last executing test programs: 43m26.289129006s ago: executing program 3 (id=2870): syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r0 = io_uring_setup(0x1198, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 43m26.050107992s ago: executing program 3 (id=2872): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000005d0d3087d07aa04d85b0102030109021b000f000000000904000001dbcc7a000905", @ANYRES32], 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x5c, 0x0, 0x1, 0x20000002, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x20}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xd9b9fafd212acc2a}], @NL80211_ATTR_AUTH_TYPE={0x8}, @key_params=[@NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}]]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040040}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000308", 0x38, 0x3a, 0x0, @private1, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "5b52ab", 0x0, 0x2b, 0x0, @private0, @private0, [@srh={0x11, 0x0, 0x4, 0x0, 0x1}]}}}}}}}, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x4, 0x2) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) 43m25.475238837s ago: executing program 3 (id=2874): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000"], 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20b52c02"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000980)={0x1, @pix={0x4, 0x5e2, 0x34524742, 0x6, 0x55, 0x150, 0x1, 0x5, 0x1, 0x1, 0x1, 0x2}}) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) io_uring_setup(0x2a90, &(0x7f0000000240)={0x0, 0x86a1, 0x2, 0x3, 0x277}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x44}}, 0x0) r5 = socket(0x840000000002, 0x3, 0xff) setsockopt$inet_int(r5, 0x0, 0x16, &(0x7f0000000000)=0x9, 0x4) sendmmsg$inet(r5, &(0x7f0000000140)=[{{&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a9050000002074640000000000003552bde5c064c6", 0x15}, {&(0x7f0000001140)="174640b6d80fb2eedc81ba60ccbb9d", 0xf}], 0x2}, 0xf5ffffff}], 0x44, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, 0x16, 0x301, 0x70bd24, 0xfffffffc, {0x2e}}, 0x14}, 0x1, 0x0, 0x0, 0x200448d3}, 0x8800) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r10 = socket(0x15, 0x5, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x101, 0x7) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000f80)={'syz0\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0xc, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x0, 0x7f, 0xc, 0x4, 0x9, 0x1, 0x4, 0x8001000, 0x80000002, 0x1, 0x200008, 0x40, 0xa4d, 0x3ff, 0x5, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0x100, 0x9, 0x4, 0x2, 0x0, 0x2, 0x4, 0x1, 0x4, 0xa, 0x6, 0x3, 0x9, 0x804d7f, 0x2, 0x2, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x101, 0x401, 0xb, 0x8001, 0x40, 0xa1, 0x18000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0x7, 0x2, 0x9, 0xa, 0x5, 0xfffffeff, 0x9, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x2, 0x5, 0x7aae, 0x80000000, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x20400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x1, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0xff, 0x140, 0x4, 0x2, 0x1000000c, 0x0, 0x2, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x3, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0x8, 0xdd, 0x1, 0x1400, 0xc3, 0x20ffff, 0x79c, 0x80000001], [0x9, 0x3a8e, 0xffff9a7f, 0x201, 0x4, 0x2002, 0x6, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x21, 0x200, 0xa, 0x6, 0x2, 0x1ff, 0xf6, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x3, 0x5, 0x7ffffffe, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x4, 0x20000000, 0x8, 0x15, 0xb32a, 0xebfffffd, 0x8001, 0x1900, 0x4, 0xc, 0x8, 0x803, 0x280, 0x5, 0xffffffff, 0x27, 0x6e79, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0xf, 0x2d1, 0x83, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) getsockopt(r10, 0x200000000114, 0x2717, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xa, 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, &(0x7f0000000000)) ioctl$KVM_RUN(r9, 0xae80, 0x0) 43m24.630623304s ago: executing program 3 (id=2877): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000240)='./file0\x00') 43m24.567133047s ago: executing program 3 (id=2878): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x300, 0x4}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x6, 0x20000000}, 0x27}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x88}}, 0x0) 43m24.138531086s ago: executing program 3 (id=2883): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) add_key(&(0x7f0000000000)='pkcs7_test\x00', 0x0, &(0x7f0000000100)="307106092a864886f70d010702a0643062020101310f300d06096086480165030402010500300b06092a864886f70d010701313f303d0201013014300f310d300b0603550403130454657374020101300d06096086480165030402010500300d06092a8648", 0x65, 0xffffffffffffffff) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x5b556efbb1a58058}, 0x44850) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000003680)='/sys/kernel/rcu_normal', 0x2000, 0x92) syz_clone3(&(0x7f00000036c0)={0x0, &(0x7f00000000c0), 0x0, 0x0, {0x1b}, &(0x7f00000005c0)=""/212, 0xd4, &(0x7f0000000780)=""/138, 0x0, 0x0, {r2}}, 0x58) socket$l2tp6(0xa, 0x2, 0x73) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket(0x10, 0x80002, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ec00000010000108000000008100000000000000", @ANYRES32=r3, @ANYBLOB="0b00000000000000cc001a8018000a80140007"], 0xec}}, 0x44000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) r5 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = openat$dsp(0xffffffffffffff9c, 0x0, 0x88042, 0x0) write$dsp(r6, &(0x7f0000000280)="db", 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs$namespace(r5, &(0x7f0000000180)='ns/mnt\x00') ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000040)=0x1) r7 = dup2(r4, r0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000580)=0xa300010) connect$inet6(0xffffffffffffffff, 0x0, 0x0) futex(&(0x7f00000002c0)=0x2, 0x6, 0x1, 0x0, &(0x7f00000000c0), 0x2) futex(&(0x7f000000cffc)=0x4, 0x6, 0x2, 0x0, 0x0, 0x400000) 43m23.828528347s ago: executing program 32 (id=2883): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) add_key(&(0x7f0000000000)='pkcs7_test\x00', 0x0, &(0x7f0000000100)="307106092a864886f70d010702a0643062020101310f300d06096086480165030402010500300b06092a864886f70d010701313f303d0201013014300f310d300b0603550403130454657374020101300d06096086480165030402010500300d06092a8648", 0x65, 0xffffffffffffffff) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x5b556efbb1a58058}, 0x44850) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000003680)='/sys/kernel/rcu_normal', 0x2000, 0x92) syz_clone3(&(0x7f00000036c0)={0x0, &(0x7f00000000c0), 0x0, 0x0, {0x1b}, &(0x7f00000005c0)=""/212, 0xd4, &(0x7f0000000780)=""/138, 0x0, 0x0, {r2}}, 0x58) socket$l2tp6(0xa, 0x2, 0x73) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket(0x10, 0x80002, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ec00000010000108000000008100000000000000", @ANYRES32=r3, @ANYBLOB="0b00000000000000cc001a8018000a80140007"], 0xec}}, 0x44000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) r5 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = openat$dsp(0xffffffffffffff9c, 0x0, 0x88042, 0x0) write$dsp(r6, &(0x7f0000000280)="db", 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs$namespace(r5, &(0x7f0000000180)='ns/mnt\x00') ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000040)=0x1) r7 = dup2(r4, r0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000580)=0xa300010) connect$inet6(0xffffffffffffffff, 0x0, 0x0) futex(&(0x7f00000002c0)=0x2, 0x6, 0x1, 0x0, &(0x7f00000000c0), 0x2) futex(&(0x7f000000cffc)=0x4, 0x6, 0x2, 0x0, 0x0, 0x400000) 42m28.380293462s ago: executing program 0 (id=3140): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sysvipc/shm\x00', 0x1800, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x401) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d8ca8d40d10521200009001000010902120001000000000904"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r2, 0x8b27, &(0x7f0000000040)) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x6b) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) write$binfmt_elf32(r3, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x4, 0x2, 0x8d, 0x4, 0x3, 0x6, 0x8, 0x19, 0x38, 0x25e, 0x408, 0x4, 0x20, 0x3, 0x5, 0x8, 0x200}, [{0x4, 0x7, 0x6, 0x3, 0x9, 0x6, 0xffff, 0x5}, {0x6474e551, 0x8, 0x7, 0x3, 0x2, 0xc, 0x8, 0x7fffffff}, {0x6474e551, 0xd, 0x40, 0x6, 0xd2a5, 0x3049, 0x8000, 0x7}]}, 0x98) close(r3) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x80000) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r4, 0xc2604110, &(0x7f0000000040)={0x0, [[0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x8], [0x2000000, 0x1, 0x0, 0x0, 0x1, 0x80000003, 0x0, 0xfffffffc], [0x8, 0xfffffffe, 0x0, 0x2, 0xfffffffd, 0x0, 0x26, 0xfffffffd]], '\x00', [{0xfffffffe, 0xf8}, {}, {0xffffffff, 0x10000}, {0xfffffff, 0x10000000, 0x0, 0x1}, {0x34, 0xffffffff}, {0x1, 0x5}, {}, {0x0, 0x4004}, {0x0, 0x7f}, {0x2}, {0x0, 0x8}, {0x6, 0x3}], '\x00', 0x1, 0x0, 0x0, 0xf8}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="2400000019000109fdffffff"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x40, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x8, 0x2c}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_macvtap\x00'}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}]]}, 0x40}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x190, 0x5230}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="f7790066baa00066b86b42460f22c7d466ba420000b8e20066ef0f29902cbb0000c4e2b1ba8c88d90000006666f6440f386b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4b}], 0x1, 0x0, 0x0, 0x0) 42m26.649186679s ago: executing program 0 (id=3155): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="110b"], 0x14}}, 0x8000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000340)={[0x60000000004, 0x1000000000, 0x80000000000005, 0x41, 0x2000000, 0x0, 0x2004cb, 0xffffffffeffffffe, 0xa1d, 0xf1, 0x5, 0x0, 0x3, 0x2, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 42m26.442987825s ago: executing program 0 (id=3157): socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="54000000020603000000000000000000000000000d000300686173683a6e65740000000005000400000000000900020073797a31000000000c000780080008400000007005000500020300000500010006"], 0x54}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a31000000000500010007ffe2001c0007800c000180"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000280)=[@ioring_restriction_register_op], 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xa, {"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", 0x1000}}, 0x1006) open_by_handle_at(0xffffffffffffffff, 0x0, 0xfeffffff) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0xe9c, 0x40800) ioctl$I2C_TIMEOUT(r2, 0x702, 0x3b000000000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000140)={0x20, &(0x7f0000000000)=[{0x39, '\x00', @data=0xf, 0x404}]}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000001040)={'#! ', '', [{0x20, '\x00'}, {0x20, '\x88'}, {0x20, '\xbe)\'\\-\x87:#/^+]^%'}, {0x20, '\\!])^'}, {0x20, '/dev/i2c-#\x00'}]}, 0x29) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r7, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r7, 0x1000) r8 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42) ioctl$HIDIOCGFEATURE(r8, 0xc0404807, &(0x7f0000000080)={0x3, "8faa7ab68aefc96940add94dd986d4f32634f14a10c1df59d27a3e745fb11661b2c297044eb0864509a8cbc7c48a18ef12f2fb379d0c1959605e2a52b1586bde"}) dup3(r8, r7, 0x80000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000000300)={0x0, 0xff70, 0x0, 0x1, 0x0, 0x0, 0xd0}, 0x800) ioctl$KVM_RUN(r6, 0xae80, 0x0) io_uring_setup(0x1614, &(0x7f0000000200)={0x0, 0x2000, 0x3040, 0x1ffffd}) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) 42m24.935819611s ago: executing program 0 (id=3167): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x800000, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) chroot(&(0x7f0000000100)='./file0/file0\x00') umount2(&(0x7f0000000440)='./file0/file0\x00', 0x0) 42m23.87103515s ago: executing program 0 (id=3169): setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) r0 = io_uring_setup(0xaae, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_GETBMAPA(r1, 0xc020582c, &(0x7f00000001c0)={0x3, 0x33, 0x8000000000000001, 0x5, 0xffff3726}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r2, 0x800, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x5}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x40}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB], 0x4c}}, 0x800) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000240)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) set_mempolicy(0x0, &(0x7f0000000200)=0xa, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000000)=[@ioring_restriction_register_op], 0x1) r3 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) syz_usb_control_io$cdc_ncm(r3, &(0x7f00000006c0)={0x14, 0x0, &(0x7f0000000680)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) listns(&(0x7f00000010c0)={0x20, 0x0, 0x7, 0x40000000}, 0x0, 0xf4240, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) syz_usb_control_io$rtl8150(r3, 0x0, 0x0) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000100)={0x0, 0x5, 0x6, &(0x7f0000000080)={0x2, "1a9c66bf2f615e4200000000e200"}}) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004}, 0x4040000) r5 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00', 0x7f}) write$sndseq(r5, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000180)={0x217, @time={0x65757100, 0x5}, 0x0, {}, 0x67, 0x2}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r5, 0x40505331, &(0x7f0000000380)={{0x1, 0xa}, {0x3a, 0x4}, 0x1, 0x1, 0xb}) r6 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0xd) ppoll(&(0x7f0000000140)=[{}], 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000340)={[0x7298]}, 0xfffffffffffffe12) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r6, r6, 0x0, 0x75f) 42m23.729267281s ago: executing program 0 (id=3171): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0) syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000280)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x17cc, 0x4712, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0xc0, 0x2, {0x8, 0xb, 0x0, 0x1, 0x1, 0x24, 0x30, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x4, 0xa, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x3, 0x3, 0xd, {0xa, 0x25, 0x25, 0x0, 0x2, 0xb}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x3, 0x2, 0x3, {0xa, 0x25, 0x25, 0x2, 0xd, 0x6}}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="120100"], 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6f, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x2, 0x1, 0x88, 0x0, 0x0, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "d1"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x7, 0x8, 0x5}, {0x6, 0x24, 0x1a, 0xffff, 0xc}}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xd, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x5, 0x80, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xff, 0x0, 0xa}}}}}}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000700)={0x1c, &(0x7f0000000280)=ANY=[], 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x1c, &(0x7f00000003c0)={0x40, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x1, 0x802) 42m22.767859669s ago: executing program 33 (id=3171): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0) syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000280)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x17cc, 0x4712, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0xc0, 0x2, {0x8, 0xb, 0x0, 0x1, 0x1, 0x24, 0x30, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x4, 0xa, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x3, 0x3, 0xd, {0xa, 0x25, 0x25, 0x0, 0x2, 0xb}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x3, 0x2, 0x3, {0xa, 0x25, 0x25, 0x2, 0xd, 0x6}}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="120100"], 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6f, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x2, 0x1, 0x88, 0x0, 0x0, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "d1"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x7, 0x8, 0x5}, {0x6, 0x24, 0x1a, 0xffff, 0xc}}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xd, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x5, 0x80, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xff, 0x0, 0xa}}}}}}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000700)={0x1c, &(0x7f0000000280)=ANY=[], 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x1c, &(0x7f00000003c0)={0x40, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x1, 0x802) 41m36.449203706s ago: executing program 5 (id=3362): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r1 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88fe, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) r8 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) dup3(r8, r0, 0x80000) 41m35.44136073s ago: executing program 5 (id=3370): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x6e22, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9145}, 0x1c) listen(r1, 0x5) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='team_slave_0\x00', 0x10) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000}, 0x1c) listen(r0, 0x5) 41m35.264779981s ago: executing program 5 (id=3371): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x2, 0xfe, 0x0, 0x0, 0x88, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfd, 0x0, 0x4, 0x20, 0x0, 0x1000000}]}) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3eb, 0x100, 0x70bd27, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x20000041}, 0x44040000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x0) 41m34.968170416s ago: executing program 5 (id=3372): syz_mount_image$fuse(0x0, &(0x7f00000003c0)='./file0\x00', 0x4c000, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 41m34.000029873s ago: executing program 5 (id=3376): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) add_key(&(0x7f0000000000)='pkcs7_test\x00', 0x0, &(0x7f0000000100)="307106092a864886f70d010702a0643062020101310f300d06096086480165030402010500300b06092a864886f70d010701313f303d0201013014300f310d300b0603550403130454657374020101300d06096086480165030402010500300d06092a864886f70d0101010500040401020304", 0x73, 0xffffffffffffffff) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x5b556efbb1a58058}, 0x44850) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000003680)='/sys/kernel/rcu_normal', 0x2000, 0x92) syz_clone3(&(0x7f00000036c0)={0x0, &(0x7f00000000c0), 0x0, 0x0, {0x1b}, &(0x7f00000005c0)=""/212, 0xd4, &(0x7f0000000780)=""/138, 0x0, 0x0, {r2}}, 0x58) socket$l2tp6(0xa, 0x2, 0x73) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket(0x10, 0x80002, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) r4 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$dsp(0xffffffffffffff9c, 0x0, 0x88042, 0x0) write$dsp(r5, &(0x7f0000000280), 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs$namespace(r4, &(0x7f0000000180)='ns/mnt\x00') ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x1) r6 = dup2(r3, r0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000580)=0xa300010) connect$inet6(0xffffffffffffffff, 0x0, 0x0) futex(&(0x7f00000002c0)=0x2, 0x6, 0x1, 0x0, &(0x7f00000000c0), 0x2) futex(&(0x7f000000cffc)=0x4, 0x6, 0x2, 0x0, 0x0, 0x400000) 41m33.651819842s ago: executing program 5 (id=3378): chdir(&(0x7f0000000000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r0, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4000, @multicast1}, 0x10) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 41m33.392719729s ago: executing program 34 (id=3378): chdir(&(0x7f0000000000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r0, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4000, @multicast1}, 0x10) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 31m56.52549228s ago: executing program 7 (id=5334): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = inotify_init1(0x80800) inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x50007a2) syz_mount_image$fuse(0x0, 0x0, 0x2a0000a, 0x0, 0x0, 0x0, 