last executing test programs: 54m31.586384101s ago: executing program 32 (id=2036): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x0, 0x44a}) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000040)={0x69, 0x0, 0x17, 0x2000, &(0x7f0000c61000/0x2000)=nil}) 40m47.083408496s ago: executing program 3 (id=5719): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x102}, [@ldst={0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0x92}], {0x95, 0x0, 0x0, 0x94}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) 40m46.725016623s ago: executing program 3 (id=5721): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f00000000c0)={0x6, 0x1}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="015ee0003c"], 0x20) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000100), 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r1, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) r4 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="500000002700010000000000000000000a0001000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x40000) syz_clone(0x800080, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="a2126a019884dc446cc2") io_uring_setup(0x68e4, 0x0) mq_open(0x0, 0x8c2, 0x30, 0x0) r6 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r6, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000000)=@usbdevfs_driver={0x0, 0x80805513, 0x0}) socket(0x2, 0x80805, 0x0) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000240)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="e9ff0b00000007eb61eb2a9700016077894fa47bf3b540c8030b5ddaaa1669a5c60d3b9979fd0504292027b041aa87ac9829021dccbe7846333b64ca9d6290f368008eb1e81fffbee63566de32fd9d6505ae553876962ab200"/98], 0x0, 0x0, 0x0}, 0x0) 40m44.870614132s ago: executing program 3 (id=5727): close(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 40m44.589840971s ago: executing program 3 (id=5729): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) recvmsg$kcm(r0, &(0x7f0000005140)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000000340)=""/182, 0xb6}], 0x1}, 0x10000) recvmsg$kcm(r0, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000000440)=""/76, 0x4c}], 0x1}, 0x2) syz_usb_connect(0x3, 0x30, &(0x7f0000000000)=ANY=[@ANYBLOB="120100029a5000403a084650a86c0102030109021e00010f01200009049508014aaff70509050b00200040840403096b69e2055156ff24a1acbe3c6bde025d2ef645"], 0x0) 40m43.05716499s ago: executing program 3 (id=5738): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}, 0x1, 0x0, 0x0, 0xd0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 40m42.994135024s ago: executing program 3 (id=5739): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000300), 0x12) 40m40.450264357s ago: executing program 33 (id=5675): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000300), 0x12) 40m27.426488891s ago: executing program 34 (id=5739): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000300), 0x12) 23m56.863739884s ago: executing program 2 (id=10118): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={0x30, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_DST={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x8014}, 0x40c0) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000000000fddbdf25ac1414bb000000000000000000000000ac1414bb0000000000000000000000000003000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x4000) 23m56.568135955s ago: executing program 2 (id=10119): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x10, 0xffffffffffffffff, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x6, 0x0) r5 = syz_io_uring_setup(0x53f3, &(0x7f0000000400)={0x0, 0x595e, 0x1000, 0x10000400, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4110}, 0x1}) io_uring_enter(r5, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r9 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x101002, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r10 = userfaultfd(0x80801) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x200040c0}, 0x400c040) ioctl$UFFDIO_REGISTER(r10, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r10, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x0, 0xf4ffffff}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$DMA_HEAP_IOCTL_ALLOC(r9, 0xc0184800, &(0x7f0000000240)={0x2, r4, 0x80000}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xfffffffc, &(0x7f0000000280)="b3"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r12, 0x89fb, &(0x7f0000000340)={'bond0\x00', @random="00009e0c1100"}) fchdir(r0) 23m55.895611634s ago: executing program 2 (id=10125): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3801000010000100fefff7ff00010000e0000001000000000000000000000000e0000002000000000000000000000000000107144e230005020000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000000004d46c00000000000000000000000000ffffac1e0001000000000000000093010080000000003affffffffffffff00000000000000001c250800000000000200002000000000f8ffffffffffffff7c232e0e00000000090000000000000000000000000000001f00000002000000feffffffffffffff00000000fcffffffff0f00002abd700000000000020001005700000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@local, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x11, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x400000000, 0x100000000000}, {0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x2}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="1c00006802090500000000a03a560f6e7569354fce557901a70004009e0467c4842e001349c073bbaf735b94383054f05c27f1b586f8728450d040bdb6e46e44ff421a1f400e875d740749bcc1e09f0549deddb73826a6d20b94fe6e3c81ea3f114148ab84b4b9d212"], 0x1c}}, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) close(r4) ioctl$SG_BLKTRACESTOP(r4, 0x1275, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000001c80)='nv', 0x2) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) 23m54.633250797s ago: executing program 2 (id=10127): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000100), &(0x7f0000000180)=0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sync_file_range(r2, 0xb, 0xfffffffffffffff3, 0x8) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 23m54.356798294s ago: executing program 2 (id=10129): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="000000a2", @ANYRES16=0x0, @ANYBLOB="000325bd7000fddbdf25070000003c0004800900010073797a31000000002c0007800800040004000000080001001800000008000200090000000800040005000000080004000004"], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100037040400"/20, @ANYRES32, @ANYBLOB="83040500000000002800128009000100766574680000000018000280140001"], 0x48}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000028000280012800a00010076786c616e"], 0x50}}, 0x4000000) 23m53.826392091s ago: executing program 2 (id=10134): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fddbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="30003300a0100e00ffffffffffff080211"], 0x4c}, 0x1, 0x0, 0x0, 0x20040080}, 0x28008004) 23m53.162219525s ago: executing program 35 (id=10134): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fddbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="30003300a0100e00ffffffffffff080211"], 0x4c}, 0x1, 0x0, 0x0, 0x20040080}, 0x28008004) 3m47.575826349s ago: executing program 6 (id=15427): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@setlink={0x20, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="7800000013000500010000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000058001a0006000000020000004c0004801c000180080001000100000008000200", @ANYRES32=r3, @ANYBLOB="08000300", @ANYRES32=r4, @ANYBLOB="2c00068008000100010000000800"], 0x78}}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) close(0x3) r6 = socket(0x15, 0x80805, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x7a, &(0x7f0000000340)={r8, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000000)={r9, 0x1bd}, &(0x7f0000000080)=0x8) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2, 0x0, 0xffffffff}, 0x1c) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) shmget(0x1, 0x1000, 0x2, &(0x7f00003ae000/0x1000)=nil) r10 = socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r11, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000004200)=[{{&(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000840)=[{&(0x7f0000000400)="14b97639a217b31109c974cf090c2f3d7fcf23b8e3d726fef6befd157231a715f53c84978c6e3c1759d9d380c12ffb31d082be9948fdc70bdf8f67e57d13e02151dceedeb400e823006edcc7431c8fe8a3a2cc636e93eb97f3d4fe148f8e2f93e7f7d056e295d184861e40d11a9a68c089363716a62d7b959a72c5051b70601400b43abfd33ecc1bcce8797c2ef81a36a4", 0x91}, {&(0x7f00000004c0)="5d51409b6a338b4e1f24ab15815027c20ef248dda19246b3afa4cae93c647b8f9b3841e6a2963ca31d27a9fde3c6351de6210564a0c481b7aded23e9158b8c17a7cd74d8e86d9a04298af8a1b799a544f0e791b613efe1dd42cc0f0a3cc87f786f3cf23fa212d1769ba5321fe31ade5e3fc890c5d39d6ead17e7c07097bd091ce37d9237e91349add9287a4736e9d6d53125f59f4af0e5c120d885", 0x9b}, {&(0x7f0000000640)="bb0d269578cbb801f77cc9ae8c833af11c4f60dc215c6fb4e145b830bc8f219f80beefa0f924321ad9199b7dadd4214a9415abc5e2438bcda162865890b2c38838decc7e7962c3521323c17704441fd43c9b191d6885785987bdfcc9a39bf6336fadeffc7b9cab4b83e15f08c4b5d3de3bd05d85242a89323ac74b5770aa4253125df62534a953283849de6a1e7375582c5771ebef0cd94627e29ff222e793f3693db707ea5768107d9e986ed2", 0xad}, {&(0x7f0000000700)="35ad0d94833a505daa3981f44be1ceaddd7d4a926588a6799ad68bbd70fa491459e8a9a2971306d64a39771f3b9beb10674b9af6df71f0686d5fb5acad460dc9538766da62259a5f46ee5712c0bd5747a02e8954d0fbf7cf", 0x58}, {&(0x7f0000000780)="631807a4fdc4ce511fb352d586cb9a87e00597c17756105026a37dfd69209e06bdc1d04998d822d5a3b102eda6eae225cbbb2ca3440277edd2c3d80288e214932d6d85ee4720c54d0895d33b97d3d552bda9d4c6de6e8599e1284715e03f04d0ddebf577e41123aed7207c0b8813c6feeef067589f42aa64481c17ff8746c9567bea57a213a9f4f3c7a9bac894f953e3472a", 0x92}], 0x5, 0x0, 0x0, 0x40080}}, {{&(0x7f00000008c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000940)="b2a5778d91f493fe4e30ee6edbabca5d2d09cd32f66feb6f936f061aed2d4a7a56a7ac5ec5a4f421eb8939aa437a6760201d1e61202e4d6d9f5a803671201b4dd995c3d299e0fa55dab34b9334636f794fb47857fd8c90151b0ae3ebd9acee43a16e54cf2375340a435f5664a6fd6640b900e8b2a0d596d9e1ec761b6b173785c72d598e52b5bba068da9a153754c40aa012f2167a1a34", 0x97}, {&(0x7f0000000a00)="0dc9e74902ed19a55132aa55475bc5d44dd433139d83df40e3c6e22ece61ba3d98fbf625f8358d6d0d94f8a301c3a7fc5396e4a1af44abc312b2ecb5ee6f468ca7e5a1eacd22e72eade0dbf176726c296c0ddbb7bbcae78b4a7ce64988f1ec71fae3065c480df69bfe560b7ba139f721cf01", 0x72}, {&(0x7f0000000a80)="b45b687955c96251182378b920a8a3f721ced84c2044536610a33cc32e53360bb599ca1d048b1c15e010f76380d2251a5a8308b011cb5ee65557f7c391b310b88a1f3e691b0747ee8ed81504a83d6de563c5318225347ad7227ba3b15c86af38abb39cb769280b1fd7a257652daee075867b55ebf919ec6f8cb953dcde88cbcde3330e3a23e1da1b96038e75fa5b26acd7cb5e693ab6a8a4896dde69dd745ddc6605204a4ef778a6660e17aad49fcd9a7d8976025a1df37ff505373a011b942cb5f65eb6a56c1a79a475a9eaf981c6c77affd86657b564a2c0321f8e30c8b67dfa906c1cf501a03e7e084065", 0xec}, {&(0x7f0000000b80)="0a7874bc5229eb6be2691a3486da230b2d26f8eb13e3682e29795a732c58158ac2dba5c3c1189874c79a353b78406772fa720b257a5fca39472eba5e045728a61a52df4073ca735fa101629a7602cc15781a61a6a47ec407d96b790d37a61e5ea76b2f96ccfb0f9a463cbec683e05407cb126d926379951fea6a9281be9e89d0298f5260fb7d0d1d2d0a60db02a9a7164195a49ab70c2867590fe739894effa418a679f6e0d404db2ff54a4e21a95ecb", 0xb0}], 0x4, &(0x7f00000033c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r11]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [r10, r12, r11, 0xffffffffffffffff, r11]}}], 0x80, 0x40854}}], 0x2, 0x0) recvmmsg(r11, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x400, 0xfffffdff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000240)={0xc}) bpf$LINK_DETACH(0x22, &(0x7f0000000140), 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) 3m46.456994348s ago: executing program 6 (id=15431): timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) unshare(0x6020400) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r2, &(0x7f0000000040)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r3, 0xfffffffffffffc01, 0x0) tee(r1, r3, 0x60000000000, 0x0) 3m45.087665378s ago: executing program 6 (id=15434): r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x36, &(0x7f0000000180)={0xa, 0x8, 0x29b}) 3m44.757478996s ago: executing program 6 (id=15436): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@gettaction={0x20, 0x5a, 0x1, 0x0, 0xffffffff, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}]}, 0x20}}, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x20, 0xd, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x20008000) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00', 0x7f}) write$sndseq(r1, &(0x7f0000000340)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @result={0x7, 0x7}}, {0x44, 0x9, 0xad, 0x1, @time={0x3d8e}, {0x5d, 0x61}, {0x5, 0xbb}, @time=@time={0x6, 0x7}}, {0xde, 0xad, 0xf8, 0x9, @tick=0x9, {0xd, 0x80}, {0x6, 0xfc}, @result={0x6, 0x8000}}, {0x5, 0x7f, 0x0, 0x7, @time={0xa, 0x84}, {0x4, 0x5}, {0xcd, 0x3}, @quote={{0x4, 0xc0}, 0x5}}], 0x70) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x800000, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r4 = syz_usb_connect(0x5, 0xfd9, &(0x7f0000000f80)={{0x12, 0x1, 0x300, 0xfb, 0x8c, 0x1a, 0x40, 0x5c6, 0x9212, 0xcf1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfc7, 0x3, 0xf3, 0xf, 0xb0, 0x4, "", [{{0x9, 0x4, 0xa5, 0x9, 0xc, 0x6a, 0x29, 0x5a, 0x1, [@uac_as={[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7, 0x1e, 0x5, 0xb4, 0x1}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xfa, 0x2, 0x7f, 0x1, 0x3}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x6e, 0x9, 0xc9, 0x6, 0xdd}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x6, 0x4, 0xff, 0xe4}]}], [{{0x9, 0x5, 0x80, 0x1, 0x10, 0x2, 0x3, 0x0, [@generic={0x8b, 0x24, "f8d6ecfc6eae63f4d755c6b4661f3b5b6411f08ec1087c409e8c8a97c36f7334ba426ee5dc75e55a0da94d17940f39ea010fb93d085ee1e70e991df63a9098a8dc86ed331f01936caf198f618a0b8927a31d643fba3f004f5081a28bf471eb13424c13c7d019f50e099ae183554c516d316673576ea9407a37804518e653006ab270a54f64a8f83828"}, @generic={0x27, 0x22, "6924a973eeae7c2ca00d79f458936540c4970869853cf34b8d1d9ee1266cdb03e446ada777"}]}}, {{0x9, 0x5, 0x97d541c4a07a44f8, 0x0, 0x200, 0x40, 0x0, 0x0, [@generic={0x8f, 0x7, "64a64fb3402e17f4a12eb1fb6c925f15e84c46bfba51dc1475df5812b410a331c24a53b237fcd9eb2915e12ed3d3f53c8ee1a8735c70cd917603b65be5e35363ca720c69e18bab0cc669401839e8823f6431a869dac0bd307eb05e7715224a3fd07823c1328bd7d2d163e785630e940bc24c986df5824bb3f52716f0b94651bb0659b70f270b1c0c2b1389bdd7"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x10, 0x8000}]}}, {{0x9, 0x5, 0x6, 0x10, 0x400, 0xe, 0x6, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xb}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x2d}]}}, {{0x9, 0x5, 0xf, 0x10, 0x8, 0x5, 0xd, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x2}]}}, {{0x9, 0x5, 0x2, 0x4, 0x400, 0xf, 0x7, 0xe1, [@generic={0xf9, 0x24, "b2e1c00331b7025977b8b028f5f1f62704d09fe9c55a6aa57dbb66841277696356edf43c7fbf2cf302561fc3a7cdbdc13193ee5f7ed4c471222f73d7427722641979d2e7a956a0fbb925cfe4d0b530c05a77ce608165db7027ee5837af63d67ae5919b18706d78f36a8c1c0c9bec1c05fd75b9ffe3afade0fee72eda8a69e1748947d8a7c4bae9ec9c4bada96b101f255953c6deb039d466dab58daafaf768ec7e102ad2393c0fb73da923f70dece6c6c98faee45fe274c94543cdbdaf8ed5aec6938154729754e33226d1845e52cecbc7f5a4e125e542aeaa62c3e838e6ee630af1b25b677592cbcd5cb25411f5176b29bc66a7b2a37c"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0x7, 0x8, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x1}]}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0x2, 0x42, 0x0, [@generic={0x74, 0x3, "acc5937ec3fe43e8b69b89d774bcab9531fc09d7f89310f9fab2e3039450b35c412ad837e0f57fcf3a66bebb5d39f5658b7cd65a7f1698e376db0455ed7fb41e318b1887a1bc17ad8be9e0f697d486a81fe87b1b77741e7f0c52968233ed5e882a49a6cae8266882d211e82232d0cc312bf1"}, @generic={0x83, 0xd, "a9bdf43edb9a22ccaca0b4b1e85a293ebe0fde2140a72e25499e802154d945a2c314f888aea424f2181cb566299b4f91f84e754cc86560968b98d1602ae4fad76e57996b9054aa90d57d657c4a309da5cbecaea424b863a8ce5d5c5a3f8813d4ff194d960c7fe63aa80bd873f7f18ee749ec7824d391c2adbe2851aac48172559c"}]}}, {{0x9, 0x5, 0xa, 0x4, 0x20, 0x3, 0x81, 0x9, [@generic={0xa1, 0x7, "4c3456818fa9bc05eaf0d9e8d3333979b7accf55f2467a9147a4ca14a852757425b770d9b09ed940b1339d35e8dcdf33f2f6fd3ab714935a24ae4dfa706abb30ffc0e435414758ef343c13f1f9024ee0ee05b9ceb8405e18e5a98bcdb4cee83c9ea4e4b7c3e067513b279ba732ae3ebe49cfadaa88e28c73c40ab24756b7c905611811e6ea2ecbc0e964c71d67be675eddf958f2d143112493b87e765fa01f"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0x10, 0x6, 0x86, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x4}]}}, {{0x9, 0x5, 0x4, 0x4, 0x0, 0x5, 0x5, 0x7, [@generic={0x76, 0xc, "0ef98c4cea070044c7ea8bed20d981247e01e459e40127aacd3b382c4d45a8b9868ffff2387d0d3b8ea323a3959585b449b3f18f11811ddb88809cab5843992492f3fc5fcb987a5ef1c691b38cf88674c039fbfd4af6ae85c1b61cffed2d0997dcc8514052a1183fa841ad5e8f0ac63d99c43810"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x0, 0x3, 0xf, 0x2, [@generic={0xfe, 0x7, "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"}, @generic={0x11, 0x21, "64fafbb4c5a99f71b4d80c5fa8d112"}]}}, {{0x9, 0x5, 0x2, 0x2, 0x200, 0x5, 0x0, 0x49, [@generic={0x1c, 0x2, "7f8a6921d140b47f2b426a8d48f0591b516eeac4d9ea7cc63840"}, @generic={0xef, 0xc, "07bb5e56b71c73967d6f16e2cbbccb6440472b61bfa831501f5b2f3f44e6b7da4a1dc7a282a3edc9413536afc63c7b5ee4656d2264a5940855a762afb8de465059c950e9db7a1c3b7041232d57b6c9fe6b19d7de32b2bbbbbcdf3309f24de98b27e5a53adf7d8521a38d28ca4bdbf8fe8df619fe71f03c4ee3aa509884b84cf17796267622c43ef5db0a1a2779bcd4387f09a4377f11bd9bf023d022704f4b7418d13aa9e7d561f14fbc42ab627235f06fbb3cf71a931246da06d60a6144f1624a6a568db4c6396940aedac7110698f953cfb28e5ce8b2fcd4fa16b59111d250f1aa5139b3a220e6ed3b73c7b6"}]}}]}}, {{0x9, 0x4, 0x7, 0xe, 0x8, 0x8, 0x3, 0xac, 0x6, [@hid_hid={0x9, 0x21, 0x9, 0x56, 0x1, {0x22, 0xf41}}], [{{0x9, 0x5, 0xb, 0x10, 0x200, 0xf, 0xff, 0x80, [@generic={0x7c, 0x21, "2a74f8e017182ef98c622e5e62ca3ab7dc1de547f11a0d7f789f99800ffabb6503789aca2cb97d6e12834da906cbe2f0ebfacf6b811758f18965a09720196b86356bcbec80622843c2bae42d65839005f1724d326ff96d2e344c2da96d04a118fadc9a3232bc1bebe6541049f517479571b569f8f0b160e91061"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x40}]}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0x2, 0x10, 0x23, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x81}]}}, {{0x9, 0x5, 0xa, 0x1, 0x8, 0x6, 0x2, 0x9, [@generic={0x4, 0xb, '%J'}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x6}]}}, {{0x9, 0x5, 0xe, 0x10, 0x200, 0x4d, 0x7a, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0x515}]}}, {{0x9, 0x5, 0xc, 0x0, 0x400, 0x4, 0x79, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xcf, 0x6}]}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0x81, 0x2, 0xfb, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x40, 0x5a5}, @generic={0x29, 0x24, "945e485b38e1b0fc963635eae527b663a01d885073ff8492c6f6c4c70f8fae1cf375c91e9e9d2b"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0x7, 0x4, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x31cdb97465df4dfc, 0x65, 0xff1d}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0xb}]}}, {{0x9, 0x5, 0x8, 0xc, 0x8, 0x0, 0x3, 0x8, [@generic={0xe0, 0x30, "8552b9c0cc718609929e6f4bf9a84741888ae6867b7e19d52967cbe61beeeb69dc92e899756a79a8aa6f4bc182c0c05ad32902cab77dd9402280bca78e5bafdbf5d8ac0d091cf9746749879b543006287256cbcc188c3189bc3190d94d87e4f0cb6988005fd07bc3746d877f0151f44c17bb60eff6904e685e66f61d19430ec92588b5de3b7c604bc8be612472b67a649b6d762ca8d5ee4ff74ae12db9def39f31ccb1a8a9f88ea7fcdaba89119584580ac831bdbc593455589da392de059a1eabc0ade40047fe3acc3b7dbe5b3725a8f348ab08ac458fe40aedbaf69d67"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xb, 