attempt power cycle [ 560.591169][T12922] netlink: 5 bytes leftover after parsing attributes in process `syz.8.1717'. [ 560.601105][T12922] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 560.601588][ T10] usb 6-1: new low-speed USB device number 91 using dummy_hcd [ 560.633739][ T10] usb 6-1: device descriptor read/8, error -71 [ 560.871667][ T10] usb 6-1: new low-speed USB device number 92 using dummy_hcd [ 560.892389][ T10] usb 6-1: device descriptor read/8, error -71 [ 561.001717][ T10] usb usb6-port1: unable to enumerate USB device [ 561.091563][ T5693] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 561.241785][ T5693] usb 1-1: Using ep0 maxpacket: 32 [ 561.242551][ T5693] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 561.243565][ T5693] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 561.243591][ T5693] usb 1-1: config 0 has no interface number 0 [ 561.243636][ T5693] usb 1-1: config 0 interface 12 has no altsetting 0 [ 561.244721][T12198] usb 2-1: USB disconnect, device number 111 [ 561.246698][ T5693] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.246724][ T5693] usb 1-1: Product: syz [ 561.246743][ T5693] usb 1-1: Manufacturer: syz [ 561.246761][ T5693] usb 1-1: SerialNumber: syz [ 561.286421][ T5713] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 561.347952][ T5693] usb 1-1: config 0 descriptor?? [ 561.453432][ T5713] usb 10-1: Using ep0 maxpacket: 16 [ 561.478093][ T5713] usb 10-1: unable to get BOS descriptor or descriptor too short [ 561.478148][ T5713] usb 10-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7 [ 561.480232][ T5713] usb 10-1: config 9 has an invalid interface number: 57 but max is 0 [ 561.480260][ T5713] usb 10-1: config 9 has no interface number 0 [ 561.480293][ T5713] usb 10-1: config 9 interface 57 has no altsetting 0 [ 561.538988][T12933] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1720'. [ 561.566119][ T5713] usb 10-1: string descriptor 0 read error: -22 [ 561.566275][ T5713] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.761686][T12198] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 561.803808][ T5713] (null): keene_cmd_main failed (-71) [ 561.842109][ T5713] video4linux radio48: keene_cmd_main failed (-71) [ 561.842159][ T5713] radio-keene 10-1:9.57: V4L2 device registered as radio48 [ 561.849952][ T5713] usb 10-1: USB disconnect, device number 26 [ 561.912298][T12198] usb 9-1: Using ep0 maxpacket: 16 [ 561.913080][T12198] usb 9-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 561.914489][T12198] usb 9-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30 [ 561.914547][T12198] usb 9-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 561.914581][T12198] usb 9-1: config 0 interface 0 has no altsetting 0 [ 561.914620][T12198] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.920540][T12198] usb 9-1: config 0 descriptor?? [ 561.926707][T12198] usbhid 9-1:0.0: fixing wrong optional hid class descriptors count [ 561.926737][T12198] usbhid 9-1:0.0: can't add hid device: -22 [ 561.926829][T12198] usbhid 9-1:0.0: probe with driver usbhid failed with error -22 [ 562.407767][T12942] loop4: detected capacity change from 0 to 7 [ 562.408726][T12942] loop4: [ 562.408754][T12942] loop4: partition table partially beyond EOD, truncated [ 562.771558][ T10] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 562.921954][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 562.922748][ T10] usb 6-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 562.923831][ T10] usb 6-1: config index 0 descriptor too short (expected 164, got 36) [ 562.923891][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 562.923935][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 562.923965][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.927320][ T10] usb 6-1: config 0 descriptor?? [ 563.064370][ T5693] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 563.064505][ T5693] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 563.064519][ T5693] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 563.064584][ T5693] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 563.096037][ T5693] usb 1-1: USB disconnect, device number 123 [ 563.159393][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 563.159542][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 563.180084][ T10] usb 6-1: USB disconnect, device number 93 [ 563.204834][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.204898][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.668690][T12959] fuse: Bad value for 'group_id' [ 563.668752][T12959] fuse: Bad value for 'group_id' [ 563.670043][T12959] netlink: 'syz.0.1728': attribute type 1 has an invalid length. [ 563.722820][T12962] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1728'. [ 563.760968][T12959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 563.859787][T12962] netlink: 'syz.0.1728': attribute type 10 has an invalid length. [ 563.859807][T12962] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1728'. [ 563.918976][T12963] syzkaller0: left promiscuous mode [ 563.994334][T12959] bond0: (slave dummy0): Enslaving as a backup interface with an up link [ 563.996611][T12962] dummy0: entered promiscuous mode [ 564.001064][T12962] bond0: (slave dummy0): Releasing backup interface [ 564.388012][ T10] usb 9-1: USB disconnect, device number 25 [ 564.501740][T12969] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 564.783126][T12980] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 564.787767][T12980] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1732'. [ 564.891601][ T5713] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 564.971480][ T10] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 565.021590][ T5693] usb 6-1: new full-speed USB device number 94 using dummy_hcd [ 565.042474][ T5713] usb 1-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 565.045823][ T5713] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 565.045849][ T5713] usb 1-1: config 0 interface 0 has no altsetting 0 [ 565.045878][ T5713] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.048585][ T5713] usb 1-1: config 0 descriptor?? [ 565.049410][T12976] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 565.121680][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 565.122437][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 565.123637][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 565.123689][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 565.123710][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 565.123729][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 565.123763][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 565.123806][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.127199][ T10] usb 2-1: config 0 descriptor?? [ 565.178621][ T5693] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 565.199565][ T5693] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 565.199654][ T5693] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 565.238200][ T5693] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.238818][ T5693] usb 6-1: Product: syz [ 565.238872][ T5693] usb 6-1: Manufacturer: syz [ 565.238922][ T5693] usb 6-1: SerialNumber: syz [ 565.313956][ T5693] usb 6-1: 0:2 : does not exist [ 565.335793][T12978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 565.341173][T12978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 