0x0) rmdir(&(0x7f0000010280)='./file0\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newlink={0x38, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x9, 0x20804}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_hsr\x00'}, @IFLA_AF_SPEC={0x4}]}, 0x38}}, 0x40100d0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a0000070800024000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xe35621c2b056121e}, 0x40000) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000600)={0x5, 0x0, [{0x2, 0x4, 0x1, 0x0, @irqchip={0x5, 0x10000}}, {0x5, 0x0, 0x0, 0x0, @adapter={0x8000, 0x35, 0x6, 0x3, 0x8}}, {0x6, 0x1, 0x0, 0x0, @irqchip={0x6374, 0x7}}, {0x10, 0x4, 0x0, 0x0, @irqchip={0x8, 0x8}}, {0x6, 0x5, 0x0, 0x0, @sint}]}) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast1, 0x4e20, 0x3, 'dh\x00', 0x21, 0x7, 0x2}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000440)={{0x84, @multicast2, 0x4f29, 0x3, 'sh\x00', 0x5, 0xc, 0x6c}, {@loopback, 0x4e23, 0x3, 0x1, 0x1}}, 0x44) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 31m56.332858967s ago: executing program 7 (id=5335): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x2000c044) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) fchdir(0xffffffffffffffff) r2 = syz_open_dev$dvb_demux(0x0, 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b7c4fb9191024da8887f94ba4fb"}, 0xfffffffe, 0x5}) syz_open_dev$dvb_demux(&(0x7f00000000c0), 0x1, 0x688140) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) r3 = dup(0xffffffffffffffff) syz_ublk_setup_queues(r3, 0x0, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35b4, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1c3, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r4 = socket(0x10, 0x3, 0x9) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r4, r5, 0x0, 0x7fffffffffffffff) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r5, 0xc2604111, 0x0) 31m55.221575966s ago: executing program 7 (id=5340): madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000080)={0x1241, 0x80000}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f00000003c0)=[{0x0, 0x1}], 0x1, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x500) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0xc4c85513, &(0x7f0000000040)={0xb}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffb, 0x6, 0x1, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000400)="a1117e7c21d7", 0x0, 0xfffffff9, 0x0, 0xffffffffffffffff, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, 0x0, &(0x7f0000000080)=0x0) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002ac0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0x5}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x74, 0x2, {{0x7fff, 0x6, 0x192, 0xf, 0x7fff, 0x205}, [@TCA_NETEM_LOSS={0x2c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x3, 0x10001, 0x8, 0x9}}, @NETEM_LOSS_GE={0x14, 0x2, {0xfffffe81, 0x40000001, 0x6, 0x4007}}]}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x8001, 0x0, 0x2000, 0x1bb, 0x4}}]}}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010004000000000000000c000000200003800400010018000380140001800f0001000c0000000500020000000000180001801400020076657468315f766972745f77696669"], 0x4c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000805000100070000000900020073797a30000000001400078008001240001500000500150000100000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r11, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0xb}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20040000) syz_io_uring_submit(r6, 0x0, r7, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) io_uring_enter(r5, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) shutdown(r4, 0x1) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_ep_write(r2, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 31m51.250943105s ago: executing program 7 (id=5350): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r2, 0x0, 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)={0x10, 0x0, 0x4000000000200}, 0x0, 0x0, 0x0, 0x0}) getdents(r2, &(0x7f0000000340)=""/151, 0x97) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x101}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}}, 0x0) syz_clone(0x804000, &(0x7f0000000140)="ea", 0x1, &(0x7f0000000180), &(0x7f0000000400), &(0x7f00000004c0)="42e9ac284471e31f327445bacacc81093d112c0e2591f4d2aec6df8214fa7a67e4d9e652524d870e57df1af07c282c30d8bbb657dfbcccd656a41c6ccb730b1c04") r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) umount2(&(0x7f00000000c0)='./file0\x00', 0x3) 31m50.150689123s ago: executing program 7 (id=5357): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x200}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) writev(r0, &(0x7f0000000240)=[{&(0x7f00000005c0)="c800", 0x2}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000400)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c5500000000004000f0f9ffff0000000000ffff00", [0x80000000006, 0x6]}}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0x800, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f00000001c0)=@gcm_256={{0x304, 0x36}, "00257059cb008000", "8b3de2aabceef22f419e59f30000000004000000000200", "07350080", "000000d900"}, 0x38) setsockopt$inet6_tcp_TLS_RX(r3, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x304, 0x36}, "b398a992143a240d", "d036788c4aaf9c6ef96dda7201d2d2a5", "1a13ecde", "0597b7f1463f0f33"}, 0x28) 31m46.198542846s ago: executing program 7 (id=5361): syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) unshare(0x22020600) syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='children\x00') seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000580)=@generic={0x0, r1}, 0x18) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='nv', 0x2) connect$inet(r0, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000001580)=""/4100, 0x1004) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f03214e000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000140)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x34}}}, 0x1e) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x14, 0x0, 0x8, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x240080d1}, 0x0) 31m45.134178492s ago: executing program 35 (id=5361): syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) unshare(0x22020600) syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='children\x00') seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000580)=@generic={0x0, r1}, 0x18) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='nv', 0x2) connect$inet(r0, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000001580)=""/4100, 0x1004) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f03214e000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000140)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x34}}}, 0x1e) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x14, 0x0, 0x8, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x240080d1}, 0x0) 29m8.93749103s ago: executing program 1 (id=5910): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xb) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfcc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x0, 0xb}, {0xc, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80000}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 29m8.362055642s ago: executing program 1 (id=5913): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x6}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x20000005) sendfile(0xffffffffffffffff, r1, 0x0, 0x1002000ff) socket$inet_udp(0x2, 0x2, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004}, &(0x7f0000000040)) ptrace$getenv(0x4201, 0x0, 0x5, &(0x7f0000000180)) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x1418, 0x1, 0x70bd25, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x25}}, 0x4008040) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000580)={0x2, 0xfc}, 0x2) 29m6.72970937s ago: executing program 1 (id=5917): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000100)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeca}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r5, 0x2219, 0x4b01, 0x16, 0x0, 0x0) 29m5.567395915s ago: executing program 1 (id=5919): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r2, 0x0, 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)={0x10, 0x0, 0x4000000000200}, 0x0, 0x0, 0x0, 0x0}) getdents(r2, &(0x7f0000000340)=""/151, 0x97) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x101}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}}, 0x0) syz_clone(0x804000, &(0x7f0000000140)="ea", 0x1, &(0x7f0000000180), &(0x7f0000000400), &(0x7f00000004c0)="42e9ac284471e31f327445bacacc81093d112c0e2591f4d2aec6df8214fa7a67e4d9e652524d870e57df1af07c282c30d8bbb657dfbcccd656a41c6ccb730b1c04") r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) umount2(&(0x7f00000000c0)='./file0\x00', 0x3) 29m4.189838227s ago: executing program 1 (id=5923): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x8001, 0x2, 0x230, "ad2896b02ca8b044d00dc81345c4b935bab32cecd875596364ab192cb8b873aa", 0x32315258}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x920, 0x12) r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r3, 0x110, 0x2, &(0x7f0000000100), 0x5) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e26, 0x7, @loopback, 0x2000009}, {0xa, 0x4e23, 0x6, @mcast1, 0x7fffffff}, 0xffffffffffffffff, 0x80d}}, 0x48) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r2}}, 0x18) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000200)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x4be, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xf7ffffff}}}, 0x30) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x801}, &(0x7f0000000180)=0x8) preadv(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/54, 0x2b}], 0x0, 0x40, 0xae0d) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000004060101000000000000000000001000"], 0x14}}, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x66, 0x0, 0x0) syz_open_dev$I2C(0x0, 0x0, 0x2) r6 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r6, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r6, &(0x7f0000002940), 0x40000000000017d, 0x888) 29m3.492125198s ago: executing program 1 (id=5925): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x2000c044) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) fchdir(0xffffffffffffffff) r2 = syz_open_dev$dvb_demux(0x0, 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b7c4fb9191024da8887f94ba4fb"}, 0xfffffffe, 0x5}) syz_open_dev$dvb_demux(&(0x7f00000000c0), 0x1, 0x688140) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) r3 = dup(0xffffffffffffffff) syz_ublk_setup_queues(r3, 0x0, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35b4, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1c3, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r4 = socket(0x10, 0x3, 0x9) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r4, r5, 0x0, 0x7fffffffffffffff) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r5, 0xc2604111, 0x0) 29m2.900681628s ago: executing program 36 (id=5925): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x2000c044) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) fchdir(0xffffffffffffffff) r2 = syz_open_dev$dvb_demux(0x0, 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b7c4fb9191024da8887f94ba4fb"}, 0xfffffffe, 0x5}) syz_open_dev$dvb_demux(&(0x7f00000000c0), 0x1, 0x688140) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) r3 = dup(0xffffffffffffffff) syz_ublk_setup_queues(r3, 0x0, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35b4, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1c3, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r4 = socket(0x10, 0x3, 0x9) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r4, r5, 0x0, 0x7fffffffffffffff) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r5, 0xc2604111, 0x0) 10.693610541s ago: executing program 2 (id=11891): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xffffffffffffff59}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d00000000000100ffffffff000001410000001c001700000000000000006574683a73797a6b"], 0x38}}, 0x0) 10.163883166s ago: executing program 2 (id=11897): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @private=0xa010100}, @address_reply}}}}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000003c0)=[@in6={0xa, 0x4e21, 0xfffffff9, @rand_addr=' \x01\x00'}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x15}}, @in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}, 0x72e9}, @in={0x2, 0x4e22, @private=0xa010101}, @in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e23, 0x9, @local, 0x8}, @in={0x2, 0x4e23, @remote}], 0xa4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x4001, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, 'gre0\x00'}}, 0x1e) r3 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000a40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f00000008c0)=@deltaction={0x118, 0x31, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffb}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x78, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000001}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff7018}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x200}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe6}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc0}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x14, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000700)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(0xffffffffffffffff, &(0x7f00000000c0)={0x14, &(0x7f0000000040)={0x40, 0xa, 0x2, {0x2, 0x3}}, 0x0}, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg(r2, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 6.070132408s ago: executing program 2 (id=11925): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @private=0xa010100}, @address_reply}}}}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000003c0)=[@in6={0xa, 0x4e21, 0xfffffff9, @rand_addr=' \x01\x00'}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x15}}, @in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}, 0x72e9}, @in={0x2, 0x4e22, @private=0xa010101}, @in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e23, 0x9, @local, 0x8}, @in={0x2, 0x4e23, @remote}], 0xa4) r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) setsockopt$MRT_PIM(r2, 0x0, 0xcf, &(0x7f0000000140)=0x4, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x4001, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, 'gre0\x00'}}, 0x1e) r4 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r4, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f00000008c0)=@deltaction={0x118, 0x31, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffb}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x78, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000001}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff7018}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x200}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe6}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc0}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x14, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) syz_usb_control_io$lan78xx(r4, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000700)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(0xffffffffffffffff, &(0x7f00000000c0)={0x14, &(0x7f0000000040)={0x40, 0xa, 0x2, {0x2, 0x3}}, 0x0}, 0x0) syz_usb_control_io$lan78xx(r4, 0x0, 0x0) syz_usb_control_io$lan78xx(r4, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg(r3, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 5.448327885s ago: executing program 9 (id=11930): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001ac0)={0x8c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_MARK={0x8}, @CTA_TUPLE_MASTER={0x20, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @rand_addr=0x64010102}}}]}]}, 0x8c}}, 0x0) 5.189955523s ago: executing program 9 (id=11931): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) socket$packet(0x11, 0x2, 0x300) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8153, 0x103000, 0x800, 0x9}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r1, &(0x7f00000003c0)={0x2c, 0x2, r3, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r1, 0x80000000) pselect6(0x40, &(0x7f00000001c0)={0x4, 0x8001, 0x6, 0x0, 0x0, 0x3ff000000, 0x9c2a, 0x4}, 0x0, &(0x7f0000000200)={0x3ff, 0x4000000000002, 0x7ffffffffffff, 0x9, 0x4, 0x0, 0x8000000000000000, 0x9}, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0xfd, 0x28c, 0x1, 0x0, 0x3}, {0x7}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb9, 0x0, 0x8000000}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 3.940774634s ago: executing program 9 (id=11943): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x5) connect$inet(r1, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10) r2 = accept(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000020), 0x4) setsockopt$inet_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000030)=@gcm_128={{0x303}}, 0x28) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000020), 0x4) setsockopt$inet_tcp_TLS_RX(r2, 0x11a, 0x2, &(0x7f0000000080)=@gcm_128={{0x303}}, 0x28) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000440)='h', 0x1}], 0x1, &(0x7f0000000180)=[@ip_ttl={{0x14, 0x11a, 0x1, 0x7f}}], 0x18}, 0x0) recvmsg$kcm(r2, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000002300)=[{&(0x7f00000020c0)=""/235, 0xeb}], 0x1}, 0x2) 3.665998782s ago: executing program 6 (id=11945): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32, @ANYBLOB="08002600851600000a00180000000000000000001c005a801800"], 0x4c}}, 0x0) 3.423231275s ago: executing program 8 (id=11947): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r1, 0xa23, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PID={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008880}, 0x20000084) 3.409738734s ago: executing program 6 (id=11948): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) socket$packet(0x11, 0x2, 0x300) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r1, &(0x7f00000003c0)={0x2c, 0x2, r3, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r1, 0x80000000) pselect6(0x40, &(0x7f00000001c0)={0x4, 0x8001, 0x6, 0x0, 0x0, 0x3ff000000, 0x9c2a, 0x4}, 0x0, &(0x7f0000000200)={0x3ff, 0x4000000000002, 0x7ffffffffffff, 0x9, 0x4, 0x0, 0x8000000000000000, 0x9}, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0xfd, 0x28c, 0x1, 0x0, 0x3}, {0x7}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb9, 0x0, 0x8000000}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 3.200009647s ago: executing program 8 (id=11950): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="200000001600070300bd7000fedbdf25017c00000c00018008"], 0x20}, 0x1, 0x0, 0x0, 0x4000011}, 0x8010) 3.123631669s ago: executing program 8 (id=11951): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x8, 0x0, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000021c0)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r2, 0x0, 0x0, 0x4100, 0x0, 0x0) 2.956532971s ago: executing program 9 (id=11953): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @loopback}]}, &(0x7f0000000140)=0x16) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000080)="d3d0666d223e4686", 0x8) 2.886437669s ago: executing program 9 (id=11954): socket$netlink(0x10, 0x3, 0x15) r0 = socket$netlink(0x10, 0x3, 0xf) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000034276d20402003c68e010000000109021200010000000009040001"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff1}, {0xffff, 0xffff}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008014}, 0x40000) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xd) dup(r5) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r7 = gettid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r3, 0xa23, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008880}, 0x20000084) 2.77325302s ago: executing program 4 (id=11955): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(0x0, 0x22) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) socket(0x10, 0x803, 0x0) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000140)=0xfffffffe) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x3, 0xdd9f83, 0x5, 0x9, 0x100f3, 0xfffffffe, 0x5, 0x722, 0x4, 0x7, 0x82, 0x3f, 0xb763599953cb091d, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c00010062"], 