last executing test programs: 4m23.919274004s ago: executing program 2 (id=470): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000080)={0x7, 0x710fa7b1, 0x3, 0x0, 0x0, [{{r0}, 0x8}, {{r1}, 0x1}, {{r2}, 0x4}]}) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x4, 0x5b0, 0xffffffff, 0x3c8, 0x3c8, 0x0, 0xffffffff, 0xffffffff, 0x4e0, 0x4e0, 0x4e0, 0xffffffff, 0x4, &(0x7f0000000140), {[{{@uncond, 0x0, 0x228, 0x250, 0x0, {}, [@common=@frag={{0x30}, {[0x6, 0x80], 0xffff, 0x4, 0x2}}, @common=@inet=@hashlimit2={{0x150}, {'team_slave_0\x00', {0x3, 0x200, 0x0, 0x3, 0x10, 0x2, 0x2, 0x18, 0x88}, {0x6}}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x32, 0x0, 0x1, 0x4, 0x1, @dev={0xfe, 0x80, '\x00', 0x10}, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff, 0xffffff00, 0x0, 0xffffff00], [0xff000000, 0xffffffff, 0xffffffff, 0xffffffff], [0xff000000, 0xffffffff, 0xffffff00], 0x80, 0x8}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x28, "958058623c8ff218b1528b7aea9904b392e6d5332deea5f4f4e4350b92a8"}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @local, [0xff000000, 0xff, 0x0, 0xffffff00], [0xff, 0xffffff00, 0xffffffff], 'macsec0\x00', 'bond_slave_0\x00', {0xff}, {0xff}, 0x73, 0x4, 0x5, 0x4a}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@hl={{0x28}, {0x2, 0x8}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1, 'syz1\x00', {0x81}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) read$FUSE(r4, &(0x7f0000000800)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000002880)={&(0x7f0000002840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000029c0)={&(0x7f00000028c0)=[0x0, 0x0, 0x0], &(0x7f0000002900)=[0x0, 0x0], &(0x7f0000002940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002980)=[0x0, 0x0, 0x0, 0x0], 0x3, 0x2, 0xa, 0x4}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000002a40)={&(0x7f0000002a00)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000002ac0)={r5, r6, r7, 0x80, 0xff, 0x3, 0x4, 0x8000, 0x60, 0x8, 0xad7, 0xaae4}) ioctl$sock_qrtr_SIOCGIFADDR(r2, 0x8915, &(0x7f0000002b00)={'wg0\x00'}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002b80), r3) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002bc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r2, &(0x7f0000002c80)={&(0x7f0000002b40), 0xc, &(0x7f0000002c40)={&(0x7f0000002c00)={0x3c, r8, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "69a714fea6f7ac143ca053323e804fd0"}, @NL80211_ATTR_MAC={0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x80) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002d00), r3) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000002ec0)={&(0x7f0000002cc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002e80)={&(0x7f0000002d40)={0x13c, r10, 0x40a, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xa45}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1a, 0x4}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x14}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24}}]}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xe6c886a32d1b8b68}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x20}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x13c}, 0x1, 0x0, 0x0, 0xfad8856c25a725f8}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0x8010661b, &(0x7f0000002f00)) sendmsg$AUDIT_DEL_RULE(r2, &(0x7f0000003400)={&(0x7f0000002f40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000033c0)={&(0x7f0000002f80)={0x424, 0x3f4, 0x200, 0x70bd25, 0x25dfdbfc, {0x2, 0x1, 0x16, [0x3, 0x1, 0x4, 0x8, 0xc643, 0xbab, 0xa222, 0xb5, 0x80000000, 0x5, 0x0, 0x2, 0xf, 0x800, 0x4, 0xfff, 0x4, 0xc, 0x2e, 0x8, 0xfffffffe, 0x401, 0x7, 0x101, 0xff, 0x2, 0xfffffff8, 0x7, 0x4, 0x63, 0x2, 0xffff8001, 0xffff, 0x1, 0xe, 0x29, 0x4000000, 0x80000000, 0x4, 0xb, 0x7, 0x4, 0x0, 0x0, 0x4, 0x683ee73e, 0x800, 0x5, 0x8, 0x750853f4, 0x8, 0x8, 0x80, 0xfffffffc, 0xff, 0x3ff, 0x9, 0x8, 0x2f9, 0x6, 0x2, 0x80000000, 0x3, 0x10000], [0xfffff14e, 0x3ff, 0x4, 0x9, 0x9194, 0x7bca, 0x4, 0x1000, 0x1, 0x200, 0x101, 0x1, 0x4, 0x0, 0x2d, 0x5, 0x8, 0xa9, 0x8, 0x5, 0x100, 0x2, 0xffffffff, 0x80000001, 0x9, 0x1, 0x5, 0x8, 0x9, 0x6, 0x5, 0x8, 0x0, 0x2, 0x9, 0xfffffffa, 0x0, 0x7, 0x5c, 0x21d, 0x401, 0x2, 0x8, 0x4, 0xfffffffd, 0x8669, 0x7fff, 0x8, 0x5, 0x10, 0x5, 0x1, 0x2, 0x0, 0x31, 0x7, 0x98, 0x3, 0x400, 0x1a, 0x3, 0xa522, 0xfffff486, 0x1400000], [0x3, 0xfff, 0x5, 0xd0b, 0x1, 0x100, 0x7, 0x3, 0x107e00, 0xcfee, 0x3, 0x0, 0x800, 0x3, 0x0, 0x10, 0x9, 0x5, 0x3, 0xb2d, 0x0, 0x401, 0x7ff, 0x8, 0xc352, 0x1000, 0x6, 0xa, 0x6892, 0x4, 0x7ff, 0x1, 0x9, 0x4, 0x4, 0x1104, 0x1ff, 0x38e, 0x8, 0x5, 0x800, 0x4, 0x9, 0xffce, 0xabc, 0x0, 0x2, 0x2, 0x7, 0x4, 0xffff, 0xd2e, 0x200, 0x7fff, 0xca6, 0x7, 0xf4a, 0x8000, 0x539aa518, 0x1, 0x3, 0x8, 0x1, 0x5], [0x7, 0x3, 0xb, 0x9, 0x95bf, 0x4, 0xf0, 0xffff, 0x2, 0xf0a, 0x4, 0x7, 0x7, 0x7, 0x1, 0xdd000000, 0x400, 0x2, 0x100, 0xc, 0xc48, 0xd, 0x4, 0x9, 0x40, 0x7, 0xfff, 0x9, 0x400, 0x1, 0x8, 0x8, 0x7, 0x4, 0x52b, 0x1, 0x5, 0x4, 0x101, 0x5, 0x9, 0x4, 0x7, 0xffff, 0x3, 0x2, 0x0, 0x400, 0x8, 0x3, 0xfff, 0x4, 0x1, 0xfffeffff, 0x9, 0x1, 0x0, 0x9, 0x26860e1a, 0x8000, 0x9, 0x80000000, 0xb, 0x16a], 0x3, ['\'&\x00']}, ["", "", ""]}, 0x424}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c810) r11 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x15) syz_kvm_setup_cpu$x86(r11, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000003480)=[@text16={0x10, &(0x7f0000003440)="0f6a8d00002e660f380a04d3e0b832008ed02665af660ff37d01660fc7b066000f01c90fc798ed00640fc7990000", 0x2e}], 0x1, 0x0, &(0x7f00000034c0)=[@cstype0={0x4, 0x4}], 0x1) r12 = fcntl$dupfd(r2, 0x406, r4) fsmount(r12, 0x958d7239eac7e279, 0x70) r13 = openat$vnet(0xffffffffffffff9c, &(0x7f0000003500), 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r13, 0x8008af00, &(0x7f0000003540)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r14, &(0x7f00000035c0)=@file={0x0, './file0\x00'}, 0x6e) open(&(0x7f0000003640)='./file0\x00', 0x20080, 0x80) linkat(r12, &(0x7f0000003680)='./file0\x00', 0xffffffffffffffff, &(0x7f00000038c0)='./file0\x00', 0x1000) 4m23.764463409s ago: executing program 2 (id=472): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000040)={'macvtap0\x00', @broadcast}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r1], 0x48}, 0x1, 0x0, 0x0, 0x45844}, 0x4000080) 4m23.678669532s ago: executing program 2 (id=473): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f00000003c0)=ANY=[@ANYBLOB="271504dbb7e70595b900"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) unshare(0xdd149e162dd0f681) unshare(0x8000000) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x564) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x200000b, 0x31, 0xffffffffffffffff, 0xcd5e5000) ioctl$UFFDIO_POISON(r2, 0xc020aa08, 0x0) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022400010000000009040000150300000009214000000f000905", @ANYRES16=r0, @ANYBLOB="2858f835b2bea12ad72ed6e7f2a10000000015759512fd33e8e746cf2e4d83bd574c3d5125c9595f30edfe9f59d3612401a0ce2d90b160485a23efaf6685b339bec31d6795f5abb5a7d2ee71aa994de3cdb0faec4267ae6313f8a79a20000000000000000ec1bb8bd672a11110daa2bf2523de9cc83908cfb54e5bb29f1beebb976b212959d4083b55f1885c15f0149600000000000000000000000000000000000000627e2b0c5777c8560fa4b1a849983ac34b2c22bd92fba2b88e79ac8c65a9a95ae1c8c33d6a23aeb834858aa55c"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000000b2e2b5ab40bf85edaca83"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0x84, &(0x7f00000004c0)=ANY=[@ANYRES8=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$hiddev(&(0x7f0000000540), 0x1f6200000, 0x240) ioctl$HIDIOCSFLAG(r4, 0x4004480f, &(0x7f0000000000)=0x3) ioctl$HIDIOCGUSAGE(r4, 0xc018480b, 0x0) poll(&(0x7f0000000680)=[{r4, 0x1}], 0x1, 0x3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="90000000", @ANYRES16=r6, @ANYBLOB="0100000000000002000005000000180001801400020073797a5f74756e000000000000000000080005000a0f00005c0003800400010054000380"], 0x90}}, 0x4000) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="13000000000000000000"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000400)=ANY=[@ANYBLOB="600a0400000172f4002d3c18764578475d29f44d74c8831fe39402c7e4b7b6c571925f1b9f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4m20.198824024s ago: executing program 2 (id=499): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f0000000480)={0x59b, 0x2, 0x0, 'queue1\x00', 0xfffffffe}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f0000000000)={0x0, 0x1, 0x7bc}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000300)={0x0, 0x1ff, 0x0, [0x60459723, 0x80000001, 0xfffffffffffffff9, 0x4, 0x1], [0x0, 0x2, 0xf8, 0x3, 0x7fffffff, 0xfff, 0x6, 0x3, 0x64b, 0x9, 0x8001, 0xd, 0x2, 0x2bdf, 0x8, 0x35, 0x8000, 0x8, 0x3, 0x3, 0x7, 0x9, 0x1, 0x2, 0xe, 0xa48, 0x26f7, 0x3ff, 0x6, 0x7, 0x792b4597, 0x501c, 0x7, 0x2, 0x5, 0x1, 0xffffffff, 0x200, 0x400, 0x7ff, 0x101, 0x2, 0x2, 0xfffffffffffffffa, 0x8, 0x3, 0x7, 0x7, 0x6aaf8f86, 0x7, 0x10, 0x6, 0xfffffff000000000, 0x7, 0x6, 0xffffffffffff0001, 0x650, 0x4, 0x2, 0x0, 0x83c2, 0x0, 0x5, 0x5e8c, 0x1c00000, 0x9, 0x800, 0x8, 0x7fffffff, 0x7ff, 0x140000000, 0xdd, 0x9, 0x3, 0x1ff, 0x5, 0x2, 0x200, 0x5, 0x0, 0x8, 0x3, 0x100, 0x40, 0x4, 0x4, 0xfff, 0x100000000, 0x7, 0x8, 0xa, 0xdb4, 0x81, 0x8, 0x0, 0x9, 0xb, 0x4, 0x200, 0xe, 0x4, 0x8000, 0x80000000000000, 0x3d44, 0x8000000000000001, 0xfffffffffffffff7, 0xffff, 0xffffffffc4e71580, 0x8, 0x7, 0x9, 0x65e, 0xffffffffffff78cf, 0xfffffffffffffffe, 0x4, 0xfffffffffffffff7, 0x4, 0xc8f2e37, 0x7994, 0x8000, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000740)={r6, 0x8000000000000000, 0x4, 0x1}) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x9a}, 0x1c) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="65149e8c5842957287d914f8dbafcf8a88e6050665f4428ccafb78ef56", @ANYBLOB="34c948c7c1e3b6dce55e51148b1fdce6e8107990c678b4a6a166131feaabcea1773934e2575e302b163ba8959f6c2971b27de932e41fdeb8b9d15f6405f9547cb0c3b1e019d41b75b9347c7b094e5bca387df34f8873bbb0e35f6fb427ca77df7c3454f7726069d7f3c028fac2", @ANYRESDEC=r0, @ANYRESDEC=r0], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)="c19472dee01d4a8a3ba6d4a79e302bd5b3a377", &(0x7f0000000040)="17fe7b7b54ff42881ca4e2679ece39af45220f213b7a34fb7972b63b9a3ad9ecbaec248e3cb6f6d20066db4727fff3f259899be277cb80af70ea50d3e0ee120f448797447b9fabd223b9e9b6de03f0dba454c641f1b9c3380bce860f90fa0179165ac9edc39b794084f8ab769def1566181fdcf642e0da3127b5178ec1", 0x4d, r7, 0x0, 0x1c000000007400}, 0x38) 4m19.294797105s ago: executing program 2 (id=502): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r1 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, r1, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000001140)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x36}, 0x1, [0x1688, 0x3, 0x0, 0xfffffffffffffffe, 0xdf3, 0x0, 0x0, 0xffbffffe, 0x0, 0x4040000, 0x0, 0xfffffffffffffffc, 0x4, 0x80000, 0xf, 0x80000000000000, 0x0, 0x5, 0x0, 0x0, 0x8, 0x7, 0x0, 0x7, 0x7ff, 0xfffffffe, 0x0, 0x40, 0x0, 0x0, 0x100000001, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x2, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x3, 0x0, 0x0, 0xceb, 0x80000000000000, 0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffc, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffa, 0xffffffffffffffff, 0x401, 0x0, 0x8000000000000000, 0x9, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x1, 0xfffffffd, 0x0, 0x0, 0xfffffffffffffffe, 0x80000000003, 0x1000, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffb, 0x0, 0xfffffffffffffffc, 0x80000000000000, 0xfffffffc, 0x1, 0x8, 0x4, 0x0, 0x3, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x80000003, 0x0, 0xfffffffe, 0x0, 0x1000000020, 0x7, 0x0, 0x5]}) 4m19.039236995s ago: executing program 2 (id=505): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00'}) r1 = syz_open_dev$swradio(&(0x7f0000000280), 0x0, 0x2) readv(r1, &(0x7f0000000480)=[{&(0x7f0000000400)=""/105, 0x69}], 0x1) mmap$snddsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9, 0x11, r1, 0xe000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f00000003c0), 0x61) pipe2$9p(0x0, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioprio_set$pid(0x2, 0x0, 0x4000) connect$unix(r2, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'vlan0\x00', @multicast}) socket$netlink(0x10, 0x3, 0xf) listen(0xffffffffffffffff, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0xa) r5 = dup(r4) r6 = open(&(0x7f0000000040)='./file1/file0/file0\x00', 0x769002, 0x15e) ftruncate(r6, 0x200004) sendfile(r5, r6, 0x0, 0x80001d00c0d1) r7 = socket$rxrpc(0x21, 0x2, 0x2) memfd_create(&(0x7f0000000000)='(\xdb(-\xfd\x00', 0x6) r8 = io_uring_setup(0x1612, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r8, 0xf, &(0x7f0000001580)={0x2, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}], &(0x7f0000001540)=[0x6]}, 0x20) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r3, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f00001c1000/0x3000)=nil, 0x40000, 0x9) ioctl$BTRFS_IOC_ENCODED_WRITE(r7, 0x40809440, 0x0) 4m18.829110655s ago: executing program 32 (id=505): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00'}) r1 = syz_open_dev$swradio(&(0x7f0000000280), 0x0, 0x2) readv(r1, &(0x7f0000000480)=[{&(0x7f0000000400)=""/105, 0x69}], 0x1) mmap$snddsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9, 0x11, r1, 0xe000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f00000003c0), 0x61) pipe2$9p(0x0, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioprio_set$pid(0x2, 0x0, 0x4000) connect$unix(r2, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'vlan0\x00', @multicast}) socket$netlink(0x10, 0x3, 0xf) listen(0xffffffffffffffff, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0xa) r5 = dup(r4) r6 = open(&(0x7f0000000040)='./file1/file0/file0\x00', 0x769002, 0x15e) ftruncate(r6, 0x200004) sendfile(r5, r6, 0x0, 0x80001d00c0d1) r7 = socket$rxrpc(0x21, 0x2, 0x2) memfd_create(&(0x7f0000000000)='(\xdb(-\xfd\x00', 0x6) r8 = io_uring_setup(0x1612, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r8, 0xf, &(0x7f0000001580)={0x2, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}], &(0x7f0000001540)=[0x6]}, 0x20) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r3, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f00001c1000/0x3000)=nil, 0x40000, 0x9) ioctl$BTRFS_IOC_ENCODED_WRITE(r7, 0x40809440, 0x0) 3m59.650769764s ago: executing program 3 (id=595): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = gettid() syz_emit_ethernet(0x56, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0x20, 0x2b, 0x0, @remote, @local, {[@routing={0x3a, 0x0, 0x2, 0x1}], {0x4e22, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000100005ff2abd7000000000000000004a", @ANYRES32=0x0, @ANYBLOB="942a000004000600140012800900010076657468001e00000440028008001300", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008080) 3m59.236090913s ago: executing program 3 (id=597): unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r1 = socket$kcm(0x29, 0x5, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x130, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0xa4, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x50}]}}}, {0x48, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3fb9e5b0a2fe71ef}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8}]}}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}]}, @NFTA_RULE_USERDATA={0x6c, 0x7, 0x1, 0x0, "0d7daf2276c640fafa5472cc6bb1fa0d589db0801bd7fd49aed86fdc0f031f6a1743639304dabf32aad923307e75a7f3eaa825b1a7808bfb5e54fdfbf3c48a854a1e67e593f56cd373756c42394f5c35f95a62de73a8b8fee7ef8e527a57570d32b7f9dea2e660d4"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x158}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) syz_emit_ethernet(0x51, &(0x7f0000000300)={@local, @random="ea6ea66e83a6", @void, {@ipv6={0x86dd, @icmpv6={0xa, 0x6, "50b0ef", 0x1b, 0x3a, 0xff, @empty, @local, {[], @ndisc_ns={0x87, 0x0, 0x0, @remote, [{0x5, 0x0, "d20f652b2b"}]}}}}}}, 0x0) r2 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="31010000dccd5e08cb060300000000ea22010902240001000064000904340102d469e70009058acf"], 0x0) ioctl$sock_ifreq(r1, 0x8995, &(0x7f0000000100)={'rose0\x00', @ifru_hwaddr=@remote}) syz_usb_control_io(r2, 0x0, 0x0) 3m55.866114271s ago: executing program 3 (id=607): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1800000069000b0000000000b6e45db1a7f238"], 0x18}}, 0x4000000) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000000)={0x8000000, 0x101000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000140)={0xf000, 0x3000}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000006000000bca30000000000002403000020feffff620af0fff8ffffff71a4f2ff000000001f03000000000000e5000500000000002604fdffff02000014010000033800001d13f8ff000000007a0af0ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804"], 0x0}, 0x94) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20004450) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x24, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x84}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14}}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) sendto$packet(r4, &(0x7f00000002c0)="05031612d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000000080)) recvmmsg(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001540)=""/4097, 0x1001}], 0x1}, 0x6}], 0x1, 0x40000020, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x800, r6}, 0x38) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x38011, r8, 0x0) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x80, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x54, 0x3, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x44, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x1000}]}}}, {0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xe4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r10) waitid(0x1, r9, 0x0, 0x61000006, &(0x7f0000000340)) ptrace$getregset(0x4205, r9, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) 3m55.415924191s ago: executing program 3 (id=609): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000002c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0\x00') keyctl$dh_compute(0x17, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={'rmd160-generic\x00'}}) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x188, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {}, {0x8, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x158, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x8, 0x5, 0x1, 0x5, 0x17, 0x16, 0x5}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x2, 0x0, 0x6, 0xe, 0x19, 0xc, 0x8}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0xc4d, 0xb7, 0x8, 0x17, 0x1d, 0xd}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x9, 0xa79, 0x6, 0x5, 0x20, 0x12, 0x4}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x188}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000bc0)=@newtfilter={0x34, 0x28, 0x575ac7824d421509, 0x8070bd29, 0x4, {0x0, 0x0, 0x0, r8, {0x9}, {0xffff}, {0x0, 0x5}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x40) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 3m53.496984876s ago: executing program 3 (id=615): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000090a010400000000000000000a0000040900010073797a310000000008000a40fffffffc08000540000000020900020073797ab10000000008000640ffffff000800084000000001080003400000011c14000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0xa, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x80) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, r2, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f0000000000)={0xa, 0x0, 0x1, @mcast2, 0x0, 0x3}, 0x20) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = io_uring_setup(0x6c67, &(0x7f0000000180)={0x0, 0x7bfb, 0x0, 0x40, 0x332}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x400, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x9361, 0x9) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x1d0, 0x0, 0xfffffffffffffff9, [{{0x3, 0x0, 0x0, 0x3, 0x6, 0xff, {0x0, 0x400000000005, 0x8000000000000000, 