last executing test programs: 14m19.132734751s ago: executing program 1 (id=2876): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="91f8a984851bdef38491bbc4173c3c6f357d028feff84ab17c417789f9fc9b8572c98172b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78", 0x6e}], 0x1}}], 0x1, 0x2090) sendmmsg(r0, &(0x7f0000008d80)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)="c8b7df938dc9c0fcc8a7e84a57fa9059b9cfa4132462f9c45b583e8ce1f19a82364b01b4bc3436dcea3f3380b3269f2c986b7f8205fa23", 0x37}], 0x1}}, {{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000000f00)="88a69f5139292fe55d24310330d349370620dd2737877e864a0d6d86ec395b0c41689f2e0742c4d3282f151e6faf27deab0464cdf91d6a7b73cbec929aa85b3d4f5114785c23d6c325efab561ca5f90113281359edb7ccdea124d6ea38a34d046ed5a7fdfc137e465ae8b692cb06", 0x6e}, {&(0x7f0000002240)="321f349be984b668f593bf16c2f60e4b01783ed59dcd6a4105711458d2cf86696caad21a4387232f7ae8dbda478307058ab2ffec546f49907b7d4c54fe1fa76d99f5c80956c6769c810b895a00ab69f114794c1e3ee671204a47d3153305395d1e523e504927505590c078bc1a7d6e82b332bf141f662f26ad9ba4c11b87d5abbc3340ef989b3a8e666f8f82ca82aab6d33c953938b30b61c91cbc926b2a58d67d8198e458ed8f10ad8975356af9dab25f718147ae2a3e81187adaa46d247e3a8c437053bb01b855c6fb0ee0e7024fa61bd2af5aa1d918fcc93b3ffadf3a982efefa3b47727caafee6246ee147d676a5e2879e351f5ac51e6b62aaedb5cd03d16cb4f8bfaac498397b3dc22c063fbd87b2912647948430488fb45ca42096e08a6760c831b06d4582b7440f9123f3711a87b71a4a3a4614b2bf8dcdb84d985777893889120fb820ffe525acbf530869895f2caf84922e5a8aee6a0f887145b0d961bfa9c8f71788ccb8d2ee73676c2f68427b776f537afb9a8c97e055e35204ec09fd3f2c9a0b9f8b33ef0343ef22c99a7fe463550d074b626c1173f34fc49f1431460881ccd35b679f186dd10ac84e2f9aa370443a75938812c1b1888e57b0a79001965832e7cd8c85865081a16938fc81e72c26e686078692dad56ca4a2371a6b370268da843aa7ba9e498a7ae8a6317907b2d5114acf3d35522e4c8cb4e014c7d3f5f60c57b1293ec9956bed6abb25b5e2f90cf3eba7adc060b00dcb50480282b649e9c601bf0a400290a337e46af9be19d489e8693750a0be63313307b51db7726d4c6643f6f8ab22ce41310043728ffd414567f6e514c5e88b5614195b9ba893c8980949974f1eae80d27f7f90b251a094469561598e3dcd2bc143edd69b131595bbf776aa7583687228d8ea578f9f08ea949be49c1b087f430262968f639047eeb91c84a4cc6df66c749fb9b5b38e7e6546683df3a6ae722ea0d644256d82d8f3ba6b8bca23498a7dcc06fcda64d94f15b6bf620e7b272a476b097715f430c1d7c4c221156df5225c9fee4e580a5600713a1ce6e503c37730b5b4d3be23b212eb0ac2a05a7dc6aa88984566664086491ba3214bd9c9a4196d028f6ba448682536b40eab416ea8cf4098101af663d53110ebc2dffd88457ffd70decf1269f3fa61460593671d750ea0ab08aaac98a555a78da62b62625b550f840f34d1b02788bceb09002f615187159295d1a10e2dcfda5c1d399226047a53a1695f0af8121ad144b4dbe411d34d5e4eb4b4075e522d60d0020b2969025021bfc03062e0c8281bfa4cbce38241b53e970acc20ee903fcc81e8770f93367d7eddb95093177337475d5ef009ab799de6950d06ad68e8f9474634672657ba29df601e0be9e362197bafc25fee416a2b6d378dd31294d99317e5cc0d83827f6916ac648d638a515f823d0d784d841c31483b7d030258c62256268055286d3e773316f0f50df6411da24d8aeed75f50f49b0f6cc8672630954c1c3a1632d3497e3be53a4734619bd79aea6ffd87b8278f09775884018c70a6cf7290d5d09c6fa35a2c5fe9be746c9a4cb3e45855a12bf0c0fdeecb5a86922094b0d7b1adf0c10295e0e2ded424c476b8a15ddc44d229951e8a86d359c911e6a4baaeeb2c84cf367e92566ad2bed0c079c614f903d48cd19252c004a2f1de096d83f032d1a86bcd0b53b16668c88258d7d5ca7fc72d41b74ffe5c4a02e5b7077eddbeb77e4678a45e2983e4a1c07e7eb53ebddedca9bf2c52b84b759a88ec4cad17935e7af6c1ae2dd0ce1d37a2dcc74c336a71daf179ebddb5651a41f209b6a5ea7a001efbf74bd21f", 0x51c}], 0x2}}], 0x2, 0x0) 14m19.049070291s ago: executing program 1 (id=2877): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.time\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)) flock(r0, 0x1) close_range(0xffffffffffffffff, r0, 0x0) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000000080)={0xb, 0xf7}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000640)={0x8, 0x400, 0x4, 0xfffffffd, 0x4, "1de5fac00b6827a4d1ef230d06aa1eaa1f8d7c", 0x2f04, 0x6c}) unshare(0x2000580) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) unshare(0x10000000) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10) listen(r5, 0x0) ioctl$UBLK_U_CMD_START_USER_RECOVERY(r0, 0xc0207510, &(0x7f0000000140)={0x0}) r7 = getpid() syz_pidfd_open(r7, 0x0) ioctl$UBLK_U_CMD_START_DEV(r0, 0xc0207506, &(0x7f0000000240)={r6, 0xffff, 0x0, 0x0, r7}) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r5, &(0x7f0000000100)={0x4}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050026bd7000000000004400000008000300", @ANYRES32=r4, @ANYRESHEX=r8, @ANYBLOB="675be1fcbb3250056246f990a58223511aa04eea8c940cce7e87a5adccfeccfd4fd129caed80389cefe1e9e658ba8dc5821ce9d7616817b6f825d40a7a788ccf0992deb68ba141eca92fe1a20152012f65f4ff33ed62595a112830f08dc2cadf478fe48f1b40845f0091ad0da391fb25a8155a116bd8dae308a2d57116ae81a08eb3c7b81be12f9fc875c845f5598418b0f4aa50e382880c3dc8671287b1a1bddc6e18e4c2e9c129b40fd7d8a06616860eadc09a7464b6e64ddf4d73499dac9050d66ac490ee08bf0f75b4c21641df0b454aabda5723d89a6465be43a75e198a16cad5bc28"], 0x30}}, 0x0) 14m18.844713127s ago: executing program 1 (id=2879): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="91f8a984851bdef38491bb", 0xb}], 0x1}}], 0x1, 0x2090) sendmmsg(r0, &(0x7f0000008d80)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)="c8b7df938dc9c0fcc8a7e84a57fa9059b9cfa4132462f9c45b583e8ce1f19a82364b01b4bc3436dcea3f3380b3269f2c986b7f8205fa231eac99a9de63cd1a85c820fc43c24662a22f18183bb042a742ac921efe546daedbd31cd4b5cda70186dd7ec449169ea58ebc3f34", 0x6b}], 0x1}}, {{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000000f00)="88a69f5139292fe55d24310330d349370620dd2737877e864a0d6d86ec395b0c41689f2e0742c4d3282f151e6faf27deab0464cdf91d6a7b73cbec929aa85b3d4f5114785c23d6c325efab561ca5f90113281359edb7ccdea124d6ea38a34d046ed5a7fdfc137e465ae8b692cb06", 0x6e}, {&(0x7f0000002240)="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", 0x221}], 0x2}}], 0x2, 0x0) 14m18.803889083s ago: executing program 1 (id=2880): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000e00)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020fe29817a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000400704000000000000b7040000100000206a07f2ff000000008500000005000000b70000000a00000095000000000000000000c2c62f6004ad13aa957e2af5e49a53c2868f0399d909a63796c113a80c19aab9d607000000b6c9483be3f0d3253730e714c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae18c3d1a1fbe96dc86035b44174f7c0620254ab6d285e6b343185089a0f119e31975e551558050800000000000000125d67857f290870093f38153608561a2128a79cce912d1f05de330800a9f5422bee8ca49166f6a587f2f593775afcd071efc5a972f757521b7b38ec273c2ad3e406f8c124f7dc1c4553229a69df4b2780e6da4420d71489fe383e0b5ce08b750502f2b8add8d2dddde19ac050537e973782b4053150580035fb2c579e1b2100000033d1ee8cab6d236f05b1f7b9f78fd5abfe033eb79f7a0b498366f5edfe311258016fbf47d9c85bf5325bf61419372be377022433e20900a262b20bb8b36de7b0e6c5ebfc5baec1ebe58d4af587d33e2935ad68da6e0fea5c21301f5d002b51a5b60fc741cb2c5d4cd5e896774f9293a6435558795043404ac6eafc8310fbcacca7f971b260fd06d4590ded8429fcd1c9a8dbbdedb32675388df363c0bc536e00448208b72405ebf27ddb402e5a2d675aaad92e183cef1eadc1661140fb567b55c72907a1aca75277a5f0022b1e957ba737f10f1161c5ae6e2cc64072ff3b4e76084922242e63d4b7806e30f786cff147e4bc819060678319a0e5534f5a0db52526c30000000000000000000000a63705b1a60525620acca06d57c055059df7651768310c9085c5f86be6ab819506961ad51f18b35fdc3fd4d0a0dbbdcd494ef168931f27748787bee95d739fef7ee67dd21c34647de82707e41d7db6d981a4fcf0bbd3d38ebb7a2489e28c6b28c0f70092ffb016b7766399555f3e6b538c2c862d17e53eaeb2036f9f0ab6e95e71bda4b5bbf53344264ad93bac1207b31d6e9c78181c7fe204c0b7582d1c762857f2a2e0c60f4a4855591a4f70f94df9629e470701103c40c8f6d3a3068091d62b58999e0a046f9509cb8ddc2a9ad4e0f1f85e5f076218b4b931acdff0c34fc5bdbad17ec481f1c9b17727c14e053e315d0d8d03c24ddaba65c5ce5b1aa04d1f767e25662b155d49460ec720d54044ac2856c11407835f341e2614bcae270000000001000000df7f736aab5d713240b2f40ec7be8251eba969686b2670ddc1a84df6ab12ab3e0cf8747837062233935704ebbd943ef0c5fef29513c7c1d6d2611796dccb45bdfd9e6533ad3574be5b9ea70e0c3b41a32067c03f5f8ed147cd0655c90d656f66eaed18a3c284c4f19417b5d91431759356db5d45ea40c9866957105b6252b0c028c672049ce163126f143f5758faf2a43f4c4f45a69b4e9113f85ae531085c11c75edbdee5af454757cdaff396c15ab9b210c202ffaea96d1bac60c6d6c56a4babc659858789bd479334e13e1c7876f95429431e61400815788c1397b260600d78e7513c58d9ac9474d392cc06f789753e1e7ebf5f1b55e2a64b9150c6580bf48e7bff763034801cccf403108d127b959ffc425a563ea2b90fbe779fd7d2ebfe94"], &(0x7f0000000300)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000}, 0x34) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r0, 0xffffffffffffffff, 0x13, 0x0, @val=@iter={0x0}}, 0x20) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='clear_refs\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_pressure(r2, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) (async) r3 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r3, 0x40084149, &(0x7f0000000180)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x2) (async) mkdir(&(0x7f0000000300)='./file0\x00', 0x2) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) (async) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r5, &(0x7f0000004200)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) pivot_root(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='.\x00') (async) pivot_root(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='.\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xfffffffffffffffc, 0x3, 0xfffffffffffffffd, 0x4, 0x0, 0x8000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x6, 0x9, 0x0, 0x0, 0x9, 0x2000}, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) write$binfmt_format(r1, &(0x7f0000000300)='1\x00', 0x2) 14m17.879826168s ago: executing program 1 (id=2883): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@can={{0x4, 0x0, 0x0, 0x1}, 0x3, 0x1}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x40040) (fail_nth: 3) 14m17.545224242s ago: executing program 1 (id=2885): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x90, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0xc}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0xd, 0x9, 0x10000000, 0x6, 0x588}, 0x2}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x1fc16}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}}, 0x0) r4 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="016f0800010027000000270000004500002c00000000008490783fffff20ac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6a0547009082001809030051"], 0x3a) 14m17.106178726s ago: executing program 32 (id=2885): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x90, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0xc}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0xd, 0x9, 0x10000000, 0x6, 0x588}, 0x2}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x1fc16}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}}, 0x0) r4 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="016f0800010027000000270000004500002c00000000008490783fffff20ac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6a0547009082001809030051"], 0x3a) 4m48.668192126s ago: executing program 0 (id=5293): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000a80)=[{{&(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000440)="a192b94d6639ab5c835104bb9192fd345b05049bd1031ab01a18b3556b47c6ae244568f43bbffad7b6878a9ed476e5957a9a792bd3467e95cf7135ef503385cc082edeba10582fe68900a1"}, {&(0x7f0000000700)="bacf25daa035e00168c4b98d6ed4466698a659a17d3fe3022adbf4338083caeb124a592a6543ee30cda9f621f2aefa4d29d5d58775df94c9650ace2ccc2ce6e4eed56950a23fd1899c8095ef69a824a45613e632a0d320961a75a0070e91cfbbb1f8ad0b62c3209f045f67cba5873404b5ef9f6f0a10c523d2f654df91c29d54afd24608390341637377f535c4869292b00253f50aca68350791f2f0b1b2ab5566e4ed9e51a4077801ba9f4d425c87cc2d557422072ee9"}], 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="00000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000010c0000010000ff0700000000000050784aed4740c86bd0c119ec84da0e2f4995f15943f7990bd40e3600d32b9072ff1911a3f2808aeec608d6d4c3df78f046805bd195001935c43cf6a137ab0981aadacaf4425565c43f3c119c88ab8b1d964552000f96d854183e", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="00000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1], 0x0, 0x48c0}}], 0x400000000000069, 0x4000000) recvmmsg(r0, &(0x7f0000000300), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fanotify_init(0x200, 0x48801) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f0000001700)=0x7ff, 0x4) fanotify_mark(r4, 0x1, 0x1001, 0xffffffffffffffff, 0x0) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000002b00)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1, 0x4}}, 0x48) syz_open_procfs$namespace(0x0, 0x0) r6 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r6, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) capset(&(0x7f0000000000)={0x20080522, 0xffffffffffffffff}, &(0x7f0000000280)={0x0, 0x9, 0x5, 0x81, 0xffffffff, 0xa77f}) sendmsg$inet(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(r7, &(0x7f0000002f80)={0x0, 0x0, 0x0}, 0x10000) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec0460f1c460041ae", 0x42}], 0x1, 0x0, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000540)) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_usb_disconnect(0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4c840) 4m47.140059203s ago: executing program 0 (id=5297): socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000600)=0x4, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180), 0x0) setitimer(0x0, &(0x7f0000000000)={{0xffffffff}, {0x0, 0x82}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x0, 0x2, 0x3}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000540)={0xaa, 0x310}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r4, 0x29, 0x31, &(0x7f0000000100)=0x8, 0x4) sendmmsg$inet6(r4, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}, 0x9}, 0x1c, 0x0}}], 0x1, 0x60040000) recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0x81}, 0x6}], 0x1, 0x40002142, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000280)={'lo\x00'}) close(r2) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) 4m47.007848202s ago: executing program 0 (id=5299): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in=@rand_addr=0x64010102, 0x1000, 0xffff, 0x200, 0x0, 0x2, 0x0, 0x20, 0x87}, {0x2, 0x1, 0x800000000, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}, 0x0, 0x500, 0x1, 0x1}, [@tmpl={0x104, 0x5, [{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d5, 0x2b}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x510d3f49}, {{@in=@multicast1, 0x4d2, 0x2b}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3502, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffc}, {{@in=@broadcast, 0x0, 0x3c}, 0x2, @in6=@empty, 0xfffffff8, 0x1, 0x3, 0x0, 0x6, 0x2cd6, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0x1f}, 0x0, 0x32}, 0x0, @in=@broadcast, 0x0, 0x4, 0x2, 0x80, 0x0, 0x2}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x60004000}, 0x0) 4m46.869828945s ago: executing program 0 (id=5301): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000a00)="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", 0x225) r2 = syz_open_dev$amidi(&(0x7f0000000000), 0x7, 0x400000) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x121001) r5 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) r13 = syz_usb_connect(0x0, 0x63, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404c17aa5500010102030109025100010100c0320904000002080650000705010200020007058202"], 0x0) syz_usb_control_io(r13, 0x0, 0xfffffffffffffffc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f000000c000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100003f3fdc20221802324a130102030109021b0001000010000904cdf100d3"], 0x0) add_key(&(0x7f0000000f80)='encrypted\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0xe8, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="183f0000000000000000000003000000950000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x2, 0x1007, &(0x7f00000005c0)=""/4103, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0xc0) syz_ublk_setup_queues(r12, r10, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x21, 0x32c, 0x0, r5}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8, 0x2, 0xb9}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r12, 0xc0107520, 0x0, 0x0, 0x700, 0x1, {}, 0x1f, r9, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) r14 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap$snddsp_status(&(0x7f0000ff8000/0x4000)=nil, 0x1000, 0x0, 0x11, r12, 0x82000000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r14, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r14, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000000100)={r15, 0x2}, 0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f00000000c0)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000740)) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x3, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c55080000000c547d03d8a0f4bd00", [0x0, 0x6]}}) 4m43.225314666s ago: executing program 0 (id=5315): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xe, &(0x7f0000000300)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x86f}, 0x10}, 0x94) socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2c099, 0x4ddf2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8841}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2c099, 0x4ddf2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8841}, 0x0) syz_clone(0x22000211, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) io_setup(0x1, &(0x7f0000002500)) (async) io_setup(0x1, &(0x7f0000002500)) eventfd(0x7f29) (async) r2 = eventfd(0x7f29) io_submit(0x0, 0x2, &(0x7f00000011c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f00000000c0)=' ', 0x1, 0xe3}, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1, 0x40, r1, 0x0, 0x0, 0x1, 0x0, 0x0, r2}]) socket$unix(0x1, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5c00000014006b", 0x7}, {&(0x7f00000017c0)="00000000ffffffff1f01a0c9a1171aa56a7f9138a6c073e99f8f2ffed6bd642c1238663e9e5189a46cb56c776afa8ec3d4d4d9c0648fc18bad3a6b5656235d60cb5af5c5a69e10ed9fd4ea", 0x4b}, {&(0x7f0000001840)="9a9245a259250adbc6e2", 0xa}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000000)) 4m42.792654838s ago: executing program 0 (id=5317): r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000340)) r4 = dup(r3) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r4}) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000003c0)={0x1, r1}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STATS_GET(r1, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xe4, r5, 0x100, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_STATS_SRC={0x8}, @ETHTOOL_A_STATS_GROUPS={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_STATS_GROUPS={0xac, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_VALUE={0x65, 0x4, "16bf329f1aef51ecdda93facad061fe75a1cb430744fb6105462d6aea244c2184109ba508c2ad3a25f8ea5178eba5f518d03ce5b8159871aa9db6c9425fdc3d60b537444d12bbd2b4d788fbfebf8c6be100c57b6f12d52fd21a3541b0ac2f03b81"}, @ETHTOOL_A_BITSET_MASK={0x29, 0x5, "6c7d5ba141222d19879e96ccf6c27fab2c8cde39bd5d8d05e947b3f6d24dbb3ab4147b1f91"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xb8}]}, @ETHTOOL_A_STATS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x8080}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r6, 0x0) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0) 4m27.768910322s ago: executing program 33 (id=5317): r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000340)) r4 = dup(r3) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r4}) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000003c0)={0x1, r1}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STATS_GET(r1, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xe4, r5, 0x100, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_STATS_SRC={0x8}, @ETHTOOL_A_STATS_GROUPS={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_STATS_GROUPS={0xac, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_VALUE={0x65, 0x4, "16bf329f1aef51ecdda93facad061fe75a1cb430744fb6105462d6aea244c2184109ba508c2ad3a25f8ea5178eba5f518d03ce5b8159871aa9db6c9425fdc3d60b537444d12bbd2b4d788fbfebf8c6be100c57b6f12d52fd21a3541b0ac2f03b81"}, @ETHTOOL_A_BITSET_MASK={0x29, 0x5, "6c7d5ba141222d19879e96ccf6c27fab2c8cde39bd5d8d05e947b3f6d24dbb3ab4147b1f91"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xb8}]}, @ETHTOOL_A_STATS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x8080}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r6, 0x0) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0) 3m25.228777049s ago: executing program 4 (id=5642): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f00000003c0)=""/142, &(0x7f0000000480)=0x8e) r4 = accept4$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @remote}, &(0x7f0000000200)=0x10, 0x800) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, &(0x7f0000000280)={'filter\x00', 0x4}, 0x68) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$xdp(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, 0x1, r7, 0x8}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000040)="090654a9052aa3c4d5cb533f30c5bf2a7815a52bb92056d044d2fb5c05b8474d7d4fab913ba11c8bbcce4a82317b1bc878e765f15a27c7ae6d0c3c8fed39b1c696d38e1ffe377c900b434ff0138b32d42b6b40099ad00a4898d06e416ccf10974151f99d09f6c322418474ae23d5d8993c4e9ad29005b2ce36", 0x79}], 0x1, 0x0, 0x0, 0x8080}, 0x816) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x34, 0x2c, 0x727, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xc, 0xfff2}, {}, {0xa, 0xffe0}}, [@TCA_CHAIN={0x8, 0xb, 0x7ff}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x200048b4}, 0x2) 3m24.935192485s ago: executing program 4 (id=5644): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b405000080ffffff8110180000000000ce05000000000000950000fffffffd00"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0xfffffee3, 0x10, &(0x7f0000000000), 0xfffffffffffffe4c}, 0x48) 3m24.531460933s ago: executing program 4 (id=5647): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, 0x0, 0x0}, 0x94) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000001000/0x4000)=nil) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, 0x0, 0x8) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x8000, @empty, 0xffbffffe}, 0x1c) recvmmsg(r2, &(0x7f0000001580)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x40010001, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r2, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r3, &(0x7f0000000200)={0x23d, 0x7d, 0x0, {{0x500, 0xfc, 0x0, 0x0, {}, 0x0, 0x4, 0x0, 0x0, 0x1f, '\x04nodev{cvfox%\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x05\xb4\x94\xe1', 0x1d, '\xcf\xc2\x00\x10\x00\x00\xf0\xff\xff\xff\x00\x00b\xbc\xe0\xe6\"\xbe&f\xfa\xc8G\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x23d) sendto$inet6(r2, &(0x7f00000000c0), 0x0, 0x4000000, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000010428bd70000100000000000000", @ANYRES32=0x0, @ANYBLOB="08000000000001001c0012800b0001006970766c616e00000c000280060002000200000008000500", @ANYRES32=r1, @ANYBLOB="ccacf66ed31eccca0d8fc566c6ae88fe6c37d8f9cc99eca2"], 0x44}}, 0x20008004) 3m23.352019826s ago: executing program 4 (id=5655): syz_open_dev$usbmon(&(0x7f0000003ec0), 0x0, 0x0) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f0000000280)={&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, 0x0, 0xffffffffffffff5b}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x43}, 0x48) r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000180)={0x2, 0xce20, @empty}, 0x10) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) write$binfmt_aout(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000b5"], 0xc8) listen(r1, 0x3) r3 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r3, 0x1, 0x79, &(0x7f0000000280)=0x3, 0x4) bind$inet(r3, &(0x7f0000000180)={0x2, 0xde20, @empty}, 0x10) listen(r3, 0x3) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000000)={0x4000000, 0x0, 0xffffffffffffffff}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x22581) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20100, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') ioctl$CEC_RECEIVE(r5, 0xc0386106, 0x0) 3m22.914491632s ago: executing program 4 (id=5657): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b405000080ffffff8110180000000000ce050000000000009500007ffffffe00"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0xfffffee3, 0x10, &(0x7f0000000000), 0xfffffffffffffe4c}, 0x48) 3m21.664486081s ago: executing program 4 (id=5661): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYRES32=r0, @ANYBLOB="0c19c4345aabc539a002bc45ee36d80c58663777e86de78f5d097d8997f8", @ANYRES32=r1], 0x58}, 0x1, 0xba01}, 0x48080) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030428bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="4606090000000000500012800b00010069703667726500004000028014000600fe800000000000000000000000aa14000700000000000000000000000000000000010400120006000f000300000008000d00010001005e8e67c0968b55df94c7a70d1eb3919c03b95763f94cddff9c0cef2cb9281c92ad9ff78164f63dc60a26eebd5d67156701e2647232be8b027c1e56ea5326af1336525c6c249725f13011bce11caf74a0b56016c6fc3ce20c1f9e8d34de34ee8820ae01b553b59658484e"], 0x70}, 0x1, 0x0, 0x0, 0x20004600}, 0x0) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x5, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) syz_open_dev$ublk_chdev(&(0x7f0000000000), 0x0, 0x181801) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) r8 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r8, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r8, &(0x7f0000000000)=""/45, 0x44, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc) splice(r5, 0x0, r7, 0x0, 0x200000000622c, 0x0) syz_ublk_setup_io_uring(0x434c, &(0x7f0000002200)={0x0, 0x4063, 0x1000, 0x3, 0x3b2}, &(0x7f0000002280), &(0x7f00000022c0), &(0x7f0000002300)) r9 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/rt_cache\x00') ioctl$FICLONERANGE(r9, 0x4020940d, &(0x7f0000000000)={{r9}, 0x2, 0x80000000, 0x3}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002340), 0x139100, 0x0) syz_open_dev$ublk_chdev(&(0x7f0000002600), 0x0, 0x2000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 3m21.013607239s ago: executing program 34 (id=5661): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYRES32=r0, @ANYBLOB="0c19c4345aabc539a002bc45ee36d80c58663777e86de78f5d097d8997f8", @ANYRES32=r1], 0x58}, 0x1, 0xba01}, 0x48080) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030428bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="4606090000000000500012800b00010069703667726500004000028014000600fe800000000000000000000000aa14000700000000000000000000000000000000010400120006000f000300000008000d00010001005e8e67c0968b55df94c7a70d1eb3919c03b95763f94cddff9c0cef2cb9281c92ad9ff78164f63dc60a26eebd5d67156701e2647232be8b027c1e56ea5326af1336525c6c249725f13011bce11caf74a0b56016c6fc3ce20c1f9e8d34de34ee8820ae01b553b59658484e"], 0x70}, 0x1, 0x0, 0x0, 0x20004600}, 0x0) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x5, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) syz_open_dev$ublk_chdev(&(0x7f0000000000), 0x0, 0x181801) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) r8 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r8, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r8, &(0x7f0000000000)=""/45, 0x44, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc) splice(r5, 0x0, r7, 0x0, 0x200000000622c, 0x0) syz_ublk_setup_io_uring(0x434c, &(0x7f0000002200)={0x0, 0x4063, 0x1000, 0x3, 0x3b2}, &(0x7f0000002280), &(0x7f00000022c0), &(0x7f0000002300)) r9 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/rt_cache\x00') ioctl$FICLONERANGE(r9, 0x4020940d, &(0x7f0000000000)={{r9}, 0x2, 0x80000000, 0x3}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002340), 0x139100, 0x0) syz_open_dev$ublk_chdev(&(0x7f0000002600), 0x0, 0x2000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 9.574162943s ago: executing program 5 (id=6436): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pread64(r0, &(0x7f0000002200)=""/224, 