0x3c}}, 0x0) socket(0x10, 0x803, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0x2}, 0x1c) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x94440}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e6576650000200002801400070000000000000000000000000000000001050004000100000008000a00", @ANYRES32=r5], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket(0x10, 0x803, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 2.049362251s ago: executing program 6 (id=11956): write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) socket$nl_route(0x10, 0x3, 0x0) write$9p(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1}, 0x6e) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040302"], 0x4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 1.977730868s ago: executing program 8 (id=11957): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000000)=0x5, 0x4) 1.929783419s ago: executing program 2 (id=11958): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32, @ANYBLOB="08002600851600000a00180000000000000000001c005a801800"], 0x4c}}, 0x0) 1.484711721s ago: executing program 2 (id=11959): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000004780)=[{&(0x7f0000003700)="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", 0xebc}, {&(0x7f0000004700)="2a70580b0b578c5cd8a2421c81f7f49c14d5c1fd749d1e623748e403704fc9158bff8bab475fe6b1af01b72c3d9e11e8c4acf591a3393a18247862dcc40214c9", 0x40}], 0x2}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) write(r0, &(0x7f0000001e00)="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", 0x1c3) 1.12614978s ago: executing program 6 (id=11960): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r1, 0xa23, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_PID={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008880}, 0x20000084) 989.617254ms ago: executing program 6 (id=11961): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="200000001600070300bd7000fedbdf25017c00000c00018008"], 0x20}, 0x1, 0x0, 0x0, 0x4000011}, 0x8010) 712.382582ms ago: executing program 4 (id=11962): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0xc9100120, 0x0, 0x0) 680.779443ms ago: executing program 8 (id=11963): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @loopback}]}, &(0x7f0000000140)=0x16) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000080)={r1, 0x8000}, 0x8) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000080)="d3d0666d223e4686", 0x8) 679.739614ms ago: executing program 6 (id=11964): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef28"], 0xffdd) close(r2) close(0x4) 502.468483ms ago: executing program 4 (id=11965): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) 501.123115ms ago: executing program 2 (id=11966): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) socket$packet(0x11, 0x2, 0x300) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r1, &(0x7f00000003c0)={0x2c, 0x2, r3, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r1, 0x80000000) pselect6(0x40, &(0x7f00000001c0)={0x4, 0x8001, 0x6, 0x0, 0x0, 0x3ff000000, 0x9c2a, 0x4}, 0x0, &(0x7f0000000200)={0x3ff, 0x4000000000002, 0x7ffffffffffff, 0x9, 0x4, 0x0, 0x8000000000000000, 0x9}, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0xfd, 0x28c, 0x1, 0x0, 0x3}, {0x7}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb9, 0x0, 0x8000000}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 462.281562ms ago: executing program 8 (id=11967): socket$netlink(0x10, 0x3, 0x15) r0 = socket$netlink(0x10, 0x3, 0xf) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000034276d20402003c68e010000000109021200010000000009040001"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff1}, {0xffff, 0xffff}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008014}, 0x40000) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xd) dup(r5) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r7 = gettid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r3, 0xa23, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008880}, 0x20000084) 321.694621ms ago: executing program 4 (id=11968): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x62, 0x30, 0x4, 0x30, 0x52, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3e}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x61, 0x34, 0x38, 0x36, 0x56, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65, 0x61, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x38, 0x30, 0x64, 0x30, 0x62, 0x30, 0x30, 0x30, 0x34, 0x30, 0x30, 0x35, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566357a2e6abc1629ecff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x64, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff001122eb4d0400000000000000ddeeff9df9bace445566778899aabbcc21eeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x39, 0x34, 0x33, 0x36, 0x30, 0x31, 0x66, 0x0, 0x61, 0x35, 0x62, 0x33, 0x64, 0x38, 0x38, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000480), &(0x7f0000000940)={'fscrypt:', @desc2}, &(0x7f00000005c0)={0x0, "41aaa6461c7d9cdfe002a4fdf77ac6a6b897264411411eb3e0e991467601fa7590931ab1575e497fa2974dbe559c8f95118b6680568af90fbd32a6fd249117c5", 0x2a}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddceff001166778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000780)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x61, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x61]}, &(0x7f00000007c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff0011223344556677899c69bbccddeeff00", 0x13}, 0x48, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000380)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x12}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x41}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x2, 0x30, 0x30, 0x30, 0x30, 0x0, 0x30, 0x63, 0x30, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(0x0, &(0x7f0000000540)={'fscrypt:', @auto=[0x39, 0x61, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556c778899aabbccddeeff", 0x3d}, 0x48, r0) 247.047992ms ago: executing program 4 (id=11969): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r1, 0x0, 0x0) 34.330697ms ago: executing program 4 (id=11970): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 0s ago: executing program 9 (id=11971): syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000000c0)={&(0x7f0000001c00)=[{0x0, 0x10, 0x0, 0x0}, {0x0, 0x800, 0x0, 0x0}], 0x2}) kernel console output (not intermixed with test programs): s/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3266.141935][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 3266.141996][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 3266.412477][ T1423] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 3266.563572][ T1423] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3266.566945][ T1423] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3266.567047][ T1423] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3266.625666][ T1423] usb 3-1: config 0 descriptor?? [ 3266.730161][ T31] kauditd_printk_skb: 272 callbacks suppressed [ 3266.730178][ T31] audit: type=1326 audit(1790041682.495:22590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11665 comm="syz.4.11259" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa2e599e159 code=0x0 [ 3266.873273][ T1423] usbhid 3-1:0.0: can't add hid device: -71 [ 3266.873390][ T1423] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 3266.916820][ T1423] usb 3-1: USB disconnect, device number 26 [ 3267.296179][ T31] audit: type=1326 audit(1790041683.065:22591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11675 comm="syz.9.11262" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4ed9e159 code=0x7ffc0000 [ 3267.296390][ T31] audit: type=1326 audit(1790041683.065:22592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11675 comm="syz.9.11262" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4ed9e159 code=0x7ffc0000 [ 3267.357465][ T31] audit: type=1326 audit(1790041683.125:22593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11675 comm="syz.9.11262" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4ed9e159 code=0x7ffc0000 [ 3267.383606][ T31] audit: type=1326 audit(1790041683.125:22594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11675 comm="syz.9.11262" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4ed9e159 code=0x7ffc0000 [ 3267.411060][ T31] audit: type=1326 audit(1790041683.185:22595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11675 comm="syz.9.11262" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7d4ed5e98e code=0x7ffc0000 [ 3267.435414][ T31] audit: type=1326 audit(1790041683.185:22596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11675 comm="syz.9.11262" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4ed9e159 code=0x7ffc0000 [ 3267.435523][ T31] audit: type=1326 audit(1790041683.185:22597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11675 comm="syz.9.11262" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4ed9e159 code=0x7ffc0000 [ 3267.441309][ T31] audit: type=1326 audit(1790041683.195:22598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11675 comm="syz.9.11262" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4ed9e159 code=0x7ffc0000 [ 3267.441429][ T31] audit: type=1326 audit(1790041683.215:22600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11675 comm="syz.9.11262" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7d4ed5e98e code=0x7ffc0000 [ 3267.512589][ T1423] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 3267.691613][ T1423] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 3267.693876][ T1423] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3267.693968][ T1423] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3267.749090][ T1423] usb 3-1: config 0 descriptor?? [ 3268.088838][ T5352] usb 9-1: new high-speed USB device number 69 using dummy_hcd [ 3268.193522][T11655] netlink: 'syz.2.11255': attribute type 1 has an invalid length. [ 3268.241083][ T5352] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3268.245904][ T5352] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3268.246002][ T5352] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3268.276835][ T5352] usb 9-1: config 0 descriptor?? [ 3268.504213][ T5352] usbhid 9-1:0.0: can't add hid device: -71 [ 3268.504413][ T5352] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 3268.555435][ T5352] usb 9-1: USB disconnect, device number 69 [ 3268.703648][ T1423] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 3268.717128][ T1423] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input364 [ 3269.039232][ T5352] usb 9-1: new high-speed USB device number 70 using dummy_hcd [ 3269.201003][ T5352] usb 9-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 3269.206488][ T5352] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3269.206546][ T5352] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3269.234744][ T1423] usb 3-1: USB disconnect, device number 27 [ 3269.242121][ T5352] usb 9-1: config 0 descriptor?? [ 3270.191649][ T5352] aiptek 9-1:0.0: Aiptek using 400 ms programming speed [ 3270.212789][ T5352] input: Aiptek as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input365 [ 3270.847517][ T1423] usb 9-1: USB disconnect, device number 70 [ 3271.856187][ T31] kauditd_printk_skb: 493 callbacks suppressed [ 3271.856205][ T31] audit: type=1326 audit(1790041687.625:23093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11731 comm="syz.2.11281" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2037b9e159 code=0x7ffc0000 [ 3271.857343][ T31] audit: type=1326 audit(1790041687.625:23094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11731 comm="syz.2.11281" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2037b9e159 code=0x7ffc0000 [ 3271.937168][ T31] audit: type=1326 audit(1790041687.705:23095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11731 comm="syz.2.11281" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2037b9e159 code=0x7ffc0000 [ 3271.937635][ T31] audit: type=1326 audit(1790041687.705:23096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11731 comm="syz.2.11281" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2037b9e159 code=0x7ffc0000 [ 3271.937837][ T31] audit: type=1326 audit(1790041687.705:23097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11731 comm="syz.2.11281" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2037b5e98e code=0x7ffc0000 [ 3271.938303][ T31] audit: type=1326 audit(1790041687.705:23098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11731 comm="syz.2.11281" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2037b9e159 code=0x7ffc0000 [ 3271.938451][ T31] audit: type=1326 audit(1790041687.705:23099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11731 comm="syz.2.11281" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2037b9e159 code=0x7ffc0000 [ 3271.964229][ T31] audit: type=1326 audit(1790041687.705:23100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11731 comm="syz.2.11281" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2037b9e159 code=0x7ffc0000 [ 3271.964292][ T31] audit: type=1326 audit(1790041687.715:23101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11731 comm="syz.2.11281" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2037b5e98e code=0x7ffc0000 [ 3271.964332][ T31] audit: type=1326 audit(1790041687.715:23102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11731 comm="syz.2.11281" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2037b9e159 code=0x7ffc0000 [ 3274.156300][T11761] fuse: Bad value for 'fd' [ 3274.228809][T11764] fuse: Unknown parameter 'grou00000000000000000000' [ 3274.256949][T11758] syzkaller0: entered promiscuous mode [ 3274.256974][T11758] syzkaller0: entered allmulticast mode [ 3274.299677][T11758] tipc: Enabled bearer , priority 0 [ 3274.336167][T11758] tipc: Resetting bearer [ 3274.390083][T11753] tipc: Resetting bearer [ 3274.497337][T11753] tipc: Disabling bearer [ 3274.707643][T11770] syzkaller0: entered promiscuous mode [ 3274.707665][T11770] syzkaller0: entered allmulticast mode [ 3274.750157][T11770] tipc: Enabled bearer , priority 0 [ 3274.756437][T11770] tipc: Resetting bearer [ 3274.791514][T11769] tipc: Resetting bearer [ 3274.839682][T11769] tipc: Disabling bearer [ 3275.528770][ T1423] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 3275.681967][ T1423] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3275.715067][ T1423] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3275.715123][ T1423] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3275.747107][ T1423] usb 5-1: config 0 descriptor?? [ 3275.848660][ T5104] usb 10-1: new high-speed USB device number 89 using dummy_hcd [ 3276.010401][ T5104] usb 10-1: Using ep0 maxpacket: 8 [ 3276.018509][ T1423] usbhid 5-1:0.0: can't add hid device: -71 [ 3276.021824][ T1423] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 3276.040722][ T5104] usb 10-1: unable to get BOS descriptor or descriptor too short [ 3276.040773][ T5104] usb 10-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 1.40 [ 3276.074152][ T5104] usb 10-1: config 1 has an invalid descriptor of length 145, skipping remainder of the config [ 3276.074191][ T5104] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3276.100262][ T5104] usb 10-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 3276.100287][ T5104] usb 10-1: Manufacturer: syz [ 3276.131524][ T1423] usb 5-1: USB disconnect, device number 127 [ 3276.533172][ T5104] usb 10-1: 0:1 : does not exist [ 3276.589006][ T1423] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 3276.740306][ T1423] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 3276.742199][ T1423] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3276.742262][ T1423] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3276.791394][ T1423] usb 5-1: config 0 descriptor?? [ 3276.799649][ T5104] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 3276.832148][ T5104] usb 10-1: USB disconnect, device number 89 [ 3276.842352][T11798] fuse: Bad value for 'fd' [ 3276.947403][T11301] udevd[11301]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3277.259070][T11778] netlink: 'syz.4.11300': attribute type 1 has an invalid length. [ 3277.693592][ T1423] aiptek 5-1:0.0: Aiptek using 400 ms programming speed [ 3277.717843][ T1423] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input369 [ 3278.059398][T11813] fuse: Unknown parameter 'grou00000000000000000000' [ 3278.093238][T23986] usb 5-1: USB disconnect, device number 2 [ 3278.093258][ C1] aiptek 5-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 3278.139100][ T5104] usb 9-1: new high-speed USB device number 71 using dummy_hcd [ 3278.313417][ T5104] usb 9-1: Using ep0 maxpacket: 8 [ 3278.318762][ T5104] usb 9-1: unable to get BOS descriptor or descriptor too short [ 3278.318884][ T5104] usb 9-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 1.40 [ 3278.331201][ T5104] usb 9-1: config 1 has an invalid descriptor of length 145, skipping remainder of the config [ 3278.331258][ T5104] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3278.368921][ T5104] usb 9-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 3278.369012][ T5104] usb 9-1: Manufacturer: syz [ 3278.647503][ T5104] usb 9-1: 0:1 : does not exist [ 3278.850384][ T5104] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 3278.871110][ T5104] usb 9-1: USB disconnect, device number 71 [ 3278.977463][T11301] udevd[11301]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3279.208758][T23986] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 3279.371490][T23986] usb 5-1: Using ep0 maxpacket: 32 [ 3279.372217][T23986] usb 5-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e [ 3279.373267][T23986] usb 5-1: config 0 interface 0 has no altsetting 0 [ 3279.373303][T23986] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3279.386568][T23986] usb 5-1: config 0 descriptor?? [ 3279.425683][T23986] usb 5-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state [ 3279.460252][T23986] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 3279.460673][T23986] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+) [ 3279.460716][T23986] usb 5-1: media controller created [ 3279.516110][T23986] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3279.630530][T23986] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 3279.630561][T23986] error writing reg: 0xff, val: 0x00 [ 3279.725447][T23986] dvb_usb_mxl111sf 5-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 3280.764328][T11832] fuse: Bad value for 'fd' [ 3280.985855][ T1423] usb 5-1: USB disconnect, device number 3 [ 3281.107594][T11840] syzkaller0: entered promiscuous mode [ 3281.107621][T11840] syzkaller0: entered allmulticast mode [ 3281.127903][T11840] tipc: Enabled bearer , priority 0 [ 3281.136720][T11840] tipc: Resetting bearer [ 3281.140598][T11838] tipc: Resetting bearer [ 3281.179347][T11838] tipc: Disabling bearer [ 3281.296657][ T31] kauditd_printk_skb: 266 callbacks suppressed [ 3281.296673][ T31] audit: type=1326 audit(1790041697.065:23369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11843 comm="syz.8.11322" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0705b9e159 code=0x7ffc0000 [ 3281.330225][ T31] audit: type=1326 audit(1790041697.095:23370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11843 comm="syz.8.11322" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0705b9e159 code=0x7ffc0000 [ 3281.338695][ T5104] usb 10-1: new high-speed USB device number 90 using dummy_hcd [ 3281.368957][ T31] audit: type=1326 audit(1790041697.135:23371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11843 comm="syz.8.11322" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0705b9e159 code=0x7ffc0000 [ 3281.368998][ T31] audit: type=1326 audit(1790041697.135:23372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11843 comm="syz.8.11322" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0705b9e159 code=0x7ffc0000 [ 3281.384659][ T31] audit: type=1326 audit(1790041697.145:23373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11843 comm="syz.8.11322" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0705b5e98e code=0x7ffc0000 [ 3281.384704][ T31] audit: type=1326 audit(1790041697.145:23374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11843 comm="syz.8.11322" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0705b9e159 