0x7, 0xd, 0x0, 0x404, 0x3, 0x3e, 0x4000, 0xa5, 0x0, 0x0, 0x80000000, 0xfffffffc}}, {0x2, 0x10001, 0x84, 0x7fffffff, '\\sev_\xa4d\xf1\x97\x86\x84\xc3\xb1\x9c\xd7]EC\x12\x91Ll\xfe\xddk\xaf\x1cB\xf6\xdf\xcd+\xa6\'\xd1\xdd\xd7\xdfQ\xd3\xa9\xachfr\xd7\x1dJ&\x01\xc6\"\x05\x0e%&\xd1\xf9\x03#\xa7\xb5z\xf7\x03Zr\xc1k\xc6\xf0*:cW\xe0>\x82\x04\xbeE\xd9\aQP\xf6|\xc5^\xc8\xd2\xe6\xc2\x1b,l\v\x11]\x13>T\x10\x18\x14\xb2\x9f\xe5s\xe8\xb3wr#a\x87\xa8@\xbf\xd0%\xe9c\xfe\xa2~\x02\xd8\x04\xd9z\x89'}}, {{0x3, 0x0, 0x10000, 0x3, 0x86, 0xb402, {0x3, 0x1, 0x20000000000000, 0x3, 0xb, 0x7ff, 0x1000, 0x3, 0x3, 0x4000, 0x3, 0xee00, 0x0, 0xc6, 0x2}}, {0x4, 0x81, 0x2, 0x0, 'fd'}}]}, 0x0, 0x0, 0x0}) getdents64(r3, 0x0, 0x0) 3m53.016845671s ago: executing program 3 (id=618): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "e907f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f8a1d34c07c3260049e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4fb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3c4891f9150d685a7d7c27df0355808390666e827d61dcc3a633bb0b1250b5a293e3877adc1a1b44b99c93d57fd720a170e7f5670e419dc64febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x10007, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00db6072000001ea89de2b4410000e60080b8785d960000100000000000000000000000000000000000527000", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900000000000000000000dabeffff0000000000000100", [0x0, 0x2000000000001]}}) 3m52.550295004s ago: executing program 33 (id=618): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "e907f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f8a1d34c07c3260049e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4fb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3c4891f9150d685a7d7c27df0355808390666e827d61dcc3a633bb0b1250b5a293e3877adc1a1b44b99c93d57fd720a170e7f5670e419dc64febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "0615e456c196e819a321fdb3690bfab19538829a732a01781564ef7738cb5b82a704b3952f81c68bb4ceeaad63206f88201638e87c4981cbf9332cbc9c4d69e392bd33237ece7ad91e44edac0da8dacad81adf2e08c21ad6b44ce1f90bd618c255ca40cdb411485fb48a51d329c816b3488c7d032ef69c502c6e1236bd381efd410165988847c1dcb98a18ca2b853910e52044fa3b3026cb88de269537c8f26ffc3b15cbf279832bfc90bd95939043182e88050dfd2a4784a5d1453610fb1f1c2bac36c3ecd3e6fb756ef8880debeef3636afd981d8af4ab119928448f90351aec113335eacf52a18c87738d9679d31ce0108dc556e597655ba11bacc032a16fbefc64776f363610a15b37bcd36e6a7cba931151b9c9ba5779d550e9ab21603a43a25f3b4895d8dc4f3ce0e7d5e964e888169ea79a0848e9338b3d34d62e963fbf98834f4455419907f0ffdb76373af77a34edee7789f56e7f01bdab9614a0d460f791a06e6cf5243bf2b3a1624a80ec7e1116f1c81f5ef4b895be74bf67eea9193428b58a8b62b7976d3d2e59796c46ec918c83cd49c3f43dbd2967586966c19ace7b0bef5f94eb333b362649f1bfa114f8b1f126e97ec672cff77e2130823fa7a1df6760c6a8917815e9f0a409ed32b133df7dc9afceffcd472b35145c83c9167764d25ce214133c6170adeb6653b30b226a3b6ff1363ac862a540c7fab584cd051ce7ee951e0f121d43cff75afbdec6bc6f6e8f7db58c8086751320d22ee8582e915cabc536e3767e9a9230c9ae8b92398f0ca2a7141fa4588af7afde10e5ec2a6fe85ba5712e126629d4e3998fc4721cb638f2ef8356049e3448466e2c400d5e8baf843fa399907cb526b791c5350ce29204cb6fe50b892a69ec6dbecc28f032a745738faa12c2a34222942fef0ec0511da5fe0b565ceac429da7cc25cfe0320b40a514723e2392a6a361032343edb79fd83cd0a354837153542fd61b3156b54c566036e493250c3a3214738e3cacc24a50d5dfd17d5008b4ca629c3062f3417cb67c48b8b888ae51256bb4e6c68e95a71a00383ad9df263f6a775ded64fef20ed5cb5f31c33cb86f839d00a12e40cd31219113619c4e0585454cb1776278bfd7f5c4275792afb790e83ff0fc6925355c7aee7a070477d9ec2292366e39b9dc66f7adcf449a1a718e5217183faf0f679efc5cef20bcdcf2d12ea0684084ec0d693256e280025b23b5a08b7b1ebe7d41fb045793f971d6ee066604818cb09d86c1eda99a44c35476a113fd5d1a7543f8f99424ebb78dd9e00d719502a6eafa743a061fa3fa55e4deaa0a011b6b9d633f10e0c9446b5a2e3f6d6014ab00695366c1a6bf0c32f703aebb7988c7d4d322681458e85626302c70f37628835e1fcfff4da3099c0b4af433eb9a51f9609f2c0c09a98b18880c846b34d6ac0210f073765666100976ee1d928893f983580ea47a012144633b98e02c3e81869534ab985eb3a73e0bac892dac949f85db949285a6a7a490b1075467226af23df82d8dd09b7282490fbb3ada9ed4cae8f761aefbe0701de6b132f12044c58ac1c2607c8f51361de5bed021dea13fd0a440263cf0b304522a324b581ab274e7bdae5994316657b5c0ab0220d9b08739729f7a35d436878c182aec4f08dd161c11ee5b7937fae7835e8bfe98a44c8d4bbb2e0eee0cb5d7c93517e96a9fc8132e60f3ef7c735bea1934b37df451f981c8d9210e61278c871e6dad6ceb89aa4d7245658a63e65cec7b81d307426a60a31cc917844a14e1d9ad83bef1c9f736d1836687c950d1275caece0d46ab9f3b0e95d9cf560eb8134e8346b35e0a6f60e6a87a14c4aeb3e0d06158390660a52a6e44b524c1e16de2bf99870f78fc81d267072bc63e97d3f26d23fd59799ff2c847d6a724cebc2377a582ba73d99a610a095c28d66c60910ac64b7d18847fa98fd8528b72e0a149b082c731575b2e2763e67c821ba29eecd8b8c87981c4fb1fbbaaa4e8aa077ec98de1362fc7af7a0ac5e3297fd0d924124b2e255b5cc4f6b0873f3d34418d5ae0d6f734628f38cb9b856b2db3fbb2fafb76983eabc51a348e55789e997fa25cbe6e5031bd2e33d4e2686f964a65d1abf7f96a20a8b270b1522ace4adf6fdade5cd3f101574960d13267e2382f70027ebe5ef7f9418e14e6a8a130d2aec2253c8fe21825e3295774db0c9b1340ea28a96589ba0d9f79aa61b92aea6f704ef7f716d849b8c77e6922e198a086d8133491d0bb85b925825a6d307d7cc8f09c655aa3edabf84c75560dfb279ee3e8b825323279edc58c3161e72cf9ae02ef80d500da922c0abeb8b164abd9c17ef7c02e89000d67b0c2ddd078cacbf37c4826be3845948d598980d63c1d7aade89d0637d80a4c102a35eb027a08ef90cc20d17fc514926914e68e5de54b861200ffa4ce1cbc16e4ecf342a1176cdb561f7dea38b3ae0fd81260f72d34e6f33d364cf313d3b3161410dcbf5f0f0579a1d235b49bb5d27f85825b94f1899e7846d0292ad912d934574f9d55d2152dbfb39d662e6e0f2496182d012af8b4bebbdfa1d68e3e988869fb5cd9612db97e6cc574444f4b5025ec9827bafc55341bf6ad3fd4fab2ee43f343cb9bcec0c38384b5699e5c6d5973ba591978275c51a40200d340b9ed3681f08c69f58320f538f9cd78a34eb6ed55710d2478ea4bd15813921817b42f88f1bb038033b519668f0a2e8693b9a19c7bcf96eec04bda625b31c32f4286be922ab2c87aa30310c8f46551450d5bc26b5fbfdedaae0f756384023bb9a28d3200cfeaedd63d6afe076513e8ad73d16607cd4ede16344e60d8707357e82b1089258c56d851a435e23ce0919825e04471dd61a44c43e87c2959d4e89311a30ee8be010094d0ef109bb210dda58b21b685b9e9c078c9ded6117d9a88dd7799291969851cd4c3f22b5f870a275a692188dafcf6e89ba87b0eb61011de031fda25fb3349901d40da2bbdb76eda417c9fafd90fb23504ab150ca0033b65ccd4e990cb2ba86ba3aaa79d0df4f2e4e4afa565e66d28aa167f835d080bf1d41d0e52dbf81c671f8eacae234bf4fc328302671fab46613b73daf2ace80aff2f80f6a9d84b82480178cc612aa90adfc80ab3bba7d1527fc6ab04f009011bf093494a0d329df4e53d855b1c0ff6a25d22052b3a778e1ca2fbe59c9eeedf99e13682d06da269560524ffa0f404b73b946edf900ee958ceba09a051e27a620fb78e7a352c182c8c2981ce822eeaf6323965b4b3f322d40d406a158b6f3cf5d74822de952fefc341d0dead6c1c8fed8e48e0a85b51c1dcc7796d3f45bb1f50467a475da76c356c9e031b096867da1dbb89c3a038d475dbcdb2df1278d5dba55c2fb5ba6a9778c2a244198491f0f711cdb2ef0332f347afffb1b098b4c59041ccb0c286bb2dd40e7ec713f6ffe0b1067678c748615dae3c1e090f3739a9035767fb9972580d19fdef49a5071f99c3706b8fa4991f430721cf3ca11af0e3bd7c4d0cd0ab5b7d98ee66730c20a098110e4a15ce0bfc88c41fe375f261fe3557e14eb5ff4a2cdf6a008fd7b6702951b8456e940fbd269a0f3ed515ac03cfecce67027d579e1226bd7b7381827453550343566508d38790ee838c3bf85c6c91a45e7a44752f57313533a3e82e4042e65d346afb20c0527575f79080aef4e1aa8d5868d190c8d37bdae7592e41bed37b9d4c30d8126d3debde02dff25f5ef1e48133e2a41cd55347bd23dcce57a00189619db629c530dc112d22ac72bce353681264b5175be40b3ba84408d0f56762cc720e96c128447be7128748e185be2640115556bac64d060207e629b0144e501c1c49c6abd15c7982b01e22da2ad04bb28df1a27f31e18040c16406071d798bb40d901d001e22cc5ed870d08702f49f0021814cdd814901a13c7ab061bb4b8172c639b3449e24f656fee58186e69e6874ea95d946da781b49ca080ffb4a3c87746c661f43e9be52d0ba2ee368b9c143687c8846abac599069decf41e69fddcadf31c5f715917df12df4eedbfcc5805fe8e661b8fcd7b130d7bcc4a9a152de93a15dddacf3cf52479956185a3c5000d18ddce0236d5858c0d8761bca7446e3d30f3e8f48d5e8f86a60cbe46f038b1028ffd35590bdacfeebb86e28d42a923bdc3f9a307b919341a2a7dda096d41070db245c2c424aebe4a4bb9863169454d09f25fd0aa2da7bfc97ad7aca886dd998e041133e07899ad48f7cda600de48ac3951152dfbe6331b8acae24cfd2dd2b14696c75040685c756942a0d049ee9863a2e480388f93876f3910ecb3a59fa16c25b2b3636a542f92744495e10a4ce37f19f5c2256e2d61775d388e2a86b52f76add2f956aa02501f5badb94da12595b2bbf88b05dc70caae6766fd3df4f299d0ff71c8787249b255ea49b3d33b3f1a8c9403cb75d64264465c3578538382b23d721f8a49134020ca2d9e887d9949624ac6d63322b6507e277a0020db9bfa2928736b96c72fa3406a95adfe6b374ffa27001d37d3bbe725e75c257834572026c511f57dce67153a4008f9e75e07ed9237f600005800ee667c137fc78bc4fd4ebf4d228979ab0ccafbcd8b8daad76fb2abcfc585377ea6e19f170db898b950a7b0f4e75466a2ba26e7d60e0a6f5c54a3fe78677f3362c5b01ae791b62ee8a5d0fd65b739ece4f3b758d05a8e4e4ea7e4866ee67750ce2769f72a9f45780eadfae73b42d4dd4c614c797c694ece8af88cc732edabfa26ace57de54835c7551154dfa3be11a0d3b5845ac97b2da84410a652e72cd563acbb2b02bb59370cebaaa80014e3ad280944eae6fbf8d5f85237257bb5b8e5ec3e52dc06f8394176b325a577804e9eb78d7015172d17ed15f905f705d56687f53988bb207c74fbeb2b03a700258e835362886239f4d8f1c2cf6d4d10ff26d2579ea40a5fb99e5b6d01cdeda050d3faa78ed674f2899be08332086c8bf0410a7d06099c50a2d949d49a0f21b43bcdfbdf435875cf5a9def46db63746574ee8a5b1fbcef411154e914dd9e5bb1b1bd2944581083fb66a017e7972df3daefc487e4198cb281d3a80637d52b41738b7f1a57c867d5b2ee5d72465657593339506fd0c3807cd6445eb54cfb5ca9d35ef93eec6383224ebf85197eb6ed75f6c324f6a0345a25be6bb52ed347e57ccb059b903fb7db4e9f46513a4158ce29c1f5d6081b556bbc471e89225cad81aed34dae0f90ee8e7237b3b286e29b49d7a1700c537b28571f7d7e2a55e10792d6f7779ddefa3febdea5693048372a45903c04f1035a96c6cfbe6f6c2b754581aac02f8a70e698be6e37fd411cf4b76317b47683f6b0f80dfdeef3a9767c7e5c30dff786093a21477431fea0458023953700"}) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x10007, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00db6072000001ea89de2b4410000e60080b8785d960000100000000000000000000000000000000000527000", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900000000000000000000dabeffff0000000000000100", [0x0, 0x2000000000001]}}) 17.551561683s ago: executing program 4 (id=1661): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000000a440)={@mcast1, 0x80000000, 0x2, 0x0, 0xe, 0x3, 0x5}, &(0x7f000000a480)=0x20) r1 = dup(r0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'gretap0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x10, 0x8000, 0x8, 0x0, {{0x18, 0x4, 0x1, 0x6, 0x60, 0x68, 0x0, 0x4, 0x29, 0x0, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x1b, 0x40, [@remote, @empty, @multicast1, @local, @dev={0xac, 0x14, 0x14, 0x3d}, @empty]}, @noop, @generic={0x7, 0x5, "8177cf"}, @cipso={0x86, 0xf, 0x1, [{0x2, 0x2}, {0x2, 0x7, "c9a23116a7"}]}, @timestamp={0x44, 0x14, 0x9a, 0x0, 0x7, [0x0, 0xc4b, 0x6, 0x2]}, @generic={0x88, 0x7, "aa66972f73"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x7864, 0x20, 0x0, 0xff, {{0x1b, 0x4, 0x1, 0x27, 0x6c, 0x66, 0x0, 0x42, 0x4, 0x0, @local, @broadcast, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0x7, 0x9b, [@private=0xa010101]}, @lsrr={0x83, 0x13, 0x76, [@private=0xa010100, @rand_addr=0x64010101, @loopback, @remote]}, @noop, @ssrr={0x89, 0xf, 0x3e, [@remote, @loopback, @multicast1]}, @generic={0x44, 0x8, "928508afd55f"}, @generic={0x7, 0xb, "a8c087682333650560"}, @generic={0x89, 0x7, "0faf68c89f"}, @generic={0x88, 0xd, "e9ebcde25bc71418368273"}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x4, 0x8, 0x6, 0x8, 0x44, @mcast2, @dev={0xfe, 0x80, '\x00', 0x40}, 0x40, 0x80, 0x2, 0x7fffffff}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000380)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa, &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb1, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x98, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000006c0)={0x0, @loopback}, &(0x7f0000000700)=0xc) r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r11 = syz_pidfd_open(r10, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$FS_IOC_GETVERSION(r11, 0xc040ff0b, &(0x7f0000000180)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000740)={'batadv_slave_0\x00', 0x0}) r13 = socket(0x400000000010, 0x3, 0x0) r14 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r15, {0xf000, 0xffff}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0x5}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r16 = socket$nl_route(0x10, 0x3, 0x0) r17 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r17, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r16, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r18, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0x6, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040084) sendmsg$nl_route_sched(r16, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r18, {0x5}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xa32, 0x6, 0x1, 0xc, 0x0, 0x4, 0x8, 0x52, 0x68d8, 0x5, 0x4, 0x3, 0x12, 0x6, 0xfffffffd, 0xfffffe01}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000780)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000880)={'syztnl0\x00', &(0x7f00000007c0)={'gretap0\x00', 0x0, 0x10, 0x710, 0x5, 0x3, {{0x20, 0x4, 0x0, 0x8, 0x80, 0x65, 0x0, 0x9, 0x2f, 0x0, @empty, @loopback, {[@end, @timestamp_addr={0x44, 0x44, 0xc9, 0x1, 0x4, [{@remote, 0x8}, {@multicast2, 0x2}, {@multicast2, 0x80}, {@broadcast, 0x9}, {@broadcast, 0x81}, {@multicast2, 0x327}, {@remote, 0xbc}, {@dev={0xac, 0x14, 0x14, 0x44}, 0xb7c1}]}, @noop, @timestamp_addr={0x44, 0x24, 0x6a, 0x1, 0x7, [{@broadcast}, {@remote, 0x6}, {@loopback, 0x101}, {@empty, 0x80}]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'geneve1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000c00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000900)={0x2a4, r2, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r20}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r21}]}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 16.793548361s ago: executing program 4 (id=1665): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05031c00d3fc141200004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 16.592022986s ago: executing program 4 (id=1666): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/67}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x2000, 0x73, &(0x7f00000001c0)=""/115}]}) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000004c0)=0x8) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC, @ANYBLOB=',ro']) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x200000f, 0x12, r2, 0x913c0000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r4, 0x5385, &(0x7f0000000580)={0x60, ""/96}) unshare(0x66000080) syz_usb_connect(0x3, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x805, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x3000)=nil, 0x3000, 0x0, 0x13, r5, 0x3000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0xffffe000) 13.471540636s ago: executing program 4 (id=1680): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0), 0xea, 0x400) ioctl$PPPIOCGIDLE64(r1, 0x8010743f, &(0x7f0000000100)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = dup(r2) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r4, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'batadv0\x00', &(0x7f0000000000)=@ethtool_channels={0x0, 0x9, 0x7, 0x5, 0x3, 0xcb, 0x3, 0xc5, 0xe46}}) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x100000}, 0x20) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r10 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f2e, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r10, 0xe) close_range(r9, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x0) r11 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r11, &(0x7f0000000fc0), 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x0, 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r12 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e27, 0x0, @mcast1}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000029000020390023b2aa640000ce52d96004e7a64c3a4df76fafe99cfc7d146d43f537c9e04db83840cdc254e3bfd64924c33f60b51937b0dd51afafda01a8e1b756472bcca9010d7e7082b68070b2037b69b553908dfe9f16c2c331bd6fd8917f51535cb4b68789d48927db5e570b3131aacd41d7eda5c6e8f579b2e134d2f3a00146c88990958b5cc7c7ef9c4eb5b4944baa"], 0x18}, 0x0) 10.058190623s ago: executing program 4 (id=1689): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r1 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, r1, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000001140)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x36}, 0x1, [0x1688, 0x3, 0x0, 0xfffffffffffffffe, 0xdf3, 0x0, 0x0, 0xffbffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4, 0x80000, 0xf, 0x80000000000000, 0x0, 0x5, 0x0, 0x0, 0x8, 0x7, 0x0, 0x7, 0x7ff, 0xfffffffe, 0x0, 0x40, 0x0, 0x600, 0x100000001, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x2, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x3, 0x0, 0x0, 0xceb, 0x80000000000000, 0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffc, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffa, 0xffffffffffffffff, 0x401, 0x0, 0x8000000000000000, 0x9, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x1, 0xfffffffd, 0x0, 0x0, 0xfffffffffffffffe, 0x80000000003, 0x1000, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffb, 0x0, 0xfffffffffffffffc, 0x80000000000000, 0xfffffffc, 0x1, 0x8, 0x4, 0x0, 0x3, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x80000003, 0x0, 0xfffffffe, 0x0, 0x1000000020, 0x7, 0x0, 0x5]}) 9.681485628s ago: executing program 4 (id=1692): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffd, 0x0, 0x4, 0xa32, 0x2, 0x2, 0x7}, {0x0, 0x0, 0x400000000}, 0x10001, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@local, 0x8, 0x32}, 0x0, @in6=@mcast1, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0xc0d00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x3da}) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) ioctl$FICLONERANGE(r5, 0x4020940d, &(0x7f0000000200)={{r4}, 0x819, 0x9, 0x983}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001e00010026bd7000fcdbdf380712"], 0x30}, 0x1, 0x0, 0x0, 0x4040840}, 0x20000800) 2.325461841s ago: executing program 0 (id=1742): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, 0x0) 2.237540266s ago: executing program 1 (id=1743): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x13, r2, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x64, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_SRC={0x4}]}, 0x64}}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x1100000000000000, 0x9, 0x7ffffffffffffffd, 0xffffffffffffffff, 0x400000, 0x6, 0x40000, 0x2, 0x7fffffffffffffff, 0x5, 0x401, 0x2, 0x6, 0x20000001, 0xfffffffffffffff9], 0xd5d5c004, 0x9b15}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000001c0)=@x86={0x80, 0x4, 0x5, 0x0, 0x8, 0x5, 0x40, 0x7, 0x6, 0x4, 0xf9, 0x8, 0x0, 0x0, 0x5, 0x2, 0x84, 0x3, 0x4, '\x00', 0x4, 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.100092419s ago: executing program 0 (id=1744): mknodat$null(0xffffffffffffff9c, 0x0, 0x8000, 0x103) 2.055778977s ago: executing program 1 (id=1745): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x0, 0x0}) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000481000/0x1000)=nil) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 2.042976506s ago: executing program 0 (id=1746): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000001600)=""/118, 0x0, 0x3332f000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x0, r2}) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket(0x2, 0x3, 0x6) bind$inet(r3, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10) 1.936649989s ago: executing program 1 (id=1747): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfa11, 0xffffffff}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6_sctp(0xa, 0x1, 0x84) 1.652038886s ago: executing program 5 (id=1748): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pread64(r0, &(0x7f0000000180)=""/174, 0xae, 0x38) 1.592325667s ago: executing program 5 (id=1749): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r1, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) flock(r2, 0x2) close(0x3) 1.467807135s ago: executing program 6 (id=1750): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000180)={0x0, 