565.452380][ T10] rc_core: IR keymap rc-hauppauge not found [ 565.452403][ T10] Registered IR keymap rc-empty [ 565.452742][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 565.472528][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 565.493376][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 565.516401][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input61 [ 565.534221][ T5713] waterforce 0003:1044:7A4D.0024: unexpected long global item [ 565.534980][ T5713] waterforce 0003:1044:7A4D.0024: hid parse failed with -22 [ 565.535097][ T5713] waterforce 0003:1044:7A4D.0024: probe with driver waterforce failed with error -22 [ 565.576964][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 565.584834][ T5693] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 565.595603][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 565.612030][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 565.633294][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 565.651859][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 565.675515][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 565.678794][T12989] loop4: detected capacity change from 0 to 7 [ 565.679684][T12989] loop4: [ 565.679708][T12989] loop4: partition table partially beyond EOD, truncated [ 565.692108][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 565.717375][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 565.732513][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 565.754194][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 565.800172][ T10] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 565.800203][ T10] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 565.834425][ T10] usb 2-1: USB disconnect, device number 112 [ 565.969080][ T5693] usb 6-1: USB disconnect, device number 94 [ 566.041914][ T9] usb 1-1: USB disconnect, device number 124 [ 566.106598][ T5638] udevd[5638]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 566.130920][ T5713] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 566.292214][ T5713] usb 9-1: Using ep0 maxpacket: 8 [ 566.292978][ T5713] usb 9-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 566.294011][ T5713] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 566.294040][ T5713] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 127, changing to 10 [ 566.294070][ T5713] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 59113, setting to 1024 [ 566.294099][ T5713] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 566.307229][ T5713] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.307291][ T5713] usb 9-1: Product: syz [ 566.307308][ T5713] usb 9-1: Manufacturer: syz [ 566.307326][ T5713] usb 9-1: SerialNumber: syz [ 566.392640][ T5713] usb 9-1: config 0 descriptor?? [ 566.398428][T12991] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 566.510262][T13002] netlink: 'syz.9.1739': attribute type 2 has an invalid length. [ 566.634103][ T5713] usb 9-1: USB disconnect, device number 26 [ 566.673677][ T990] usb 6-1: new full-speed USB device number 95 using dummy_hcd [ 566.714289][T13007] syzkaller1: entered promiscuous mode [ 566.714316][T13007] syzkaller1: entered allmulticast mode [ 566.718202][ T31] kauditd_printk_skb: 112 callbacks suppressed [ 566.718223][ T31] audit: type=1326 audit(1790626805.118:3982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13008 comm="syz.9.1742" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0499e159 code=0x7ffc0000 [ 566.718473][ T31] audit: type=1326 audit(1790626805.118:3983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13008 comm="syz.9.1742" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0499e159 code=0x7ffc0000 [ 566.722050][ T31] audit: type=1326 audit(1790626805.118:3984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13008 comm="syz.9.1742" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f3e0499e159 code=0x7ffc0000 [ 566.722103][ T31] audit: type=1326 audit(1790626805.128:3985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13008 comm="syz.9.1742" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0499e159 code=0x7ffc0000 [ 566.722148][ T31] audit: type=1326 audit(1790626805.128:3986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13008 comm="syz.9.1742" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0499e159 code=0x7ffc0000 [ 566.730600][ T31] audit: type=1326 audit(1790626805.128:3987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13008 comm="syz.9.1742" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3e0499e159 code=0x7ffc0000 [ 566.770672][ T31] audit: type=1326 audit(1790626805.138:3988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13008 comm="syz.9.1742" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0499e159 code=0x7ffc0000 [ 566.770839][ T31] audit: type=1326 audit(1790626805.138:3989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13008 comm="syz.9.1742" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0499e159 code=0x7ffc0000 [ 566.784189][ T31] audit: type=1326 audit(1790626805.188:3990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13008 comm="syz.9.1742" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3e0499e159 code=0x7ffc0000 [ 566.784374][ T31] audit: type=1326 audit(1790626805.188:3991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13008 comm="syz.9.1742" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0499e159 code=0x7ffc0000 [ 566.924582][ T10] usb 2-1: new full-speed USB device number 113 using dummy_hcd [ 566.940485][ T990] usb 6-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=32.4c [ 567.008401][ T990] usb 6-1: config 34 has an invalid interface number: 116 but max is 0 [ 567.008434][ T990] usb 6-1: config 34 has no interface number 0 [ 567.008467][ T990] usb 6-1: config 34 interface 116 has no altsetting 0 [ 567.010978][ T990] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.011006][ T990] usb 6-1: Product: syz [ 567.011027][ T990] usb 6-1: Manufacturer: syz [ 567.011039][ T990] usb 6-1: SerialNumber: syz [ 567.074314][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 567.074850][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 567.074882][ T10] usb 2-1: New USB device found, idVendor=056a, idProduct=0027, bcdDevice= 0.40 [ 567.075889][ T10] usb 2-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 567.075926][ T10] usb 2-1: config 1 interface 0 has no altsetting 0 [ 567.076443][ T10] usb 2-1: language id specifier not provided by device, defaulting to English [ 567.080398][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.080429][ T10] usb 2-1: Manufacturer: ᨯ颌喉洳⁵ꀤ㚈⨳䦏鮂蚰əѥ平艀缲᩿⻴諧๕戦倉蚑數쑜뻉᭽ᤠုꅿ쵀聹醐㣤㋱ې箪 [ 567.080448][ T10] usb 2-1: SerialNumber: syz [ 567.143775][T13004] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 567.279921][T13001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.302316][T13001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.380941][ T10] usbhid 2-1:1.0: can't add hid device: -71 [ 567.381058][ T10] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 567.416746][ T10] usb 2-1: USB disconnect, device number 113 [ 567.448169][ T990] comedi comedi5: could not set alternate setting 3 in high speed [ 567.448200][ T990] usbdux 6-1:34.116: driver 'usbdux' failed to auto-configure device. [ 567.468784][ T990] usbdux 6-1:34.116: probe with driver usbdux failed with error -71 [ 567.481032][ T990] usb 6-1: USB disconnect, device