0xe0, 0x8d35) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401"], 0x0) recvmmsg(r0, 0x0, 0x0, 0x142, &(0x7f0000003340)) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card3/oss_mixer\x00', 0x202302, 0x0) 8.234615024s ago: executing program 5 (id=6446): r0 = syz_open_procfs(0x0, &(0x7f0000002200)='net/route\x00') read$FUSE(r0, &(0x7f00000001c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0x3, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b3838108480b0310547b01020301090212000100000000090401"], 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2000c015}, 0x2404c8c0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x5, 0x200008, 0x8, 0x20001}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6293a, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000002300)=ANY=[@ANYBLOB="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"], 0xcc}, 0x1, 0x0, 0x0, 0x10008000}, 0x80) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x8, 0x103) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB='@x']) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) read$FUSE(r5, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r8 = socket(0x2, 0x80805, 0x0) setsockopt$sock_int(r8, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) syz_fuse_handle_req(r5, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x130, 0x0, 0x8, {0x0, 0x3, 0x0, '\x00', {0x1, 0x0, 0xae3, 0x10, r7, 0xffffffffffffffff, 0x1000, '\x00', 0x6, 0x81, 0x1000000000001, 0x4, {0x1, 0x5}, {0x4000000000009, 0x42}, {0x2000005, 0x1}, {0x1, 0xa00}, 0x2, 0x6, 0x81, 0x5}}}}) write$FUSE_INIT(r5, &(0x7f0000001200)={0x50, 0x0, r6, {0x7, 0x29, 0x0, 0x2810901, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_clone(0x4001000, 0x0, 0x0, &(0x7f0000019100), 0x0, &(0x7f0000019180)="13") setresuid(r7, r1, r7) 5.370794685s ago: executing program 7 (id=6462): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x130, 0x1c8, 0xffffffff, 0xffffffff, 0x98, 0x130, 0x1c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xf, 0x7, 0x5b4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) syz_emit_ethernet(0x3a, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x10, 0x2c, 0x0, 0x0, 0xc0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, {{0x1000, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, 0xffff, 0x0, 0x0, {[@mss={0x2, 0x4, 0x3ff}]}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) r3 = socket(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300050018000000fac8388827a685a168d9a4460409456536", 0x35, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, 0x0, 0x100, 0x2, 0x0) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) syz_clone(0x8a000000, 0x0, 0x0, 0x0, 0x0, 0x0) 5.187357589s ago: executing program 7 (id=6466): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000040), 0x0}, 0x20) (async) r2 = syz_open_dev$loop(&(0x7f0000000380), 0x2, 0x103382) ioctl$LOOP_SET_STATUS(r2, 0x1277, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x7, 0x12, 0x20020, 0x9, "4b8b3ea40100dfed0b2f3409000000dd5a1f0ececfe0f4fcdf997dd52115fac256cf08000000000000030000000000000000000000ea00", "eaabbd496e4d7e0000000000060025de30ad375f24d600", [0x1000000000000911, 0x200e]}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r4, &(0x7f0000000080)}, 0x20) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8093, 0x8268}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) (async) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@ipv6_newaddr={0x2c, 0x14, 0x200, 0x70bd26, 0x25dfdbfb, {0xa, 0x1, 0x11, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @loopback}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44801}, 0x800) (async) syz_open_dev$dri(&(0x7f0000001100), 0x5, 0x8a0000) (async) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) (async) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000200)={{0x0, 0x2, 0x213}}) (async) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, &(0x7f00000000c0)={0x5, 0x1, 0x200, 0x0, 0xf}) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f00000003c0)={0x10409c9, 0xffffff01, 0x0, 'queue1\x00', 0x200000}) (async) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r9, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x40000000}, 0x8}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000040)={0x0, 0x0, {0x3, 0x0, 0x4, 0x0, 0x7}, 0x76e0}) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1) (async) sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)={0x20, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}, [@typed={0xc, 0xc, 0x0, 0x0, @u64=0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x42014}, 0x80000) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r9, 0x6, 0x1d, &(0x7f0000000000)={0x1ff, 0x4, 0x800, 0x8, 0x4cb00000}, 0x14) 5.070340478s ago: executing program 3 (id=6467): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0xc048aec8, &(0x7f0000000700)={0x5, 0x0, @ioapic={0x4, 0x2, 0x100, 0x3, 0x0, [{0x1, 0x4, 0x6, '\x00', 0x81}, {0x7, 0x45, 0x0, '\x00', 0x7f}, {0x4, 0x5, 0x2, '\x00', 0x1}, {0xc6, 0x4, 0x3, '\x00', 0xf5}, {0x4, 0x0, 0xd, '\x00', 0x7}, {0x3, 0x5, 0x3e, '\x00', 0xa}, {0x81, 0x7, 0x5, '\x00', 0x9}, {0x1, 0xe, 0x6}, {0x6, 0x9, 0xf}, {0x2, 0x9, 0x2, '\x00', 0x5}, {0x4, 0x10, 0xc, '\x00', 0x4}, {0x1, 0x0, 0x0, '\x00', 0x3}, {0x4, 0x0, 0xde, '\x00', 0x80}, {0x2, 0x16, 0x40, '\x00', 0x9}, {0x80, 0x9, 0x6, '\x00', 0x49}, {0x2, 0x5, 0xa, '\x00', 0x4}, {0x60, 0x3, 0x5, '\x00', 0xb}, {0x16, 0x1, 0x9, '\x00', 0xfe}, {0x8c, 0x3, 0x7f}, {0x9, 0x0, 0x0, '\x00', 0x7}, {0x92, 0x4, 0xff, '\x00', 0x2}, {0x9, 0x10, 0x4, '\x00', 0x7}, {0x6, 0x9, 0x1}, {0x4, 0x0, 0x7, '\x00', 0xe}]}}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="0407ff02aaaaaaaaaa124664cac8a165989598e5c0630d5d92170e9742a1fcd7239c004d15e003491fad416e14337305d07b7cd07f3841416d73baa21df1bdcfec802b83eacee09f1618ea7362f8a8362ffb6d9e5ad7d9ff10bf59bbb87e678d199cedb02b6545c49cc156557be73a4eb0de3284615dc699bc66c15ed6084c385a27a2a94c3963a2e991a47757b4a76de4ec3fad0184c7e4590514039737e095783f7eade092a67ba3f2387cb4731637ee9cc140ffff35df425af795df4f9d120cc8711b40ba069bb31653c55573fa64058b014f5f2316f5ad68b2a77a0b03001e0fc69bdd0d68e55dc1559cfa24e467ee8feb7529f1216b69da0000000000000000"], 0x102) r2 = fanotify_init(0x8669880847d52a8b, 0x0) fanotify_mark(r2, 0x180, 0x8000063, 0xffffffffffffff9c, 0x0) r3 = syz_mount_image$fuse(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x130815, &(0x7f0000000a00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0xee01, @ANYBLOB="2c67726f759a157702cbed1b0ee125a8620bd2d58ccc43dc77a3", @ANYRESDEC=0xee01, @ANYBLOB="2c626c6b73697a653d3078303030303030303030303030303230302c736d61636b66736861743d9e7b2d2c736d61636b6673666c6f6f723d9a2b285d2c212d2828277d2f253a282c2c7365636c6162656c2c00"], 0x0, 0x0, &(0x7f0000000300)) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="18010000210001002cbd700004000000fc010000000000000000000000000000fe80000000000000000000000000000800000005000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100fe800000000000000000abab60e39cefbb20939f0700000000bbfe8000000000000000000000000000aa7f001700000000000000000000000000fc02000000000000000000000000126811ee00002a0200000135000002000200fc010000000000000000000000000009000100000000000000000000000000000000fe8800000000000000000000000000013c000000000000000a000a"], 0x118}}, 0x0) unlinkat(r3, &(0x7f0000000340)='./file0\x00', 0x200) syz_usb_connect$uac2(0x5, 0x99, &(0x7f0000000000)=ANY=[@ANYBLOB="12015002000000081e040030400001020301090287000301032006080b000201072007090400000001012000092401ff03072700060c240301060301010408009a09240704020006020009240706040004000009040100000102200009040101010102200009050109000004046d082501820f01050009040200000103000009"], &(0x7f0000002880)={0x0, 0x0, 0x0, 0x0}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000780)}], 0x1}}], 0x1, 0x20000044) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000500)) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000e00)={0x0, 0x1, 0x4, 0x1}) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000001980)={0x1, 0x9, @start={r6, 0x1, "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", "57ebb064bddec6ce7ef57dbaa3a4fa090b47f3c595e2f90b4136df9f0d11309bde5f2450aa497b62d5484d8c6679f4f332d5bd6daf6a18ad7a31908eafaddfbd7d3739b239a8d820db36fae5b335dd41b1bf9511e78556b7220367cd1c8691f1d2c1a85d0286ffb016c44df0a51b8364aeec0ff20caf554a88d672d81e4fe1fccbb26f3ca8d7ebeaab0a68edee517dd107126754d3929821cb551c552226aea1d13aeeecdd54e78d1ebce6f36746701f49e28ea840079cb5f4c2e65329c7598d3336ba03ea940a5fa0550718988c0524b61a1848ef61e6149c8f7147fc92c6ff182ebef8c826f79863c3062d05dc8052fc17932bb14cda4216b50c7a391b0e21c789f0d0fc976b438bcb2f0830bc95558c7929b3113d8d7729f65a7076c0a550cd3e66a50ef1ccb3fabd0022cf4fef31588532e2ee46b212f3a5a640265855acf548226a67e13e105b6b74cb5f9f9de6f46aabcdc3781f591e451c993b596cd46b51980986a319a54e2252d2c525606381fd877672b508dd17b6e4d107cfacbd511fa8606528e7887e5bb1f7c143adbb6c61e1fb9c4c36d7b183bc19bd909fa93cfed8bce14448a107c90eac29759bee729f3c10db8041a4c60e4039cc15c0f00e12e3ac6dc02579892bb6fa1b60b458e421625cc16402bc10682d82a534f93db3bbc8c8694b4f715fe5832212a3459ad84b6265af58a3adbcbaf48bcff6f62e6f48e4adfa487b4648d856b97e46eea842efa8af9b22032200014a688c813d89c47cd3c9ae12d5a94d144a36c74a9d612351626f8ceda8292dfa1c0d3537f7f9b2d7488bf6aa1a290521c9a45b65f15093f0299c725790058fe6ed815de1b6f4d2a4ce69ab8a479d4e9cffbf3e3662781b5f172eec80af5bdc2ec260e3f6c03ec3a64e32bfee18dd2564434a4bfbc3df920e8c57cb7ed562b90fe961a4a1002bf3a5131ba4756d110eab68704f9ad15068d10fc04137fb6aa46e962a33bb666db01afc3e96db31586814fee654507a6edc1d04ef5cc30aae50fb03d54afd5d7f0a535d0a34ac4faec679551cd32305004f1a109c5b026d1ac77b3aa649c04517d5c63840b997e5c269a2ae5bd240153f11fdf025b497fd70082f2c7f81d7d421defcf29344a682a478081ae2f592a5f3a4dcc4c32b95267138bf5c46c88e4ab58fe2492a9684850ced342821eab68af3104602f9d8d0ec31de129b02c06987b9d984c02634dd9a1bd1beef1d3ef336426efc58e0a639017094a90d767fe48630b78205261fb833a919dc5091b0d32719c3f5883d7872000b83cca46aa2a0a7b827b578f339098e31ce2ddb49004288f4959e73d694c3cf8c572b45a4c9bb6f3da201db95645bdc4a8df7415c4f931fe86b37906ff49eb8480f4ce506b5010dcb8d847e6a17444b890901f3c519f7b8c9e0ec4efa576a830031839213ad72cc41ff"}, [0x10000, 0xff1c, 0x8c, 0x100000000, 0xc, 0x5, 0xfddf, 0x1, 0x3, 0x6, 0x1, 0x1, 0x8000, 0x81, 0x2, 0x7fffffffffffffff, 0x2, 0x8000000000000001, 0x255c, 0x3, 0xd, 0x100000000, 0x6, 0x6, 0x0, 0x7fff, 0x8, 0xffffffffffffffff, 0x3, 0x102, 0xffffffff, 0x2, 0x800, 0x8, 0x5, 0xa7, 0x3, 0x8000000000000000, 0x1800000000000, 0x8000000000000001, 0x4, 0x3, 0x2, 0x1fe, 0xfffffffffffffffa, 0xb, 0x8, 0xcf42, 0xe, 0x6, 0x2, 0xd, 0x6, 0x9, 0x5, 0x0, 0xed2, 0x1, 0x7, 0x3, 0x6, 0x6, 0x0, 0x3]}) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000180)=[{0x1, 0x1, {0x0, 0xff, 0x3}, {0x2, 0xff, 0x4}, 0xff}], 0x20) r7 = accept4(r5, 0x0, 0x0, 0x800) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'veth0_macvtap\x00', &(0x7f0000000680)=@ethtool_per_queue_op={0x4b, 0x2f, [0x7fefffff, 0xffffffff, 0x3, 0x1, 0x3, 0x5, 0x7, 0x0, 0xa4d, 0x0, 0x7, 0x4, 0xe, 0x4, 0x5, 0x2, 0xa0, 0x10001, 0xb, 0xc2, 0x0, 0x6, 0x7, 0xa4, 0xfdff, 0x2a, 0x4, 0x5, 0x5, 0x6, 0x0, 0x0, 0xfffffffd, 0x3, 0x4, 0xcb, 0x401, 0x8000, 0x7fff, 0x9, 0x80000001, 0xd, 0xe82, 0xffffffff, 0x28b5, 0xfffffffa, 0x2, 0xfffffffe, 0x6, 0x7, 0xff, 0x3, 0x8, 0x1, 0x100, 0x8, 0x4, 0xa0, 0x3335a578, 0x800, 0x6, 0x0, 0xff, 0x4, 0x400, 0x3, 0x4, 0x10, 0x90, 0x7, 0x38, 0xffff0000, 0xfffffffe, 0x6, 0x8, 0x2, 0x3, 0xfff, 0x2, 0x4, 0x5, 0x3, 0x9, 0x5, 0x2, 0xc55b, 0xc, 0x62, 0x8, 0xfffffff8, 0x3, 0x4, 0x4, 0x583, 0xef8, 0x0, 0x0, 0x1, 0x8, 0x0, 0xfffffffc, 0x1000, 0x3, 0xfff, 0x7, 0x3, 0x9, 0x9, 0x8, 0x1, 0x2, 0x7, 0xd, 0x7ff, 0x0, 0x0, 0x0, 0xb53, 0xff, 0xfffffffd, 0x5, 0x3, 0x101, 0x4000002, 0xe17, 0x5, 0x80]}}) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r8, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)=ANY=[@ANYBLOB="1c4000001e00010600000000000000000500000100000000b7000000"], 0x1c}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$sock_buf(r9, 0x1, 0x4b, 0x0, &(0x7f00000001c0)) 4.986720761s ago: executing program 5 (id=6468): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x1, 0xbfff8000}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xe}, {0xfff2, 0xa}, {0x7}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x8, 0x400004, 0x0, 0x7}, 0xf0, 0x1, 0x31a, 0x3, 0x88a, 0x2, 0x8b, 0x1b, 0x5, 0x0, {0x0, 0x2, 0x800, 0x5, 0x0, 0x5}}}}]}, 0x78}}, 0x4000) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) sendmmsg(r6, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @multicast}, 0x10) ioperm(0x0, 0x80, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) unshare(0x22020600) r7 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x80) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000400)={r8, 0xffffffffffffffff, 0x4}, 0x10) socket$unix(0x1, 0x5, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e2b02010301ffff64b029601f1e"], 0x2e) r9 = socket(0x10, 0x3, 0x0) r10 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r10, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r10, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xdd9f83, 0x1, 0x2f, 0xf3, 0x2, 0x8, 0x722, 0x6, 0x7, 0x7f, 0x27, 0x31, {0x0, 0x6fd8e86b}, 0x3, 0xed}}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0xba01, 0x0, 0x4000044}, 0x10) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0xe, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x8000) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@getchain={0x2c, 0x11, 0x43d, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xfff1}, {0x0, 0xa}}, [{0x8, 0xb, 0xe}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc015}, 0x20000040) 4.840130655s ago: executing program 7 (id=6469): unshare(0x8040480) r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) r1 = syz_open_dev$sg(&(0x7f0000000540), 0xb4, 0x42) ioctl$SG_IO(r1, 0x2285, &(0x7f00000001c0)={0x0, 0xfffffffffffffffc, 0x0, 0x5, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1, 0x2, 0x2001, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000001c0)={0xfffffffffffffe23, 0x2, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x4000, 0x4}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x5393, &(0x7f00000001c0)=ANY=[]) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0xb, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20008041}, 0x24008084) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000000)=@x86={0x6, 0x3, 0x0, 0x0, 0x5, 0xa, 0x98, 0x3, 0x3, 0x6, 0x9, 0x40, 0x0, 0x7, 0x1, 0x7, 0x2, 0xad, 0xda, '\x00', 0x6, 0x100000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_out(r6, 0x5460, &(0x7f0000000180)) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r7, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40040) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, 0x0) 3.951866012s ago: executing program 7 (id=6472): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x103702, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) socket$kcm(0x2, 0x2, 0x73) close(0x3) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000b00)={0x630, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x2f4, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x98, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa, 0x0, 0x0, 0x3, 0x91f7, 0x8, 0x1, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x8, 0x5, 0x1a3c, 0xfff7, 0x1, 0x1, 0x5455]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x9, 0x5, 0x1, 0x4, 0x5, 0x1ff, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x9, 0x1, 0x800, 0x8, 0x3, 0x7, 0x10]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x12, 0x12, 0x1, 0x24, 0x0, 0x5, 0x6, 0x2b, 0x12, 0x30, 0x30, 0xb, 0x12, 0x4, 0x6c, 0x50, 0x12, 0x60, 0xc, 0x6, 0xb, 0x1b, 0x1, 0x48, 0x48, 0x60, 0x5, 0x12, 0x6c, 0xc]}]}, @NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x3}, {0x4, 0x9}, {0x5, 0x4}, {0x4, 0x5}, {0x5, 0x6}, {0x6, 0x3}, {0x1, 0x8}, {0x1, 0x8}, {0x0, 0x9}, {0x2, 0xa}, {0x4, 0x8}, {0x4, 0x7}, {0x6, 0x8}, {0x2, 0x7}, {0x6}, {0x5, 0x6}, {0x3, 0x1}, {0x4, 0x9}, {0x0, 0x6}, {0x0, 0x5}, {0x3, 0x4}, {0x1, 0x5}, {0x6, 0x4}, {0x2, 0x5}, {0x3, 0x6}]}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x7, 0x7f, 0x5, 0x0, 0x100, 0x4, 0x6]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x4, 0x6, 0x24, 0xb, 0x78, 0x0, 0x6c, 0x36, 0x48, 0xc, 0x1, 0x16, 0x48, 0x6c, 0x30, 0x60, 0x1b, 0x24, 0x18, 0xb, 0xb, 0x60, 0x2, 0x5, 0x3, 0x0, 0x16, 0x60, 0x60, 0x0]}]}, @NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x400, 0x2, 0x8, 0x1, 0x7, 0x2, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6575, 0x8, 0x7, 0x9, 0xfff, 0x9, 0x101, 0xff]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x89d, 0x2667, 0x2, 0x7, 0x1, 0x5, 0x3, 0x8]}}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x48, 0x36, 0x1b, 0xc, 0x12, 0x0, 0x30, 0xb, 0x12, 0x30, 0x60, 0x5, 0x2, 0x24, 0x60, 0x9]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0x7fff, 0xff, 0x10, 0xf000, 0x4, 0xaf, 0x7]}}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x3, 0x6, 0x9, 0x24, 0x12, 0x2, 0xb, 0x36, 0x48, 0x30, 0x3, 0x1, 0x24, 0x4, 0x18, 0x1b, 0x1b, 0x37, 0xc, 0x3, 0xc, 0xc, 0x5, 0x6, 0x6c, 0x5, 0x3, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x3, 0x4}, {0x5}, {0x7, 0x4}, {0x3, 0x2}, {0x1, 0x16}, {0x0, 0x2}, {0x7, 0x7}, {0x0, 0x9}, {0x6, 0x7}, {0x1, 0x8}, {0x2, 0x6}, {0x0, 0x7}, {0x6, 0x7}, {0x5, 0xa}, {0x1, 0x3}, {0x1, 0x7}, {0x1, 0x4}, {0x4, 0x3}, {0x0, 0x6}, {0x4, 0x5}, {0x5, 0x5}, {0x5, 0x9}, {0x4, 0x3}, {0x1, 0x7}, {0x0, 0x3}, {0x0, 0x9}, {0x1, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x3, 0x400, 0x8, 0x8, 0x3, 0x3, 0x80]}}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x7, 0xb2, 0x8000, 0xf, 0x5, 0x7, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x180, 0x7ff, 0x9, 0x3, 0x6, 0x2, 0x6, 0xff]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x4, 0x2, 0x9, 0x3, 0xb, 0x3, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x0, 0x3}, {0x3, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x7, 0xff, 0x6, 0xf000, 0x1c, 0x969d]}}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x8, 0x0, 0xe8, 0x4, 0xb, 0x1, 0xf]}}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5, 0x1ff, 0x7, 0xfff2, 0x5, 0x9, 0x80]}}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x9, 0x3, 0x5, 0x9, 0x8, 0x5, 0x7f]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x0, 0x8}, {0x2, 0x7}, {0x0, 0x5}, {0x0, 0x5}, {0x6, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x50ad, 0x8, 0x8f38, 0x6, 0xff, 0x6, 0x2, 0x7f]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x28, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x69, 0x5, 0x1, 0x7, 0x0, 0x7, 0x0, 0x8001]}}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x18c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xac, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x377, 0x2, 0x9, 0xc, 0x7, 0x3b, 0x2fda]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x0, 0x8}, {0x3, 0x3}, {0x5, 0x8}, {0x5}, {0x0, 0x1}, {0x1, 0x5}, {0x0, 0x1}, {0x4, 0x5}, {0x3, 0x7}, {0x4, 0x8}, {0x6, 0x8}, {0x7, 0x4}, {0x2, 0x2}, {0x7, 0x2}, {0x4, 0x2}, {0x7, 0x8}, {0x1, 0x5}, {0x0, 0x9}, {0x7, 0x9}, {0x3, 0x1}, {0x4, 0x2}, {0x0, 0x3}, {0x5, 0x7}, {0x2, 0x6}, {0x2}, {0x2, 0x3}, {0x6, 0x5}, {0x4, 0xa}, {0x3, 0x9}, {0x5, 0x9}, {0x3, 0x6}, {0x1, 0x5}, {0x1, 0x7}, {0x1, 0x7}, {0x5, 0xa}, {0x7, 0x8}, {0x2, 0x3}, {0x7, 0x1}, {0x5, 0x8}, {0x0, 0xa}, {0x7, 0x4}, {0x0, 0xa}, {0x4, 0x3}, {0x4, 0x6}, {0x7, 0x2}, {0x0, 0x7}, {0x4, 0x3}, {0x2, 0x3}, {0x3, 0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0xa}, {0x5, 0x3}, {0x0, 0xa}, {0x6, 0x1}, {0x7, 0x9}, {0x6, 0xa}, {0x2, 0x6}, {0x0, 0x9}, {0x7, 0x5}, {0x1, 0x8}, {0x3, 0x7}, {0x1, 0x5}, {0x1, 0x7}, {0x7, 0xa}, {0x1, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6c, 0x0, 0x2, 0x40, 0x9, 0x5, 0x7, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x6c, 0x60, 0x16, 0x6c, 0x18, 0x6, 0x12, 0x48, 0xd, 0x4, 0x3, 0x24, 0x60, 0x9, 0x12, 0x16]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x437e, 0x1ff, 0x9, 0x5, 0xffff, 0x3ff, 0x9, 0xc9]}}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x11, 0x2, [{0x6}, {0x4, 0x4}, {0x2, 0x8}, {0x7, 0x7}, {0x1, 0x9}, {0x0, 0xa}, {0x1, 0x3}, {0x4, 0x8}, {0x2, 0x4}, {0x4, 0x3}, {0x0, 0x6}, {0x0, 0x6}, {0x0, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x7c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x34, 0x2, [{0x0, 0x4}, {0x0, 0x9}, {0x1, 0x4}, {0x0, 0x5}, {0x6}, {0x2, 0x1}, {0x7, 0x9}, {0x3, 0x5}, {0x0, 0x4}, {}, {0x4, 0x4}, {0x7}, {0x2, 0x4}, {0x3, 0x2}, {0x0, 0x6}, {0x1}, {0x0, 0xa}, {0x1}, {0x1, 0x3}, {0x6, 0x5}, {}, {0x1, 0x3}, {0x2, 0xa}, {0x1, 0xa}, {0x7, 0x5}, {0x3}, {0x0, 0x2}, {0x1, 0x5}, {0x6, 0x9}, {0x2}, {0x3, 0x9}, {0x4, 0x1}, {0x7}, {0x2, 0x2}, {0x0, 0x4}, {0x2, 0x1}, {0x1, 0x7}, {0x5, 0x1}, {0x7, 0xa}, {0x4, 0x6}, {0x5, 0x5}, {0x3, 0x5}, {0x1, 0x3}, {0x3, 0xa}, {0x0, 0x5}, {0x4, 0x6}, {0x4, 0x8}, {0x4, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x24, 0x2, [{}, {0x4, 0xa}, {}, {0x4, 0xa}, {0x0, 0x9}, {0x5, 0x5}, {0x1, 0x1}, {0x0, 0x2}, {0x5, 0x6}, {0x6, 0x2}, {0x1, 0xa}, {0x2, 0x6}, {0x0, 0x7}, {}, {0x7, 0x7}, {0x6, 0x7}, {0x4, 0xa}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x7}, {0x7, 0x4}, {0x6, 0x2}, {0x2, 0x4}, {0x6, 0x8}, {0x3, 0x8}, {0x0, 0x5}, {0x6}, {0x4, 0x5}, {0x3, 0xa}, {0x0, 0x9}, {0x1}, {0x2, 0x8}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x8e43, 0x7, 0x7f, 0x6e1, 0x2, 0xef, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0xb0, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x4, 0xc, 0x0, 0x30, 0x4, 0x48, 0x60, 0x2, 0x16, 0x18, 0x4, 0x24, 0x48, 0x12, 0x4, 0x4]}]}, @NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x1, 0x2}, {0x0, 0x3}, {0x0, 0x5}, {0x0, 0x4}, {0x1, 0xa}, {0x3, 0x5}, {0x7, 0x7}, {0x1, 0xa}, {0x4, 0x6}, {0x3}, {0x7, 0xa}, {0x3, 0x9}, {0x5, 0x7}, {0x1, 0x3}, {0x4, 0x6}, {0x2, 0x7}, {0x4, 0x6}, {0x4, 0x9}, {0x2, 0x7}, {0x4, 0x3}, {0x0, 0x8}, {0x5, 0x9}, {0x4, 0x7}, {0x1, 0x1}, {0x2, 0x8}, {0x2, 0x3}, {0x5, 0x4}, {0x2, 0x4}, {0x4, 0x7}, {0x2, 0x5}, {0x1, 0x1}, {0x3, 0x4}, {0x1, 0x6}, {0x4, 0x4}, {0x0, 0x6}, {0x6, 0x6}, {0x1, 0x9}, {0x1, 0x5}, {0x1, 0x8}, {0x0, 0xa}, {0x0, 0x3}, {0x4, 0x8}, {0x5, 0xa}, {0x2, 0x1}, {0x4, 0x2}, {0x2, 0xa}, {0x1, 0x8}, {0x7, 0x7}, {0x6, 0x3}, {0x2, 0x1}, {0x5, 0x9}, {0x3, 0x2}, {0x7, 0x9}, {0x5, 0x5}, {0x1, 0x7}, {0x2, 0x8}, {0x5, 0x3}, {0x7, 0xa}, {0x2}, {0x0, 0x7}, {0x2, 0x5}, {0x1}, {0x6, 0x8}, {0x2, 0xa}, {0x0, 0x9}, {0x6, 0x6}, {0x1, 0x6}, {0x5}, {0x7, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc, 0x8, 0x93, 0x6, 0x9, 0x5fbf, 0x1, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffe, 0x5, 0x3, 0x6, 0x401, 0x7791, 0x3, 0x7f]}}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0xb4, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xb0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3cd8, 0x2, 0x9, 0x7, 0x1, 0x81, 0x28, 0xff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xf, 0x1, 0x4, 0x0, 0x1, 0x8000, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x6, 0x8000, 0x8, 0x4, 0x3, 0x0, 0x9]}}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x1, 0x3}, {0x5, 0x6}, {0x3, 0x6}, {0x1, 0x9}, {0x4}, {0x0, 0x9}, {0x3, 0x7}, {0x2, 0x6}, {0x4, 0x3}, {0x2, 0xa}, {0x4, 0x1}, {0x0, 0xa}, {0x2, 0x6}, {0x0, 0x2}, {0x6, 0x8}, {0x5, 0x2}, {0x5, 0x6}, {0x7, 0x1}, {0x6, 0x7}, {0x2, 0x1}, {0x4, 0x9}, {0x3, 0x6}, {0x1, 0x2}, {0x1, 0x7}, {0x6, 0x2}, {0x2, 0x4}, {0x1, 0x5}, {0x1, 0x8}, {0x6, 0x4}, {0x5, 0x6}, {0x6, 0x8}, {0x2, 0x4}, {0x7, 0x6}, {0x3, 0x9}, {0x3}, {0x6, 0x4}, {0x0, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x3, 0x2}, {0x3, 0x9}, {0x5, 0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x5, 0xa}, {0x4, 0x4}, {0x1, 0x3}, {0x4, 0xa}, {0x2, 0x7}]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x60, 0x1b, 0x16, 0x4, 0x24, 0x2, 0x24, 0x3, 0x5, 0xf060470b6ae2a96c, 0x1b, 0x73, 0x30, 0x0, 0x5, 0x9, 0x36, 0x30]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x2, 0x48, 0x0, 0x6, 0x16, 0x3, 0x2a, 0x12, 0x1, 0xc, 0x36, 0x30, 0x12]}]}]}, @NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}]}, 0x630}, 0x1, 0x0, 0x0, 0x20008850}, 0x2000) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socket$kcm(0x1e, 0x4, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000003900250825bd7000fadbdf250f0000001c0007800800028004005e8008"], 0x30}, 0x1, 0x0, 0x0, 0x4050}, 0x0) r2 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) 3.827711369s ago: executing program 5 (id=6473): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) socket(0x2b, 0x800, 0x7) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, 0x0) ioctl$XFS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f00000000c0)) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r5, 0x0, 0x0) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, 0x140f, 0x1, 0x70bd2a, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}]}, 0x1c}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r7 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0x3}}, 0x5c) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r8, 0x73c, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e20, 0x5, @empty, 0xbff}, @ib={0x1b, 0xf, 0x6, {"50916300000000000000000700"}, 0x8000000000000001, 0x8, 0x3ff}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r7, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r8, 0x2000000a}}, 0x10) close_range(r7, r7, 0x0) syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000180)=ANY=[@ANYBLOB="30340800080211000001ffffff05ffff505050505050030484adca0001002d1a2000046f000000000000000500060005000000000402000000c0"], 0x3a) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) 3.45534513s ago: executing program 7 (id=6474): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500002000ffff8110180000000000ce050000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0xfffffee3, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x40000000}, 0xfffffffffffffe4c}, 0x48) 3.248236646s ago: executing program 3 (id=6475): r0 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c0015"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100003"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4b0, 0x158, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e0, 0xffffffff, 0xffffffff, 0x3e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x0, 0xff], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x138, 0x158, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x2}, {0x7f}], 0x2, 0x2}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0xffffffff], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x3, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x5, 0x41, 0x0, 0x2, 0x1800, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x510) 3.092258393s ago: executing program 7 (id=6477): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pread64(r0, &(0x7f0000002200)=""/224, 0xe0, 0x8d35) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401"], 0x0) recvmmsg(r0, &(0x7f0000001b00)=[{{&(0x7f0000000140)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000240)=""/208, 0xd0}, {&(0x7f0000000340)=""/253, 0xfd}, {&(0x7f0000001b80)=""/162, 0xa2}, {&(0x7f00000005c0)=""/99, 0x63}, {&(0x7f0000000640)=""/236, 0xec}, {&(0x7f0000000440)=""/105, 0x69}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x7, &(0x7f0000002300)=""/4096, 0x1000}, 0x2}], 0x1, 0x142, &(0x7f0000003340)) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card3/oss_mixer\x00', 0x202302, 0x0) 2.99532758s ago: executing program 3 (id=6478): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ff9, 0xf) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x401, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x560b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e23}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2004d808}, 0x24000084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000280)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1, 0x0, 0x10001}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x8, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x49, 0x6, 0x5f, 0x9, 0x4000011, 0xffff2d35, 0xff7fff01, 0x3, 0x5, 0x6, 0x5, 0x6, 