0x2, 0x2, 0xdbd}) fcntl$lock(r1, 0x24, &(0x7f0000000280)={0x0, 0x2, 0x2000000000007, 0x8000000}) 1.339744704s ago: executing program 5 (id=1751): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x8b}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102b00fe80000000000000875a650b9ff57b0000000000000000000000000000000001"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.336530314s ago: executing program 6 (id=1752): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0, 0x14}) 1.25993378s ago: executing program 0 (id=1753): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0xa, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x8, 0x7fff}]}]}, {0x0, [0x5f, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x61]}}, &(0x7f0000000080)=""/159, 0x36, 0x9f, 0x1}, 0x28) 1.200614672s ago: executing program 5 (id=1754): r0 = epoll_create1(0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') close_range(r0, 0xffffffffffffffff, 0x0) 1.093073049s ago: executing program 0 (id=1755): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x64, 0x24, 0xf0b, 0x70bd2f, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x4, 0xfff3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x4, 0xe, 0x24, 0x2}, {0x6, 0x0, 0xfff3, 0x8, 0xfb, 0xbc}, 0x700, 0x7, 0x6a1}}, @TCA_TBF_RATE64={0xc, 0x4, 0x2f60315982d4f1d1}]}}]}, 0x64}}, 0x4000010) 1.051516718s ago: executing program 6 (id=1756): pipe2(&(0x7f0000000000), 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getresuid(0x0, 0x0, &(0x7f0000000740)) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth0_virt_wifi\x00', 0x10) setsockopt$inet_int(r0, 0x0, 0x14, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1ff, 0x4) sendmmsg(r1, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @local}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029"], 0x108}}], 0x1, 0xc040) 932.45482ms ago: executing program 5 (id=1757): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0xa0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 881.534806ms ago: executing program 0 (id=1758): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb80393884d01a507, 0x4008032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000fee000/0xf000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0xf000, 0x2}) 850.734408ms ago: executing program 6 (id=1759): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) fsopen(&(0x7f0000000000)='tracefs\x00', 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 759.792573ms ago: executing program 5 (id=1760): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x4) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 575.567058ms ago: executing program 1 (id=1761): r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xa) setresgid(0x0, 0xffffffffffffffff, r3) sendmmsg$unix(r1, &(0x7f0000020b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f000001b6c0)=[@cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {r0, 0x0, r3}}}], 0x40, 0x8004}}], 0x1, 0x20000010) 387.77881ms ago: executing program 1 (id=1762): r0 = socket(0x11, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_link_settings={0x4d, 0x0, 0x0, 0xff, 0x0, 0x40, 0x0, 0x0, 0xfc, 0x4, [0x1, 0x0, 0x7f, 0xffffffff, 0x80000000, 0xb, 0x20000, 0x3]}}) 211.926533ms ago: executing program 6 (id=1763): r0 = fanotify_init(0x200, 0x0) r1 = memfd_create(&(0x7f0000000200)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xe6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJ\x81\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x931\xb88\x91j\xf6g\x9a\xd8\xee\xeb\x96Hc\xa5\x95\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\xff\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) r2 = dup(r1) fanotify_mark(r0, 0x1, 0x40000015, r2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x6, 0x3, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 206.938956ms ago: executing program 1 (id=1764): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x195d, 0xec4d2770249a3ef5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82803, 0x8e) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1d, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5d69098c8b534464c516bdd8a0f350000e35abdb80e38f5eb010001", "32d8cc263d9e234b30c50997d3bef4cd4a5d83cdd3dfe7800b2d7b6aa54cc5001fcaed1e831fa79a0000000200", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x8, 0x5]}}) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x4fb) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 0s ago: executing program 6 (id=1765): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800040000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) kernel console output (not intermixed with test programs): butes in process `syz.4.1216'. [ 337.663258][T10544] ?: entered promiscuous mode [ 337.669649][ C1] usblp0: nonzero read bulk status received: -71 [ 337.678062][T10523] usblp0: error -71 reading from printer [ 337.686511][ C0] usblp0: nonzero read bulk status received: -71 [ 337.704226][ T5686] usb 6-1: new full-speed USB device number 40 using dummy_hcd [ 337.865953][ T5686] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 337.877415][ T5686] usb 6-1: config 0 has no interface number 0 [ 337.886106][ T5686] usb 6-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 337.895585][ T5686] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.903700][ T5686] usb 6-1: Product: syz [ 337.908618][ T5686] usb 6-1: Manufacturer: syz [ 337.916023][ T5686] usb 6-1: SerialNumber: syz [ 337.936186][ T5686] usb 6-1: config 0 descriptor?? [ 337.959808][ T5686] usb 6-1: selecting invalid altsetting 1 [ 337.971981][ T42] usb 2-1: unable to get BOS descriptor or descriptor too short [ 337.988352][ T5686] dvb_ttusb_budget: ttusb_init_controller: error [ 337.993768][ T42] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 338.002745][ T5686] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 338.028651][ T42] usb 2-1: can't read configurations, error -71 [ 338.111836][ T5686] DVB: Unable to find symbol stv0299_attach() [ 338.253350][ T5686] DVB: Unable to find symbol tda8083_attach() [ 338.272637][ T5686] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 338.290237][T10554] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1215'. [ 338.329720][T10556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.341349][T10554] bond0: option resend_igmp: invalid value (41402823) [ 338.365267][T10554] bond0: option resend_igmp: allowed values 0 - 255 [ 338.378365][T10556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.389298][ T5686] usb 7-1: USB disconnect, device number 47 [ 338.419148][ T5686] usblp0: removed [ 338.931842][ T5685] usb 1-1: USB disconnect, device number 73 [ 339.504915][ T5685] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 339.676313][ T5685] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.706359][ T5685] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 339.719264][ T5685] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.741027][ T5685] usb 1-1: config 0 descriptor?? [ 339.780705][ T5685] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 339.853880][T10589] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1230'. [ 339.863559][T10589] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1230'. [ 339.875041][T10589] 8021q: VLANs not supported on ip_vti0 [ 340.014290][ T42] usb 1-1: USB disconnect, device number 74 [ 340.101781][T10599] loop2: detected capacity change from 0 to 7 [ 340.119813][T10599] Dev loop2: unable to read RDB block 7 [ 340.135975][T10599] loop2: AHDI p1 p2 p3 [ 340.143768][T10599] loop2: partition table partially beyond EOD, truncated [ 340.171506][T10599] loop2: p1 start 1818582900 is beyond EOD, truncated [ 340.210145][T10599] loop2: p3 start 335544320 is beyond EOD, truncated [ 340.304261][T10603] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1234'. [ 340.466256][ T24] usb 6-1: USB disconnect, device number 40 [ 340.753139][T10614] batadv0: entered promiscuous mode [ 340.795795][T10614] veth0_to_batadv: entered promiscuous mode [ 340.871169][T10614] hsr1: entered allmulticast mode [ 340.893641][T10614] batadv0: entered allmulticast mode [ 340.926327][T10614] veth0_to_batadv: entered allmulticast mode [ 341.165844][T10618] syzkaller0: entered promiscuous mode [ 341.178711][T10618] syzkaller0: entered allmulticast mode [ 341.415965][T10626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.433687][T10626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.284366][T10646] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1243'. [ 345.293849][T10646] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1243'. [ 346.103253][ T158] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.169136][ T158] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.200976][ T158] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.215330][T10648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.236715][ T158] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.255816][T10648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.297518][T10654] loop2: detected capacity change from 0 to 7 [ 346.329927][T10654] Dev loop2: unable to read RDB block 7 [ 346.351017][T10654] loop2: AHDI p1 p2 p3 [ 346.363331][T10654] loop2: partition table partially beyond EOD, truncated [ 346.384590][T10654] loop2: p1 start 1818582900 is beyond EOD, truncated [ 346.407563][T10654] loop2: p3 start 335544320 is beyond EOD, truncated [ 346.491064][T10660] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1248'. [ 346.506502][T10660] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1248'. [ 346.518409][T10660] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1248'. [ 347.414069][ T24] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 347.597063][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 347.620469][ T24] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 347.639314][ T24] usb 7-1: config 0 has no interface number 0 [ 347.660980][ T24] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.695438][ T24] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.739172][ T24] usb 7-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 347.767113][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.802277][ T24] usb 7-1: config 0 descriptor?? [ 348.022593][T10683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.056572][T10683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.341447][ T24] usbhid 7-1:0.1: can't add hid device: -71 [ 348.358484][ T24] usbhid 7-1:0.1: probe with driver usbhid failed with error -71 [ 348.396141][ T24] usb 7-1: USB disconnect, device number 48 [ 348.780027][T10690] syzkaller0: left promiscuous mode [ 348.794127][T10690] syzkaller0: left allmulticast mode [ 349.011806][T10692] FAULT_INJECTION: forcing a failure. [ 349.011806][T10692] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 349.079804][T10692] CPU: 0 UID: 0 PID: 10692 Comm: syz.6.1258 Tainted: G L syzkaller #0 PREEMPT(full) [ 349.079834][T10692] Tainted: [L]=SOFTLOCKUP [ 349.079842][T10692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 349.079851][T10692] Call Trace: [ 349.079860][T10692] [ 349.079868][T10692] dump_stack_lvl+0xe8/0x150 [ 349.079894][T10692] should_fail_ex+0x412/0x560 [ 349.079912][T10692] _copy_from_user+0x2d/0xb0 [ 349.079933][T10692] ___sys_sendmsg+0x1c6/0x360 [ 349.079946][T10692] ? __lock_acquire+0x6b5/0x2cf0 [ 349.079959][T10692] ? __pfx____sys_sendmsg+0x10/0x10 [ 349.079988][T10692] ? __fget_files+0x2a/0x420 [ 349.079999][T10692] ? __fget_files+0x3a0/0x420 [ 349.080015][T10692] __x64_sys_sendmsg+0x1bd/0x2a0 [ 349.080029][T10692] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 349.080046][T10692] ? __pfx_ksys_write+0x10/0x10 [ 349.080064][T10692] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.080075][T10692] do_syscall_64+0x15f/0xf80 [ 349.080087][T10692] ? trace_irq_disable+0x3b/0x140 [ 349.080102][T10692] ? clear_bhb_loop+0x40/0x90 [ 349.080114][T10692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.080124][T10692] RIP: 0033:0x7f40d619cdd9 [ 349.080134][T10692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 349.080143][T10692] RSP: 002b:00007f40d6f92028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 349.080156][T10692] RAX: ffffffffffffffda RBX: 00007f40d6415fa0 RCX: 00007f40d619cdd9 [ 349.080163][T10692] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 000000000000000a [ 349.080169][T10692] RBP: 00007f40d6f92090 R08: 0000000000000000 R09: 0000000000000000 [ 349.080176][T10692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.080182][T10692] R13: 00007f40d6416038 R14: 00007f40d6415fa0 R15: 00007f40d653fa48 [ 349.080196][T10692] [ 349.587084][T10697] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1260'. [ 349.600543][T10697] netlink: 'syz.1.1260': attribute type 12 has an invalid length. [ 349.610336][T10697] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1260'. [ 349.620249][T10697] netlink: 'syz.1.1260': attribute type 12 has an invalid length. [ 349.828420][T10707] loop2: detected capacity change from 0 to 7 [ 349.867564][T10707] Dev loop2: unable to read RDB block 7 [ 349.892320][T10707] loop2: AHDI p1 p2 p3 [ 349.917836][T10707] loop2: partition table partially beyond EOD, truncated [ 349.936930][T10707] loop2: p1 start 1818582900 is beyond EOD, truncated [ 349.951091][T10707] loop2: p3 start 335544320 is beyond EOD, truncated [ 350.107914][T10721] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1264'. [ 350.814235][ T5715] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 351.024837][ T5715] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 351.044576][ T5715] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.065636][ T5715] usb 7-1: Product: syz [ 351.097147][ T5715] usb 7-1: Manufacturer: syz [ 351.126402][ T5715] usb 7-1: SerialNumber: syz [ 351.158198][T10742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.324392][T10742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.587955][T10736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.607603][T10736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.644582][ T5715] (unnamed net_device) (uninitialized): Assigned a random MAC address: 2a:29:e5:ab:cc:4a [ 351.740864][ T5715] rtl8150 7-1:1.0: eth9: rtl8150 is detected [ 351.789222][ T5715] usb 7-1: USB disconnect, device number 49 [ 351.977695][T10747] openvswitch: : Dropping previously announced user features [ 352.279406][T10749] FAULT_INJECTION: forcing a failure. [ 352.279406][T10749] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 352.331156][T10749] CPU: 1 UID: 0 PID: 10749 Comm: syz.5.1272 Tainted: G L syzkaller #0 PREEMPT(full) [ 352.331179][T10749] Tainted: [L]=SOFTLOCKUP [ 352.331183][T10749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 352.331190][T10749] Call Trace: [ 352.331196][T10749] [ 352.331202][T10749] dump_stack_lvl+0xe8/0x150 [ 352.331219][T10749] should_fail_ex+0x412/0x560 [ 352.331236][T10749] _copy_from_user+0x2d/0xb0 [ 352.331250][T10749] __copy_msghdr+0x3c5/0x5b0 [ 352.331266][T10749] ___sys_sendmsg+0x213/0x360 [ 352.331278][T10749] ? __lock_acquire+0x6b5/0x2cf0 [ 352.331292][T10749] ? __pfx____sys_sendmsg+0x10/0x10 [ 352.331323][T10749] ? __fget_files+0x2a/0x420 [ 352.331335][T10749] ? __fget_files+0x3a0/0x420 [ 352.331351][T10749] __x64_sys_sendmsg+0x1bd/0x2a0 [ 352.331365][T10749] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 352.331382][T10749] ? __pfx_ksys_write+0x10/0x10 [ 352.331401][T10749] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.331413][T10749] do_syscall_64+0x15f/0xf80 [ 352.331426][T10749] ? trace_irq_disable+0x3b/0x140 [ 352.331441][T10749] ? clear_bhb_loop+0x40/0x90 [ 352.331453][T10749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.331463][T10749] RIP: 0033:0x7fb97e39cdd9 [ 352.331474][T10749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 352.331483][T10749] RSP: 002b:00007fb97f2d4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 352.331495][T10749] RAX: ffffffffffffffda RBX: 00007fb97e615fa0 RCX: 00007fb97e39cdd9 [ 352.331503][T10749] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 000000000000000a [ 352.331509][T10749] RBP: 00007fb97f2d4090 R08: 0000000000000000 R09: 0000000000000000 [ 352.331516][T10749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 352.331522][T10749] R13: 00007fb97e616038 R14: 00007fb97e615fa0 R15: 00007fb97e73fa48 [ 352.331536][T10749] [ 352.723048][T10756] syzkaller1: entered promiscuous mode [ 352.758155][T10756] syzkaller1: entered allmulticast mode [ 353.020140][ T5715] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 353.214459][ T5715] usb 7-1: Using ep0 maxpacket: 16 [ 353.242606][ T5715] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 353.263094][ T5715] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 353.288247][ T5715] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 353.348523][ T5715] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 353.385747][ T5715] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.412478][ T5715] usb 7-1: Product: syz [ 353.432416][ T5715] usb 7-1: Manufacturer: syz [ 353.449569][ T5715] usb 7-1: SerialNumber: syz [ 353.477609][ T5715] usb 7-1: 0:2 : does not exist [ 353.946751][ T5715] usb 7-1: 1:0: cannot get min/max values for control 4 (id 1) [ 354.089086][T10772] loop2: detected capacity change from 0 to 7 [ 354.120277][T10772] Dev loop2: unable to read RDB block 7 [ 354.140785][T10772] loop2: AHDI p1 p2 p3 [ 354.156685][ T5715] usb 7-1: USB disconnect, device number 50 [ 354.173836][T10772] loop2: partition table partially beyond EOD, truncated [ 354.192412][T10772] loop2: p1 start 1818582900 is beyond EOD, truncated [ 354.227103][T10772] loop2: p3 start 335544320 is beyond EOD, truncated [ 354.254682][ T5855] udevd[5855]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 355.717532][ T29] audit: type=1326 audit(1777619817.279:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10798 comm="syz.6.1286" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40d619cdd9 code=0x7ffc0000 [ 355.802962][ T29] audit: type=1326 audit(1777619817.279:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10798 comm="syz.6.1286" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40d619cdd9 code=0x7ffc0000 [ 355.890665][ T29] audit: type=1326 audit(1777619817.279:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10798 comm="syz.6.1286" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40d619cdd9 code=0x7ffc0000 [ 355.938449][ T29] audit: type=1326 audit(1777619817.279:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10798 comm="syz.6.1286" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f40d619cdd9 code=0x7ffc0000 [ 356.007774][ T29] audit: type=1326 audit(1777619817.279:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10798 comm="syz.6.1286" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40d619cdd9 code=0x7ffc0000 [ 356.103480][ T29] audit: type=1326 audit(1777619817.279:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10798 comm="syz.6.1286" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40d619cdd9 code=0x7ffc0000 [ 356.170098][ T29] audit: type=1326 audit(1777619817.299:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10798 comm="syz.6.1286" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40d619cdd9 code=0x7ffc0000 [ 356.241527][ T29] audit: type=1326 audit(1777619817.299:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10798 comm="syz.6.1286" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40d619cdd9 code=0x7ffc0000 [ 356.304177][ T29] audit: type=1326 audit(1777619817.309:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10798 comm="syz.6.1286" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f40d619cdd9 code=0x7ffc0000 [ 356.375838][ T29] audit: type=1326 audit(1777619817.309:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10798 comm="syz.6.1286" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40d619cdd9 code=0x7ffc0000 [ 356.581095][T10807] loop2: detected capacity