number 95 [ 567.677613][T13015] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1744'. [ 568.191795][ T10] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 568.342652][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 568.343417][ T10] usb 6-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 568.346024][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.356757][ T10] usb 6-1: config 0 descriptor?? [ 568.399166][ T10] usb 6-1: probing VID:PID(0424:012C) [ 568.415664][ T10] usb 6-1: vub300 testing BULK IN EndPoint(0) 81 [ 568.415697][ T10] usb 6-1: vub300 testing BULK OUT EndPoint(1) 02 [ 568.415719][ T10] usb 6-1: vub300 testing BULK IN EndPoint(2) 83 [ 568.415741][ T10] usb 6-1: vub300 testing BULK OUT EndPoint(3) 04 [ 568.415767][ T10] usb 6-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 568.713878][ T5631] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 568.793249][ T10] usb 6-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 568.865133][ T5631] usb 9-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 568.869949][ T5631] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 568.870007][ T5631] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.925578][ T5631] as10x_usb: device has been detected [ 568.926627][ T5631] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 568.953256][ T5631] usb 9-1: DVB: registering adapter 2 frontend 0 (Abilis Systems DVB-Titan)... [ 568.980434][ T5631] as10x_usb: error during firmware upload part1 [ 568.981277][ T5631] Registered device Abilis Systems DVB-Titan [ 569.002244][ T10] usb 6-1: USB vub300 remote SDIO host controller[0]connected with no SD/SDIO card inserted [ 569.054762][ T5693] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 569.211511][ T5693] usb 1-1: Using ep0 maxpacket: 32 [ 569.212300][ T5693] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 569.213373][ T5693] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 569.213402][ T5693] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 569.213427][ T5693] usb 1-1: config 0 interface 0 has no altsetting 0 [ 569.215601][ T5693] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.215630][ T5693] usb 1-1: Product: syz [ 569.215646][ T5693] usb 1-1: Manufacturer: syz [ 569.215663][ T5693] usb 1-1: SerialNumber: syz [ 569.218270][ T5693] usb 1-1: config 0 descriptor?? [ 569.371854][ T5713] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 569.421296][ T5693] gs_usb 1-1:0.0: Couldn't get device config: (err=-32) [ 569.421509][ T5693] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -32 [ 569.524426][ T5713] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 569.525821][ T5713] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 569.525875][ T5713] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 569.528977][ T5713] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.529023][ T5713] usb 10-1: Product: syz [ 569.529037][ T5713] usb 10-1: Manufacturer: syz [ 569.529050][ T5713] usb 10-1: SerialNumber: syz [ 569.586692][ T5713] cdc_mbim 10-1:1.0: skipping garbage [ 569.624135][T13045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.624826][T13045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 569.669624][T13066] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1751'. [ 569.888737][T13063] raw-gadget.3 gadget.9: fail, usb_ep_enable returned -22 [ 570.310470][ T5693] usb 6-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 570.310816][ T990] usb 6-1: USB disconnect, device number 96 [ 570.334557][T13064] raw-gadget.3 gadget.9: fail, usb_ep_enable returned -22 [ 570.336462][ T5713] cdc_mbim 10-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 570.336500][ T5713] cdc_mbim 10-1:1.0: setting rx_max = 2048 [ 570.336866][ T5693] usb 6-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 570.536702][ T5713] cdc_mbim 10-1:1.0: setting tx_max = 184 [ 570.541133][ T5713] cdc_mbim 10-1:1.0: cdc-wdm1: USB WDM device [ 570.588275][ T5713] wwan wwan0: port wwan0mbim0 attached [ 570.603266][ T5713] cdc_mbim 10-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.9-1, CDC MBIM, 26:59:24:c5:c8:de [ 571.024359][ T990] USB vub300 remote SDIO host controller[0] now disconnected [ 571.319615][ T9] usb 9-1: USB disconnect, device number 27 [ 571.434566][ T9] Unregistered device Abilis Systems DVB-Titan [ 571.453777][ T9] as10x_usb: device has been disconnected [ 571.650648][ T10] usb 1-1: USB disconnect, device number 125 [ 571.693581][ T990] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 571.870676][ T990] usb 2-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 571.887946][ T990] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 571.903515][T13112] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1765'. [ 571.903546][T13112] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1765'. [ 571.940141][ T990] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.940178][ T990] usb 2-1: Product: syz [ 571.940197][ T990] usb 2-1: Manufacturer: syz [ 571.940216][ T990] usb 2-1: SerialNumber: syz [ 572.021640][ C1] [ 572.026916][ C1] ============================= [ 572.031916][ C1] WARNING: suspicious RCU usage [ 572.036975][ C1] syzkaller #0 Tainted: G L [ 572.043051][ C1] ----------------------------- [ 572.048031][ C1] kernel/sched/core.c:9226 Illegal context switch in RCU-sched read-side critical section! [ 572.058105][ C1] [ 572.058105][ C1] other info that might help us debug this: [ 572.058105][ C1] [ 572.068432][ C1] [ 572.068432][ C1] rcu_scheduler_active = 2, debug_locks = 1 [ 572.076632][ C1] locks held by syz-executor/10986: 9, last CPU#1: [ 572.083349][ C1] #0: ffffffff8ee36650 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10a/0x480 [ 572.092331][ C1] #1: ffff888076f55900 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 572.101608][ C1] #2: ffff888035b3b440 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 572.110970][ C1] #3: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 572.120697][ C1] #4: ffff888074cc7bb8 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 572.131401][ C1] #5: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 572.140998][ C1] #6: ffff88805a3783d8 (ptlock_ptr(ptdesc)#2/1){+.+.}-{3:3}, at: copy_pmd_range+0x6fb/0x5c10 [ 572.151443][ C1] #7: ffffffff8ed5c960 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x490 [ 572.160932][ C1] #8: ffffc90000a18cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 572.171625][ C1] [ 572.171625][ C1] stack backtrace: [ 572.177638][ C1] CPU: 1 UID: 0 PID: 10986 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 572.188809][ C1] Tainted: [L]=SOFTLOCKUP [ 572.193203][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 572.203322][ C1] Call Trace: [ 572.206669][ C1] [ 572.209559][ C1] dump_stack_lvl+0xe8/0x150 [ 572.214221][ C1] lockdep_rcu_suspicious+0x140/0x1d0 [ 572.219662][ C1] __might_resched+0xbb/0x4c0 [ 572.224429][ C1] ? __cancel_work_sync+0x5c/0x110 [ 572.229621][ C1] __cancel_work_sync+0x6d/0x110 [ 572.234658][ C1] mmc_free_host+0x19/0x40 [ 572.239232][ C1] call_timer_fn+0x18d/0x5f0 [ 572.243873][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 572.250678][ C1] ? call_timer_fn+0xd5/0x5f0 [ 572.255396][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 572.260574][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 572.265905][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 572.272893][ C1] __run_timer_base+0x652/0x8b0 [ 572.278608][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 572.284052][ C1] ? ktime_get+0x1f5/0x220 [ 572.288801][ C1] ? lapic_next_event+0x11/0x20 [ 572.293724][ C1] run_timer_softirq+0xb7/0x170 [ 572.298628][ C1] handle_softirqs+0x226/0x860 [ 572.303452][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 572.308309][ C1] __irq_exit_rcu+0xcb/0x220 [ 572.312958][ C1] irq_exit_rcu+0x9/0x30 [ 572.317263][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 572.323127][ C1] [ 572.326112][ C1] [ 572.329090][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 572.335217][ C1] RIP: 0010:check_preemption_disabled+0xd/0xd0 [ 572.341444][ C1] Code: 1c 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 41 56 53 65 8b 05 1b bd ae 07 <65> 48 8b 0d eb bc ae 07 85 c9 74 0c 5b 41 5e 41 5f 5d c3 cc cc cc [ 572.361113][ C1] RSP: 0018:ffffc90006e9f208 EFLAGS: 00000282 [ 572.367226][ C1] RAX: 0000000000000001 RBX: ffffffff8243e9ea RCX: ffff88807a945dc0 [ 572.375303][ C1] RDX: 0000000000000000 RSI: ffffffff8c6dad60 RDI: ffffffff8c6dad20 [ 572.383297][ C1] RBP: 0000000000000001 R08: ffffffff8243e9ea R09: 0000000000000000 [ 572.391294][ C1] R10: dffffc0000000000 R11: ffffed100b2f2855 R12: dffffc0000000000 [ 572.399648][ C1] R13: 00007f2b21e00000 R14: 000000000004cb6a R15: ffff88813fe08120 [ 572.408018][ C1] ? pfn_valid+0xba/0x490 [ 572.412676][ C1] ? pfn_valid+0xba/0x490 [ 572.417301][ C1] ? pfn_valid+0xba/0x490 [ 572.421658][ C1] rcu_is_watching+0x16/0xb0 [ 572.426271][ C1] ? pfn_valid+0xba/0x490 [ 572.430620][ C1] pfn_valid+0xf3/0x490 [ 572.434825][ C1] page_table_check_set+0x25/0x530 [ 572.439976][ C1] copy_pmd_range+0x4adc/0x5c10 [ 572.444884][ C1] ? stack_depot_save_flags+0x33/0x7f0 [ 572.450605][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 572.455860][ C1] ? do_syscall_64+0x166/0x520 [ 572.460769][ C1] ? __lock_acquire+0x747/0x2de0 [ 572.465763][ C1] ? mas_wr_store_type+0xf80/0x1980 [ 572.471097][ C1] copy_page_range+0xc82/0x1290 [ 572.475997][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 572.481314][ C1] ? __pfx___mapping_rmap_tree_augment_rotate+0x10/0x10 [ 572.488290][ C1] dup_mmap+0xf17/0x1dc0 [ 572.492571][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 572.497281][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 572.502344][ C1] ? lock_acquire+0x115/0x350 [ 572.507055][ C1] copy_mm+0x115/0x480 [ 572.511167][ C1] copy_process+0x1e79/0x4400 [ 572.515867][ C1] ? __lock_acquire+0x747/0x2de0 [ 572.520834][ C1] ? copy_process+0xd16/0x4400 [ 572.525649][ C1] ? __pfx_copy_process+0x10/0x10 [ 572.530713][ C1] kernel_clone+0x2d7/0x940 [ 572.535265][ C1] ? cgroup1_freezing+0x20/0x350 [ 572.540242][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 572.545310][ C1] __x64_sys_clone+0x1b6/0x230 [ 572.550112][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 572.555464][ C1] ? rcu_is_watching+0x16/0xb0 [ 572.560268][ C1] do_syscall_64+0x166/0x520 [ 572.564901][ C1] ? trace_irq_disable+0x3b/0x140 [ 572.570481][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.576597][ C1] ? clear_bhb_loop+0x70/0xc0 [ 572.581443][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.587417][ C1] RIP: 0033:0x7f2b22fc6bd2 [ 572.591879][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 572.611517][ C1] RSP: 002b:00007f2b2334fc60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 572.620053][ C1] RAX: ffffffffffffffda RBX: 00007f2b2334fc60 RCX: 00007f2b22fc6bd2 [ 572.628233][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 572.636484][ C1] RBP: 00007f2b2334fdec R08: 0000000000000000 R09: 0000000000000001 [ 572.645033][ C1] R10: 000055558297d7d0 R11: 0000000000000246 R12: 0000000000000001 [ 572.653409][ C1] R13: 0000555582990a00 R14: 000000000008b0c4 R15: 00007f2b2334fe40 [ 572.661975][ C1] [ 572.665370][ C1] BUG: sleeping function called from invalid context at kernel/workqueue.c:4561 [ 572.665387][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 10986, name: syz-executor [ 572.665407][ C1] preempt_count: 104, expected: 0 [ 572.665418][ C1] RCU nest depth: 2, expected: 0 [ 572.665430][ C1] locks held by syz-executor/10986: 9, last CPU#1: [ 572.665449][ C1] #0: ffffffff8ee36650 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10a/0x480 [ 572.665526][ C1] #1: ffff888076f55900 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 572.665650][ C1] #2: ffff888035b3b440 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 572.665707][ C1] #3: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 572.665922][ C1] #4: ffff888074cc7bb8 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 572.666019][ C1] #5: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 572.666093][ C1] #6: ffff88805a3783d8 (ptlock_ptr(ptdesc)#2/1){+.+.}-{3:3}, at: copy_pmd_range+0x6fb/0x5c10 [ 572.666183][ C1] #7: ffffffff8ed5c960 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x490 [ 572.666247][ C1] #8: ffffc90000a18cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 572.666314][ C1] Preemption disabled at: [ 572.666322][ C1] [<0000000000000000>] 0x0 [ 572.666353][ C1] CPU: 1 UID: 0 PID: 10986 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 572.666384][ C1] Tainted: [L]=SOFTLOCKUP [ 572.666394][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 572.666409][ C1] Call Trace: [ 572.666429][ C1] [ 572.666440][ C1] dump_stack_lvl+0xe8/0x150 [ 572.666480][ C1] __might_resched+0x36a/0x4c0 [ 572.666529][ C1] __cancel_work_sync+0x6d/0x110 [ 572.666572][ C1] mmc_free_host+0x19/0x40 [ 572.666604][ C1] call_timer_fn+0x18d/0x5f0 [ 572.666637][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 572.666663][ C1] ? call_timer_fn+0xd5/0x5f0 [ 572.666697][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 572.666744][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 572.666778][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 572.666809][ C1] __run_timer_base+0x652/0x8b0 [ 572.666857][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 572.666893][ C1] ? ktime_get+0x1f5/0x220 [ 572.666921][ C1] ? lapic_next_event+0x11/0x20 [ 572.666958][ C1] run_timer_softirq+0xb7/0x170 [ 572.666991][ C1] handle_softirqs+0x226/0x860 [ 572.667029][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 572.667083][ C1] __irq_exit_rcu+0xcb/0x220 [ 572.667121][ C1] irq_exit_rcu+0x9/0x30 [ 572.667153][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 572.667191][ C1] [ 572.667201][ C1] [ 572.667214][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 572.667243][ C1] RIP: 0010:check_preemption_disabled+0xd/0xd0 [ 572.667284][ C1] Code: 1c 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 41 56 53 65 8b 05 1b bd ae 07 <65> 48 8b 0d eb bc ae 07 85 c9 74 0c 5b 41 5e 41 5f 5d c3 cc cc cc [ 572.667306][ C1] RSP: 0018:ffffc90006e9f208 EFLAGS: 00000282 [ 572.667331][ C1] RAX: 0000000000000001 RBX: ffffffff8243e9ea RCX: ffff88807a945dc0 [ 572.667350][ C1] RDX: 0000000000000000 RSI: ffffffff8c6dad60 RDI: ffffffff8c6dad20 [ 572.667368][ C1] RBP: 0000000000000001 R08: ffffffff8243e9ea R09: 0000000000000000 [ 572.667384][ C1] R10: dffffc0000000000 R11: ffffed100b2f2855 R12: dffffc0000000000 [ 572.667404][ C1] R13: 00007f2b21e00000 R14: 000000000004cb6a R15: ffff88813fe08120 [ 572.667434][ C1] ? pfn_valid+0xba/0x490 [ 572.667464][ C1] ? pfn_valid+0xba/0x490 [ 572.667501][ C1] ? pfn_valid+0xba/0x490 [ 572.667531][ C1] rcu_is_watching+0x16/0xb0 [ 572.667561][ C1] ? pfn_valid+0xba/0x490 [ 572.667590][ C1] pfn_valid+0xf3/0x490 [ 572.667621][ C1] page_table_check_set+0x25/0x530 [ 572.667658][ C1] copy_pmd_range+0x4adc/0x5c10 [ 572.667711][ C1] ? stack_depot_save_flags+0x33/0x7f0 [ 572.667755][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 572.667790][ C1] ? do_syscall_64+0x166/0x520 [ 572.667834][ C1] ? __lock_acquire+0x747/0x2de0 [ 572.667871][ C1] ? mas_wr_store_type+0xf80/0x1980 [ 572.667914][ C1] copy_page_range+0xc82/0x1290 [ 572.667967][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 572.668007][ C1] ? __pfx___mapping_rmap_tree_augment_rotate+0x10/0x10 [ 572.668042][ C1] dup_mmap+0xf17/0x1dc0 [ 572.668087][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 572.668112][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 572.668164][ C1] ? lock_acquire+0x115/0x350 [ 572.668210][ C1] copy_mm+0x115/0x480 [ 572.668248][ C1] copy_process+0x1e79/0x4400 [ 572.668279][ C1] ? __lock_acquire+0x747/0x2de0 [ 572.668319][ C1] ? copy_process+0xd16/0x4400 [ 572.668373][ C1] ? __pfx_copy_process+0x10/0x10 [ 572.668429][ C1] kernel_clone+0x2d7/0x940 [ 572.668464][ C1] ? cgroup1_freezing+0x20/0x350 [ 572.668507][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 572.668565][ C1] __x64_sys_clone+0x1b6/0x230 [ 572.668606][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 572.668661][ C1] ? rcu_is_watching+0x16/0xb0 [ 572.668707][ C1] do_syscall_64+0x166/0x520 [ 572.668741][ C1] ? trace_irq_disable+0x3b/0x140 [ 572.668769][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.668799][ C1] ? clear_bhb_loop+0x70/0xc0 [ 572.668828][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.668854][ C1] RIP: 0033:0x7f2b22fc6bd2 [ 572.668879][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 572.668900][ C1] RSP: 002b:00007f2b2334fc60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 572.668929][ C1] RAX: ffffffffffffffda RBX: 00007f2b2334fc60 RCX: 00007f2b22fc6bd2 [ 572.668948][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 572.668963][ C1] RBP: 00007f2b2334fdec R08: 0000000000000000 R09: 0000000000000001 [ 572.668980][ C1] R10: 000055558297d7d0 R11: 0000000000000246 R12: 0000000000000001 [ 572.668997][ C1] R13: 0000555582990a00 R14: 000000000008b0c4 R15: 00007f2b2334fe40 [ 572.669037][ C1] [ 572.669274][ C1] [ 572.849806][ T9] usb 10-1: USB disconnect, device number 27 [ 572.863621][ T9] cdc_mbim 10-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.9-1, CDC MBIM [ 573.302418][ C1] ============================= [ 573.307516][ C1] WARNING: suspicious RCU usage [ 573.312513][ C1] syzkaller #0 Tainted: G W L [ 573.318898][ C1] ----------------------------- [ 573.325840][ C1] kernel/rcu/srcutree.c:1468 Illegal synchronize_srcu() in same-type SRCU (or in RCU) read-side critical section! [ 573.337938][ C1] [ 573.337938][ C1] other info that might help us debug this: [ 573.337938][ C1] [ 573.348459][ C1] [ 573.348459][ C1] rcu_scheduler_active = 2, debug_locks = 1 [ 573.356972][ C1] locks held by syz-executor/10986: 9, last CPU#1: [ 573.367667][ C1] #0: ffffffff8ee36650 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10a/0x480 [ 573.379498][ C1] #1: ffff888076f55900 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 573.389187][ C1] #2: ffff888035b3b440 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 573.398753][ C1] #3: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 573.408465][ C1] #4: ffff888074cc7bb8 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 573.419029][ C1] #5: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 573.428669][ C1] #6: ffff88805a3783d8 (ptlock_ptr(ptdesc)#2/1){+.+.}-{3:3}, at: copy_pmd_range+0x6fb/0x5c10 [ 573.439238][ C1] #7: ffffffff8ed5c960 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x490 [ 573.449036][ C1] #8: ffffc90000a18cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 573.459618][ C1] [ 573.459618][ C1] stack backtrace: [ 573.465601][ C1] CPU: 1 UID: 0 PID: 10986 Comm: syz-executor Tainted: G W L syzkaller #0 PREEMPT(full) [ 573.476875][ C1] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 573.482088][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 573.492185][ C1] Call Trace: [ 573.495517][ C1] [ 573.498400][ C1] dump_stack_lvl+0xe8/0x150 [ 573.503053][ C1] lockdep_rcu_suspicious+0x140/0x1d0 [ 573.508488][ C1] __synchronize_srcu+0x157/0x2f0 [ 573.513588][ C1] ? __pfx___synchronize_srcu+0x10/0x10 [ 573.519154][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 573.524252][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 573.530094][ C1] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 573.535674][ C1] ? synchronize_srcu+0x20a/0x260 [ 573.540780][ C1] wakeup_source_unregister+0x129/0x3f0 [ 573.546482][ C1] mmc_host_classdev_release+0x47/0x100 [ 573.552100][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 573.558326][ C1] device_release+0xc4/0x1f0 [ 573.563256][ C1] kobject_put+0x222/0x550 [ 573.567899][ C1] ? mmc_pwrseq_free+0x86/0xa0 [ 573.572950][ C1] call_timer_fn+0x18d/0x5f0 [ 573.577612][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 573.584344][ C1] ? call_timer_fn+0xd5/0x5f0 [ 573.589068][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 573.594251][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 573.599518][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 573.606241][ C1] __run_timer_base+0x652/0x8b0 [ 573.611166][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 573.616587][ C1] ? ktime_get+0x1f5/0x220 [ 573.621038][ C1] ? lapic_next_event+0x11/0x20 [ 573.625984][ C1] run_timer_softirq+0xb7/0x170 [ 573.630874][ C1] handle_softirqs+0x226/0x860 [ 573.635679][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 573.640523][ C1] __irq_exit_rcu+0xcb/0x220 [ 573.645251][ C1] irq_exit_rcu+0x9/0x30 [ 573.649635][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 573.655336][ C1] [ 573.658477][ C1] [ 573.661591][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 573.668333][ C1] RIP: 0010:check_preemption_disabled+0xd/0xd0 [ 573.674933][ C1] Code: 1c 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 41 56 53 65 8b 05 1b bd ae 07 <65> 48 8b 0d eb bc ae 07 85 c9 74 0c 5b 41 5e 41 5f 5d c3 cc cc cc [ 573.694860][ C1] RSP: 0018:ffffc90006e9f208 EFLAGS: 00000282 [ 573.700989][ C1] RAX: 0000000000000001 RBX: ffffffff8243e9ea RCX: ffff88807a945dc0 [ 573.709085][ C1] RDX: 0000000000000000 RSI: ffffffff8c6dad60 RDI: ffffffff8c6dad20 [ 573.717198][ C1] RBP: 0000000000000001 R08: ffffffff8243e9ea R09: 0000000000000000 [ 573.725225][ C1] R10: dffffc0000000000 R11: ffffed100b2f2855 R12: dffffc0000000000 [ 573.737016][ C1] R13: 00007f2b21e00000 R14: 000000000004cb6a R15: ffff88813fe08120 [ 573.747567][ C1] ? pfn_valid+0xba/0x490 [ 573.751951][ C1] ? pfn_valid+0xba/0x490 [ 573.756325][ C1] ? pfn_valid+0xba/0x490 [ 573.760707][ C1] rcu_is_watching+0x16/0xb0 [ 573.765337][ C1] ? pfn_valid+0xba/0x490 [ 573.769816][ C1] pfn_valid+0xf3/0x490 [ 573.774018][ C1] page_table_check_set+0x25/0x530 [ 573.779262][ C1] copy_pmd_range+0x4adc/0x5c10 [ 573.784176][ C1] ? stack_depot_save_flags+0x33/0x7f0 [ 573.789738][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 573.794990][ C1] ? do_syscall_64+0x166/0x520 [ 573.799821][ C1] ? __lock_acquire+0x747/0x2de0 [ 573.805084][ C1] ? mas_wr_store_type+0xf80/0x1980 [ 573.810446][ C1] copy_page_range+0xc82/0x1290 [ 573.815389][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 573.820769][ C1] ? __pfx___mapping_rmap_tree_augment_rotate+0x10/0x10 [ 573.827755][ C1] dup_mmap+0xf17/0x1dc0 [ 573.832063][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 573.836787][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 573.841872][ C1] ? lock_acquire+0x115/0x350 [ 573.846608][ C1] copy_mm+0x115/0x480 [ 573.850738][ C1] copy_process+0x1e79/0x4400 [ 573.855457][ C1] ? __lock_acquire+0x747/0x2de0 [ 573.860454][ C1] ? copy_process+0xd16/0x4400 [ 573.865280][ C1] ? __pfx_copy_process+0x10/0x10 [ 573.870362][ C1] kernel_clone+0x2d7/0x940 [ 573.874906][ C1] ? cgroup1_freezing+0x20/0x350 [ 573.879893][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 573.884986][ C1] __x64_sys_clone+0x1b6/0x230 [ 573.889814][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 573.895169][ C1] ? rcu_is_watching+0x16/0xb0 [ 573.900028][ C1] do_syscall_64+0x166/0x520 [ 573.904708][ C1] ? trace_irq_disable+0x3b/0x140 [ 573.909792][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.915904][ C1] ? clear_bhb_loop+0x70/0xc0 [ 573.920628][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.926562][ C1] RIP: 0033:0x7f2b22fc6bd2 [ 573.931199][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 573.950940][ C1] RSP: 002b:00007f2b2334fc60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 573.959405][ C1] RAX: ffffffffffffffda RBX: 00007f2b2334fc60 RCX: 00007f2b22fc6bd2 [ 573.967417][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 573.975419][ C1] RBP: 00007f2b2334fdec R08: 0000000000000000 R09: 0000000000000001 [ 573.983426][ C1] R10: 000055558297d7d0 R11: 0000000000000246 R12: 0000000000000001 [ 573.991429][ C1] R13: 0000555582990a00 R14: 000000000008b0c4 R15: 00007f2b2334fe40 [ 573.999451][ C1] [ 574.002573][ C1] BUG: sleeping function called from invalid context at kernel/rcu/srcutree.c:1472 [ 574.002592][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 10986, name: syz-executor [ 574.002614][ C1] preempt_count: 104, expected: 0 [ 574.002628][ C1] RCU nest depth: 2, expected: 0 [ 574.002641][ C1] locks held by syz-executor/10986: 9, last CPU#1: [ 574.002660][ C1] #0: ffffffff8ee36650 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10a/0x480 [ 574.002747][ C1] #1: ffff888076f55900 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 574.002807][ C1] #2: ffff888035b3b440 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 574.002872][ C1] #3: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 574.002942][ C1] #4: ffff888074cc7bb8 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 574.003021][ C1] #5: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 574.003091][ C1] #6: ffff88805a3783d8 (ptlock_ptr(ptdesc)#2/1){+.+.}-{3:3}, at: copy_pmd_range+0x6fb/0x5c10 [ 574.003176][ C1] #7: ffffffff8ed5c960 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x490 [ 574.003243][ C1] #8: ffffc90000a18cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 574.003311][ C1] Preemption disabled at: [ 574.003318][ C1] [<0000000000000000>] 0x0 [ 574.003350][ C1] CPU: 1 UID: 0 PID: 10986 Comm: syz-executor Tainted: G W L syzkaller #0 PREEMPT(full) [ 574.003386][ C1] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 574.003396][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 574.003413][ C1] Call Trace: [ 574.003422][ C1] [ 574.003433][ C1] dump_stack_lvl+0xe8/0x150 [ 574.003472][ C1] __might_resched+0x36a/0x4c0 [ 574.003517][ C1] __synchronize_srcu+0x1a1/0x2f0 [ 574.003550][ C1] ? __pfx___synchronize_srcu+0x10/0x10 [ 574.003578][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 574.003628][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 574.003661][ C1] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 574.003696][ C1] ? synchronize_srcu+0x20a/0x260 [ 574.003724][ C1] wakeup_source_unregister+0x129/0x3f0 [ 574.003759][ C1] mmc_host_classdev_release+0x47/0x100 [ 574.003794][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 574.003826][ C1] device_release+0xc4/0x1f0 [ 574.003865][ C1] kobject_put+0x222/0x550 [ 574.003891][ C1] ? mmc_pwrseq_free+0x86/0xa0 [ 574.003935][ C1] call_timer_fn+0x18d/0x5f0 [ 574.003969][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 574.003993][ C1] ? call_timer_fn+0xd5/0x5f0 [ 574.004026][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 574.004070][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 574.004100][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 574.004129][ C1] __run_timer_base+0x652/0x8b0 [ 574.004175][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 574.004211][ C1] ? ktime_get+0x1f5/0x220 [ 574.004238][ C1] ? lapic_next_event+0x11/0x20 [ 574.004270][ C1] run_timer_softirq+0xb7/0x170 [ 574.004299][ C1] handle_softirqs+0x226/0x860 [ 574.004335][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 574.004376][ C1] __irq_exit_rcu+0xcb/0x220 [ 574.004411][ C1] irq_exit_rcu+0x9/0x30 [ 574.004443][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 574.004478][ C1] [ 574.004488][ C1] [ 574.004499][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 574.004527][ C1] RIP: 0010:check_preemption_disabled+0xd/0xd0 [ 574.004566][ C1] Code: 1c 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 41 56 53 65 8b 05 1b bd ae 07 <65> 48 8b 0d eb bc ae 07 85 c9 74 0c 5b 41 5e 41 5f 5d c3 cc cc cc [ 574.004590][ C1] RSP: 0018:ffffc90006e9f208 EFLAGS: 00000282 [ 574.004613][ C1] RAX: 0000000000000001 RBX: ffffffff8243e9ea RCX: ffff88807a945dc0 [ 574.004633][ C1] RDX: 0000000000000000 RSI: ffffffff8c6dad60 RDI: ffffffff8c6dad20 [ 574.004651][ C1] RBP: 0000000000000001 R08: ffffffff8243e9ea R09: 0000000000000000 [ 574.004700][ C1] R10: dffffc0000000000 R11: ffffed100b2f2855 R12: dffffc0000000000 [ 574.004720][ C1] R13: 00007f2b21e00000 R14: 000000000004cb6a R15: ffff88813fe08120 [ 574.004744][ C1] ? pfn_valid+0xba/0x490 [ 574.004788][ C1] ? pfn_valid+0xba/0x490 [ 574.004826][ C1] ? pfn_valid+0xba/0x490 [ 574.004857][ C1] rcu_is_watching+0x16/0xb0 [ 574.004888][ C1] ? pfn_valid+0xba/0x490 [ 574.004917][ C1] pfn_valid+0xf3/0x490 [ 574.004950][ C1] page_table_check_set+0x25/0x530 [ 574.004989][ C1] copy_pmd_range+0x4adc/0x5c10 [ 574.005050][ C1] ? stack_depot_save_flags+0x33/0x7f0 [ 574.005098][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 574.005135][ C1] ? do_syscall_64+0x166/0x520 [ 574.005177][ C1] ? __lock_acquire+0x747/0x2de0 [ 574.005213][ C1] ? mas_wr_store_type+0xf80/0x1980 [ 574.005255][ C1] copy_page_range+0xc82/0x1290 [ 574.005307][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 574.005347][ C1] ? __pfx___mapping_rmap_tree_augment_rotate+0x10/0x10 [ 574.005379][ C1] dup_mmap+0xf17/0x1dc0 [ 574.005423][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 574.005442][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 574.005481][ C1] ? lock_acquire+0x115/0x350 [ 574.005515][ C1] copy_mm+0x115/0x480 [ 574.005543][ C1] copy_process+0x1e79/0x4400 [ 574.005568][ C1] ? __lock_acquire+0x747/0x2de0 [ 574.005597][ C1] ? copy_process+0xd16/0x4400 [ 574.005636][ C1] ? __pfx_copy_process+0x10/0x10 [ 574.005678][ C1] kernel_clone+0x2d7/0x940 [ 574.005705][ C1] ? cgroup1_freezing+0x20/0x350 [ 574.005737][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 574.005781][ C1] __x64_sys_clone+0x1b6/0x230 [ 574.005821][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 574.005874][ C1] ? rcu_is_watching+0x16/0xb0 [ 574.005921][ C1] do_syscall_64+0x166/0x520 [ 574.005954][ C1] ? trace_irq_disable+0x3b/0x140 [ 