0x800}]}}]}}, {{0x9, 0x4, 0x62, 0x7b, 0xc, 0x2d, 0xc, 0x13, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x5, 0x10}, [@mixer_unit={0x6, 0x24, 0x4, 0x5, 0x2, "1d"}]}], [{{0x9, 0x5, 0x2, 0x2, 0x3ff, 0xb, 0x2, 0x10, [@generic={0x4a, 0x3, "cde89a2d8b3fc9c557c5270dac3534a69da37bb62e69de7ccd2161b5c6100d9e747db2d1300503bbcc5ca4ed87bd2e0031c7895db802e7ac2064f39e265ecb2997bcd63b9b82fff2"}, @generic={0xeb, 0x24, "dfcecc91a46a852ffc3dc606f4b0a9e578eaa105d25120c977299b616ccd28098aa24043b10dca8730b4a674d509d2c73cb93783f3842e8100100a0a6802c6bd795f8f5a73adeb7a54926d108e1bff0ea8c9cde05709714cbd932b811747187ec4eba90b5e2f78040adf42bcd3e24559d619c87ff2d71357192e4b3038ca8bdf2920d5256a09dfd3bd0a5bf9692e2475728c851e095a18d72d09566273ddebaefe157ef290058890178bb13396cdefa50393e17df180418ce9f061e1bfe7cfa65c9020abca8f6a35979596ac6066f5011723ac0e559eb5d7241563e93fac97891d8d52db38fbeb1faa"}]}}, {{0x9, 0x5, 0x2, 0x1, 0x40, 0x3, 0x9, 0x2, [@generic={0x9e, 0x11, "47e0bd4302727ad94333da2c06d9600265395cbf7cc172a9745e37632a6d505b1966caf5ce88da0665b4b1388dcbd92400bd2f36f9c8578b2296e9eaa147c40fda2f921de00139d9aa5718d4d25e31cff6087d0448a8e49719c52b38372a2ab0335d4dc8efc1775393a5e618b98a998e374d8405a001b30a6e201d9669f15cb44df6f0e6af8c26275ba160e8c73b0be3b34f411536d0ba0270900bc4"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x2, 0x9, 0x0, [@generic={0x61, 0x23, "13b1e4cd1276d4928588c516b966612b79fe1150a204eb05a940978aadd0aadf53858e9a58d2e8dc6d897806c094a51bbeed069d13fc455689b7e751f80e2ae5a0677abefa9bf56b419f8738851d825375baf415f2e99f15f690729db8a8d3"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xff, 0x7b78}]}}, {{0x9, 0x5, 0xa, 0x10, 0x20, 0x0, 0x7, 0x9c, [@generic={0xcf, 0x22, "c0cf066b4fc29d04cf9bf8d5ebb827eac093859ceb164b02af53c512a02b76d17963b89645b2b0a0e93e3f020d5757ccdcbbea8d62a44b186a0266bfb6f9b6a328ebb582ce4f4c621ccd79f3416a4123df9988e3c89a7c100e4a6b682855e554724d37f73340b758a53900df484f73a4afc4ce1535e6d5fbfaa10543eaaf59f1a0f567aaf2cff58c246c8773673f741877778ac74af1a284feb336b5f86c8606d1fe5b601a7d8f50ac30cdf283d38cb900d93706a8689384f81b468126628ea1f8868bed6a17a2bab417ea211a"}]}}, {{0x9, 0x5, 0xe, 0x5, 0x40, 0x1, 0x4e, 0xb, [@generic={0x3f, 0x22, "32aa35e85d6a07e3d44e41b8520b6d2cdd95f9feac7fc96d477e407c790e3efd3243501f2367de80764c4693dd79dc9551d4dab8dd02960d9aa322ab93"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0x0, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x6, 0xfff}]}}, {{0x9, 0x5, 0x80, 0x8, 0x40, 0x8, 0xaa, 0xfe, [@generic={0x53, 0x30, "58c4e5c44582ce1ae795bcd36c9e6e19e90fd0a63a20cead37bf971b47c84d48063f0bcc2a4e38d963337d0e5103237d04e62e15fb71bd5ff6f8ab04588e92e1fd70206ded4650abcad0e90809077435f4"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x40, 0xd, 0x5, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x8}]}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x7f, 0x2, [@generic={0xcb, 0x21, "e724df63eeab46d165182da3e2a4512e9c995f29e5468c6d4eba4c4f9b87e46ee5cf37a7f1478cc1af3a9830737c8e129e65590380fa01d21ef42cc2bd0b845c278f8eece37f31367ea5bb1acc30424796947ee4b9c9be6ea6f6ea7487d1cd4a1f58583db3fe11fb6040f6a055de5b5cb1b54f1f51a3304dec9a68228d35ccb306ad55c7bf2210afef8a93735dfc8eac512d9e4843a8444eb6d9a72979589a280120f9b0a2716ea17d3be5d5d66e83724f4a3117dfb0a7d66559cc577cc82b49228797c5e12544781f"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x3ff, 0xfe, 0xd9, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0xe473}]}}, {{0x9, 0x5, 0x1, 0x0, 0x20, 0x6, 0x8, 0xff, [@generic={0xfc, 0xc, "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"}, @generic={0x60, 0x8, "b5913a3c45c8a773022ee09e9695f1882fd6b9e7a2a2f3352fc0c4a3a83c325f21f5b3843422324e763a906395a80fc430b8f75ade949ce0777f873fe77a7e1fbc168408bdb6acc323479666d97f8e63ac5c1d0cbf584da1f40f0dc96b2b"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x3c, 0x0, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0x2}, @generic={0x13, 0x22, "5fc5115f01362e5f613d376dfbbf5e0e8b"}]}}]}}]}}]}}, &(0x7f0000002240)={0xa, &(0x7f0000001f80)={0xa, 0x6, 0x200, 0x8, 0x5, 0x1, 0xff, 0x4}, 0x15, &(0x7f0000001fc0)={0x5, 0xf, 0x15, 0x1, [@ssp_cap={0x10, 0x10, 0xa, 0x9, 0x1, 0x40, 0xff00, 0xe, [0xff001e]}]}, 0x2, [{0x4, &(0x7f0000002000)=@lang_id={0x4, 0x3, 0x3c01}}, {0xcd, &(0x7f0000002140)=@string={0xcd, 0x3, "2634a20f6c8f3b2797c414c50ee76606f61b8fcd0f0681570a269550d77dd07f58b45579705c443380246eb71f4276b8f304d07d9821e83a60925f7d4e628fc5a658fe964bfc2b8c882731c6b665bd3a4f881fd6a44210bea506145f38f55fef9969c1f9f0c710a0c654acad42cb772f931b53cb3e866545e0a9c51db6d60c93598b92f3dc5c0edaee6655e3082aa47dd41893d5fba9947c49d01da8ec71c26ad5b421b707104d49c5e9708b7690eb09ecee1198792c43d299ae17bada8cd8f04d06173f66d0465500627e"}}]}) syz_usb_control_io$lan78xx(r4, &(0x7f0000002300)={0x14, &(0x7f0000002280)={0x0, 0xc, 0x5, {0x5, 0x23, "bb438e"}}, &(0x7f00000022c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0c}}}, &(0x7f0000002500)={0x34, &(0x7f0000002340)={0x0, 0xf, 0x5a, "6a9f425acf6bb2043c743b951c4c93418c8c9815688c23a15fe9a1a9157aa6cd8f2642e5e1dd0b7c6e1d91d39b934fdde571535fe125d15fc5eede27e87309e7322217ed90c21ca4102e464287aab21ca230c08157e7211d6eff"}, &(0x7f00000023c0)={0x0, 0xa, 0x1, 0xfe}, &(0x7f0000002400)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000002440)={0xc0, 0xa1, 0x4, 0xcc}, &(0x7f0000002480)={0x40, 0xa0, 0x4, 0x2}, &(0x7f00000024c0)={0xc0, 0xa2, 0x2f, "975324c929859d990342ffe74a5f3277eeaa7d0a56e42fd42e75091062bd77946aa974d00a1933c3d68cfaaa7cd9ec"}}) chroot(&(0x7f0000000100)='./file0/file0\x00') ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x217, @tick=0xe2, 0x0, {0x3}, 0x67, 0x2}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)="d1054780ee9ec41978282515ed44a32927d8af8c7cb2d711da48dbfb67bdfe2f3e7984c8e389a6872bf68b9f9c954ebb99ecf999380d9692d1897192c78f5ec7ea2cf16cc7890c13bd3a201e820df46f0af08ab20ab9f9d0a97c16aba3260ff00d05fcd4a1a8749abbca1847a4766d1401cc817420eff0", 0x77}, {&(0x7f0000000500)="ef15f132fdd166069d8195c914d738659b833f7e5f813f9883b1584b06fa2009cf1531d0ce594e71d28e9109a86beceab0e5d34c362e4575fb6499d35677cb2026decf9c36ab279785eca65e32e10a1e99728f6d11e1d7628bf7d0d360fc74cb3a90", 0x62}, {&(0x7f00000002c0)="604ef20dd1918990800c8e95b443c8f252dbcec1299a9b9e97ebb913ea658f9cbc308c06c472ab395ffdcccbd0f21f2c21222f580f921f797a5f348794ed4825ff747f231fa2e1a87955e5d5488ffb25b259323c065f659c5ad4915dff4314819b1d1dfbed6e01730817098e04c436406712f5e472add674bb92e35c567f9b1eb7408abff7ff85b25cf3a945dc91fc72f1bde449fe02dde3a67c86d59a5dce20d7f444c004ef62e0a1635f8962683e5570ca62d4f0b76f56849ada61a7a038fc99fadfe990ab09eb72bc9bdd1abdc92235a703aefca9ce554c9ae848d2577c3cb448e0675c107284", 0xe8}, {&(0x7f0000000400)="b38edeefedb1096fe6ac6f852737b0cacfd035e404786a7347df82057ecba713d7d5e5ec5c5c5d68ad1afe53be33bd87477e", 0x32}, {&(0x7f0000000440)="16f4181146bbe26e074f278723bfc3c5461a410a01cd", 0x69}], 0x5}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="611289000000000061134c0000000000bf2000000000000007000000080000002d0301"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x15}, 0xfffffdfe) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000058"], 0xfe33) 3m41.274882601s ago: executing program 6 (id=15460): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r1, &(0x7f0000002980)=[{&(0x7f0000000600)=""/4096, 0x1000}], 0x1) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000100)=0x730) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) syz_open_dev$dri(0x0, 0x0, 0x402) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$audio1(0xffffffffffffff9c, 0x0, 0x80042, 0x0) (async) r3 = fsopen(&(0x7f0000000200)='pvfs2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='source\x00', 0x0, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) (async) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r4, 0x707, &(0x7f00000003c0)={&(0x7f00000007c0)=[{0x163, 0x0, 0x0, 0x0}], 0x1}) (async) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async) fspick(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) (async) r5 = fsmount(r3, 0x1, 0x8) (async) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') (async) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r7, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r6, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r9, 0x0, 0x0, 0x0, 0xa00000, 0x303904, 0x334e88, 0x100000000000000}) (async) fchdir(r5) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000fcdbdf251d010300"], 0x14}, 0x1, 0x0, 0x0, 0x4008844}, 0x30004016) 3m40.771055309s ago: executing program 6 (id=15465): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000000000fddbdf25ac1414bb000000000000000000000000ac1414bb0000000000000000000000000003000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000080000000000000000000000000000000000000000000000001000202000000008401050000000000000000000000ffffac1414aa000000003c00"], 0x23c}}, 0x4000) 3m39.797518173s ago: executing program 36 (id=15465): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000000000fddbdf25ac1414bb000000000000000000000000ac1414bb0000000000000000000000000003000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000080000000000000000000000000000000000000000000000001000202000000008401050000000000000000000000ffffac1414aa000000003c00"], 0x23c}}, 0x4000) 2m42.115290407s ago: executing program 7 (id=15734): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0xc048aec8, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@getnexthop={0x18, 0x76, 0xb0d, 0x4000, 0x0, {0x3}}, 0x18}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000080) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x18}}, 0x0) (fail_nth: 7) 2m41.811654373s ago: executing program 7 (id=15735): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x202000, 0x0) r1 = fsopen(&(0x7f0000002200)='ramfs\x00', 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) accept$packet(r0, 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x9, 0x1005, 0x20ffd}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000340)) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r5, 0x5) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_FIB_FLAGS={0x8}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) connect$unix(r8, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r9, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r6, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r10 = socket$netlink(0x10, 0x3, 0x4) write(r10, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbea5", 0x29) prctl$PR_GET_FPEMU(0x9, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r11, &(0x7f0000000bc0)="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", 0x203) r12 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001d80), 0x0, 0x0) ioctl$TIOCCBRK(r12, 0x5428) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000400)={r11, 0x0, {0x2a00, 0x80010000, 0x0, 0x3, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c55080000000c547d03d8a0f4bd00", [0x0, 0x6]}}) 2m41.35907051s ago: executing program 7 (id=15737): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) writev(r0, &(0x7f0000001900)=[{&(0x7f0000000080)="f3e1f91e50ecda6fabde999c78132af7640ab7911e270f99f4318f5b41aedebb4ed7558034d5c285f182d340df6b79c1e345dc0a66cf8ae2f93b3c900ce2309f4fd13ab252e49ce03e33b0799efb436edca307ed20dc3cadadb79096faf3aed0f205e75742660663f86e4ffe7e4c1d940e2a7be856c14c3faef79aeb0424b7ee1800351b2a1c738413cadac24eabd7454bb853ebe21378396dc3b90738f3a20701fa51e9020c0c05d427", 0xaa}, {&(0x7f0000000140)="a582fd66d6e3a3bda4f35d8cb32bf0ba071a8f3874cd190b73f9d272f3b083c1da08944695fc87a499dac1412aecc0009b68c2486dfab0c108268e7bf46bd1061cc098cbc496ac7df8867217adea", 0x4e}, {&(0x7f0000000480)="be6287b856a0ed85b2b624f6cd511ec38feaf392750db0a7373359e883fb4233202dd3c013899fdfca3d3af4d9fe1b483ddf65afcc1fc6fa77a10429072e5df678cda0d4ff86841833e0ea462d17543c1ad4d9fc3655de7a2979116ae66a82e536b26825d3c9bb4a614026acdf9d6aec1a95fd97a2aecae794f119aa598e317ccfb8c17e059cc541ddaa339dbc2885f429619ab7c4ab0883b4ce67153dca454b4262d91b79748b1bfce1b70c7a0f2ef563a5f7bbf79c22d83e6af9eb61bfc134be6e6e992c4e58ac416207216b9ab1f670d6091cf6e63af2a9ed8a", 0xdb}, {&(0x7f00000005c0)="1630fa39ddb5df67e591bcae8bd3f25ba0e3c6d324f0d3fa56342b3fecc041cc26eb09be8a864d0dda7e36de73f381bb4438e6613a0d936be82b0bb246a83b6a18bea359f4e934c8cae75c400a4695c914b0bf171d6e2baae5751840060aa841856a040594bb5a26485b7a46da33687e00cdada35a37d40ec6e54315fc9172defdf4e60db5d21b8741b9ead458aa075e7eaddc9bbd1fb6f2f0cbe45572b608214b49a8696d5218d6848d6d8573edeb39f9", 0xb1}, {&(0x7f0000000680)="fe9d896c6c4f24d7e56f2dc80ab6937832d4691790a563f302188edbc689b91e06e0089950c8c8aa9947a37403ddc556aadf133a03283b36d949eadf0bdfc9cd99ea82820fa5ecf05aa10c6fbe68e489d73e382002ae77bcb864184f5ded7545f131a1c27a5eca297245db2a4f43eac7ce76dad507633aff6681c58f71a9e86f946e290bb2cddbc2919fe33bc35ec81ed608269edee1fe7da6f72cfd442152eaeff070d961a5a89d6bf60695657c72078417", 0xb2}, {&(0x7f0000000740)="0c03943472dcae5e4602cfc92b67d81ecece91f3c5bd4359bf2f355cb0d7c194789b680bcae290a18cded9a02be0cb2e79ec44bcdba64a919edab05cd1a956d2ba081e4a4bb4236988280d183972ded0fc2e71af7b1b492f7278df87fd240d84a0300e1d12878205248a6c75692a4891b91f745de88210c0fd3c2243daa9c4e4b208ef5678e40e611e73c3ee4d8ddd21971955e032d71c5cda978a4b9f8747c3ec4f1f8e16c99263e7ca7f409cea41a4b67c", 0xb2}, {&(0x7f0000000800)="2e5e9b9f504e616ba62cde77408236ec540920b3e8e283c513fcad45ce34ebc74086c430185709c1bc82b7f430e2e4fd3995313335d13bccee609188cf89d3a7a8422d3e5a30a0ce58566a1e5334715d52a7792b5097f857127520de4bf055753f039967048d561738415655ac41857580017b3f206a42ef1bc0eda02be1104734fb4f45e6d3c3d5f3abb28ab9f68a52a5bafa51b6f81f877b8fccebfa0f29f28d3a8d6e8dbdc97360ba394b4209a517f91c16dd16d2175b0ceaf3c8b52da08ff18476ec32403f90f06c017c8d771f644601bd9d98f942facc998fc8087aa55f9930570987e0150623116b8e1c8d43cc6cd0c79a8c9628d40bf497e8c3348fbcdfd448f660fc54a9b37be607a97ef760d0f5e854be572f6a04f7f4a721d9cada6158e7e50993c196ff1625e97ba77dd6a74c668dfdb1428b43cc28a4e58a84f06cf7fe16bc0c1073edf00f094587edecf70630a3844c624191d2b43548c6794c87a1ea63f21f0dd32d19d95bdeb2721a05b1ad82d799fc7f22ea0f31183ee069b04460445ef773688efaa1ec1dd1d93d44781ca12fd5c433ae55505b2825ed91e80a376c583a103e732d9cd07f2f8206a1ec80903e57e8304c7e8907dd36cf625b53db45127282ef1da1628f30c1f78320921155c5d36b1f5c1ee5edc14a52c6aed8a0984df4caec519e5498e752c65a8203b87f17a01a88e5f40d9900cc085f159c433f7913934ce28f94c7f6e147163fe4f9d263d6667ef14535057c07667a7090f224770131d82ee8a9fd967752afe8c3765aa8f7e04e7421ad3e3e5cda54f30426fd174951c9d207b978c373a04e83d0dfc895fca8fbb491a78be8177d1c4b92a681f2e5b7086e7049f5b87eb3ce56a754d34576e420cfdb5ea78fc97ab3a1c9e2c5dae05bb802dadf3f14fc3b19fee27895169ac361c920827175f178817f72b776d1cfa41c891873a48f9a823f3861358804519222b3940be8c0d5a5c10a3b54851e946e2072a3d4354962ab5063d793fcb054619eaf0b418e7141082c7e6fd7f82988a85ecb0fa99fe44b9cf880a82956916c7b457b1d894fa7114554941071463ce0137a431e3f50a3a5e4027b2c795912916fa037d55849f59770389bb5d02c12a26657ebf2c1c37c9b6bad7b2e2e8a1ebafcfd72bdb1b2783bd6ebdf3fccfe3bbefe0460dfb0c9cc82284625ba9eb394401e5cbd6aef7dac53308022cbc63fc5e9a65c769a98510ae0774d1133e764d8214fbcff62176acf825814263d8d5e66060ce437f4c4d94e0da022ff0756e0771c6b9e852a7ec4ca98eda811fdf834a2270db152d829c7f963de7088b0163bc3341136ee3e4ebb6a09e609e122c528a71224bf3b8cf0e99a33f0aa72b7be2b1f1a14910b81d5ec742acc5b94c31bf2f323bcf09851f75f5f4a7e4da59a1107cdedbc56b41b6ad2c4d1dc8402b8158290a1abef7318ed097e2917e74015a1b09e241160f9cc261d8672083f5556728ccb95808c419964880bec1a91cbad0b96ff7ec2c376d0e0830dcf6119861cc77b7fe9a64d9cc65598043f9659ef98bfe49e5546e3f86e79b095d4e13ee368fa18c7278d00ec5132e65ef4696f641c9e2a152b6897a1aca01558715be8de03585f6509fa7ea5a960ade2213240d79d98365547558105e43303352962932626056e29c8e53ea63ea242386be67078f0c58d314b22c242fa6412df76802a032e3109207a3c7fa63733063a1dd73cb135f50a9e8c33f49a99347fb314e79273557d980b7ad3176beac1e9e8b044cb3d0c59328cb68585101bc26d50d8ccfec05d11e3d7720a466f27bffa6c461115e638401ad422c35e847f00aede24eb2122959bbf440c458403cd02708031c26b16e85222e02d332f988227d5ca14199800a3a5341fa7dd8ed22070c4cea9c7e2c2b07258e8fa2f226a2515fda94a932a6a61dffbc4b2d0890238be1c5679d75c6a5dc20caa36c8c4d5449b277dcf2d05253548b1cd7c82538a636f1db0c41fd7160c8e771962076c3c565bd8e9b90d1180a49bd3f5534bb660b6aeff855e70874ec5d999ae4825a3a896bc4f9568eb093c3f308a77d8a7995cdb4c6ef356c4915eea92092a70363ce2bda202889332fe7a3f945c11ab716ae85f73828d5436e69aca35f4b577195842eaae8b82d55855c83641fb599968d85d39e3bbd02f4954aed798d417e8a8f884bde32a035250f337ab61e82cf8e2feeb74699be2cfce5ed8e1c0bbda599e5005d8b9769a4c8d562f31db45469d1dcc808fe187204862bf3311aa7321dcfd91a93df23596ab2eca9ad83202fa93eaa23a582f9427c031d4400b117d20d612c9562955448f5eb92cb3dce98ea22ac30a5e3acda7149860f8b230cc472f903ff9246be67ced12dea5f3de880d60bfafa33391ee60187f13fca93f883a293c374424da6644d4669c53f048dea0c13c4811f5db7d1a44fed85025db6946b5df704845fdf0a5e04e3ea395b649f81224efdbe6436b8424bad40a9b1276e9a3672c774e1c62a9acefe85d0c9f385fbd9bb6c097e52ce6f66846d0468dc472467b5babd3c24cc23251594c82dfe0b94f54684e30b8c31d48da8f02292cb500755fec7c981ff41dafc96142b35579cc36ad70093bc7c2a126de17cb62896367fccc232ee843fd3260ec47231c45f481e52c226db869385e7ba8c01403dbf20725bdf26e223a060eb812e25469dccb5689655a15975899d57551cacf1506ffcabbd6595b8d851097bb2d31609b5864ecef0d1e1219942fb526b5f4a056653771088fe11ac9498f98ababaa7d5d883b4decfac5397de3f6bdbeabc307b0b25588d78a001e569002fbe97204fd856d8c37c23832fbacb41aa169ff2555b0232d635a1a912b32421c553d31cc54ae37e66b3def1d8d2dfc1ce8071c773622e639e7a7e23e5f565335c14fe271821076173b4bed14b8861f303f18f6e2b73615e90b2a86914b0cd3bb4cb07ad90942bd88c7abe6c9d5dc0ca28171e6affb0ce84a2e445006b2f3ea5344777f34df01a484bc0164a48167cbffce62a940f5fab41a0c6a8e24a72a9b933bb1cc9bf8bf64c31eff07bcdee28bd5e8dd8770bb352a97a5af28b660ee50cf342203a8fa00f04c4668d9a2daeb6e0d30e01ded657246cb86c8ec9ec7500bc9c661547f8e7989683105f2311c72f8ddb659dc80eb896f065b23fec31c62d327861c77d876e49a40f7b29b945e58233816934a6bb72e52b5bcc702325666923008b347a5193338308e220abdc4bd20a234d4512d769337710fa7743442679440f14ea470677f0086fb23eff4333ad46e79c02732965d7abccd1abb3659b677c4118e5799786e800dfc301961778e7857df078484751bb8a72c2fd85e17f23eb54e705a44bc9b454708c9fa109e971fd049acbe4f7a6dc517cb385c0f7743b48e311fbbf5c2d5db6e6960d3dd555feeb9db1641cec4257564397eec8455fdd6a985b13fc92311aff7ce532031f227b0f2f61239ce0b83645849128b078b1de8a16d1c274009aa67c8b1b2ea5a5731886a456e2169826a6b908deff8615456790796c83b31e9c755c590c17e145b74fba99dd8e646ee7de465fccd0bf621e469bbf344c4ab060f923ea4c9e5154beb954857bda8e8fb7e6aaa381d0424860d4cb84ddf7fce8bffcf855e096daeb2255e51fe9d12ac211ad4885e85230e4ac43ccf58ebc424b804eab17f064db6e20dd1192e10b4ac499b9ce46816c24494b9aacd9510d4d933ac0224e41c4c658b140e27bd6be89066a2d52ceeea085967f2cce1202b1e4060f1850162b84c15969774f3a72701732cd8bee698eff11eea281a3b6956ef4a1182ad3d101f47c26062a0581b6c613ad60c5bde3b1e5ad325dc7af46a754719cfaf082159adb60c6f561cb703165d1d3bbec5733240d79185f3c4c41c110a1a29e72d8a8f95acd643e02c62e41e38f667145ffb75b878de02ac442fcca080e047dfc92acdd670e6e290f19a9c11322a1d4ddb19069168ad6557b45ba9ac3c376185e79cb02b4f20977feb02112a606a58fa052aa85dcd8a10854ce46d75768891bb5bcc3bf91a81676dfc5362a2567c520ab9a7788138a41c753ed9cd76b6cde082cc2a0672d38601b45cdea2e63d4a6d6b1e12cc59508fcd1f54ff7562db4f0f6729d050dede3c943b6046a1475eb59edaae521b1defa6cb0e5c8581fec17ae2ade5ba17b15169ad6280f942eedb6466c929da6ce97d5fb49f17efc975b01dd61b5363a7362ef86b45adc4a128c5c18795c6d359b6bd2e5023e54ed6bf0c20f2172c2ed4051d2df173aca0db5de0cf3f9e4b66087c1902d41a89b21424e75c07160b2d4e96e96a06b29e3a42056e8c64ab37123c59defb04cb325fb7c4523bd585158dccf1ebbfdeeec1f9cacb15bfa1cd15748ba98ca377118682ca4d5c4a32adc095ec277129ff0c2feabc54bc64057521579a47f03b66d029f098274e5d8be5485d715e97848fb2be9596755fb24c4a2d05480a975a944d6daabe21b5c8493cf07d1c3a0702b42b71539d870efc69e4f0875673ec2801d10ab932666c16b9898b2d5969d4d2b49d288a9636ab0a157f914dd0d9f6e523572f160916c70f1168ee0ef6b94f0973c3c6d55ab10617c0ab48424eb09096eb3726cdf0bf6925b30c96298ca6cb54c6c4178c75d83338f8b0fdc51ec52408560baf15f6caa7f151eddc5c86503e7a647472a41f755fbe6863f4474ba9690f4681a709b0891f3e3c6ccd90c0f3664e522082357514e18dfa9af947cea48370b2a3b2dd0bd4e53fa6cf58a50a387fd083a4736ba00344c35e92a8364d640573d5433bfb8a3d350343cf9fee2e0b2dd2cc586ac501ca516cab67ff4feed90bfcdb430e6741d3adc13733e7dd30972b2eda7f507fd41e8c0ec34f6699daeac41888000fdfc913109fb8c5b12b8070f55396fe246d5c89e2bf20733003af920df048f276f5014c038b8de1aa97c0a460f89a7f36d1fd4761347a307aba6746481c29c7c33c373501157ee97c98212dec24d14c7ec8154f7508ff615fb2467b4c97632249998b365215e5dd6a1577702fd16ad705f204d22f0ebb7ac7484504aff3197c643c19cf9335dabcc79c7d7aa2d455f3464831754ba6d4033f27477e22b672376e59f58134d4a427c9cd4decd174e45e448d3beba424ddf2366121243a54ea0c56878f885f4cda6ac0f7cc37ce0b26747e7e01f9c999af7be1dc470c07319efeb72189530627f1c0f4cb41da99eaeb9c3dd83257924e8e4da87287bd3aa23f61011bcd3068bfbc83e553c04b13c324b7ebcc3385771615d91c4b7271ac5c24bfeebd95aae76ea569d1a26246169ca306880d6b60ff4fd6bae7f2a257fef4460829f5f3b310ab706bad97f56f49fc479a1b60c446326bfa6e70d20c0e56edf5dc05b02f81652f918a8eb81b1b4e01348caddfcf36416895772b3aee6d56522999ed0f09cbe14176aa88be02950e22b6e051beed1fe753e123fe164c0d108d0c7cc037089b9bffb26a2ccbcd12d2e87b89c4e43128ba2c84a2ece79372f4278093743b58e2ddf512ba4ebcb1609e9ec95db175fdee46c8afceb10ca13647158dcd7d2e08213805057c0ca1cfae5a595220342d366be100c1ea08c370c44a4b8d9e7a48ad1896391ee7f2b2ab078dbe46b3cca21e11f4c75164b932b7c5bee80660b376096888bbe5b5c84b579f4378b48f84ef87e61692d5a4b9c07b6d43f1e0b16dcae018213682bd981789ce86d9749788fe147fc1d4fad7048881b987d1fd5779e473d5e6ea30", 