0x20000004, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0xffffffff, 0xffffffff, 0x0, 0x1004, 0x7, 0x20003, 0x4, 0x2, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0xa, 0x13, 0x3c, 0x7, 0x5, 0x3f, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x7, 0x80, 0x0, 0x5, 0xc, 0x8, 0x8002, 0x1, 0x40], [0x10000007, 0x3, 0x8000012f, 0x8006, 0x5, 0xfffffff7, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x4, 0xfffffff8, 0x5, 0x0, 0x3, 0x5, 0x31, 0xe, 0x1, 0x7, 0xea4, 0x100, 0x4, 0x7, 0x7fff, 0x6, 0x401, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0x2, 0x200004e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x6, 0x6, 0xd7b, 0x2, 0x1, 0xfe000000, 0xa, 0x2, 0x4, 0x9, 0x3, 0x1, 0x4000009, 0xa, 0x0, 0x3, 0xbc45, 0x65, 0x42, 0x3], [0x7, 0x408, 0x4, 0x9, 0xfffffffd, 0x100, 0x5, 0x9, 0x5, 0x7fff, 0x0, 0x80005, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xffffffff, 0x5, 0x2, 0x1, 0x400003, 0x20000008, 0x4, 0x2, 0x3, 0x107, 0x800003, 0x200, 0x80, 0x3, 0x10000, 0x2950bfaf, 0x1000, 0x8005, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x1005, 0x1c, 0x120000, 0x200807ff, 0x2006, 0x80aaed, 0xeb4b, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x4, 0x4, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x4184, 0x5, 0x3, 0x2, 0x5, 0x2, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0xffffffff, 0x2000082, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x3, 0x7, 0xb0, 0x2000000a, 0x5, 0x226, 0x2, 0x5, 0x0, 0x2800000, 0xa1f, 0xf40, 0xa, 0x530e, 0x6c1b, 0x0, 0x4, 0x2, 0x1, 0xd6, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000b20000/0x400000)=nil) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f00000058c0)=[{{&(0x7f0000000300)={0xa, 0x4e24, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0xae00000}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000880)='*', 0x1}], 0x1}}, {{&(0x7f0000000940)={0xa, 0x4e23, 0xff, @private2, 0x3}, 0x1c, &(0x7f0000000c00)=[{&(0x7f0000000980)='6', 0x1}], 0x1}}], 0x2, 0x5) shutdown(r5, 0x1) setsockopt(r4, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x10, 0xb, 0xff}, 0x3d, [0x8002, 0xc95a, 0x6, 0x8, 0x80, 0x5, 0x4, 0x10007e, 0x20000006, 0x53, 0x6, 0x10001, 0x80005, 0x102, 0xffff2d34, 0xffffff01, 0x6, 0x2, 0xfffffffc, 0x5, 0x2, 0x2, 0x7, 0x4, 0x200ffff, 0x3, 0xd, 0x53b7, 0x6, 0x7, 0xe661, 0x4, 0x7, 0x6, 0x8, 0x4c74, 0x205, 0x0, 0x4, 0x5, 0x9, 0x800080ee, 0xa, 0x19, 0x1, 0x9, 0x1, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x2, 0x4, 0x9, 0x400, 0x80, 0x10001, 0x5, 0x5, 0x6, 0x5, 0x1, 0x40], [0xd, 0x9, 0x80000130, 0x8004, 0x8001, 0xfffffff3, 0x2, 0xfffffff7, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x2, 0x0, 0x5, 0x42f, 0x1, 0x312, 0x78, 0x1, 0x2, 0xffff, 0x7, 0x7fff, 0x20006, 0x4400, 0x401, 0x6, 0x1, 0xfc, 0x5, 0x1000005, 0x5f2f, 0x9, 0x8, 0x1, 0x4, 0xffff80f1, 0x7, 0x6, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xfff, 0xfffffe01, 0x4, 0x9, 0x200, 0x101, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93694, 0x43, 0x9], [0x7, 0xa, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x0, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x0, 0x6, 0x5, 0x5, 0x8, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000007, 0x2, 0x6d03, 0x5, 0xd, 0x17, 0x200, 0x400080, 0x3, 0x8, 0x2950bfaf, 0x2, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x7, 0x1, 0x6, 0x0, 0x2, 0x21c, 0x120000, 0x3, 0xb, 0x80aaed, 0x4, 0x24], [0x9, 0x840bb33, 0x7fffffff, 0xb, 0x5, 0x1, 0xa, 0x1000006, 0x1, 0xb9, 0xce7, 0x1ff, 0x2, 0x56, 0x4, 0x3, 0x101, 0x10003, 0x8, 0xfffff001, 0x1000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000001, 0x7, 0x45e, 0xc8, 0xfffffbfd, 0xfffff000, 0x4010080, 0x3, 0x7e, 0x4, 0x1000, 0x7, 0xaf, 0x8, 0x400, 0x226, 0x5, 0x5, 0x132, 0x30b1d69b, 0x1000a1f, 0xffffffff, 0x7, 0xfffffffe, 0x6c1b, 0x0, 0x4, 0x928, 0xb1e, 0xc2, 0x200, 0xffff2441, 0xf7f]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000040)) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.568907492s ago: executing program 2 (id=6480): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x1e0) ioctl$KVM_CAP_DIRTY_LOG_RING_WITH_BITMAP(r0, 0x4068aea3, &(0x7f0000000040)={0xe1, 0x0, 0x199000}) ioctl$KVM_CAP_X86_GUEST_MODE(r0, 0x4068aea3, &(0x7f00000000c0)) close$binfmt(r0) r1 = memfd_create(&(0x7f0000000140)='\x00', 0x5) r2 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000180)={0x0, 0x3, [{r0, 0x0, 0x1000, 0xfffffffffffff000}, {r0, 0x0, 0xfffffffff0000000}, {r1, 0x0, 0x100000000, 0x1000000}]}) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) quotactl_fd$Q_GETQUOTA(r2, 0xffffffff80000700, r3, &(0x7f00000002c0)) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000340)=0x0) r5 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r0, &(0x7f0000000380)={r0, r2, 0x9}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000480)={'tunl0\x00', &(0x7f00000003c0)={'ip_vti0\x00', 0x0, 0x10, 0x7800, 0x7, 0x6, {{0x1b, 0x4, 0x0, 0x1, 0x6c, 0x65, 0x0, 0xdd, 0x2f, 0x0, @multicast2, @remote, {[@generic={0x44, 0xb, "83f7f7a18d1c05498b"}, @timestamp={0x44, 0x2c, 0xac, 0x0, 0x7, [0x8, 0x40, 0xc825, 0x2, 0x1, 0x7fffffff, 0x8, 0x9, 0x80000001, 0x3]}, @generic={0x88, 0x2}, @generic={0x86, 0xd, "241b6995ce06625afbaf6b"}, @generic={0x44, 0x12, "26cc1ec06f5376e94bcc448e4418fc51"}]}}}}}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xfffffff8, '\x00', r6, 0xffffffffffffffff, 0x2, 0x1}, 0x50) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000540)={0x1}) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) fcntl$lock(r7, 0x7, &(0x7f00000005c0)={0x2, 0x0, 0x5, 0x7, r4}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000600)={0x0, 0x1}, 0x8) splice(r7, &(0x7f0000000640)=0x15ce, r7, &(0x7f0000000680), 0x3, 0xc) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000006c0)={0x0, 0x8}, &(0x7f0000000700)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000740)={r8, 0x3}, 0x8) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000780)={0x5, 0x8, 0x305, 0x3}, 0x8) chdir(&(0x7f00000007c0)='./file0\x00') r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000880)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x30, r9, 0x100, 0x6, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x5, 0x75}}}}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x80) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r0, 0xc018aec0, &(0x7f0000000dc0)={0x10003, 0x280, 0x400, &(0x7f00000009c0)=[0x81, 0x122eb490, 0x0, 0x9, 0x7fffffffffffffff, 0x80, 0x7fffffffffffffff, 0x0, 0x5, 0x7, 0x3a, 0x9, 0x6, 0x1, 0x100, 0x7, 0x1, 0xd64a, 0x81, 0x6, 0xfc, 0x4000000000000000, 0x1, 0x7ff, 0x0, 0x3, 0x7, 0x8d4, 0x5, 0x9, 0x3, 0x7fffffffffffffff, 0xe0, 0x3, 0x1, 0x9, 0x3, 0x2, 0xab9c, 0xc, 0x7, 0x8, 0x55e, 0x7, 0x2, 0x6, 0xbb, 0x1, 0x10000, 0x9a6e, 0x7, 0x90, 0x9, 0x9, 0x4, 0xe, 0x3520, 0x66c, 0x0, 0x924b, 0x2, 0x10, 0x3, 0x8, 0x2, 0x100000000, 0x9, 0x2, 0x7fffffffffffffff, 0x7, 0x4, 0xfffffffffffffffd, 0x5, 0x3, 0x9, 0x7, 0x5, 0xffffffff, 0x0, 0x4, 0xffffffff, 0xfffffffffffffffa, 0x2, 0x7, 0x0, 0x7, 0xf90, 0x10001, 0x8, 0x3, 0x7, 0x3, 0x10, 0xc41a, 0xffffffffffff8000, 0x7, 0x1, 0x4, 0x3, 0x6, 0x5, 0x0, 0x8, 0x2, 0x5, 0x1, 0x4, 0x1000, 0x8, 0x3, 0x8000000000000000, 0x2f2300000, 0x97, 0x0, 0x9, 0x7, 0x5, 0x9, 0x3, 0xffffffff, 0xcb37, 0xc, 0x8, 0x0, 0x6, 0x1, 0x7, 0x3]}) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000e00)={0x8, 0x7, 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, &(0x7f0000000e40)) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000e80)) 2.320794205s ago: executing program 2 (id=6482): r0 = socket$igmp(0x2, 0x3, 0x2) signalfd4(r0, &(0x7f0000000040)={[0x530f]}, 0x8, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000000)={0xc, 0x1, 0x9, 0x10000, @vifc_lcl_addr=@multicast2, @multicast1}, 0x10) 2.091413791s ago: executing program 2 (id=6483): r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/210, 0xd2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb}, 0x48) mount$fuse(0x0, &(0x7f00000020c0)='./file1\x00', &(0x7f0000002100), 0x0, &(0x7f0000001040)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xfff}}]}}) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, r2, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="50010000000000000300000000000000040000000000000003000000000000000080020000000000030000000000000009000000050001000600000000000000090000000000000004000000000000000a000000000000000600000000000000000000000000000002000000010000000600000000800000de000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="018000000000008000000000010000000000000401000000000000000100000094015432000000000000000004000000000000000100000000000000fd07000000000000ffffffffffffff7fff0f00000107000003000000000000f349000000000000000300e6ffffffffff0500000000000000050000000000000002000000000000000200000006000000070000000060000000000000", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0100000003000000000000000000000000000000070000000000000001000000000300"/44], 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000001100)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff}) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r6, r6) setpgid(0x0, r6) tkill(r6, 0x7) wait4(r6, 0x0, 0x0, 0x0) r7 = getegid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001540)={0x0, 0x0}) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x800010, &(0x7f00000002c0)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000000080)={0x50, 0x0, r10, {0x7, 0x29, 0x9, 0xffffffff90a4edc6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r9, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fff2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000236c52aef7bb4300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x0, 0x8000000000000, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r9, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="8001000000000000f9ffffffffffffff020000000000000002000000000000000200000000000000fc0000000000000000000000060000000600000000000000ffffffffffffffff0000000000000000ff0000000000008004000000000000000000000000000000ffffff7f58000000030000000080000009000000", @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="0100000000000000000000000600000000000000370500000000000036"], 0x0, 0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f00000015c0)={0x0, 0x0}) r14 = geteuid() quotactl$Q_SETINFO(0xffffffff80000602, 0x0, r14, &(0x7f0000000580)={0x3, 0x6, 0x0, 0x3}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001600)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, 0xee01}}, './file1\x00'}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001700)=[{{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000200)="7ed9b57a570e431ea2477ecb2a53a2e2b57d87ce1770137dae5ac97fb5cab2bc03a973abd79d402bd01d600c80e6dd087d5dcd925b2dbeb0c44cf93627da0c29f3c316f53763efc9bac7f5484a291b4c38e717567a5b2f144754df3add0cd94dd85e7cd53c53eac3fc1bee54ac19f15221d1a0ac3c8f4cddb7795c772f139dde8d67b8b5a52747fe87d44dcdc0a456028326265d16451aa40beef9648d7ad36a07909b75f19073bfd1c8ad7d41b55a91e7783bad33caed045cf8eafd6f16a547ac08bffd902fd5c33cddb5ff414aecf4e723dee55a131df4064a3f14d061", 0xde}, {&(0x7f0000000e40)="2b6de97f42348bbc0bec9614a802a08528d1e900da4410c4adad10b901c1988d92bb0c9129227065e88e9a73886ef9f51e22e66dda96820eda7ecaecc889dbb3c52d462492633a4993846cc4752663df9bfc651459c369c4a393526ae50d33f66a9aa70d33df", 0x66}, {&(0x7f0000000ec0)="999818e6251c070c0dc40bc734ffe3f4d2a1bc25dc010c543646a4cb5c98d6a0b93c13c43f49b8f87f4c8f109ab440d2a33c2b0259acc6058fe96c6ede16329860743a01fbd5343a2d4189", 0x4b}, {&(0x7f0000000f40)="3eda2a6eb77e44e506a994656c0745fe52ee2d3ef3b1ebd9361e117da60585d65f7f614128bc643e56c6ed1934cfbb765109b4f7a466735dbd58c6d162fd841ffd2827a2488a2e1068289165b4946636f3cfe3fa92fffa20c83611dcc4c115fb78fa30ae5f6a14a49aff898250b93f79dabfd04a3365eeb5280ae0a503d3611dcdf8f1e45d1c230e5a95b72ada2b9787b7d4f691554c362a2ff5c3de582d1be9", 0xa0}], 0x4, &(0x7f0000001180)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r4}}}, @rights={{0x24, 0x1, 0x1, [r0, r5, r0, r0, r0]}}], 0x48, 0x1}}, {{&(0x7f0000001200)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000001340)=[{&(0x7f0000001280)="77818948b96a51479a9b93c1a781bd56adcab0effbc31e4e210078f5c47e0d1b6f5073c65c585fed33899841a7364b229b163f688ccad409bfafd724c8da30f10f4468f8460eea253aa688960619b3af076e76dbb7bbb82cf3dbbd7f09bb", 0x5e}, {&(0x7f0000001300)="44a5e9d31cde20", 0x7}], 0x2, &(0x7f0000001380)=[@rights={{0x18, 0x1, 0x1, [r1, r1]}}, @rights={{0x20, 0x1, 0x1, [r0, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r6, 0xee01, r7}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x70}}, {{&(0x7f0000001400)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001500)=[{&(0x7f0000001480)="5ff6ec780db2c88f9d3c4e621173cca4b9721eb1ad04968d8c50219141185fbe3ab3e92c4f872625c730531a0ae8a72f87c4796b4d6fd15d65c7a16cf90e7576616149f1da544cc0171e7c6d0f544950c95712206edaa90846bf1e96bfaaa15d0291ad891aba7302b50432fe3311", 0x6e}], 0x1, &(0x7f0000001640)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r8, 0x0, r12}}}, @rights={{0x24, 0x1, 0x1, [r0, r1, r1, r1, r0]}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {r13, r14, r15}}}, @rights={{0x10}}], 0xa8, 0x20000890}}], 0x3, 0x0) r16 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r16, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x9, 0x20}, 0xc) 1.880523581s ago: executing program 3 (id=6485): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x30, 0x180}], 0x1, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r1, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000040)=0x44f3, 0x4) recvmmsg(r1, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x4, 0x280, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'lo\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) sendto$inet(r2, &(0x7f0000000080)="1234", 0x4, 0x0, &(0x7f0000000200)={0x2, 0x1234, @loopback}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9) r3 = dup(r0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x8, 0x399}) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e25, 0x0, @loopback}, 0x1c) r5 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f00000000c0)=0x408a, 0x4) sendmmsg(r5, &(0x7f0000000bc0)=[{{&(0x7f0000000400)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e38100", 0xe}], 0x1}}], 0x1, 0x24044015) setsockopt$sock_int(r5, 0x1, 0x29, &(0x7f0000000000)=0x4, 0x4) recvmmsg(r5, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2002, 0x0) set_mempolicy(0x4, &(0x7f0000000000)=0xffffffffffffff7f, 0x5) io_uring_enter(r4, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x403, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x1220, 0x76120}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6=r7}]}}}]}, 0x38}, 0x1, 0xba01}, 0x0) r8 = syz_usb_connect$hid(0x8, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x4b3, 0x3108, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0xd0, 0x2, "", [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x1, 0x1, 0x3, {0x9, 0x21, 0xec8, 0x3, 0x1, {0x22, 0x897}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x8, 0x8, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x2, 0x7, 0x2}}]}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0x80, 0x3a, 0x7f, 0xff, 0x6}, 0x19, &(0x7f00000001c0)=ANY=[@ANYBLOB="050f19000403100b07103f0b00"/25], 0x4, [{0xe6, &(0x7f00000002c0)=@string={0xe6, 0x3, "0a127289ebaeb96e09cb6435e973f25eb027c4c15d8997e5450791a4f018d65db58ab312481321d8814a2a382ac9ab70aa3c2a9aad79034a6c97eceaf542ad2a826fc3347658374f6672285af9f0f5d8ffff03c34fe04568d0ef132996f60af92c60cf01bb2cf5aafeaaad739a9b8b89cca4b82869f28efe047f5246734cd1ad59086dd56b3628c1a219e7593008775a0efbe412ca0e266940b7eaa960a435da5a0499a656fdae0a72a21928b3f31bdc760bb5a03c9ad0ed4f480c9357f3c5186204b060734eb68f2f3e4b1ffcb0897117969901ef79a989995596989f7b7fb70a4d8e30"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x44b}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x1c09}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0xf8ff}}]}) syz_usb_control_io$hid(r8, &(0x7f0000000680)={0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="400e9b0000009b0ec125d2160eefaac6efb701d37671da9c414ae3c6500707972fe43a1d02569c46337d5fdd970d0545bc1a11186786983bdffd8f42195e350c5faa3170db1fd07c941ab6065cb1101a18a4868fe8c06a7e9aa59ddf2ca7f27d78fac56bf7c48c7294dea87f1b1184ca6a74fa64faf4a52083a5b0d3da2e35474d4f160502d2f5c1dc8f22bd9004eadf64450200"/161], &(0x7f00000008c0)={0x0, 0x3, 0x4, @string={0x0, 0x3, "efb21f00011b49ef89bfa1ebd7d65c76e7197fc3b8d9f9a26cea8acc57dc82ca66ddbf16e249ae893feab3fd832a641dc3ecb72adc72f8d9819ef64cc28462313cff5dd916205765149a208805bad9fc76c0d17ed9334301d6c41c7cbc37af4328d438a120c8265334b89c1b4618155e55bce4c1ab58870cabbe2f8c58c5e5cdceee07078821209b745dd2fd05328cbd78bf21e76aef9e2e4ce9b42eefa8cc72ae7b9b42bc2be28b4c47a6fd368bb4efad164b86cf19860b2ba9f4c1e0bd8c984a4c2d18aa97e34da6fa3256fbf4dcd08eb3409bf9"}}, &(0x7f0000000600)={0x0, 0x22, 0x1b, {[@global=@item_4={0x3, 0x1, 0x8, "48e8f70b"}, @local=@item_4={0x3, 0x2, 0x5, "d15d7ab7"}, @main=@item_4={0x3, 0x0, 0x8, "17922caf"}, @local=@item_4={0x3, 0x2, 0xa, "ff8c0a84"}, @main=@item_012={0x2, 0x0, 0x9, "ae7b"}, @global=@item_012={0x2, 0x1, 0x9, '[v'}, @local=@item_012={0x0, 0x2, 0xa}]}}, &(0x7f0000000640)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x5, 0x1, {0x22, 0xee6}}}}, &(0x7f0000000880)={0xfffffffffffffe15, &(0x7f00000006c0)={0x20, 0x12, 0x8c, "e4d743ca574c2bc7e5249833c470c9eb13ef935f72633adc47501382f04ce57e52b13f600540ade6e911fb5388ec899cfb37b30d0ee39bad2aee239c13b2cf6abda3f9c7ce8aea9ee61a3c46240279c8cc4b51454a0163e0ac2f841dc0c8db2d84787d3fd7ae4a1629d3b846db303a14b024ffa76ea86af03d9dbed070e382d0bfd939792b2d1142024b1789"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000800)={0x20, 0x1, 0x4, "8390045c"}, &(0x7f0000000840)={0x20, 0x3, 0x1, 0x8}}) 1.772451965s ago: executing program 2 (id=6486): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000000000/0x4000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x1c, 0x17, 0x1, 0x70bd26, 0x25dfdbfd, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48c1}, 0x20000010) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30004001) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x20042000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000380)="7d4e38a72b91a8a2fe31bd15270ed20c13c399a994c189a5051934c3c407710db43c5be55098d4cfbf243733c4006a839f21466e98", 0x35}, {0x0}, {0x0}], 0x3, &(0x7f0000000bc0)=ANY=[], 0x118}, 0x10) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x200000005c831, 0xffffffffffffffff, 0x0) 1.725629753s ago: executing program 6 (id=6487): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500002000ffff8110180000000000ce050000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0xfffffee3, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x41000000}, 0xfffffffffffffe4c}, 0x48) 1.520231781s ago: executing program 6 (id=6488): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRES8=r0], 0x7c}}, 0x4000000) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x4, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x8b63bfea1a14a3c7}, 0x16) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x9}}, './file0\x00'}) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@fallback, r2, 0x2f, 0xc, 0x0, @void, @value=r2}, 0x20) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000060a010400000000000000000a0000010900010073797a31000000002c0004802800018008000100666962001c0002800800014000000014080002400000000108000340000000120900020073797a1200000000140000001100010000000000000000000100000a"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 1.410460645s ago: executing program 6 (id=6489): socket(0x2, 0x80805, 0x0) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c040000100001049264fa2f000000000048000043b5acca621ba110f3ed6cca94bb7b68ce74e8ba7cdd20", @ANYRES32=r0, @ANYBLOB="101000000000000008000d0005000000e4031680e00301800c00070000000000adffffff0c00", @ANYRES32=r0, @ANYBLOB="eb91"], 0x40c}}, 0x0) 1.381626022s ago: executing program 5 (id=6490): unshare(0x4000400) (async) r0 = memfd_create(&(0x7f0000001300)='\x00\x00\x00a\x80\xf1q5\xa2+\xbaZ\x8e`\xcd\"\xbfN', 0x4) ftruncate(r0, 0x7000000) r1 = dup(r0) r2 = eventfd2(0x0, 0x0) (async) r3 = syz_io_uring_setup(0xf08, &(0x7f0000000300)={0x0, 0xfffffffe, 0x800, 0x3, 0x800000c3}, &(0x7f0000000580)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) (async) io_uring_enter(r3, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) writev(r2, &(0x7f0000000540)=[{&(0x7f00000002c0)="6eb3ef930c53dea1", 0x8}], 0x1) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001e80), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r7, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x30, 0x29cb346d2c47f15a, @ib={0x1b, 0x2, 0xffffffff, {"e8f5fd72a4d5862e6ca11b44c11d87eb"}, 0x2, 0x8, 0x148}}}, 0xa0) preadv2(r1, &(0x7f0000000740)=[{&(0x7f0000000780)=""/209, 0xd1}], 0x1, 0x3fffe4, 0x0, 0x0) (async) syz_usb_connect(0x3, 0x4a, &(0x7f0000000640)={{0x12, 0x1, 0x200, 0x37, 0xe5, 0xb5, 0x8, 0xb62, 0x59, 0x389c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x38, 0x2, 0x7, 0xb, 0x20, 0x2, "", [{{0x9, 0x4, 0xa2, 0x3, 0x0, 0x46, 0xa1, 0x9f, 0x7}}, {{0x9, 0x4, 0x17, 0x30, 0x3, 0xde, 0x9d, 0xcc, 0x1, [], [{{0x9, 0x5, 0x5, 0x2, 0x3ff, 0x7, 0x58, 0x3, [@generic={0x2, 0x4}]}}, {{0x9, 0x5, 0x1, 0x12, 0x200, 0x2, 0x1, 0xaf}}, {{0x9, 0x5, 0xe, 0x4, 0x8, 0x96, 0x9, 0x8c}}]}}]}}]}}, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000100), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) (async) preadv(r8, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x101}, &(0x7f0000000040)=0x8) accept4(r1, &(0x7f0000000240)=@pppoe, &(0x7f0000000380)=0x80, 0x0) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f0000000080)={0x7866, 0x7398, 0x6, 0x10, 0x7, 0x5, 0x0, 0xfffffff8, r9}, 0x20) 1.249068629s ago: executing program 6 (id=6491): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) close_range(r0, 0xffffffffffffffff, 0x0) 1.064366888s ago: executing program 3 (id=6492): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) close_range(r0, 0xffffffffffffffff, 0x0) 698.173992ms ago: executing program 2 (id=6493): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$KVM_RUN(r0, 0xae80, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000080)={0x4100000000000000, 0x8080000, 0x8, 0x1, 0x17}) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), r1) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000140)={0x338, r3, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PEERS={0x2fc, 0x8, 0x0, 0x1, [{0x2ec, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @loopback}}, @WGPEER_A_ALLOWEDIPS={0x294, 0x9, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x39}}, {0x5, 0x3, 0x2}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3b}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "4b5e103904c587cb118fd3e0e11ca2e15cd8be63e9f58774d119bc776a17d41a"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @empty}}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}]}]}]}, 0x338}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_TIMESTAMP_INFO(r2, 0xc0106440, &(0x7f0000000540)={0x2, 0x6f9, &(0x7f0000000500)}) ioctl$OTPSELECT(r2, 0x80044d0d, &(0x7f0000000580)) recvmsg$can_bcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f00000005c0)=""/106, 0x6a}, {&(0x7f0000000640)=""/34, 0x22}, {&(0x7f0000000680)=""/252, 0xfc}, {&(0x7f0000000780)=""/107, 0x6b}, {&(0x7f0000000800)=""/4096, 0x1000}], 0x5, &(0x7f0000001880)=""/66, 0x42}, 0x2) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000001940)={{0x1, 0x1, 0x18, r0, {0xc2c, 0x61}}, './file0\x00'}) sendto$inet6(r4, &(0x7f0000001980)="f3fad93a3bdae6b05e876d29bd914a8fa51222bbcc42f1ac7e89c8b5a274aada5eedf83cad61cd5f668eb527e7db2550c07c993f2388182fab116b357ac65f6b1b6d73ebda0a1ff23d06350de7c087b3065ea23ea156f1ae1bd0cccca9e02c953329070578e448eb", 0x68, 0x1, &(0x7f0000001a00)={0xa, 0x4e22, 0x2, @private1, 0x3}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000001a40)={{0x1, 0x1, 0x18, r4, {0xfffffffb}}, './file0\x00'}) close(r4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000001a80)=@gcm_256={{0x304}, "2b33345d5a13af58", "716dd6839a86f1b7aed8d68444b20f1800c2a9b641dc8ea9377fd44e7fd34afc", "1c5fe854", "8e531dc2ff7bd170"}, 0x38) setsockopt$inet6_tcp_int(r1, 0x6, 0x1, &(0x7f0000001ac0), 0x4) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000001b00)={0x1e3a, 0x9}) write$binfmt_script(r1, &(0x7f0000001b40)={'#! ', './file0', [{0x20, 'wg0\x00'}, {0x20, '-@\''}, {0x20, 'wireguard\x00'}, {0x20, '\''}, {0x20, ' \x01\x00'}, {}, {0x20, '&-$\\\''}, {0x20, 'wg2\x00'}, {0x20, ' \x01\x00'}], 0xa, "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"}, 0x131) syz_usb_connect(0x4, 0x548, &(0x7f0000001c80)={{0x12, 0x1, 0x250, 0xdd, 0x25, 0xdd, 0x10, 0x4bb, 0x913, 0xacef, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x536, 0x3, 0x7, 0x4, 0x70, 0x2, "", [{{0x9, 0x4, 0x76, 0x0, 0x4, 0x3b, 0x7a, 0x31, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x8, 0x0, 0x6, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x7, 0x800}]}}, {{0x9, 0x5, 0xe, 0xc, 0x400, 0x5, 0x9, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0xfffb}]}}, {{0x9, 0x5, 0x80, 0x10, 0x10, 0x1, 0xa, 0x5, [@generic={0x67, 0x10, "1ef003ebd56b7d9fae01e9592a8541aa7e02aed9a3a885d5bf2d072584b17c8d68211d9175cb4fd0e413b086a2c28e68e0d0ac2b6abb85853c162ce697449507d2e4fa848894859c6780f8e6bc16e84c291ead1eaa85c297632683b97473ed6287261565c8"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x4, 0x4}]}}, {{0x9, 0x5, 0x6, 0x3, 0xbef, 0x8, 0x8, 0x8}}]}}, {{0x9, 0x4, 0x83, 0x5, 0x8, 0x3, 0xd6, 0x2, 0x3, [@generic={0x2a, 0x24, "16c33aaa679287d00681e406260f70b927182bed3fd0bb2c6e5c8bfe20a1989670caf23c19d63d5c"}, @uac_control={{0xa, 0x24, 0x1, 0x28, 0x41}, [@feature_unit={0x9, 0x24, 0x6, 0x4, 0x4, 0x1, [0x0], 0x4}, @processing_unit={0xa, 0x24, 0x7, 0x5, 0x4, 0x81, "cca174"}, @feature_unit={0xb, 0x24, 0x6, 0x3, 0x6, 0x2, [0x8, 0x3], 0x4}, @selector_unit={0xa, 0x24, 0x5, 0x5, 0x8, "7b4321d80b"}, @feature_unit={0xf, 0x24, 0x6, 0x2, 0x2, 0x4, [0x6, 0xa, 0x8, 0x3], 0xf9}]}], [{{0x9, 0x5, 0xb, 0x2, 0x40, 0x7f, 0x2, 0x5, [@generic={0xed, 0x10, "7d9792b257afca4115355006a28fee4d33a33dc243f6ae2ffbe10cee74a1633e7c5df699290dfa4e4f221fd8219f568b4f4b0925e3aad82b8ed3c385bea2a3df720b70f8227d1f72df7cb9c44a80cb03ea42a1cf8f7f81c9c53360061da7e3cb2ca7d433558386d01e011edcda6d69b9c2d11068edc43a8b2ff2a1b7ee4d7cf47994c1900c8181b5f985590b4680cd0b826968e8c763eb3e1d7882fd0dd83dd23b603e0a998ae9b1a640c40d5205b985cfd9768e19c551c48042428196c7247b430e2cd74f4f4dd0851309639e4b6a9676bfc24245d6a0a6172542de0d71a62b4622697cd7988d8187e669"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0x9b, 0x8, 0xe6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0xcb82}]}}, {{0x9, 0x5, 0x0, 0xc, 0x50, 0x2, 0xac, 0x1}}, {{0x9, 0x5, 0xe, 0x8, 0x40, 0x6, 0x6, 0xb}}, {{0x9, 0x5, 0x3, 0x8, 0x400, 0x3, 0xfe}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x4, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x401}]}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x6, 0x2, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x21, 0xfffd}]}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0x9, 0x3d, 0x7b}}]}}, {{0x9, 0x4, 0x4, 0x81, 0x6, 0xc9, 0x14, 0x1, 0x6, [], [{{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x5, 0xd, 0x6}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x6, 0x3, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xff, 0x2}]}}, {{0x9, 0x5, 0xc, 0x10, 0x3ff, 0x8, 0x2, 0xbc, [@generic={0xc6, 0x35, "d9ebf4a67e71f3e37fae8588ee81b7312a1a69d1895f17d6e29fc5094878de4d1f3888169aac10aa9276d96d3850198901279ae99160af001e352240dbe745e3147f171fb378db3bc8ab3d47b725559698dae079ab25714a47794455fc3b9808ff344ffe1230cf7f491d9a7572ebd80382c3d91c3b5fe3746143207ef69af487d9aa15ddb162a8abbf552fc5c0cbcb939376bcdace010cce259b54537667d095d500c898c204683d4f31201128fe7ce9e5966b989f7a35b07123c565ffeab4113fd21f08"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x5}]}}, {{0x9, 0x5, 0x0, 0x1, 0x20, 0xe, 0x26, 0x40, [@generic={0xaf, 0x5, "5f7e2733d7f24bdaf6da1e67dba7662e5984212315f9ea22b1d3ff8ce543a946c662cad32f0e2ac65695b3771b61f10cf670fd2ec43316b838b86ba0bfcbcce7c65fd343c4636f9c4121368a4403f0e2e61537af2ec6e28999deb0f2f7a0fe700590991b3e78447196a0bad3df63309e4552c311cd3b5eb1991537c43cf7426e73b41bfe7c6c36d738f434ad939a4e69fa4bd46e5629a480f83fb0df7ec19a2635fced2c932a1a441a812a5ccc"}]}}, {{0x9, 