code=0x7ffc0000 [ 3281.384746][ T31] audit: type=1326 audit(1790041697.145:23375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11843 comm="syz.8.11322" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0705b9e159 code=0x7ffc0000 [ 3281.532596][ T31] audit: type=1326 audit(1790041697.295:23376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11843 comm="syz.8.11322" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0705b9e159 code=0x7ffc0000 [ 3281.532643][ T31] audit: type=1326 audit(1790041697.295:23377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11843 comm="syz.8.11322" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0705b9e159 code=0x7ffc0000 [ 3281.554646][ T31] audit: type=1326 audit(1790041697.325:23378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11843 comm="syz.8.11322" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0705b5e98e code=0x7ffc0000 [ 3281.609056][ T5104] usb 10-1: Using ep0 maxpacket: 8 [ 3281.709113][ T5104] usb 10-1: unable to get BOS descriptor or descriptor too short [ 3281.709160][ T5104] usb 10-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 1.40 [ 3281.786398][ T5104] usb 10-1: config 1 has an invalid descriptor of length 145, skipping remainder of the config [ 3281.786421][ T5104] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3281.847990][ T5104] usb 10-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 3281.848014][ T5104] usb 10-1: Manufacturer: syz [ 3282.493098][ T5104] usb 10-1: 0:1 : does not exist [ 3282.714482][ T1423] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 3282.775110][T11855] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 0, 8) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 3282.853534][ T5104] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 3282.879279][ T5104] usb 10-1: USB disconnect, device number 90 [ 3282.909237][ T1423] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3282.912079][ T1423] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3282.912123][ T1423] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3282.966224][ T1423] usb 3-1: config 0 descriptor?? [ 3283.054884][T11301] udevd[11301]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3283.170405][T11857] netlink: 'syz.4.11326': attribute type 29 has an invalid length. [ 3283.193791][T11857] netlink: 'syz.4.11326': attribute type 29 has an invalid length. [ 3283.197756][T11857] netlink: 'syz.4.11326': attribute type 29 has an invalid length. [ 3283.256063][ T1423] usbhid 3-1:0.0: can't add hid device: -71 [ 3283.256190][ T1423] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 3283.276378][ T1423] usb 3-1: USB disconnect, device number 28 [ 3283.300917][T11859] netlink: 56 bytes leftover after parsing attributes in process `syz.8.11327'. [ 3283.788877][ T1423] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 3283.940039][ T1423] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 3283.942438][ T1423] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3283.943121][ T1423] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3283.981966][ T1423] usb 3-1: config 0 descriptor?? [ 3284.278781][ T5352] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 3284.431705][ T5352] usb 5-1: Using ep0 maxpacket: 8 [ 3284.465409][ T5352] usb 5-1: unable to get BOS descriptor or descriptor too short [ 3284.465468][ T5352] usb 5-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 1.40 [ 3284.487944][ T5352] usb 5-1: config 1 has an invalid descriptor of length 145, skipping remainder of the config [ 3284.487998][ T5352] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3284.512417][ T5352] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 3284.512447][ T5352] usb 5-1: Manufacturer: syz [ 3285.022273][ T5352] usb 5-1: 0:1 : does not exist [ 3285.044648][ T1423] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 3285.096422][ T1423] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input373 [ 3285.520961][ T5352] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 3285.555327][ T5352] usb 5-1: USB disconnect, device number 4 [ 3285.662848][T11870] syzkaller0: entered promiscuous mode [ 3285.662877][T11870] syzkaller0: entered allmulticast mode [ 3285.697176][T11301] udevd[11301]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3286.299511][ T31] kauditd_printk_skb: 162 callbacks suppressed [ 3286.299546][ T31] audit: type=1326 audit(1790041702.075:23542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11876 comm="syz.9.11334" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f7d4ed9e159 code=0x7ffc0000 [ 3286.299673][ T31] audit: type=1326 audit(1790041702.075:23543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11876 comm="syz.9.11334" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4ed9e159 code=0x7ffc0000 [ 3286.299782][ T31] audit: type=1326 audit(1790041702.075:23544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11876 comm="syz.9.11334" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4ed9e159 code=0x7ffc0000 [ 3286.304033][ T31] audit: type=1326 audit(1790041702.065:23541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11876 comm="syz.9.11334" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4ed9e159 code=0x7ffc0000 [ 3286.304140][ T31] audit: type=1326 audit(1790041702.075:23545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11876 comm="syz.9.11334" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4ed9e159 code=0x7ffc0000 [ 3286.304258][ T31] audit: type=1326 audit(1790041702.075:23546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11876 comm="syz.9.11334" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4ed9e159 code=0x7ffc0000 [ 3286.304332][ T31] audit: type=1326 audit(1790041702.075:23547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11876 comm="syz.9.11334" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f7d4ed9e159 code=0x7ffc0000 [ 3286.304432][ T31] audit: type=1326 audit(1790041702.075:23548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11876 comm="syz.9.11334" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4ed9e159 code=0x7ffc0000 [ 3286.304548][ T31] audit: type=1326 audit(1790041702.075:23549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11876 comm="syz.9.11334" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4ed9e159 code=0x7ffc0000 [ 3286.304588][ T31] audit: type=1326 audit(1790041702.075:23550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11876 comm="syz.9.11334" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4ed9e159 code=0x7ffc0000 [ 3286.345392][ T5104] usb 9-1: new high-speed USB device number 72 using dummy_hcd [ 3286.658852][ T5104] usb 9-1: Using ep0 maxpacket: 8 [ 3286.724248][ T5104] usb 9-1: unable to get BOS descriptor or descriptor too short [ 3286.724298][ T5104] usb 9-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 1.40 [ 3286.747294][ T5104] usb 9-1: config 1 has an invalid descriptor of length 145, skipping remainder of the config [ 3286.747320][ T5104] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3286.811939][ T5104] usb 9-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 3286.811984][ T5104] usb 9-1: Manufacturer: syz [ 3286.891493][ T5102] usb 3-1: USB disconnect, device number 29 [ 3286.891569][ C1] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 3287.196406][ T5104] usb 9-1: 0:1 : does not exist [ 3287.365801][ T5104] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 3287.382373][ T5104] usb 9-1: USB disconnect, device number 72 [ 3287.468875][T11301] udevd[11301]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3287.558635][ T5102] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 3287.711492][ T5102] usb 3-1: Using ep0 maxpacket: 8 [ 3287.728181][ T5102] usb 3-1: unable to get BOS descriptor or descriptor too short [ 3287.728223][ T5102] usb 3-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 1.40 [ 3287.759814][ T5102] usb 3-1: config 1 has an invalid descriptor of length 145, skipping remainder of the config [ 3287.759838][ T5102] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3287.766090][ T5102] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 3287.766114][ T5102] usb 3-1: Manufacturer: syz [ 3288.104830][ T5102] usb 3-1: 0:1 : does not exist [ 3288.178953][ T1423] usb 10-1: new high-speed USB device number 91 using dummy_hcd [ 3288.321668][ T5102] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 3288.338467][ T1423] usb 10-1: Using ep0 maxpacket: 16 [ 3288.352159][ T5102] usb 3-1: USB disconnect, device number 30 [ 3288.352942][ T1423] usb 10-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 3288.402008][ T1423] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3288.402072][ T1423] usb 10-1: Product: syz [ 3288.402082][ T1423] usb 10-1: Manufacturer: syz [ 3288.402103][ T1423] usb 10-1: SerialNumber: syz [ 3288.531571][T11301] udevd[11301]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3288.703991][ T1423] usb 10-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 3288.764355][ T1423] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 3288.782704][ T1423] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 3288.782749][ T1423] usb 10-1: media controller created [ 3288.842521][ T1423] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3288.949797][ T1423] zl10353_read_register: readreg error (reg=127, ret==-32) [ 3289.273434][ T1423] dvb_usb_gl861 10-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 3289.300167][ T1423] usb 10-1: USB disconnect, device number 91 [ 3289.974034][ T1423] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 3290.141648][ T1423] usb 5-1: Using ep0 maxpacket: 8 [ 3290.225622][ T1423] usb 5-1: unable to get BOS descriptor or descriptor too short [ 3290.225669][ T1423] usb 5-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 1.40 [ 3290.257063][ T1423] usb 5-1: config 1 has an invalid descriptor of length 145, skipping remainder of the config [ 3290.257120][ T1423] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3290.315984][ T1423] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 3290.316014][ T1423] usb 5-1: Manufacturer: syz [ 3290.746978][ T1423] usb 5-1: 0:1 : does not exist [ 3291.094739][ T1423] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 3291.130449][ T1423] usb 5-1: USB disconnect, device number 5 [ 3291.246722][T11301] udevd[11301]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3292.198746][ T1423] usb 10-1: new high-speed USB device number 92 using dummy_hcd [ 3292.271268][ T5101] IPVS: starting estimator thread 0... [ 3292.356662][ T1423] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3292.368455][ T1423] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3292.368659][T11921] IPVS: using max 31 ests per chain, 74400 per kthread [ 3292.387408][ T1423] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3292.407125][ T1423] usb 10-1: config 0 descriptor?? [ 3292.597898][T11922] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11344'. [ 3292.612792][T11922] IPVS: Error connecting to the multicast addr [ 3292.637331][ T1423] usbhid 10-1:0.0: can't add hid device: -71 [ 3292.637531][ T1423] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 3292.665010][ T1423] usb 10-1: USB disconnect, device number 92 [ 3293.056209][ T31] kauditd_printk_skb: 162 callbacks suppressed [ 3293.056229][ T31] audit: type=1326 audit(1790041708.825:23713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11926 comm="syz.8.11346" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0705b9e159 code=0x0 [ 3293.108845][ T1423] usb 10-1: new high-speed USB device number 93 using dummy_hcd [ 3293.260734][ T1423] usb 10-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 3293.265056][ T1423] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3293.265150][ T1423] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3293.342291][ T1423] usb 10-1: config 0 descriptor?? [ 3293.718701][ T5102] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 3293.868802][ T5102] usb 3-1: Using ep0 maxpacket: 8 [ 3293.893000][ T5102] usb 3-1: unable to get BOS descriptor or descriptor too short [ 3293.893048][ T5102] usb 3-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 1.40 [ 3293.897770][ T5102] usb 3-1: config 1 has an invalid descriptor of length 145, skipping remainder of the config [ 3293.897795][ T5102] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3293.954969][ T5102] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 3293.954993][ T5102] usb 3-1: Manufacturer: syz [ 3294.342619][ T5102] usb 3-1: 0:1 : does not exist [ 3294.390860][ T1423] aiptek 10-1:0.0: Aiptek using 400 ms programming speed [ 3294.411140][ T1423] input: Aiptek as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input375 [ 3294.564809][ T5102] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 3294.615330][ T5102] usb 3-1: USB disconnect, device number 31 [ 3294.753256][T23986] usb 10-1: USB disconnect, device number 93 [ 3294.753402][ C1] aiptek 10-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 3294.855697][T11301] udevd[11301]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3296.413627][T23976] usb 9-1: new high-speed USB device number 73 using dummy_hcd [ 3296.565870][T23976] usb 9-1: Using ep0 maxpacket: 8 [ 3296.566789][ T1423] usb 10-1: new high-speed USB device number 94 using dummy_hcd [ 3296.608305][T23976] usb 9-1: unable to get BOS descriptor or descriptor too short [ 3296.608361][T23976] usb 9-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 1.40 [ 3296.663979][T23976] usb 9-1: config 1 has an invalid descriptor of length 145, skipping remainder of the config [ 3296.664010][T23976] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3296.698381][T23976] usb 9-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 3296.698410][T23976] usb 9-1: Manufacturer: syz [ 3296.728732][ T1423] usb 10-1: Using ep0 maxpacket: 8 [ 3296.751040][ T1423] usb 10-1: unable to get BOS descriptor or descriptor too short [ 3296.751084][ T1423] usb 10-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 1.40 [ 3296.784972][ T1423] usb 10-1: config 1 has an invalid descriptor of length 145, skipping remainder of the config [ 3296.785001][ T1423] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3296.821164][ T1423] usb 10-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 3296.821181][ T1423] usb 10-1: Manufacturer: syz [ 3297.223336][T11967] netlink: 68 bytes leftover after parsing attributes in process `syz.4.11355'. [ 3297.304582][ T1423] usb 10-1: 0:1 : does not exist [ 3297.751297][ T1423] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 3297.758104][T23976] usb 9-1: 0:1 : does not exist [ 3297.768654][ T5104] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 3297.795389][ T1423] usb 10-1: USB disconnect, device number 94 [ 3297.901405][T11534] udevd[11534]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3297.949712][ T5104] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 3297.953296][ T5104] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3297.953359][ T5104] usb 5-1: Product: syz [ 3297.953376][ T5104] usb 5-1: Manufacturer: syz [ 3297.953393][ T5104] usb 5-1: SerialNumber: syz [ 3298.214187][ T5104] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 3298.214241][ T5104] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 3298.214260][ T5104] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 3298.250364][T23976] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 3298.271030][ T5104] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 3298.393006][T23976] usb 9-1: USB disconnect, device number 73 [ 3298.514478][T11301] udevd[11301]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3298.878771][ T5104] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 3299.043990][ T5104] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3299.048004][ T5104] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3299.048032][ T5104] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3299.048067][ T5104] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3299.099879][ T5104] usb 3-1: config 0 descriptor?? [ 3299.331385][ T5104] usbhid 3-1:0.0: can't add hid device: -71 [ 3299.331521][ T5104] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 3299.361310][ T5104] usb 3-1: USB disconnect, device number 32 [ 3299.858718][ T5104] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 3300.009995][ T5104] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 3300.013132][ T5104] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3300.013164][ T5104] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3300.013201][ T5104] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3300.061307][ T5104] usb 3-1: config 0 descriptor?? [ 3300.095367][ T31] audit: type=1326 audit(1790041715.865:23714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11978 comm="syz.6.11358" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc3d3b9e159 code=0x0 [ 3300.469478][ T5104] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 3300.486154][ T5104] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input376 [ 3300.497250][ T5104] input: failed to attach handler kbd to device input376, error: -5 [ 3300.544224][ T5104] usb 3-1: USB disconnect, device number 33 [ 3300.943869][ T1423] usb 10-1: new high-speed USB device number 95 using dummy_hcd [ 3301.103750][ T1423] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3301.131130][T23976] usb 5-1: USB disconnect, device number 6 [ 3301.133416][ T1423] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3301.133541][ T1423] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3301.197440][ T1423] usb 10-1: config 0 descriptor?? [ 3301.456059][ T1423] usbhid 10-1:0.0: can't add hid device: -71 [ 3301.456179][ T1423] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 3301.515230][ T1423] usb 10-1: USB disconnect, device number 95 [ 3301.801435][T23976] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 3301.890019][T12007] netlink: 'syz.6.11365': attribute type 1 has an invalid length. [ 3301.950531][T23976] usb 3-1: Using ep0 maxpacket: 8 [ 3301.976233][ T1423] usb 10-1: new high-speed USB device number 96 using dummy_hcd [ 3301.999176][T23976] usb 3-1: unable to get BOS descriptor or descriptor too short [ 3301.999232][T23976] usb 3-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 1.40 [ 3302.008313][T23976] usb 3-1: config 1 has an invalid descriptor of length 145, skipping remainder of the config [ 3302.008342][T23976] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3302.068931][T23976] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 3302.068961][T23976] usb 3-1: Manufacturer: syz [ 3302.107831][T12007] 8021q: adding VLAN 0 to HW filter on device bond1 [ 3302.121041][ T1423] usb 10-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 3302.125627][ T1423] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3302.125687][ T1423] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3302.184416][ T1423] usb 10-1: config 0 descriptor?? [ 3302.781869][T12010] bond1: (slave geneve2): making interface the new active one [ 3302.829565][T12010] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 3302.950289][T23976] usb 3-1: 0:1 : does not exist [ 3303.309561][T23976] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 3303.342731][T23976] usb 3-1: USB disconnect, device number 34 [ 3303.343812][ T1423] aiptek 10-1:0.0: Aiptek using 400 ms programming speed [ 3303.387454][ T1423] input: Aiptek as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input377 [ 3303.493880][T11301] udevd[11301]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3304.645883][ T5104] usb 10-1: USB disconnect, device number 96 [ 3304.646004][ C1] aiptek 10-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 3304.871731][T12029] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 3307.888637][ T5104] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 3307.988622][T23986] usb 9-1: new high-speed USB device number 74 using dummy_hcd [ 3308.039594][ T5104] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3308.046707][ T5104] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3308.046753][ T5104] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3308.095197][ T5104] usb 5-1: config 0 descriptor?? [ 