change from 0 to 7 [ 356.587961][T10807] Dev loop2: unable to read RDB block 7 [ 356.587993][T10807] loop2: AHDI p1 p2 p3 [ 356.588035][T10807] loop2: partition table partially beyond EOD, truncated [ 356.588188][T10807] loop2: p1 start 1818582900 is beyond EOD, truncated [ 356.588209][T10807] loop2: p3 start 335544320 is beyond EOD, truncated [ 356.864156][ T5708] usb 2-1: new full-speed USB device number 88 using dummy_hcd [ 357.246642][T10811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.275634][T10811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.321773][ T5708] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 357.346934][ T5708] usb 2-1: can't read configurations, error -71 [ 358.749443][T10876] loop2: detected capacity change from 0 to 7 [ 358.775963][T10876] Dev loop2: unable to read RDB block 7 [ 358.838689][T10876] loop2: AHDI p1 p2 p3 [ 358.864152][T10876] loop2: partition table partially beyond EOD, truncated [ 358.883131][T10876] loop2: p1 start 1818582900 is beyond EOD, truncated [ 358.891848][T10876] loop2: p3 start 335544320 is beyond EOD, truncated [ 359.097464][T10882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.175177][ T24] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 359.188683][T10882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.541369][T10893] netlink: 161756 bytes leftover after parsing attributes in process `syz.1.1307'. [ 359.588991][T10893] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1307'. [ 359.876225][T10895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.917891][T10895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.154135][ T5715] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 360.270366][T10901] geneve2: entered promiscuous mode [ 360.276428][T10901] geneve2: entered allmulticast mode [ 360.345666][ T5715] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 130, using maximum allowed: 30 [ 360.369561][ T5715] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 360.400554][ T5715] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 360.425719][ T5715] usb 1-1: New USB device found, idVendor=05ac, idProduct=027e, bcdDevice= 0.00 [ 360.445238][ T5715] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.463868][ T5715] usb 1-1: config 0 descriptor?? [ 360.892984][T10901] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 361.091167][T10897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.126590][T10897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.219275][ T5715] usbhid 1-1:0.0: can't add hid device: -71 [ 361.253653][ T5715] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 361.318554][ T5715] usb 1-1: USB disconnect, device number 75 [ 361.783546][T10926] loop2: detected capacity change from 0 to 7 [ 361.810114][T10926] Dev loop2: unable to read RDB block 7 [ 361.834187][T10926] loop2: AHDI p1 p2 p3 [ 361.851755][T10926] loop2: partition table partially beyond EOD, truncated [ 361.886701][T10926] loop2: p1 start 1818582900 is beyond EOD, truncated [ 361.908466][T10926] loop2: p3 start 335544320 is beyond EOD, truncated [ 362.071113][ T24] usb 7-1: unable to get BOS descriptor or descriptor too short [ 362.113618][ T24] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 362.152475][ T24] usb 7-1: can't read configurations, error -71 [ 362.240567][T10951] syzkaller0: entered promiscuous mode [ 362.253267][T10951] syzkaller0: entered allmulticast mode [ 362.676388][T10967] syzkaller0: entered promiscuous mode [ 362.693723][T10967] syzkaller0: entered allmulticast mode [ 362.825519][ T24] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 362.964644][ T5715] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 363.005491][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 363.032492][ T24] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 363.053147][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.088131][ T24] usb 7-1: config 0 descriptor?? [ 363.156261][ T5715] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 363.167571][ T5715] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 363.178818][ T5715] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 363.194157][ T5715] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 363.204162][ T5715] usb 6-1: SerialNumber: syz [ 363.255467][ T5686] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 363.394033][ T5686] usb 2-1: device descriptor read/64, error -71 [ 363.437480][T10967] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1323'. [ 363.581827][ T5715] usb 6-1: 0:2 : does not exist [ 363.646144][ T5686] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 363.716929][ T5715] usb 6-1: USB disconnect, device number 41 [ 363.784459][ T5686] usb 2-1: device descriptor read/64, error -71 [ 363.811298][ T5855] udevd[5855]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 363.914613][ T5686] usb usb2-port1: attempt power cycle [ 364.105801][ T24] ath6kl: Failed to submit usb control message: -110 [ 364.122777][ T24] ath6kl: unable to send the bmi data to the device: -110 [ 364.140808][ T24] ath6kl: Unable to send get target info: -110 [ 364.172924][ T24] ath6kl: Failed to init ath6kl core: -110 [ 364.195145][ T24] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 364.265628][ T5686] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 364.298425][ T5686] usb 2-1: device descriptor read/8, error -71 [ 364.554078][ T5686] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 364.575457][T10997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.592978][T10997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.603710][ T5686] usb 2-1: device descriptor read/8, error -71 [ 364.610253][ T5685] usb 6-1: new low-speed USB device number 42 using dummy_hcd [ 364.614427][T10997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.631056][T10997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.738128][ T5686] usb usb2-port1: unable to enumerate USB device [ 364.775307][ T5685] usb 6-1: config 0 has an invalid descriptor of length 119, skipping remainder of the config [ 364.785662][ T5685] usb 6-1: config 0 interface 0 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 364.798648][ T5685] usb 6-1: config 0 interface 0 has no altsetting 0 [ 364.805318][ T5685] usb 6-1: New USB device found, idVendor=044f, idProduct=b323, bcdDevice= 0.00 [ 364.815046][ T5685] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.825337][ T5685] usb 6-1: config 0 descriptor?? [ 365.328319][ T5686] usb 7-1: USB disconnect, device number 52 [ 365.378100][T11002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.395901][T11004] macvtap1: entered promiscuous mode [ 365.401966][T11002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.410173][T11004] macvtap1: entered allmulticast mode [ 365.416771][T11004] veth1_vlan: entered allmulticast mode [ 365.854003][ T5686] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 366.014044][ T5686] usb 7-1: Using ep0 maxpacket: 8 [ 366.022588][ T5686] usb 7-1: unable to get BOS descriptor or descriptor too short [ 366.033034][ T5686] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 366.044764][ T5686] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 366.056900][ T5686] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 366.077132][ T5686] usb 7-1: config 1 has no interface number 1 [ 366.090367][ T5686] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 366.107056][ T5686] usb 7-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 366.120797][ T5686] usb 7-1: config 1 interface 2 has no altsetting 0 [ 366.131270][ T5686] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 366.140965][ T5686] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.150466][ T5686] usb 7-1: Product: syz [ 366.155546][T11016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.165990][ T5686] usb 7-1: Manufacturer: syz [ 366.171336][ T5686] usb 7-1: SerialNumber: syz [ 366.197240][T11016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.275432][ T10] usb 2-1: new low-speed USB device number 94 using dummy_hcd [ 366.378636][T11024] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1338'. [ 366.415237][ T24] usb 7-1: USB disconnect, device number 53 [ 366.428584][ T10] usb 2-1: device descriptor read/64, error -71 [ 366.566357][T11031] Cannot find del_set index 4 as target [ 366.674211][ T10] usb 2-1: new low-speed USB device number 95 using dummy_hcd [ 366.824150][ T10] usb 2-1: device descriptor read/64, error -71 [ 366.944422][ T10] usb usb2-port1: attempt power cycle [ 367.284154][ T10] usb 2-1: new low-speed USB device number 96 using dummy_hcd [ 367.314968][ T10] usb 2-1: device descriptor read/8, error -71 [ 367.489332][ T5685] usb 6-1: string descriptor 0 read error: -71 [ 367.497819][ T5685] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 367.520564][ T5685] usb 6-1: USB disconnect, device number 42 [ 367.564066][ T10] usb 2-1: new low-speed USB device number 97 using dummy_hcd [ 367.588361][ T10] usb 2-1: device descriptor read/8, error -71 [ 367.676063][ T29] kauditd_printk_skb: 92 callbacks suppressed [ 367.676080][ T29] audit: type=1326 audit(1777619829.239:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11061 comm="syz.5.1341" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb97e39cdd9 code=0x0 [ 367.718958][ T10] usb usb2-port1: unable to enumerate USB device [ 367.737241][ T29] audit: type=1326 audit(1777619829.239:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11061 comm="syz.5.1341" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb97e39cdd9 code=0x0 [ 368.899381][T11070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1343'. [ 368.949572][ T29] audit: type=1326 audit(1777619830.509:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11071 comm="syz.6.1344" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40d619cdd9 code=0x7ffc0000 [ 369.004241][ T29] audit: type=1326 audit(1777619830.509:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11071 comm="syz.6.1344" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40d619cdd9 code=0x7ffc0000 [ 369.069105][ T29] audit: type=1326 audit(1777619830.539:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11071 comm="syz.6.1344" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f40d619cdd9 code=0x7ffc0000 [ 369.156101][ T29] audit: type=1326 audit(1777619830.539:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11071 comm="syz.6.1344" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40d619cdd9 code=0x7ffc0000 [ 369.200865][ T29] audit: type=1326 audit(1777619830.539:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11071 comm="syz.6.1344" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40d619cdd9 code=0x7ffc0000 [ 369.310707][ T29] audit: type=1326 audit(1777619830.539:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11071 comm="syz.6.1344" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f40d619cdd9 code=0x7ffc0000 [ 369.342432][ T29] audit: type=1326 audit(1777619830.539:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11071 comm="syz.6.1344" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f40d619cb42 code=0x7ffc0000 [ 369.372108][ T29] audit: type=1326 audit(1777619830.539:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11071 comm="syz.6.1344" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f40d619cb42 code=0x7ffc0000 [ 369.656287][T11073] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1343'. [ 369.724646][T11091] syzkaller0: entered promiscuous mode [ 369.734003][T11091] syzkaller0: entered allmulticast mode [ 369.924115][ T24] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 370.084226][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 370.107318][ T24] usb 2-1: config 207 has an invalid interface number: 65 but max is 3 [ 370.144571][ T24] usb 2-1: config 207 has an invalid interface number: 179 but max is 3 [ 370.337248][ T24] usb 2-1: config 207 contains an unexpected descriptor of type 0x1, skipping [ 370.382265][ T24] usb 2-1: config 207 contains an unexpected descriptor of type 0x2, skipping [ 370.418016][ T24] usb 2-1: config 207 has an invalid interface number: 250 but max is 3 [ 370.494757][ T24] usb 2-1: config 207 has an invalid interface number: 132 but max is 3 [ 370.513541][ T24] usb 2-1: config 207 has no interface number 0 [ 370.527039][ T24] usb 2-1: config 207 has no interface number 1 [ 370.540150][ T24] usb 2-1: config 207 has no interface number 2 [ 370.552922][ T24] usb 2-1: config 207 has no interface number 3 [ 370.566025][ T24] usb 2-1: config 207 interface 179 altsetting 2 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 370.586351][ T24] usb 2-1: config 207 interface 179 altsetting 2 has a duplicate endpoint with address 0xB, skipping [ 370.609648][ T24] usb 2-1: config 207 interface 179 altsetting 2 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 370.629468][ T24] usb 2-1: config 207 interface 179 altsetting 2 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 370.670249][ T24] usb 2-1: config 207 interface 179 altsetting 2 has a duplicate endpoint with address 0x7, skipping [ 370.704476][ T24] usb 2-1: config 207 interface 179 altsetting 2 has a duplicate endpoint with address 0x2, skipping [ 370.738534][ T24] usb 2-1: config 207 interface 179 altsetting 2 has a duplicate endpoint with address 0x7, skipping [ 370.771966][ T24] usb 2-1: config 207 interface 179 altsetting 2 has a duplicate endpoint with address 0x8, skipping [ 370.796695][T11126] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1354'. [ 370.811708][ T24] usb 2-1: config 207 interface 179 altsetting 2 has a duplicate endpoint with address 0x8, skipping [ 370.832328][ T24] usb 2-1: config 207 interface 250 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 370.858304][ T24] usb 2-1: config 207 interface 250 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 370.882310][ T24] usb 2-1: config 207 interface 250 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 370.929890][ T24] usb 2-1: config 207 interface 250 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 370.992975][ T24] usb 2-1: config 207 interface 250 altsetting 5 has a duplicate endpoint with address 0x2, skipping [ 371.022504][ T24] usb 2-1: config 207 interface 250 altsetting 5 has a duplicate endpoint with address 0xB, skipping [ 371.040143][ T24] usb 2-1: config 207 interface 250 altsetting 5 has a duplicate endpoint with address 0x1, skipping [ 371.064101][ T24] usb 2-1: config 207 interface 250 altsetting 5 has a duplicate endpoint with address 0x2, skipping [ 371.081603][ T24] usb 2-1: config 207 interface 65 has no altsetting 0 [ 371.101468][ T24] usb 2-1: config 207 interface 179 has no altsetting 0 [ 371.117556][ T24] usb 2-1: config 207 interface 250 has no altsetting 0 [ 371.133795][ T24] usb 2-1: config 207 interface 132 has no altsetting 0 [ 371.155077][ T24] usb 2-1: New USB device found, idVendor=0ace, idProduct=2011, bcdDevice= c.59 [ 371.177546][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.203568][ T24] usb 2-1: Product: ⠊ [ 371.213531][ T24] usb 2-1: Manufacturer: Ж [ 371.386427][ T10] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 371.557531][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 371.582419][ T10] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 371.605530][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.631831][ T10] usb 7-1: config 0 descriptor?? [ 371.667652][T11142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.678402][T11142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.856706][T11147] syzkaller0: entered promiscuous mode [ 371.869924][T11147] syzkaller0: entered allmulticast mode [ 371.896070][ T5357] usb 1-1: new full-speed USB device number 76 using dummy_hcd [ 372.080452][ T10] ath6kl: Failed to read usb control message: -32 [ 372.102926][ T10] ath6kl: Unable to read the bmi data from the device: -32 [ 372.136932][ T10] ath6kl: Unable to recv target info: -32 [ 372.178945][T11151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.192028][ T10] ath6kl: Failed to init ath6kl core: -32 [ 372.211212][ T10] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -32 [ 372.220246][T11151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.298031][ T5708] usb 7-1: USB disconnect, device number 54 [ 372.585005][T11159] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1363'. [ 372.732610][ T24] usb 2-1: USB disconnect, device number 98 [ 372.930830][T11167] netlink: 192 bytes leftover after parsing attributes in process `syz.4.1367'. [ 373.134068][ T24] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 373.318168][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 373.348707][ T24] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 373.373097][ T24] usb 2-1: can't read configurations, error -71 [ 373.649379][T11192] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1373'. [ 374.498964][T11233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.529923][T11233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.575156][T11233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.603054][T11233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.988934][T11245] kernel profiling enabled (shift: 9) [ 375.231010][T11255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.248988][T11255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.271965][T11255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.289435][T11255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.446549][T11264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.534372][T11263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.563238][T11264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.614417][T11263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.706618][T11272] syzkaller0: entered promiscuous mode [ 375.730453][T11272] syzkaller0: entered allmulticast mode [ 375.924058][ T5715] usb 6-1: new full-speed USB device number 43 using dummy_hcd [ 376.085749][ T5715] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 376.096719][ T5715] usb 6-1: config 0 has no interface number 0 [ 376.111872][ T5715] usb 6-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 376.143474][ T5715] usb 6-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.184019][ T5357] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 376.192818][ T5715] usb 6-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 376.240286][ T5715] usb 6-1: config 0 interface 1 has no altsetting 0 [ 376.277345][ T5715] usb 6-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 376.293585][T11279] netlink: 'syz.4.1393': attribute type 1 has an invalid length. [ 376.317443][ T5715] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.342078][T11279] 8021q: adding VLAN 0 to HW filter on device bond4 [ 376.361878][ T5715] usb 6-1: config 0 descriptor?? [ 376.387111][ T5357] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 376.395850][ T5357] usb 2-1: config 0 has no interface number 0 [ 376.402853][ T5357] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 376.412662][ T5357] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.430090][ T5357] usb 2-1: config 0 descriptor?? [ 376.440585][ T5357] cp210x 2-1:0.1: cp210x converter detected [ 376.458698][T11279] bond4: (slave geneve3): making interface the new active one [ 376.495142][T11279] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 376.667099][ T158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.677514][ T5708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.755928][ T5708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.838382][ T5357] cp210x 2-1:0.1: failed to get vendor val 0x000e size 3: -32 [ 376.942412][T11286] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 376.956099][T11286] ip6gretap0: entered promiscuous mode [ 376.963693][T11286] macsec1: entered promiscuous mode [ 376.969367][T11286] macsec1: entered allmulticast mode [ 376.974715][T11286] ip6gretap0: entered allmulticast mode [ 376.982883][ T5715] uclogic 