0x1000}, {&(0x7f0000001800)="430262eceb1a49613a124186a2c28e3e4a290c96f4ab81ae2cd3c2ce493f0fecdf4e66f1d2606beb576a005c72f165f0054ab137ea791c88f4ee35663c5dbc20433932e2d98b44d5867da39a60121d73471aaa360ac4234f1b843ea00aefb76358c2445efe8685780d88f09970d90394c16053b81a2d9acb4590242184776b2f86430a9c09d315afa454c70c0945a35320f264cc91c17929af6b3f85278ab856af41392faad12cb534523d742b544814d6e55b78cb9d3a5c2a7e5dce31115c866a86d1e55c85deb46fd3013737c79110575ed1e1776bb10e438e0d0752ca70fb9a14572f8e1e8aa0227367b0832a301fd5", 0xf1}], 0x8) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) utimes(&(0x7f0000000040)='./file0\x00', 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00@\x00'/20, @ANYRES32=0x0, @ANYRESDEC=r1, @ANYBLOB='\x00'/28], 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001c80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000060a010400000000000000000a0000010900010073797a31000000002400048020000180080001006c6f67001400028008000540ffffff0808000640000000020900020073797a3200000000140000001100010000000000000000000100000ae0c0e560e5cd086638b9b8ac859776dddb266283b8790718d166234490e21112e38b927c830b3d5f2c15f1a6"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000000703000000000000000000030000080900010073797a310000000018c1054000000002"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20008000) r5 = syz_open_dev$usbmon(&(0x7f00000001c0), 0xfffffffffffffff0, 0x40000) ioctl$MON_IOCX_MFETCH(r5, 0xc0109207, &(0x7f0000000240)={&(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0xd}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0xe0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001980)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, &(0x7f00000019c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x76, &(0x7f0000001a40)=[{}], 0x8, 0x10, &(0x7f0000001a80), &(0x7f0000001ac0), 0x8, 0x44, 0x8, 0x8, &(0x7f0000001b00)}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94) ioctl$EXT4_IOC_MIGRATE(r7, 0x6609) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f0000000280)=@IORING_OP_FUTEX_WAITV={0x35, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[{0xe1e, 0x0, 0x82}], 0x1}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r11, &(0x7f0000000140)={0x60000017}) r13 = syz_ublk_setup_io_uring(0x118b, &(0x7f0000000400)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) openat$sysfs(0xffffff9c, 0x0, 0x0, 0x15) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x200000, 0x0) r17 = syz_ublk_setup_io_uring(0x1a30, &(0x7f0000000240)={0x0, 0x8be, 0x400, 0x1024002, 0x8004d}, &(0x7f0000000380)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r18, r19, r20, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x1, 0x40, 0x1}) syz_ublk_add_dev(r17, r18, r19, r20, &(0x7f00000001c0)={0x2e, 0x4d, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000100)=@any_dev={0x3, 0x9ad, 0x0, 0x0, 0x1000, 0x800, 0x0, 0x0, 0x62}}}, 0x0) syz_ublk_add_dev(r13, r14, r15, r16, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) 2m40.284567003s ago: executing program 7 (id=15742): r0 = socket(0xa, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) 2m40.030556679s ago: executing program 7 (id=15744): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_GET_XSAVE(r0, 0x9000aea4, &(0x7f0000000000)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000001000)='./binderfs2/custom0\x00', 0x800, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001040), 0x4000, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1) (async) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000001080), 0x440500) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f00000010c0)={{0x1, 0x1, 0x18, r2, {0x8}}, './file0\x00'}) preadv(r2, &(0x7f0000001280)=[{&(0x7f0000001100)=""/82, 0x52}, {&(0x7f0000001180)=""/255, 0xff}], 0x2, 0x5, 0x1000) (async) ioctl$BTRFS_IOC_LOGICAL_INO(r4, 0xc0389424, &(0x7f0000001300)={0x8, 0x10, '\x00', 0x1, &(0x7f00000012c0)=[0x0, 0x0]}) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000001340)=[r3, r3, 0xffffffffffffffff, r2], 0x4) (async) ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f0000001380)={0xffffffffffffffff}) write$tun(r5, &(0x7f0000001400)={@void, @void, @llc={@llc={0xdc, 0x80, 'Q\n', "4fa99ccd50554b6c0d845392986827b0e360971b0186c180c56419a3be22254497624432c41511db72bc40295a86961e72cd07da714b2403ef3fdab368bd4aa4f463d72f09d27e4e0fef22010cbb59170b142231f091730095313f36a0ac436520882eb5dc8ffaa2682575109db2b8cad1a781ab4284d8eb986fa6d4aab0dd234b5780208d97ca691d8911eb6d20517655a1cd2e42c4e77fdcd7c43bfd791ab156b6a2ba89f6ee3c9c3345df1cf6b10c64"}}}, 0xb5) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r4, 0x40bc5311, &(0x7f00000014c0)={0x10001, 0x2, 'client1\x00', 0x5, "f6b0f0593791b5c8", "0d0a6fe81657e0d830a0186d274279ce13d6161f2ae8810549cd35f07611f4aa", 0x8, 0x200}) (async, rerun: 64) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000001980)={0x0, 0x1, 0x0, 0xf, 0xd2, &(0x7f0000001580)="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"}) (rerun: 64) ioctl$VIDIOC_G_FREQUENCY(r5, 0xc02c5638, &(0x7f00000019c0)={0x81, 0x4, 0x80000000}) (async, rerun: 64) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(r5, 0xc028644b, &(0x7f0000001a00)={0x0, 0x1000, 0x600000, 0x6, 0x3, 0x0, 0x5, 0xf}) (async, rerun: 64) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000001a40)) ioctl$DVB_DEMUX_DMX_EXPBUF(r3, 0xc00c6f3e, &(0x7f0000001a80)={0x10000, 0x80000, r5}) (async) r6 = syz_open_dev$loop(&(0x7f0000001ac0), 0x7, 0x400) (async) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$IP_VS_SO_GET_DESTS(r7, 0x0, 0x484, &(0x7f0000001b00)=""/251, &(0x7f0000001c00)=0xfb) (async, rerun: 32) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x9) (rerun: 32) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000001c40)={{0x1, 0x1, 0x18, r1, {0x10000}}, './file0/file0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000001e40)={'vcan0\x00', 0x0}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000020c0)={r4, 0x20, &(0x7f0000002080)={&(0x7f0000001f00)=""/255, 0xff, 0x0, &(0x7f0000002000)=""/103, 0x67}}, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000002140)={0x14, 0x2c, &(0x7f0000001c80)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x44a0}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}], &(0x7f0000001e00)='syzkaller\x00', 0x400, 0x0, 0x0, 0x41000, 0x42, '\x00', r9, @fallback=0x25, r4, 0x8, &(0x7f0000001e80)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000001ec0)={0x0, 0x10, 0x1, 0x1}, 0x10, r10, r4, 0x4, 0x0, &(0x7f0000002100)=[{0x2, 0x1, 0xb, 0x6}, {0x2, 0x3, 0xd, 0xa}, {0x5, 0x1, 0x10, 0x3}, {0x2, 0x4, 0x4, 0x1}], 0x10, 0x1e}, 0x94) (async, rerun: 32) r12 = syz_open_dev$dvb_frontend(&(0x7f0000002200), 0x2, 0x40) (rerun: 32) poll(&(0x7f0000002240)=[{r12, 0x108}, {r2, 0x2}, {r1, 0x12}, {r7, 0x1c002}, {r5, 0x20}, {r11, 0x4084}, {r6, 0x8008}, {r3, 0x2008}], 0x8, 0x8) 2m39.797850073s ago: executing program 7 (id=15746): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000180)) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) process_vm_readv(r1, &(0x7f0000000900)=[{&(0x7f0000000200)=""/80, 0x50}], 0x1, &(0x7f0000000c80)=[{&(0x7f0000000980)=""/133, 0x85}], 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read$FUSE(r3, &(0x7f0000000440)={0x2020}, 0x2020) write$cgroup_pid(r3, &(0x7f00000000c0), 0x12) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r5, 0x0) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000007000/0x1000)=nil) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) r6 = fsmount(r4, 0x1, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) r8 = syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) read(r5, &(0x7f0000000340)=""/101, 0x65) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io(r8, 0x0, 0x0) read$FUSE(r3, &(0x7f0000003b80)={0x2020}, 0x2020) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0xfffffffe, 0x2, 0x83, 0x3af}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000180)) 2m24.773661667s ago: executing program 37 (id=15746): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000180)) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) process_vm_readv(r1, &(0x7f0000000900)=[{&(0x7f0000000200)=""/80, 0x50}], 0x1, &(0x7f0000000c80)=[{&(0x7f0000000980)=""/133, 0x85}], 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read$FUSE(r3, &(0x7f0000000440)={0x2020}, 0x2020) write$cgroup_pid(r3, &(0x7f00000000c0), 0x12) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r5, 0x0) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000007000/0x1000)=nil) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) r6 = fsmount(r4, 0x1, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) r8 = syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) read(r5, &(0x7f0000000340)=""/101, 0x65) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io(r8, 0x0, 0x0) read$FUSE(r3, &(0x7f0000003b80)={0x2020}, 0x2020) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0xfffffffe, 0x2, 0x83, 0x3af}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000180)) 31.208022125s ago: executing program 4 (id=16277): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000076000d0b"], 0x18}}, 0x0) 31.04433762s ago: executing program 4 (id=16278): r0 = socket$rds(0x15, 0x5, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="6175040000008eb10175"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000100)={0x14, &(0x7f0000000040)={0x0, 0x1c, 0x5c, {0x5c, 0x22, "ca4612037155a3f865fb93a75c35f1e78e52704c94d901ee1af0ea58471b32886b1b7b5fa117c6109697e6993790d19f6877234d0915fb3db2f848e8103e8dbc5fde9f0db77c64c59c2ab6884a7fdc6a39aa19709a888e9bb49d"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001300)={0x1c, &(0x7f0000001240)={0x20, 0x17, 0x37, "8f3d864f4776b264e27af7e67ec7e79aa1a0c9f03aafe7fbbb7dbaf089209a136ff7d21cc5248ce6d65130c352ebd345db5b0540f36eac"}, &(0x7f0000001280)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000012c0)={0x0, 0x8, 0x1, 0x5}}) setsockopt$RDS_RECVERR(r0, 0x114, 0x1d, &(0x7f0000000000)=0x1, 0x4) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) read$alg(r2, &(0x7f0000000240)=""/4096, 0x1000) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000140)={0x1, @pix={0x3, 0x5, 0x38414762, 0x1, 0x0, 0xffffffff, 0x9, 0x7, 0x1, 0x3, 0x0, 0x5}}) 27.859167819s ago: executing program 4 (id=16291): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000000000fddbdf25ac1414bb000000000000000000000000ac1414bb0000000000000000000000000003000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000080000000000000000000000000000000000000000000000001000202000000008401050000000000000000000000ffffac1414aa000000003c00"], 0x23c}}, 0x4000) 27.611127664s ago: executing program 4 (id=16292): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x110) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) chroot(&(0x7f0000000500)='./file0/../file0/../file0/../file0\x00') pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') r2 = syz_usb_connect(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000500)=ANY=[@ANYBLOB="000704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) sendmsg$sock(r3, &(0x7f00000000c0)={&(0x7f00000010c0)=@un=@abs={0x0, 0x0, 0x4e20}, 0x80, 0x0}, 0x20004004) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44004) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, 0x0) syz_usb_connect(0x4, 0x4a, &(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES32], 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="200e25"], 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x110) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) (async) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) (async) chroot(&(0x7f0000000500)='./file0/../file0/../file0/../file0\x00') (async) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') (async) syz_usb_connect(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) (async) syz_usb_control_io$uac1(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000500)=ANY=[@ANYBLOB="000704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) sendmsg$sock(r3, &(0x7f00000000c0)={&(0x7f00000010c0)=@un=@abs={0x0, 0x0, 0x4e20}, 0x80, 0x0}, 0x20004004) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44004) (async) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, 0x0) (async) syz_usb_connect(0x4, 0x4a, &(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES32], 0x0) (async) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="200e25"], 0x0, 0x0}) (async) 26.850449093s ago: executing program 4 (id=16294): rt_sigprocmask(0x0, 0x0, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x20001) (async) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000d00)={0x4d5, 0x2, {0x1, 0x0, 0x8, 0x2, 0xfffffffe}, 0x2}) (async, rerun: 32) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) (rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, 0x0) (rerun: 32) r2 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007e3dc410cd0621013ddd0102030109021b000100094000090485000189fe1f"], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f00000000c0)={0xfffffe1a, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async, rerun: 64) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x16c, &(0x7f00000002c0)=ANY=[]) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x51a23}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008001}, 0x20040040) (async) sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="3400000011000500"], 0x34}, 0x1, 0x0, 0x0, 0x2044}, 0x880) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x401, 0xfffffe0800000001, 0xfa11, 0xf7ffffff}, 0x0) (async) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) memfd_create(0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 32) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x80000) (rerun: 32) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r4, 0x8000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000332000/0x4000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000053000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000691000/0x2000)=nil, 0x0}, 0x68) (async, rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) bpf$MAP_CREATE(0x0, 0x0, 0x50) (rerun: 32) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 26.405151157s ago: executing program 4 (id=16299): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x228c01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0xc0010004, 0x0, 0x2}]}) gettid() (async) r3 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r3}, &(0x7f00000001c0)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@FRA_SRC={0x14, 0x2, @mcast2}]}, 0x30}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) (async) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x0, 0x7fc00100}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x10, 0x3, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r7, 0x5452, &(0x7f0000000240)=0x2) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x10) (async) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x10) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) (async) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$nl_rdma(0x10, 0x3, 0x14) (async) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="10000000051401002abd7000fbdbdf2597c77982d8660fb4acbca8954e8de6b37cc5787d16ea55d3440f26e1d6a7c2a45c8f7ee66b2f39167ff3daf93b4b10d6"], 0x10}, 0x1, 0x0, 0x0, 0x4040800}, 0x8004) (async) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="10000000051401002abd7000fbdbdf2597c77982d8660fb4acbca8954e8de6b37cc5787d16ea55d3440f26e1d6a7c2a45c8f7ee66b2f39167ff3daf93b4b10d6"], 0x10}, 0x1, 0x0, 0x0, 0x4040800}, 0x8004) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) write(r9, 0x0, 0x0) 25.759738007s ago: executing program 38 (id=16299): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x228c01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0xc0010004, 0x0, 0x2}]}) gettid() (async) r3 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r3}, &(0x7f00000001c0)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@FRA_SRC={0x14, 0x2, @mcast2}]}, 0x30}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) (async) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x0, 0x7fc00100}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x10, 0x3, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r7, 0x5452, &(0x7f0000000240)=0x2) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x10) (async) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x10) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) (async) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$nl_rdma(0x10, 0x3, 0x14) (async) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="10000000051401002abd7000fbdbdf2597c77982d8660fb4acbca8954e8de6b37cc5787d16ea55d3440f26e1d6a7c2a45c8f7ee66b2f39167ff3daf93b4b10d6"], 0x10}, 0x1, 0x0, 0x0, 0x4040800}, 0x8004) (async) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="10000000051401002abd7000fbdbdf2597c77982d8660fb4acbca8954e8de6b37cc5787d16ea55d3440f26e1d6a7c2a45c8f7ee66b2f39167ff3daf93b4b10d6"], 0x10}, 0x1, 0x0, 0x0, 0x4040800}, 0x8004) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) write(r9, 0x0, 0x0) 10.190131025s ago: executing program 9 (id=16374): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sched_setattr(0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000380)={0xa, 0x4e21, 0x1, @loopback, 0x400014}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc895d8eb00066c2", "c5998c867c22b401046a89606ffcf92e", "2c5be7ad", "a0ca05c0707e52f4"}, 0x28) sendmsg$nl_generic(r0, &(0x7f0000001540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001500)={&(0x7f00000003c0)={0x1110, 0x36, 0x100, 0x70bd29, 