0x5, 0x0, 0x2, 0x20, 0x99, 0xe, 0xfa, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x1}, @generic={0x52, 0x11, "954ce7d12d57a8ab5392e009b4343efb5e613cf7a40f99d7756ce1966e101ef5ec03ac8942e2fc04ef81b91158d6a1a11ca152ff6bb32931d72cdc34187c47c8144937dd65cbf821a01acc8cf9efc1a1"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0xe6, 0x8, 0x7, [@generic={0x9d, 0x3, "cd7d3f5c21e5db1facf68e7f1ad26fa25edb672a19ebb545cf644f9a3bf01b5b963ab0afe3d4e78ab947e1ec6b18056e5e712185945d93b8838c3a27bcb43a3e249818f329baba8a45647db413812ac2f525942c4fcd17130bdd3bd43a7706e5853a4dca1df03fca99efcfad0ffbcb17c37ea58b2d52b0ffeab60ed1f0b484b45795bb6fd507c70fa63c1a34a93a26a429e56fd393792aaec7a551"}, @uac_iso={0x7, 0x25, 0x1, 0x6, 0x6, 0x7}]}}]}}]}}]}}, &(0x7f0000002440)={0xa, &(0x7f0000002200)={0xa, 0x6, 0x141, 0x0, 0x80, 0x3, 0x40, 0x5}, 0xc, &(0x7f0000002240)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x2, 0x7, 0x6}]}, 0x5, [{0xd2, &(0x7f0000002280)=@string={0xd2, 0x3, "b251a17dcb42658f21e60ec161ae29fd36f9f48edf457bddc23b40617d5f6f07d3944ea5516fafa1cf50191b24b1cf87a2af7fa8acc9974d759f99c3ea568297c3d702480aebc9b82a90d5fd98f28bc59c5996e0680cb2fdb5595da14ca176d5b87f9a7112071433ae3d4d0bce2a7b31a34fb7b3531ec8a01af9358b7d28195805ac96469aee97a1ee45a22a46c7d3556bbfaa0fcca0600bc4939ea531d1e36d67f6e60d612fd97673b3217871ecf2deca678b48a0b28d4828976d2c43f2b0643fa6d3756397885373cff553cffafd55"}}, {0x4, &(0x7f0000002380)=@lang_id={0x4, 0x3, 0x42d}}, {0x0, 0xfffffffffffffffd}, {0x30, &(0x7f00000023c0)=@string={0x30, 0x3, "512e74a3a903d253f1cde98cb78bef4d077e4074af0be1ea0ae93870702f41837ce6c48a1e1ebe4b8113c1dc6906"}}, {0x4, &(0x7f0000002400)=@lang_id={0x4, 0x3, 0x1c01}}]}) r6 = syz_open_dev$video(&(0x7f00000024c0), 0x3, 0x121000) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r6, 0xf507, 0x0) clock_gettime(0x0, &(0x7f0000002540)={0x0, 0x0}) epoll_pwait2(r2, &(0x7f0000002500)=[{}, {}, {}, {}, {}], 0x5, &(0x7f0000002580)={r7, r8+60000000}, &(0x7f00000025c0)={[0x7]}, 0x8) sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f00000026c0)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002680)={&(0x7f0000002640)={0x34, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040804}, 0x4000000) ioctl$OTPSELECT(r0, 0x80044d0d, &(0x7f0000002700)=0x1) r9 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000002740), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f0000002780)={0x7, 0x1, 0x2, 0x0, 0x2}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002800), r2) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000002840)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r10, &(0x7f0000002900)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000028c0)={&(0x7f0000002880)={0x2c, r11, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x5, 0x2d}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2040010}, 0x4008001) 339.547222ms ago: executing program 6 (id=6494): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 172.128596ms ago: executing program 6 (id=6495): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0xa) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl2\x00', r2, 0x29, 0x4, 0x3, 0xcbf, 0x2e, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x20, 0x8, 0x101, 0x7}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000780)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', r3, 0x29, 0x84, 0x4, 0x4038a0b, 0x11, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2={0xff, 0x5}, 0x20, 0x0, 0x0, 0x4}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e24, 0x3, @loopback, 0x101}}, 0x0, 0x0, 0x48, 0x0, "8e4ed5b6cd6e3a3be2da5590ede383d2d7ac8deb4a44299f9f0cf768192aed7631289c5d29a3aa7c5c772f383a909e691eb2eddd4322253d1e303a96c995b3e2189cf625a0720ad0fdf0917e7d9e57d5"}, 0xd8) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "0000000000000208", "5171bb74cd3660dab9e200", "d8a024e5", "20000926000200"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000001840), 0x4) syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c0009050202000202000009058202"], 0x0) 143.980892ms ago: executing program 3 (id=6496): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x1000, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl(r1, 0x4038ae7a, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00@\x00'/56) ioctl(r1, 0x400caed0, &(0x7f0000000500)="0100000000000000ffffffff") 83.696765ms ago: executing program 2 (id=6497): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000240)="aa02b3d08e7f1e7bedd880518790c73788a1284eca25a235163b0a967d5f08b2078003dfbbfe730f7e54d7dc67cb5fdf01a7746decbb94a650b313e6b42e5061fd79d759dfe4448387e3321a09d99287"}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r2, 0xffffffffffffffff, 0x1f, 0x0, @void}, 0x10) dup3(r1, r0, 0x80000) r3 = syz_open_dev$vim2m(&(0x7f0000000240), 0x1, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000280)={0x800, 0x34325852, 0x2, @stepwise={0x8000, 0x5, 0x9, 0x4, 0x400, 0x1}}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000000740)=[@request_death={0x400c630e, 0x4}], 0x0, 0x0, 0x0}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = syz_open_pts(r4, 0x3) ioctl$TIOCGPTPEER(r5, 0x5441, 0x5) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) futex(0x0, 0x100, 0x1, 0x0, 0x0, 0x1) lseek(r6, 0x851, 0x0) 0s ago: executing program 5 (id=6498): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080008000000000000000000"], 0x1c}}, 0x8050) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000440)={0xa, 0x8, 0xa}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) unshare(0x28000600) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$XFS_IOC_FSGROWFSRT(0xffffffffffffffff, 0x40105870, &(0x7f0000000140)={0xffffffff00000001, 0x375}) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) syz_usb_disconnect(r4) syz_usb_connect$printer(0x4, 0x2d, &(0x7f00000010c0)=ANY=[], 0x0) setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000d00)="1c0382e8d168cfb3e0282ef00f298de336fe581936d83a29beae07b4f989bb4aa7662e815fafa341b42a6387abdece22515ef873c5fefe5d159e19a636418eb11b8e91f157f8da10305a8aff0b9bf445ecfb1ab3468801aa545bfc775a113638f34600eb046841b35babb14e0c4b0c82a51bb07aa4e01ee7ba62a2616a256018948420e0902a9257425f1983169714abc2723f5dbaed77c24c331aee2fd206b14e388fbcf7bbbde174f5d4053a3f670c1cd5372660f8fa149d83a07d69e83ecb146d9abb6667982d02da1995a1fe9c9752c3195ef370b1cd99dd0b28759e374d48d9235cd6c093c158d468aef800da44e3111a60b322385461ac76f2af62b3b9ca10d2f9db492624abd75e3032beb67efd1ef13cf8fa5ddbc2944260a6472b7611f448be56cb2faedc7f8c472953221f0bba8ca726c1febddfefe238ec437749acbbd401541f9eabec18c8084326fd7373c56497a08718b5bbf8bdebecda3e478575c61ca9ef9c06e396f602d90eb6fe059a9665673fd2b9f6ef4b294eb13f5aa9f19b252c39420c2be9b16b76d18596a4d06ae5c5b93129b4368a072245357e7e2f5826a1f8677237f2a8e8e3d08145a31a284cca6aa0840df5a885e33a8b01a8d45af73a78bfadfd42b1350e220f9986c0089f130da449a6a4197d951298883c6e29a9cb2484d730ea42a34c3e78679d023f3ec726b031365815400e10ce5fb0162fb7458bbfc12c620292ea6b209ab220a00109a9dbefa433c98b1db80ada5d463133d915d16566c41d5bc4d526d928fa6d37583c1a147a5d671021e8c220a60eec4d6f450d806cdb35dd852be527057c7b0195d5f496acab5272afde761a77f5ad35ff6f3bf8dde9e9cd1479be7446dd8efdf4e3195bb5eb4af08c94595d65341cf5150b8187e35976f6081cd490b8a26560232b9658aa458fe8ac0582a12535c1c1de9fc961843f3596a2178b217a99e29eafa2a3bccd336902f91a08748ba4062cb40c1dfc30bf43b4d1efbc301c584effd758607a10a0a31c5a6e3aa31ea7a098caa664e7a9bf273015a9be5afb7ccce49643e7d10b4ad9727652f0c79f2cbe36fa840824270b5e5080751deb34e83c8fb03f9f5c44cde06b7b283635084cdb0769a2d7ddcabec96a89ba4f5d9d77a425a48ae26b4271ed92fafb236fb24b5644f7ebfe72e9e30b5f11fc2ca531c16fa06fa7996e2de2cee44039e4b038d775574abcf99f6d0adb8531655d74386832a52f5d4bfe8c1f4a8f143fefd0688e9be5c82492f6da41337443aeb46518f1db43b713c86076c69163398066804c8ca3b980c2d78370724ed20ea978f56689cc6248f755855a422a2271e15e109641b68b8e4ca98752c4364211af180d0f22096e6c87c513eb7ce99165114a6622b87e7b381a658b63c10b1aede005df73888d6551fccf191d34c64a764a283d8954a36ddcfeb51ec3b332bc42f79894e1c87989a19a09161acf90418a0c76c5c08fdf770870ed9c9ff602ee8d8ac1bdf510ecef150dec7d82e43c5f7c22428cccc7206f4929621356851539d17362c171f2891e6ba71d34cbfe231a6fdf5bddbc6079b42b2f69c6d12f75b84f60d396d0d8d97f0126ab9ed33796f83d3c40baba699c0bbb01c2b2c2a97b0e653a1917cbd6c5f421e2380c534152545c05cf5a73043f4b88c494353caca4178e1fa86bfdc78e398f7459832ec3e5fdb184c4f0eb13bfccd284ef336f440f3e9b3055a5ed253eaa6fa7a75e729db4c2d76a0d7d412c181f79ed0ea96c6273f1ae39a102088718a1a6cf720fd1f3aab81f6f812a1435496c051b5e545853ca6961016ca2d66bf252107fba82512db52cd64a6c2438e8f42d96be963ad55d836231473c931e0f8eb6cf69eafd3d43125d5cc82ee06596a9b79579f5953caa1451093b7c3e0898abb7b230fa6d5d2ff78b8cc23a02ee302983a273cc443f294ea38f8ccb90c5f9f029f4ca8cae93b19bf1e18695dce3abe04222d804765d9da11fb38d99dd315f8f41969e6c0524b03c750a88aacc63221bbde01f5521f05fa1635189ab001ce3a4aff22233c1170a90e45072cfe043731ed8f58914c78e0a4817630ef9fc591eb9ee291d827c53b9d4247e8b00be34890a07cf029d829fa511f8718bd0256f1d6fcf32424e856ffec5ad7214baee8fac4198647d53e3821fc5b8629865e7b4e19792635ba1b99682753c4ac01202e38cf7809eb9070d46876fc7dbef577c47425660b45bd282b7beefe9737bae5f4b9c8ac7d135f54ebf495dff3d62a7a168f2fcfbb3659313c903f48a9b31780692ab0588b5684fbd2090ec398325561cca67baca1eac89e614d06ad9b006528b1fa570f89ae2672ba4969f297ba2448beccf9af5500f55865a99fc1d41f61966a551cfd86af8b1c38a39e90ee86c491bbeed408665fe54201f13791143ac6668609598d0df5ce804f18dc3e04524099fb91df320ffa128e8fe24028654a3c8b366f62975f0ecd04526cec8395f97a3cc94fa7e2ce9070ff1c4f1fa6efd40e6432aaf69f894c7778b31131553cc1a80b7b51de6d10dbd0182a7681c773d268851fb73ae6a16528e11fda6c1116ca065ff2822376728461779abfb4a4731e96d99a95f61cf4ec3053ee42ab09d23157eb6e7643e31974445c64169027c6fbe8cbcd7b25f011712b9eb66946c558c07d44f7185fe150870eaa0ead6", 0x77a, 0x0) ioctl$EVIOCRMFF(r4, 0x4004550a, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}}, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) keyctl$set_reqkey_keyring(0x10, 0xfffffff8) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) kernel console output (not intermixed with test programs): 1: new high-speed USB device number 96 using dummy_hcd [ 1353.369642][T25915] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6054'. [ 1353.433963][ T9] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1353.514517][T10175] usb 3-1: New USB device found, idVendor=0421, idProduct=01d4, bcdDevice=e9.15 [ 1353.515738][T10175] usb 3-1: config 11 has an invalid interface number: 104 but max is 0 [ 1353.515765][T10175] usb 3-1: config 11 has no interface number 0 [ 1353.515812][T10175] usb 3-1: config 11 interface 104 has no altsetting 0 [ 1353.530379][T10175] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1353.530400][T10175] usb 3-1: Product: syz [ 1353.530411][T10175] usb 3-1: Manufacturer: syz [ 1353.530423][T10175] usb 3-1: SerialNumber: syz [ 1353.603744][ T9] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1353.605127][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1353.630869][ T9] usb 4-1: config 0 descriptor?? [ 1353.792977][T10175] rndis_host 3-1:11.104: invalid descriptor buffer length [ 1353.792997][T10175] rndis_host 3-1:11.104: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 1353.815058][T10175] cdc_acm 3-1:11.104: invalid descriptor buffer length [ 1353.846501][T10175] usb 3-1: USB disconnect, device number 96 [ 1353.860212][ T9] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1354.080779][T25921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1354.113846][ T9] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 1354.113868][ T9] [drm] Initialized udl on minor 1 [ 1354.258623][T25913] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.6052'. [ 1354.269774][T25913] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6052'. [ 1354.406614][T25913] hfs: unable to load iocharset "io#harset" [ 1355.361583][T10171] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1355.521382][T10171] usb 3-1: Using ep0 maxpacket: 16 [ 1355.525105][T10171] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1355.525187][T10171] usb 3-1: New USB device found, idVendor=093a, idProduct=260e, bcdDevice=18.85 [ 1355.527128][T10171] usb 3-1: config 1 has an invalid interface number: 151 but max is 0 [ 1355.527157][T10171] usb 3-1: config 1 has no interface number 0 [ 1355.527189][T10171] usb 3-1: config 1 interface 151 has no altsetting 0 [ 1355.582296][T10171] usb 3-1: string descriptor 0 read error: -22 [ 1355.582488][T10171] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1355.601941][T25936] Cannot find set identified by id 1 to match [ 1355.618473][T10171] gspca_main: pac7311-2.14.0 probing 093a:260e [ 1356.003332][T25945] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 1356.003365][T25945] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1356.005329][T25945] vhci_hcd vhci_hcd.0: Device attached [ 1356.027747][T25927] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6058'. [ 1356.046784][T10171] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -71 [ 1356.046916][T10171] pac7311 3-1:1.151: probe with driver pac7311 failed with error -71 [ 1356.049746][T10171] usb 3-1: USB disconnect, device number 97 [ 1356.181343][ T5751] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 1356.241311][ T5751] usb 47-1: new full-speed USB device number 2 using vhci_hcd [ 1356.736608][T25946] vhci_hcd: connection reset by peer [ 1356.737082][ T1016] vhci_hcd vhci_hcd.7: stop threads [ 1356.737109][ T1016] vhci_hcd vhci_hcd.7: release socket [ 1356.737258][ T1016] vhci_hcd vhci_hcd.7: disconnect device [ 1356.813618][T25957] batman_adv: batadv0: Adding interface: netdevsim0 [ 1356.813640][T25957] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1356.813671][T25957] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 1356.870668][ T31] kauditd_printk_skb: 93 callbacks suppressed [ 1356.870690][ T31] audit: type=1326 audit(1790230534.169:20055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25958 comm="syz.5.6070" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cce59e159 code=0x7ffc0000 [ 1356.870776][ T31] audit: type=1326 audit(1790230534.169:20056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25958 comm="syz.5.6070" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cce59e159 code=0x7ffc0000 [ 1356.902369][ T31] audit: type=1326 audit(1790230534.179:20057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25958 comm="syz.5.6070" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4cce59e159 code=0x7ffc0000 [ 1356.902463][ T31] audit: type=1326 audit(1790230534.179:20058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25958 comm="syz.5.6070" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cce59e159 code=0x7ffc0000 [ 1356.902514][ T31] audit: type=1326 audit(1790230534.179:20059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25958 comm="syz.5.6070" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cce59e159 code=0x7ffc0000 [ 1356.902590][ T31] audit: type=1326 audit(1790230534.179:20060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25958 comm="syz.5.6070" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4cce59e159 code=0x7ffc0000 [ 1356.902642][ T31] audit: type=1326 audit(1790230534.179:20061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25958 comm="syz.5.6070" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cce59e159 code=0x7ffc0000 [ 1356.902690][ T31] audit: type=1326 audit(1790230534.179:20062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25958 comm="syz.5.6070" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cce59e159 code=0x7ffc0000 [ 1356.902765][ T31] audit: type=1326 audit(1790230534.179:20063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25958 comm="syz.5.6070" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4cce59e159 code=0x7ffc0000 [ 1356.902813][ T31] audit: type=1326 audit(1790230534.179:20064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25958 comm="syz.5.6070" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cce59e159 code=0x7ffc0000 [ 1357.572124][T11867] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1357.743214][T11867] usb 3-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 1357.745668][T11867] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1357.745817][T11867] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1357.745844][T11867] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1357.750608][T11867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1357.750636][T11867] usb 3-1: Product: syz [ 1357.750681][T11867] usb 3-1: Manufacturer: syz [ 1357.750698][T11867] usb 3-1: SerialNumber: syz [ 1357.839252][T11867] usb-storage 3-1:1.0: USB Mass Storage device detected [ 1357.868053][T11867] usb-storage 3-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 1357.868714][T11867] scsi host1: usb-storage 3-1:1.0 [ 1358.202136][T25989] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1358.385660][T11867] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 1358.408370][T25990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1358.408845][T25990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1358.541267][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1358.560593][T11867] usb 6-1: Using ep0 maxpacket: 16 [ 1358.570890][T11867] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1358.570986][T11867] usb 6-1: New USB device found, idVendor=093a, idProduct=260e, bcdDevice=18.85 [ 1358.589534][T11867] usb 6-1: config 1 has an invalid interface number: 151 but max is 0 [ 1358.589564][T11867] usb 6-1: config 1 has no interface number 0 [ 1358.589595][T11867] usb 6-1: config 1 interface 151 has no altsetting 0 [ 1358.618749][T11867] usb 6-1: string descriptor 0 read error: -22 [ 1358.618909][T11867] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1358.646413][T11867] gspca_main: pac7311-2.14.0 probing 093a:260e [ 1359.058070][T25987] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6079'. [ 1359.072789][T11867] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -71 [ 1359.072920][T11867] pac7311 6-1:1.151: probe with driver pac7311 failed with error -71 [ 1359.104827][T11867] usb 6-1: USB disconnect, device number 123 [ 1359.172649][T26000] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6083'. [ 1359.190981][ T9] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 1359.192832][ T9] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1359.200678][ T9] usb 4-1: USB disconnect, device number 69 [ 1359.224064][T10175] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1359.239210][T10175] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1359.344661][T26002] xt_policy: output policy not valid in PREROUTING and INPUT [ 1359.515955][ T4982] loop0: [ 1359.515995][ T4982] loop0: partition table partially beyond EOD, truncated [ 1359.901352][T25012] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 1360.051219][T25012] usb 6-1: Using ep0 maxpacket: 32 [ 1360.268002][T26013] ip6tnl1: entered allmulticast mode [ 1360.276969][T25012] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1360.277026][T25012] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1360.278266][T25012] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1360.278303][T25012] usb 6-1: can't read configurations, error -71 [ 1360.409895][ T9] usb 3-1: USB disconnect, device number 98 [ 1360.560537][T26021] vlan2: entered allmulticast mode [ 1360.560561][T26021] bond0: entered allmulticast mode [ 1360.560577][T26021] bond_slave_0: entered allmulticast mode [ 1360.560595][T26021] bond_slave_1: entered allmulticast mode [ 1360.833234][T11867] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1360.981229][T11867] usb 4-1: Using ep0 maxpacket: 32 [ 1360.982615][T11867] usb 4-1: New USB device found, idVendor=06cd, idProduct=0104, bcdDevice=35.09 [ 1360.984232][T11867] usb 4-1: config 2 has an invalid interface number: 51 but max is 0 [ 1360.984260][T11867] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1360.984287][T11867] usb 4-1: config 2 has no interface number 0 [ 1360.984330][T11867] usb 4-1: config 2 interface 51 altsetting 255 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1360.984357][T11867] usb 4-1: config 2 interface 51 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 1360.984380][T11867] usb 4-1: config 2 interface 51 altsetting 255 has a duplicate endpoint with address 0xE, skipping [ 1360.984405][T11867] usb 4-1: config 2 interface 51 altsetting 255 has a duplicate endpoint with address 0xE, skipping [ 1360.984431][T11867] usb 4-1: config 2 interface 51 altsetting 255 has 8 endpoint descriptors, different from the interface descriptor's value: 14 [ 1360.984459][T11867] usb 4-1: config 2 interface 51 has no altsetting 0 [ 1360.987401][T11867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1360.987429][T11867] usb 4-1: Product: syz [ 1360.987446][T11867] usb 4-1: Manufacturer: syz [ 1360.987463][T11867] usb 4-1: SerialNumber: syz [ 1361.097961][T26021] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1361.331270][ T5751] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 1361.533157][T26035] loop4: detected capacity change from 0 to 7 [ 1361.534253][T26035] Dev loop4: unable to read RDB block 7 [ 1361.534285][T26035] loop4: unable to read partition table [ 1361.534512][T26035] loop4: partition table beyond EOD, truncated [ 1361.534544][T26035] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1361.747298][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.747362][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.765330][T26040] netlink: 'syz.2.6097': attribute type 1 has an invalid length. [ 1361.800158][T26040] bond1: entered promiscuous mode [ 1361.800580][T26040] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1361.961190][T10185] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 1362.101277][ T25] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1362.111446][T10185] usb 6-1: Using ep0 maxpacket: 16 [ 1362.121613][T10185] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1362.121771][T10185] usb 6-1: New USB device found, idVendor=093a, idProduct=260e, bcdDevice=18.85 [ 1362.126219][T10185] usb 6-1: config 1 has an invalid interface number: 151 but max is 0 [ 1362.126285][T10185] usb 6-1: config 1 has no interface number 0 [ 1362.126366][T10185] usb 6-1: config 1 interface 151 has no altsetting 0 [ 1362.136011][T10185] usb 6-1: string descriptor 0 read error: -22 [ 1362.136381][T10185] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1362.155315][T10185] gspca_main: pac7311-2.14.0 probing 093a:260e [ 1362.274037][ T25] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1362.274099][ T25] usb 3-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 1362.275641][ T25] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 1362.275691][ T25] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 1362.278595][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1362.278621][ T25] usb 3-1: Product: syz [ 1362.278668][ T25] usb 3-1: Manufacturer: syz [ 1362.278684][ T25] usb 3-1: SerialNumber: syz [ 1362.575461][T26039] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6098'. [ 1362.580645][T10185] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -71 [ 1362.580770][T10185] pac7311 6-1:1.151: probe with driver pac7311 failed with error -71 [ 1362.617535][T10185] usb 6-1: USB disconnect, device number 126 [ 1363.058499][ T25] usb 3-1: unit 4 not found! [ 1363.333478][ T25] usb 3-1: USB disconnect, device number 99 [ 1363.410128][ T5754] udevd[5754]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1363.608144][T11867] keyspan_pda 4-1:2.51: required endpoints missing [ 1363.635035][T11867] usb 4-1: USB disconnect, device number 70 [ 1363.714152][T26065] FAULT_INJECTION: forcing a failure. [ 1363.714152][T26065] name failslab, interval 1, probability 0, space 0, times 0 [ 1363.714181][T26065] CPU: 1 UID: 0 PID: 26065 Comm: syz.3.6105 Tainted: G L syzkaller #0 PREEMPT(full) [ 1363.714209][T26065] Tainted: [L]=SOFTLOCKUP [ 1363.714218][T26065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1363.714236][T26065] Call Trace: [ 1363.714242][T26065] [ 1363.714249][T26065] dump_stack_lvl+0xe8/0x150 [ 1363.714278][T26065] should_fail_ex+0x410/0x560 [ 1363.714302][T26065] should_failslab+0xa8/0x100 [ 1363.714324][T26065] __kmalloc_cache_noprof+0xa3/0x600 [ 1363.714342][T26065] ? br_vlan_init+0x54/0x1b0 [ 1363.714479][T26065] ? br_vlan_init+0x54/0x1b0 [ 1363.714505][T26065] br_vlan_init+0x54/0x1b0 [ 1363.714529][T26065] br_dev_init+0x65/0x490 [ 1363.714550][T26065] register_netdevice+0x6a1/0x1eb0 [ 1363.714578][T26065] ? trace_kmalloc+0x2a/0xf0 [ 1363.714594][T26065] ? alloc_netdev_mqs+0xd44/0x12a0 [ 1363.714610][T26065] ? __kvmalloc_node_noprof+0x52f/0x820 [ 1363.714631][T26065] ? __pfx_register_netdevice+0x10/0x10 [ 1363.714661][T26065] ? validate_linkmsg+0x765/0x950 [ 1363.714684][T26065] br_dev_newlink+0x6a/0x150 [ 1363.714704][T26065] ? rtnl_newlink_create+0x2f2/0x7b0 [ 1363.714728][T26065] ? __pfx_br_dev_newlink+0x10/0x10 [ 1363.714752][T26065] rtnl_newlink_create+0x305/0x7b0 [ 1363.714782][T26065] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1363.714808][T26065] ? __pfx___mutex_lock+0x10/0x10 [ 1363.714838][T26065] ? ns_capable+0x89/0xe0 [ 1363.714863][T26065] rtnl_newlink+0x166d/0x1c30 [ 1363.714896][T26065] ? __pfx_rtnl_newlink+0x10/0x10 [ 1363.714916][T26065] ? do_syscall_64+0x166/0x520 [ 1363.714936][T26065] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1363.714980][T26065] ? kasan_quarantine_put+0xbb/0x1f0 [ 1363.714997][T26065] ? lockdep_hardirqs_on+0x7b/0x110 [ 1363.715020][T26065] ? nlmon_xmit+0xb0/0x100 [ 1363.715038][T26065] ? kmem_cache_free+0x182/0x650 [ 1363.715063][T26065] ? __lock_acquire+0x747/0x2de0 [ 1363.715089][T26065] ? __local_bh_enable_ip+0xd6/0x140 [ 1363.715125][T26065] ? lockdep_hardirqs_on+0x7b/0x110 [ 1363.715145][T26065] ? __dev_queue_xmit+0x29b/0x3820 [ 1363.715170][T26065] ? __local_bh_enable_ip+0xd6/0x140 [ 1363.715191][T26065] ? __dev_queue_xmit+0x29b/0x3820 [ 1363.715222][T26065] ? lock_acquire+0x115/0x350 [ 1363.715254][T26065] ? __pfx_rtnl_newlink+0x10/0x10 [ 1363.715274][T26065] rtnetlink_rcv_msg+0x802/0xc00 [ 1363.715298][T26065] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1363.715319][T26065] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1363.715338][T26065] ? ref_tracker_free+0x689/0x830 [ 1363.715361][T26065] ? __pfx_ref_tracker_free+0x10/0x10 [ 1363.715389][T26065] netlink_rcv_skb+0x226/0x4a0 [ 1363.715415][T26065] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1363.715438][T26065] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1363.715472][T26065] ? netlink_deliver_tap+0x2e/0x1b0 [ 1363.715497][T26065] ? netlink_deliver_tap+0x2e/0x1b0 [ 1363.715525][T26065] netlink_unicast+0x7bd/0x940 [ 1363.715557][T26065] netlink_sendmsg+0x813/0xb40 [ 1363.715579][T26065] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1363.715601][T26065] ? apparmor_socket_sendmsg+0x98/0x360 [ 1363.715621][T26065] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1363.715636][T26065] sock_sendmsg_nosec+0x13a/0x180 [ 1363.715655][T26065] ____sys_sendmsg+0x54e/0x850 [ 1363.715682][T26065] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1363.715711][T26065] ? import_iovec+0x73/0xa0 [ 1363.715737][T26065] ___sys_sendmsg+0x2a5/0x360 [ 1363.715759][T26065] ? __lock_acquire+0x747/0x2de0 [ 1363.715779][T26065] ? __pfx____sys_sendmsg+0x10/0x10 [ 1363.715828][T26065] ? __fget_files+0x2a/0x420 [ 1363.715850][T26065] ? __fget_files+0x3a2/0x420 [ 1363.715880][T26065] __x64_sys_sendmsg+0x1b1/0x290 [ 1363.715905][T26065] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1363.715944][T26065] do_syscall_64+0x166/0x520 [ 1363.715963][T26065] ? trace_irq_disable+0x3b/0x140 [ 1363.715979][T26065] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1363.715995][T26065] ? clear_bhb_loop+0x70/0xc0 [ 1363.716015][T26065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1363.716031][T26065] RIP: 