3308.159340][T23986] usb 9-1: Using ep0 maxpacket: 8 [ 3308.178003][T23986] usb 9-1: unable to get BOS descriptor or descriptor too short [ 3308.178046][T23986] usb 9-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 1.40 [ 3308.209342][T23986] usb 9-1: config 1 has an invalid descriptor of length 145, skipping remainder of the config [ 3308.209366][T23986] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3308.214219][T23986] usb 9-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 3308.214267][T23986] usb 9-1: Manufacturer: syz [ 3308.340142][ T5104] usbhid 5-1:0.0: can't add hid device: -71 [ 3308.340267][ T5104] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 3308.370531][ T5104] usb 5-1: USB disconnect, device number 7 [ 3308.657798][T23986] usb 9-1: 0:1 : does not exist [ 3308.871531][T23986] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 3308.893575][T23986] usb 9-1: USB disconnect, device number 74 [ 3308.928858][ T5102] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 3309.012482][T11301] udevd[11301]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3309.079464][ T5102] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 3309.080599][ T5102] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3309.080679][ T5102] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3309.130610][ T5102] usb 5-1: config 0 descriptor?? [ 3309.613302][T12053] netlink: 'syz.4.11373': attribute type 1 has an invalid length. [ 3309.979065][ T1423] usb 10-1: new high-speed USB device number 97 using dummy_hcd [ 3310.049782][ T5102] aiptek 5-1:0.0: Aiptek using 400 ms programming speed [ 3310.056791][ T5102] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input378 [ 3310.168808][ T1423] usb 10-1: Using ep0 maxpacket: 8 [ 3310.216968][ T1423] usb 10-1: unable to get BOS descriptor or descriptor too short [ 3310.217102][ T1423] usb 10-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 1.40 [ 3310.272063][ T1423] usb 10-1: config 1 has an invalid descriptor of length 145, skipping remainder of the config [ 3310.272129][ T1423] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3310.320750][ T1423] usb 10-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 3310.320808][ T1423] usb 10-1: Manufacturer: syz [ 3310.492913][ T5102] usb 5-1: USB disconnect, device number 8 [ 3310.493020][ C0] aiptek 5-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 3310.925104][ T1423] usb 10-1: 0:1 : does not exist [ 3311.239116][ T5102] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 3311.257456][ T1423] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 3311.274693][ T1423] usb 10-1: USB disconnect, device number 97 [ 3311.360909][T11301] udevd[11301]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3311.402294][ T5102] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3311.405762][ T5102] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3311.405816][ T5102] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3311.455006][ T5102] usb 3-1: config 0 descriptor?? [ 3311.687121][ T5102] usbhid 3-1:0.0: can't add hid device: -71 [ 3311.687222][ T5102] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 3311.716015][ T5102] usb 3-1: USB disconnect, device number 35 [ 3312.098849][ T5104] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 3312.230703][ T5102] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 3312.249231][ T5104] usb 5-1: Using ep0 maxpacket: 8 [ 3312.264754][ T5104] usb 5-1: unable to get BOS descriptor or descriptor too short [ 3312.264797][ T5104] usb 5-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 1.40 [ 3312.291312][ T5104] usb 5-1: config 1 has an invalid descriptor of length 145, skipping remainder of the config [ 3312.291336][ T5104] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3312.296642][ T5104] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 3312.296666][ T5104] usb 5-1: Manufacturer: syz [ 3312.402851][ T5102] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 3312.405189][ T5102] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3312.405232][ T5102] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3312.441299][ T5102] usb 3-1: config 0 descriptor?? [ 3312.762895][ T5104] usb 5-1: 0:1 : does not exist [ 3312.923857][T12070] netlink: 'syz.2.11378': attribute type 1 has an invalid length. [ 3313.108345][ T5104] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 3313.139501][ T5104] usb 5-1: USB disconnect, device number 9 [ 3313.209490][T11301] udevd[11301]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3313.300732][ T1423] hid_parser_main: 3 callbacks suppressed [ 3313.300762][ T1423] hid-generic 0000:0000:0000.011B: unknown main item tag 0x0 [ 3313.338090][ T1423] hid-generic 0000:0000:0000.011B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3313.420989][ T5102] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 3313.424118][ T5102] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input379 [ 3313.879974][ T5102] usb 3-1: USB disconnect, device number 36 [ 3313.880074][ C0] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 3314.458085][ T5102] hid-generic 0000:0000:0000.011C: unknown main item tag 0x0 [ 3314.485046][ T5102] hid-generic 0000:0000:0000.011C: hidraw1: HID v0.00 Device [syz1] on syz0 [ 3314.643694][T12088] fido_id[12088]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 3315.350651][ T1423] usb 10-1: new high-speed USB device number 98 using dummy_hcd [ 3315.500215][ T1423] usb 10-1: Using ep0 maxpacket: 8 [ 3315.532079][ T1423] usb 10-1: unable to get BOS descriptor or descriptor too short [ 3315.532195][ T1423] usb 10-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 1.40 [ 3315.537537][ T1423] usb 10-1: config 1 has an invalid descriptor of length 145, skipping remainder of the config [ 3315.537574][ T1423] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3315.593834][ T1423] usb 10-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 3315.593872][ T1423] usb 10-1: Manufacturer: syz [ 3315.596951][ T5352] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 3315.779571][ T5352] usb 3-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 3315.782164][ T5352] usb 3-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 3315.782193][ T5352] usb 3-1: Product: syz [ 3315.788015][ T5352] usb 3-1: config 0 descriptor?? [ 3315.838073][ T5352] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 3315.847465][ T5352] usb 3-1: Detected FT232H [ 3316.062640][ T5352] ftdi_sio ttyUSB0: Unable to read latency timer: -121 [ 3316.121066][ T1423] usb 10-1: 0:1 : does not exist [ 3316.271687][ T5352] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 3316.272130][ T5352] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 3316.273750][ T5352] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 3316.322158][ T5352] usb 3-1: USB disconnect, device number 37 [ 3316.354534][ T5352] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 3316.372200][ T5352] ftdi_sio 3-1:0.0: device disconnected [ 3316.431444][ T1423] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 3316.461268][ T1423] usb 10-1: USB disconnect, device number 98 [ 3316.580021][T11301] udevd[11301]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3316.626912][T23976] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 3316.789025][T23976] usb 5-1: Using ep0 maxpacket: 8 [ 3316.806812][T23976] usb 5-1: unable to get BOS descriptor or descriptor too short [ 3316.806858][T23976] usb 5-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 1.40 [ 3316.833628][T23976] usb 5-1: config 1 has an invalid descriptor of length 145, skipping remainder of the config [ 3316.833660][T23976] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3316.867410][T23976] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 3316.867439][T23976] usb 5-1: Manufacturer: syz [ 3316.978841][ T5102] usb 9-1: new high-speed USB device number 75 using dummy_hcd [ 3317.130208][ T5102] usb 9-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 3317.132613][ T5102] usb 9-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 3317.132636][ T5102] usb 9-1: Product: syz [ 3317.161826][ T5102] usb 9-1: config 0 descriptor?? [ 3317.187099][ T5102] ftdi_sio 9-1:0.0: FTDI USB Serial Device converter detected [ 3317.203133][ T5102] usb 9-1: Detected FT232H [ 3317.388728][ T5102] ftdi_sio ttyUSB0: Unable to read latency timer: -121 [ 3317.487073][T23976] usb 5-1: 0:1 : does not exist [ 3317.591329][ T5102] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 3317.591801][ T5102] ftdi_sio 9-1:0.0: GPIO initialisation failed: -71 [ 3317.612835][ T5102] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 3317.633559][ T5102] usb 9-1: USB disconnect, device number 75 [ 3317.696788][ T5102] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 3317.697274][ T5102] ftdi_sio 9-1:0.0: device disconnected [ 3317.831495][T23976] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 3317.839434][T23976] usb 5-1: USB disconnect, device number 10 [ 3317.924236][T11301] udevd[11301]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3317.945573][ T5352] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 3318.089593][ T5352] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3318.090933][ T5352] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3318.090989][ T5352] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3318.108541][ T5352] usb 3-1: config 0 descriptor?? [ 3318.352292][ T5352] usbhid 3-1:0.0: can't add hid device: -71 [ 3318.352404][ T5352] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 3318.385843][ T5352] usb 3-1: USB disconnect, device number 38 [ 3318.901674][ T5352] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 3318.945834][T23976] usb 9-1: new high-speed USB device number 76 using dummy_hcd [ 3319.059836][ T5352] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 3319.061713][ T5352] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3319.061770][ T5352] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3319.108777][T23976] usb 9-1: Using ep0 maxpacket: 8 [ 3319.116995][ T5352] usb 3-1: config 0 descriptor?? [ 3319.163727][T23976] usb 9-1: unable to get BOS descriptor or descriptor too short [ 3319.163812][T23976] usb 9-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 1.40 [ 3319.200193][T23976] usb 9-1: config 1 has an invalid descriptor of length 145, skipping remainder of the config [ 3319.200224][T23976] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3319.248686][T23976] usb 9-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 3319.248716][T23976] usb 9-1: Manufacturer: syz [ 3319.470530][ T1423] usb 10-1: new high-speed USB device number 99 using dummy_hcd [ 3319.573723][T12110] netlink: 'syz.2.11389': attribute type 1 has an invalid length. [ 3319.622517][ T1423] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 3319.650207][ T1423] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3319.650250][ T1423] usb 10-1: Product: syz [ 3319.650369][ T1423] usb 10-1: Manufacturer: syz [ 3319.650384][ T1423] usb 10-1: SerialNumber: syz [ 3319.745299][T23976] usb 9-1: 0:1 : does not exist [ 3319.935108][ T1423] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 3319.935167][ T1423] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 3319.935192][ T1423] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 3319.981543][ T1423] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -32 [ 3320.094223][ T5352] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 3320.135524][ T5352] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input380 [ 3320.170375][T23976] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 3320.214324][T23976] usb 9-1: USB disconnect, device number 76 [ 3320.362552][T11301] udevd[11301]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3321.038735][ T5102] usb 3-1: USB disconnect, device number 39 [ 3321.038818][ C1] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 3321.118661][ T2374] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 3321.271298][ T2374] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3321.274214][ T2374] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3321.274259][ T2374] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3321.313747][ T2374] usb 5-1: config 0 descriptor?? [ 3321.557531][ T2374] usbhid 5-1:0.0: can't add hid device: -71 [ 3321.557629][ T2374] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 3321.596161][ T2374] usb 5-1: USB disconnect, device number 11 [ 3322.088686][ T5102] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 3322.118835][ T2374] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 3322.238981][ T5102] usb 3-1: Using ep0 maxpacket: 16 [ 3322.239744][ T5102] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 3322.243552][T23976] usb 10-1: USB disconnect, device number 99 [ 3322.244726][ T5102] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3322.244748][ T5102] usb 3-1: Product: syz [ 3322.244763][ T5102] usb 3-1: Manufacturer: syz [ 3322.244777][ T5102] usb 3-1: SerialNumber: syz [ 3322.309240][ T2374] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 3322.311668][ T2374] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3322.311726][ T2374] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3322.371029][ T2374] usb 5-1: config 0 descriptor?? [ 3322.595895][ T5102] usb 3-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 3322.623601][ T5102] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 3322.623850][ T5102] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 3322.623880][ T5102] usb 3-1: media controller created [ 3322.703489][ T5102] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3322.791549][ T5102] zl10353_read_register: readreg error (reg=127, ret==-32) [ 3322.878257][T12125] netlink: 'syz.4.11393': attribute type 1 has an invalid length. [ 3323.046791][ T5102] dvb_usb_gl861 3-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 3323.089705][ T5102] usb 3-1: USB disconnect, device number 40 [ 3323.184486][T12144] netlink: 'syz.8.11397': attribute type 1 has an invalid length. [ 3323.370602][ T2374] aiptek 5-1:0.0: Aiptek using 400 ms programming speed [ 3323.376580][ T2374] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input381 [ 3324.002843][T12144] 8021q: adding VLAN 0 to HW filter on device bond1 [ 3324.175446][T12147] bond1: (slave geneve2): making interface the new active one [ 3324.204642][T12147] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 3324.227776][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3324.227821][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3324.227855][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3324.227890][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3324.718743][ T2374] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 3324.880532][ T2374] usb 3-1: Using ep0 maxpacket: 8 [ 3324.941470][ T2374] usb 3-1: unable to get BOS descriptor or descriptor too short [ 3324.941540][ T2374] usb 3-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 1.40 [ 3324.986972][ T2374] usb 3-1: config 1 has an invalid descriptor of length 145, skipping remainder of the config [ 3324.986996][ T2374] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3325.013677][ T5102] usb 5-1: USB disconnect, device number 12 [ 3325.013799][ C0] aiptek 5-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 3325.015960][ T2374] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 3325.015978][ T2374] usb 3-1: Manufacturer: syz [ 3325.465910][ T31] audit: type=1326 audit(1790041741.235:23715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12153 comm="syz.4.11399" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa2e599e159 code=0x0 [ 3325.523401][ T2374] usb 3-1: 0:1 : does not exist [ 3325.832713][ T2374] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 3325.865320][ T2374] usb 3-1: USB disconnect, device number 41 [ 3325.946836][T11301] udevd[11301]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3327.048707][ T2374] usb 10-1: new high-speed USB device number 100 using dummy_hcd [ 3327.209339][ T2374] usb 10-1: Using ep0 maxpacket: 8 [ 3327.248716][ T2374] usb 10-1: unable to get BOS descriptor or descriptor too short [ 3327.248781][ T2374] usb 10-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 1.40 [ 3327.278198][ T2374] usb 10-1: config 1 has an invalid descriptor of length 145, skipping remainder of the config [ 3327.278222][ T2374] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3327.315228][ T2374] usb 10-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 3327.315251][ T2374] usb 10-1: Manufacturer: syz [ 3327.408807][ T5102] usb 9-1: new high-speed USB device number 77 using dummy_hcd [ 3327.583021][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 3327.585093][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 3327.615308][ T5102] usb 9-1: Using ep0 maxpacket: 8 [ 3327.644546][ T5102] usb 9-1: unable to get BOS descriptor or descriptor too short [ 3327.644590][ T5102] usb 9-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 1.40 [ 3327.691293][ T5102] usb 9-1: config 1 has an invalid descriptor of length 145, skipping remainder of the config [ 3327.691330][ T5102] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3327.721123][ T5102] usb 9-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 3327.721146][ T5102] usb 9-1: Manufacturer: syz [ 3328.027743][ T2374] usb 10-1: 0:1 : does not exist [ 3328.385793][ T2374] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 3328.387933][ T5102] usb 9-1: 0:1 : does not exist [ 3328.412481][ T2374] usb 10-1: USB disconnect, device number 100 [ 3328.529290][T11301] udevd[11301]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3328.686678][ T5102] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 3328.711565][ T5102] usb 9-1: USB disconnect, device number 77 [ 3328.874887][T11301] udevd[11301]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3329.640945][ T5352] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 3329.789764][ T5352] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 3329.796515][ T5352] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3329.796612][ T5352] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 3329.796667][ T5352] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 3329.796739][ T5352] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3330.115440][T12181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3330.129101][T12181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3330.249402][T12185] netlink: 'syz.4.11407': attribute type 1 has an invalid length. [ 3330.522616][T12185] 8021q: adding VLAN 0 to HW filter on device bond2 [ 3330.597341][T12189] bond2: (slave geneve2): making interface the new active one [ 3330.611478][T12189] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 3331.575795][ T31] audit: type=1326 audit(1790041747.345:23716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12202 comm="syz.6.11411" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc3d3b9e159 code=0x0 [ 3331.789107][ T5102] usb 10-1: new high-speed USB device number 101 using dummy_hcd [ 3331.949478][ T5102] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3331.950850][ T5102] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3331.950893][ T5102] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3331.983590][ T5352] cxacru 3-1:1.0: send of cm 0x90 failed (-104) [ 3331.984098][ T5102] usb 10-1: config 0 descriptor?? [ 3332.027277][T12206] cxacru 3-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 3332.027293][T12206] cxacru 3-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 3332.234098][ T5102] usbhid 10-1:0.0: can't add hid device: -71 [ 3332.234195][ T5102] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 3332.281748][ T5102] usb 10-1: USB disconnect, device number 101 [ 3332.500438][ T5352] usb 3-1: USB disconnect, device number 42 [ 3332.788663][ T5102] usb 10-1: new high-speed USB device number 102 using dummy_hcd [ 3332.828798][ T2374] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 3332.959427][ T5102] usb 10-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 3332.963840][ T5102] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3332.963896][ T5102] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3332.990042][ T5102] usb 10-1: config 0 descriptor?? [ 3333.004368][ T2374] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3333.006421][ T2374] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3333.006462][ T2374] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3333.044386][ T2374] usb 5-1: config 0 descriptor?? [ 3333.267496][ T2374] usbhid 5-1:0.0: can't add hid device: -71 [ 3333.267620][ T2374] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 3333.286591][ T2374] usb 5-1: USB disconnect, device number 13 [ 3333.427448][T12200] netlink: 'syz.9.11410': attribute type 1 has an invalid length. [ 3333.548938][T23986] usb 9-1: new high-speed USB device number 78 using dummy_hcd [ 3333.710212][T23986] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3333.712001][T23986] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3333.712044][T23986] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3333.714920][T23986] usb 9-1: config 0 descriptor?? [ 3333.728682][T23976] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 3333.899867][T23976] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 3333.901735][T23976] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3333.901803][T23976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3333.906619][T23976] usb 5-1: config 0 descriptor?? [ 3333.949907][ T5102] aiptek 10-1:0.0: Aiptek using 400 ms programming speed [ 3333.955140][ T5102] input: Aiptek as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input382 [ 3333.984752][T23986] usbhid 9-1:0.0: can't add hid device: -71 [ 3333.984934][T23986] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 3334.018732][T23986] usb 9-1: USB disconnect, device number 78 [ 3334.319437][ C0] aiptek 10-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 3334.319452][ T1423] usb 10-1: USB disconnect, device number 102 [ 3334.368437][T12209] netlink: 'syz.4.11412': attribute type 1 has an invalid length. [ 3334.478633][T23986] usb 9-1: new high-speed USB device number 79 using dummy_hcd [ 3334.629448][T23986] usb 9-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 3334.634001][T23986] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3334.634046][T23986] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3334.649085][T23986] usb 9-1: config 0 descriptor?? [ 3334.830683][T23976] aiptek 5-1:0.0: Aiptek using 400 ms programming speed [ 3334.834870][T23976] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input383 [ 3335.157186][T12217] netlink: 'syz.8.11415': attribute type 1 has an invalid length. [ 3335.241695][ C1] aiptek 5-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 3335.241758][ T1423] usb 5-1: USB disconnect, device number 14 [ 3335.428900][T23976] usb 10-1: new high-speed USB device number 103 using dummy_hcd [ 3335.590516][T23976] usb 10-1: Using ep0 maxpacket: 8 [ 3335.609366][T23976] usb 10-1: unable to get BOS descriptor or descriptor too short [ 3335.609420][T23976] usb 10-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 1.40 [ 3335.615253][T23976] usb 10-1: config 1 has an invalid descriptor of length 145, skipping remainder of the config [ 3335.615269][T23976] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3335.670110][T23986] aiptek 9-1:0.0: Aiptek using 400 ms programming speed [ 3335.685670][T23986] input: Aiptek as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input384 [ 3335.700151][T23976] usb 10-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 3335.700173][T23976] usb 10-1: Manufacturer: syz [ 3336.140514][T23976] usb 10-1: 0:1 : does not exist [ 3336.289106][T23986] usb 9-1: USB disconnect, device number 79 [ 3336.289214][ C0] aiptek 9-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 3336.435291][T12233] netlink: 'syz.6.11418': attribute type 29 has an invalid length. [ 3336.449620][T12233] netlink: 'syz.6.11418': attribute type 29 has an invalid length. [ 3336.451271][T12233] netlink: 'syz.6.11418': attribute type 29 has an invalid length. [ 3336.594879][T23976] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 3336.629748][T23976] usb 10-1: USB disconnect, device number 103 [ 3336.692417][T11301] udevd[11301]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3337.368661][T23986] usb 9-1: new high-speed USB device number 80 using dummy_hcd [ 3337.528752][T23986] usb 9-1: Using ep0 maxpacket: 16 [ 3337.532870][T23986] usb 9-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 3337.557780][T23986] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3337.557802][T23986] usb 9-1: Product: syz [ 3337.557815][T23986] usb 9-1: Manufacturer: syz [ 3337.557828][T23986] usb 9-1: SerialNumber: syz [ 3337.809862][T23986] usb 9-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 3337.830743][T23986] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 3337.830960][T23986] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 3337.830993][T23986] usb 9-1: media controller created [ 3337.892233][T23986] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3337.932691][ T5102] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 3338.099503][ T5102] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3338.101135][ T5102] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3338.101178][ T5102] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3338.139476][ T5102] usb 5-1: config 0 descriptor?? [ 3338.169097][T23986] zl10353_read_register: readreg error (reg=127, ret==-110) [ 3338.386381][ T5102] usbhid 5-1:0.0: can't add hid device: -71 [ 3338.386474][ T5102] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 3338.406156][T23986] dvb_usb_gl861 9-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 3338.427625][ T5102] usb 5-1: USB disconnect, device number 15 [ 3338.436314][T23986] usb 9-1: USB disconnect, device number 80 [ 3338.938789][ T5102] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 3339.089040][T23976] usb 10-1: new high-speed USB device number 104 using dummy_hcd [ 3339.090232][ T5102] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 3339.095929][ T5102] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3339.095979][ T5102] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3339.144470][ T5102] usb 5-1: config 0 descriptor?? [ 3339.290334][T23976] usb 10-1: Using ep0 maxpacket: 8 [ 3339.385665][T23976] usb 10-1: unable to get BOS descriptor or descriptor too short [ 3339.385754][T23976] usb 10-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 1.40 [ 3339.417446][T23976] usb 10-1: config 1 has an invalid descriptor of length 145, skipping remainder of the config [ 3339.417491][T23976] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3339.464801][T23976] usb 10-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 3339.464870][T23976] usb 10-1: Manufacturer: syz [ 3339.638052][T12244] netlink: 'syz.4.11423': attribute type 1 has an invalid length. [ 3340.139885][ T5102] aiptek 5-1:0.0: Aiptek using 400 ms programming speed [ 3340.157312][ T5102] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input385 [ 3341.808280][ T5102] usb 5-1: USB disconnect, device number 16 [ 3341.808358][ C0] aiptek 5-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 3342.078412][T12272] netlink: 'syz.8.11430': attribute type 29 has an invalid length. [ 3342.089926][T12272] netlink: 'syz.8.11430': attribute type 29 has an invalid length. [ 3342.106764][T12272] netlink: 'syz.8.11430': attribute type 29 has an invalid length. [ 3342.598617][ T5102] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 3342.683007][T23976] usb 10-1: 0:1 : does not exist [ 3342.749614][ T5102] usb 5-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 3342.756907][ T5102] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 3342.756932][ T5102] usb 5-1: Product: syz [ 3342.797627][ T5102] usb 5-1: config 0 descriptor?? [ 3342.824432][T23976] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 3342.838451][ T5102] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 3342.849810][ T5102] usb 5-1: Detected FT232H [ 3342.874791][T23976] usb 10-1: USB disconnect, device number 104 [ 3343.043697][T11301] udevd[11301]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3343.044726][ T5102] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 3343.045734][ T5102] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 3343.047979][ T5102] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 3343.092988][ T5102] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 3343.110696][ T5102] usb 5-1: USB disconnect, device number 17 [ 3343.167383][ T5102] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 3343.184820][ T5102] ftdi_sio 5-1:0.0: device disconnected [ 3343.758996][ T5102] usb 9-1: new high-speed USB device number 81 using dummy_hcd [ 3343.930092][ T5102] usb 9-1: Using ep0 maxpacket: 8 [ 3343.946390][ T5102] usb 9-1: unable to get BOS descriptor or descriptor too short [ 3343.946433][ T5102] usb 9-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 1.40 [ 3343.948271][ T5102] usb 9-1: config 1 has an invalid descriptor of length 145, skipping remainder of the config [ 3343.948297][ T5102] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3344.000260][ T2374] usb 10-1: new high-speed USB device number 105 using dummy_hcd [ 3344.004319][ T5102] usb 9-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 3344.004341][ T5102] usb 9-1: Manufacturer: syz [ 3344.044707][T12291] netlink: 'syz.4.11438': attribute type 1 has an invalid length. [ 3344.161577][ T2374] usb 10-1: Using ep0 maxpacket: 8 [ 3344.193078][ T2374] usb 10-1: unable to get BOS descriptor or descriptor too short [ 3344.193154][ T2374] usb 10-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 1.40 [ 3344.201181][ T2374] usb 10-1: config 1 has an invalid descriptor of length 145, skipping remainder of the config [ 3344.201204][ T2374] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3344.245534][ T2374] usb 10-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 3344.245575][ T2374] usb 10-1: Manufacturer: syz [ 3344.315540][T12291] 8021q: adding VLAN 0 to HW filter on device bond3 [ 3344.347886][ T5102] usb 9-1: 0:1 : does not exist [ 3344.667488][ T2374] usb 10-1: 0:1 : does not exist [ 3344.677677][ T5102] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 3344.713151][ T5102] usb 9-1: USB disconnect, device number 81 [ 3344.930012][T11301] udevd[11301]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3345.021175][ T2374] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 3345.049732][ T2374] usb 10-1: USB disconnect, device number 105 [ 3345.244650][T11301] udevd[11301]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3346.104765][ T31] audit: type=1326 audit(1790041761.875:23717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12298 comm="syz.2.11440" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2037b9e159 code=0x0 [ 3347.261522][T12306] netlink: 'syz.2.11442': attribute type 1 has an invalid length. [ 3347.318837][T12315] netlink: 'syz.6.11444': attribute type 1 has an invalid length. [ 3347.692141][T12306] 8021q: adding VLAN 0 to HW filter on device bond3 [ 3347.788915][ T2374] usb 9-1: new high-speed USB device number 82 using dummy_hcd [ 3347.869706][T12315] 8021q: adding VLAN 0 to HW filter on device bond2 [ 3347.952733][ T2374] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3347.955197][ T2374] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3347.955239][ T2374] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3347.989991][T12317] bond3: (slave geneve2): making interface the new active one [ 3347.991300][ T2374] usb 9-1: config 0 descriptor?? [ 3348.028188][T12317] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 3348.250581][ T2374] usbhid 9-1:0.0: can't add hid device: -71 [ 3348.250676][ T2374] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 3348.258645][ T2374] usb 9-1: USB disconnect, device number 82 [ 3348.578639][T23986] usb 10-1: new high-speed USB device number 106 using dummy_hcd [ 3348.740696][T23986] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3348.742367][T23986] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3348.742408][T23986] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3348.781088][ T2374] usb 9-1: new high-speed USB device number 83 using dummy_hcd [ 3348.781860][T23986] usb 10-1: config 0 descriptor?? [ 3348.888144][T12336] netlink: 60 bytes leftover after parsing attributes in process `syz.4.11448'. [ 3348.906527][T12336] IPVS: Error connecting to the multicast addr [ 3348.918725][T12337] IPVS: Error connecting to the multicast addr [ 3348.940509][ T2374] usb 9-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 3348.942902][ T2374] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3348.942964][ T2374] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3348.984497][ T2374] usb 9-1: config 0 descriptor?? [ 3349.011530][T23986] usbhid 10-1:0.0: can't add hid device: -71 [ 3349.011646][T23986] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 3349.034109][T23986] usb 10-1: USB disconnect, device number 106 [ 3349.429641][T12314] netlink: 'syz.8.11445': attribute type 1 has an invalid length. [ 3349.488692][T23986] usb 10-1: new high-speed USB device number 107 using dummy_hcd [ 3349.656916][T23986] usb 10-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 3349.658064][T23986] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3349.658115][T23986] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3349.737579][T23986] usb 10-1: config 0 descriptor?? [ 3349.837201][ T31] audit: type=1326 audit(1790041765.605:23718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12342 comm="syz.2.11452" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2037b9e159 code=0x0 [ 3349.838660][ T5102] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 3349.910816][ T2374] aiptek 9-1:0.0: Aiptek using 400 ms programming speed [ 3349.941406][ T2374] input: Aiptek as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input386 [ 3350.005685][ T31] audit: type=1326 audit(1790041765.775:23719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12344 comm="syz.6.11451" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc3d3b9e159 code=0x0 [ 3350.032918][ T5102] usb 5-1: Using ep0 maxpacket: 8 [ 3350.073331][ T5102] usb 5-1: unable to get BOS descriptor or descriptor too short [ 3350.073861][ T5102] usb 5-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 1.40 [ 3350.102230][ T5102] usb 5-1: config 1 has an invalid descriptor of length 145, skipping remainder of the config [ 3350.102254][ T5102] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3350.143891][ T5102] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 3350.143915][ T5102] usb 5-1: Manufacturer: syz [ 3350.319257][T12326] netlink: 'syz.9.11447': attribute type 1 has an invalid length. [ 3350.518115][ T5102] usb 5-1: 0:1 : does not exist [ 3350.623811][ T5102] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 3350.640583][ T5102] usb 5-1: USB disconnect, device number 18 [ 3350.695159][T11301] udevd[11301]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3350.811437][T23986] aiptek 10-1:0.0: Aiptek using 400 ms programming speed [ 3350.836683][T23986] input: Aiptek as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input387 [ 3350.974617][ T31] audit: type=1326 audit(1790041766.745:23720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12351 comm="syz.2.11453" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2037b9e159 code=0x0 [ 3351.214933][T23976] usb 9-1: USB disconnect, device number 83 [ 3351.215073][ C0] aiptek 9-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 3352.361748][T23986] usb 10-1: USB disconnect, device number 107 [ 3352.361829][ C0] aiptek 10-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 3352.602061][T12371] netlink: 'syz.8.11458': attribute type 1 has an invalid length. [ 3352.819873][T12371] 8021q: adding VLAN 0 to HW filter on device bond2 [ 3353.644794][T12385] x_tables: duplicate underflow at hook 4 [ 3353.707597][ T31] audit: type=1326 audit(1790041769.475:23721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12383 comm="syz.9.11464" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7d4ed9e159 code=0x0 [ 3354.956682][ T31] audit: type=1326 audit(1790041770.725:23722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12402 comm="syz.6.11470" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc3d3b9e159 code=0x0 [ 3355.645861][T12426] netlink: 'syz.2.11475': attribute type 1 has an invalid length. [ 3355.853984][T23986] usb 9-1: new high-speed USB device number 84 using dummy_hcd [ 3355.894386][T12426] 8021q: adding VLAN 0 to HW filter on device bond4 [ 3356.019804][T23986] usb 9-1: Using ep0 maxpacket: 32 [ 3356.020620][T23986] usb 9-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e [ 3356.021713][T23986] usb 9-1: config 0 interface 0 has no altsetting 0 [ 3356.021747][T23986] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3356.062524][T23986] usb 9-1: config 0 descriptor?? [ 3356.077515][T23986] usb 9-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state [ 3356.096855][T23986] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 3356.114203][T23986] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+) [ 3356.114271][T23986] usb 9-1: media controller created [ 3356.178025][T23986] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3356.266801][T23986] usb 9-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 3356.266820][T23986] error writing reg: 0xff, val: 0x00 [ 3356.437462][T23986] dvb_usb_mxl111sf 9-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 3357.594771][T23986] usb 9-1: USB disconnect, device number 84 [ 3358.687478][T12474] netlink: 20 bytes leftover after parsing attributes in process `syz.6.11490'. [ 3358.687512][T12474] netlink: 'syz.6.11490': attribute type 9 has an invalid length. [ 3359.363401][T12495] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 3359.698608][T23986] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 3359.749485][ T5102] usb 10-1: new high-speed USB device number 108 using dummy_hcd [ 3359.848927][T23986] usb 5-1: Using ep0 maxpacket: 16 [ 3359.849749][T23986] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 3359.853633][T23986] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3359.853658][T23986] usb 5-1: Product: syz [ 3359.853673][T23986] usb 5-1: Manufacturer: syz [ 3359.853688][T23986] usb 5-1: SerialNumber: syz [ 3359.918734][ T5102] usb 10-1: Using ep0 maxpacket: 32 [ 3359.919603][ T5102] usb 10-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e [ 3359.921241][ T5102] usb 10-1: config 0 interface 0 has no altsetting 0 [ 3359.921276][ T5102] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3359.925015][ T5102] usb 10-1: config 0 descriptor?? [ 3359.968781][ T5102] usb 10-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state [ 3359.977827][ T5102] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 3359.978395][ T5102] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+) [ 3360.006626][ T5102] usb 10-1: media controller created [ 3360.032505][ T5102] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3360.104729][T23986] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 3360.108098][T23986] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 3360.130765][T23986] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 3360.130833][T23986] usb 5-1: media controller created [ 3360.155453][ T5102] usb 10-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 3360.155473][ T5102] error writing reg: 0xff, val: 0x00 [ 3360.173961][T23986] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3360.231385][ T5102] dvb_usb_mxl111sf 10-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 3360.259825][T12507] netlink: 16 bytes leftover after parsing attributes in process `syz.8.11504'. [ 3360.259847][T12507] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 3360.304585][T23986] zl10353_read_register: readreg error (reg=127, ret==-32) [ 3360.407949][T23986] dvb_usb_gl861 5-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 3360.423289][T23986] usb 5-1: USB disconnect, device number 19 [ 3361.127141][T23986] usb 10-1: USB disconnect, device number 108 [ 3362.834858][ T31] audit: type=1326 audit(1790041778.605:23723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12564 