0003:145F:0212.0023: failed retrieving string descriptor #100: -71 [ 377.014964][ T5715] uclogic 0003:145F:0212.0023: failed retrieving pen parameters: -71 [ 377.055692][ T5715] uclogic 0003:145F:0212.0023: pen probing failed: -71 [ 377.065623][T11277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.084718][T11277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.085531][ T5715] uclogic 0003:145F:0212.0023: failed probing parameters: -71 [ 377.119824][ T5357] usb 2-1: cp210x converter now attached to ttyUSB0 [ 377.140301][ T5715] uclogic 0003:145F:0212.0023: probe with driver uclogic failed with error -71 [ 377.192065][ T5715] usb 6-1: USB disconnect, device number 43 [ 377.317517][ T10] usb 2-1: USB disconnect, device number 101 [ 377.352393][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 377.391132][ T10] cp210x 2-1:0.1: device disconnected [ 377.477312][ T158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.497740][T11307] fuse: Unknown parameter 'd' [ 377.508608][ T158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.706573][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.715787][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.735210][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.756231][T11312] syzkaller0: entered promiscuous mode [ 377.777700][T11312] syzkaller0: entered allmulticast mode [ 377.785713][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.795068][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.044028][ T10] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 378.221020][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.257959][ T10] usb 6-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 378.306897][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 378.340073][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.361425][ T10] usb 6-1: Product: syz [ 378.376387][ T10] usb 6-1: Manufacturer: syz [ 378.395644][ T10] usb 6-1: SerialNumber: syz [ 378.427286][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.433789][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.444617][ T10] cdc_ncm 6-1:1.0: skipping garbage [ 378.449971][ T10] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 378.458279][ T10] cdc_ncm 6-1:1.0: bind() failure [ 378.487202][ T10] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 378.500273][ T10] cdc_ncm 6-1:1.1: bind() failure [ 378.626931][ T10] usb 6-1: USB disconnect, device number 44 [ 378.848467][T11340] loop2: detected capacity change from 0 to 7 [ 378.880928][T11340] Dev loop2: unable to read RDB block 7 [ 378.905399][T11340] loop2: AHDI p1 p2 p3 [ 378.924269][T11340] loop2: partition table partially beyond EOD, truncated [ 378.946151][T11340] loop2: p1 start 1818582900 is beyond EOD, truncated [ 378.971005][T11340] loop2: p3 start 335544320 is beyond EOD, truncated [ 379.724726][T11356] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 380.036134][T11363] usb usb2: usbfs: process 11363 (syz.4.1411) did not claim interface 0 before use [ 380.067974][T11363] usb usb2: usbfs: process 11363 (syz.4.1411) did not claim interface 0 before use [ 380.669316][T11371] syzkaller0: entered promiscuous mode [ 380.689301][T11371] syzkaller0: entered allmulticast mode [ 381.095683][T11391] syzkaller0: entered promiscuous mode [ 381.104618][T11391] syzkaller0: entered allmulticast mode [ 381.274368][ T5708] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 381.424197][ T5708] usb 2-1: device descriptor read/64, error -71 [ 381.706950][ T5708] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 381.743255][T11411] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1428'. [ 381.787533][ T24] net_ratelimit: 14 callbacks suppressed [ 381.787553][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.885354][ T5708] usb 2-1: device descriptor read/64, error -71 [ 381.994774][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.004860][ T5708] usb usb2-port1: attempt power cycle [ 382.018836][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.063338][T11418] binder: 11417:11418 ioctl d0009411 200000000440 returned -22 [ 382.333675][T11425] binder: 11423:11425 ioctl c0306201 200000000640 returned -22 [ 382.404924][ T5708] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 382.445922][ T5708] usb 2-1: device descriptor read/8, error -71 [ 382.459137][T11428] netlink: 'syz.4.1433': attribute type 1 has an invalid length. [ 382.704078][ T5708] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 382.724472][ T5708] usb 2-1: device descriptor read/8, error -71 [ 382.825071][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.834451][ T5708] usb usb2-port1: unable to enumerate USB device [ 382.864039][ T5686] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 382.914479][ T1171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.922704][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.014307][ T5715] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 383.027293][ T5686] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 383.043038][ T5686] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.054606][ T5686] usb 1-1: config 0 descriptor?? [ 383.063438][ T5686] cp210x 1-1:0.0: cp210x converter detected [ 383.144302][ T1171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.155551][ T1171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.186103][ T5715] usb 7-1: config 0 interface 0 has no altsetting 0 [ 383.201943][ T5715] usb 7-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 383.223824][T11440] netlink: 'syz.5.1437': attribute type 1 has an invalid length. [ 383.227076][ T5715] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.244420][ T5715] usb 7-1: config 0 descriptor?? [ 383.502580][ T5686] usb 1-1: cp210x converter now attached to ttyUSB0 [ 383.540008][ T5715] video4linux radio48: keene_cmd_main failed (-71) [ 383.566876][ T5715] radio-keene 7-1:0.0: V4L2 device registered as radio48 [ 383.586115][ T5715] usb 7-1: USB disconnect, device number 55 [ 383.696944][ T42] usb 1-1: USB disconnect, device number 77 [ 383.721073][ T42] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 383.780368][ T42] cp210x 1-1:0.0: device disconnected [ 383.787270][T11458] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1440'. [ 383.866059][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.090473][T11467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.108319][T11467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.256281][T11470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.274242][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.300552][T11470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.312592][T11470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.324015][ T10] usb 2-1: new low-speed USB device number 106 using dummy_hcd [ 384.331659][T11470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.484061][ T10] usb 2-1: Invalid ep0 maxpacket: 16 [ 384.505299][T11470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.525044][T11470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.575787][ T5357] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 384.624211][ T10] usb 2-1: new low-speed USB device number 107 using dummy_hcd [ 384.686161][T11482] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1448'. [ 384.708074][T11482] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1448'. [ 384.736010][T11482] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1448'. [ 384.757525][ T5357] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 384.767729][ T5357] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.781678][T11484] fuse: Bad value for 'group_id' [ 384.784014][ T10] usb 2-1: Invalid ep0 maxpacket: 16 [ 384.792054][ T5357] usb 1-1: Product: syz [ 384.795711][T11484] fuse: Bad value for 'group_id' [ 384.796975][ T5357] usb 1-1: Manufacturer: syz [ 384.807972][ T10] usb usb2-port1: attempt power cycle [ 384.823774][ T5357] usb 1-1: SerialNumber: syz [ 384.846438][ T5357] usb 1-1: config 0 descriptor?? [ 384.872333][ T5357] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 384.878736][T11485] fuse: Bad value for 'group_id' [ 384.909747][ T5357] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 384.921234][T11485] fuse: Bad value for 'group_id' [ 384.925153][ T5357] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 384.934793][T11490] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1450'. [ 384.942812][T11488] netlink: 212348 bytes leftover after parsing attributes in process `syz.6.1451'. [ 384.954519][ T5357] usb 1-1: media controller created [ 384.963328][T11488] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1451'. [ 384.997957][ T5357] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 385.078547][T11472] dvb-usb: bulk message failed: -22 (7/0) [ 385.108234][T11496] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1453'. [ 385.155699][ T5357] DVB: Unable to find symbol mt352_attach() [ 385.165755][ T10] usb 2-1: new low-speed USB device number 108 using dummy_hcd [ 385.205956][ T10] usb 2-1: Invalid ep0 maxpacket: 16 [ 385.243269][T11497] 8021q: adding VLAN 0 to HW filter on device bond1 [ 385.255129][ T5357] DVB: Unable to find symbol nxt6000_attach() [ 385.267759][ T5357] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 385.295099][ T5357] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input37 [ 385.319102][ T5357] dvb-usb: schedule remote query interval to 1000 msecs. [ 385.336699][T11505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.344452][ T10] usb 2-1: new low-speed USB device number 109 using dummy_hcd [ 385.354437][T11505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.357089][ T5357] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 385.372666][T11505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.373060][T11505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.404792][ T10] usb 2-1: Invalid ep0 maxpacket: 16 [ 385.419858][ T10] usb usb2-port1: unable to enumerate USB device [ 385.440019][ T5357] dvb-usb: bulk message failed: -22 (7/0) [ 385.457267][ T5357] dvb-usb: bulk message failed: -22 (7/0) [ 385.475895][ T5357] usb 1-1: USB disconnect, device number 78 [ 385.540799][T11512] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[7660] was attempted by "   @ h debu   @$  (  \x0c     blkio.bfq.dequeue [ 385.573806][ T5357] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 385.672136][T11507] ip6erspan0: entered allmulticast mode [ 386.017551][T11519] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1460'. [ 386.277581][T11527] netlink: 'syz.0.1463': attribute type 29 has an invalid length. [ 386.299906][T11527] netlink: 'syz.0.1463': attribute type 29 has an invalid length. [ 386.322877][T11527] netlink: 'syz.0.1463': attribute type 32 has an invalid length. [ 386.474410][ T5686] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 386.633996][ T5686] usb 7-1: Using ep0 maxpacket: 8 [ 386.650620][ T5686] usb 7-1: unable to get BOS descriptor or descriptor too short [ 386.661829][ T5686] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 386.672403][ T5686] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 386.683366][ T5686] usb 7-1: too many endpoints for config 1 interface 1 altsetting 255: 255, using maximum allowed: 30 [ 386.707268][ T5686] usb 7-1: config 1 interface 1 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 386.724186][ T5686] usb 7-1: config 1 interface 1 has no altsetting 0 [ 386.734966][ T5686] usb 7-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 386.745186][ T5686] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.754296][ T5686] usb 7-1: Product: syz [ 386.762533][ T5686] usb 7-1: Manufacturer: syz [ 386.767366][ T5686] usb 7-1: SerialNumber: syz [ 386.984801][ T5715] net_ratelimit: 8 callbacks suppressed [ 386.984819][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.002507][T11526] __nla_validate_parse: 4 callbacks suppressed [ 387.002526][T11526] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1464'. [ 387.036001][T11526] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1464'. [ 387.040661][T11542] netem: change failed [ 387.066846][ T5686] usb 7-1: selecting invalid altsetting 0 [ 387.075750][ T5686] usb 7-1: 0:2 : does not exist [ 387.107256][T11542] pim6reg9: entered allmulticast mode [ 387.142869][T11542] syzkaller0: entered promiscuous mode [ 387.152790][T11542] syzkaller0: entered allmulticast mode [ 387.291480][ T5715] usb 7-1: USB disconnect, device number 56 [ 387.611063][T11563] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1473'. [ 387.657357][T11563] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1473'. [ 387.674776][T11563] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1473'. [ 387.735691][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.754991][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.945936][ T5715] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 388.026950][ T5708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.043005][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.051266][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.114648][ T5715] usb 6-1: Using ep0 maxpacket: 32 [ 388.132530][ T5715] usb 6-1: config 0 has an invalid interface number: 89 but max is 0 [ 388.149288][ T5715] usb 6-1: config 0 has no interface number 0 [ 388.164095][ T5715] usb 6-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 388.187793][ T5715] usb 6-1: config 0 interface 89 has no altsetting 0 [ 388.215089][ T5715] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 388.243077][T11577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1478'. [ 388.253595][ T5715] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.263713][T11577] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1478'. [ 388.274270][ T5715] usb 6-1: Product: syz [ 388.278477][ T5715] usb 6-1: Manufacturer: syz [ 388.312764][ T5715] usb 6-1: SerialNumber: syz [ 388.328613][ T5715] usb 6-1: config 0 descriptor?? [ 388.365528][ T5715] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 388.391835][ T5715] em28xx 6-1:0.89: Video interface 89 found: [ 388.441022][T11577] geneve2: entered promiscuous mode [ 388.458055][T11577] geneve2: entered allmulticast mode [ 388.624320][T11591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.633000][T11591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.772735][T11591] netlink: 'syz.4.1481': attribute type 1 has an invalid length. [ 388.897054][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.934532][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.966086][ T5715] em28xx 6-1:0.89: unknown em28xx chip ID (0) [ 388.985226][T11591] 8021q: adding VLAN 0 to HW filter on device bond5 [ 389.074311][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.779779][T11567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.809862][T11567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.823603][T11604] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1486'. [ 389.854016][T11604] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1486'. [ 389.864804][ T5715] em28xx 6-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 389.883097][ T5715] em28xx 6-1:0.89: board has no eeprom [ 389.944456][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.994048][ T5715] em28xx 6-1:0.89: Identified as Terratec Grabby (card=67) [ 390.002677][ T5715] em28xx 6-1:0.89: analog set to bulk mode. [ 390.011411][ T5708] em28xx 6-1:0.89: Registering V4L2 extension [ 390.018380][ T5686] IPVS: starting estimator thread 0... [ 390.028204][T11607] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1485'. [ 390.038606][T11614] fuse: Unknown parameter 'r' [ 390.058698][ T5715] usb 6-1: USB disconnect, device number 45 [ 390.084415][ T5715] em28xx 6-1:0.89: Disconnecting em28xx [ 390.118265][ T5708] em28xx 6-1:0.89: Config register raw data: 0xffffffed [ 390.127098][ T5708] em28xx 6-1:0.89: AC97 chip type couldn't be determined [ 390.135854][ T5708] em28xx 6-1:0.89: No AC97 audio processor [ 390.142651][ T5708] usb 6-1: Decoder not found [ 390.147488][T11612] IPVS: using max 54 ests per chain, 129600 per kthread [ 390.156854][ T5708] em28xx 6-1:0.89: failed to create media graph [ 390.163236][ T5708] em28xx 6-1:0.89: V4L2 device video103 deregistered [ 390.177060][ T5708] em28xx 6-1:0.89: Registering snapshot button... [ 390.188977][ T5708] input: em28xx snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.89/input/input38 [ 390.273011][ T5708] em28xx 6-1:0.89: Remote control support is not available for this card. [ 390.303676][ T5715] em28xx 6-1:0.89: Closing input extension [ 390.309856][ T42] usb 1-1: new full-speed USB device number 79 using dummy_hcd [ 390.338305][ T5715] em28xx 6-1:0.89: Deregistering snapshot button [ 390.490340][ T42] usb 1-1: unable to get BOS descriptor or descriptor too short [ 390.508967][ T42] usb 1-1: not running at top speed; connect to a high speed hub [ 390.521246][ T5715] em28xx 6-1:0.89: Freeing device [ 390.532620][ T42] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 390.582432][ T42] usb 1-1: New USB device found, idVendor=046d, idProduct=08c6, bcdDevice= 0.40 [ 390.603689][T11625] tunl0: Caught tx_queue_len zero misconfig [ 390.611963][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.640458][ T42] usb 1-1: Product: syz [ 390.654439][ T5686] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 390.662661][ T42] usb 1-1: Manufacturer: syz [ 390.673264][ T42] usb 1-1: SerialNumber: syz [ 390.844504][ T5686] usb 7-1: Using ep0 maxpacket: 32 [ 390.861056][ T5686] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 390.879640][ T5686] usb 7-1: config 0 has no interface number 0 [ 390.901530][ T5686] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 390.928845][ T42] usb 1-1: 1:1 : sample bitwidth 62 in over sample bytes 4 [ 390.955537][T11610] trusted_key: encrypted_key: keylen parameter is missing [ 390.957109][ T42] usb 1-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 390.996125][ T5686] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.017747][ T5686] usb 7-1: Product: syz [ 391.031057][ T5686] usb 7-1: Manufacturer: syz [ 391.043156][ T42] usb 1-1: failed to enable PITCH for EP 0x1 [ 391.052098][ T5686] usb 7-1: SerialNumber: syz [ 391.084187][ T42] usb 1-1: unit 2 not found! [ 391.103889][ T42] usb 1-1: unit 0 not found! [ 391.136638][ T5686] usb 7-1: config 0 descriptor?? [ 391.343796][ T42] usb 1-1: USB disconnect, device number 79 [ 391.528786][ T6935] udevd[6935]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 391.625383][ T5686] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 391.670771][ T5686] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 391.720368][ T5686] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 391.798606][ T5686] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 391.841742][ T5686] usb 7-1: USB disconnect, device number 57 [ 392.187038][ T42] net_ratelimit: 6 callbacks suppressed [ 392.187054][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.237427][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057ad5000: rx timeout, send abort [ 392.305209][ T1171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.322694][ T1171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.404028][ T24] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 392.566365][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.605160][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.632510][ T24] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 392.666779][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.712510][ T24] usb 6-1: config 0 descriptor?? [ 392.737540][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057ad4000: rx timeout, send abort [ 392.747838][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057ad5000: abort rx timeout. Force session deactivation [ 392.947996][T11668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.969085][ T42] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 