0033:0x7f7e1e19e159 [ 1363.716047][T26065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1363.716060][T26065] RSP: 002b:00007f7e1efad028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1363.716077][T26065] RAX: ffffffffffffffda RBX: 00007f7e1e425fa0 RCX: 00007f7e1e19e159 [ 1363.716089][T26065] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1363.716100][T26065] RBP: 00007f7e1efad090 R08: 0000000000000000 R09: 0000000000000000 [ 1363.716110][T26065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1363.716120][T26065] R13: 00007f7e1e426038 R14: 00007f7e1e425fa0 R15: 00007f7e1e54fa48 [ 1363.716145][T26065] [ 1363.801580][ T25] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1363.977190][ T25] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1364.001929][ T25] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1364.001976][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1364.002004][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1364.002028][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1364.014905][ T25] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1364.014986][ T25] usb 3-1: Manufacturer: syz [ 1364.077996][ T25] usb 3-1: config 0 descriptor?? [ 1364.507924][T26072] loop4: detected capacity change from 0 to 7 [ 1364.525295][T26072] Dev loop4: unable to read RDB block 7 [ 1364.525328][T26072] loop4: unable to read partition table [ 1364.525499][T26072] loop4: partition table beyond EOD, truncated [ 1364.525539][T26072] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1364.669576][T26077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1364.669953][T26077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1364.824555][T26076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1364.824866][T26061] netlink: 'syz.2.6103': attribute type 1 has an invalid length. [ 1364.824882][T26061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6103'. [ 1365.553013][ T5751] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 1365.722393][ T5751] usb 6-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 1365.726412][ T5751] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1365.726448][ T5751] usb 6-1: config 0 interface 0 altsetting 12 bulk endpoint 0x6 has invalid maxpacket 255 [ 1365.726468][ T5751] usb 6-1: config 0 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1365.726516][ T5751] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1365.752529][ T5751] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1365.752604][ T5751] usb 6-1: Product: syz [ 1365.752715][ T5751] usb 6-1: Manufacturer: syz [ 1365.752738][ T5751] usb 6-1: SerialNumber: syz [ 1365.816208][ T5751] usb 6-1: config 0 descriptor?? [ 1365.817784][T26085] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1366.479109][ T25] usbhid 3-1:0.0: can't add hid device: -71 [ 1366.479195][ T25] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1366.507262][ T25] usb 3-1: USB disconnect, device number 100 [ 1366.626361][T26089] netlink: 'syz.3.6112': attribute type 5 has an invalid length. [ 1366.646372][T26089] netlink: Unknown conntrack attr (type=262, max=9) [ 1366.646421][T26089] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1366.793759][ T9] usb 6-1: USB disconnect, device number 127 [ 1366.824599][ T4982] loop0: [ 1366.824629][ T4982] loop0: partition table partially beyond EOD, truncated [ 1367.251193][ T25] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1367.381212][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1367.412036][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 1367.413275][ T25] usb 3-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice= e.22 [ 1367.434947][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1367.434978][ T25] usb 3-1: Product: syz [ 1367.434994][ T25] usb 3-1: Manufacturer: syz [ 1367.435011][ T25] usb 3-1: SerialNumber: syz [ 1367.464336][ T25] usb 3-1: config 0 descriptor?? [ 1367.484244][ T25] usb 3-1: selecting invalid altsetting 3 [ 1367.484269][ T25] comedi comedi5: could not set alternate setting 3 in high speed [ 1367.484287][ T25] usbdux 3-1:0.0: driver 'usbdux' failed to auto-configure device. [ 1367.485186][T26110] ip6gre2: entered allmulticast mode [ 1367.503769][ T25] usbdux 3-1:0.0: probe with driver usbdux failed with error -22 [ 1367.542497][T26112] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6120'. [ 1367.562788][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 1367.563529][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1367.567444][ T9] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1367.567503][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1367.567521][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1367.567540][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1367.567557][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1367.567588][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1367.672907][T26101] netlink: 1347 bytes leftover after parsing attributes in process `syz.2.6115'. [ 1367.857265][ T9] usb 6-1: GET_CAPABILITIES returned 0 [ 1367.857302][ T9] usbtmc 6-1:16.0: can't read capabilities [ 1368.110657][T26117] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6119'. [ 1368.110676][T26117] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6119'. [ 1368.133339][ T9] usb 6-1: USB disconnect, device number 2 [ 1368.661625][T23550] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1368.792045][T23550] usb 4-1: device descriptor read/64, error -71 [ 1368.817992][T26131] syzkaller0: entered promiscuous mode [ 1368.818010][T26131] syzkaller0: entered allmulticast mode [ 1369.032177][T23550] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1369.129376][T26136] SET target dimension over the limit! [ 1369.188171][T23550] usb 4-1: device descriptor read/64, error -71 [ 1369.291720][T23550] usb usb4-port1: attempt power cycle [ 1369.641252][T23550] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1369.663113][T23550] usb 4-1: device descriptor read/8, error -71 [ 1369.847331][T26145] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6130'. [ 1369.876281][T26145] input: syz0 as /devices/virtual/input/input112 [ 1369.887501][T26145] netlink: 'syz.6.6130': attribute type 10 has an invalid length. [ 1369.887561][T26145] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6130'. [ 1369.921232][T23550] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1369.931339][ T9] usb 3-1: USB disconnect, device number 101 [ 1369.946941][T23550] usb 4-1: device descriptor read/8, error -71 [ 1370.051612][T23550] usb usb4-port1: unable to enumerate USB device [ 1370.286397][T26156] input: syz0 as /devices/virtual/input/input113 [ 1370.384683][T26159] FAULT_INJECTION: forcing a failure. [ 1370.384683][T26159] name failslab, interval 1, probability 0, space 0, times 0 [ 1370.384711][T26159] CPU: 1 UID: 0 PID: 26159 Comm: syz.2.6135 Tainted: G L syzkaller #0 PREEMPT(full) [ 1370.384740][T26159] Tainted: [L]=SOFTLOCKUP [ 1370.384746][T26159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1370.384756][T26159] Call Trace: [ 1370.384763][T26159] [ 1370.384770][T26159] dump_stack_lvl+0xe8/0x150 [ 1370.384799][T26159] should_fail_ex+0x410/0x560 [ 1370.384823][T26159] should_failslab+0xa8/0x100 [ 1370.384845][T26159] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 1370.384864][T26159] ? kobject_set_name_vargs+0x61/0x110 [ 1370.384947][T26159] ? kobject_set_name_vargs+0x61/0x110 [ 1370.384976][T26159] kstrdup+0x42/0x100 [ 1370.384994][T26159] kobject_set_name_vargs+0x61/0x110 [ 1370.385020][T26159] dev_set_name+0xe2/0x140 [ 1370.385089][T26159] ? __pfx_dev_set_name+0x10/0x10 [ 1370.385114][T26159] ? __init_waitqueue_head+0xa8/0x150 [ 1370.385140][T26159] ? device_initialize+0x394/0x470 [ 1370.385174][T26159] netdev_register_kobject+0xb7/0x350 [ 1370.385220][T26159] register_netdevice+0x1433/0x1eb0 [ 1370.385258][T26159] ? __pfx_register_netdevice+0x10/0x10 [ 1370.385295][T26159] br_dev_newlink+0x6a/0x150 [ 1370.385315][T26159] ? rtnl_newlink_create+0x2f2/0x7b0 [ 1370.385338][T26159] ? __pfx_br_dev_newlink+0x10/0x10 [ 1370.385359][T26159] rtnl_newlink_create+0x305/0x7b0 [ 1370.385388][T26159] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1370.385414][T26159] ? __pfx___mutex_lock+0x10/0x10 [ 1370.385443][T26159] ? ns_capable+0x89/0xe0 [ 1370.385469][T26159] rtnl_newlink+0x166d/0x1c30 [ 1370.385501][T26159] ? __pfx_rtnl_newlink+0x10/0x10 [ 1370.385521][T26159] ? do_syscall_64+0x166/0x520 [ 1370.385540][T26159] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1370.385582][T26159] ? kasan_quarantine_put+0xbb/0x1f0 [ 1370.385598][T26159] ? lockdep_hardirqs_on+0x7b/0x110 [ 1370.385621][T26159] ? nlmon_xmit+0xb0/0x100 [ 1370.385638][T26159] ? kmem_cache_free+0x182/0x650 [ 1370.385663][T26159] ? __lock_acquire+0x747/0x2de0 [ 1370.385686][T26159] ? __local_bh_enable_ip+0xd6/0x140 [ 1370.385707][T26159] ? lockdep_hardirqs_on+0x7b/0x110 [ 1370.385731][T26159] ? __dev_queue_xmit+0x29b/0x3820 [ 1370.385755][T26159] ? __local_bh_enable_ip+0xd6/0x140 [ 1370.385775][T26159] ? __dev_queue_xmit+0x29b/0x3820 [ 1370.385806][T26159] ? lock_acquire+0x115/0x350 [ 1370.385833][T26159] ? __pfx_rtnl_newlink+0x10/0x10 [ 1370.385853][T26159] rtnetlink_rcv_msg+0x802/0xc00 [ 1370.385877][T26159] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1370.385897][T26159] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1370.385917][T26159] ? ref_tracker_free+0x689/0x830 [ 1370.385940][T26159] ? __pfx_ref_tracker_free+0x10/0x10 [ 1370.385968][T26159] netlink_rcv_skb+0x226/0x4a0 [ 1370.385994][T26159] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1370.386017][T26159] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1370.386052][T26159] ? netlink_deliver_tap+0x2e/0x1b0 [ 1370.386078][T26159] ? netlink_deliver_tap+0x2e/0x1b0 [ 1370.386108][T26159] netlink_unicast+0x7bd/0x940 [ 1370.386139][T26159] netlink_sendmsg+0x813/0xb40 [ 1370.386168][T26159] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1370.386190][T26159] ? apparmor_socket_sendmsg+0x98/0x360 [ 1370.386211][T26159] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1370.386227][T26159] sock_sendmsg_nosec+0x13a/0x180 [ 1370.386247][T26159] ____sys_sendmsg+0x54e/0x850 [ 1370.386274][T26159] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1370.386304][T26159] ? import_iovec+0x73/0xa0 [ 1370.386328][T26159] ___sys_sendmsg+0x2a5/0x360 [ 1370.386350][T26159] ? __lock_acquire+0x747/0x2de0 [ 1370.386370][T26159] ? __pfx____sys_sendmsg+0x10/0x10 [ 1370.386419][T26159] ? __fget_files+0x2a/0x420 [ 1370.386441][T26159] ? __fget_files+0x3a2/0x420 [ 1370.386471][T26159] __x64_sys_sendmsg+0x1b1/0x290 [ 1370.386495][T26159] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1370.386534][T26159] do_syscall_64+0x166/0x520 [ 1370.386553][T26159] ? trace_irq_disable+0x3b/0x140 [ 1370.386569][T26159] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1370.386585][T26159] ? clear_bhb_loop+0x70/0xc0 [ 1370.386604][T26159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1370.386620][T26159] RIP: 0033:0x7fba8619e159 [ 1370.386635][T26159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1370.386649][T26159] RSP: 002b:00007fba870e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1370.386666][T26159] RAX: ffffffffffffffda RBX: 00007fba86425fa0 RCX: 00007fba8619e159 [ 1370.386678][T26159] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1370.386689][T26159] RBP: 00007fba870e2090 R08: 0000000000000000 R09: 0000000000000000 [ 1370.386699][T26159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1370.386708][T26159] R13: 00007fba86426038 R14: 00007fba86425fa0 R15: 00007fba8654fa48 [ 1370.386739][T26159] [ 1370.950399][T26163] batadv0: entered promiscuous mode [ 1370.958100][T26163] vlan3: entered promiscuous mode [ 1371.251287][ T9] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 1371.405006][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1371.405046][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1371.406757][ T9] usb 6-1: config 1 interface 0 altsetting 15 endpoint 0x82 is Bulk; changing to Interrupt [ 1371.406790][ T9] usb 6-1: config 1 interface 0 altsetting 15 endpoint 0x3 is Bulk; changing to Interrupt [ 1371.406806][ T9] usb 6-1: config 1 interface 0 altsetting 15 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1371.406827][ T9] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1371.410229][ T9] usb 6-1: string descriptor 0 read error: -22 [ 1371.410534][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1371.459414][T26165] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1371.477690][T26165] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1371.517430][ T9] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 1371.713526][T10175] usb 6-1: USB disconnect, device number 3 [ 1372.645315][T23550] hid_parser_main: 5 callbacks suppressed [ 1372.645336][T23550] hid-generic 0001:10001:FFFFFFFB.0037: unknown main item tag 0x0 [ 1372.645361][T23550] hid-generic 0001:10001:FFFFFFFB.0037: unknown main item tag 0x0 [ 1372.645380][T23550] hid-generic 0001:10001:FFFFFFFB.0037: unknown main item tag 0x0 [ 1372.645400][T23550] hid-generic 0001:10001:FFFFFFFB.0037: unknown main item tag 0x0 [ 1372.645419][T23550] hid-generic 0001:10001:FFFFFFFB.0037: unknown main item tag 0x0 [ 1372.645438][T23550] hid-generic 0001:10001:FFFFFFFB.0037: unknown main item tag 0x0 [ 1372.646181][T23550] hid-generic 0001:10001:FFFFFFFB.0037: unknown main item tag 0x0 [ 1372.646264][T23550] hid-generic 0001:10001:FFFFFFFB.0037: unknown main item tag 0x0 [ 1372.646286][T23550] hid-generic 0001:10001:FFFFFFFB.0037: unknown main item tag 0x0 [ 1372.646306][T23550] hid-generic 0001:10001:FFFFFFFB.0037: unknown main item tag 0x0 [ 1372.662371][T10175] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1372.773589][T23550] hid-generic 0001:10001:FFFFFFFB.0037: hidraw0: HID v0.02 Device [syz1] on syz1 [ 1372.845972][T10175] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1372.853805][T10175] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1372.853890][T10175] usb 3-1: Product: syz [ 1372.853933][T10175] usb 3-1: Manufacturer: syz [ 1372.853975][T10175] usb 3-1: SerialNumber: syz [ 1372.900896][T10175] usb 3-1: config 0 descriptor?? [ 1372.919218][T10175] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1372.942988][T10175] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1372.950361][T10175] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1372.950406][T10175] usb 3-1: media controller created [ 1373.078798][T10175] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1373.111792][T26196] fido_id[26196]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1373.433227][T10175] DVB: Unable to find symbol mt352_attach() [ 1373.600043][T10175] DVB: Unable to find symbol nxt6000_attach() [ 1373.600056][T10175] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1373.618823][T10175] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input114 [ 1373.640101][T10175] dvb-usb: schedule remote query interval to 1000 msecs. [ 1373.640120][T10175] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1373.640132][T10175] dvb-usb: bulk message failed: -22 (7/0) [ 1373.640145][T10175] dvb-usb: bulk message failed: -22 (7/0) [ 1373.779152][T26186] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1374.319710][T26222] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6153'. [ 1374.377433][T26224] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6153'. [ 1374.704655][T21389] dvb-usb: bulk message failed: -22 (7/0) [ 1374.704674][T21389] dvb-usb: error while querying for an remote control event. [ 1374.978350][T26230] netlink: 'syz.5.6154': attribute type 1 has an invalid length. [ 1375.046293][T26226] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6154'. [ 1375.097154][T10175] usb 3-1: USB disconnect, device number 102 [ 1375.149529][T26220] fuse: Bad value for 'group_id' [ 1375.149551][T26220] fuse: Bad value for 'group_id' [ 1375.316059][T10175] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1375.721363][T21389] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1375.874387][T21389] usb 6-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 1375.875853][T21389] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1375.875906][T21389] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1375.875931][T21389] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1375.878448][T21389] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1375.878473][T21389] usb 6-1: Product: syz [ 1375.878490][T21389] usb 6-1: Manufacturer: syz [ 1375.878507][T21389] usb 6-1: SerialNumber: syz [ 1375.957059][T21389] usb-storage 6-1:1.0: USB Mass Storage device detected [ 1375.988560][T21389] usb-storage 6-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 1376.009606][T21389] scsi host1: usb-storage 6-1:1.0 [ 1376.078694][T26245] fuse: Unknown parameter 'g—RJ¥”Óƒ"Ëh«Za¼ÿ”ƒ£qßNá~ÉÖç÷µÓ³…xö' [ 1376.513848][T26255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1376.516407][T26255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1376.695899][T26255] loop3: detected capacity change from 0 to 1 [ 1376.696999][T26255] Dev loop3: unable to read RDB block 1 [ 1376.697051][T26255] loop3: unable to read partition table [ 1376.697259][T26255] loop3: partition table beyond EOD, truncated [ 1376.697280][T26255] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1377.337595][T26266] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6163'. [ 1377.366615][ T4982] loop0: [ 1377.366647][ T4982] loop0: partition table partially beyond EOD, truncated [ 1377.430779][ T4982] Dev loop3: unable to read RDB block 1 [ 1377.430826][ T4982] loop3: unable to read partition table [ 1377.431280][ T4982] loop3: partition table beyond EOD, truncated [ 1377.603294][ T4982] Dev loop3: unable to read RDB block 1 [ 1377.603343][ T4982] loop3: unable to read partition table [ 1377.603652][ T4982] loop3: partition table beyond EOD, truncated [ 1377.699394][T26273] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6166'. [ 1377.777691][ T4982] Dev loop3: unable to read RDB block 1 [ 1377.777766][ T4982] loop3: unable to read partition table [ 1377.778068][ T4982] loop3: partition table beyond EOD, truncated [ 1378.123924][ T4982] Dev loop3: unable to read RDB block 1 [ 1378.123978][ T4982] loop3: unable to read partition table [ 1378.124890][ T4982] loop3: partition table beyond EOD, truncated [ 1378.567789][ T25] usb 6-1: USB disconnect, device number 4 [ 1378.790604][T26291] input: syz0 as /devices/virtual/input/input115 [ 1378.819162][T26291] netlink: 'syz.2.6171': attribute type 10 has an invalid length. [ 1378.819181][T26291] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6171'. [ 1379.014288][T26295] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1379.033945][T26295] bond2 (unregistering): Released all slaves [ 1379.053824][T26299] loop4: detected capacity change from 0 to 7 [ 1379.054846][T26299] Dev loop4: unable to read RDB block 7 [ 1379.054889][T26299] loop4: unable to read partition table [ 1379.055211][T26299] loop4: partition table beyond EOD, truncated [ 1379.055232][T26299] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1379.358623][T26296] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1379.377476][T26296] bond2 (unregistering): Released all slaves [ 1379.686973][ T4982] loop0: [ 1379.687006][ T4982] loop0: partition table partially beyond EOD, truncated [ 1379.735055][T26321] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6181'. [ 1380.345161][ T31] kauditd_printk_skb: 126 callbacks suppressed [ 1380.345178][ T31] audit: type=1326 audit(1790230557.639:20191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26333 comm="syz.6.6186" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4292f9e159 code=0x7ffc0000 [ 1380.345217][ T31] audit: type=1326 audit(1790230557.649:20192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26333 comm="syz.6.6186" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4292f9e159 code=0x7ffc0000 [ 1380.359015][ T31] audit: type=1326 audit(1790230557.659:20193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26333 comm="syz.6.6186" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f4292f9e159 code=0x7ffc0000 [ 1380.440727][ T31] audit: type=1326 audit(1790230557.729:20194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26333 comm="syz.6.6186" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4292f9e159 code=0x7ffc0000 [ 1380.440788][ T31] audit: type=1326 audit(1790230557.729:20195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26333 comm="syz.6.6186" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4292f9e159 code=0x7ffc0000 [ 1381.398511][T26352] xt_hl: Unknown TTL match mode: 5 [ 1381.702128][T26358] loop4: detected capacity change from 0 to 7 [ 1381.704401][T26358] Dev loop4: unable to read RDB block 7 [ 1381.704446][T26358] loop4: unable to read partition table [ 1381.704667][T26358] loop4: partition table beyond EOD, truncated [ 1381.704687][T26358] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1381.812181][ T9] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1381.972042][ T9] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1381.976564][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1381.976593][ T9] usb 3-1: Product: syz [ 1381.976609][ T9] usb 3-1: Manufacturer: syz [ 1381.976625][ T9] usb 3-1: SerialNumber: syz [ 1382.054685][ T9] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1382.181162][ T25] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1382.269643][T23550] usb 3-1: USB disconnect, device number 103 [ 1382.332463][ T25] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 1382.337795][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1382.337821][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1382.337851][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1382.380429][ T25] usb 4-1: config 0 descriptor?? [ 1382.603065][ T25] hid_parser_main: 26 callbacks suppressed [ 1382.603085][ T25] arvo 0003:1E7D:30D4.0038: unknown main item tag 0x0 [ 1382.603108][ T25] arvo 0003:1E7D:30D4.0038: unknown main item tag 0x0 [ 1382.603127][ T25] arvo 0003:1E7D:30D4.0038: unknown main item tag 0x0 [ 1382.603146][ T25] arvo 0003:1E7D:30D4.0038: unknown main item tag 0x0 [ 1382.603164][ T25] arvo 0003:1E7D:30D4.0038: unknown main item tag 0x0 [ 1382.603183][ T25] arvo 0003:1E7D:30D4.0038: unknown main item tag 0x0 [ 1382.603202][ T25] arvo 0003:1E7D:30D4.0038: unknown main item tag 0x0 [ 1382.609568][ T25] arvo 0003:1E7D:30D4.0038: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0 [ 1382.689811][T26374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1382.690138][T26374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1383.101568][ T9] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1383.101765][ T9] ath9k_htc: Failed to initialize the device [ 1383.103243][T23550] usb 3-1: ath9k_htc: USB layer deinitialized [ 1383.401222][T23550] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1383.552988][T23550] usb 3-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01 [ 1383.554101][T23550] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1383.554124][T23550] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1289, setting to 1024 [ 1383.554144][T23550] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1383.554174][T23550] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1383.560271][T26354] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1383.560381][T26354] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1383.815719][T16380] Bluetooth: hci5: Reading Intel version command failed (-71) [ 1383.830705][ T9] usb 3-1: USB disconnect, device number 104 [ 1384.579276][T26399] loop4: detected capacity change from 0 to 7 [ 1384.580119][T26399] Dev loop4: unable to read RDB block 7 [ 1384.580156][T26399] loop4: unable to read partition table [ 1384.580327][T26399] loop4: partition table beyond EOD, truncated [ 1384.580343][T26399] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1384.853894][T26407] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1384.966381][ T25] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1384.994720][ T5751] usb 4-1: USB disconnect, device number 75 [ 1385.101357][ T25] usb 3-1: device descriptor read/64, error -71 [ 1385.118819][T26411] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 1385.341278][ T25] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1385.471192][ T25] usb 3-1: device descriptor read/64, error -71 [ 1385.481682][T23550] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1385.581889][ T25] usb usb3-port1: attempt power cycle [ 1385.593924][T26420] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1385.631700][T23550] usb 6-1: Using ep0 maxpacket: 16 [ 1385.633790][T23550] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1385.633841][T23550] usb 6-1: New USB device found, idVendor=093a, idProduct=260e, bcdDevice=18.85 [ 1385.635278][T23550] usb 6-1: config 1 has an invalid interface number: 151 but max is 0 [ 1385.635304][T23550] usb 6-1: config 1 has no interface number 0 [ 1385.635336][T23550] usb 6-1: config 1 interface 151 has no altsetting 0 [ 1385.640681][T23550] usb 6-1: string descriptor 0 read error: -22 [ 1385.640773][T23550] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1385.704541][T23550] gspca_main: pac7311-2.14.0 probing 093a:260e [ 1385.783840][T26423] loop4: detected capacity change from 0 to 7 [ 1385.784813][T26423] Dev loop4: unable to read RDB block 7 [ 1385.784856][T26423] loop4: unable to read partition table [ 1385.785189][T26423] loop4: partition table beyond EOD, truncated [ 1385.785284][T26423] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1385.932191][ T25] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1385.951887][ T25] usb 3-1: device descriptor read/8, error -71 [ 1386.102924][T26415] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6214'. [ 1386.106365][T23550] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -71 [ 1386.106431][T23550] pac7311 6-1:1.151: probe with driver pac7311 failed with error -71 [ 1386.128162][T23550] usb 6-1: USB disconnect, device number 5 [ 1386.191488][ T25] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1386.214513][ T25] usb 3-1: device descriptor read/8, error -71 [ 1386.321513][ T25] usb usb3-port1: unable to enumerate USB device [ 1387.121140][ T25] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1387.272781][ T25] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1387.276652][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1387.276677][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1387.276693][ T25] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1387.276724][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1387.279352][ T25] usb 6-1: config 0 descriptor?? [ 1387.838300][ T25] plantronics 0003:047F:FFFF.0039: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1388.181642][T21389] usb 3-1: new full-speed USB device number 109 using dummy_hcd [ 1388.290085][T26450] loop4: detected capacity change from 0 to 7 [ 1388.294441][T26450] Dev loop4: unable to read RDB block 7 [ 1388.294544][T26450] loop4: unable to read partition table [ 1388.296093][T26450] loop4: partition table beyond EOD, truncated [ 1388.298364][T26450] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1388.334214][T21389] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1388.340685][T21389] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1388.340714][T21389] usb 3-1: Product: syz [ 1388.340731][T21389] usb 3-1: Manufacturer: syz [ 1388.340747][T21389] usb 3-1: SerialNumber: syz [ 1388.376524][T21389] usb 3-1: config 0 descriptor?? [ 1388.405023][T21389] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1389.284049][T26462] loop4: detected capacity change from 0 to 7 [ 1389.284911][T26462] Dev loop4: unable to read RDB block 7 [ 1389.284953][T26462] loop4: unable to read partition table [ 1389.285187][T26462] loop4: partition table