comm="syz.8.11525" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0705b9e159 code=0x7ffc0000 [ 3362.834914][ T31] audit: type=1326 audit(1790041778.605:23724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12564 comm="syz.8.11525" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0705b9e159 code=0x7ffc0000 [ 3362.891581][ T31] audit: type=1326 audit(1790041778.655:23725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12564 comm="syz.8.11525" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0705b9e159 code=0x7ffc0000 [ 3362.891650][ T31] audit: type=1326 audit(1790041778.655:23726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12564 comm="syz.8.11525" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0705b9e159 code=0x7ffc0000 [ 3362.904039][ T31] audit: type=1326 audit(1790041778.655:23727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12564 comm="syz.8.11525" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0705b5e98e code=0x7ffc0000 [ 3362.904203][ T31] audit: type=1326 audit(1790041778.655:23728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12564 comm="syz.8.11525" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0705b9e159 code=0x7ffc0000 [ 3362.904300][ T31] audit: type=1326 audit(1790041778.655:23729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12564 comm="syz.8.11525" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0705b9e159 code=0x7ffc0000 [ 3362.904394][ T31] audit: type=1326 audit(1790041778.655:23730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12564 comm="syz.8.11525" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0705b9e159 code=0x7ffc0000 [ 3362.906557][ T31] audit: type=1326 audit(1790041778.675:23731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12564 comm="syz.8.11525" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0705b5e98e code=0x7ffc0000 [ 3362.906677][ T31] audit: type=1326 audit(1790041778.675:23732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12564 comm="syz.8.11525" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0705b9e159 code=0x7ffc0000 [ 3363.339316][T12574] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11530'. [ 3364.113300][T12595] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 3365.143293][T12630] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 3365.548669][T12642] IPVS: mh: TCP 127.0.0.1:21 - no destination available [ 3365.703142][T12647] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 3366.625665][T12668] syzkaller0: entered promiscuous mode [ 3366.625706][T12668] syzkaller0: entered allmulticast mode [ 3366.643654][T12668] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11567'. [ 3366.660012][T12668] tipc: Enabled bearer , priority 0 [ 3366.661506][T12667] tipc: Resetting bearer [ 3366.711821][T12667] tipc: Disabling bearer [ 3367.439340][T12683] netlink: 128 bytes leftover after parsing attributes in process `syz.6.11572'. [ 3367.838913][ T31] kauditd_printk_skb: 444 callbacks suppressed [ 3367.838931][ T31] audit: type=1326 audit(1790041783.615:24177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12673 comm="syz.4.11571" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa2e595e98e code=0x7ffc0000 [ 3367.880926][ T31] audit: type=1326 audit(1790041783.655:24178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12673 comm="syz.4.11571" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa2e595e98e code=0x7ffc0000 [ 3367.895711][ T31] audit: type=1326 audit(1790041783.665:24179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12673 comm="syz.4.11571" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa2e595e98e code=0x7ffc0000 [ 3367.939085][ T31] audit: type=1326 audit(1790041783.705:24180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12673 comm="syz.4.11571" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa2e595e98e code=0x7ffc0000 [ 3367.972888][ T31] audit: type=1326 audit(1790041783.735:24181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12673 comm="syz.4.11571" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa2e595e98e code=0x7ffc0000 [ 3367.985499][ T31] audit: type=1326 audit(1790041783.755:24182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12673 comm="syz.4.11571" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa2e595e98e code=0x7ffc0000 [ 3367.998449][ T31] audit: type=1326 audit(1790041783.765:24183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12673 comm="syz.4.11571" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa2e595e98e code=0x7ffc0000 [ 3368.027514][ T31] audit: type=1326 audit(1790041783.785:24184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12673 comm="syz.4.11571" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa2e599e159 code=0x7ffc0000 [ 3368.074897][ T31] audit: type=1326 audit(1790041783.845:24185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12673 comm="syz.4.11571" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa2e599e159 code=0x7ffc0000 [ 3368.670507][T12701] tipc: Resetting bearer [ 3368.726476][T12701] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 3368.860872][ T31] audit: type=1326 audit(1790041784.635:24186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12705 comm="syz.9.11580" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7d4ed9e159 code=0x0 [ 3369.327207][T12721] tipc: Enabling of bearer rejected, already enabled [ 3369.406913][T12724] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 3369.561604][T12731] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11590'. [ 3369.609808][T12729] syz_tun: entered allmulticast mode [ 3370.584647][T12757] tipc: Enabling of bearer rejected, already enabled [ 3371.232559][T12779] netlink: 'syz.8.11609': attribute type 5 has an invalid length. [ 3371.862290][T12794] tipc: Enabling of bearer rejected, already enabled [ 3372.678022][T12809] netlink: 'syz.2.11621': attribute type 5 has an invalid length. [ 3372.801709][T12811] tipc: Resetting bearer [ 3372.933179][T12811] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 3373.440633][T12824] tipc: Enabling of bearer rejected, already enabled [ 3373.993517][T12844] netlink: 'syz.8.11636': attribute type 5 has an invalid length. [ 3374.414679][ T4899] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 3374.417989][ T4899] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 3374.433509][ T4899] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 3374.435142][ T4899] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 3374.436581][ T4899] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 3374.469946][T15221] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 3374.470303][T15221] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 3374.470585][T15221] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 3374.480484][T15221] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 3374.492638][T15221] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 3374.701984][ T5455] syz_tun (unregistering): left allmulticast mode [ 3374.702635][ T5455] tipc: Disabling bearer [ 3375.026421][ T38] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3375.221370][T12866] tipc: Enabling of bearer rejected, already enabled [ 3375.387696][ T38] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3375.467655][T12871] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 3375.634962][ T38] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3376.023359][ T38] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3376.181739][T12852] bridge0: port 1(bridge_slave_0) entered blocking state [ 3376.181901][T12852] bridge0: port 1(bridge_slave_0) entered disabled state [ 3376.182033][T12852] bridge_slave_0: entered allmulticast mode [ 3376.184216][T12852] bridge_slave_0: entered promiscuous mode [ 3376.219402][T12852] bridge0: port 2(bridge_slave_1) entered blocking state [ 3376.219565][T12852] bridge0: port 2(bridge_slave_1) entered disabled state [ 3376.219703][T12852] bridge_slave_1: entered allmulticast mode [ 3376.221562][T12852] bridge_slave_1: entered promiscuous mode [ 3376.316309][T12852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3376.329854][T12852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3376.370172][T12852] team0: Port device team_slave_0 added [ 3376.373011][T12852] team0: Port device team_slave_1 added [ 3376.422696][T12852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3376.422714][T12852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3376.422742][T12852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3376.424935][T12852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3376.424948][T12852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3376.424973][T12852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3376.542525][ T4899] Bluetooth: hci1: command tx timeout [ 3377.066978][T12902] tipc: Resetting bearer [ 3377.113609][T12902] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 3377.142024][T12852] hsr_slave_0: entered promiscuous mode [ 3377.143049][T12852] hsr_slave_1: entered promiscuous mode [ 3377.143722][T12852] debugfs: 'hsr0' already exists in 'hsr' [ 3377.143741][T12852] Cannot create hsr debugfs directory [ 3377.325654][ T31] audit: type=1326 audit(1790041793.095:24187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12910 comm="syz.6.11661" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d3b9e159 code=0x7ffc0000 [ 3377.326654][ T31] audit: type=1326 audit(1790041793.095:24188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12910 comm="syz.6.11661" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d3b9e159 code=0x7ffc0000 [ 3377.331530][ T31] audit: type=1326 audit(1790041793.095:24189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12910 comm="syz.6.11661" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d3b9e159 code=0x7ffc0000 [ 3377.407850][ T31] audit: type=1326 audit(1790041793.175:24190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12910 comm="syz.6.11661" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d3b9e159 code=0x7ffc0000 [ 3377.408023][ T31] audit: type=1326 audit(1790041793.175:24191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12910 comm="syz.6.11661" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc3d3b5e98e code=0x7ffc0000 [ 3377.410078][ T31] audit: type=1326 audit(1790041793.175:24192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12910 comm="syz.6.11661" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d3b9e159 code=0x7ffc0000 [ 3377.413113][ T31] audit: type=1326 audit(1790041793.175:24193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12910 comm="syz.6.11661" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d3b9e159 code=0x7ffc0000 [ 3377.413160][ T31] audit: type=1326 audit(1790041793.175:24194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12910 comm="syz.6.11661" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d3b9e159 code=0x7ffc0000 [ 3377.413203][ T31] audit: type=1326 audit(1790041793.175:24195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12910 comm="syz.6.11661" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d3b9e159 code=0x7ffc0000 [ 3377.413247][ T31] audit: type=1326 audit(1790041793.175:24196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12910 comm="syz.6.11661" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc3d3b5e98e code=0x7ffc0000 [ 3377.610656][T12904] bridge0: port 1(macvlan2) entered blocking state [ 3377.610833][T12904] bridge0: port 1(macvlan2) entered disabled state [ 3377.610990][T12904] macvlan2: entered allmulticast mode [ 3377.611015][T12904] ip6gretap0: entered allmulticast mode [ 3377.612909][T12904] macvlan2: entered promiscuous mode [ 3377.643615][T12904] bridge0: port 1(macvlan2) entered blocking state [ 3377.643723][T12904] bridge0: port 1(macvlan2) entered forwarding state [ 3377.787290][T12916] tipc: Resetting bearer [ 3377.809191][T12916] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 3377.905381][T12914] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 3377.905435][T12914] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 3378.402224][ T38] bond1 (unregistering): (slave geneve2): Releasing active interface [ 3378.495085][ T38] bond0 (unregistering): Released all slaves [ 3378.524353][ T38] bond1 (unregistering): Released all slaves [ 3378.556074][ T38] bond2 (unregistering): Released all slaves [ 3378.635975][T12925] bridge0: port 2(macvlan2) entered blocking state [ 3378.636150][T12925] bridge0: port 2(macvlan2) entered disabled state [ 3378.636278][T12925] macvlan2: entered allmulticast mode [ 3378.636294][T12925] ip6gretap0: entered allmulticast mode [ 3378.638156][T12925] macvlan2: entered promiscuous mode [ 3378.674561][T12925] bridge0: port 2(macvlan2) entered blocking state [ 3378.674667][T12925] bridge0: port 2(macvlan2) entered forwarding state [ 3378.694386][ T5101] bridge0: port 2(macvlan2) entered disabled state [ 3378.735021][ T38] tipc: Left network mode [ 3378.953321][ T38] hsr_slave_0: left promiscuous mode [ 3378.955344][ T38] hsr_slave_1: left promiscuous mode [ 3379.040887][T12944] fuse: Bad value for 'fd' [ 3380.232761][ T38] IPVS: stop unused estimator thread 0... [ 3380.387577][T12973] fuse: Bad value for 'fd' [ 3380.949774][T12852] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 3380.972076][T12852] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 3380.973723][T12852] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 3381.004285][T12852] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 3381.006416][T12852] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 3381.067263][T12852] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 3381.194175][T12992] bridge0: port 1(macvlan3) entered blocking state [ 3381.195047][T12992] bridge0: port 1(macvlan3) entered disabled state [ 3381.195382][T12992] macvlan3: entered allmulticast mode [ 3381.195417][T12992] ip6gretap0: entered allmulticast mode [ 3381.215301][T12992] macvlan3: entered promiscuous mode [ 3381.236613][T12992] bridge0: port 1(macvlan3) entered blocking state [ 3381.236800][T12992] bridge0: port 1(macvlan3) entered forwarding state [ 3381.265147][T12852] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 3381.342503][T12852] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 3381.753432][T12852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3381.812917][T13014] fuse: Bad value for 'fd' [ 3381.965638][T12852] 8021q: adding VLAN 0 to HW filter on device team0 [ 3382.043765][T12019] bridge0: port 1(bridge_slave_0) entered blocking state [ 3382.043872][T12019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3382.138101][T12011] bridge0: port 2(bridge_slave_1) entered blocking state [ 3382.138185][T12011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3382.625349][T12852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3382.777400][T12852] veth0_vlan: entered promiscuous mode [ 3382.812823][T12852] veth1_vlan: entered promiscuous mode [ 3382.901158][T12852] veth0_macvtap: entered promiscuous mode [ 3382.905976][T12852] veth1_macvtap: entered promiscuous mode [ 3382.960858][T12852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3383.010570][T12852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3383.012450][T13047] fuse: Invalid rootmode [ 3383.070131][ T1657] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3383.070262][ T1657] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3383.070298][ T1657] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3383.070331][ T1657] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3383.406313][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3383.406367][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3383.564943][ T5101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3383.565100][ T5101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3383.651383][T13058] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11706'. [ 3383.684354][T13058] tipc: Enabling of bearer rejected, failed to enable media [ 3383.972782][T13070] tipc: Resetting bearer [ 3384.080305][T13070] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 3384.105703][T13078] fuse: Invalid rootmode [ 3384.766581][T13093] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 3385.260699][T13111] fuse: Invalid rootmode [ 3386.185741][T13142] fuse: Bad value for 'rootmode' [ 3386.217293][T15221] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 3386.242207][T15221] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 3386.259077][T15221] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 3386.264227][T15221] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 3386.265917][T15221] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 3386.737912][ T5142] tipc: Resetting bearer [ 3386.790475][ T5142] syz_tun (unregistering): left allmulticast mode [ 3386.791265][ T5142] tipc: Disabling bearer [ 3387.357448][ T147] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3387.884833][ T147] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3388.175483][ T147] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3388.378144][T13191] bridge0: port 3(macvlan2) entered blocking state [ 3388.378439][T13191] bridge0: port 3(macvlan2) entered disabled state [ 3388.378730][T15221] Bluetooth: hci5: command tx timeout [ 3388.380716][T13191] macvlan2: entered allmulticast mode [ 3388.380763][T13191] ip6gretap0: entered allmulticast mode [ 3388.385377][T13191] macvlan2: entered promiscuous mode [ 3388.386836][T13191] bridge0: port 3(macvlan2) entered blocking state [ 3388.387049][T13191] bridge0: port 3(macvlan2) entered forwarding state [ 3388.755523][ T147] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3388.895988][T13199] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 3388.943925][T13206] syz_tun: entered allmulticast mode [ 3389.031941][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 3389.031993][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 3389.050881][T13146] bridge0: port 1(bridge_slave_0) entered blocking state [ 3389.050984][T13146] bridge0: port 1(bridge_slave_0) entered disabled state [ 3389.051110][T13146] bridge_slave_0: entered allmulticast mode [ 3389.052764][T13146] bridge_slave_0: entered promiscuous mode [ 3389.123623][ T31] kauditd_printk_skb: 491 callbacks suppressed [ 3389.123639][ T31] audit: type=1326 audit(1790041804.895:24688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13212 comm="syz.9.11761" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4ed9e159 code=0x7ffc0000 [ 3389.124140][ T31] audit: type=1326 audit(1790041804.895:24689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13212 comm="syz.9.11761" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4ed9e159 code=0x7ffc0000 [ 3389.159723][ T31] audit: type=1326 audit(1790041804.905:24690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13212 comm="syz.9.11761" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4ed9e159 code=0x7ffc0000 [ 3389.162873][ T31] audit: type=1326 audit(1790041804.925:24691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13212 comm="syz.9.11761" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7d4ed5e98e code=0x7ffc0000 [ 3389.162917][ T31] audit: type=1326 audit(1790041804.925:24692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13212 comm="syz.9.11761" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4ed9e159 code=0x7ffc0000 [ 3389.162957][ T31] audit: type=1326 audit(1790041804.925:24693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13212 comm="syz.9.11761" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4ed9e159 code=0x7ffc0000 [ 3389.181053][ T31] audit: type=1326 audit(1790041804.935:24694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13212 comm="syz.9.11761" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4ed9e159 code=0x7ffc0000 [ 3389.181190][ T31] audit: type=1326 audit(1790041804.935:24695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13212 comm="syz.9.11761" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4ed9e159 code=0x7ffc0000 [ 3389.181312][ T31] audit: type=1326 audit(1790041804.935:24696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13212 comm="syz.9.11761" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7d4ed5e98e code=0x7ffc0000 [ 3389.181411][ T31] audit: type=1326 audit(1790041804.935:24697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13212 