392.984508][T11668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.065528][ T42] hid-generic 0000:0000:0000.0024: hidraw0: HID v0.00 Device [syz0] on syz0 [ 393.224639][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.234492][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057ad6000: rx timeout, send abort [ 393.245890][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057ad4000: abort rx timeout. Force session deactivation [ 393.329656][ T24] hid-steam 0003:28DE:1142.0025: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 393.414086][ T24] hid-steam 0003:28DE:1142.0025: Steam wireless receiver connected [ 393.445839][T11685] __nla_validate_parse: 2 callbacks suppressed [ 393.445851][T11685] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1499'. [ 393.461619][ T1171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.473700][ T1171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.526514][T11668] usb usb8: check_ctrlrecip: process 11668 (syz.5.1498) requesting ep 01 but needs 81 [ 393.554810][ T24] hid-steam 0003:28DE:1142.0026: hidraw1: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 393.578797][T11668] usb usb8: usbfs: process 11668 (syz.5.1498) did not claim interface 0 before use [ 393.663683][ T10] usb 6-1: USB disconnect, device number 46 [ 393.742700][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057ad6000: abort rx timeout. Force session deactivation [ 393.776796][ T10] hid-steam 0003:28DE:1142.0025: Steam wireless receiver disconnected [ 393.785784][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.794062][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.264626][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.283387][T11700] loop2: detected capacity change from 0 to 7 [ 394.329036][T11700] Dev loop2: unable to read RDB block 7 [ 394.362238][T11700] loop2: AHDI p1 p2 p3 [ 394.364367][T11705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.379586][T11700] loop2: partition table partially beyond EOD, truncated [ 394.400884][T11700] loop2: p1 start 1818582900 is beyond EOD, truncated [ 394.400901][T11700] loop2: p3 start 335544320 is beyond EOD, truncated [ 395.350333][T11729] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1510'. [ 395.362323][T11729] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1510'. [ 395.371688][T11729] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1510'. [ 395.684262][T11738] netlink: 3 bytes leftover after parsing attributes in process `syz.6.1513'. [ 395.765454][ T24] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 395.831827][T11742] xt_ecn: cannot match TCP bits for non-tcp packets [ 395.938365][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 395.952655][ T24] usb 2-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 395.983470][ T24] usb 2-1: config 6 interface 0 altsetting 0 has an endpoint descriptor with address 0xEC, changing to 0x8C [ 396.071000][ T24] usb 2-1: config 6 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 396.086923][T11748] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1516'. [ 396.127074][ T24] usb 2-1: config 6 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 396.154167][T11748] netlink: 'syz.0.1516': attribute type 1 has an invalid length. [ 396.178345][ T24] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 396.211442][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.250452][ T24] usb 2-1: Product: syz [ 396.264973][ T24] usb 2-1: Manufacturer: syz [ 396.282664][ T24] usb 2-1: SerialNumber: syz [ 396.294084][ T5686] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 396.331668][ T24] hso 2-1:6.0: Can't find BULK endpoints [ 396.452386][ T5686] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 396.522688][ T5686] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.541578][ T24] usb 2-1: USB disconnect, device number 110 [ 396.565362][ T5686] usb 1-1: Product: syz [ 396.569745][ T5686] usb 1-1: Manufacturer: syz [ 396.584564][ T5686] usb 1-1: SerialNumber: syz [ 396.654458][ T5686] r8152-cfgselector 1-1: Unknown version 0x0000 [ 396.684312][ T5686] r8152-cfgselector 1-1: config 0 descriptor?? [ 396.893767][ T5686] r8152-cfgselector 1-1: Unknown version 0x0000 [ 396.921971][ T5686] r8152-cfgselector 1-1: No union descriptors [ 396.962578][ T5686] r8152-cfgselector 1-1: USB disconnect, device number 80 [ 397.379377][T11768] program syz.1.1521 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 397.394586][ T24] net_ratelimit: 12 callbacks suppressed [ 397.394602][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.899537][T11788] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1526'. [ 398.068388][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.096486][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.426607][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.927861][T11803] IPv6: addrconf: prefix option has invalid lifetime [ 399.114305][ T10] usb 2-1: new full-speed USB device number 111 using dummy_hcd [ 399.214189][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.240697][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.283712][T11816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.318026][ T10] usb 2-1: config 0 has no interfaces? [ 399.347959][ T10] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 399.367379][T11816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.379068][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.400640][ T10] usb 2-1: Product: syz [ 399.412278][ T10] usb 2-1: Manufacturer: syz [ 399.447057][ T10] usb 2-1: SerialNumber: syz [ 399.467085][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.496857][ T10] usb 2-1: config 0 descriptor?? [ 399.542306][T11808] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1531'. [ 399.546623][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.561159][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.737720][T11806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.755649][ T10] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 399.774641][T11806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.824423][ T24] usb 2-1: USB disconnect, device number 111 [ 399.930357][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 399.937535][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 399.949267][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 399.964277][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 399.984653][ T10] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 400.015179][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.073099][ T10] usb 7-1: config 0 descriptor?? [ 400.096427][T11819] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 400.236440][T11831] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1538'. [ 400.278674][T11833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.304556][T11833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.337889][ T10] shield 0003:0955:7214.0027: item fetching failed at offset 2/5 [ 400.348726][ T10] shield 0003:0955:7214.0027: Parse failed [ 400.355645][ T10] shield 0003:0955:7214.0027: probe with driver shield failed with error -22 [ 400.527495][ T24] usb 7-1: USB disconnect, device number 58 [ 400.620403][T11854] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1543'. [ 400.706522][T11854] bond1 (unregistering): Released all slaves [ 400.934362][ T5686] usb 2-1: new full-speed USB device number 112 using dummy_hcd [ 401.065124][ T5686] usb 2-1: device descriptor read/64, error -71 [ 401.076011][ T24] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 401.131554][T11862] loop8: detected capacity change from 0 to 8 [ 401.141488][T11862] loop8: [CUMANA/ADFS] p1 [ADFS] p1 [ 401.147357][T11862] loop8: partition table partially beyond EOD, truncated [ 401.176839][T11862] loop8: p1 size 3004527350 extends beyond EOD, truncated [ 401.250421][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 401.270119][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 401.281936][ T5855] udevd[5855]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 401.292038][ T24] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 401.302318][T11865] loop2: detected capacity change from 0 to 7 [ 401.320647][ T24] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 401.324146][ T5686] usb 2-1: new full-speed USB device number 113 using dummy_hcd [ 401.345330][T11865] Dev loop2: unable to read RDB block 7 [ 401.358650][ T24] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 401.372346][T11865] loop2: AHDI p1 p2 p3 [ 401.377262][T11865] loop2: partition table partially beyond EOD, truncated [ 401.385128][ T24] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 401.396189][T11865] loop2: p1 start 1818582900 is beyond EOD, truncated [ 401.404691][T11865] loop2: p3 start 335544320 is beyond EOD, truncated [ 401.412334][ T24] usb 1-1: config 1 interface 1 has no altsetting 0 [ 401.436379][ T24] usb 1-1: string descriptor 0 read error: -22 [ 401.445684][ T24] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 401.487454][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.553104][T11874] fuse: Bad value for 'fd' [ 401.561310][T11869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.574776][ T5686] usb 2-1: device descriptor read/64, error -71 [ 401.589992][T11869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.694527][ T5686] usb usb2-port1: attempt power cycle [ 401.711409][T11877] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1551'. [ 401.735776][T11858] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1544'. [ 401.904208][ T10] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 401.964473][ T5715] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 402.034213][ T5686] usb 2-1: new full-speed USB device number 114 using dummy_hcd [ 402.054949][ T5686] usb 2-1: device descriptor read/8, error -71 [ 402.065556][ T10] usb 7-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 402.074830][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.082855][ T10] usb 7-1: Product: syz [ 402.087204][ T10] usb 7-1: Manufacturer: syz [ 402.091864][ T10] usb 7-1: SerialNumber: syz [ 402.094102][ T5715] usb 6-1: device descriptor read/64, error -71 [ 402.100560][ T10] usb 7-1: config 0 descriptor?? [ 402.127788][ T10] hub 7-1:0.0: bad descriptor, ignoring hub [ 402.134319][ T10] hub 7-1:0.0: probe with driver hub failed with error -5 [ 402.147573][T11858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1544'. [ 402.189452][T11880] fuse: Bad value for 'fd' [ 402.246826][T11882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.260432][T11882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.304399][ T5686] usb 2-1: new full-speed USB device number 115 using dummy_hcd [ 402.334027][ T5715] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 402.334747][ T5686] usb 2-1: device descriptor read/8, error -71 [ 402.349637][ T10] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 402.361655][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 402.371782][ T10] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 402.380335][ T10] usb 7-1: media controller created [ 402.396603][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 402.441414][ T10] DVB: Unable to find symbol dib7000p_attach() [ 402.447653][ T10] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 402.474266][ T5715] usb 6-1: device descriptor read/64, error -71 [ 402.478193][ T5686] usb usb2-port1: unable to enumerate USB device [ 402.524005][ T10] rc_core: IR keymap rc-dib0700-rc5 not found [ 402.530133][ T10] Registered IR keymap rc-empty [ 402.535458][ T10] dvb-usb: could not initialize remote control. [ 402.541732][ T10] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 402.582113][ T24] usb 1-1: 2:0: failed to get current value for ch 1 (-71) [ 402.591109][ T42] net_ratelimit: 6 callbacks suppressed [ 402.591124][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.606842][ T5715] usb usb6-port1: attempt power cycle [ 402.615909][ T1171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.629732][ T1171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.671184][ T24] usb 1-1: USB disconnect, device number 81 [ 402.944402][ T5715] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 402.974559][ T5715] usb 6-1: device descriptor read/8, error -71 [ 403.012660][T11894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.022737][T11894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.214035][ T5715] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 403.235035][ T5715] usb 6-1: device descriptor read/8, error -71 [ 403.344722][ T5715] usb usb6-port1: unable to enumerate USB device [ 403.385072][ T24] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 403.514056][ T24] usb 1-1: device descriptor read/64, error -71 [ 403.624377][ T5708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.754072][ T24] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 403.756954][ T158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.787535][ T158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.904100][ T24] usb 1-1: device descriptor read/64, error -71 [ 404.014828][ T24] usb usb1-port1: attempt power cycle [ 404.026211][ C0] batman_adv: batadv0: Local translation table size (124) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 404.354025][ T24] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 404.375449][ T24] usb 1-1: device descriptor read/8, error -71 [ 404.492697][ T5686] usb 7-1: USB disconnect, device number 59 [ 404.577947][ T5686] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 404.614088][ T24] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 404.653892][ T24] usb 1-1: device descriptor read/8, error -71 [ 404.669116][ T5707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.677099][T11905] loop2: detected capacity change from 0 to 7 [ 404.686264][T11905] Dev loop2: unable to read RDB block 7 [ 404.692225][T11905] loop2: AHDI p1 p2 p3 [ 404.697618][T11905] loop2: partition table partially beyond EOD, truncated [ 404.706417][T11905] loop2: p1 start 1818582900 is beyond EOD, truncated [ 404.721925][T11905] loop2: p3 start 335544320 is beyond EOD, truncated [ 404.774406][ T24] usb usb1-port1: unable to enumerate USB device [ 404.817192][T11909] netlink: 'syz.5.1563': attribute type 9 has an invalid length. [ 404.904254][ T5686] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 404.911999][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.932463][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.084057][ T5707] usb 2-1: new full-speed USB device number 116 using dummy_hcd [ 405.096060][ T5686] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 405.106426][ T5686] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.117443][ T5686] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.127262][ T5686] usb 7-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 405.137533][ T5686] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.147889][ T5686] usb 7-1: config 0 descriptor?? [ 405.214833][ T5685] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 405.235581][ T5707] usb 2-1: config 0 has no interfaces? [ 405.242083][ T5707] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 405.251341][ T5707] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 405.259709][ T5707] usb 2-1: Manufacturer: syz [ 405.266863][ T5707] usb 2-1: config 0 descriptor?? [ 405.374053][ T5685] usb 6-1: Using ep0 maxpacket: 32 [ 405.380774][ T5685] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.391956][ T5685] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.402834][ T5685] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 405.412698][ T5685] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.424422][ T5685] usb 6-1: config 0 descriptor?? [ 405.433141][ T5685] hub 6-1:0.0: USB hub found [ 405.482774][T11907] netlink: 'syz.1.1562': attribute type 27 has an invalid length. [ 405.494544][ T5707] usb 2-1: USB disconnect, device number 116 [ 405.566287][ T5686] wacom 0003:056A:0010.0028: Unknown device_type for 'HID 056a:0010'. Assuming pen. [ 405.577982][ T5686] wacom 0003:056A:0010.0028: hidraw0: USB HID v0.00 Device [HID 056a:0010] on usb-dummy_hcd.6-1/input0 [ 405.596398][ T5686] input: Wacom Graphire Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:056A:0010.0028/input/input40 [ 405.633169][ T5685] hub 6-1:0.0: 1 port detected [ 405.876454][ T5686] hub 6-1:0.0: activate --> -90 [ 406.083432][ T5707] usb 6-1: USB disconnect, device number 51 [ 406.284812][T11931] netlink: 'syz.0.1567': attribute type 23 has an invalid length. [ 406.684196][ T5686] usb 1-1: new low-speed USB device number 86 using dummy_hcd [ 406.837206][ T5686] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 406.844857][ T5686] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 406.856222][ T5686] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 406.864109][ T5707] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 406.868464][ T5686] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 406.886990][ T5686] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 406.899683][ T5686] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 406.910713][ T5686] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 406.921633][ T5686] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 406.933470][ T5686] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 406.944883][ T5686] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 406.956973][ T5686] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 406.964533][ T5686] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 406.975375][ T5686] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 406.987215][ T5686] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 406.998438][ T5686] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 407.012597][ T5686] usb 1-1: string descriptor 0 read error: -22 [ 407.018999][ T5686] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 407.026499][ T5707] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 407.028158][ T5686] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.038789][ T5707] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 407.056920][ T5707] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 28199, setting to 1024 [ 407.068978][ T5707] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 1024 [ 407.080251][ T5707] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 407.080654][ T5686] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 407.105923][ T5707] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.122879][ T5707] usb 6-1: config 0 descriptor?? [ 407.135979][T11945] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 407.180219][T11947] syzkaller0: entered promiscuous mode [ 407.185921][T11947] syzkaller0: entered allmulticast mode [ 407.350836][ T5707] hdpvr 6-1:0.0: firmware version 0x8 dated Pd|hSqJ#/fcCzM-r4ÝU t} [ 407.375124][T11956] loop2: detected capacity change from 0 to 7 [ 407.382133][T11956] Dev loop2: unable to read RDB block 7 [ 407.390025][T11956] loop2: AHDI p1 p2 p3 [ 407.394572][T11956] loop2: partition table partially beyond EOD, truncated [ 407.410111][T11956] loop2: p1 start 1818582900 is beyond EOD, truncated [ 407.417712][T11956] loop2: p3 start 335544320 is beyond EOD, truncated [ 407.667776][T11969] net_ratelimit: 9 callbacks suppressed [ 407.667796][T11969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.683691][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.721305][T11972] fuse: Unknown parameter 'h_in-%SVm rejected, failed to enable media [ 417.679128][T12145] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1621'. [ 417.711253][T12145] sg_write: data in/out 451548/226 bytes for SCSI command 0x0-- guessing data in; [ 417.711253][T12145] program syz.4.1621 not setting count and/or reply_len properly [ 417.884939][ T24] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 417.912913][T12149] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 417.956602][ T5707] net_ratelimit: 8 callbacks suppressed [ 417.956617][ T5707] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO [ 417.986856][ T5707] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 417.999574][ T5707] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 418.033826][ T5707] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 418.049671][ T5707] usb 7-1: USB disconnect, device number 62 [ 418.061779][ T24] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 418.073557][ T24] usb 6-1: config 1 has no interface number 0 [ 418.082439][ T24] usb 6-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 418.098333][T12158] syzkaller0: left promiscuous mode [ 418.103760][ T24] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 418.115857][T12158] syzkaller0: left allmulticast mode [ 418.122698][ T24] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.136546][T12159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.161300][T12159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.171321][ T24] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 418.181078][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.189389][ T5708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.212333][ T24] usb 6-1: Product: syz [ 418.234805][ T24] usb 6-1: Manufacturer: syz [ 418.271883][ T24] usb 6-1: SerialNumber: syz [ 418.292585][T12147] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 418.322971][T12162] syzkaller0: entered promiscuous mode [ 418.329884][T12162] syzkaller0: entered allmulticast mode [ 418.484555][ T80] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.502666][ T80] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.509675][T12147] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 418.612119][T12168] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1627'. [ 418.766847][ T24] sierra_net 6-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.5-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 418.916140][T12180] tipc: Enabled bearer , priority 0 [ 418.949456][T12180] syzkaller0: entered promiscuous mode [ 418.971145][T12180] syzkaller0: entered allmulticast mode [ 418.985714][T12182] macsec0: entered promiscuous mode [ 418.994757][ T24] sierra_net 6-1:1.7 wwan0: Submit SYNC failed -71 [ 419.006810][T12182] macsec0: left promiscuous mode [ 419.020260][ T24] sierra_net 6-1:1.7 wwan0: Send SYNC failed, status -71 [ 419.052356][ T24] sierra_net 6-1:1.7 wwan0: Submit SYNC failed -71 [ 419.065971][ T24] sierra_net 6-1:1.7 wwan0: Send SYNC failed, status -71 [ 419.100598][ T24] usb 6-1: USB disconnect, device number 53 [ 419.108030][T12180] tipc: Resetting bearer [ 419.137632][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 419.137646][ T29] audit: type=1800 audit(1777619880.689:390): pid=12180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1631" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 419.164573][ T24] sierra_net 6-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.5-1, Sierra Wireless USB-to-WWAN Modem [ 419.201067][T12179] tipc: Resetting bearer [ 419.229895][ T5707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.238622][ T24] sierra_net 6-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 419.255404][T12179] tipc: Disabling bearer [ 419.623083][T12193] syzkaller0: entered promiscuous mode [ 419.629136][ T158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.669865][T12193] syzkaller0: entered allmulticast mode [ 419.678577][ T158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.734064][ T5707] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 419.955575][ T5707] usb 2-1: device descriptor read/64, error -71 [ 420.077787][T12213] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1640'. [ 420.109404][T12215] netlink: 'syz.4.1641': attribute type 1 has an invalid length. [ 420.128509][T12215] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 420.225290][ T5707] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 420.265010][ T5708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.283191][T12222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.311933][T12222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.409563][ T5707] usb 2-1: device descriptor read/64, error -71 [ 420.534394][ T5707] usb usb2-port1: attempt power cycle [ 420.844516][ T80] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.865497][ T80] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.884057][ T5707] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 420.924660][ T5707] usb 2-1: device descriptor read/8, error -71 [ 421.007399][T12236] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 421.068785][T12237] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 421.184225][ T5707] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 421.226033][ T5707] usb 2-1: device descriptor read/8, error -71 [ 421.335895][ T5707] usb usb2-port1: unable to enumerate USB device [ 421.467636][ T29] audit: type=1326 audit(1777619883.029:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12231 comm="syz.5.1645" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb97e39cdd9 code=0x0 [ 421.497117][T12245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.520624][T12245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.076247][T12249] macvtap1: entered promiscuous mode [ 422.083759][T12249] macvtap1: entered allmulticast mode [ 422.090111][T12249] batadv_slave_0: entered promiscuous mode [ 422.098732][T12249] batadv_slave_0: entered allmulticast mode [ 422.120108][T12249] team0: Device macvtap1 failed to register rx_handler [ 422.128274][T12249] batadv_slave_0: left allmulticast mode [ 422.136051][T12249] batadv_slave_0: left promiscuous mode [ 422.244219][ T5685] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 422.398857][ T5685] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 422.431262][ T5685] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 422.443590][ T5685] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 422.454461][T12269] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1655'. [ 422.457101][ T5685] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 422.481194][ T5685] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.489857][T12271] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1655'. [ 422.503276][ T5685] usb 6-1: Product: syz [ 422.516707][ T5685] usb 6-1: Manufacturer: syz [ 422.558858][ T5685] usb 6-1: SerialNumber: syz [ 422.573869][ T5685] usb 6-1: config 0 descriptor?? [ 422.595066][T12271] 0: renamed from hsr0 (while UP) [ 422.600868][T12247] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 422.608640][T12247] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 422.619495][T12271] 0: entered allmulticast mode [ 422.625232][ T5685] usb 6-1: ucan: probing device on interface #0 [ 422.639216][T12271] hsr_slave_0: entered allmulticast mode [ 422.684164][ T5686] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 422.841641][ T5685] usb 6-1: ucan: device protocol version 8388608 is not supported [ 422.850380][ T5686] usb 1-1: Using ep0 maxpacket: 32 [ 422.862910][ T5685] usb 6-1: ucan: probe failed; try to update the device firmware [ 422.874593][ T5686] usb 1-1: config 0 has an invalid interface number: 119 but max is 0 [ 422.890116][ T5686] usb 1-1: config 0 has no interface number 0 [ 422.913599][ T5686] usb 1-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 422.927096][ T5686] usb 1-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xD3, changing to 0x83 [ 422.940712][ T5686] usb 1-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 422.985785][ T5686] usb 1-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 423.048941][ T5686] usb 1-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 423.052612][T12280] netlink: 'syz.4.1657': attribute type 1 has an invalid length. [ 423.091683][ T5686] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.108683][ T5686] usb 1-1: Product: syz [ 423.115651][ T5686] usb 1-1: Manufacturer: syz [ 423.120360][ T5686] usb 1-1: SerialNumber: syz [ 423.133568][ T5685] usb 6-1: USB disconnect, device number 54 [ 423.144291][ T158] net_ratelimit: 10 callbacks suppressed [ 423.144306][ T158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.162182][ T158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.176866][ T5686] usb 1-1: config 0 descriptor?? [ 423.189023][T12280] netlink: 1363 bytes leftover after parsing attributes in process `syz.4.1657'. [ 423.209558][ T5686] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.119/input/input43 [ 423.304103][ T5707] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 423.385805][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.416426][T12268] loop5: detected capacity change from 0 to 7 [ 423.436461][T12268] Dev loop5: unable to read RDB block 7 [ 423.454578][T12268] loop5: unable to read partition table [ 423.460407][T12268] loop5: partition table beyond EOD, truncated [ 423.467677][T12268] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 423.491148][ T5707] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 423.505379][ T5707] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.514901][ T5707] usb 7-1: Product: syz [ 423.520776][ T5707] usb 7-1: Manufacturer: syz [ 423.539763][ T5686] usb 1-1: USB disconnect, device number 88 [ 423.546941][ T5707] usb 7-1: SerialNumber: syz [ 423.591147][ T5707] usb 7-1: config 0 descriptor?? [ 424.198366][T12300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1662'. [ 424.301121][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.333447][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.424275][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.540421][T12282] openvswitch: netlink: IP tunnel dst address not specified [ 424.824554][ T5686] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 424.914451][T12320] xt_CT: You must specify a L4 protocol and not use inversions on it [ 424.945292][T12320] libceph: resolve '4' (ret=-3): failed [ 424.994022][ T5686] usb 1-1: Using ep0 maxpacket: 16 [ 425.016586][ T5686] usb 1-1: config 207 has an invalid interface number: 65 but max is 3 [ 425.038082][ T5686] usb 1-1: config 207 has an invalid interface number: 179 but max is 3 [ 425.061009][ T5686] usb 1-1: config 207 contains an unexpected descriptor of type 0x1, skipping [ 425.076533][ T5686] usb 1-1: config 207 contains an unexpected descriptor of type 0x2, skipping [ 425.098503][ T5686] usb 1-1: config 207 has an invalid interface number: 250 but max is 3 [ 425.115743][ T5686] usb 1-1: config 207 has an invalid interface number: 132 but max is 3 [ 425.135336][ T5686] usb 1-1: config 207 has no interface number 0 [ 425.149673][ T5686] usb 1-1: config 207 has no interface number 1 [ 425.176772][ T5686] usb 1-1: config 207 has no interface number 2 [ 425.202161][ T5686] usb 1-1: config 207 has no interface number 3 [ 425.225313][ T5686] usb 1-1: config 207 interface 179 altsetting 2 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 425.227420][ T5707] usb 7-1: Firmware version (0.0) predates our first public release. [ 425.260192][ T5707] usb 7-1: Please update to version 0.2 or newer [ 425.266478][ T5686] usb 1-1: config 207 interface 179 altsetting 2 has a duplicate endpoint with address 0xB, skipping [ 425.290721][ T5686] usb 1-1: config 207 interface 179 altsetting 2 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 425.302909][ T5686] usb 1-1: config 207 interface 179 altsetting 2 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 425.324093][ T5686] usb 1-1: config 207 interface 179 altsetting 2 has a duplicate endpoint with address 0x7, skipping [ 425.342537][ T5686] usb 1-1: config 207 interface 179 altsetting 2 has a duplicate endpoint with address 0x2, skipping [ 425.353988][ T5686] usb 1-1: config 207 interface 179 altsetting 2 has a duplicate endpoint with address 0x7, skipping [ 425.365377][ T5686] usb 1-1: config 207 interface 179 altsetting 2 has a duplicate endpoint with address 0x8, skipping [ 425.376717][ T5686] usb 1-1: config 207 interface 179 altsetting 2 has a duplicate endpoint with address 0x8, skipping [ 425.427675][ T5686] usb 1-1: config 207 interface 250 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 425.465273][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.481309][ T5686] usb 1-1: config 207 interface 250 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 425.494988][ T5686] usb 1-1: config 207 interface 250 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 425.506143][ T5686] usb 1-1: config 207 interface 250 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 425.506407][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.517412][ T5686] usb 1-1: config 207 interface 250 altsetting 5 has a duplicate endpoint with address 0x2, skipping [ 425.574716][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.611909][ T5686] usb 1-1: config 207 interface 250 altsetting 5 has a duplicate endpoint with address 0xB, skipping [ 425.660296][ T5686] usb 1-1: config 207 interface 250 altsetting 5 has a duplicate endpoint with address 0x1, skipping [ 425.682756][ T5686] usb 1-1: config 207 interface 250 altsetting 5 has a duplicate endpoint with address 0x2, skipping [ 425.694030][ T5686] usb 1-1: config 207 interface 65 has no altsetting 0 [ 425.703362][ T5686] usb 1-1: config 207 interface 179 has no altsetting 0 [ 425.715381][ T5686] usb 1-1: config 207 interface 250 has no altsetting 0 [ 425.722620][ T5686] usb 1-1: config 207 interface 132 has no altsetting 0 [ 425.733390][ T5686] usb 1-1: New USB device found, idVendor=0ace, idProduct=2011, bcdDevice= c.59 [ 425.742793][ T5686] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.763014][ T5686] usb 1-1: Product: ⠊ [ 425.776327][ T5686] usb 1-1: Manufacturer: Ж [ 425.928260][T12342] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1671'. [ 425.996434][T12343] tipc: Enabled bearer , priority 0 [ 426.010168][T12342] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1671'. [ 426.113699][T12343] syzkaller0: entered promiscuous mode [ 426.125386][T12343] syzkaller0: entered allmulticast mode [ 426.192954][T12343] tipc: Resetting bearer [ 426.230342][T12341] tipc: Resetting bearer [ 426.309697][T12341] tipc: Disabling bearer [ 426.316278][T12349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.342768][T12349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.148223][T12366] syzkaller0: entered promiscuous mode [ 427.157045][T12366] syzkaller0: entered allmulticast mode [ 427.256511][T12369] program syz.6.1676 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 427.550488][ T5686] usb 1-1: USB disconnect, device number 89 [ 428.584393][ T5707] net_ratelimit: 9 callbacks suppressed [ 428.584409][ T5707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.944155][T12386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.956498][T12386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.624904][ T5707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.098316][ T158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.110081][ T158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.668604][ T5707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.897737][T12367] tipc: Started in network mode [ 430.902644][T12367] tipc: Node identity ac14142f, cluster identity 4711 [ 430.915978][T12367] tipc: Enabled bearer , priority 6 [ 431.214934][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.229967][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.377247][T12399] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1686'. [ 431.579742][T12407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.595115][T12407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.676371][ T5685] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 431.706079][ T5686] usb 5-1: USB disconnect, device number 72 [ 431.706374][ T5707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.896317][ T5685] usb 2-1: config 0 has an invalid interface number: 237 but max is 0 [ 431.918679][ T5685] usb 2-1: config 0 has no interface number 0 [ 431.954669][ T5685] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 431.988555][ T5685] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 432.028992][ T5685] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 432.041137][ T1015] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.061266][ T5685] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 432.076973][ T1015] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.097500][ T5685] usb 2-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.be [ 432.126114][ T5685] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=3 [ 432.159968][ T5685] usb 2-1: Product: syz [ 432.180393][ T5685] usb 2-1: Manufacturer: syz [ 432.197903][ T5685] usb 2-1: SerialNumber: syz [ 432.227897][ T5685] usb 2-1: config 0 descriptor?? [ 432.246542][ T5685] xpad 2-1:0.237: probe with driver xpad failed with error -5 [ 432.301319][T12413] syz.5.1691 (12413) used obsolete PPPIOCDETACH ioctl [ 432.308582][ T5707] tipc: Node number set to 2886997039 [ 432.520510][ T1015] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.548855][ T1015] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.601291][T12407] IPVS: You probably need to specify IP address on multicast interface. [ 432.628997][T12407] IPVS: Error connecting to the multicast addr [ 432.692273][ T1015] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.711101][ T1015] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.825224][ T5629] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 432.839326][ T5629] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 432.848135][ T5629] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 432.856078][ T5629] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 432.872632][ T5629] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 432.917253][ T1015] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.968122][ T1015] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.988873][ T5357] usb 2-1: USB disconnect, device number 125 [ 433.767696][ T1015] bridge_slave_1: left allmulticast mode [ 433.773506][ T1015] bridge_slave_1: left promiscuous mode [ 433.781462][ T1015] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.814238][ T1015] bridge_slave_0: left allmulticast mode [ 433.823753][ T1015] bridge_slave_0: left promiscuous mode [ 433.831312][ T1015] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.964104][ T5357] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 434.242778][ T5357] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 434.257191][ T5357] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 434.340343][ T5357] usb 6-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 434.372789][ T5357] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.393401][ T5357] usb 6-1: config 0 descriptor?? [ 434.803567][T12435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.850149][T12435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.893530][ T5357] hid (null): invalid report_size 685147115 [ 434.924412][ T5357] hid-led 0003:27B8:01ED.0029: invalid report_size 685147115 [ 434.954203][ T5357] hid-led 0003:27B8:01ED.0029: item 0 4 1 7 parsing failed [ 434.977655][ T5357] hid-led 0003:27B8:01ED.0029: probe with driver hid-led failed with error -22 [ 434.988240][ T5625] Bluetooth: hci3: command tx timeout [ 435.107900][T12435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.146910][T12435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.185082][ T5357] usb 6-1: USB disconnect, device number 55 [ 435.392074][ T1015] bond4 (unregistering): (slave geneve3): Releasing active interface [ 435.925371][ T1015] bond2 (unregistering): (slave bond0): Releasing backup interface [ 435.946140][ T1015] bond0 (unregistering): left allmulticast mode [ 435.961295][T12478] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 435.970105][ T1015] bond_slave_0: left allmulticast mode [ 435.978014][ T1015] bond_slave_1: left allmulticast