beyond EOD, truncated [ 1389.285206][T26462] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1389.571240][ T9] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1389.721501][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 1389.724044][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1389.724091][ T9] usb 4-1: New USB device found, idVendor=093a, idProduct=260e, bcdDevice=18.85 [ 1389.725155][ T9] usb 4-1: config 1 has an invalid interface number: 151 but max is 0 [ 1389.725181][ T9] usb 4-1: config 1 has no interface number 0 [ 1389.725212][ T9] usb 4-1: config 1 interface 151 has no altsetting 0 [ 1389.728245][ T9] usb 4-1: string descriptor 0 read error: -22 [ 1389.728391][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1389.772222][ T9] gspca_main: pac7311-2.14.0 probing 093a:260e [ 1390.017612][T21389] gspca_stk1135: reg_w 0x200 err -71 [ 1390.018839][T21389] gspca_stk1135: serial bus timeout: status=0x00 [ 1390.018862][T21389] gspca_stk1135: Sensor write failed [ 1390.018925][T21389] gspca_stk1135: serial bus timeout: status=0x00 [ 1390.018937][T21389] gspca_stk1135: Sensor write failed [ 1390.018970][T21389] gspca_stk1135: serial bus timeout: status=0x00 [ 1390.018980][T21389] gspca_stk1135: Sensor read failed [ 1390.019041][T21389] gspca_stk1135: serial bus timeout: status=0x00 [ 1390.019052][T21389] gspca_stk1135: Sensor read failed [ 1390.019060][T21389] gspca_stk1135: Detected sensor type unknown (0x0) [ 1390.019129][T21389] gspca_stk1135: serial bus timeout: status=0x00 [ 1390.019141][T21389] gspca_stk1135: Sensor read failed [ 1390.019278][T21389] gspca_stk1135: serial bus timeout: status=0x00 [ 1390.019291][T21389] gspca_stk1135: Sensor read failed [ 1390.019354][T21389] gspca_stk1135: serial bus timeout: status=0x00 [ 1390.019366][T21389] gspca_stk1135: Sensor write failed [ 1390.019402][T21389] gspca_stk1135: serial bus timeout: status=0x00 [ 1390.019414][T21389] gspca_stk1135: Sensor write failed [ 1390.019523][T21389] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 1390.160433][T21389] usb 3-1: USB disconnect, device number 109 [ 1390.176433][T26463] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6232'. [ 1390.191414][ T9] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -71 [ 1390.191508][ T9] pac7311 4-1:1.151: probe with driver pac7311 failed with error -71 [ 1390.211597][T23550] usb 6-1: reset high-speed USB device number 6 using dummy_hcd [ 1390.214241][ T9] usb 4-1: USB disconnect, device number 76 [ 1390.341196][T23550] usb 6-1: device descriptor read/64, error -71 [ 1390.591423][T23550] usb 6-1: reset high-speed USB device number 6 using dummy_hcd [ 1390.662286][T26471] binder: 26470:26471 ioctl 8933 200000000140 returned -22 [ 1390.741539][T23550] usb 6-1: device descriptor read/64, error -71 [ 1390.981185][T23550] usb 6-1: reset high-speed USB device number 6 using dummy_hcd [ 1391.002932][T23550] usb 6-1: device descriptor read/8, error -71 [ 1391.041184][ T9] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1391.058862][T25012] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1391.191383][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 1391.194012][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1391.194055][ T9] usb 4-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice= 0.40 [ 1391.195372][ T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 102, changing to 7 [ 1391.195416][ T9] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1391.198466][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1391.198494][ T9] usb 4-1: Product: syz [ 1391.198511][ T9] usb 4-1: Manufacturer: syz [ 1391.198527][ T9] usb 4-1: SerialNumber: syz [ 1391.294593][T23550] usb 6-1: reset high-speed USB device number 6 using dummy_hcd [ 1391.297272][T25012] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1391.317260][T23550] usb 6-1: device descriptor read/8, error -71 [ 1391.318120][T25012] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1391.318147][T25012] usb 3-1: Product: syz [ 1391.318163][T25012] usb 3-1: SerialNumber: syz [ 1391.356844][T25012] usb 3-1: config 0 descriptor?? [ 1391.425935][T10175] usb 6-1: USB disconnect, device number 6 [ 1391.576719][T25012] hso 3-1:0.0: Failed to find BULK eps [ 1391.642863][T10175] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1391.771682][T10175] usb 6-1: device descriptor read/64, error -71 [ 1391.821229][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1391.872171][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1391.872503][ T9] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 1391.880814][ T9] usb 4-1: USB disconnect, device number 77 [ 1392.011590][T10175] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1392.141264][T10175] usb 6-1: device descriptor read/64, error -71 [ 1392.252704][T10175] usb usb6-port1: attempt power cycle [ 1392.440841][ T4982] loop0: [ 1392.440862][ T4982] loop0: partition table partially beyond EOD, truncated [ 1392.591211][T10175] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1392.613785][T10175] usb 6-1: device descriptor read/8, error -71 [ 1393.803829][T23550] usb 3-1: USB disconnect, device number 110 [ 1393.872414][ T9] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1394.011206][T10175] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1394.025011][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 1394.027399][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1394.040271][ T9] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 1394.040344][ T9] usb 4-1: config 0 has no interface number 0 [ 1394.041395][ T9] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1394.041478][ T9] usb 4-1: config 0 interface 85 has no altsetting 0 [ 1394.065291][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1394.065374][ T9] usb 4-1: Product: syz [ 1394.065415][ T9] usb 4-1: Manufacturer: syz [ 1394.065458][ T9] usb 4-1: SerialNumber: syz [ 1394.098743][ T9] usb 4-1: config 0 descriptor?? [ 1394.163760][T10175] usb 6-1: Using ep0 maxpacket: 32 [ 1394.165312][T10175] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1394.168297][T10175] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1394.168330][T10175] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1394.168372][T10175] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1394.215397][T10175] usb 6-1: config 0 descriptor?? [ 1394.646576][T10175] savu 0003:1E7D:2D5A.003A: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 1394.715576][ T9] appletouch 4-1:0.85: Geyser mode initialized. [ 1394.718866][ T9] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input123 [ 1394.918646][T25012] usb 4-1: USB disconnect, device number 78 [ 1394.918648][ C0] appletouch 4-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 1394.986137][T25012] appletouch 4-1:0.85: input: appletouch disconnected [ 1395.049493][T26524] loop4: detected capacity change from 0 to 7 [ 1395.050312][T26524] Dev loop4: unable to read RDB block 7 [ 1395.050355][T26524] loop4: unable to read partition table [ 1395.050561][T26524] loop4: partition table beyond EOD, truncated [ 1395.050593][T26524] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1395.425226][T26531] input: syz0 as /devices/virtual/input/input124 [ 1395.439703][T26531] netlink: 'syz.7.6257': attribute type 10 has an invalid length. [ 1395.439727][T26531] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6257'. [ 1395.620415][T26533] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6259'. [ 1395.869955][T26544] netlink: 'syz.7.6262': attribute type 8 has an invalid length. [ 1395.869979][T26544] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6262'. [ 1395.907847][T26544] veth1_to_team: entered promiscuous mode [ 1395.918266][T26544] gretap0: entered promiscuous mode [ 1395.927464][T26544] veth1_to_team: left promiscuous mode [ 1395.940638][T26544] gretap0: left promiscuous mode [ 1396.091767][T25012] usb 6-1: reset high-speed USB device number 11 using dummy_hcd [ 1396.850584][T26553] loop4: detected capacity change from 0 to 7 [ 1396.867492][T26553] Dev loop4: unable to read RDB block 7 [ 1396.867539][T26553] loop4: unable to read partition table [ 1396.869707][T26553] loop4: partition table beyond EOD, truncated [ 1396.869759][T26553] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1397.120384][T26562] xt_recent: hitcount (134217728) is larger than allowed maximum (65535) [ 1397.141400][T26560] input: syz0 as /devices/virtual/input/input126 [ 1397.175058][T26560] netlink: 'syz.3.6269': attribute type 10 has an invalid length. [ 1397.175082][T26560] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6269'. [ 1397.389272][T26567] netlink: 'syz.3.6273': attribute type 8 has an invalid length. [ 1397.389298][T26567] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6273'. [ 1397.428788][T26567] veth1_to_team: entered promiscuous mode [ 1397.438185][T26567] gretap0: entered promiscuous mode [ 1397.440124][T26567] veth1_to_team: left promiscuous mode [ 1397.453572][T26567] gretap0: left promiscuous mode [ 1397.604073][ T4982] loop0: [ 1397.604101][ T4982] loop0: partition table partially beyond EOD, truncated [ 1397.641148][T25012] usb 6-1: device descriptor read/64, error -71 [ 1397.811265][T26573] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(41) [ 1397.811295][T26573] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1397.811381][T26573] vhci_hcd vhci_hcd.0: Device attached [ 1397.828868][ T9] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1397.860148][T26573] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(43) [ 1397.860178][T26573] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1397.860238][T26573] vhci_hcd vhci_hcd.0: Device attached [ 1397.891236][T25012] usb 6-1: reset high-speed USB device number 11 using dummy_hcd [ 1397.898129][T26573] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(48) [ 1397.898156][T26573] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1397.898193][T26573] vhci_hcd vhci_hcd.0: Device attached [ 1397.944377][T26573] vhci_hcd vhci_hcd.0: pdev(7) rhport(3) sockfd(51) [ 1397.944406][T26573] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1397.944451][T26573] vhci_hcd vhci_hcd.0: Device attached [ 1397.946873][T26573] vhci_hcd vhci_hcd.0: pdev(7) rhport(4) sockfd(53) [ 1397.946900][T26573] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1397.946942][T26573] vhci_hcd vhci_hcd.0: Device attached [ 1397.950345][T26573] vhci_hcd vhci_hcd.0: pdev(7) rhport(5) sockfd(55) [ 1397.950370][T26573] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1397.950413][T26573] vhci_hcd vhci_hcd.0: Device attached [ 1397.991451][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 1398.025785][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1398.026878][ T9] usb 4-1: New USB device found, idVendor=093a, idProduct=260e, bcdDevice=18.85 [ 1398.027971][ T9] usb 4-1: config 1 has an invalid interface number: 151 but max is 0 [ 1398.028002][ T9] usb 4-1: config 1 has no interface number 0 [ 1398.028024][ T9] usb 4-1: config 1 interface 151 has no altsetting 0 [ 1398.047036][T26573] vhci_hcd vhci_hcd.0: pdev(7) rhport(6) sockfd(57) [ 1398.047118][T26573] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1398.047359][T26573] vhci_hcd vhci_hcd.0: Device attached [ 1398.107493][T25012] usb 6-1: device firmware changed [ 1398.109976][T26573] vhci_hcd vhci_hcd.0: pdev(7) rhport(7) sockfd(59) [ 1398.110001][T26573] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1398.110081][T26573] vhci_hcd vhci_hcd.0: Device attached [ 1398.147027][ T25] usb 6-1: USB disconnect, device number 11 [ 1398.159251][ T9] usb 4-1: string descriptor 0 read error: -22 [ 1398.159402][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1398.201676][ T5751] usb 48-1: SetAddress Request (2) to port 0 [ 1398.201726][ T5751] usb 48-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1398.241928][ T9] gspca_main: pac7311-2.14.0 probing 093a:260e [ 1398.312784][T26573] vhci_hcd vhci_hcd.0: port 0 already used [ 1398.404289][ T25] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1398.551323][ T25] usb 6-1: Using ep0 maxpacket: 32 [ 1398.552227][ T25] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1398.554547][ T25] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1398.554624][ T25] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1398.554644][ T25] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1398.555232][ T25] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1398.555263][ T25] usb 6-1: config 1 interface 1 has no altsetting 0 [ 1398.560895][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1398.560921][ T25] usb 6-1: Product: syz [ 1398.560936][ T25] usb 6-1: Manufacturer: syz [ 1398.560955][ T25] usb 6-1: SerialNumber: syz [ 1398.690250][ T25] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 1398.690427][ T25] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 1398.718900][T26571] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6274'. [ 1398.740173][ T9] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -71 [ 1398.740243][ T9] pac7311 4-1:1.151: probe with driver pac7311 failed with error -71 [ 1398.764286][ T9] usb 4-1: USB disconnect, device number 79 [ 1399.093334][T26565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1399.094025][T26565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1399.141407][T10185] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1399.170842][ T25] usb 6-1: USB disconnect, device number 12 [ 1399.228147][ T5721] udevd[5721]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1399.311381][T10185] usb 3-1: Using ep0 maxpacket: 32 [ 1399.315543][T10185] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1399.319767][T10185] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1399.366437][T10185] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1399.366469][T10185] usb 3-1: Product: syz [ 1399.366484][T10185] usb 3-1: Manufacturer: syz [ 1399.366502][T10185] usb 3-1: SerialNumber: syz [ 1399.397476][T26585] vhci_hcd: connection closed [ 1399.397478][T26591] vhci_hcd: connection closed [ 1399.397733][T26589] vhci_hcd: connection closed [ 1399.398637][ T988] vhci_hcd vhci_hcd.7: stop threads [ 1399.398665][ T988] vhci_hcd vhci_hcd.7: release socket [ 1399.398766][T26587] vhci_hcd: connection closed [ 1399.399263][ T988] vhci_hcd vhci_hcd.7: disconnect device [ 1399.399617][ T988] vhci_hcd vhci_hcd.7: stop threads [ 1399.399635][ T988] vhci_hcd vhci_hcd.7: release socket [ 1399.400121][ T988] vhci_hcd vhci_hcd.7: disconnect device [ 1399.400366][ T988] vhci_hcd vhci_hcd.7: stop threads [ 1399.400383][ T988] vhci_hcd vhci_hcd.7: release socket [ 1399.400942][T26583] vhci_hcd: connection closed [ 1399.404691][ T988] vhci_hcd vhci_hcd.7: disconnect device [ 1399.406578][T26581] vhci_hcd: connection closed [ 1399.407886][T26579] vhci_hcd: connection closed [ 1399.435885][ T988] vhci_hcd vhci_hcd.7: stop threads [ 1399.435955][ T988] vhci_hcd vhci_hcd.7: release socket [ 1399.436114][ T988] vhci_hcd vhci_hcd.7: disconnect device [ 1399.446472][ T988] vhci_hcd vhci_hcd.7: stop threads [ 1399.446500][ T988] vhci_hcd vhci_hcd.7: release socket [ 1399.446554][ T988] vhci_hcd vhci_hcd.7: disconnect device [ 1399.453609][ T988] vhci_hcd vhci_hcd.7: stop threads [ 1399.453648][ T988] vhci_hcd vhci_hcd.7: release socket [ 1399.453792][ T988] vhci_hcd vhci_hcd.7: disconnect device [ 1399.463547][ T988] vhci_hcd vhci_hcd.7: stop threads [ 1399.463567][ T988] vhci_hcd vhci_hcd.7: release socket [ 1399.463622][ T988] vhci_hcd vhci_hcd.7: disconnect device [ 1399.469886][T26577] vhci_hcd: connection reset by peer [ 1399.474831][ T1016] vhci_hcd vhci_hcd.7: stop threads [ 1399.474852][ T1016] vhci_hcd vhci_hcd.7: release socket [ 1399.474895][ T1016] vhci_hcd vhci_hcd.7: disconnect device [ 1399.478039][T10185] usb 3-1: config 0 descriptor?? [ 1399.481464][T26599] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1399.836565][T26605] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6278'. [ 1399.836590][T26605] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6278'. [ 1399.901634][T10175] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1400.015035][T23550] usb 3-1: USB disconnect, device number 111 [ 1400.031187][T10175] usb 4-1: device descriptor read/64, error -71 [ 1400.284607][T10175] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1400.363116][T26617] bridge0: port 2(bridge_slave_1) entered disabled state [ 1400.363691][T26617] bridge0: port 1(bridge_slave_0) entered disabled state [ 1400.411751][T10175] usb 4-1: device descriptor read/64, error -71 [ 1400.517937][T26617] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1400.530761][T10175] usb usb4-port1: attempt power cycle [ 1400.531402][T26617] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1400.762653][T26623] input: syz0 as /devices/virtual/input/input129 [ 1400.788247][T26623] netlink: 'syz.7.6283': attribute type 10 has an invalid length. [ 1400.788272][T26623] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6283'. [ 1400.866170][T26625] netlink: 'syz.2.6284': attribute type 8 has an invalid length. [ 1400.866191][T26625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6284'. [ 1400.871641][T10175] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1400.899726][T10175] usb 4-1: device descriptor read/8, error -71 [ 1400.914755][T26625] veth1_to_team: entered promiscuous mode [ 1400.916132][T26625] gretap0: entered promiscuous mode [ 1400.918182][T26625] veth1_to_team: left promiscuous mode [ 1400.920019][T26625] gretap0: left promiscuous mode [ 1401.012138][T21025] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1401.013088][T21025] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1401.013130][T21025] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1401.013168][T21025] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1401.131574][T10175] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1401.151962][T10175] usb 4-1: device descriptor read/8, error -71 [ 1401.262029][T10175] usb usb4-port1: unable to enumerate USB device [ 1401.481186][T23550] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1401.631187][T23550] usb 3-1: Using ep0 maxpacket: 16 [ 1401.633504][T23550] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1401.633542][T23550] usb 3-1: New USB device found, idVendor=093a, idProduct=260e, bcdDevice=18.85 [ 1401.634642][T23550] usb 3-1: config 1 has an invalid interface number: 151 but max is 0 [ 1401.634661][T23550] usb 3-1: config 1 has no interface number 0 [ 1401.634701][T23550] usb 3-1: config 1 interface 151 has no altsetting 0 [ 1401.637099][T23550] usb 3-1: string descriptor 0 read error: -22 [ 1401.637258][T23550] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1401.663427][T23550] gspca_main: pac7311-2.14.0 probing 093a:260e [ 1402.050889][T26634] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6287'. [ 1402.067812][T23550] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -71 [ 1402.067907][T23550] pac7311 3-1:1.151: probe with driver pac7311 failed with error -71 [ 1402.091588][T23550] usb 3-1: USB disconnect, device number 112 [ 1402.614215][T26639] netlink: Only one type of NAT may be specified [ 1402.614241][T26639] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1402.746517][ T4982] loop0: [ 1402.746547][ T4982] loop0: partition table partially beyond EOD, truncated [ 1402.859670][T23550] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1403.021298][T23550] usb 3-1: Using ep0 maxpacket: 32 [ 1403.022407][T23550] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1403.025634][T23550] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1403.025660][T23550] usb 3-1: Product: syz [ 1403.025676][T23550] usb 3-1: Manufacturer: syz [ 1403.025694][T23550] usb 3-1: SerialNumber: syz [ 1403.028082][T23550] usb 3-1: config 0 descriptor?? [ 1403.077252][T23550] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1403.141523][T10185] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 1403.262150][ T5751] usb 48-1: device descriptor read/8, error -110 [ 1403.291688][T10185] usb 6-1: device descriptor read/64, error -71 [ 1403.460179][T26658] input: syz0 as /devices/virtual/input/input131 [ 1403.468051][T26658] netlink: 'syz.6.6295': attribute type 10 has an invalid length. [ 1403.468078][T26658] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6295'. [ 1403.541340][T10185] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 1403.654877][ T5751] usb usb48-port1: attempt power cycle [ 1403.673412][T10185] usb 6-1: device descriptor read/64, error -71 [ 1403.781587][T10185] usb usb6-port1: attempt power cycle [ 1403.950275][T26670] fuse: Unknown parameter '' [ 1404.131190][T10185] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 1404.162397][T10185] usb 6-1: device descriptor read/8, error -71 [ 1404.256312][ T5751] usb usb48-port1: unable to enumerate USB device [ 1404.401815][T10185] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 1404.424822][T10185] usb 6-1: device descriptor read/8, error -71 [ 1404.532718][T10185] usb usb6-port1: unable to enumerate USB device [ 1404.605211][T26672] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6301'. [ 1404.685930][ T4982] loop0: [ 1404.685960][ T4982] loop0: partition table partially beyond EOD, truncated [ 1404.916701][T26676] xt_hashlimit: size too large, truncated to 1048576 [ 1405.259302][T23550] gspca_ov534_9: reg_w failed -71 [ 1405.520982][ T4982] loop0: [ 1405.521168][ T4982] loop0: partition table partially beyond EOD, truncated [ 1405.541251][T23550] gspca_ov534_9: Unknown sensor 0000 [ 1405.541355][T23550] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 1405.543619][T23550] usb 3-1: USB disconnect, device number 113 [ 1405.689433][T26689] input: syz0 as /devices/virtual/input/input133 [ 1405.702707][T26689] netlink: 'syz.3.6306': attribute type 10 has an invalid length. [ 1405.702730][T26689] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6306'. [ 1406.023013][T10175] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1406.162307][T23550] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1406.182110][T10175] usb 4-1: Using ep0 maxpacket: 32 [ 1406.183026][T10175] usb 4-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 1406.184477][T10175] usb 4-1: config 0 has an invalid interface number: 119 but max is 0 [ 1406.184505][T10175] usb 4-1: config 0 has no interface number 0 [ 1406.184547][T10175] usb 4-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1406.184572][T10175] usb 4-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1406.184598][T10175] usb 4-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1406.184624][T10175] usb 4-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1406.187491][T10175] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1406.187517][T10175] usb 4-1: Product: syz [ 1406.187528][T10175] usb 4-1: Manufacturer: syz [ 1406.187540][T10175] usb 4-1: SerialNumber: syz [ 1406.193434][T10175] usb 4-1: config 0 descriptor?? [ 1406.328564][T10175] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.119/input/input134 [ 1406.352173][T23550] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1406.353385][T23550] usb 3-1: config 0 has no interfaces? [ 1406.358418][T23550] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1406.358446][T23550] usb 3-1: Product: syz [ 1406.358462][T23550] usb 3-1: Manufacturer: syz [ 1406.358476][T23550] usb 3-1: SerialNumber: syz [ 1406.411615][T23550] usb 3-1: config 0 descriptor?? [ 1406.646913][T23550] usb 4-1: USB disconnect, device number 84 [ 1406.760176][T10185] usb 3-1: USB disconnect, device number 114 [ 1407.320996][T26707] fuse: Unknown parameter '' [ 1408.041966][T26728] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6318'. [ 1408.131413][ T4982] loop0: [ 1408.131444][ T4982] loop0: partition table partially beyond EOD, truncated [ 1408.272460][T21389] usb 3-1: new low-speed USB device number 115 using dummy_hcd [ 1408.424243][T21389] usb 3-1: New USB device found, idVendor=1508, idProduct=1001, bcdDevice=9d.80 [ 1408.426541][T21389] usb 3-1: config 157 has an invalid interface number: 4 but max is 0 [ 1408.426569][T21389] usb 3-1: config 157 has an invalid interface number: 14 but max is 0 [ 1408.426593][T21389] usb 3-1: config 157 has 2 interfaces, different from the descriptor's value: 1 [ 1408.426615][T21389] usb 3-1: config 157 has no interface number 0 [ 1408.426639][T21389] usb 3-1: config 157 has no interface number 1 [ 1408.426675][T21389] usb 3-1: config 157 interface 4 altsetting 3 endpoint 0x1 has invalid maxpacket 64, setting to 8 [ 1408.426695][T21389] usb 3-1: config 157 interface 4 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 1408.426726][T21389] usb 3-1: config 157 interface 14 altsetting 179 endpoint 0x88 has invalid maxpacket 1024, setting to 8 [ 1408.426746][T21389] usb 3-1: config 157 interface 14 altsetting 179 endpoint 0x6 has invalid maxpacket 1023, setting to 8 [ 1408.426766][T21389] usb 3-1: config 157 interface 14 altsetting 179 endpoint 0x3 has invalid maxpacket 32, setting to 8 [ 1408.426803][T21389] usb 3-1: config 157 interface 14 altsetting 179 endpoint 0x2 has invalid maxpacket 64, setting to 8 [ 1408.426831][T21389] usb 3-1: config 157 interface 14 altsetting 179 endpoint 0x7 has an invalid bInterval 64, changing to 4 [ 1408.426858][T21389] usb 3-1: config 157 interface 14 altsetting 179 endpoint 0x7 has invalid maxpacket 1024, setting to 0 [ 1408.426886][T21389] usb 3-1: config 157 interface 14 altsetting 179 has a duplicate endpoint with address 0x3, skipping [ 1408.426909][T21389] usb 3-1: config 157 interface 14 altsetting 179 has a duplicate endpoint with address 0x6, skipping [ 1408.426935][T21389] usb 3-1: config 157 interface 14 altsetting 179 endpoint 0xE has invalid maxpacket 512, setting to 8 [ 1408.426955][T21389] usb 3-1: config 157 interface 14 altsetting 179 endpoint 0xB has invalid maxpacket 576, setting to 8 [ 1408.426975][T21389] usb 3-1: config 157 interface 14 altsetting 179 endpoint 0x4 has invalid maxpacket 512, setting to 8 [ 1408.426995][T21389] usb 3-1: config 157 interface 14 altsetting 179 endpoint 0xF has invalid maxpacket 1024, setting to 8 [ 1408.427015][T21389] usb 3-1: config 157 interface 14 altsetting 179 has a duplicate endpoint with address 0x7, skipping [ 1408.427031][T21389] usb 3-1: config 157 interface 14 altsetting 179 has 12 endpoint descriptors, different from the interface descriptor's value: 19 [ 1408.427052][T21389] usb 3-1: config 157 interface 4 has no altsetting 0 [ 1408.427066][T21389] usb 3-1: config 157 interface 14 has no altsetting 0 [ 1408.489575][T10175] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1408.643359][T10175] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1408.648781][T10175] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1408.648926][T10175] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1408.649092][T10175] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1408.709450][T10175] usb 6-1: config 0 descriptor?? [ 1408.945283][T10175] pyra 0003:1E7D:2CF6.003B: unknown main item tag 0x0 [ 1408.945324][T10175] pyra 0003:1E7D:2CF6.003B: unknown main item tag 0x0 [ 1408.945353][T10175] pyra 0003:1E7D:2CF6.003B: unknown main item tag 0x0 [ 1408.945382][T10175] pyra 0003:1E7D:2CF6.003B: unknown main item tag 0x0 [ 1408.945436][T10175] pyra 0003:1E7D:2CF6.003B: unknown main item tag 0x0 [ 1408.945464][T10175] pyra 0003:1E7D:2CF6.003B: unknown main item tag 0x0 [ 1408.945492][T10175] pyra 0003:1E7D:2CF6.003B: unknown main item tag 0x0 [ 1408.976810][T10175] pyra 0003:1E7D:2CF6.003B: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.5-1/input0 [ 1409.020570][T10175] pyra 0003:1E7D:2CF6.003B: couldn't init struct pyra_device [ 1409.020656][T10175] pyra 0003:1E7D:2CF6.003B: couldn't install mouse [ 1409.045803][T10175] pyra 0003:1E7D:2CF6.003B: probe with driver pyra failed with error -32 [ 1409.292532][T26747] syzkaller1: entered allmulticast mode [ 1409.295741][T26747] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6322'. [ 