0x25dfdbff, {0x1b}, [@generic="df75fba56b9ddb01bc4b065857e8190c895deda2ec9f315ed6f3878b35b19ff149ddf0475257f55b1e9311608f391ee9963e7304249c1cfa16fb8917f2327414175103bc2e8b44b9012da79552fc66fae0a546714b295cdda0503bb8dde94d804843a5d8c3b5b53227c8586d163155c5a326451c20e0942adb46f7f8ad68bb631be899935196c9620d36a5f4da175764231fa9bfa358b8449d6da286fd5110eee2bb85c7b02346c6fb0507efbb72f2f845411a6848984277ff05822651bf435d0ebdd231e34e65e36e00ef12d1690793e8f690c97d3f07", @nested={0x1024, 0x94, 0x0, 0x1, [@typed={0x8, 0x94, 0x0, 0x0, @ipv4=@multicast1}, @nested={0x4, 0x12c}, @typed={0x4, 0xe8}, @typed={0x7, 0xea, 0x0, 0x0, @str='tls'}, @generic="ec807e6f156537805a00ccc505ad2f8d529be377faff693436dd0ee8fbfbe5c4b3fef1eedd2df08afa8094c26658b6d92f86f504e1598ab8dcf4d55b60cbdfa93e34b3ee9a3726bd49219a031560bf7f61f425f58e34370c5277e47c2221eb7b89d968f6ad61e6046af6741b9b0fc0dfac5748ac68bc4d80951e412c9325edfc432f119669b726b0eec3e0abc50c48f7cf3df749d83feb5b406aae9f5149aef7a615dd932434a24057ddd8fcd030f37a6ff8076ce0cf759f922fe14bd183b2364045dc496f786db0e04bfe463c54919f539854960e7139f54b8c88dd33144ce9d53357d5b2eeb9f19a4117fc3f908c9daef4248a47bf38279d77d4163061553479e79285fa4af7a7e5e1434c5dbe823bd7dd80662dddb99a17495c68dba62320367ec7ebd27a091db140e9d6e7d1437e622266c7e65018f9335bbac4ecb61762c01663eafd2c46d68eb3d44b5606367c8540f0fff5f28e0fd756abf8f0b74c5fb0bfcb197d1a69e9ab44c1c26c69744370e4f8fb080df12023548cb28e9f345cfca66d43357faf80f5aa3692304f537841fd303f3dff092216e9a385f237577253acde4785911dd4a8c0b3f1442a0d64acd83da5eb924bd3961c81ff41ed51d40e99d44d64d97ddd5bf64ac9e564d549ffa25213ee63528408456e1deffcf8ea589735c138946e8a05396f4363fac470309b2f5cdca2aa2ce493875817a8d925e025f3290c6d11f76bfb8691e86145a4995c5593750c1b61af79ca3add273bc243501c716d2c342bcb2ab81e32ff17a7ece8100ca9778febc96fb10da95fa88b2663fe9fe80a65664d626dcf43c71ec648a5269375919776b2f6bf4dc2caf423fc04b005642c73e80fa31bb1a61f459efa9437c518e74ea0c6b92dbdbe522e274162d2d628f898eba1b817f30b457964e3f1ab4f9cc0388b74ca05975e0ff992acf4ecca7664bd5344b1ecb8e5b1b6b96779a16c7cbc9d704c8d3cd61330a5963e14cfea07d297b5ca0b381c0f02ccfd2b57453c0ab25a12fc9c22deeed26019781139bcca14144147e8f0342a38f4c7274fe10d0023efaef5b4d8c08d11f26a850e2e54917ee2020abd8f57890a22491de892d3f9810da3264d4657149a9886e976a5c40be2bcfcacadbf078e6fc78f5b97e62ae2a6217fb85307ec327fe9eddb43bdc2fb62692a2de06cf09e35fd567f4bed455f203103de21789e3198fb97addb2b21de6d397c58f6431d0b4506cb007d6adde31dc68b316c0cf758c9407c1dc27f0940220500e0b090148f01d0914aa72ab92741f1cb465b7c03aa23a73a7a47dca87ce296c63f49155c9d958b7fd29cf3e1bd057395a9f0a9dd703211667832931f86e6a548b40d4fa93f8873167b360fd7f8f8f3bb0a56bec7bc435fc9a4999b7bbcba324fbd332f522d424aa216a85176bcd4372b2aeb6de26b81aa47730597669e1ef8986fa8a51dea9a769e43c3b41ae6dc52791f8bbdd144dbdf31e2f136f7ad765e689a71172cbceae397283c8994285d66c4411acbae0486591f2790591fbf513126b827976ae7f6ef1a880aa09964a68f4ebdb4398398785ade7c7375f9b371189dfe64b36000773c94f4026fa12df9cee8f5223120444707491c1defd809174992b5ea8a3ff770712d642dcf2880d00ece7091bd3974378df7f4484712c38ca73f2eb42bc0cac9e9f0dfa1da5239135949bcfe96d82691b8888482a2570e31ed8338c5a14ffdb6d10cfbaff7ac06d4876c02e2cb0efb6eb0b5794e0c38cf90e49473214aca0c36a742bb4fe9373bf445a71ac3ca8e6127d5f7960373c7da79277bdc17a45394213a11c1157214223c8e4425ac7eb94d8f31b4b312aebbec7e921c8457a8ccd311d80b88282e40a907895b05bc4f06fe1d035ca962f854a93c9eaeac314ff5e7f84e806f089e5943af0026da91e7247cd9617529b65e321847a8990b4c0cc38ebbc178c60e476f7bc0153fea45bcc8fb98fd260b9ac77a84e9f57a96b42ac08f0cd663e10248d17f2a9601e5bdd7bcbee15d4c7121f0ca8beafa3bafdc825c6f718e0d42e18ea633f58f8560a6535c58c56097cb0bc2b8bf7290b140001ba21d2c5db906ee5f8575d5bc1fef44bdfa193d33efce7ab937ce0bd5671c93f65a10ccfffa5ca3083379c15c2aeff024f5edb370228a97f7651ad1bb85f0301f6823eda6a7938ae531cd4e0ed16c85f51585a688b3435435f8fac88542527556be41c1a6adeac3eaa6b4e0399c73421e640f32db7ca523a3ebfbdb57478e350f7d4849bf1a04fad8b429e068c99a1a14ba779240c286076e3d783b486fcf80aed2bff278a538ddd1450e6ac0c724c81e509e6eeda46afc05f4e5da28afb1017178b2df302662952ef0d8ebae369561632e47e82bfdf33a220823b0514f287c28beb2aefbe55712bb55701a38b7efe9601bd4ca4f0a80b7db41174c938eea140753d3955a559a3aacefb28d5b85d4712060e9257679d6f5c7699cbe67720a7983b46a8a6a971c9da33907dcda45f9dacd6a919dc3f343a3b5ccc021008adf1ab0efbed7a350c365ea3179731b7884860846fadb752a2a35e2f362bad147970dd5f2cc57b283633b013bcd813587241d83512cf1761ffbf7fbb9379874adbdbe0c2a9bb77596cc8e5bdedf4082710b59c371a41d40551d78c2b32e505c44e13e6da9dcb2a301d8f81b9179067f6d1c4e3afc62f0a62bb7e699bdc4a087451ecc95f162767975cc983daffc6f352e6b00077095b53bda885be9d72d77995b68e4574b2695699b06929465b723d72ce110a1a4971423259cb544d39c19b44304fbacefd796421619c72657012c8b7ed3a6dc03ecd1bc65ef62b530d9a808f13afe32b06cc088587c1ec7469433bf4d30e1354296c8d6dcb90d682f23021889227c373ddc20ab05d5d14ae9c250a66131327709b51f6f6f5b861ea9a409255c78a029267358947c198abb57c81fdac18c5507ee2fff4680fe1c73cf47a2e9511b1b78931e2cecd2c2042b747a94c3649de2b3fade0cd9002ec4f476b09bc672a12bc2e65e4bc5d4e002a98f013d22c8cad654f24f6466e7560df0165afe49d2e3720d7cbd089e91eea28d4d9efd3dfa883d31a4243df31e996f83388a53b7c4637a7e50ba55d040d4600f12b8954134757d9fcfdd6757efa274d00ca10093a6ad90e3609710b95b026dfb533e5de1d90c224c4b5dc43aac131fbc0c312adb3d7f451f8ee21df71efa1e528e1b87df9d529e2c799998be7c939f26eaf6e583e8ca589fe8f092ae2dee7462d9495bb9087282970b072c2a2cbdb012623555de917538864b9f107409aa0876d037ff8ef9ce9900134bead26b71e1f457163091e43b100972789a96631ea1567bac21e7e22ce9860a31e11f2f7678d0eb967b1ea27f4ed271d2825c9d6518f66deacc134af9a971bcc2d476f009c2f60c4ad384bad69fc8204a01e8ca235748be988f866eef67c4396e34289a88e95bc4e513aafbb89468cd5c9ad4c0adf54e63790dc4c21d26eb236efbaaedb897143e6314d92272e2267b8281682fe7be054a13216eaff4e88c45513e3b71429c2bbff3c6a2ffa5a114afc2d739074550ceb87c6758473d87b5b5441ef77f79e4f68006b5e34882aae9530e0234c40f2805de0ecd1264f96bfd37fc14b74ae33248fef2fe9fbd041f726ea2494243f4e407138ec1d3b237513b731c5b76636b60384f793ff0c9f7004a6dd4d3424f8a3927888bd67ec2c67052a03a4f77507086d07a7dc4aa095e6326622adde6f401c062923b3ddc4fd5f758879041f1b72383c29a760f288cea22cfe5145750907ac41abf2b2595100fde8ef8209082e6e697278f6181e0a28968fae2655b06ea9eb35ed658a97848dd6c8f46d9359a0284a16bfeff407f66eedf0d4a6e33cf8bf06227167b86dda4f9c7d576e0e868bf3cd8d55f485cf3512201644a4eefcf2913cfe9cabd31c02b3dd74638ecb6f6d376c989580c332bbcc2bbd8700a145ecce089f7ae1547e958c52179c6ba66f2d739df35a6dea174c0f4dccb9448b670b9b8df85875cd3d7ace0506ad032dcf65562b1f1393e6afe53f757e01e90137a7181beee54d758dd43672379e3069250d5eeb1241e6e0ebf481a66594332e87d65c4d25f1ad637cd1d8cf66f2d8e540aa4a5142297e81ace52885c42f797044b9bc09954fa9a0508f626eb361bcfe7c2c1716e1c31f0bd0ad02119500793b7f3a1873d12d3b049640d8b0f722cc3858b7d636e9ef451774bf796b0dd62c835d3ff1b7a0f56ca138a79105f9ccf1ee523d94de76e71eaff40b343c2e81f77c9b28c1685966deecfcae3b8e73bd37e768957136f94cfdd672c79bfa5a5a2d3c076a3c8c42d0365d1f649e3aede466bb5021763f4c75bc3ef6a5c3aec9dfb472395da953f2948c74c5169a881221dd38327b255e49e794dffd37d4ef4002da76ce33ba6306a6da096b23cdbad0c253c8792f455773ef40abaa05fee507787e63a575ffef38f32ec8073b8b4189e5657e93361980dd1521876f5d13dff641277d098fe88ad28b159bbcc05a3c3d05e530e68b6fbf8e9cd3a8bcefff670580aef11364cfb99f7a8076e7fd04173b98b570a07642758b790985b52c371b1719c09aa7a8c3ec500da322ec721eeee376ea3baedf683dd158565f3a0749cdf45b1276e769e9e68a699967f104f91d2bb08affaaf99233e15f8efcf71534bb3c9a12e8561270b7245ed7855b00ae64fec7ed86dc3fb4534c32c43e537e429f0f84d793a40f3798a0b43e1a09463230f627ee4b0e3d2b26b9f72a4ba9e736b0dcb700ca2ad3b823fae5bab0e2a1155942dede39e3f5a04308976a1cc5274f8b31d163a9a54737e4d25543bf3136681681732edd812903e33996ed46040689480ade60cc7a3ec401e942e26ef22d522a8cf97ef6d26fbaf79e6661c580fc35c84e26072ce7fe975ea4dc12517cf36236f535f9c3fe724fe1fb765b7c6b69a369ab7eb74d470cb3787728dc76579dfbae1de00f0144e1fa0605de8f400804f7e31e6cf73ef56ad90d7d8b08b6de9c660d2fb1498e930e70dbb999657a04f3169e1d94ebfa39b37d73611c64154ddfc63bde08d27b902c495aa679764c44d47bac4b1b5b4ab6dde76548a8e3fcd5f4844c5c016339d148edae8fcf5432153d7250c2eda47973df95849d88e416e9e575aa7e04ae696fac1aa170f8cc3d788eab6fa3700ad5941081f3233ef4898163522d7f988cb3db2b86845a8e944a5504d521f645e5683b2a8cf677b61bb25c9e9eab69d8069347af8d0df98e22dfa6d71ca22d57703d3a9cc2b19e787fcce94eb7069aa1ee805c2d461b3de577cc677bd879bf73a9af49ee6188e52a3e62a7e6ab2d5f10ed4a73609d909da8b04bc37b6de1ff356d18812d7ccc812b7a4c00624134e8f39dedca652a67aa4123b596ce036b9dcea26ce362b800463a104d67191a5226d3059c608c38f8ec6aa2193174fadd559ea38a146408a968599c52ce63c35f232556fa2a2f0bc8bdaf081df42fb288976e784a93cb2f6818293745371e5aae114ded4f63160386d41c75eb3c2e90b24480fcf48bd0633ef0487e174e26e3aa379106e7154873de25e77d4807c3f261b2573c30c302c4273898989d809745cb59d480f395665136fda1f1c5a9934f6b627aa23176ffc387f3b43f1580bc206f70fb815432daefdb59088544f438d9e8d7fe4b93c78402287081a4b8f2df9269ecde512ac84dd19b1fd2703279313eb60bbfdd6779377276d37017b2792595eadb6e2c4f783c2", @typed={0x8, 0x7c, 0x0, 0x0, @u32=0x401}]}]}, 0x1110}, 0x1, 0x0, 0x0, 0x880}, 0x20000180) recvfrom$inet6(r1, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x0) 7.729839588s ago: executing program 1 (id=16388): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000180)={'syz1\x00', {0x10, 0x0, 0xffff}, 0xd, [0xb86, 0x7, 0x4, 0x7, 0x7ff, 0x3, 0x5, 0x100000, 0x5, 0x4, 0xd, 0x3, 0x9, 0x1d, 0xc795, 0x8, 0x7fff, 0xfffd, 0x7, 0x4, 0x1, 0x6, 0xa, 0x6, 0x1, 0x5, 0x0, 0xfb82, 0x3, 0x0, 0x0, 0x1, 0xd, 0x2, 0x0, 0x1, 0x0, 0x7, 0x5, 0x5, 0x9, 0x5, 0x2, 0x2, 0x1, 0x8, 0x7, 0x4, 0x1, 0xe8, 0x5, 0x7, 0x4, 0x2, 0x2f03132e, 0x0, 0x3, 0x9, 0x3, 0x0, 0x0, 0x0, 0xdf, 0x287f], [0x101, 0x31, 0xfffffffd, 0x7, 0x23e, 0x80000001, 0x40a1, 0xe, 0x7, 0x8, 0x9, 0x7f, 0x75, 0x8, 0x7fff, 0x2, 0x7f, 0x5, 0x73, 0x8, 0x3, 0x1, 0x7ff, 0x4, 0x4d, 0x6, 0x0, 0x9, 0x0, 0x2, 0x8, 0xf, 0xd, 0x2, 0x2a, 0x8, 0x5, 0x3, 0x1, 0x8, 0x2, 0xfffffff0, 0x6, 0x8, 0x7cd, 0x8, 0x7, 0x3, 0xc6, 0x7, 0x9, 0x7, 0x10000, 0x6, 0x5, 0x0, 0x3, 0x4, 0x6, 0x0, 0x2, 0x0, 0x6], [0x0, 0xfffffff8, 0x1, 0x3, 0x9, 0x8001, 0x3, 0x3ea7, 0x6, 0xfffffff8, 0x9, 0x1, 0x700, 0x0, 0xfffffffa, 0xd, 0x7ff, 0x6, 0x80000, 0x7fffffff, 0x9, 0x48, 0x2, 0x6, 0x1, 0x9, 0x3, 0x709, 0x9, 0x9, 0x2, 0x7, 0xff, 0x7fffffff, 0x5, 0x7, 0x43cd, 0x5, 0xd, 0x8000, 0x4, 0x40, 0x7, 0x7, 0x8, 0x12001, 0x4, 0xffff89a1, 0x1000, 0x19, 0x9, 0xa59, 0x3ff, 0x1, 0x3, 0xfffffff7, 0x9, 0x2, 0x10000, 0x1d, 0x3, 0x4, 0x40000, 0x1], [0x7, 0x8, 0x800, 0x789c, 0x40, 0x6, 0x1000, 0x8004, 0x2, 0x3, 0x2, 0x5, 0x7ffff7ff, 0xd, 0x6, 0x7, 0x8, 0x9, 0x7fffffff, 0x0, 0xffff, 0x0, 0x6, 0x7, 0x0, 0xda43, 0x2, 0x5, 0x14ac3b3b, 0x2, 0xb, 0x0, 0x2, 0xef7a, 0x1, 0x3, 0x81, 0xff, 0xb6, 0x3, 0x9, 0x10, 0xa114, 0x3, 0x6, 0x800, 0x4, 0x40, 0xfffffffb, 0x4, 0x0, 0xfffffff7, 0x7, 0x800, 0x0, 0x9, 0x5, 0x3, 0x2, 0x6, 0xe, 0x9a6, 0x5, 0xffffffff]}, 0x45c) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000004b53445200000000000000000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) 7.494899592s ago: executing program 1 (id=16389): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req={0x7, 0x400, 0x1, 0xfffff001}, 0xfffffffffffffe08) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f0000000380)={0x80}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x1) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r2 = syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x2182) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x40045730, &(0x7f0000002300)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) r4 = socket(0x840000000002, 0x3, 0x100) connect$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240), 0x4000095, 0x0) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYBLOB="1e17af1e32833318e77fd14cc2143c640000000000000068fb7534e8821e0de11191090f34f3f5396c9e5ffc338ab5a17bbab1a87b0d60ce28a0c55100", @ANYRESOCT, @ANYRES64=0x0], 0x40}, 0x1, 0x0, 0x0, 0x2400c005}, 0x0) write$binfmt_script(r1, &(0x7f00000002c0)={'#! ', '', [{0x20, '\x0f\x10\t'}]}, 0x8) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') r6 = openat(r5, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) write(r6, &(0x7f0000000d00)=' f 0::7.%.0.1 2\\000000\\0 l\\calhost\n', 0x24) read$FUSE(0xffffffffffffffff, &(0x7f0000005ac0)={0x2020, 0x0, 0x0}, 0xfffffffffffffd28) write$FUSE_BMAP(r1, &(0x7f0000003a40)={0x18, 0x0, r7, {0xfffffffffffffff7}}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) mincore(&(0x7f0000571000/0x3000)=nil, 0x3000, 0x0) execve(&(0x7f0000000300)='auth.unix.ip/channel\x00', &(0x7f0000000540)={[&(0x7f0000000440)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}, 0x0) io_uring_setup(0x200014cf, &(0x7f0000000580)={0x0, 0xc8a7, 0x800, 0x3, 0x17}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r8, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000000640)=ANY=[@ANYBLOB="a80000000308010800000000000000000100000a05000300060000008400048008000140000001ff080006400000000708000240000000070800014000000007080005400000040108000640000000050800014000000009080003400000ffff080001400000000e080007400000000708000340000002000800034000000003080002400000009e08000440ffff2cb60800024000000b3b080003400000049206000240"], 0xa8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX=r5], 0x50) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) 7.301860974s ago: executing program 1 (id=16391): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) (async) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000016c0)={0x61}) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000016c0)={0x61}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000003c0)={0x1}) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8}, @NFTA_XFRM_KEY={0x8}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x8000) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = epoll_create1(0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/mdstat\x00', 0x0, 0x0) (async) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/mdstat\x00', 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000500)={'tunl0\x00', 0x0, 0x7800, 0x8000, 0x7f, 0x0, {{0x14, 0x4, 0x3, 0x3, 0x50, 0x66, 0x0, 0x4, 0x66, 0x0, @rand_addr=0x64010102, @multicast1, {[@end, @timestamp_addr={0x44, 0x4, 0x77, 0x1, 0x1}, @timestamp_prespec={0x44, 0x34, 0xed, 0x3, 0xc, [{@loopback, 0x5}, {@loopback}, {@remote, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x84}, {@multicast1, 0x1}, {@rand_addr=0x64010101, 0x7a6c319}]}]}}}}}) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)=ANY=[@ANYBLOB="200000004e562c27ba17190a2dd93746a6f312d24f547cdb8b34541b4bd81b416484a76d21", @ANYRES16=r7, @ANYBLOB="010026bd7000fbdbdf25010000000900010073797a3200000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000810}, 0x40800) sendmsg$SMC_PNETID_DEL(r5, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000680)={0x90, r7, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x3}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x90}, 0x1, 0x0, 0x0, 0x890}, 0x4b389d13d2dacaa0) (async) sendmsg$SMC_PNETID_DEL(r5, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000680)={0x90, r7, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x3}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x90}, 0x1, 0x0, 0x0, 0x890}, 0x4b389d13d2dacaa0) syz_usb_control_io$uac1(r4, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.idle_time\x00', 0x275a, 0x0) recvmsg$unix(r8, &(0x7f00000027c0)={0x0, 0x0, 0x0}, 0x2) (async) recvmsg$unix(r8, &(0x7f00000027c0)={0x0, 0x0, 0x0}, 0x2) setsockopt$sock_attach_bpf(r8, 0x1, 0x2a, &(0x7f0000000100)=r10, 0x4) sendmsg$unix(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001700)="4a525b1973", 0x5}], 0x1, 0x0, 0x0, 0x40080}, 0x0) sendmsg$inet(r9, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$inet(r9, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r9, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x20040000) recvmsg$unix(r8, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x40000062) (async) recvmsg$unix(r8, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x40000062) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$uac2(r4, 0x0, 0x0) (async) syz_usb_control_io$uac2(r4, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) 7.107475662s ago: executing program 9 (id=16394): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) dup3(r4, r3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) epoll_create1(0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500200000040"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3dfd, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) openat$sysfs(0xffffff9c, &(0x7f0000000240)='/sys/power/freeze_filesystems', 0x80, 0x180) socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0x3, 0x2) socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e502a988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x20000811}, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000100)={0x8, '\x00\x00\x00\x00\x00\x00\x00\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r7, 0x0, r8, 0x0, 0x38f9, 0x0) fcntl$setstatus(r8, 0x4, 0x2c00) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) 3.783087096s ago: executing program 9 (id=16405): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000000f1401002abd70000000000008000100000000000c00452072646d615f636d00"], 0x24}}, 0x0) fsopen(&(0x7f0000000000)='fusectl\x00', 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) 3.459727028s ago: executing program 9 (id=16406): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000280)=@assoc_value={0x0, 0x5}, &(0x7f00000000c0)=0x8) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) preadv(r1, &(0x7f0000000640)=[{&(0x7f0000000180)=""/90, 0x5a}], 0x1, 0x6, 0xa) 3.310836346s ago: executing program 1 (id=16407): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)=ANY=[@ANYBLOB="98020000400007012bbd7000fedbdf25037c00000c00c28008006300ac1e0001780201"], 0x298}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x88, 0x0, &(0x7f0000001300)="b461802305624431ed33730100010446b20aed0200000000000000d5fe00c6fc6ef8eef9757a601bee936390009c5bbd000000003632b69f0eb2062818f298ed60abbc5f6322cbfac4973cf2bef7c0b4452e43e69aa108690000093f656d8f630632395fd3377dc1ee6daeeae21d79df2cb07600dbf28eda3f94df97f6296b9bc0a0aa770b5588c5", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffd}, 0x4c) r1 = syz_open_dev$sg(&(0x7f0000000740), 0x6f5e, 0x8240) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040)=0x85) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_STOP_UNIT(r2, 0x5319) openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) unshare(0x10480) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000084002, 0x0) r4 = dup(r3) r5 = socket$unix(0x1, 0x1, 0x0) syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x2, 0x3010, 0x3, 0x3}, 0x0, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000040)=0x10009, 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x3, 0x6, 0xfffa}, 0x3a, [0x20008000, 0x1, 0xf, 0x8, 0x7c, 0xfffffffe, 0xb5d, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x3, 0x5, 0x0, 0x3, 0x400, 0x0, 0x7, 0x40, 0x1, 0x24, 0xd, 0x3fffffe, 0x0, 0xffffffff, 0xe665, 0x204, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x400003, 0xe, 0x4, 0x80008071, 0xffffb8f3, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x7, 0x81, 0x4, 0x3ff, 0x8, 0x0, 0x7, 0x9, 0x8, 0x4, 0x0, 0xfffffffc], [0xc0, 0x9, 0x8000012f, 0x8004, 0x5, 0x8, 0x129432e7, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x6, 0x2, 0x0, 0x45, 0x2f, 0x1782000, 0x313, 0x78, 0xea4, 0x5fa, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x3d, 0x1000005, 0x5bea93c3, 0xd, 0x4e0, 0x2, 0x4, 0x81b, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x4, 0xfe000000, 0xffff, 0x2, 0x4, 0x10009, 0x3, 0x9, 0x9, 0x9, 0x20003, 0xffffffff, 0x100bc45, 0x48c93690, 0x80, 0x3], [0x7, 0xc08, 0x4, 0x5, 0xfffffffd, 0x40, 0x31d, 0x9, 0x5, 0x7fff, 0x9, 0x10001, 0xb, 0x4, 0x5, 0x5, 0x3, 0x1ef, 0x0, 0x8, 0x86, 0x3, 0x1, 0x3e7, 0xb, 0x5, 0x0, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfb1, 0x1000, 0xa2, 0x7, 0x2000a9, 0x5, 0x7, 0xac8, 0xbc, 0x1, 0x3, 0x7ff, 0x12b, 0x6, 0x1, 