574.005982][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.006009][ C1] ? clear_bhb_loop+0x70/0xc0 [ 574.006041][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.006066][ C1] RIP: 0033:0x7f2b22fc6bd2 [ 574.006089][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 574.006111][ C1] RSP: 002b:00007f2b2334fc60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 574.006137][ C1] RAX: ffffffffffffffda RBX: 00007f2b2334fc60 RCX: 00007f2b22fc6bd2 [ 574.006157][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 574.006173][ C1] RBP: 00007f2b2334fdec R08: 0000000000000000 R09: 0000000000000001 [ 574.006189][ C1] R10: 000055558297d7d0 R11: 0000000000000246 R12: 0000000000000001 [ 574.006206][ C1] R13: 0000555582990a00 R14: 000000000008b0c4 R15: 00007f2b2334fe40 [ 574.006243][ C1] [ 574.006264][ C1] ODEBUG: object ffffc90000a18a80 is NOT on stack ffffc90006e98000, but annotated. [ 574.007032][ C1] ------------[ cut here ]------------ [ 574.007043][ C1] 1 [ 574.007054][ C1] WARNING: lib/debugobjects.c:672 at __debug_object_init+0x2c4/0x3c0, CPU#1: syz-executor/10986 [ 574.695086][ C1] Modules linked in: [ 574.699290][ C1] CPU: 1 UID: 0 PID: 10986 Comm: syz-executor Tainted: G W L syzkaller #0 PREEMPT(full) [ 574.710953][ C1] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 574.716167][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 574.726496][ C1] RIP: 0010:__debug_object_init+0x2c4/0x3c0 [ 574.732447][ C1] Code: fe 06 cc 41 ff c7 44 89 3d 29 30 e8 15 48 c7 c1 80 b6 6d 8c 48 c7 c7 e0 b6 6d 8c 84 c0 48 0f 45 f9 48 89 de e8 6d a2 3c fc 90 <0f> 0b 90 e9 c0 fe ff ff e8 4f 1c 00 00 8b 05 41 ab 6d 0a 3b 05 3f [ 574.752716][ C1] RSP: 0018:ffffc90000a189b8 EFLAGS: 00010046 [ 574.759422][ C1] RAX: 0000000000000050 RBX: ffffc90000a18a80 RCX: 4f7912ff2c168700 [ 574.767612][ C1] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 574.777065][ C1] RBP: ffff88807a945de0 R08: 0000000000000100 R09: 1ffffffff1ed22ec [ 574.786298][ C1] R10: dffffc0000000000 R11: fffffbfff1ed22ed R12: ffff88804a690e18 [ 574.796036][ C1] R13: ffff888046a02b60 R14: dffffc0000000000 R15: 0000000000000001 [ 574.804481][ C1] FS: 000055558297d500(0000) GS:ffff888124dc8000(0000) knlGS:0000000000000000 [ 574.814123][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 574.821001][ C1] CR2: 00007f2b23d556c8 CR3: 000000007b99c000 CR4: 00000000003526f0 [ 574.829117][ C1] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 574.837271][ C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 574.845279][ C1] Call Trace: [ 574.848662][ C1] [ 574.851791][ C1] ? __init_swait_queue_head+0xa8/0x150 [ 574.857541][ C1] __synchronize_srcu+0x1d5/0x2f0 [ 574.862673][ C1] ? __pfx___synchronize_srcu+0x10/0x10 [ 574.868570][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 574.875933][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 574.884392][ C1] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 574.891213][ C1] ? synchronize_srcu+0x20a/0x260 [ 574.896714][ C1] wakeup_source_unregister+0x129/0x3f0 [ 574.902311][ C1] mmc_host_classdev_release+0x47/0x100 [ 574.907911][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 574.915068][ C1] device_release+0xc4/0x1f0 [ 574.919807][ C1] kobject_put+0x222/0x550 [ 574.924315][ C1] ? mmc_pwrseq_free+0x86/0xa0 [ 574.929121][ C1] call_timer_fn+0x18d/0x5f0 [ 574.933913][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 574.941749][ C1] ? call_timer_fn+0xd5/0x5f0 [ 574.946853][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 574.952109][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 574.957340][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 574.964040][ C1] __run_timer_base+0x652/0x8b0 [ 574.968933][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 574.974411][ C1] ? ktime_get+0x1f5/0x220 [ 574.978851][ C1] ? lapic_next_event+0x11/0x20 [ 574.983731][ C1] run_timer_softirq+0xb7/0x170 [ 574.988631][ C1] handle_softirqs+0x226/0x860 [ 574.993428][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 574.998230][ C1] __irq_exit_rcu+0xcb/0x220 [ 575.002835][ C1] irq_exit_rcu+0x9/0x30 [ 575.007085][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 575.012738][ C1] [ 575.015671][ C1] [ 575.018618][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 575.024619][ C1] RIP: 0010:check_preemption_disabled+0xd/0xd0 [ 575.030784][ C1] Code: 1c 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 41 56 53 65 8b 05 1b bd ae 07 <65> 48 8b 0d eb bc ae 07 85 c9 74 0c 5b 41 5e 41 5f 5d c3 cc cc cc [ 575.050479][ C1] RSP: 0018:ffffc90006e9f208 EFLAGS: 00000282 [ 575.056551][ C1] RAX: 0000000000000001 RBX: ffffffff8243e9ea RCX: ffff88807a945dc0 [ 575.064708][ C1] RDX: 0000000000000000 RSI: ffffffff8c6dad60 RDI: ffffffff8c6dad20 [ 575.072706][ C1] RBP: 0000000000000001 R08: ffffffff8243e9ea R09: 0000000000000000 [ 575.080706][ C1] R10: dffffc0000000000 R11: ffffed100b2f2855 R12: dffffc0000000000 [ 575.088688][ C1] R13: 00007f2b21e00000 R14: 000000000004cb6a R15: ffff88813fe08120 [ 575.096758][ C1] ? pfn_valid+0xba/0x490 [ 575.101109][ C1] ? pfn_valid+0xba/0x490 [ 575.105472][ C1] ? pfn_valid+0xba/0x490 [ 575.109812][ C1] rcu_is_watching+0x16/0xb0 [ 575.114424][ C1] ? pfn_valid+0xba/0x490 [ 575.118758][ C1] pfn_valid+0xf3/0x490 [ 575.122921][ C1] page_table_check_set+0x25/0x530 [ 575.128044][ C1] copy_pmd_range+0x4adc/0x5c10 [ 575.132922][ C1] ? stack_depot_save_flags+0x33/0x7f0 [ 575.138407][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 575.143612][ C1] ? do_syscall_64+0x166/0x520 [ 575.148401][ C1] ? __lock_acquire+0x747/0x2de0 [ 575.153344][ C1] ? mas_wr_store_type+0xf80/0x1980 [ 575.158553][ C1] copy_page_range+0xc82/0x1290 [ 575.163424][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 575.168728][ C1] ? __pfx___mapping_rmap_tree_augment_rotate+0x10/0x10 [ 575.175690][ C1] dup_mmap+0xf17/0x1dc0 [ 575.179970][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 575.184660][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 575.189820][ C1] ? lock_acquire+0x115/0x350 [ 575.194698][ C1] copy_mm+0x115/0x480 [ 575.198796][ C1] copy_process+0x1e79/0x4400 [ 575.203492][ C1] ? __lock_acquire+0x747/0x2de0 [ 575.208443][ C1] ? copy_process+0xd16/0x4400 [ 575.213318][ C1] ? __pfx_copy_process+0x10/0x10 [ 575.218364][ C1] kernel_clone+0x2d7/0x940 [ 575.222876][ C1] ? cgroup1_freezing+0x20/0x350 [ 575.227831][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 575.232883][ C1] __x64_sys_clone+0x1b6/0x230 [ 575.237667][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 575.242981][ C1] ? rcu_is_watching+0x16/0xb0 [ 575.247769][ C1] do_syscall_64+0x166/0x520 [ 575.252416][ C1] ? trace_irq_disable+0x3b/0x140 [ 575.257460][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.263616][ C1] ? clear_bhb_loop+0x70/0xc0 [ 575.268478][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.274372][ C1] RIP: 0033:0x7f2b22fc6bd2 [ 575.278792][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 575.298579][ C1] RSP: 002b:00007f2b2334fc60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 575.307011][ C1] RAX: ffffffffffffffda RBX: 00007f2b2334fc60 RCX: 00007f2b22fc6bd2 [ 575.315164][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 575.323147][ C1] RBP: 00007f2b2334fdec R08: 0000000000000000 R09: 0000000000000001 [ 575.331120][ C1] R10: 000055558297d7d0 R11: 0000000000000246 R12: 0000000000000001 [ 575.339111][ C1] R13: 0000555582990a00 R14: 000000000008b0c4 R15: 