1409.665465][T26753] input: syz0 as /devices/virtual/input/input136 [ 1409.680914][T26753] netlink: 'syz.3.6324': attribute type 10 has an invalid length. [ 1409.680938][T26753] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6324'. [ 1409.977483][T26757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1410.803452][T26768] fuse: Unknown parameter '' [ 1411.117085][T21389] usb 3-1: string descriptor 0 read error: -71 [ 1411.117186][T21389] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1411.153594][T21389] usb 3-1: can't set config #157, error -71 [ 1411.168320][T21389] usb 3-1: USB disconnect, device number 115 [ 1411.357897][T21389] usb 6-1: USB disconnect, device number 17 [ 1411.621628][T26775] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6331'. [ 1411.756078][T26779] tipc: Enabled bearer , priority 0 [ 1411.766982][T26779] syzkaller0: entered promiscuous mode [ 1411.767047][T26779] syzkaller0: entered allmulticast mode [ 1411.857246][T26779] tipc: Resetting bearer [ 1411.962167][T21389] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1412.095520][T26777] tipc: Resetting bearer [ 1412.140131][T21389] usb 3-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1412.157569][T21389] usb 3-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1412.157606][T21389] usb 3-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1412.157634][T21389] usb 3-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1412.161374][T21389] usb 3-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1412.161458][T21389] usb 3-1: Manufacturer: syz [ 1412.161501][T21389] usb 3-1: SerialNumber: syz [ 1412.228070][T26777] tipc: Disabling bearer [ 1412.300354][T26791] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(11) [ 1412.300386][T26791] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1412.300887][T26791] vhci_hcd vhci_hcd.0: Device attached [ 1412.571559][ T5751] usb 48-1: SetAddress Request (6) to port 0 [ 1412.571630][ T5751] usb 48-1: new SuperSpeed USB device number 6 using vhci_hcd [ 1412.732262][T26801] netlink: 'syz.5.6337': attribute type 8 has an invalid length. [ 1412.739785][T26801] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6337'. [ 1412.777188][T26801] veth1_to_team: entered promiscuous mode [ 1412.790955][T26801] gretap0: entered promiscuous mode [ 1412.808165][T26801] veth1_to_team: left promiscuous mode [ 1412.827308][T26801] gretap0: left promiscuous mode [ 1412.841159][T10185] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1412.986933][T26792] vhci_hcd: connection reset by peer [ 1412.987567][T21025] vhci_hcd vhci_hcd.7: stop threads [ 1412.987591][T21025] vhci_hcd vhci_hcd.7: release socket [ 1412.987687][T21025] vhci_hcd vhci_hcd.7: disconnect device [ 1413.016583][T10185] usb 4-1: Using ep0 maxpacket: 16 [ 1413.020265][T10185] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1413.020317][T10185] usb 4-1: New USB device found, idVendor=093a, idProduct=260e, bcdDevice=18.85 [ 1413.027735][T10185] usb 4-1: config 1 has an invalid interface number: 151 but max is 0 [ 1413.027762][T10185] usb 4-1: config 1 has no interface number 0 [ 1413.027802][T10185] usb 4-1: config 1 interface 151 has no altsetting 0 [ 1413.093794][T10185] usb 4-1: string descriptor 0 read error: -22 [ 1413.093944][T10185] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1413.139987][T10185] gspca_main: pac7311-2.14.0 probing 093a:260e [ 1413.613724][T26796] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6335'. [ 1413.631814][T10185] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -71 [ 1413.631904][T10185] pac7311 4-1:1.151: probe with driver pac7311 failed with error -71 [ 1413.667495][T10185] usb 4-1: USB disconnect, device number 85 [ 1413.728696][T26807] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1414.778007][T21389] yealink 3-1:36.0: invalid payload size 0, expected 16 [ 1414.790971][T21389] input: Yealink usb-p1k as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:36.0/input/input139 [ 1414.802594][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1414.802846][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1414.803094][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1414.803304][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1414.803505][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1414.803717][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1414.803941][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1414.804138][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1414.804154][ C0] yealink 3-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 1414.841945][T21389] usb 3-1: USB disconnect, device number 116 [ 1414.951352][T25012] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1415.121542][T25012] usb 4-1: Using ep0 maxpacket: 32 [ 1415.271198][T21389] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1415.363757][T26811] ip6tnl1: entered allmulticast mode [ 1415.366332][T25012] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1415.366370][T25012] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1415.369800][T25012] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1415.369828][T25012] usb 4-1: can't read configurations, error -71 [ 1415.424032][T21389] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1415.424092][T21389] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 1415.425147][T21389] usb 3-1: config 189 has an invalid interface number: 127 but max is 0 [ 1415.425173][T21389] usb 3-1: config 189 has no interface number 0 [ 1415.425205][T21389] usb 3-1: config 189 interface 127 has no altsetting 0 [ 1415.427335][T21389] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1415.427361][T21389] usb 3-1: Product: syz [ 1415.427378][T21389] usb 3-1: Manufacturer: syz [ 1415.427394][T21389] usb 3-1: SerialNumber: syz [ 1415.675653][T26816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1415.676251][T26816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1415.685689][T21389] usbserial_generic 3-1:189.127: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 1415.685717][T21389] usbserial_generic 3-1:189.127: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 1415.685768][T21389] usbserial_generic 3-1:189.127: device has no bulk endpoints [ 1415.689136][T21389] safe_serial 3-1:189.127: safe_serial converter detected [ 1415.689362][T21389] safe_serial 3-1:189.127: probe with driver safe_serial failed with error -22 [ 1415.738145][T21389] usb 3-1: USB disconnect, device number 117 [ 1415.850865][T26820] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1416.068832][T26822] nvme nvme0: failed to connect socket: -101 [ 1416.070873][T26826] loop4: detected capacity change from 0 to 7 [ 1416.098723][T26826] Dev loop4: unable to read RDB block 7 [ 1416.098756][T26826] loop4: unable to read partition table [ 1416.098905][T26826] loop4: partition table beyond EOD, truncated [ 1416.098929][T26826] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1416.446520][T26831] netlink: 'syz.2.6348': attribute type 8 has an invalid length. [ 1416.446538][T26831] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6348'. [ 1416.486007][T26831] veth1_to_team: entered promiscuous mode [ 1416.497713][T26831] gretap0: entered promiscuous mode [ 1416.510023][T26831] veth1_to_team: left promiscuous mode [ 1416.525270][T26831] gretap0: left promiscuous mode [ 1416.769725][T26836] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6350'. [ 1416.769744][T26836] tipc: Started in network mode [ 1416.769757][T26836] tipc: Node identity 805e0004, cluster identity 4711 [ 1416.769766][T26836] tipc: Node number set to 2153644036 [ 1416.960090][T26838] netlink: 'syz.2.6351': attribute type 21 has an invalid length. [ 1416.960109][T26838] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6351'. [ 1416.987716][T26840] vlan3: entered allmulticast mode [ 1416.987773][T26840] bond0: entered allmulticast mode [ 1416.987820][T26840] bond_slave_0: entered allmulticast mode [ 1416.987870][T26840] bond_slave_1: entered allmulticast mode [ 1417.019661][T26840] netlink: 14 bytes leftover after parsing attributes in process `syz.6.6352'. [ 1417.062056][T26838] netlink: 'syz.2.6351': attribute type 21 has an invalid length. [ 1417.062081][T26838] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6351'. [ 1417.094983][T26840] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1417.114627][T26840] bond_slave_0: left allmulticast mode [ 1417.129620][T26840] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1417.143808][T26840] bond_slave_1: left allmulticast mode [ 1417.145661][T26840] bond0 (unregistering): Released all slaves [ 1417.205109][ T5926] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1417.205161][ T5926] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1417.205199][ T5926] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1417.205235][ T5926] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1417.662018][ T5751] usb 48-1: device descriptor read/8, error -110 [ 1417.884669][T26848] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1418.065672][ T5751] usb usb48-port1: attempt power cycle [ 1418.272324][ T9] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1418.309923][T26860] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6356'. [ 1418.421629][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 1418.429164][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1418.429204][ T9] usb 4-1: New USB device found, idVendor=093a, idProduct=260e, bcdDevice=18.85 [ 1418.439359][ T9] usb 4-1: config 1 has an invalid interface number: 151 but max is 0 [ 1418.439440][ T9] usb 4-1: config 1 has no interface number 0 [ 1418.439524][ T9] usb 4-1: config 1 interface 151 has no altsetting 0 [ 1418.491693][ T9] usb 4-1: string descriptor 0 read error: -22 [ 1418.491802][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1418.538757][ T9] gspca_main: pac7311-2.14.0 probing 093a:260e [ 1418.628150][ T5751] usb usb48-port1: unable to enumerate USB device [ 1418.976719][T26856] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6357'. [ 1418.984631][ T9] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -71 [ 1418.984882][ T9] pac7311 4-1:1.151: probe with driver pac7311 failed with error -71 [ 1419.014285][ T9] usb 4-1: USB disconnect, device number 88 [ 1419.622196][T26863] loop4: detected capacity change from 0 to 7 [ 1419.623226][T26863] Dev loop4: unable to read RDB block 7 [ 1419.623271][T26863] loop4: unable to read partition table [ 1419.623477][T26863] loop4: partition table beyond EOD, truncated [ 1419.623498][T26863] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1419.807318][T26869] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6361'. [ 1420.097549][T26872] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1420.538672][T26881] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1420.904254][T26883] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6365'. [ 1420.958684][ T4982] loop0: [ 1420.958716][ T4982] loop0: partition table partially beyond EOD, truncated [ 1421.648112][T26894] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1421.855253][T26897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1422.596433][T16380] Bluetooth: hci3: ISO packet for unknown connection handle 3963 [ 1422.639510][T26906] xt_hashlimit: max too large, truncated to 1048576 [ 1423.190300][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.190347][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.361433][T10175] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1423.491165][T10175] usb 4-1: device descriptor read/64, error -71 [ 1423.731477][T10175] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1423.871529][T10175] usb 4-1: device descriptor read/64, error -71 [ 1423.982897][T10175] usb usb4-port1: attempt power cycle [ 1424.048136][T26914] bond0: Removing last ns target with arp_interval on [ 1424.115323][T26914] bond3: Removing last ns target with arp_interval on [ 1424.321603][T10175] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1424.354129][T10175] usb 4-1: device descriptor read/8, error -71 [ 1424.601730][T10175] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1424.622297][T10175] usb 4-1: device descriptor read/8, error -71 [ 1424.741408][T10175] usb usb4-port1: unable to enumerate USB device [ 1425.153948][T26935] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1425.177356][T26935] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6380'. [ 1425.843788][T26945] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1426.870320][T26953] FAULT_INJECTION: forcing a failure. [ 1426.870320][T26953] name failslab, interval 1, probability 0, space 0, times 0 [ 1426.870360][T26953] CPU: 1 UID: 0 PID: 26953 Comm: syz.3.6386 Tainted: G L syzkaller #0 PREEMPT(full) [ 1426.870391][T26953] Tainted: [L]=SOFTLOCKUP [ 1426.870400][T26953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1426.870414][T26953] Call Trace: [ 1426.870423][T26953] [ 1426.870433][T26953] dump_stack_lvl+0xe8/0x150 [ 1426.870472][T26953] should_fail_ex+0x410/0x560 [ 1426.870505][T26953] should_failslab+0xa8/0x100 [ 1426.870543][T26953] ? __kernfs_new_node+0xe6/0x980 [ 1426.870569][T26953] kmem_cache_alloc_noprof+0xa1/0x600 [ 1426.870607][T26953] ? __kernfs_new_node+0xe6/0x980 [ 1426.870638][T26953] __kernfs_new_node+0xe6/0x980 [ 1426.870672][T26953] ? __pfx___kernfs_new_node+0x10/0x10 [ 1426.870695][T26953] ? kernfs_root+0x1c/0x230 [ 1426.870724][T26953] ? kernfs_root+0x1c/0x230 [ 1426.870746][T26953] ? kernfs_root+0x1c/0x230 [ 1426.870765][T26953] ? kernfs_root+0x1c/0x230 [ 1426.870791][T26953] kernfs_new_node+0xea/0x140 [ 1426.870821][T26953] __kernfs_create_file+0x4b/0x2e0 [ 1426.870858][T26953] sysfs_add_file_mode_ns+0x237/0x300 [ 1426.870899][T26953] internal_create_group+0x679/0x1180 [ 1426.870953][T26953] ? __pfx_internal_create_group+0x10/0x10 [ 1426.870992][T26953] ? up_write+0x19d/0x4a0 [ 1426.871026][T26953] sysfs_create_groups+0x59/0x120 [ 1426.871050][T26953] device_add_attrs+0xde/0x600 [ 1426.871086][T26953] ? __pfx_device_add_attrs+0x10/0x10 [ 1426.871114][T26953] ? device_add_class_symlinks+0x21f/0x240 [ 1426.871143][T26953] device_add+0x488/0xb80 [ 1426.871170][T26953] netdev_register_kobject+0x197/0x350 [ 1426.871202][T26953] register_netdevice+0x1433/0x1eb0 [ 1426.871254][T26953] ? __pfx_register_netdevice+0x10/0x10 [ 1426.871306][T26953] br_dev_newlink+0x6a/0x150 [ 1426.871333][T26953] ? rtnl_newlink_create+0x2f2/0x7b0 [ 1426.871364][T26953] ? __pfx_br_dev_newlink+0x10/0x10 [ 1426.871393][T26953] rtnl_newlink_create+0x305/0x7b0 [ 1426.871431][T26953] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1426.871468][T26953] ? __pfx___mutex_lock+0x10/0x10 [ 1426.871509][T26953] ? ns_capable+0x89/0xe0 [ 1426.871551][T26953] rtnl_newlink+0x166d/0x1c30 [ 1426.871599][T26953] ? __pfx_rtnl_newlink+0x10/0x10 [ 1426.871626][T26953] ? do_syscall_64+0x166/0x520 [ 1426.871653][T26953] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1426.871717][T26953] ? kasan_quarantine_put+0xbb/0x1f0 [ 1426.871741][T26953] ? lockdep_hardirqs_on+0x7b/0x110 [ 1426.871774][T26953] ? nlmon_xmit+0xb0/0x100 [ 1426.871798][T26953] ? kmem_cache_free+0x182/0x650 [ 1426.871840][T26953] ? __lock_acquire+0x747/0x2de0 [ 1426.871875][T26953] ? __local_bh_enable_ip+0xd6/0x140 [ 1426.871905][T26953] ? lockdep_hardirqs_on+0x7b/0x110 [ 1426.871933][T26953] ? __dev_queue_xmit+0x29b/0x3820 [ 1426.871967][T26953] ? __local_bh_enable_ip+0xd6/0x140 [ 1426.871995][T26953] ? __dev_queue_xmit+0x29b/0x3820 [ 1426.872039][T26953] ? lock_acquire+0x115/0x350 [ 1426.872080][T26953] ? __pfx_rtnl_newlink+0x10/0x10 [ 1426.872109][T26953] rtnetlink_rcv_msg+0x802/0xc00 [ 1426.872143][T26953] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1426.872171][T26953] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1426.872199][T26953] ? ref_tracker_free+0x689/0x830 [ 1426.872232][T26953] ? __pfx_ref_tracker_free+0x10/0x10 [ 1426.872272][T26953] netlink_rcv_skb+0x226/0x4a0 [ 1426.872310][T26953] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1426.872342][T26953] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1426.872393][T26953] ? netlink_deliver_tap+0x2e/0x1b0 [ 1426.872428][T26953] ? netlink_deliver_tap+0x2e/0x1b0 [ 1426.872470][T26953] netlink_unicast+0x7bd/0x940 [ 1426.872514][T26953] netlink_sendmsg+0x813/0xb40 [ 1426.872555][T26953] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1426.872588][T26953] ? apparmor_socket_sendmsg+0x98/0x360 [ 1426.872618][T26953] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1426.872639][T26953] sock_sendmsg_nosec+0x13a/0x180 [ 1426.872668][T26953] ____sys_sendmsg+0x54e/0x850 [ 1426.872708][T26953] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1426.872751][T26953] ? import_iovec+0x73/0xa0 [ 1426.872786][T26953] ___sys_sendmsg+0x2a5/0x360 [ 1426.872818][T26953] ? __lock_acquire+0x747/0x2de0 [ 1426.872847][T26953] ? __pfx____sys_sendmsg+0x10/0x10 [ 1426.872919][T26953] ? __fget_files+0x2a/0x420 [ 1426.872951][T26953] ? __fget_files+0x3a2/0x420 [ 1426.872995][T26953] __x64_sys_sendmsg+0x1b1/0x290 [ 1426.873031][T26953] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1426.873095][T26953] do_syscall_64+0x166/0x520 [ 1426.873124][T26953] ? trace_irq_disable+0x3b/0x140 [ 1426.873149][T26953] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1426.873173][T26953] ? clear_bhb_loop+0x70/0xc0 [ 1426.873202][T26953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1426.873226][T26953] RIP: 0033:0x7f7e1e19e159 [ 1426.873248][T26953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1426.873269][T26953] RSP: 002b:00007f7e1efad028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1426.873295][T26953] RAX: ffffffffffffffda RBX: 00007f7e1e425fa0 RCX: 00007f7e1e19e159 [ 1426.873313][T26953] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1426.873328][T26953] RBP: 00007f7e1efad090 R08: 0000000000000000 R09: 0000000000000000 [ 1426.873343][T26953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1426.873358][T26953] R13: 00007f7e1e426038 R14: 00007f7e1e425fa0 R15: 00007f7e1e54fa48 [ 1426.873396][T26953] [ 1427.795849][T26955] loop5: detected capacity change from 0 to 7 [ 1427.797786][T26955] Dev loop5: unable to read RDB block 7 [ 1427.797829][T26955] loop5: unable to read partition table [ 1427.798044][T26955] loop5: partition table beyond EOD, truncated [ 1427.798064][T26955] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1427.870203][T26955] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6387'. [ 1428.719986][T26972] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1428.720017][T26972] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1428.879708][T26972] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1428.886392][T26972] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1428.969841][T26972] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1428.969870][T26972] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1429.040672][T26972] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1429.040692][T26972] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1429.087534][T26972] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1429.087592][T26972] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1429.486562][T26985] FAULT_INJECTION: forcing a failure. [ 1429.486562][T26985] name failslab, interval 1, probability 0, space 0, times 0 [ 1429.486590][T26985] CPU: 1 UID: 0 PID: 26985 Comm: syz.7.6397 Tainted: G L syzkaller #0 PREEMPT(full) [ 1429.486612][T26985] Tainted: [L]=SOFTLOCKUP [ 1429.486619][T26985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1429.486629][T26985] Call Trace: [ 1429.486635][T26985] [ 1429.486643][T26985] dump_stack_lvl+0xe8/0x150 [ 1429.486671][T26985] should_fail_ex+0x410/0x560 [ 1429.486695][T26985] should_failslab+0xa8/0x100 [ 1429.486714][T26985] ? __kernfs_new_node+0xe6/0x980 [ 1429.486731][T26985] kmem_cache_alloc_noprof+0xa1/0x600 [ 1429.486762][T26985] ? __kernfs_new_node+0xe6/0x980 [ 1429.486784][T26985] __kernfs_new_node+0xe6/0x980 [ 1429.486808][T26985] ? __pfx___kernfs_new_node+0x10/0x10 [ 1429.486825][T26985] ? kernfs_root+0x1c/0x230 [ 1429.486846][T26985] ? kernfs_root+0x1c/0x230 [ 1429.486861][T26985] ? kernfs_root+0x1c/0x230 [ 1429.486874][T26985] ? kernfs_root+0x1c/0x230 [ 1429.486892][T26985] kernfs_new_node+0xea/0x140 [ 1429.486913][T26985] __kernfs_create_file+0x4b/0x2e0 [ 1429.486936][T26985] sysfs_add_file_mode_ns+0x237/0x300 [ 1429.486965][T26985] internal_create_group+0x679/0x1180 [ 1429.487003][T26985] ? __pfx_internal_create_group+0x10/0x10 [ 1429.487032][T26985] ? up_write+0x19d/0x4a0 [ 1429.487058][T26985] sysfs_create_groups+0x59/0x120 [ 1429.487076][T26985] device_add_attrs+0xde/0x600 [ 1429.487096][T26985] ? __pfx_device_add_attrs+0x10/0x10 [ 1429.487117][T26985] ? device_add_class_symlinks+0x21f/0x240 [ 1429.487137][T26985] device_add+0x488/0xb80 [ 1429.487156][T26985] netdev_register_kobject+0x197/0x350 [ 1429.487179][T26985] register_netdevice+0x1433/0x1eb0 [ 1429.487216][T26985] ? __pfx_register_netdevice+0x10/0x10 [ 1429.487253][T26985] br_dev_newlink+0x6a/0x150 [ 1429.487273][T26985] ? rtnl_newlink_create+0x2f2/0x7b0 [ 1429.487296][T26985] ? __pfx_br_dev_newlink+0x10/0x10 [ 1429.487318][T26985] rtnl_newlink_create+0x305/0x7b0 [ 1429.487346][T26985] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1429.487437][T26985] ? __pfx___mutex_lock+0x10/0x10 [ 1429.487467][T26985] ? ns_capable+0x89/0xe0 [ 1429.487492][T26985] rtnl_newlink+0x166d/0x1c30 [ 1429.487525][T26985] ? __pfx_rtnl_newlink+0x10/0x10 [ 1429.487544][T26985] ? do_syscall_64+0x166/0x520 [ 1429.487565][T26985] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1429.487608][T26985] ? kasan_quarantine_put+0xbb/0x1f0 [ 1429.487625][T26985] ? lockdep_hardirqs_on+0x7b/0x110 [ 1429.487648][T26985] ? nlmon_xmit+0xb0/0x100 [ 1429.487665][T26985] ? kmem_cache_free+0x182/0x650 [ 1429.487691][T26985] ? __lock_acquire+0x747/0x2de0 [ 1429.487715][T26985] ? __local_bh_enable_ip+0xd6/0x140 [ 1429.487737][T26985] ? lockdep_hardirqs_on+0x7b/0x110 [ 1429.487757][T26985] ? __dev_queue_xmit+0x29b/0x3820 [ 1429.487781][T26985] ? __local_bh_enable_ip+0xd6/0x140 [ 1429.487801][T26985] ? __dev_queue_xmit+0x29b/0x3820 [ 1429.487832][T26985] ? lock_acquire+0x115/0x350 [ 1429.487859][T26985] ? __pfx_rtnl_newlink+0x10/0x10 [ 1429.487879][T26985] rtnetlink_rcv_msg+0x802/0xc00 [ 1429.487903][T26985] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1429.487923][T26985] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1429.487942][T26985] ? ref_tracker_free+0x689/0x830 [ 1429.487965][T26985] ? __pfx_ref_tracker_free+0x10/0x10 [ 1429.487993][T26985] netlink_rcv_skb+0x226/0x4a0 [ 1429.488019][T26985] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1429.488041][T26985] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1429.488075][T26985] ? netlink_deliver_tap+0x2e/0x1b0 [ 1429.488100][T26985] ? netlink_deliver_tap+0x2e/0x1b0 [ 1429.488129][T26985] netlink_unicast+0x7bd/0x940 [ 1429.488160][T26985] netlink_sendmsg+0x813/0xb40 [ 1429.488182][T26985] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1429.488209][T26985] ? apparmor_socket_sendmsg+0x98/0x360 [ 1429.488231][T26985] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1429.488246][T26985] sock_sendmsg_nosec+0x13a/0x180 [ 1429.488266][T26985] ____sys_sendmsg+0x54e/0x850 [ 1429.488293][T26985] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1429.488323][T26985] ? import_iovec+0x73/0xa0 [ 1429.488347][T26985] ___sys_sendmsg+0x2a5/0x360 [ 1429.488374][T26985] ? __lock_acquire+0x747/0x2de0 [ 1429.488393][T26985] ? __pfx____sys_sendmsg+0x10/0x10 [ 1429.488443][T26985] ? __fget_files+0x2a/0x420 [ 1429.488465][T26985] ? __fget_files+0x3a2/0x420 [ 1429.488495][T26985] __x64_sys_sendmsg+0x1b1/0x290 [ 1429.488521][T26985] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1429.488566][T26985] do_syscall_64+0x166/0x520 [ 1429.488586][T26985] ? trace_irq_disable+0x3b/0x140 [ 1429.488602][T26985] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1429.488618][T26985] ? clear_bhb_loop+0x70/0xc0 [ 1429.488637][T26985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1429.488654][T26985] RIP: 0033:0x7fda65b9e159 [ 1429.488669][T26985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1429.488685][T26985] RSP: 002b:00007fda66a1d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1429.488703][T26985] RAX: ffffffffffffffda RBX: 00007fda65e25fa0 RCX: 00007fda65b9e159 [ 1429.488717][T26985] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1429.488727][T26985] RBP: 00007fda66a1d090 R08: 0000000000000000 R09: 0000000000000000 [ 1429.488737][T26985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1429.488747][T26985] R13: 00007fda65e26038 R14: 00007fda65e25fa0 R15: 00007fda65f4fa48 [ 1429.488772][T26985] [ 1429.653482][T10175] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1429.664890][ T5751] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1429.898651][T10175] usb 6-1: New USB device found, idVendor=0a46, idProduct=0269, bcdDevice=d8.46 [ 1429.920589][T10175] usb 6-1: config 1 has an invalid interface number: 69 but max is 0 [ 1429.920671][T10175] usb 6-1: config 1 has no interface number 0 [ 1429.920755][T10175] usb 6-1: config 1 interface 69 has no altsetting 0 [ 1429.952065][T10175] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1429.952148][T10175] usb 6-1: Product: syz [ 1429.952198][T10175] usb 6-1: Manufacturer: syz [ 1429.952240][T10175] usb 6-1: SerialNumber: syz [ 1430.236506][T26987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1430.249420][T26987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1430.358572][T10175] dm9601 6-1:1.69: probe with driver dm9601 failed with error -22 [ 1430.636123][T26993] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6396'. [ 1430.662015][ T31] audit: type=1326 audit(1790230607.959:20196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26982 comm="syz.5.6396" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4cce59e159 code=0x0 [ 1431.121901][T26997] netlink: 'syz.2.6399': attribute type 8 has an invalid length. [ 1431.121924][T26997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6399'. [ 1431.128519][T26997] veth1_to_team: entered promiscuous mode [ 1431.130003][T26997] gretap0: entered promiscuous mode [ 1431.139423][T26997] veth1_to_team: left promiscuous mode [ 1431.149480][T26997] gretap0: left promiscuous mode [ 1431.476065][T27001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1432.355825][ T5751] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1432.355883][ T5751] usb 4-1: New USB device found, idVendor=0d8c, idProduct=a7b7, bcdDevice=d0.e5 [ 1432.357776][ T5751] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1432.357816][ T5751] usb 4-1: can't read configurations, error -71 [ 1432.476943][T10185] usb 6-1: USB disconnect, device number 18 [ 1432.760347][T27011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1433.092112][T27018] kvm: apic: phys broadcast and lowest prio [ 1433.310127][T27018] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1433.336575][T27018] batman_adv: batadv0: Interface activated: netdevsim0 [ 1433.379360][T27018] bond1: left promiscuous mode [ 1433.432316][T10175] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1433.581403][T10175] usb 3-1: Using ep0 maxpacket: 32 [ 1433.582171][T10175] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1433.583233][T10175] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1433.583260][T10175] usb 3-1: config 0 has no interface number 0 [ 1433.589703][T10175] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1433.589842][T10175] usb 3-1: Product: syz [ 1433.589908][T10175] usb 3-1: Manufacturer: syz [ 1433.589935][T10175] usb 3-1: SerialNumber: syz [ 1433.644013][T10175] usb 3-1: config 0 descriptor?? [ 1433.662901][T10175] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1433.716612][T27021] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 