mode [ 435.986019][T12478] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 435.997197][ T1015] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 436.022440][ T1015] bond_slave_0: left promiscuous mode [ 436.050565][ T1015] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 436.060745][ T1015] bond_slave_1: left promiscuous mode [ 436.076796][ T1015] bond0 (unregistering): Released all slaves [ 436.093044][ T1015] bond1 (unregistering): Released all slaves [ 436.119178][ T1015] team0: Port device bond2 removed [ 436.125851][ T1015] bond2 (unregistering): Released all slaves [ 436.189979][ T1015] bond3 (unregistering): Released all slaves [ 436.234417][ T1015] bond4 (unregistering): Released all slaves [ 436.268663][ T1015] bond5 (unregistering): Released all slaves [ 436.292027][ T1015] bond6 (unregistering): Released all slaves [ 436.313891][ T5286] 8021q: adding VLAN 0 to HW filter on device eth9 [ 436.402613][ T1015] ?: left promiscuous mode [ 436.762568][ T1015] tipc: Left network mode [ 437.064236][ T5625] Bluetooth: hci3: command tx timeout [ 437.206765][T12520] syzkaller0: entered promiscuous mode [ 437.235991][T12520] syzkaller0: entered allmulticast mode [ 437.476490][T12425] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.493703][T12425] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.538027][T12425] bridge_slave_0: entered allmulticast mode [ 437.558830][T12425] bridge_slave_0: entered promiscuous mode [ 437.579971][ T29] audit: type=1326 audit(1777619899.139:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12540 comm="syz.6.1731" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40d619cdd9 code=0x7ffc0000 [ 437.633093][T12425] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.675841][ T29] audit: type=1326 audit(1777619899.129:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12540 comm="syz.6.1731" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40d619cdd9 code=0x7ffc0000 [ 437.677605][T12425] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.743307][T12425] bridge_slave_1: entered allmulticast mode [ 437.799349][ T29] audit: type=1326 audit(1777619899.169:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12540 comm="syz.6.1731" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40d619cdd9 code=0x7ffc0000 [ 437.812373][T12425] bridge_slave_1: entered promiscuous mode [ 437.879980][ T29] audit: type=1326 audit(1777619899.169:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12540 comm="syz.6.1731" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40d619cdd9 code=0x7ffc0000 [ 437.959212][ T29] audit: type=1326 audit(1777619899.169:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12540 comm="syz.6.1731" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40d619cdd9 code=0x7ffc0000 [ 438.043785][ T29] audit: type=1326 audit(1777619899.169:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12540 comm="syz.6.1731" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f40d619cdd9 code=0x7ffc0000 [ 438.160110][ T29] audit: type=1326 audit(1777619899.169:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12540 comm="syz.6.1731" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40d619cdd9 code=0x7ffc0000 [ 438.240896][T12425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 438.258357][ T29] audit: type=1326 audit(1777619899.179:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12540 comm="syz.6.1731" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40d619cdd9 code=0x7ffc0000 [ 438.304432][T12425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 438.324870][T12567] xt_hashlimit: size too large, truncated to 1048576 [ 438.331651][ T29] audit: type=1326 audit(1777619899.179:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12540 comm="syz.6.1731" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40d619cdd9 code=0x7ffc0000 [ 438.401409][ T1015] hsr_slave_0: left promiscuous mode [ 438.425042][ T1015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 438.443068][ T29] audit: type=1326 audit(1777619899.179:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12540 comm="syz.6.1731" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f40d619cdd9 code=0x7ffc0000 [ 438.494300][ T1015] net_ratelimit: 7 callbacks suppressed [ 438.494317][ T1015] batadv0: mtu less than device minimum [ 438.521527][ T1015] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 438.534212][ T1015] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 438.546025][ T1015] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 438.557857][ T1015] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 438.569671][ T1015] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 438.581480][ T1015] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 438.593324][ T1015] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 438.605118][ T1015] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 438.616939][ T1015] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 438.780906][ T1015] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 438.802572][ T1015] batman_adv: batadv0: Interface deactivated: dummy0 [ 438.809497][ T1015] batman_adv: batadv0: Removing interface: dummy0 [ 438.828815][ T1015] veth1_vlan: left allmulticast mode [ 438.834547][ T1015] veth1_macvtap: left promiscuous mode [ 438.840116][ T1015] veth0_macvtap: left promiscuous mode [ 438.850364][ T1015] veth1_vlan: left promiscuous mode [ 438.860362][ T1015] veth0_vlan: left promiscuous mode [ 439.154002][ T5625] Bluetooth: hci3: command tx timeout [ 439.583302][ T1015] team0 (unregistering): Port device team_slave_1 removed [ 439.612294][ T1015] team0 (unregistering): Port device team_slave_0 removed [ 439.866373][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.874014][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.885508][ T5286] 8021q: adding VLAN 0 to HW filter on device eth10 [ 439.972411][T12425] team0: Port device team_slave_0 added [ 440.008388][T12425] team0: Port device team_slave_1 added [ 440.225467][T12425] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 440.246513][T12425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 440.304269][T12425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 440.363281][T12425] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.381622][T12425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 440.437761][T12425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 440.540250][ T1015] IPVS: stop unused estimator thread 0... [ 440.703349][T12425] hsr_slave_0: entered promiscuous mode [ 440.726887][T12425] hsr_slave_1: entered promiscuous mode [ 440.743507][T12425] debugfs: 'hsr0' already exists in 'hsr' [ 440.759533][T12425] Cannot create hsr debugfs directory [ 441.224771][ T5625] Bluetooth: hci3: command tx timeout [ 441.277016][T12640] loop3: detected capacity change from 0 to 7 [ 441.343525][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 441.352723][ C1] buffer_io_error: 27 callbacks suppressed [ 441.352739][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 441.390252][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 441.399448][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 441.426773][T12641] Invalid logical block size (1275) [ 441.478607][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 441.487837][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 441.503087][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 441.512316][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 441.549112][T12642] [ 441.551450][T12642] ====================================================== [ 441.558446][T12642] WARNING: possible circular locking dependency detected [ 441.565453][T12642] syzkaller #0 Tainted: G L [ 441.571406][T12642] ------------------------------------------------------ [ 441.578403][T12642] syz.1.1764/12642 is trying to acquire lock: [ 441.584448][T12642] ffff88801be8d210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x9e/0x450 [ 441.594692][T12642] [ 441.594692][T12642] but task is already holding lock: [ 441.602035][T12642] ffff8880269b1c50 (&q->q_usage_counter(io)#20){++++}-{0:0}, at: lo_ioctl+0x1a51/0x1fb0 [ 441.611772][T12642] [ 441.611772][T12642] which lock already depends on the new lock. [ 441.611772][T12642] [ 441.622352][T12642] [ 441.622352][T12642] the existing dependency chain (in reverse order) is: [ 441.631360][T12642] [ 441.631360][T12642] -> #2 (&q->q_usage_counter(io)#20){++++}-{0:0}: [ 441.639970][T12642] blk_alloc_queue+0x546/0x680 [ 441.645257][T12642] __blk_mq_alloc_disk+0x197/0x390 [ 441.650889][T12642] loop_add+0x482/0xb40 [ 441.655566][T12642] loop_init+0xd9/0x170 [ 441.660265][T12642] do_one_initcall+0x250/0x870 [ 441.665544][T12642] do_initcall_level+0x104/0x190 [ 441.670997][T12642] do_initcalls+0x59/0xa0 [ 441.675842][T12642] kernel_init_freeable+0x2a6/0x3e0 [ 441.681558][T12642] kernel_init+0x1d/0x1d0 [ 441.686413][T12642] ret_from_fork+0x514/0xb70 [ 441.691514][T12642] ret_from_fork_asm+0x1a/0x30 [ 441.696793][T12642] [ 441.696793][T12642] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 441.703999][T12642] fs_reclaim_acquire+0x71/0x100 [ 441.709552][T12642] kmem_cache_alloc_noprof+0x40/0x650 [ 441.715456][T12642] __kernfs_iattrs+0xdf/0x320 [ 441.720653][T12642] kernfs_iop_setattr+0xea/0x3f0 [ 441.726105][T12642] notify_change+0xc1a/0xf40 [ 441.731205][T12642] do_truncate+0x1c2/0x250 [ 441.736142][T12642] path_openat+0x2f89/0x3860 [ 441.741255][T12642] do_file_open+0x23e/0x4a0 [ 441.746277][T12642] do_sys_openat2+0x113/0x200 [ 441.751467][T12642] __x64_sys_openat+0x138/0x170 [ 441.756830][T12642] do_syscall_64+0x15f/0xf80 [ 441.761936][T12642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.768338][T12642] [ 441.768338][T12642] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 441.776849][T12642] __lock_acquire+0x15a5/0x2cf0 [ 441.782215][T12642] lock_acquire+0x106/0x350 [ 441.787225][T12642] down_read+0x47/0x2e0 [ 441.791894][T12642] kernfs_iop_getattr+0x9e/0x450 [ 441.797347][T12642] vfs_getattr_nosec+0x2e1/0x430 [ 441.802803][T12642] loop_assign_backing_file+0x27a/0x4b0 [ 441.808864][T12642] lo_ioctl+0x1acb/0x1fb0 [ 441.813707][T12642] blkdev_ioctl+0x5e3/0x740 [ 441.818715][T12642] __se_sys_ioctl+0xfc/0x170 [ 441.823828][T12642] do_syscall_64+0x15f/0xf80 [ 441.828940][T12642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.835347][T12642] [ 441.835347][T12642] other info that might help us debug this: [ 441.835347][T12642] [ 441.845560][T12642] Chain exists of: [ 441.845560][T12642] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#20 [ 441.845560][T12642] [ 441.859993][T12642] Possible unsafe locking scenario: [ 441.859993][T12642] [ 441.867431][T12642] CPU0 CPU1 [ 441.872783][T12642] ---- ---- [ 441.878135][T12642] lock(&q->q_usage_counter(io)#20); [ 441.883503][T12642] lock(fs_reclaim); [ 441.890002][T12642] lock(&q->q_usage_counter(io)#20); [ 441.897897][T12642] rlock(&root->kernfs_iattr_rwsem); [ 441.903264][T12642] [ 441.903264][T12642] *** DEADLOCK *** [ 441.903264][T12642] [ 441.911394][T12642] 3 locks held by syz.1.1764/12642: [ 441.916576][T12642] #0: ffff888026aad430 (&lo->lo_mutex){+.+.}-{4:4}, at: lo_ioctl+0x14c7/0x1fb0 [ 441.925634][T12642] #1: ffff8880269b1c50 (&q->q_usage_counter(io)#20){++++}-{0:0}, at: lo_ioctl+0x1a51/0x1fb0 [ 441.935823][T12642] #2: ffff8880269b1c88 (&q->q_usage_counter(queue)#4){+.+.}-{0:0}, at: lo_ioctl+0x1a51/0x1fb0 [ 441.946179][T12642] [ 441.946179][T12642] stack backtrace: [ 441.952071][T12642] CPU: 1 UID: 0 PID: 12642 Comm: syz.1.1764 Tainted: G L syzkaller #0 PREEMPT(full) [ 441.952095][T12642] Tainted: [L]=SOFTLOCKUP [ 441.952101][T12642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 441.952115][T12642] Call Trace: [ 441.952127][T12642] [ 441.952134][T12642] dump_stack_lvl+0xe8/0x150 [ 441.952154][T12642] print_circular_bug+0x2e1/0x300 [ 441.952177][T12642] check_noncircular+0x12e/0x150 [ 441.952199][T12642] __lock_acquire+0x15a5/0x2cf0 [ 441.952223][T12642] ? kernfs_iop_getattr+0x9e/0x450 [ 441.952241][T12642] lock_acquire+0x106/0x350 [ 441.952257][T12642] ? kernfs_iop_getattr+0x9e/0x450 [ 441.952279][T12642] down_read+0x47/0x2e0 [ 441.952300][T12642] ? kernfs_iop_getattr+0x9e/0x450 [ 441.952320][T12642] kernfs_iop_getattr+0x9e/0x450 [ 441.952340][T12642] vfs_getattr_nosec+0x2e1/0x430 [ 441.952364][T12642] loop_assign_backing_file+0x27a/0x4b0 [ 441.952389][T12642] ? __pfx_loop_assign_backing_file+0x10/0x10 [ 441.952421][T12642] lo_ioctl+0x1acb/0x1fb0 [ 441.952445][T12642] ? __pfx_lo_ioctl+0x10/0x10 [ 441.952464][T12642] ? is_bpf_text_address+0x26/0x2b0 [ 441.952481][T12642] ? kernel_text_address+0xa5/0xe0 [ 441.952506][T12642] ? __lock_acquire+0x6b5/0x2cf0 [ 441.952522][T12642] ? __lock_acquire+0x6b5/0x2cf0 [ 441.952541][T12642] ? __lock_acquire+0x6b5/0x2cf0 [ 441.952559][T12642] ? __lock_acquire+0x6b5/0x2cf0 [ 441.952576][T12642] ? __lock_acquire+0x6b5/0x2cf0 [ 441.952594][T12642] ? __lock_acquire+0x6b5/0x2cf0 [ 441.952612][T12642] ? __lock_acquire+0x6b5/0x2cf0 [ 441.952630][T12642] ? unwind_next_frame+0xa6/0x2550 [ 441.952652][T12642] ? unwind_next_frame+0xa6/0x2550 [ 441.952671][T12642] ? is_bpf_text_address+0x26/0x2b0 [ 441.952690][T12642] ? is_bpf_text_address+0x26/0x2b0 [ 441.952706][T12642] ? is_bpf_text_address+0x292/0x2b0 [ 441.952722][T12642] ? is_bpf_text_address+0x26/0x2b0 [ 441.952739][T12642] ? kernel_text_address+0xa5/0xe0 [ 441.952761][T12642] ? __kernel_text_address+0xd/0x30 [ 441.952782][T12642] ? unwind_get_return_address+0x4d/0x90 [ 441.952801][T12642] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 441.952825][T12642] ? arch_stack_walk+0xfb/0x150 [ 441.952848][T12642] ? stack_trace_save+0xa9/0x100 [ 441.952870][T12642] ? __pfx_stack_trace_save+0x10/0x10 [ 441.952892][T12642] ? kasan_save_free_info+0x46/0x50 [ 441.952911][T12642] ? stack_depot_save_flags+0x33/0x810 [ 441.952933][T12642] ? kasan_save_track+0x4f/0x80 [ 441.952953][T12642] ? kasan_save_track+0x3e/0x80 [ 441.952972][T12642] ? kasan_save_free_info+0x46/0x50 [ 441.952989][T12642] ? __kasan_slab_free+0x5c/0x80 [ 441.953009][T12642] ? kfree+0x1c5/0x640 [ 441.953027][T12642] ? tomoyo_path_number_perm+0x501/0x630 [ 441.953044][T12642] ? security_file_ioctl+0xc3/0x2a0 [ 441.953059][T12642] ? __se_sys_ioctl+0x47/0x170 [ 441.953081][T12642] ? do_syscall_64+0x15f/0xf80 [ 441.953099][T12642] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.953117][T12642] ? __asan_memset+0x22/0x50 [ 441.953135][T12642] ? blk_get_meta_cap+0x16d/0x7a0 [ 441.953159][T12642] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 441.953184][T12642] ? blkdev_common_ioctl+0x14b7/0x3240 [ 441.953202][T12642] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 441.953217][T12642] ? kasan_quarantine_put+0xbb/0x1f0 [ 441.953240][T12642] ? tomoyo_path_number_perm+0x219/0x630 [ 441.953257][T12642] ? tomoyo_path_number_perm+0x219/0x630 [ 441.953276][T12642] ? do_vfs_ioctl+0x1166/0x1530 [ 441.953299][T12642] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 441.953323][T12642] ? do_raw_spin_lock+0x12b/0x2f0 [ 441.953357][T12642] ? __pfx_lo_ioctl+0x10/0x10 [ 441.953378][T12642] blkdev_ioctl+0x5e3/0x740 [ 441.953394][T12642] ? __pfx_blkdev_ioctl+0x10/0x10 [ 441.953407][T12642] ? __fget_files+0x2a/0x420 [ 441.953426][T12642] ? bpf_lsm_file_ioctl+0x9/0x20 [ 441.953451][T12642] ? __pfx_blkdev_ioctl+0x10/0x10 [ 441.953465][T12642] __se_sys_ioctl+0xfc/0x170 [ 441.953487][T12642] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.953503][T12642] do_syscall_64+0x15f/0xf80 [ 441.953521][T12642] ? trace_irq_disable+0x3b/0x140 [ 441.953544][T12642] ? clear_bhb_loop+0x40/0x90 [ 441.953561][T12642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.953577][T12642] RIP: 0033:0x7f846a39cdd9 [ 441.953592][T12642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 441.953608][T12642] RSP: 002b:00007f846b1b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 441.953625][T12642] RAX: ffffffffffffffda RBX: 00007f846a616180 RCX: 00007f846a39cdd9 [ 441.953637][T12642] RDX: 0000000000000004 RSI: 0000000000004c06 RDI: 0000000000000003 [ 441.953648][T12642] RBP: 00007f846a432d69 R08: 0000000000000000 R09: 0000000000000000 [ 441.953658][T12642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 441.953669][T12642] R13: 00007f846a616218 R14: 00007f846a616180 R15: 00007f846a73fa48 [ 441.953685][T12642] [ 442.477063][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 442.486259][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 442.494511][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 442.503672][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 442.511693][T12640] ldm_validate_partition_table(): Disk read failed. [ 442.518831][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 442.528005][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 442.544073][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 442.553238][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 442.561898][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 442.571062][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 442.581358][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 442.590523][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 442.601167][T12640] Dev loop3: unable to read RDB block 0 [ 442.631516][T12640] loop3: unable to read partition table [ 442.650267][T12640] loop3: partition table beyond EOD, truncated [ 442.666344][T12640] loop_reread_partitions: partition scan of loop3 (Cj̖P=ý?}X %֐ȵ4FLQk݊5) failed (rc=-5) [ 442.689834][T12642] ldm_validate_partition_table(): Disk read failed. [ 442.698721][T12642] Dev loop3: unable to read RDB block 0 [ 442.705027][T12642] loop3: unable to read partition table [ 442.710832][T12642] loop3: partition table beyond EOD, truncated [ 442.739973][T12642] loop_reread_partitions: partition scan of loop3 (Cj̖P=ý?}X %֐ȵ4FLQk݊5) failed (rc=-5) [ 442.962583][T12425] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 442.972136][T12425] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 442.980065][T12425] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 442.989672][T12425] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 443.000110][T12425] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 443.009430][T12425] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 443.017594][T12425] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 443.027502][T12425] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 443.082047][T12425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 443.099951][T12425] 8021q: adding VLAN 0 to HW filter on device team0 [ 443.110623][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.117766][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.142865][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.149995][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.192443][T12425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 443.222241][T12425] veth0_vlan: entered promiscuous mode [ 443.238806][T12425] veth1_vlan: entered promiscuous mode [ 443.266733][T12425] veth0_macvtap: entered promiscuous mode [ 443.279011][T12425] veth1_macvtap: entered promiscuous mode [ 443.295679][T12425] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 443.308553][T12425] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 443.320824][ T1015] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.338328][ T1015] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.358088][ T1015] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.372571][ T1015] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.407158][T12425] ieee80211 phy35: Selected rate control algorithm 'minstrel_ht' [ 443.432627][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.438520][T12425] ieee80211 phy36: Selected rate control algorithm 'minstrel_ht' [ 443.451116][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.482116][ T1015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.490272][ T1015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50