00007f2b2334fe40 [ 575.347206][ C1] [ 575.350297][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 575.357737][ C1] CPU: 1 UID: 0 PID: 10986 Comm: syz-executor Tainted: G W L syzkaller #0 PREEMPT(full) [ 575.369203][ C1] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 575.374425][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 575.384517][ C1] Call Trace: [ 575.387837][ C1] [ 575.391057][ C1] vpanic+0x56d/0xa60 [ 575.395216][ C1] ? __pfx__printk+0x10/0x10 [ 575.399931][ C1] ? __pfx_vpanic+0x10/0x10 [ 575.404448][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 575.409752][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 575.414971][ C1] panic+0xc5/0xd0 [ 575.418719][ C1] ? __pfx_panic+0x10/0x10 [ 575.423162][ C1] __warn+0x315/0x4c0 [ 575.427153][ C1] ? __debug_object_init+0x2c4/0x3c0 [ 575.432544][ C1] ? __debug_object_init+0x2c4/0x3c0 [ 575.437846][ C1] __report_bug+0x276/0x570 [ 575.442462][ C1] ? __debug_object_init+0x2c4/0x3c0 [ 575.447776][ C1] ? __pfx___report_bug+0x10/0x10 [ 575.452832][ C1] ? __wake_up_klogd+0xf0/0x130 [ 575.457709][ C1] ? vprintk_emit+0x4ee/0x560 [ 575.462406][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 575.467454][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 575.472543][ C1] ? __debug_object_init+0x2c4/0x3c0 [ 575.477867][ C1] report_bug+0x16b/0x220 [ 575.482215][ C1] ? __debug_object_init+0x2c4/0x3c0 [ 575.487570][ C1] ? __debug_object_init+0x2c6/0x3c0 [ 575.492901][ C1] handle_bug+0x9c/0x200 [ 575.497254][ C1] exc_invalid_op+0x1a/0x50 [ 575.501769][ C1] asm_exc_invalid_op+0x1a/0x20 [ 575.506641][ C1] RIP: 0010:__debug_object_init+0x2c4/0x3c0 [ 575.512552][ C1] Code: fe 06 cc 41 ff c7 44 89 3d 29 30 e8 15 48 c7 c1 80 b6 6d 8c 48 c7 c7 e0 b6 6d 8c 84 c0 48 0f 45 f9 48 89 de e8 6d a2 3c fc 90 <0f> 0b 90 e9 c0 fe ff ff e8 4f 1c 00 00 8b 05 41 ab 6d 0a 3b 05 3f [ 575.532161][ C1] RSP: 0018:ffffc90000a189b8 EFLAGS: 00010046 [ 575.538239][ C1] RAX: 0000000000000050 RBX: ffffc90000a18a80 RCX: 4f7912ff2c168700 [ 575.546233][ C1] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 575.554225][ C1] RBP: ffff88807a945de0 R08: 0000000000000100 R09: 1ffffffff1ed22ec [ 575.562377][ C1] R10: dffffc0000000000 R11: fffffbfff1ed22ed R12: ffff88804a690e18 [ 575.570352][ C1] R13: ffff888046a02b60 R14: dffffc0000000000 R15: 0000000000000001 [ 575.578355][ C1] ? __debug_object_init+0x2c3/0x3c0 [ 575.583678][ C1] ? __init_swait_queue_head+0xa8/0x150 [ 575.589241][ C1] __synchronize_srcu+0x1d5/0x2f0 [ 575.594379][ C1] ? __pfx___synchronize_srcu+0x10/0x10 [ 575.599935][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 575.605072][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 575.610934][ C1] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 575.616494][ C1] ? synchronize_srcu+0x20a/0x260 [ 575.621528][ C1] wakeup_source_unregister+0x129/0x3f0 [ 575.627091][ C1] mmc_host_classdev_release+0x47/0x100 [ 575.632646][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 575.638810][ C1] device_release+0xc4/0x1f0 [ 575.643542][ C1] kobject_put+0x222/0x550 [ 575.648000][ C1] ? mmc_pwrseq_free+0x86/0xa0 [ 575.653051][ C1] call_timer_fn+0x18d/0x5f0 [ 575.657662][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 575.664351][ C1] ? call_timer_fn+0xd5/0x5f0 [ 575.669067][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 575.674212][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 575.679503][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 575.686209][ C1] __run_timer_base+0x652/0x8b0 [ 575.691188][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 575.696610][ C1] ? ktime_get+0x1f5/0x220 [ 575.701044][ C1] ? lapic_next_event+0x11/0x20 [ 575.705936][ C1] run_timer_softirq+0xb7/0x170 [ 575.710818][ C1] handle_softirqs+0x226/0x860 [ 575.715668][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 575.720564][ C1] __irq_exit_rcu+0xcb/0x220 [ 575.725188][ C1] irq_exit_rcu+0x9/0x30 [ 575.729451][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 575.735292][ C1] [ 575.738412][ C1] [ 575.741381][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 575.747403][ C1] RIP: 0010:check_preemption_disabled+0xd/0xd0 [ 575.753579][ C1] Code: 1c 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 41 56 53 65 8b 05 1b bd ae 07 <65> 48 8b 0d eb bc ae 07 85 c9 74 0c 5b 41 5e 41 5f 5d c3 cc cc cc [ 575.773216][ C1] RSP: 0018:ffffc90006e9f208 EFLAGS: 00000282 [ 575.779318][ C1] RAX: 0000000000000001 RBX: ffffffff8243e9ea RCX: ffff88807a945dc0 [ 575.787654][ C1] RDX: 0000000000000000 RSI: ffffffff8c6dad60 RDI: ffffffff8c6dad20 [ 575.795655][ C1] RBP: 0000000000000001 R08: ffffffff8243e9ea R09: 0000000000000000 [ 575.803666][ C1] R10: dffffc0000000000 R11: ffffed100b2f2855 R12: dffffc0000000000 [ 575.811697][ C1] R13: 00007f2b21e00000 R14: 000000000004cb6a R15: ffff88813fe08120 [ 575.819698][ C1] ? pfn_valid+0xba/0x490 [ 575.824079][ C1] ? pfn_valid+0xba/0x490 [ 575.828437][ C1] ? pfn_valid+0xba/0x490 [ 575.832784][ C1] rcu_is_watching+0x16/0xb0 [ 575.839522][ C1] ? pfn_valid+0xba/0x490 [ 575.843970][ C1] pfn_valid+0xf3/0x490 [ 575.848145][ C1] page_table_check_set+0x25/0x530 [ 575.853278][ C1] copy_pmd_range+0x4adc/0x5c10 [ 575.858184][ C1] ? stack_depot_save_flags+0x33/0x7f0 [ 575.863706][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 575.868928][ C1] ? do_syscall_64+0x166/0x520 [ 575.873713][ C1] ? __lock_acquire+0x747/0x2de0 [ 575.878664][ C1] ? mas_wr_store_type+0xf80/0x1980 [ 575.883882][ C1] copy_page_range+0xc82/0x1290 [ 575.888767][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 575.894070][ C1] ? __pfx___mapping_rmap_tree_augment_rotate+0x10/0x10 [ 575.901017][ C1] dup_mmap+0xf17/0x1dc0 [ 575.905273][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 575.910042][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 575.915089][ C1] ? lock_acquire+0x115/0x350 [ 575.919796][ C1] copy_mm+0x115/0x480 [ 575.923890][ C1] copy_process+0x1e79/0x4400 [ 575.928577][ C1] ? __lock_acquire+0x747/0x2de0 [ 575.933558][ C1] ? copy_process+0xd16/0x4400 [ 575.938358][ C1] ? __pfx_copy_process+0x10/0x10 [ 575.943400][ C1] kernel_clone+0x2d7/0x940 [ 575.947913][ C1] ? cgroup1_freezing+0x20/0x350 [ 575.952863][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 575.957910][ C1] __x64_sys_clone+0x1b6/0x230 [ 575.962711][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 575.968039][ C1] ? rcu_is_watching+0x16/0xb0 [ 575.972819][ C1] do_syscall_64+0x166/0x520 [ 575.977417][ C1] ? trace_irq_disable+0x3b/0x140 [ 575.982539][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.988606][ C1] ? clear_bhb_loop+0x70/0xc0 [ 575.993296][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.999275][ C1] RIP: 0033:0x7f2b22fc6bd2 [ 576.003695][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 576.023301][ C1] RSP: 002b:00007f2b2334fc60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 576.031716][ C1] RAX: ffffffffffffffda RBX: 00007f2b2334fc60 RCX: 00007f2b22fc6bd2 [ 576.039691][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 576.047674][ C1] RBP: 00007f2b2334fdec R08: 0000000000000000 R09: 0000000000000001 [ 576.055645][ C1] R10: 000055558297d7d0 R11: 0000000000000246 R12: 0000000000000001 [ 576.063615][ C1] R13: 0000555582990a00 R14: 000000000008b0c4 R15: 00007f2b2334fe40 [ 576.071617][ C1] [ 577.201344][ C1] Shutting down cpus with NMI [ 577.206714][ C1] Kernel Offset: disabled [ 577.211062][ C1] Rebooting in 86400 seconds..