1433.716642][T27021] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1433.718329][T27021] vhci_hcd vhci_hcd.0: Device attached [ 1433.951268][ T5751] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 1433.957177][T27022] vhci_hcd: connection reset by peer [ 1433.987733][ T34] vhci_hcd vhci_hcd.5: stop threads [ 1433.987764][ T34] vhci_hcd vhci_hcd.5: release socket [ 1433.987820][ T34] vhci_hcd vhci_hcd.5: disconnect device [ 1434.181498][T25012] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1434.234518][T27029] netlink: 'syz.7.6410': attribute type 8 has an invalid length. [ 1434.234542][T27029] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6410'. [ 1434.293749][T27029] veth1_to_team: entered promiscuous mode [ 1434.298806][T27029] gretap0: entered promiscuous mode [ 1434.331941][T25012] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1434.333260][T25012] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1434.333313][T25012] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1434.336410][T27029] veth1_to_team: left promiscuous mode [ 1434.338648][T27029] gretap0: left promiscuous mode [ 1434.351112][T25012] usb 4-1: config 0 descriptor?? [ 1434.393487][T25012] pwc: Askey VC010 type 2 USB webcam detected. [ 1435.090670][T27041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1435.117650][T27041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1435.169714][T25012] pwc: recv_control_msg error -71 req 02 val 2b00 [ 1435.184436][T25012] pwc: recv_control_msg error -71 req 02 val 2700 [ 1435.188894][T25012] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1435.189379][T25012] pwc: recv_control_msg error -71 req 04 val 1000 [ 1435.189834][T25012] pwc: recv_control_msg error -71 req 04 val 1300 [ 1435.190763][T25012] pwc: recv_control_msg error -71 req 04 val 1400 [ 1435.215661][T25012] pwc: recv_control_msg error -71 req 02 val 2000 [ 1435.238880][T25012] pwc: recv_control_msg error -71 req 02 val 2100 [ 1435.239334][T25012] pwc: recv_control_msg error -71 req 04 val 1500 [ 1435.239823][T25012] pwc: recv_control_msg error -71 req 02 val 2500 [ 1435.262767][T25012] pwc: recv_control_msg error -71 req 02 val 2400 [ 1435.263204][T25012] pwc: recv_control_msg error -71 req 02 val 2600 [ 1435.263641][T25012] pwc: recv_control_msg error -71 req 02 val 2900 [ 1435.264064][T25012] pwc: recv_control_msg error -71 req 02 val 2800 [ 1435.264659][T25012] pwc: recv_control_msg error -71 req 04 val 1100 [ 1435.265083][T25012] pwc: recv_control_msg error -71 req 04 val 1200 [ 1435.267475][T25012] pwc: Registered as video103. [ 1435.284649][T25012] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input144 [ 1435.356615][T25012] usb 4-1: USB disconnect, device number 95 [ 1435.391228][ T9] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1435.546095][ T9] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1435.567652][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1435.604227][ T9] usb 6-1: config 0 descriptor?? [ 1435.624218][T27045] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6414'. [ 1435.925274][ T9] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1435.926139][ T9] [drm:udl_init] *ERROR* Selecting channel failed [ 1436.014360][ T9] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 1 [ 1436.014417][ T9] [drm] Initialized udl on minor 1 [ 1436.076127][ T9] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1436.076803][ T9] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1436.077907][T11867] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1436.122130][ T9] usb 6-1: USB disconnect, device number 19 [ 1436.135780][T11867] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1436.136109][T11867] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1436.409501][T27055] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6418'. [ 1436.463006][T10175] usb 3-1: qt2_attach - failed to power on unit: -71 [ 1436.463307][T10175] quatech2 3-1:0.51: probe with driver quatech2 failed with error -71 [ 1436.530518][T10175] usb 3-1: USB disconnect, device number 118 [ 1436.728569][T27064] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6420'. [ 1436.789210][T27065] netlink: 'syz.3.6421': attribute type 8 has an invalid length. [ 1436.789237][T27065] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6421'. [ 1436.825404][T27065] veth1_to_team: entered promiscuous mode [ 1436.843869][T27065] gretap0: entered promiscuous mode [ 1436.847757][T27065] veth1_to_team: left promiscuous mode [ 1436.850125][T27065] gretap0: left promiscuous mode [ 1437.922790][T27079] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1438.241251][T25012] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1438.411104][T25012] usb 6-1: Using ep0 maxpacket: 32 [ 1438.417423][T25012] usb 6-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.40 [ 1438.419048][T25012] usb 6-1: config 0 has too many interfaces: 237, using maximum allowed: 32 [ 1438.419077][T25012] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 237 [ 1438.419125][T25012] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1438.475439][T25012] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1438.475471][T25012] usb 6-1: Product: syz [ 1438.475488][T25012] usb 6-1: Manufacturer: syz [ 1438.475505][T25012] usb 6-1: SerialNumber: syz [ 1438.505804][T25012] usb 6-1: config 0 descriptor?? [ 1438.618738][T27084] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1439.103058][ T5751] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 1440.170256][T25012] appletouch 6-1:0.0: Failed to read mode from device. [ 1440.170427][T25012] appletouch 6-1:0.0: probe with driver appletouch failed with error -5 [ 1440.228190][T25012] usb 6-1: USB disconnect, device number 20 [ 1440.383394][T27099] binder: 27098:27099 ioctl c0306201 2000000004c0 returned -14 [ 1440.390079][T27099] binder: 27098:27099 ioctl c0306201 2000000001c0 returned -14 [ 1440.407627][T27099] binder: 27098:27099 ioctl c0189373 200000000280 returned -22 [ 1440.490104][T27100] binder: 27098:27100 ioctl c0205838 0 returned -22 [ 1441.896598][T27123] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6435'. [ 1441.896637][T27123] netlink: 72 bytes leftover after parsing attributes in process `syz.5.6435'. [ 1442.172940][ T4982] loop0: [ 1442.173011][ T4982] loop0: partition table partially beyond EOD, truncated [ 1442.261139][T10185] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1442.293197][T27130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6438'. [ 1442.411527][T10185] usb 6-1: Using ep0 maxpacket: 32 [ 1442.417677][T10185] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1442.418606][T10185] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 1442.418625][T10185] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1442.418641][T10185] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1442.418655][T10185] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1442.418670][T10185] usb 6-1: config 1 has no interface number 0 [ 1442.418701][T10185] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1442.431599][T10185] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 1443.265858][T10185] snd_usb_pod 6-1:1.1: set_interface failed [ 1443.266045][T10185] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 1443.266240][T10185] snd_usb_pod 6-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 1443.317513][T10185] usb 6-1: USB disconnect, device number 21 [ 1443.908579][T27151] tc action pedit offset 8 out of bounds [ 1444.161782][ T5751] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 1444.329454][ T5751] usb 6-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1444.333334][ T5751] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1444.333412][ T5751] usb 6-1: config 0 has no interface number 0 [ 1444.345144][ T5751] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1444.345216][ T5751] usb 6-1: Product: syz [ 1444.345257][ T5751] usb 6-1: Manufacturer: syz [ 1444.345299][ T5751] usb 6-1: SerialNumber: syz [ 1444.375400][ T5751] usb 6-1: config 0 descriptor?? [ 1444.398210][ T5751] usb 6-1: selecting invalid altsetting 1 [ 1444.398368][ T5751] dvb_ttusb_budget: ttusb_init_controller: error [ 1444.398384][ T5751] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1444.531047][ T5751] DVB: Unable to find symbol stv0299_attach() [ 1444.585604][ T5751] DVB: Unable to find symbol tda8083_attach() [ 1444.585621][ T5751] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1444.691227][T27170] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1444.691251][T27170] IPv6: NLM_F_CREATE should be set when creating new route [ 1444.778262][T27187] fuse: Bad value for 'group_id' [ 1444.778283][T27187] fuse: Bad value for 'group_id' [ 1444.856844][T27170] bridge0: port 2(bridge_slave_1) entered disabled state [ 1444.857493][T27170] bridge0: port 1(bridge_slave_0) entered disabled state [ 1445.082022][T27170] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1445.109766][T27170] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1445.381362][ T5751] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1445.542438][ T5751] usb 4-1: Using ep0 maxpacket: 32 [ 1445.544051][ T5751] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1445.547407][ T5751] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 1445.547435][ T5751] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1445.547459][ T5751] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1445.547481][ T5751] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1445.547504][ T5751] usb 4-1: config 1 has no interface number 0 [ 1445.547568][ T5751] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1445.643740][ T5751] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 1445.713201][T13010] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1445.713258][T13010] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1445.713333][T13010] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1445.713375][T13010] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1445.811226][ T9] usb 6-1: USB disconnect, device number 22 [ 1446.226274][T27219] ip_tables: iptables: counters copy to user failed while replacing table [ 1446.366246][T27228] netlink: 'syz.7.6466': attribute type 12 has an invalid length. [ 1446.372119][ T5751] snd_usb_pod 4-1:1.1: set_interface failed [ 1446.374337][ T5751] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 1446.374861][ T5751] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 1446.407099][ T5751] usb 4-1: USB disconnect, device number 96 [ 1446.521409][T25012] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1446.600411][T27231] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6465'. [ 1446.634254][ T4982] loop0: [ 1446.634283][ T4982] loop0: partition table partially beyond EOD, truncated [ 1446.698274][T25012] usb 3-1: New USB device found, idVendor=056a, idProduct=00f0, bcdDevice= 0.40 [ 1446.699385][T25012] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 1446.699421][T25012] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1446.722289][T25012] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1446.722319][T25012] usb 3-1: Product: 쓢꠱ì�§æ‹ åŠ°ä‹¯â½­â´ŽáŠ“ã“–ê–œé¡­ [ 1446.722338][T25012] usb 3-1: Manufacturer: 爸洣â�¾ãº½í”�⭥춣Ꙁ㷀¥㎬乴ê�†éµ¤ëˆ²å�ºã±¢áŽºè³¤ì€¤Ö¡ì€ƒà¨«â²¦í�ˆï¦¹ë˜«é�šå¢¯æ•˜è¶•ଊ긞漉깹℅ã�˜ë¥¥â©ž [ 1446.722363][T25012] usb 3-1: SerialNumber: syz [ 1446.758802][T27235] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1446.829865][T27235] veth1_to_bond: entered promiscuous mode [ 1446.852631][T27235] veth1_to_bond: entered allmulticast mode [ 1446.856110][T27239] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6467'. [ 1446.908520][T27235] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6468'. [ 1446.943802][T27235] veth1_to_bond (unregistering): left promiscuous mode [ 1446.943850][T27235] veth1_to_bond (unregistering): left allmulticast mode [ 1446.994646][T27235] bond0: (slave bond_slave_1): Releasing backup interface [ 1447.091406][T11867] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1447.251132][T11867] usb 4-1: Using ep0 maxpacket: 8 [ 1447.253892][T11867] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1447.253947][T11867] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1447.255123][T11867] usb 4-1: config 1 has an invalid descriptor of length 22, skipping remainder of the config [ 1447.255196][T11867] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1447.257550][T11867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1447.257576][T11867] usb 4-1: Product: syz [ 1447.257594][T11867] usb 4-1: Manufacturer: syz [ 1447.257610][T11867] usb 4-1: SerialNumber: syz [ 1447.502654][T11867] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1447.502720][T11867] usb 4-1: MIDIStreaming interface descriptor not found [ 1447.554732][ T4982] loop0: [ 1447.554792][ T4982] loop0: partition table partially beyond EOD, truncated [ 1447.721509][T11867] usb 4-1: USB disconnect, device number 97 [ 1447.827011][T27256] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6472'. [ 1447.973879][T23220] udevd[23220]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1448.100961][T27258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1448.241528][T25012] usbhid 3-1:1.0: can't add hid device: -71 [ 1448.241653][T25012] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 1448.250694][T25012] usb 3-1: USB disconnect, device number 119 [ 1448.434573][T27262] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1448.438870][T27262] xt_connbytes: Forcing CT accounting to be enabled [ 1448.548971][T27264] netlink: 'syz.6.6476': attribute type 8 has an invalid length. [ 1448.548989][T27264] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6476'. [ 1448.594202][T27264] veth1_to_team: entered promiscuous mode [ 1448.597400][T27264] gretap0: entered promiscuous mode [ 1448.600447][T27264] veth1_to_team: left promiscuous mode [ 1448.629191][T27264] gretap0: left promiscuous mode [ 1448.770922][T27269] geneve2: entered allmulticast mode [ 1448.985420][T27273] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6479'. [ 1449.319779][T27279] dvmrp12: entered allmulticast mode [ 1449.773951][T27289] ip_tables: iptables: counters copy to user failed while replacing table [ 1450.182069][T27301] netlink: 1004 bytes leftover after parsing attributes in process `syz.6.6489'. [ 1450.421152][T11867] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1450.571151][T11867] usb 6-1: Using ep0 maxpacket: 8 [ 1450.571893][T11867] usb 6-1: New USB device found, idVendor=0b62, idProduct=0059, bcdDevice=38.9c [ 1450.572961][T11867] usb 6-1: config 7 has an invalid interface number: 162 but max is 1 [ 1450.572986][T11867] usb 6-1: config 7 has an invalid interface number: 23 but max is 1 [ 1450.573009][T11867] usb 6-1: config 7 has an invalid interface descriptor of length 2, skipping [ 1450.573023][T11867] usb 6-1: config 7 has no interface number 0 [ 1450.573036][T11867] usb 6-1: config 7 has no interface number 1 [ 1450.573072][T11867] usb 6-1: config 7 interface 23 altsetting 48 bulk endpoint 0x5 has invalid maxpacket 1023 [ 1450.573090][T11867] usb 6-1: config 7 interface 23 altsetting 48 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1450.573110][T11867] usb 6-1: config 7 interface 162 has no altsetting 0 [ 1450.573123][T11867] usb 6-1: config 7 interface 23 has no altsetting 0 [ 1450.576435][T11867] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1450.576455][T11867] usb 6-1: Product: syz [ 1450.576466][T11867] usb 6-1: Manufacturer: syz [ 1450.576477][T11867] usb 6-1: SerialNumber: syz [ 1450.915665][T11867] usb 6-1: USB disconnect, device number 23 [ 1451.197197][T27319] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6494'. [ 1451.228264][T27319] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1451.239323][T27319] netlink: 'syz.6.6494': attribute type 10 has an invalid length. [ 1451.239350][T27319] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6494'. [ 1451.239545][T27319] dummy0: entered promiscuous mode [ 1451.466322][T27324] ------------[ cut here ]------------ [ 1451.466340][T27324] kvm_is_error_gpa(gpa) == kvm_is_error_hva(uhva) [ 1451.466355][T27324] WARNING: arch/x86/kvm/../../../virt/kvm/pfncache.c:267 at __kvm_gpc_refresh+0x1510/0x1710, CPU#0: syz.3.6496/27324 [ 1451.494246][T27324] Modules linked in: [ 1451.498207][T27324] CPU: 0 UID: 0 PID: 27324 Comm: syz.3.6496 Tainted: G L syzkaller #0 PREEMPT(full) [ 1451.509802][T27324] Tainted: [L]=SOFTLOCKUP [ 1451.514253][T27324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1451.526823][T27324] RIP: 0010:__kvm_gpc_refresh+0x1510/0x1710 [ 1451.533176][T27324] Code: c6 05 4b e2 22 0f 01 48 c7 c7 fd aa 3f 8e be 44 04 00 00 48 c7 c2 40 42 02 8c e8 6b b3 62 00 e9 81 ee ff ff e8 81 0b 87 00 90 <0f> 0b 90 bb ea ff ff ff 49 bf 00 00 00 00 00 fc ff df e9 4b f6 ff [ 1451.553159][T27324] RSP: 0018:ffffc90005fb71c0 EFLAGS: 00010287 [ 1451.559279][T27324] RAX: ffffffff8140d07f RBX: ffff888000000000 RCX: 0000000000080000 [ 1451.567756][T27324] RDX: ffffc900146ee000 RSI: 00000000000003d0 RDI: 00000000000003d1 [ 1451.575881][T27324] RBP: ffffc90005fb7350 R08: ffffffff907a517f R09: 1ffffffff20f4a2f [ 1451.584377][T27324] R10: dffffc0000000000 R11: fffffbfff20f4a30 R12: 1ffff92000bf6e4c [ 1451.593135][T27324] R13: ffff88806260dd60 R14: ffff888000000000 R15: ffffffffffffff01 [ 1451.601242][T27324] FS: 00007f7e1efad6c0(0000) GS:ffff888124ccb000(0000) knlGS:0000000000000000 [ 1451.610219][T27324] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1451.616937][T27324] CR2: 00007fba861aedc0 CR3: 000000002d72a000 CR4: 00000000003526f0 [ 1451.625444][T27324] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000406 [ 1451.633550][T27324] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1451.641637][T27324] Call Trace: [ 1451.644957][T27324] [ 1451.647963][T27324] ? lock_acquire+0x115/0x350 [ 1451.653148][T27324] ? kvm_gpc_refresh+0x31/0x110 [ 1451.658065][T27324] ? __pfx___kvm_gpc_refresh+0x10/0x10 [ 1451.663926][T27324] ? lock_acquire+0x115/0x350 [ 1451.668686][T27324] ? lock_acquire+0x115/0x350 [ 1451.673516][T27324] kvm_gpc_refresh+0xe1/0x110 [ 1451.678261][T27324] ? kvm_xen_set_evtchn+0x11e/0x220 [ 1451.684363][T27324] kvm_xen_set_evtchn+0x14f/0x220 [ 1451.689559][T27324] kvm_xen_hvm_evtchn_send+0x120/0x1e0 [ 1451.695514][T27324] kvm_arch_vm_ioctl+0xfad/0x1a10 [ 1451.700674][T27324] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 1451.706240][T27324] ? __lock_acquire+0x747/0x2de0 [ 1451.711629][T27324] ? __lock_acquire+0x747/0x2de0 [ 1451.716650][T27324] ? lock_acquire+0x115/0x350 [ 1451.721658][T27324] ? lock_acquire+0x115/0x350 [ 1451.726484][T27324] ? is_bpf_text_address+0x26/0x2b0 [ 1451.731877][T27324] ? is_bpf_text_address+0x292/0x2b0 [ 1451.737251][T27324] ? kernel_text_address+0xa5/0xe0 [ 1451.742889][T27324] ? __kernel_text_address+0xd/0x30 [ 1451.748176][T27324] ? unwind_get_return_address+0x4d/0x90 [ 1451.753949][T27324] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1451.760165][T27324] ? arch_stack_walk+0xfb/0x150 [ 1451.765257][T27324] ? stack_trace_save+0xa9/0x100 [ 1451.770242][T27324] ? __pfx_stack_trace_save+0x10/0x10 [ 1451.776059][T27324] ? kasan_save_track+0x4f/0x80 [ 1451.780970][T27324] ? stack_depot_save_flags+0x33/0x7f0 [ 1451.786989][T27324] ? __lock_acquire+0x747/0x2de0 [ 1451.792511][T27324] ? kasan_save_track+0x4f/0x80 [ 1451.797421][T27324] ? kasan_save_track+0x3e/0x80 [ 1451.802854][T27324] ? kasan_save_free_info+0x40/0x50 [ 1451.808113][T27324] ? __kasan_slab_free+0x5c/0x80 [ 1451.813184][T27324] ? kfree+0x1c5/0x650 [ 1451.817342][T27324] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 1451.823213][T27324] ? security_file_ioctl+0xc3/0x2a0 [ 1451.828462][T27324] ? __se_sys_ioctl+0x47/0x170 [ 1451.833706][T27324] ? do_syscall_64+0x166/0x520 [ 1451.838611][T27324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1451.844809][T27324] kvm_vm_ioctl+0x8f7/0xd30 [ 1451.849384][T27324] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1451.854556][T27324] ? kasan_quarantine_put+0xbb/0x1f0 [ 1451.859898][T27324] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1451.865998][T27324] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1451.871747][T27324] ? do_vfs_ioctl+0x116f/0x1530 [ 1451.876762][T27324] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1451.881928][T27324] ? hook_file_ioctl+0x1f2/0x600 [ 1451.886977][T27324] ? __fget_files+0x2a/0x420 [ 1451.892480][T27324] ? __fget_files+0x2a/0x420 [ 1451.897133][T27324] ? __fget_files+0x3a2/0x420 [ 1451.902287][T27324] ? __fget_files+0x2a/0x420 [ 1451.906939][T27324] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1451.912020][T27324] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1451.917107][T27324] __se_sys_ioctl+0xfc/0x170 [ 1451.922159][T27324] do_syscall_64+0x166/0x520 [ 1451.926802][T27324] ? trace_irq_disable+0x3b/0x140 [ 1451.931973][T27324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1451.938090][T27324] ? clear_bhb_loop+0x70/0xc0 [ 1451.942915][T27324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1451.948858][T27324] RIP: 0033:0x7f7e1e19e159 [ 1451.953863][T27324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1451.973618][T27324] RSP: 002b:00007f7e1efad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1451.986137][T27324] RAX: ffffffffffffffda RBX: 00007f7e1e425fa0 RCX: 00007f7e1e19e159 [ 1451.994665][T27324] RDX: 0000200000000500 RSI: 00000000400caed0 RDI: 0000000000000004 [ 1452.003003][T27324] RBP: 00007f7e1e23506b R08: 0000000000000000 R09: 0000000000000000 [ 1452.011450][T27324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1452.019473][T27324] R13: 00007f7e1e426038 R14: 00007f7e1e425fa0 R15: 00007f7e1e54fa48 [ 1452.027606][T27324] [ 1452.030679][T27324] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1452.038023][T27324] CPU: 0 UID: 0 PID: 27324 Comm: syz.3.6496 Tainted: G L syzkaller #0 PREEMPT(full) [ 1452.048999][T27324] Tainted: [L]=SOFTLOCKUP [ 1452.053369][T27324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1452.063489][T27324] Call Trace: [ 1452.066822][T27324] [ 1452.069786][T27324] vpanic+0x56d/0xa60 [ 1452.073837][T27324] ? __pfx__printk+0x10/0x10 [ 1452.078475][T27324] ? __pfx_vpanic+0x10/0x10 [ 1452.083030][T27324] ? is_bpf_text_address+0x292/0x2b0 [ 1452.088362][T27324] ? is_bpf_text_address+0x26/0x2b0 [ 1452.093620][T27324] panic+0xc5/0xd0 [ 1452.097398][T27324] ? __pfx_panic+0x10/0x10 [ 1452.101880][T27324] __warn+0x315/0x4c0 [ 1452.105898][T27324] ? __kvm_gpc_refresh+0x1510/0x1710 [ 1452.111237][T27324] ? __kvm_gpc_refresh+0x1510/0x1710 [ 1452.116566][T27324] __report_bug+0x276/0x570 [ 1452.121197][T27324] ? __kvm_gpc_refresh+0x1510/0x1710 [ 1452.126535][T27324] ? __pfx___report_bug+0x10/0x10 [ 1452.131601][T27324] ? __lock_acquire+0x747/0x2de0 [ 1452.136588][T27324] ? __lock_acquire+0x747/0x2de0 [ 1452.141573][T27324] ? __kvm_gpc_refresh+0x1510/0x1710 [ 1452.146914][T27324] report_bug+0x16b/0x220 [ 1452.151331][T27324] ? __kvm_gpc_refresh+0x1510/0x1710 [ 1452.156665][T27324] ? __kvm_gpc_refresh+0x1512/0x1710 [ 1452.161991][T27324] handle_bug+0x9c/0x200 [ 1452.166288][T27324] exc_invalid_op+0x1a/0x50 [ 1452.170840][T27324] asm_exc_invalid_op+0x1a/0x20 [ 1452.175725][T27324] RIP: 0010:__kvm_gpc_refresh+0x1510/0x1710 [ 1452.181665][T27324] Code: c6 05 4b e2 22 0f 01 48 c7 c7 fd aa 3f 8e be 44 04 00 00 48 c7 c2 40 42 02 8c e8 6b b3 62 00 e9 81 ee ff ff e8 81 0b 87 00 90 <0f> 0b 90 bb ea ff ff ff 49 bf 00 00 00 00 00 fc ff df e9 4b f6 ff [ 1452.201310][T27324] RSP: 0018:ffffc90005fb71c0 EFLAGS: 00010287 [ 1452.207413][T27324] RAX: ffffffff8140d07f RBX: ffff888000000000 RCX: 0000000000080000 [ 1452.215412][T27324] RDX: ffffc900146ee000 RSI: 00000000000003d0 RDI: 00000000000003d1 [ 1452.223499][T27324] RBP: ffffc90005fb7350 R08: ffffffff907a517f R09: 1ffffffff20f4a2f [ 1452.231508][T27324] R10: dffffc0000000000 R11: fffffbfff20f4a30 R12: 1ffff92000bf6e4c [ 1452.239519][T27324] R13: ffff88806260dd60 R14: ffff888000000000 R15: ffffffffffffff01 [ 1452.247546][T27324] ? __kvm_gpc_refresh+0x150f/0x1710 [ 1452.252904][T27324] ? lock_acquire+0x115/0x350 [ 1452.257633][T27324] ? kvm_gpc_refresh+0x31/0x110 [ 1452.262548][T27324] ? __pfx___kvm_gpc_refresh+0x10/0x10 [ 1452.268057][T27324] ? lock_acquire+0x115/0x350 [ 1452.272869][T27324] ? lock_acquire+0x115/0x350 [ 1452.277621][T27324] kvm_gpc_refresh+0xe1/0x110 [ 1452.282338][T27324] ? kvm_xen_set_evtchn+0x11e/0x220 [ 1452.287587][T27324] kvm_xen_set_evtchn+0x14f/0x220 [ 1452.292661][T27324] kvm_xen_hvm_evtchn_send+0x120/0x1e0 [ 1452.298167][T27324] kvm_arch_vm_ioctl+0xfad/0x1a10 [ 1452.303239][T27324] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 1452.308772][T27324] ? __lock_acquire+0x747/0x2de0 [ 1452.313765][T27324] ? __lock_acquire+0x747/0x2de0 [ 1452.318770][T27324] ? lock_acquire+0x115/0x350 [ 1452.323500][T27324] ? lock_acquire+0x115/0x350 [ 1452.328231][T27324] ? is_bpf_text_address+0x26/0x2b0 [ 1452.333480][T27324] ? is_bpf_text_address+0x292/0x2b0 [ 1452.338816][T27324] ? kernel_text_address+0xa5/0xe0 [ 1452.344014][T27324] ? __kernel_text_address+0xd/0x30 [ 1452.349259][T27324] ? unwind_get_return_address+0x4d/0x90 [ 1452.354943][T27324] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1452.361135][T27324] ? arch_stack_walk+0xfb/0x150 [ 1452.366047][T27324] ? stack_trace_save+0xa9/0x100 [ 1452.371021][T27324] ? __pfx_stack_trace_save+0x10/0x10 [ 1452.376427][T27324] ? kasan_save_track+0x4f/0x80 [ 1452.381354][T27324] ? stack_depot_save_flags+0x33/0x7f0 [ 1452.386866][T27324] ? __lock_acquire+0x747/0x2de0 [ 1452.391840][T27324] ? kasan_save_track+0x4f/0x80 [ 1452.396734][T27324] ? kasan_save_track+0x3e/0x80 [ 1452.401636][T27324] ? kasan_save_free_info+0x40/0x50 [ 1452.406884][T27324] ? __kasan_slab_free+0x5c/0x80 [ 1452.411866][T27324] ? kfree+0x1c5/0x650 [ 1452.415986][T27324] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 1452.421658][T27324] ? security_file_ioctl+0xc3/0x2a0 [ 1452.426901][T27324] ? __se_sys_ioctl+0x47/0x170 [ 1452.431707][T27324] ? do_syscall_64+0x166/0x520 [ 1452.436519][T27324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1452.442648][T27324] kvm_vm_ioctl+0x8f7/0xd30 [ 1452.447233][T27324] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1452.452341][T27324] ? kasan_quarantine_put+0xbb/0x1f0 [ 1452.457677][T27324] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1452.463358][T27324] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1452.469042][T27324] ? do_vfs_ioctl+0x116f/0x1530 [ 1452.473935][T27324] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1452.479098][T27324] ? hook_file_ioctl+0x1f2/0x600 [ 1452.484099][T27324] ? __fget_files+0x2a/0x420 [ 1452.488743][T27324] ? __fget_files+0x2a/0x420 [ 1452.493383][T27324] ? __fget_files+0x3a2/0x420 [ 1452.498144][T27324] ? __fget_files+0x2a/0x420 [ 1452.502784][T27324] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1452.507773][T27324] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1452.512847][T27324] __se_sys_ioctl+0xfc/0x170 [ 1452.517493][T27324] do_syscall_64+0x166/0x520 [ 1452.522132][T27324] ? trace_irq_disable+0x3b/0x140 [ 1452.527197][T27324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1452.533369][T27324] ? clear_bhb_loop+0x70/0xc0 [ 1452.538094][T27324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1452.544067][T27324] RIP: 0033:0x7f7e1e19e159 [ 1452.548529][T27324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1452.568297][T27324] RSP: 002b:00007f7e1efad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1452.576755][T27324] RAX: ffffffffffffffda RBX: 00007f7e1e425fa0 RCX: 00007f7e1e19e159 [ 1452.584769][T27324] RDX: 0000200000000500 RSI: 00000000400caed0 RDI: 0000000000000004 [ 1452.592784][T27324] RBP: 00007f7e1e23506b R08: 0000000000000000 R09: 0000000000000000 [ 1452.600797][T27324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1452.608895][T27324] R13: 00007f7e1e426038 R14: 00007f7e1e425fa0 R15: 00007f7e1e54fa48 [ 1452.616917][T27324] [ 1452.620183][T27324] Kernel Offset: disabled [ 1452.624606][T27324] Rebooting in 86400 seconds..