comm="syz.9.11761" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4ed9e159 code=0x7ffc0000 [ 3389.428019][T13146] bridge0: port 2(bridge_slave_1) entered blocking state [ 3389.428211][T13146] bridge0: port 2(bridge_slave_1) entered disabled state [ 3389.428345][T13146] bridge_slave_1: entered allmulticast mode [ 3389.452188][T13146] bridge_slave_1: entered promiscuous mode [ 3389.585208][T13146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3389.613250][T13219] netlink: 12 bytes leftover after parsing attributes in process `syz.8.11763'. [ 3389.629559][T13146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3389.706435][T13220] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 3389.706456][T13220] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 3389.827807][ T147] macvlan2: left allmulticast mode [ 3389.827822][ T147] ip6gretap0: left allmulticast mode [ 3389.842561][ T147] macvlan2: left promiscuous mode [ 3389.842896][ T147] bridge0: port 2(macvlan2) entered disabled state [ 3389.870963][ T147] vlan2: left allmulticast mode [ 3389.870976][ T147] bridge_slave_0: left allmulticast mode [ 3389.871002][ T147] vlan2: left promiscuous mode [ 3389.871010][ T147] bridge_slave_0: left promiscuous mode [ 3389.871392][ T147] bridge0: port 1(vlan2) entered disabled state [ 3390.473289][T13243] netlink: Conntrack attr type has unexpected length (type=0, length=8, expected=0) [ 3390.473327][T13243] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 3390.533733][ T147] bond2 (unregistering): (slave geneve2): Releasing active interface [ 3390.712390][ T147] bond0 (unregistering): Released all slaves [ 3390.717700][ T147] bond1 (unregistering): Released all slaves [ 3390.757313][ T147] bond2 (unregistering): Released all slaves [ 3390.787999][ T147] bond3 (unregistering): Released all slaves [ 3390.909100][T13146] team0: Port device team_slave_0 added [ 3390.910084][ T5281] 8021q: adding VLAN 0 to HW filter on device eth17 [ 3390.917094][T13146] team0: Port device team_slave_1 added [ 3391.008750][T13252] syzkaller0: entered promiscuous mode [ 3391.008779][T13252] syzkaller0: entered allmulticast mode [ 3391.022846][ T147] tipc: Left network mode [ 3391.102173][T13253] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11768'. [ 3391.103864][T13146] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3391.103879][T13146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3391.103907][T13146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3391.191789][T13248] tipc: Enabled bearer , priority 0 [ 3391.202868][T13146] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3391.202901][T13146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3391.217605][T13146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3391.257780][T13247] tipc: Resetting bearer [ 3391.433136][T13247] tipc: Disabling bearer [ 3391.551435][ T147] hsr_slave_0: left promiscuous mode [ 3391.557969][ T147] hsr_slave_1: left promiscuous mode [ 3391.594578][ T147] veth1_macvtap: left promiscuous mode [ 3391.594611][ T147] veth0_macvtap: left promiscuous mode [ 3391.594707][ T147] veth1_vlan: left promiscuous mode [ 3391.594770][ T147] veth0_vlan: left promiscuous mode [ 3392.565689][ T5281] 8021q: adding VLAN 0 to HW filter on device eth18 [ 3392.638063][T13146] hsr_slave_0: entered promiscuous mode [ 3392.645102][T13146] hsr_slave_1: entered promiscuous mode [ 3392.731071][T13288] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 3392.853321][T13294] netlink: 24 bytes leftover after parsing attributes in process `syz.8.11779'. [ 3393.520971][ T147] IPVS: stop unused estimator thread 0... [ 3393.812746][T13309] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 3393.817052][T13313] syzkaller0: entered promiscuous mode [ 3393.817073][T13313] syzkaller0: entered allmulticast mode [ 3393.867007][T13309] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11783'. [ 3393.873342][T13309] tipc: Started in network mode [ 3393.873406][T13309] tipc: Node identity f22ffcc4eec9, cluster identity 4711 [ 3393.898885][T13309] tipc: Enabled bearer , priority 0 [ 3393.905073][T13306] tipc: Resetting bearer [ 3394.042113][T13306] tipc: Disabling bearer [ 3394.146737][T12206] cxacru 3-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 3396.127042][T13146] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 3396.179938][T13146] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 3396.182865][T13146] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 3396.221795][T13146] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 3396.222667][T13146] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 3396.270234][T13146] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 3396.274356][T13146] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 3396.322805][T13146] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 3396.792827][T13146] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3396.898315][T13146] 8021q: adding VLAN 0 to HW filter on device team0 [ 3396.952629][T12019] bridge0: port 1(bridge_slave_0) entered blocking state [ 3396.952726][T12019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3396.993924][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 3396.994037][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3397.277576][T13146] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3397.482897][T13146] veth0_vlan: entered promiscuous mode [ 3397.523592][T13146] veth1_vlan: entered promiscuous mode [ 3397.687542][T13146] veth0_macvtap: entered promiscuous mode [ 3397.721028][T13146] veth1_macvtap: entered promiscuous mode [ 3397.832257][T13146] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3397.889250][T13146] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3398.003838][ T1657] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3398.077662][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3398.082280][ T1657] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3398.136639][ T38] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3398.437237][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3398.437258][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3398.617152][T23334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3398.617205][T23334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3400.257225][T13459] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 0, 8) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 3400.840811][T13474] syzkaller0: entered promiscuous mode [ 3400.840851][T13474] syzkaller0: entered allmulticast mode [ 3400.872516][T13478] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 3402.213707][T13507] ip_tables: iptables: counters copy to user failed while replacing table [ 3403.044507][T13534] syz_tun: entered allmulticast mode [ 3403.537765][T13549] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 0, 8) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 3403.653897][T13553] netlink: 352 bytes leftover after parsing attributes in process `syz.4.11856'. [ 3403.862375][T13560] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 0, 8) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 3404.173548][ T31] kauditd_printk_skb: 202 callbacks suppressed [ 3404.173568][ T31] audit: type=1326 audit(1790041819.945:24900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13572 comm="syz.6.11864" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc3d3b9e159 code=0x0 [ 3404.759508][T13593] trusted_key: encrypted_key: insufficient parameters specified [ 3405.225578][T13597] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 3405.511768][T13603] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 3407.461928][ T31] audit: type=1326 audit(1790041823.235:24901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13631 comm="syz.4.11883" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fba60b9e159 code=0x0 [ 3408.265757][T13649] syzkaller0: entered promiscuous mode [ 3408.265780][T13649] syzkaller0: entered allmulticast mode [ 3408.279999][T13649] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11891'. [ 3408.318347][T13649] tipc: Enabling of bearer rejected, failed to enable media [ 3408.619877][T13653] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11894'. [ 3408.619961][T13653] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11894'. [ 3408.654337][T13653] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11894'. [ 3408.832751][T13663] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 0, 8) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 3409.358586][ T5102] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 3409.413899][T13672] netlink: 20 bytes leftover after parsing attributes in process `syz.9.11900'. [ 3409.413934][T13672] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11900'. [ 3409.413962][T13672] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11900'. [ 3409.540317][ T5102] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 3409.547493][ T5102] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3409.547516][ T5102] usb 3-1: Product: syz [ 3409.547531][ T5102] usb 3-1: Manufacturer: syz [ 3409.547544][ T5102] usb 3-1: SerialNumber: syz [ 3409.817790][ T5102] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 3409.817855][ T5102] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 3409.817879][ T5102] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 3409.860238][ T5102] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 3409.938618][ T2374] usb 9-1: new high-speed USB device number 85 using dummy_hcd [ 3410.088891][ T2374] usb 9-1: Using ep0 maxpacket: 32 [ 3410.089575][ T2374] usb 9-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e [ 3410.091649][ T2374] usb 9-1: config 0 interface 0 has no altsetting 0 [ 3410.091686][ T2374] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3410.096780][ T2374] usb 9-1: config 0 descriptor?? [ 3410.142203][ T2374] usb 9-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state [ 3410.170484][ T2374] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 3410.170919][ T2374] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+) [ 3410.170965][ T2374] usb 9-1: media controller created [ 3410.234041][ T2374] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3410.353424][ T2374] usb 9-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 3410.353446][ T2374] error writing reg: 0xff, val: 0x00 [ 3410.454502][ T2374] dvb_usb_mxl111sf 9-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 3410.903065][T13701] tipc: Started in network mode [ 3410.903130][T13701] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 3410.903391][T13701] tipc: Enabled bearer , priority 0 [ 3410.995483][ T2374] usb 9-1: USB disconnect, device number 85 [ 3411.571884][T13712] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 3412.093953][T23976] tipc: Node number set to 43690 [ 3412.330432][T13723] tipc: Enabling of bearer rejected, already enabled [ 3412.737891][ T5102] usb 3-1: USB disconnect, device number 43 [ 3413.496486][T13748] netlink: 12 bytes leftover after parsing attributes in process `syz.8.11928'. [ 3413.509211][T23976] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 3413.712009][T23976] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 3413.764279][T23976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3413.764320][T23976] usb 3-1: Product: syz [ 3413.764353][T23976] usb 3-1: Manufacturer: syz [ 3413.764384][T23976] usb 3-1: SerialNumber: syz [ 3414.010812][T13763] netlink: 24 bytes leftover after parsing attributes in process `syz.8.11932'. [ 3414.046877][T23976] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 3414.047008][T23976] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 3414.047076][T23976] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 3414.059272][T23976] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 3415.018353][T13790] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 3416.293717][T13825] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11955'. [ 3416.338660][ T5104] usb 10-1: new high-speed USB device number 109 using dummy_hcd [ 3416.498594][ T5104] usb 10-1: Using ep0 maxpacket: 32 [ 3416.502957][ T5104] usb 10-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e [ 3416.506933][ T5104] usb 10-1: config 0 interface 0 has no altsetting 0 [ 3416.506990][ T5104] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3416.549774][ T5104] usb 10-1: config 0 descriptor?? [ 3416.564685][ T5104] usb 10-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state [ 3416.581314][ T5104] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 3416.582389][ T5104] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+) [ 3416.582434][ T5104] usb 10-1: media controller created [ 3416.625599][ T5104] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3416.766689][ T5104] usb 10-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 3416.766709][ T5104] error writing reg: 0xff, val: 0x00 [ 3416.855381][T23976] usb 3-1: USB disconnect, device number 44 [ 3416.945082][ T5104] dvb_usb_mxl111sf 10-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 3418.005830][T23976] usb 10-1: USB disconnect, device number 109 [ 3418.740881][T23976] usb 9-1: new high-speed USB device number 86 using dummy_hcd [ 3418.888666][T23976] usb 9-1: Using ep0 maxpacket: 32 [ 3418.889874][T23976] usb 9-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e [ 3418.894600][T23976] usb 9-1: config 0 interface 0 has no altsetting 0 [ 3418.894689][T23976] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3418.951614][T23976] usb 9-1: config 0 descriptor?? [ 3418.975757][T23976] usb 9-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state [ 3418.979986][T23976] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 3418.980350][T23976] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+) [ 3418.980391][T23976] usb 9-1: media controller created [ 3419.117783][T13868] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000018: 0000 [#1] SMP KASAN PTI [ 3419.129790][T13868] KASAN: null-ptr-deref in range [0x00000000000000c0-0x00000000000000c7] [ 3419.138227][T13868] CPU: 0 UID: 0 PID: 13868 Comm: syz.9.11971 Tainted: G L syzkaller #0 PREEMPT(full) [ 3419.149271][T13868] Tainted: [L]=SOFTLOCKUP [ 3419.153614][T13868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3419.163702][T13868] RIP: 0010:__mutex_lock+0x149/0x1550 [ 3419.169107][T13868] Code: c0 40 95 9e 9a 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 3f 12 00 00 83 3d e5 35 b7 0e 00 75 22 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <80> 3c 18 00 74 05 e8 ac 85 50 f6 4d 39 64 24 58 0f 85 52 11 00 00 [ 3419.188763][T13868] RSP: 0018:ffffc90004bdf460 EFLAGS: 00010206 [ 3419.194867][T13868] RAX: 0000000000000018 RBX: dffffc0000000000 RCX: ffffffff9a9e9503 [ 3419.202856][T13868] RDX: 0000000000000000 RSI: ffffffff8e69d504 RDI: 00000000000000c0 [ 3419.210846][T13868] RBP: ffffc90004bdf5f8 R08: ffffc90004bdf567 R09: 0000000000000000 [ 3419.218859][T13868] R10: ffffc90004bdf540 R11: fffff5200097bead R12: 0000000000000068 [ 3419.226852][T13868] R13: 0000000000000000 R14: 1ffff9200097bea0 R15: 0000000000000000 [ 3419.234838][T13868] FS: 00007f7d4fd086c0(0000) GS:ffff888124ccb000(0000) knlGS:0000000000000000 [ 3419.243831][T13868] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3419.250439][T13868] CR2: 0000200000001c00 CR3: 000000006ab5e000 CR4: 00000000003526f0 [ 3419.258449][T13868] Call Trace: [ 3419.261741][T13868] [ 3419.264686][T13868] ? __mutex_lock+0x30b/0x1550 [ 3419.269479][T13868] ? dvb_usbv2_generic_write+0x26/0x60 [ 3419.271964][T23976] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3419.283283][T13868] ? __mutex_trylock_common+0x15f/0x270 [ 3419.288861][T13868] ? __pfx___mutex_lock+0x10/0x10 [ 3419.293936][T13868] ? __pfx___mutex_lock+0x10/0x10 [ 3419.298989][T13868] ? trace_contention_end+0x3d/0x140 [ 3419.304306][T13868] ? __mutex_lock+0x30b/0x1550 [ 3419.309096][T13868] dvb_usbv2_generic_write+0x26/0x60 [ 3419.314413][T13868] mxl111sf_ctrl_msg+0x160/0x2f0 [ 3419.319426][T13868] mxl111sf_write_reg+0xa9/0x1b0 [ 3419.324384][T13868] ? __pfx_mxl111sf_write_reg+0x10/0x10 [ 3419.329962][T13868] mxl111sf_i2c_xfer+0x463/0x5060 [ 3419.335005][T13868] ? lock_acquire+0x115/0x350 [ 3419.339698][T13868] ? __pfx_mxl111sf_i2c_xfer+0x10/0x10 [ 3419.345171][T13868] ? is_bpf_text_address+0x26/0x2b0 [ 3419.350429][T13868] ? kernel_text_address+0xa5/0xe0 [ 3419.355552][T13868] ? __kernel_text_address+0xd/0x30 [ 3419.360772][T13868] ? unwind_get_return_address+0x4d/0x90 [ 3419.366428][T13868] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 3419.372604][T13868] ? arch_stack_walk+0xfb/0x150 [ 3419.377498][T13868] ? stack_trace_save+0xa9/0x100 [ 3419.382464][T13868] ? __pfx_stack_trace_save+0x10/0x10 [ 3419.387854][T13868] ? stack_depot_save_flags+0x33/0x7f0 [ 3419.393397][T13868] ? __pfx_stack_trace_save+0x10/0x10 [ 3419.398794][T13868] ? kasan_save_track+0x4f/0x80 [ 3419.403763][T13868] ? look_up_lock_class+0x57/0x110 [ 3419.408944][T13868] ? register_lock_class+0x31/0x2e0 [ 3419.414178][T13868] ? __lock_acquire+0x747/0x2de0 [ 3419.419158][T13868] ? do_raw_spin_lock+0x12b/0x2f0 [ 3419.424251][T13868] __i2c_transfer+0x7bf/0x1fe0 [ 3419.429039][T13868] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 3419.434875][T13868] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 3419.440701][T13868] ? rt_mutex_lock_nested+0x156/0x1c0 [ 3419.446134][T13868] ? i2c_transfer+0xc7/0x2d0 [ 3419.450764][T13868] i2c_transfer+0x1cb/0x2d0 [ 3419.455306][T13868] i2cdev_ioctl_rdwr+0x460/0x740 [ 3419.460272][T13868] i2cdev_ioctl+0x6a5/0x880 [ 3419.464793][T13868] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 3419.469862][T13868] ? __fget_files+0x3a2/0x420 [ 3419.474579][T13868] ? __fget_files+0x2a/0x420 [ 3419.479206][T13868] ? bpf_lsm_file_ioctl+0x9/0x20 [ 3419.484202][T13868] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 3419.489265][T13868] __se_sys_ioctl+0xfc/0x170 [ 3419.493883][T13868] do_syscall_64+0x166/0x520 [ 3419.498521][T13868] ? trace_irq_disable+0x3b/0x140 [ 3419.503569][T13868] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3419.509705][T13868] ? clear_bhb_loop+0x70/0xc0 [ 3419.514414][T13868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3419.520327][T13868] RIP: 0033:0x7f7d4ed9e159 [ 3419.524800][T13868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3419.544411][T13868] RSP: 002b:00007f7d4fd08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3419.552854][T13868] RAX: ffffffffffffffda RBX: 00007f7d4f025fa0 RCX: 00007f7d4ed9e159 [ 3419.560839][T13868] RDX: 00002000000000c0 RSI: 0000000000000707 RDI: 0000000000000003 [ 3419.568823][T13868] RBP: 00007f7d4ee3506b R08: 0000000000000000 R09: 0000000000000000 [ 3419.576813][T13868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3419.584799][T13868] R13: 00007f7d4f026038 R14: 00007f7d4f025fa0 R15: 00007f7d4f14fa48 [ 3419.592792][T13868] [ 3419.595843][T13868] Modules linked in: [ 3419.601544][T13868] ---[ end trace 0000000000000000 ]--- [ 3419.719587][T13868] RIP: 0010:__mutex_lock+0x149/0x1550 [ 3419.719627][T13868] Code: c0 40 95 9e 9a 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 3f 12 00 00 83 3d e5 35 b7 0e 00 75 22 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <80> 3c 18 00 74 05 e8 ac 85 50 f6 4d 39 64 24 58 0f 85 52 11 00 00 [ 3419.719645][T13868] RSP: 0018:ffffc90004bdf460 EFLAGS: 00010206 [ 3419.719664][T13868] RAX: 0000000000000018 RBX: dffffc0000000000 RCX: ffffffff9a9e9503 [ 3419.719680][T13868] RDX: 0000000000000000 RSI: ffffffff8e69d504 RDI: 00000000000000c0 [ 3419.719695][T13868] RBP: ffffc90004bdf5f8 R08: ffffc90004bdf567 R09: 0000000000000000 [ 3419.719709][T13868] R10: ffffc90004bdf540 R11: fffff5200097bead R12: 0000000000000068 [ 3419.719725][T13868] R13: 0000000000000000 R14: 1ffff9200097bea0 R15: 0000000000000000 [ 3419.719738][T13868] FS: 00007f7d4fd086c0(0000) GS:ffff888124ccb000(0000) knlGS:0000000000000000 [ 3419.719757][T13868] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3419.719770][T13868] CR2: 0000001b2ea13ff8 CR3: 000000006ab5e000 CR4: 00000000003526f0 [ 3419.719797][T13868] Kernel panic - not syncing: Fatal exception [ 3419.820961][T13868] Kernel Offset: disabled [ 3419.825308][T13868] Rebooting in 86400 seconds..