0xa, 0x20, 0x2, 0x1c, 0x8867, 0x3, 0x2006, 0x80a2ed, 0x40000005, 0x25], [0x9, 0xbb33, 0x7, 0x8, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xcea, 0x6, 0x2, 0x57, 0x7, 0x3, 0x0, 0x10000, 0x4, 0x37f3, 0xffff, 0xa622, 0x1, 0x80000005, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x7f, 0xffffffff, 0x80000000, 0x5, 0x4, 0x4c8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0xfc, 0x40000047, 0xb2, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0x8a1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x8, 0x5, 0xb1e, 0x6, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x400}], 0x20000000000000dc, 0x0, 0x0, 0xfffffffffffffcdd) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x8002, 0x0) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000000)) ioctl(r3, 0x6, &(0x7f00000001c0)="bdc2068c072c2b8ab074fa43d393b66814dc7d80133361008b2099d2265871dbef1c61f987d6f9cdbed99a05f5803a8c243a0f24f0308f01bf9c1581a4b199618d8ef81a848c4052e465427c86d509632827acba8b169f34244dc7e5e91d786a415fee8ff3d561f4e0a2e0837ddb2e2ad82e01503cb31c60e524b2ac1416a9a049c78b2fa0463bd1bbc9e4a33eca0df32be9145adb557779701cbda37c2b20dc8425") r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) 3.274067772s ago: executing program 0 (id=16408): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) ioctl$VT_WAITACTIVE(r0, 0x5607) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x2c}, 0x1, 0x40030000000000, 0x0, 0x800}, 0x80) r2 = io_uring_setup(0xbbc, &(0x7f00000000c0)={0x0, 0xdf62, 0x2, 0x2, 0x210}) io_uring_enter(r2, 0x100000, 0x2, 0xf, &(0x7f0000000000), 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80045510, &(0x7f0000000040)={0x0, 0x200000}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x4048814}, 0x8041) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r5, 0x40107447, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x4200, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000200), r4) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="14ab16addcd2f97c0107000000", @ANYRES16=r7, @ANYBLOB="000229bd7000fddbdf250100000008000200f8f50000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4008840) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, 0x0) 3.250931247s ago: executing program 9 (id=16409): unshare(0x66000080) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x6, 0x2, 0x4, 0x0, 0x2, 0x5775d27c, 0x158, 0x20100}, 0x20) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c00040006"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) r1 = socket$netlink(0x10, 0x3, 0x0) unshare(0x28000400) (async) unshare(0x28000400) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40840c0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}}) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RRENAMEAT(r2, &(0x7f00000002c0)={0x7, 0x4b, 0x2}, 0xff7a) (async) write$P9_RRENAMEAT(r2, &(0x7f00000002c0)={0x7, 0x4b, 0x2}, 0xff7a) write(r2, &(0x7f0000000140)="6e243d40a09c9b2b1769f857a4ff31ec5405ea0bd34b61cf98995bc65634fb5bbdb028dfa3d3d60e23a3f21dd144fb75bb20d31451fc085c7fed527b0f441b1aa2665ae9b990fbc327f19325672a4f75e3d36188258fed16a7d14a03cffcc79d95e6620adf932a34bc2d39be1a7c1353064ab439c924166b70864e1d85ee23dccb4ac560da4009", 0x87) (async) write(r2, &(0x7f0000000140)="6e243d40a09c9b2b1769f857a4ff31ec5405ea0bd34b61cf98995bc65634fb5bbdb028dfa3d3d60e23a3f21dd144fb75bb20d31451fc085c7fed527b0f441b1aa2665ae9b990fbc327f19325672a4f75e3d36188258fed16a7d14a03cffcc79d95e6620adf932a34bc2d39be1a7c1353064ab439c924166b70864e1d85ee23dccb4ac560da4009", 0x87) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x2, 0x300) socket$inet6(0xa, 0x3, 0x5) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x1, 0x40) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000480)={0xfffffff8, [[0xfffffffe, 0x8, 0x4, 0x2, 0x7, 0x4, 0x75f374dd, 0x81], [0x40, 0x6, 0x9, 0x49b2, 0x1, 0x0, 0x1a8, 0x92], [0x8, 0x81, 0x8, 0xffff, 0x2, 0x10001, 0xfffffffd, 0xffffffff]], '\x00', [{0x10, 0x5, 0x1, 0x1, 0x1, 0x1}, {0x9, 0xe, 0x0, 0x1, 0x0, 0x1}, {0x5, 0x4, 0x1, 0x0, 0x1}, {0x3, 0xb, 0x1}, {0xb, 0x9, 0x0, 0x1, 0x0, 0x1}, {0x9, 0x7ff, 0x0, 0x0, 0x1}, {0x100, 0xba5, 0x1, 0x0, 0x1, 0x1}, {0x7, 0xfffffff7, 0x0, 0x1, 0x1, 0x1}, {0x5a7, 0x2, 0x1, 0x1}, {0xffffffff, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x8, 0x9, 0x1}, {0x7ff, 0x8001, 0x0, 0x1, 0x0, 0x1}], '\x00', 0x64de05a7}) (async) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000480)={0xfffffff8, [[0xfffffffe, 0x8, 0x4, 0x2, 0x7, 0x4, 0x75f374dd, 0x81], [0x40, 0x6, 0x9, 0x49b2, 0x1, 0x0, 0x1a8, 0x92], [0x8, 0x81, 0x8, 0xffff, 0x2, 0x10001, 0xfffffffd, 0xffffffff]], '\x00', [{0x10, 0x5, 0x1, 0x1, 0x1, 0x1}, {0x9, 0xe, 0x0, 0x1, 0x0, 0x1}, {0x5, 0x4, 0x1, 0x0, 0x1}, {0x3, 0xb, 0x1}, {0xb, 0x9, 0x0, 0x1, 0x0, 0x1}, {0x9, 0x7ff, 0x0, 0x0, 0x1}, {0x100, 0xba5, 0x1, 0x0, 0x1, 0x1}, {0x7, 0xfffffff7, 0x0, 0x1, 0x1, 0x1}, {0x5a7, 0x2, 0x1, 0x1}, {0xffffffff, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x8, 0x9, 0x1}, {0x7ff, 0x8001, 0x0, 0x1, 0x0, 0x1}], '\x00', 0x64de05a7}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x200002, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x200002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r5, 0x0, 0x0, 0x4}, 0x20) r6 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xfffffffd, 0x10000, 0x0, 0x40055, 0x0, r5}, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f00000001c0)=@IORING_OP_FUTEX_WAITV={0x35, 0xa, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x5, 0x0, 0x2}, {0x0, 0x0, 0x2}, {0x400, 0x0, 0x86}], 0x3}) (async) syz_io_uring_submit(r7, r8, r9, &(0x7f00000001c0)=@IORING_OP_FUTEX_WAITV={0x35, 0xa, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x5, 0x0, 0x2}, {0x0, 0x0, 0x2}, {0x400, 0x0, 0x86}], 0x3}) r10 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240)=0xffffffffffffffff, 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000280)={r10}, 0x8) io_uring_enter(r6, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r11 = gettid() bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r5, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0], 0x0, 0x90, &(0x7f0000000780)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0xd8, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r4, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r11], 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) 2.820698034s ago: executing program 5 (id=16410): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x6, 0x7, 0x3f8, 0x1, 0x32}, 0x9c) (async) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) (async) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x280143, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_crypto(0x10, 0x3, 0x15) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000000)={0x0, 'batadv0\x00', {0x3}, 0x7}) (async) pipe2(&(0x7f0000000000), 0x84080) (async) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x18}, {0x18}, 0x0, 0x7}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r6, 0x5393, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c0000006800010003001000fdffff7f00000000000000000c0002000100000a15000000080010"], 0x2c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4004080) (async) r7 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) r8 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newroute={0x60, 0x18, 0x401, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, 0xfe, 0x2, 0x0, 0x1}, [@RTA_GATEWAY={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x2}}, @RTA_OIF={0x8, 0x4, 0x2}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}, @RTA_ENCAP={0x20, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0x1c, 0x1, {0x0, 0x2, 0x1, 0x1, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}]}, 0x60}}, 0x0) (async) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c00010000020101000006000000"], 0x60}}, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r8, 0x82, 0xfffffffffffffea8, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r7, @ANYRES16, @ANYRESOCT=r7, @ANYRESOCT=r7, @ANYBLOB="91f74e63a34178cfc28f351b89915c73c97922ac8a66510d8a24d03537e1b4e205699240419ee37cbc80aae0788f2ca3352a51c84dce11bba4f0781adaeeb154ad8fcc8949ee1356828c4f55b4f7d27684633efcd2903b291a6116d2e0cf7bc83779f4c1dcf8011591c77629023223034e6b89e6de359a590b8dd316d5cde92ba0f67aa2e7203e7616f49ed58974ed688e4369a4f67f1a5b350a"]) 2.772575741s ago: executing program 1 (id=16411): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = timerfd_create(0x0, 0x80000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x66ad, 0xc000, 0x1, 0x800000bf}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x10, 0x6, 0x16f8, 0x230, 0x438, 0x1538, 0x1538, 0x1538, 0x1678, 0x1678, 0x1678, 0x1678, 0x1628, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x700, {0x7a00000000000000}}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private0, @ipv4=@empty, 0xe, 0x3f}}}, {{@ipv6={@dev, @loopback, [0x0, 0x0, 0x0, 0xffffffff], [], 'pimreg0\x00', 'veth1_macvtap\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x7}}, @common=@unspec=@connbytes={{0x38}}]}, @common=@unspec=@AUDIT={0x28}}, {{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @private2, @loopback, @mcast2, @local, @private1, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @empty, @private1, @private1, @loopback, @loopback]}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @dev={0xfe, 0x80, '\x00', 0x15}, [0xffffffff, 0x0, 0xff, 0xff000000], [0xff000000, 0x0, 0xff], 'syz_tun\x00', 'pimreg1\x00', {0xff}, {}, 0x2f, 0x81, 0x1, 0x8}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x1, 0x0, './cgroup.cpu/syz0\x00', 0xe, {0x6}}}]}, @common=@unspec=@MARK={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, [], [0x0, 0xffffff00], 'bond_slave_1\x00', 'gretap0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@empty, 0x0, 0x29}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1758) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x17, 0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000340)={{0x0, 0x3938700}}, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) unshare(0x20000400) ioctl$KDENABIO(r4, 0x4b36) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='ns\x00') getdents(r5, 0xffffffffffffffff, 0x7a) ioctl$TFD_IOC_SET_TICKS(r1, 0x40085400, &(0x7f0000000040)=0x8004) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_CAP_MAX_VCPU_ID(r6, 0x4068aea3, &(0x7f00000000c0)={0x80, 0x0, 0x564}) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000080)=@x86={0x0, 0x81, 0x8, 0x0, 0x200, 0x10, 0xd4, 0x9, 0x5, 0x1, 0x0, 0xff, 0x0, 0x2, 0xa, 0xe, 0x8, 0x5, 0x0, '\x00', 0xb0, 0x80}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0x70, 0x0, 0x0) 2.41714475s ago: executing program 0 (id=16412): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="000000a2", @ANYRES16=0x0, @ANYBLOB="000325bd7000fddbdf25070000003c0004800900010073797a31000000002c0007800800040004000000080001001800000008000200090000000800040005000000080004000004"], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100037040400"/20, @ANYRES32, @ANYBLOB="83040500000000002800128009000100766574680000000018000280140001"], 0x48}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}, 0x1, 0x1e00000000000000}, 0x4000000) 2.334915933s ago: executing program 0 (id=16413): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000001100050000000001feffffff07000000", @ANYRES32=r1, @ANYBLOB="402000000000000014001a8010000380"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.24002564s ago: executing program 0 (id=16414): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000440)={{0x84, @multicast2, 0x4f29, 0x3, 'sh\x00', 0x5, 0xc, 0x6c}, {@loopback, 0x4e23, 0x3, 0x1, 0x1}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 2.171799243s ago: executing program 1 (id=16415): recvfrom$unix(0xffffffffffffffff, &(0x7f0000000000)=""/93, 0x5d, 0x40, &(0x7f0000000080)=@abs={0x0, 0x0, 0x4e21}, 0x6e) syz_usb_connect(0x2, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="a3d27a95dee39b9908782791cc5c2f18d9f2a89af169abb40edae808241b2534cf9397bff5b9b3ecaba3ab487f39e8f981a4f88614049384634071c878ea9199707c161f429663d75881c6dab32487be17b356e21cdd6c03217e77e01d79cf47bc8d8105be4c25d1a1e83227bb65b31157baf762460ed6dc3a1be84b36d7bdf7895eaa399406413ce246ab41755e72f2e5867fa2288d6e95558c692ab5bc5a6ceb"], 0x0) 2.078574863s ago: executing program 0 (id=16416): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000015c0)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}}, 0x1c}}, 0x0) ioctl(r1, 0x400caed0, &(0x7f0000000140)) (fail_nth: 4) 1.471213519s ago: executing program 8 (id=16418): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x4a38, 0x201) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r1, 0x0, 0x12, &(0x7f0000937fed)=""/3, &(0x7f0000000040)=0x3) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000000)={0x53, 0xfffffffffffffffc, 0x6, 0xb4, @scatter={0x0, 0x100000, 0x0}, &(0x7f0000000080)="2b04002000b7", 0x0, 0x2, 0x10023, 0xfffffffd, 0x0}) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)={0x2, 0xa7c, 0x2, "32c9"}) 1.457418994s ago: executing program 0 (id=16419): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) listxattr(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000900)=""/239, 0xef) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x41555856, 0x0, 0x0, 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0x0) r2 = openat$udambuf(0xffffff9c, &(0x7f0000000200), 0x2) ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32]) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'rfc3686(ctr(camellia))\x00'}, 0x58) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30bc, 0x0, 0x2, 0x15d}, &(0x7f00000002c0), &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000003e040000000000003f040100000000005504000001ed0aff9404010017ffffffbf040000000000007b0a00fe000000006e04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be3619184e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9e104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d8582755a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f1300010000949b3aab06b1e042ff2164d80c8ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fc8706869ada11390d4dbcf840fa68e7d7071b53ac29df826f8ae6d6e18c1e0600bf870768d5217e9bb5a05d9e224e67f1231bd236ed200073824d93c4e1a0f50a74bb4850486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee6330000000000000000000000000000000000004000000000000000038600008fb854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8265e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cafffe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb66701f4578ba4cb9b706e605a88c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f6a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f80893220800c523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe917d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cf026657a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2cccb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400090300000021911480a876fbba698801937e8b4264eb6f5137bdaa075f1488d22230592a79000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783f26d0a52aefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd370c06c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c3500800000087de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c796369f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a8f01bc4b73cc31df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21c24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a3c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d68000000000099347593f67da85d1c962bfb320d1553a74ec3bf003ba62b1784dbf0168a7e85f28b77bdebce96bf386a6dd5df162a16f2b7e8a4de0ffc464a87f91f81866d2ef0af71ebb07a739c3cb1b7000000"], &(0x7f00000001c0)='GPL\x00'}, 0x94) syz_ublk_setup_io_uring(0x200024, &(0x7f0000000240)={0x0, 0x2c58, 0x7080, 0x0, 0x16c, 0x0, r3}, &(0x7f00000000c0)=0x0, 0x0, &(0x7f0000000640)) syz_ublk_add_dev(r3, r6, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x4, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001080030400000000fedbdf2500007400c355384441b91d4c1ef49962d7e8ebacc9b7a498fe6d6c8553f261a66adacd1d306c58489dfe92", @ANYRES32=0x0, @ANYBLOB="00480000075005001c0012800b00010062726964676500000c0002800500190002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000016f00"/20, @ANYRES32=0x0, @ANYBLOB="5bbf0100000000001c0012800b00010062726964676500000c0002800500190000000000"], 0x3c}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYBLOB="0100000000000300000003000000580001800d00010075a6063a7379"], 0x6c}}, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r7, &(0x7f0000000180)={0x0, 0x5, 0x1, 0x1, 0x257, 0x0, r3}, &(0x7f0000000680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe0a4, 0x80000, 0x6, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x8000, 0x0, 0x8080362, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x7b, 0x0, 0x0}}, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r11, 0x0, 0x81, &(0x7f0000000400)={'nat\x00', 0x0, 0x4, 0xf, [0x6, 0x6, 0x58b, 0x0, 0x2, 0xfffffffffffffff8], 0x2, &(0x7f0000000000)=[{}, {}], &(0x7f00000000c0)=""/15}, &(0x7f0000000500)=0x78) 1.350014371s ago: executing program 8 (id=16420): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x3ff, 0x2fe, 0x4f424752, 0x3, 0x0, [{0xc3, 0x4}, {0x5, 0x7fffffff}, {0x6, 0x8}, {0x5, 0x2000008}, {0x802}, {0x5, 0x3}, {0x6, 0x40b}, {0x10001, 0x800004}], 0x0, 0xd, 0x2, 0x3078182a3427730f, 0x1}}) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000300)={'ipvlan0\x00', {0x2, 0x0, @private=0x80000000}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000700000000000000165f820018120000", @ANYRES32, @ANYBLOB="0042b0028dd2acdd93030000ffea0000850000000c000000b70000000000000095"], &(0x7f0000000d80)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 1.149368504s ago: executing program 8 (id=16421): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)=ANY=[@ANYBLOB="98020000400007012bbd7000fedbdf25037c00000c00c28008006300ac1e0001780201"], 0x298}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x88, 0x0, &(0x7f0000001300)="b461802305624431ed33730100010446b20aed0200000000000000d5fe00c6fc6ef8eef9757a601bee936390009c5bbd000000003632b69f0eb2062818f298ed60abbc5f6322cbfac4973cf2bef7c0b4452e43e69aa108690000093f656d8f630632395fd3377dc1ee6daeeae21d79df2cb07600dbf28eda3f94df97f6296b9bc0a0aa770b5588c5", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffd}, 0x4c) r1 = syz_open_dev$sg(&(0x7f0000000740), 0x6f5e, 0x8240) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040)=0x85) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_STOP_UNIT(r2, 0x5319) openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) unshare(0x10480) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000084002, 0x0) r4 = dup(r3) r5 = socket$unix(0x1, 0x1, 0x0) syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x2, 0x3010, 0x3, 0x3}, 0x0, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000040)=0x10009, 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x3, 0x6, 0xfffa}, 0x3a, [0x20008000, 0x1, 0xf, 0x8, 0x7c, 0xfffffffe, 0xb5d, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x3, 0x5, 0x0, 0x3, 0x400, 0x0, 0x7, 0x40, 0x1, 0x24, 0xd, 0x3fffffe, 0x0, 0xffffffff, 0xe665, 0x204, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x400003, 0xe, 0x4, 0x80008071, 0xffffb8f3, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x7, 0x81, 0x4, 0x3ff, 0x8, 0x0, 0x7, 0x9, 0x8, 0x4, 0x0, 0xfffffffc], [0xc0, 0x9, 0x8000012f, 0x8004, 0x5, 0x8, 0x129432e7, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x6, 0x2, 0x0, 0x45, 0x2f, 0x1782000, 0x313, 0x78, 0xea4, 0x5fa, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x3d, 0x1000005, 0x5bea93c3, 0xd, 0x4e0, 0x2, 0x4, 0x81b, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x4, 0xfe000000, 0xffff, 0x2, 0x4, 0x10009, 0x3, 0x9, 0x9, 0x9, 0x20003, 0xffffffff, 0x100bc45, 0x48c93690, 0x80, 0x3], [0x7, 0xc08, 0x4, 0x5, 0xfffffffd, 0x40, 0x31d, 0x9, 0x5, 0x7fff, 0x9, 0x10001, 0xb, 0x4, 0x5, 0x5, 0x3, 0x1ef, 0x0, 0x8, 0x86, 0x3, 0x1, 0x3e7, 0xb, 0x5, 0x0, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfb1, 0x1000, 0xa2, 0x7, 0x2000a9, 0x5, 0x7, 0xac8, 0xbc, 0x1, 0x3, 0x7ff, 0x12b, 0x6, 0x1, 0xa, 0x20, 0x2, 0x1c, 0x8867, 0x3, 0x2006, 0x80a2ed, 0x40000005, 0x25], [0x9, 0xbb33, 0x7, 0x8, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xcea, 0x6, 0x2, 0x57, 0x7, 0x3, 0x0, 0x10000, 0x4, 0x37f3, 0xffff, 0xa622, 0x1, 0x80000005, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x7f, 0xffffffff, 0x80000000, 0x5, 0x4, 0x4c8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0xfc, 0x40000047, 0xb2, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0x8a1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x8, 0x5, 0xb1e, 0x6, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x400}], 0x20000000000000dc, 0x0, 0x0, 0xfffffffffffffcdd) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x8002, 0x0) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000000)) ioctl(r3, 0x6, &(0x7f00000001c0)="bdc2068c072c2b8ab074fa43d393b66814dc7d80133361008b2099d2265871dbef1c61f987d6f9cdbed99a05f5803a8c243a0f24f0308f01bf9c1581a4b199618d8ef81a848c4052e465427c86d509632827acba8b169f34244dc7e5e91d786a415fee8ff3d561f4e0a2e0837ddb2e2ad82e01503cb31c60e524b2ac1416a9a049c78b2fa0463bd1bbc9e4a33eca0df32be9145adb557779701cbda37c2b20dc8425") r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) 970.735193ms ago: executing program 9 (id=16422): syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) (async) migrate_pages(0xffffffffffffffff, 0x6b, &(0x7f00000000c0)=0xae, &(0x7f0000000140)=0x3) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000024917720042322023f77010203010902120001000010000904"], 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) (async) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, 0x0) ioctl$I2C_RDWR(r0, 0x707, 0x0) (async) ioctl$I2C_FUNCS(r0, 0x705, &(0x7f00000000c0)=0x7) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = getpgid(0x0) r3 = syz_pidfd_open(r2, 0x0) process_madvise(r3, 0x0, 0x0, 0x9, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="540000001300230a28bd7000ffdbdfa500000000", @ANYRES32=0x0, @ANYBLOB="20a40300000000001400350076657468305f6d6163767461700000001800168014000180100006000356c7fa"], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x44850) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1, 0x12, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@exit, @cb_func={0x18, 0x9, 0x4, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0xfffffff7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000000740)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) fgetxattr(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="00e107a1560000000000000000"], 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x42) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x1c00000, 0x200000f, 0x401d031, 0xffffffffffffffff, 0x0) (async) capset(0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x40080c0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) (async) r11 = dup(r5) syz_ublk_setup_queues(r11, r10, &(0x7f0000000180)={0x0, 0x3e80, 0x800, 0x1, 0x32c, 0x0, r6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x40, 0x10001, 0x2a5, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x10000, 0x7, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbe, 0x0, r6}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x5c0, 0x0, 0x0}}, 0x0) (async) openat$audio(0xffffffffffffff9c, 0x0, 0x40001, 0x0) 939.194187ms ago: executing program 5 (id=16423): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="000000a2", @ANYRES16=0x0, @ANYBLOB="000325bd7000fddbdf25070000003c0004800900010073797a31000000002c0007800800040004000000080001001800000008000200090000000800040005000000080004000004"], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100037040400"/20, @ANYRES32, @ANYBLOB="83040500000000002800128009000100766574680000000018000280140001"], 0x48}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}, 0x1, 0x2000000000000000}, 0x4000000) 567.296984ms ago: executing program 5 (id=16424): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000001100050000000001feffffff07000000", @ANYRES32=r1, @ANYBLOB="402000000000000014001a8010000380"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) 437.104424ms ago: executing program 8 (id=16425): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000000000fddbdf25ac1414bb000000000000000000000000ac1414bb0000000000000000000000000003000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000010002020000000084010500"], 0x23c}}, 0x4000) 309.427663ms ago: executing program 8 (id=16426): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000440)={{0x84, @multicast2, 0x4f29, 0x3, 'sh\x00', 0x5, 0xc, 0x6c}, {@loopback, 0x4e23, 0x3, 0x1, 0x1}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 264.222803ms ago: executing program 5 (id=16427): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl(0xffffffffffffffff, 0x400caed0, 0x0) 27.037237ms ago: executing program 5 (id=16428): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, 0x0, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x27}, 0x3}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002940), 0x40000000000017d, 0x811) 9.07732ms ago: executing program 8 (id=16429): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x302) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x6, 0x8, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0xc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xc4, 0x8, 0xfe}}}}}]}}]}}, 0x0) (async) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x6, 0x8, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0xc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xc4, 0x8, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000040)={0x2c, &(0x7f0000000180)={0x0, 0x5, 0x28, {0x28, 0xe, "f70ba381030000000000000000cb4fdca0560f920d54f365c5b1d43ee44fbf6fc93f0808251f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0x4d, 0x1, 0x3, 0x82000000}, {0x2d}, {0x20, 0x0, 0x0, 0x8}]}) (async) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0x4d, 0x1, 0x3, 0x82000000}, {0x2d}, {0x20, 0x0, 0x0, 0x8}]}) 0s ago: executing program 5 (id=16430): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 32) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 32) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) syz_usb_control_io$sierra_net(r0, &(0x7f0000000600)={0x14, &(0x7f00000004c0)={0x20, 0x10, 0xec, {0xec, 0x0, "517c1cb9bca8dad2494439579d67446dd39cc9e6d50b4b5cffe78a73283b84e802b3de4d510dad0c1a8ece01f1f0cc0bb2efbcf728a7e4aaf103ace3c4a4e54f9b7f3f14bd130890a06b7e92dfc37df57321260ad7a116bcf7142b54aab13c1011a756ca0856df67cd2e32cd327f5e64d740e5b040e70a457884f58ab8005d35e5383b94007d7dbc00eb5980b2178c53bf7ec3d87293f0dc3ba69966fa4af8838887b7086b45c1305056219d048dc254de3fc886c981b80bc368e10b6c0f013bfe4646d14d5754ed83e4573130d71e40e9f656cc126c780dc5713626c5d0fdaa6f0099d60e82f5168023"}}, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x411}}}, &(0x7f0000003140)={0x1c, &(0x7f0000000640)={0x20, 0x0, 0xa1, "fe8e07958ba31ea963038cff8a5814a68135a426cebb8e06f15efec6c6fb921279a06752e0795bcc54f57e82b449fb65ffd4bc0ba1270b46901ac526c85f3c23e201917b81b9fd925035cb4d6adb29c0af600f9259f3735e89aab3c106d6b69c7636a9aa301716d82347539396fd0d0c015e8397ca3b5079827ce61eaf03273e3a0c80e1cf2550d0dd6fb57c992d9f6feb25c9bd4cbd4410cfc8c20a751ae9e805"}, &(0x7f0000002cc0)={0xa1, 0x1, 0x400, "fede7755920c3c7136ec4a2f9e270b18f82661f68554226614f040123f2c8fde4346d70e9677797da19a7c6c4007cc31dad8d7fb1ea8ffdd81b1083b100e2be06427accb5be10eec80c893e8426340f75d9f79801ce6e305ba12ad736a9eeb31323f414d0470e2f4f5b19d43cf50e825b869c292cdee81ab504cc0c9080a2e726add84ba6e5debb6ffb7a4277f09ef1ab201cf2acb34e0f679ca2e6ab64ad1ef632d49511cdbccaa8eabb0c820718c2dcd32c7c712a638d1bc5845796b08e965a337adb52711f82fd9727f824c41f50730ffa04c4b83d77b98b0ec5a526c31a4e4c91f7b736db22a62f2e43563b3648bc128fcb3a1139bcc35acde83a839d24eec28c3a3ae8b3f00e93b10f2dc5435a8861209cbff44494d82dd421438f50773e526582f2804b3863e54d5f0532736d557c83c61c697d4af62dad5106dbd858931c53158ad3635539dff74e1aea3ff071b0bc013c5a5da9175077f9c5488247147b3c01784a9a937e3f9db333dec56f6f49b204cba13711ef33bf76f9026a4d6a99cc1f4c2a50dc29547a28cdb74823b38dc13aa7f3f5b9526ff507a3602fe059bd506bb11b638bdb38a541f5b7f64c1adca41a7137b2e5e28e0a93ed0b6fd304b7696cb53113191e662da7b1e91d6a5f3aa280bb4edd8f3c1ebec20ea9e216e63fc5496cbce372076feb0c0165d0e59af2b5a3a419a35126686d5e5c7de351e895379327eee7e76f5f55c3e923b93c5c24bb16d57709216b686b2469c87854cbf5f35501f93da475b8edfa198d0bf42c45fa9d51647b4b6ae7c8fe17034f75b2527a5ab174331024ed2c5fbda2b0942ce4194fa1bb8ac4f3d860427ff9a32fde59260521f0217107ebf371ec35fa01d97a9aa456ba710bd28240b1b5fcccb9a3dcca9b6c4339113b86fa738775d587eae8097e09dc1828e749d82b29b0654e762e4a76e8b8e2bdb5dbae893dd77f95ca5145522a2f4bbf2d060febfbe46b19600ee184518f66f2310c623798eb9dbb5990e0863bad5bd81dda72ce2854c044182776596699fa4d7ab66136b2ad9b9d36f32261fcaabc4b0eba569670ae84d7186f97c76150e45c3be174ef657540b0251511a8bd9b7c03bcf3a6fc7477ca037fc7000d97f4f9f6b893509fe88918eb54c60ac81d3f60e73f747e9320dc974a30ce3db1d42c97216a992b2f295d5c0b88422da47bfb21066ae2c566e35ad79f66b91e543865ab8968b4d79e17b3443b80fef5e6097695099edc0d47013cad28544f0d8d24a1e2d4e12fd155f4296a222637a2e704e98e2f4ed8e8014f6fce78944e0d94516d214208de87f31569a0e70f323f76d14651fa0e3dd563c1b02e84010652bdacc4c2c9febac943cab153da632213bd2598a15635e0835b4a0338f84515b03cb08c79752c98033085707883c1e9521e4d6c435cbd6fbe14a6e29df54"}, &(0x7f0000003100)={0x21, 0x0, 0x4, "d5026978"}}) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000100)={r3, 0x7ff}, 0x8) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000076000100fefffffffddbdf25810a00000000000008"], 0x20}}, 0x0) (async) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) (async, rerun: 64) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="340000006800e9782cbd7000ffdbdf250a0000000400000008000500", @ANYRES32=r12, @ANYBLOB="14000700ff826d8738265839de002bd82f00000041"], 0x34}}, 0x4000) (async, rerun: 64) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r10, r12, 0x25, 0xf, @void}, 0x10) (rerun: 64) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004845}, 0x40014) (async) preadv2(r1, &(0x7f0000002c00)=[{&(0x7f0000000140)=""/225, 0xe1}, {&(0x7f0000000340)=""/197, 0xc5}, {&(0x7f0000000440)=""/105, 0x69}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000002880)=""/212, 0xd4}, {&(0x7f0000002980)=""/156, 0x9c}, {&(0x7f0000002a40)=""/179, 0xb3}, {&(0x7f0000002b00)=""/237, 0xed}], 0x9, 0xffff02f4, 0x3ff, 0xc) (async, rerun: 64) syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): 6 comm="syz.9.16022" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34eed9e159 code=0x7ffc0000 [ 3578.190650][T25324] geneve2: left promiscuous mode [ 3578.190678][T25324] geneve2: left allmulticast mode [ 3578.219442][T25324] bridge0: left promiscuous mode [ 3578.219497][T25324] bridge0: left allmulticast mode [ 3578.288858][T19290] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3578.289404][T19290] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3578.289444][T19290] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3578.289481][T19290] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3579.044523][T22099] IPVS: starting estimator thread 0... [ 3579.213152][T25385] IPVS: using max 49 ests per chain, 117600 per kthread [ 3579.393054][T25390] binder: 25389:25390 ioctl c0306201 0 returned -14 [ 3579.393276][T25390] binder: 25389:25390 ioctl c0306201 0 returned -14 [ 3579.884554][T25396] netlink: 'syz.4.16037': attribute type 1 has an invalid length. [ 3579.981860][T25396] program syz.4.16037 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3580.129246][T25397] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 3580.565039][T25401] bridge0: port 2(bridge_slave_1) entered disabled state [ 3580.565784][T25401] bridge0: port 1(bridge_slave_0) entered disabled state [ 3580.815152][T25401] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3580.837141][T25401] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3581.284385][ T8289] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 3581.314517][T25419] loop0: detected capacity change from 0 to 6 [ 3581.397392][T25419] Dev loop0: unable to read RDB block 6 [ 3581.397446][T25419] loop0: unable to read partition table [ 3581.397664][T25419] loop0: partition table beyond EOD, truncated [ 3581.397684][T25419] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 3581.452461][ T8289] usb 5-1: Using ep0 maxpacket: 16 [ 3581.462354][ T8289] usb 5-1: New USB device found, idVendor=046c, idProduct=0000, bcdDevice= 0.00 [ 3581.462401][ T8289] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 3581.464096][ T8289] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 3581.464142][ T8289] usb 5-1: can't read configurations, error -61 [ 3581.565541][T28549] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 3581.565580][T28549] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3581.572364][T28549] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 3581.572395][T28549] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3581.572435][T28549] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 3581.572459][T28549] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3581.572495][T28549] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 3581.572520][T28549] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3581.628885][ T8289] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 3581.794663][ T8289] usb 5-1: Using ep0 maxpacket: 16 [ 3581.801311][ T8289] usb 5-1: New USB device found, idVendor=046c, idProduct=0000, bcdDevice= 0.00 [ 3581.801357][ T8289] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 3581.802961][ T8289] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 3581.802999][ T8289] usb 5-1: can't read configurations, error -61 [ 3581.803591][ T8289] usb usb5-port1: attempt power cycle [ 3582.144876][ T8289] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 3582.162827][T25428] fuse: Bad value for 'user_id' [ 3582.162847][T25428] fuse: Bad value for 'user_id' [ 3582.175278][ T8289] usb 5-1: Using ep0 maxpacket: 16 [ 3582.181171][ T8289] usb 5-1: New USB device found, idVendor=046c, idProduct=0000, bcdDevice= 0.00 [ 3582.181215][ T8289] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 3582.183518][ T8289] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 3582.183554][ T8289] usb 5-1: can't read configurations, error -61 [ 3582.314226][ T8289] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 3582.335387][ T8289] usb 5-1: Using ep0 maxpacket: 16 [ 3582.336251][ T8289] usb 5-1: New USB device found, idVendor=046c, idProduct=0000, bcdDevice= 0.00 [ 3582.336292][ T8289] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 3582.338248][ T8289] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 3582.338286][ T8289] usb 5-1: can't read configurations, error -61 [ 3582.338715][ T8289] usb usb5-port1: unable to enumerate USB device [ 3583.769769][T25442] syzkaller0: entered promiscuous mode [ 3583.769801][T25442] syzkaller0: entered allmulticast mode [ 3583.785504][T25446] netlink: 'syz.8.16054': attribute type 1 has an invalid length. [ 3583.786758][T25446] program syz.8.16054 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3583.863104][T25448] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 3584.237660][T25451] netlink: 60 bytes leftover after parsing attributes in process `syz.4.16056'. [ 3594.942994][T25477] netlink: 'syz.4.16065': attribute type 1 has an invalid length. [ 3595.159866][T25486] netlink: 'syz.4.16067': attribute type 1 has an invalid length. [ 3595.168625][T25486] program syz.4.16067 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3595.320730][T25483] bridge1: entered promiscuous mode [ 3595.320821][T25483] bridge1: entered allmulticast mode [ 3595.360252][T25488] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 3595.490465][T25354] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 3595.828297][T25354] usb 10-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 3595.886265][T25493] loop0: detected capacity change from 0 to 6 [ 3595.929989][T25493] Dev loop0: unable to read RDB block 6 [ 3595.930020][T25493] loop0: unable to read partition table [ 3595.930180][T25493] loop0: partition table beyond EOD, truncated [ 3595.930193][T25493] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 3595.965094][T25354] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3595.965126][T25354] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3595.965162][T25354] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3595.982364][T25354] usb 10-1: config 0 descriptor?? [ 3596.155571][T25495] FAULT_INJECTION: forcing a failure. [ 3596.155571][T25495] name failslab, interval 1, probability 0, space 0, times 0 [ 3596.155596][T25495] CPU: 0 UID: 0 PID: 25495 Comm: syz.0.16069 Tainted: G L syzkaller #0 PREEMPT(full) [ 3596.155614][T25495] Tainted: [L]=SOFTLOCKUP [ 3596.155619][T25495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3596.155626][T25495] Call Trace: [ 3596.155633][T25495] [ 3596.155643][T25495] dump_stack_lvl+0xe8/0x150 [ 3596.155678][T25495] should_fail_ex+0x410/0x560 [ 3596.155707][T25495] should_failslab+0xa8/0x100 [ 3596.155724][T25495] __kmalloc_cache_noprof+0xa3/0x600 [ 3596.155738][T25495] ? rtnl_newlink+0x143/0x1c30 [ 3596.155752][T25495] ? rtnl_newlink+0x143/0x1c30 [ 3596.155770][T25495] rtnl_newlink+0x143/0x1c30 [ 3596.155784][T25495] ? __lock_acquire+0x747/0x2de0 [ 3596.155802][T25495] ? __pfx_rtnl_newlink+0x10/0x10 [ 3596.155817][T25495] ? __lock_acquire+0x747/0x2de0 [ 3596.155833][T25495] ? __lock_acquire+0x747/0x2de0 [ 3596.155853][T25495] ? lock_acquire+0x115/0x350 [ 3596.155869][T25495] ? lock_acquire+0x115/0x350 [ 3596.155891][T25495] ? is_bpf_text_address+0x26/0x2b0 [ 3596.155921][T25495] ? __lock_acquire+0x747/0x2de0 [ 3596.155955][T25495] ? __kernel_text_address+0xd/0x30 [ 3596.155977][T25495] ? unwind_get_return_address+0x4d/0x90 [ 3596.156001][T25495] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 3596.156014][T25495] ? arch_stack_walk+0xfb/0x150 [ 3596.156034][T25495] ? lock_acquire+0x115/0x350 [ 3596.156046][T25495] ? __pfx_rtnl_newlink+0x10/0x10 [ 3596.156067][T25495] ? __pfx_rtnl_newlink+0x10/0x10 [ 3596.156083][T25495] rtnetlink_rcv_msg+0x802/0xc00 [ 3596.156097][T25495] ? netlink_sendmsg+0x5d4/0xb40 [ 3596.156116][T25495] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 3596.156130][T25495] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 3596.156145][T25495] ? __lock_acquire+0x747/0x2de0 [ 3596.156164][T25495] netlink_rcv_skb+0x226/0x4a0 [ 3596.156182][T25495] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 3596.156197][T25495] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 3596.156221][T25495] ? netlink_deliver_tap+0x2e/0x1b0 [ 3596.156238][T25495] ? netlink_deliver_tap+0x2e/0x1b0 [ 3596.156258][T25495] netlink_unicast+0x7bd/0x940 [ 3596.156280][T25495] netlink_sendmsg+0x813/0xb40 [ 3596.156303][T25495] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3596.156324][T25495] ? apparmor_socket_sendmsg+0x98/0x360 [ 3596.156340][T25495] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3596.156356][T25495] sock_sendmsg_nosec+0x13a/0x180 [ 3596.156371][T25495] ____sys_sendmsg+0x54e/0x850 [ 3596.156389][T25495] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3596.156410][T25495] ? import_iovec+0x73/0xa0 [ 3596.156427][T25495] ___sys_sendmsg+0x2a5/0x360 [ 3596.156445][T25495] ? __lock_acquire+0x747/0x2de0 [ 3596.156459][T25495] ? __pfx____sys_sendmsg+0x10/0x10 [ 3596.156493][T25495] ? __fget_files+0x2a/0x420 [ 3596.156510][T25495] ? __fget_files+0x3a2/0x420 [ 3596.156531][T25495] __x64_sys_sendmsg+0x1b1/0x290 [ 3596.156548][T25495] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 3596.156575][T25495] do_syscall_64+0x166/0x520 [ 3596.156589][T25495] ? trace_irq_disable+0x3b/0x140 [ 3596.156601][T25495] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3596.156614][T25495] ? clear_bhb_loop+0x70/0xc0 [ 3596.156628][T25495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3596.156641][T25495] RIP: 0033:0x7f2c7ef9e159 [ 3596.156654][T25495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3596.156665][T25495] RSP: 002b:00007f2c7fe2e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3596.156680][T25495] RAX: ffffffffffffffda RBX: 00007f2c7f225fa0 RCX: 00007f2c7ef9e159 [ 3596.156690][T25495] RDX: 0000000000000000 RSI: 0000200000003880 RDI: 0000000000000006 [ 3596.156698][T25495] RBP: 00007f2c7fe2e090 R08: 0000000000000000 R09: 0000000000000000 [ 3596.156706][T25495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3596.156714][T25495] R13: 00007f2c7f226038 R14: 00007f2c7f225fa0 R15: 00007f2c7f34fa48 [ 3596.156732][T25495] [ 3596.578605][T25354] hid-steam 0003:28DE:1142.007E: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.9-1/input0 [ 3596.779399][T25359] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 3596.803365][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 3596.803381][ T31] audit: type=1326 audit(1789418461.019:21449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25472 comm="syz.9.16063" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f34eed9e159 code=0x0 [ 3596.853923][T25487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3596.854420][T25487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3596.861440][ T31] audit: type=1326 audit(1789418461.079:21450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25472 comm="syz.9.16063" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f34eed9e159 code=0x0 [ 3597.042765][T25507] netlink: 'syz.0.16073': attribute type 12 has an invalid length. [ 3597.042787][T25507] netlink: 'syz.0.16073': attribute type 29 has an invalid length. [ 3597.042799][T25507] netlink: 148 bytes leftover after parsing attributes in process `syz.0.16073'. [ 3597.062353][T25359] usb 5-1: Using ep0 maxpacket: 16 [ 3597.130565][T25359] usb 5-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 3597.302809][T25512] xt_connbytes: Forcing CT accounting to be enabled [ 3597.538169][T25359] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3597.538192][T25359] usb 5-1: Product: syz [ 3597.538201][T25359] usb 5-1: Manufacturer: syz [ 3597.538210][T25359] usb 5-1: SerialNumber: syz [ 3597.540180][T25359] usb 5-1: config 0 descriptor?? [ 3597.611373][T25359] ums-onetouch 5-1:0.0: USB Mass Storage device detected [ 3597.825544][T25497] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16070'. [ 3597.825586][T25497] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16070'. [ 3598.026939][T25359] usb 10-1: USB disconnect, device number 33 [ 3598.060858][T25497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3598.061396][T25497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3598.523921][T25526] loop0: detected capacity change from 0 to 6 [ 3598.550710][T25527] netlink: 'syz.0.16080': attribute type 1 has an invalid length. [ 3598.553417][T25527] program syz.0.16080 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3598.618213][T25526] Dev loop0: unable to read RDB block 6 [ 3598.618261][T25526] loop0: unable to read partition table [ 3598.618546][T25526] loop0: partition table beyond EOD, truncated [ 3598.618568][T25526] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 3598.666628][T25529] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 3598.826521][T25359] usb 5-1: USB disconnect, device number 63 [ 3599.310546][T25536] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 3599.622071][T25546] FAULT_INJECTION: forcing a failure. [ 3599.622071][T25546] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3599.622110][T25546] CPU: 0 UID: 0 PID: 25546 Comm: syz.8.16085 Tainted: G L syzkaller #0 PREEMPT(full) [ 3599.622138][T25546] Tainted: [L]=SOFTLOCKUP [ 3599.622146][T25546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3599.622160][T25546] Call Trace: [ 3599.622169][T25546] [ 3599.622179][T25546] dump_stack_lvl+0xe8/0x150 [ 3599.622214][T25546] should_fail_ex+0x410/0x560 [ 3599.622242][T25546] _copy_to_user+0x31/0xb0 [ 3599.622269][T25546] simple_read_from_buffer+0xe1/0x170 [ 3599.622315][T25546] proc_fail_nth_read+0x1bb/0x230 [ 3599.622336][T25546] ? common_file_perm+0x20e/0x2b0 [ 3599.622363][T25546] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3599.622386][T25546] ? rw_verify_area+0x24a/0x4c0 [ 3599.622417][T25546] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3599.622436][T25546] vfs_read+0x213/0xa80 [ 3599.622471][T25546] ? __pfx___mutex_lock+0x10/0x10 [ 3599.622496][T25546] ? __pfx_vfs_read+0x10/0x10 [ 3599.622528][T25546] ? __fget_files+0x2a/0x420 [ 3599.622559][T25546] ? __fget_files+0x3a2/0x420 [ 3599.622586][T25546] ? __fget_files+0x2a/0x420 [ 3599.622623][T25546] ksys_read+0x150/0x270 [ 3599.622657][T25546] ? __pfx_ksys_read+0x10/0x10 [ 3599.622682][T25546] ? fput+0xa0/0xd0 [ 3599.622719][T25546] do_syscall_64+0x166/0x520 [ 3599.622742][T25546] ? trace_irq_disable+0x3b/0x140 [ 3599.622763][T25546] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3599.622785][T25546] ? clear_bhb_loop+0x70/0xc0 [ 3599.622811][T25546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3599.622832][T25546] RIP: 0033:0x7f2b5f95e98e [ 3599.622853][T25546] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 3599.622871][T25546] RSP: 002b:00007f2b608f9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3599.622896][T25546] RAX: ffffffffffffffda RBX: 00007f2b608fa6c0 RCX: 00007f2b5f95e98e [ 3599.622912][T25546] RDX: 000000000000000f RSI: 00007f2b608fa0a0 RDI: 0000000000000004 [ 3599.622926][T25546] RBP: 00007f2b608fa090 R08: 0000000000000000 R09: 0000000000000000 [ 3599.622939][T25546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3599.622952][T25546] R13: 00007f2b5fc26038 R14: 00007f2b5fc25fa0 R15: 00007f2b5fd4fa48 [ 3599.622987][T25546] [ 3599.996497][T25554] netlink: 8 bytes leftover after parsing attributes in process `syz.8.16089'. [ 3600.022104][T25558] loop0: detected capacity change from 0 to 6 [ 3600.082976][T25558] Dev loop0: unable to read RDB block 6 [ 3600.083008][T25558] loop0: unable to read partition table [ 3600.083168][T25558] loop0: partition table beyond EOD, truncated [ 3600.083181][T25558] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 3600.114084][T25359] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 3600.653584][T25359] usb 5-1: unable to get BOS descriptor or descriptor too short [ 3600.653623][T25359] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 3600.793377][T25359] usb 5-1: config index 0 descriptor too short (expected 40744, got 96) [ 3600.793412][T25359] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3600.793432][T25359] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 3600.793490][T25359] usb 5-1: too many endpoints for config 1 interface 1 altsetting 1: 226, using maximum allowed: 30 [ 3600.793533][T25359] usb 5-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 3600.793560][T25359] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 3600.793585][T25359] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x2 has invalid maxpacket 8192, setting to 1024 [ 3600.793611][T25359] usb 5-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 226 [ 3601.073968][T25359] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3601.074001][T25359] usb 5-1: Product: syz [ 3601.074016][T25359] usb 5-1: Manufacturer: syz [ 3601.074031][T25359] usb 5-1: SerialNumber: syz [ 3601.281968][ T31] audit: type=1326 audit(1789418465.499:21451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25588 comm="syz.0.16099" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7ef9e159 code=0x7ffc0000 [ 3601.282028][ T31] audit: type=1326 audit(1789418465.499:21452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25588 comm="syz.0.16099" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7ef9e159 code=0x7ffc0000 [ 3601.282070][ T31] audit: type=1326 audit(1789418465.499:21453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25588 comm="syz.0.16099" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f2c7ef9e159 code=0x7ffc0000 [ 3601.285525][ T31] audit: type=1326 audit(1789418465.499:21454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25588 comm="syz.0.16099" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7ef9e159 code=0x7ffc0000 [ 3601.285587][ T31] audit: type=1326 audit(1789418465.499:21455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25588 comm="syz.0.16099" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7ef9e159 code=0x7ffc0000 [ 3601.285636][ T31] audit: type=1326 audit(1789418465.499:21456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25588 comm="syz.0.16099" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f2c7ef9e159 code=0x7ffc0000 [ 3601.285684][ T31] audit: type=1326 audit(1789418465.499:21457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25588 comm="syz.0.16099" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7ef9e159 code=0x7ffc0000 [ 3601.285729][ T31] audit: type=1326 audit(1789418465.499:21458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25588 comm="syz.0.16099" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f2c7ef9e159 code=0x7ffc0000 [ 3601.466119][T25359] usb 5-1: 1:1 : invalid sync pipe. bmAttributes e5, bLength 9, bSynchAddress 01 [ 3601.550638][T25359] usb 5-1: 1:1: cannot set freq 48000 to ep 0x1 [ 3601.624176][ T8289] usb 9-1: new full-speed USB device number 43 using dummy_hcd [ 3601.674197][T25359] usb 5-1: USB disconnect, device number 64 [ 3601.775102][ T8289] usb 9-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 3601.779032][ T8289] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3601.779062][ T8289] usb 9-1: Product: syz [ 3601.779077][ T8289] usb 9-1: Manufacturer: syz [ 3601.779092][ T8289] usb 9-1: SerialNumber: syz [ 3601.827550][ T8289] usb 9-1: config 0 descriptor?? [ 3601.988505][ T8304] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 3601.994796][ T8304] hid-generic 0000:0000:0000.007F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3602.046004][ T8289] RobotFuzz Open Source InterFace, OSIF 9-1:0.0: version d4.15 found at bus 009 address 043 [ 3602.076528][T25354] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 3602.184332][T25610] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16106'. [ 3602.389108][T25354] usb 2-1: Using ep0 maxpacket: 16 [ 3602.459219][T25354] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 3602.567974][T25618] FAULT_INJECTION: forcing a failure. [ 3602.567974][T25618] name failslab, interval 1, probability 0, space 0, times 0 [ 3602.568012][T25618] CPU: 1 UID: 0 PID: 25618 Comm: syz.4.16108 Tainted: G L syzkaller #0 PREEMPT(full) [ 3602.568040][T25618] Tainted: [L]=SOFTLOCKUP [ 3602.568048][T25618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3602.568061][T25618] Call Trace: [ 3602.568071][T25618] [ 3602.568085][T25618] dump_stack_lvl+0xe8/0x150 [ 3602.568122][T25618] should_fail_ex+0x410/0x560 [ 3602.568152][T25618] should_failslab+0xa8/0x100 [ 3602.568177][T25618] ? skb_clone+0x212/0x3a0 [ 3602.568205][T25618] kmem_cache_alloc_noprof+0xa1/0x600 [ 3602.568239][T25618] ? skb_clone+0x212/0x3a0 [ 3602.568275][T25618] skb_clone+0x212/0x3a0 [ 3602.568307][T25618] __netlink_deliver_tap+0x413/0x860 [ 3602.568351][T25618] ? netlink_deliver_tap+0x2e/0x1b0 [ 3602.568382][T25618] netlink_deliver_tap+0x19c/0x1b0 [ 3602.568413][T25618] netlink_unicast+0x781/0x940 [ 3602.568453][T25618] netlink_sendmsg+0x813/0xb40 [ 3602.568501][T25618] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3602.568539][T25618] ? apparmor_socket_sendmsg+0x98/0x360 [ 3602.568565][T25618] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3602.568593][T25618] sock_sendmsg_nosec+0x13a/0x180 [ 3602.568618][T25618] ____sys_sendmsg+0x54e/0x850 [ 3602.568652][T25618] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3602.568691][T25618] ? import_iovec+0x73/0xa0 [ 3602.568721][T25618] ___sys_sendmsg+0x2a5/0x360 [ 3602.568748][T25618] ? __lock_acquire+0x747/0x2de0 [ 3602.568775][T25618] ? __pfx____sys_sendmsg+0x10/0x10 [ 3602.568842][T25618] ? __fget_files+0x2a/0x420 [ 3602.568869][T25618] ? __fget_files+0x3a2/0x420 [ 3602.568908][T25618] __x64_sys_sendmsg+0x1b1/0x290 [ 3602.568939][T25618] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 3602.568989][T25618] do_syscall_64+0x166/0x520 [ 3602.569011][T25618] ? trace_irq_disable+0x3b/0x140 [ 3602.569031][T25618] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3602.569052][T25618] ? clear_bhb_loop+0x70/0xc0 [ 3602.569078][T25618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3602.569098][T25618] RIP: 0033:0x7f5cd279e159 [ 3602.569118][T25618] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3602.569136][T25618] RSP: 002b:00007f5cd3600028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3602.569160][T25618] RAX: ffffffffffffffda RBX: 00007f5cd2a25fa0 RCX: 00007f5cd279e159 [ 3602.569175][T25618] RDX: 0000000000000004 RSI: 0000200000000000 RDI: 0000000000000004 [ 3602.569189][T25618] RBP: 00007f5cd3600090 R08: 0000000000000000 R09: 0000000000000000 [ 3602.569202][T25618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3602.569215][T25618] R13: 00007f5cd2a26038 R14: 00007f5cd2a25fa0 R15: 00007f5cd2b4fa48 [ 3602.569249][T25618] [ 3602.603061][T25354] usb 2-1: config 4 has an invalid interface number: 9 but max is 0 [ 3602.603087][T25354] usb 2-1: config 4 has no interface number 0 [ 3602.603130][T25354] usb 2-1: config 4 interface 9 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 3602.603153][T25354] usb 2-1: config 4 interface 9 altsetting 2 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 3602.603176][T25354] usb 2-1: config 4 interface 9 has no altsetting 0 [ 3602.897017][T25354] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3602.897045][T25354] usb 2-1: Product: syz [ 3602.897060][T25354] usb 2-1: Manufacturer: syz [ 3602.897086][T25354] usb 2-1: SerialNumber: syz [ 3602.934708][T25600] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 3602.994262][T25354] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 3603.194396][T25354] usb 2-1: USB disconnect, device number 62 [ 3603.223081][T19290] usb 2-1: Failed to submit usb control message: -71 [ 3603.223120][T19290] usb 2-1: unable to send the bmi data to the device: -71 [ 3603.223138][T19290] usb 2-1: unable to get target info from device [ 3603.223151][T19290] usb 2-1: could not get target info (-71) [ 3603.223175][T19290] usb 2-1: could not probe fw (-71) [ 3603.695632][T25640] nr0: tun_chr_ioctl cmd 1074025677 [ 3603.695770][T25640] nr0: linktype set to 0 [ 3603.696715][T25640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16116'. [ 3603.846469][T25645] netlink: 8 bytes leftover after parsing attributes in process `syz.9.16117'. [ 3604.008458][T25651] FAULT_INJECTION: forcing a failure. [ 3604.008458][T25651] name failslab, interval 1, probability 0, space 0, times 0 [ 3604.008497][T25651] CPU: 1 UID: 0 PID: 25651 Comm: syz.1.16119 Tainted: G L syzkaller #0 PREEMPT(full) [ 3604.008526][T25651] Tainted: [L]=SOFTLOCKUP [ 3604.008535][T25651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3604.008547][T25651] Call Trace: [ 3604.008556][T25651] [ 3604.008566][T25651] dump_stack_lvl+0xe8/0x150 [ 3604.008603][T25651] should_fail_ex+0x410/0x560 [ 3604.008630][T25651] ? __alloc_skb+0x1db/0x7a0 [ 3604.008655][T25651] should_failslab+0xa8/0x100 [ 3604.008682][T25651] ? __alloc_skb+0x1db/0x7a0 [ 3604.008704][T25651] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 3604.008734][T25651] ? __alloc_skb+0x18d/0x7a0 [ 3604.008756][T25651] ? __alloc_skb+0x1db/0x7a0 [ 3604.008786][T25651] __alloc_skb+0x1db/0x7a0 [ 3604.008815][T25651] inet_netconf_notify_devconf+0x173/0x240 [ 3604.008849][T25651] devinet_conf_post_set+0x19f/0x1f0 [ 3604.008881][T25651] inet_set_link_af+0x426/0x6e0 [ 3604.008908][T25651] ? rtnl_af_lookup+0x20/0x250 [ 3604.008939][T25651] ? __pfx_inet_set_link_af+0x10/0x10 [ 3604.008966][T25651] ? rtnl_af_lookup+0x20/0x250 [ 3604.008988][T25651] ? rtnl_af_lookup+0x20/0x250 [ 3604.009007][T25651] ? rtnl_af_lookup+0x20/0x250 [ 3604.009031][T25651] ? rtnl_af_lookup+0x218/0x250 [ 3604.009055][T25651] do_setlink+0x2fb2/0x4670 [ 3604.009080][T25651] ? unwind_get_return_address+0x4d/0x90 [ 3604.009120][T25651] ? __pfx_do_setlink+0x10/0x10 [ 3604.009145][T25651] ? __lock_acquire+0x747/0x2de0 [ 3604.009180][T25651] ? kasan_save_track+0x4f/0x80 [ 3604.009199][T25651] ? kasan_save_track+0x3e/0x80 [ 3604.009217][T25651] ? __kasan_kmalloc+0x93/0xb0 [ 3604.009238][T25651] ? __kmalloc_cache_noprof+0x321/0x600 [ 3604.009288][T25651] ? __mutex_trylock_common+0x15f/0x270 [ 3604.009318][T25651] ? __pfx___mutex_trylock_common+0x10/0x10 [ 3604.009348][T25651] ? rcu_is_watching+0x16/0xb0 [ 3604.009373][T25651] ? trace_contention_end+0x3d/0x140 [ 3604.009402][T25651] ? __mutex_lock+0x30b/0x1550 [ 3604.009439][T25651] ? rtnl_newlink+0xc10/0x1c30 [ 3604.009466][T25651] ? __pfx___mutex_lock+0x10/0x10 [ 3604.009502][T25651] ? ns_capable+0x89/0xe0 [ 3604.009530][T25651] ? rtnl_nets_add+0x16c/0x300 [ 3604.009554][T25651] ? refcount_inc+0x46/0x70 [ 3604.009577][T25651] rtnl_newlink+0x146f/0x1c30 [ 3604.009615][T25651] ? __pfx_rtnl_newlink+0x10/0x10 [ 3604.009639][T25651] ? __lock_acquire+0x747/0x2de0 [ 3604.009667][T25651] ? __lock_acquire+0x747/0x2de0 [ 3604.009702][T25651] ? lock_acquire+0x115/0x350 [ 3604.009731][T25651] ? lock_acquire+0x115/0x350 [ 3604.009759][T25651] ? is_bpf_text_address+0x26/0x2b0 [ 3604.009790][T25651] ? __lock_acquire+0x747/0x2de0 [ 3604.009818][T25651] ? __kernel_text_address+0xd/0x30 [ 3604.009839][T25651] ? unwind_get_return_address+0x4d/0x90 [ 3604.009860][T25651] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 3604.009881][T25651] ? arch_stack_walk+0xfb/0x150 [ 3604.009919][T25651] ? lock_acquire+0x115/0x350 [ 3604.009941][T25651] ? __pfx_rtnl_newlink+0x10/0x10 [ 3604.009978][T25651] ? __pfx_rtnl_newlink+0x10/0x10 [ 3604.010001][T25651] rtnetlink_rcv_msg+0x802/0xc00 [ 3604.010025][T25651] ? netlink_sendmsg+0x5d4/0xb40 [ 3604.010056][T25651] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 3604.010080][T25651] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 3604.010106][T25651] ? __lock_acquire+0x747/0x2de0 [ 3604.010141][T25651] netlink_rcv_skb+0x226/0x4a0 [ 3604.010172][T25651] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 3604.010199][T25651] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 3604.010255][T25651] ? netlink_deliver_tap+0x2e/0x1b0 [ 3604.010285][T25651] ? netlink_deliver_tap+0x2e/0x1b0 [ 3604.010323][T25651] netlink_unicast+0x7bd/0x940 [ 3604.010364][T25651] netlink_sendmsg+0x813/0xb40 [ 3604.010404][T25651] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3604.010441][T25651] ? apparmor_socket_sendmsg+0x98/0x360 [ 3604.010467][T25651] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3604.010494][T25651] sock_sendmsg_nosec+0x13a/0x180 [ 3604.010519][T25651] ____sys_sendmsg+0x54e/0x850 [ 3604.010552][T25651] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3604.010589][T25651] ? import_iovec+0x73/0xa0 [ 3604.010619][T25651] ___sys_sendmsg+0x2a5/0x360 [ 3604.010645][T25651] ? __lock_acquire+0x747/0x2de0 [ 3604.010671][T25651] ? __pfx____sys_sendmsg+0x10/0x10 [ 3604.010737][T25651] ? __fget_files+0x2a/0x420 [ 3604.010764][T25651] ? __fget_files+0x3a2/0x420 [ 3604.010802][T25651] __x64_sys_sendmsg+0x1b1/0x290 [ 3604.010833][T25651] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 3604.010885][T25651] do_syscall_64+0x166/0x520 [ 3604.010907][T25651] ? trace_irq_disable+0x3b/0x140 [ 3604.010927][T25651] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3604.010948][T25651] ? clear_bhb_loop+0x70/0xc0 [ 3604.010974][T25651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3604.010992][T25651] RIP: 0033:0x7f4bea79e159 [ 3604.011012][T25651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3604.011029][T25651] RSP: 002b:00007f4beb66c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3604.011052][T25651] RAX: ffffffffffffffda RBX: 00007f4beaa25fa0 RCX: 00007f4bea79e159 [ 3604.011067][T25651] RDX: 0000000000000000 RSI: 0000200000003880 RDI: 0000000000000006 [ 3604.011080][T25651] RBP: 00007f4beb66c090 R08: 0000000000000000 R09: 0000000000000000 [ 3604.011092][T25651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3604.011105][T25651] R13: 00007f4beaa26038 R14: 00007f4beaa25fa0 R15: 00007f4beab4fa48 [ 3604.011137][T25651] [ 3604.089499][T25653] netdevsim netdevsim4: Firmware load for './file0/file0/..' refused, path contains '..' component [ 3604.091087][T25653] netlink: 'syz.4.16110': attribute type 10 has an invalid length. [ 3604.091966][T25653] netlink: 32 bytes leftover after parsing attributes in process `syz.4.16110'. [ 3604.365915][T25354] usb 9-1: USB disconnect, device number 43 [ 3604.788786][T25664] loop0: detected capacity change from 0 to 6 [ 3604.844897][T25664] Dev loop0: unable to read RDB block 6 [ 3604.844928][T25664] loop0: unable to read partition table [ 3604.845051][T25664] loop0: partition table beyond EOD, truncated [ 3604.845063][T25664] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 3605.080539][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 3605.080561][ T31] audit: type=1326 audit(1789418469.299:21461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25673 comm="syz.8.16128" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5f99e159 code=0x7ffc0000 [ 3605.081214][ T31] audit: type=1326 audit(1789418469.299:21462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25673 comm="syz.8.16128" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5f99e159 code=0x7ffc0000 [ 3605.097725][ T31] audit: type=1326 audit(1789418469.319:21463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25673 comm="syz.8.16128" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2b5f99e159 code=0x7ffc0000 [ 3605.097880][ T31] audit: type=1326 audit(1789418469.319:21464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25673 comm="syz.8.16128" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5f99e159 code=0x7ffc0000 [ 3605.098022][ T31] audit: type=1326 audit(1789418469.319:21465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25673 comm="syz.8.16128" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5f99e159 code=0x7ffc0000 [ 3605.098308][ T31] audit: type=1326 audit(1789418469.319:21466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25673 comm="syz.8.16128" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f2b5f99e159 code=0x7ffc0000 [ 3605.098473][ T31] audit: type=1326 audit(1789418469.319:21467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25673 comm="syz.8.16128" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5f99e159 code=0x7ffc0000 [ 3605.098602][ T31] audit: type=1326 audit(1789418469.319:21468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25673 comm="syz.8.16128" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5f99e159 code=0x7ffc0000 [ 3605.100385][ T31] audit: type=1326 audit(1789418469.319:21469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25673 comm="syz.8.16128" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f2b5f99e159 code=0x7ffc0000 [ 3605.100736][ T31] audit: type=1326 audit(1789418469.319:21470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25673 comm="syz.8.16128" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5f99e159 code=0x7ffc0000 [ 3605.500190][T25680] netlink: 'syz.9.16130': attribute type 1 has an invalid length. [ 3605.503111][T25680] program syz.9.16130 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3605.612589][T25354] usb 9-1: new full-speed USB device number 44 using dummy_hcd [ 3605.613972][T25682] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 3605.986579][T25354] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 3606.004180][T25695] netlink: 14 bytes leftover after parsing attributes in process `syz.9.16133'. [ 3606.130852][T25354] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 3606.130888][T25354] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 28777, setting to 64 [ 3606.130932][T25354] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3606.133231][T25354] usb 9-1: config 0 descriptor?? [ 3606.452994][T25354] ath6kl: Failed to submit usb control message: -71 [ 3606.453055][T25354] ath6kl: unable to send the bmi data to the device: -71 [ 3606.453071][T25354] ath6kl: Unable to send get target info: -71 [ 3606.454091][T25354] ath6kl: Failed to init ath6kl core: -71 [ 3606.455716][T25354] ath6kl_usb 9-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 3606.458613][T25354] usb 9-1: USB disconnect, device number 44 [ 3607.057564][T25715] netlink: 'syz.4.16139': attribute type 1 has an invalid length. [ 3607.412383][T25721] netlink: 'syz.8.16143': attribute type 1 has an invalid length. [ 3607.436145][T25721] program syz.8.16143 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3607.514424][T25724] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 3607.605623][T25354] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 3607.836944][T25354] usb 2-1: device descriptor read/64, error -71 [ 3608.147631][T25739] FAULT_INJECTION: forcing a failure. [ 3608.147631][T25739] name failslab, interval 1, probability 0, space 0, times 0 [ 3608.147668][T25739] CPU: 0 UID: 0 PID: 25739 Comm: syz.0.16150 Tainted: G L syzkaller #0 PREEMPT(full) [ 3608.147687][T25739] Tainted: [L]=SOFTLOCKUP [ 3608.147692][T25739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3608.147700][T25739] Call Trace: [ 3608.147706][T25739] [ 3608.147712][T25739] dump_stack_lvl+0xe8/0x150 [ 3608.147736][T25739] should_fail_ex+0x410/0x560 [ 3608.147761][T25739] should_failslab+0xa8/0x100 [ 3608.147777][T25739] __kmalloc_noprof+0xfe/0x720 [ 3608.147790][T25739] ? io_cache_alloc_new+0x40/0x100 [ 3608.147802][T25739] ? io_cache_alloc_new+0x40/0x100 [ 3608.147817][T25739] io_cache_alloc_new+0x40/0x100 [ 3608.147830][T25739] io_arm_apoll+0x459/0x910 [ 3608.147848][T25739] ? __pfx_io_arm_apoll+0x10/0x10 [ 3608.147865][T25739] ? __io_issue_sqe+0x207/0x4d0 [ 3608.147879][T25739] ? io_arm_poll_handler+0x20b/0x2a0 [ 3608.147897][T25739] io_queue_async+0x18b/0x2e0 [ 3608.147914][T25739] io_submit_sqes+0x1125/0x2310 [ 3608.147944][T25739] __se_sys_io_uring_enter+0x35b/0x1bb0 [ 3608.147963][T25739] ? __fget_files+0x3a2/0x420 [ 3608.147982][T25739] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 3608.147995][T25739] ? fput+0xa0/0xd0 [ 3608.148010][T25739] ? ksys_write+0x242/0x270 [ 3608.148029][T25739] ? __pfx_ksys_write+0x10/0x10 [ 3608.148050][T25739] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 3608.148065][T25739] do_syscall_64+0x166/0x520 [ 3608.148079][T25739] ? trace_irq_disable+0x3b/0x140 [ 3608.148092][T25739] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3608.148105][T25739] ? clear_bhb_loop+0x70/0xc0 [ 3608.148120][T25739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3608.148132][T25739] RIP: 0033:0x7f2c7ef9e159 [ 3608.148145][T25739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3608.148156][T25739] RSP: 002b:00007f2c7fe2e028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3608.148171][T25739] RAX: ffffffffffffffda RBX: 00007f2c7f225fa0 RCX: 00007f2c7ef9e159 [ 3608.148181][T25739] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 3608.148189][T25739] RBP: 00007f2c7fe2e090 R08: 0000000000000000 R09: 0000000000000000 [ 3608.148197][T25739] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 3608.148205][T25739] R13: 00007f2c7f226038 R14: 00007f2c7f225fa0 R15: 00007f2c7f34fa48 [ 3608.148223][T25739] [ 3608.190622][T25354] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 3608.403427][T25354] usb 2-1: device descriptor read/64, error -71 [ 3608.517017][T25354] usb usb2-port1: attempt power cycle [ 3608.874215][ T8289] usb 5-1: new full-speed USB device number 65 using dummy_hcd [ 3608.903007][T25757] loop0: detected capacity change from 0 to 6 [ 3608.924028][T25354] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 3608.925138][T25757] Dev loop0: unable to read RDB block 6 [ 3608.925183][T25757] loop0: unable to read partition table [ 3608.925431][T25757] loop0: partition table beyond EOD, truncated [ 3608.925450][T25757] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 3609.045022][ T8289] usb 5-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.18 [ 3609.046664][ T8289] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 3609.046692][ T8289] usb 5-1: config 0 has no interface number 0 [ 3609.046736][ T8289] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 3609.046764][ T8289] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3609.046804][ T8289] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3609.053731][ T8289] usb 5-1: config 0 descriptor?? [ 3609.064726][T25354] usb 2-1: device descriptor read/8, error -71 [ 3609.086367][T25761] FAULT_INJECTION: forcing a failure. [ 3609.086367][T25761] name failslab, interval 1, probability 0, space 0, times 0 [ 3609.086402][T25761] CPU: 0 UID: 0 PID: 25761 Comm: syz.8.16158 Tainted: G L syzkaller #0 PREEMPT(full) [ 3609.086428][T25761] Tainted: [L]=SOFTLOCKUP [ 3609.086435][T25761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3609.086446][T25761] Call Trace: [ 3609.086454][T25761] [ 3609.086463][T25761] dump_stack_lvl+0xe8/0x150 [ 3609.086497][T25761] should_fail_ex+0x410/0x560 [ 3609.086524][T25761] should_failslab+0xa8/0x100 [ 3609.086549][T25761] __kvmalloc_node_noprof+0x176/0x820 [ 3609.086574][T25761] ? nf_hook_entries_grow+0x287/0x740 [ 3609.086593][T25761] ? nf_hook_entries_grow+0x287/0x740 [ 3609.086612][T25761] ? __pfx___mutex_lock+0x10/0x10 [ 3609.086638][T25761] nf_hook_entries_grow+0x287/0x740 [ 3609.086671][T25761] __nf_register_net_hook+0x2c9/0x930 [ 3609.086702][T25761] nf_register_net_hook+0xb2/0x190 [ 3609.086724][T25761] nf_register_net_hooks+0x44/0x1b0 [ 3609.086747][T25761] nf_ct_netns_do_get+0x212/0x5c0 [ 3609.086772][T25761] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 3609.086793][T25761] ? trace_contention_end+0x3d/0x140 [ 3609.086823][T25761] ? nf_ct_netns_get+0xe9/0x320 [ 3609.086847][T25761] connbytes_mt_check+0xdb/0x2a0 [ 3609.086881][T25761] xt_check_match+0x602/0xce0 [ 3609.086909][T25761] ? __pfx_xt_check_match+0x10/0x10 [ 3609.086934][T25761] ? pcpu_alloc_noprof+0x1036/0x1900 [ 3609.086970][T25761] ? xt_find_match+0x213/0x260 [ 3609.087000][T25761] translate_table+0x160e/0x2110 [ 3609.087020][T25761] ? __lock_acquire+0x747/0x2de0 [ 3609.087062][T25761] ? __pfx_translate_table+0x10/0x10 [ 3609.087081][T25761] ? lock_acquire+0x115/0x350 [ 3609.087123][T25761] ? _copy_from_user+0x94/0xb0 [ 3609.087154][T25761] do_ip6t_set_ctl+0xa5c/0xe30 [ 3609.087184][T25761] ? rcu_is_watching+0x16/0xb0 [ 3609.087210][T25761] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 3609.087248][T25761] ? __mutex_unlock_slowpath+0x731/0x900 [ 3609.087279][T25761] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 3609.087306][T25761] ? ksys_write+0x1e6/0x270 [ 3609.087342][T25761] nf_setsockopt+0x26f/0x290 [ 3609.087371][T25761] rawv6_setsockopt+0x276/0x5e0 [ 3609.087398][T25761] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 3609.087424][T25761] ? sock_common_setsockopt+0x36/0xc0 [ 3609.087445][T25761] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 3609.087467][T25761] do_sock_setsockopt+0x17c/0x1b0 [ 3609.087495][T25761] __x64_sys_setsockopt+0x13d/0x1b0 [ 3609.087524][T25761] do_syscall_64+0x166/0x520 [ 3609.087544][T25761] ? trace_irq_disable+0x3b/0x140 [ 3609.087562][T25761] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3609.087580][T25761] ? clear_bhb_loop+0x70/0xc0 [ 3609.087603][T25761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3609.087621][T25761] RIP: 0033:0x7f2b5f99e159 [ 3609.087640][T25761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3609.087655][T25761] RSP: 002b:00007f2b608fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 3609.087676][T25761] RAX: ffffffffffffffda RBX: 00007f2b5fc25fa0 RCX: 00007f2b5f99e159 [ 3609.087690][T25761] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000005 [ 3609.087701][T25761] RBP: 00007f2b608fa090 R08: 0000000000001758 R09: 0000000000000000 [ 3609.087713][T25761] R10: 00002000000009c0 R11: 0000000000000246 R12: 0000000000000001 [ 3609.087725][T25761] R13: 00007f2b5fc26038 R14: 00007f2b5fc25fa0 R15: 00007f2b5fd4fa48 [ 3609.087756][T25761] [ 3609.088082][T25761] xt_connbytes: cannot load conntrack support for proto=10 [ 3609.362733][T25354] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 3609.503670][T25354] usb 2-1: device descriptor read/8, error -71 [ 3609.551559][T25765] netlink: 'syz.9.16159': attribute type 1 has an invalid length. [ 3609.552921][T25765] program syz.9.16159 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3609.617306][T25354] usb usb2-port1: unable to enumerate USB device [ 3609.625623][T25768] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 3609.926131][ T8289] usbhid 5-1:0.1: can't add hid device: -71 [ 3609.926258][ T8289] usbhid 5-1:0.1: probe with driver usbhid failed with error -71 [ 3609.928776][ T8289] usb 5-1: USB disconnect, device number 65 [ 3610.748012][T25782] netlink: 40 bytes leftover after parsing attributes in process `syz.9.16165'. [ 3610.765424][T25793] loop0: detected capacity change from 0 to 6 [ 3610.926485][T25793] Dev loop0: unable to read RDB block 6 [ 3610.926536][T25793] loop0: unable to read partition table [ 3610.927405][T25793] loop0: partition table beyond EOD, truncated [ 3610.927430][T25793] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 3611.015695][T25798] FAULT_INJECTION: forcing a failure. [ 3611.015695][T25798] name failslab, interval 1, probability 0, space 0, times 0 [ 3611.015736][T25798] CPU: 0 UID: 0 PID: 25798 Comm: syz.1.16170 Tainted: G L syzkaller #0 PREEMPT(full) [ 3611.015761][T25798] Tainted: [L]=SOFTLOCKUP [ 3611.015768][T25798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3611.015778][T25798] Call Trace: [ 3611.015786][T25798] [ 3611.015796][T25798] dump_stack_lvl+0xe8/0x150 [ 3611.015833][T25798] should_fail_ex+0x410/0x560 [ 3611.015863][T25798] should_failslab+0xa8/0x100 [ 3611.015891][T25798] __kvmalloc_node_noprof+0x176/0x820 [ 3611.015918][T25798] ? nf_hook_entries_grow+0x287/0x740 [ 3611.015940][T25798] ? nf_hook_entries_grow+0x287/0x740 [ 3611.015960][T25798] ? __pfx___mutex_lock+0x10/0x10 [ 3611.015988][T25798] nf_hook_entries_grow+0x287/0x740 [ 3611.016026][T25798] __nf_register_net_hook+0x2c9/0x930 [ 3611.016059][T25798] nf_register_net_hook+0xb2/0x190 [ 3611.016091][T25798] nf_register_net_hooks+0x44/0x1b0 [ 3611.016118][T25798] nf_ct_netns_do_get+0x212/0x5c0 [ 3611.016147][T25798] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 3611.016171][T25798] ? trace_contention_end+0x3d/0x140 [ 3611.016204][T25798] ? nf_ct_netns_get+0xe9/0x320 [ 3611.016230][T25798] connbytes_mt_check+0xdb/0x2a0 [ 3611.016259][T25798] xt_check_match+0x602/0xce0 [ 3611.016290][T25798] ? __pfx_xt_check_match+0x10/0x10 [ 3611.016318][T25798] ? pcpu_alloc_noprof+0x1036/0x1900 [ 3611.016358][T25798] ? xt_find_match+0x213/0x260 [ 3611.016400][T25798] translate_table+0x160e/0x2110 [ 3611.016423][T25798] ? __lock_acquire+0x747/0x2de0 [ 3611.016471][T25798] ? __pfx_translate_table+0x10/0x10 [ 3611.016494][T25798] ? lock_acquire+0x115/0x350 [ 3611.016540][T25798] ? _copy_from_user+0x94/0xb0 [ 3611.016573][T25798] do_ip6t_set_ctl+0xa5c/0xe30 [ 3611.016605][T25798] ? rcu_is_watching+0x16/0xb0 [ 3611.016630][T25798] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 3611.016670][T25798] ? __mutex_unlock_slowpath+0x731/0x900 [ 3611.016701][T25798] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 3611.016727][T25798] ? ksys_write+0x1e6/0x270 [ 3611.016765][T25798] nf_setsockopt+0x26f/0x290 [ 3611.016797][T25798] rawv6_setsockopt+0x276/0x5e0 [ 3611.016827][T25798] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 3611.016857][T25798] ? sock_common_setsockopt+0x36/0xc0 [ 3611.016879][T25798] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 3611.016904][T25798] do_sock_setsockopt+0x17c/0x1b0 [ 3611.016936][T25798] __x64_sys_setsockopt+0x13d/0x1b0 [ 3611.016968][T25798] do_syscall_64+0x166/0x520 [ 3611.016989][T25798] ? trace_irq_disable+0x3b/0x140 [ 3611.017011][T25798] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3611.017031][T25798] ? clear_bhb_loop+0x70/0xc0 [ 3611.017056][T25798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3611.017076][T25798] RIP: 0033:0x7f4bea79e159 [ 3611.017098][T25798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3611.017116][T25798] RSP: 002b:00007f4beb66c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 3611.017140][T25798] RAX: ffffffffffffffda RBX: 00007f4beaa25fa0 RCX: 00007f4bea79e159 [ 3611.017155][T25798] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000005 [ 3611.017169][T25798] RBP: 00007f4beb66c090 R08: 0000000000001758 R09: 0000000000000000 [ 3611.017182][T25798] R10: 00002000000009c0 R11: 0000000000000246 R12: 0000000000000002 [ 3611.017195][T25798] R13: 00007f4beaa26038 R14: 00007f4beaa25fa0 R15: 00007f4beab4fa48 [ 3611.017228][T25798] [ 3611.017328][T25798] xt_connbytes: cannot load conntrack support for proto=10 [ 3611.129989][T25802] xt_connbytes: Forcing CT accounting to be enabled [ 3611.306506][T25805] netlink: 'syz.4.16173': attribute type 1 has an invalid length. [ 3611.307754][T25805] program syz.4.16173 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3611.407051][T25808] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 3611.914382][T29772] IPVS: starting estimator thread 0... [ 3611.915799][T25822] netlink: 'syz.4.16179': attribute type 1 has an invalid length. [ 3612.038197][T25824] IPVS: using max 27 ests per chain, 64800 per kthread [ 3612.940313][T25848] trusted_key: encrypted_key: keylen parameter is missing [ 3613.046913][T25851] FAULT_INJECTION: forcing a failure. [ 3613.046913][T25851] name failslab, interval 1, probability 0, space 0, times 0 [ 3613.046954][T25851] CPU: 0 UID: 0 PID: 25851 Comm: syz.4.16189 Tainted: G L syzkaller #0 PREEMPT(full) [ 3613.046981][T25851] Tainted: [L]=SOFTLOCKUP [ 3613.046988][T25851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3613.047000][T25851] Call Trace: [ 3613.047009][T25851] [ 3613.047018][T25851] dump_stack_lvl+0xe8/0x150 [ 3613.047054][T25851] should_fail_ex+0x410/0x560 [ 3613.047083][T25851] should_failslab+0xa8/0x100 [ 3613.047111][T25851] __kvmalloc_node_noprof+0x176/0x820 [ 3613.047139][T25851] ? nf_hook_entries_grow+0x287/0x740 [ 3613.047160][T25851] ? nf_hook_entries_grow+0x287/0x740 [ 3613.047182][T25851] ? __pfx___mutex_lock+0x10/0x10 [ 3613.047211][T25851] nf_hook_entries_grow+0x287/0x740 [ 3613.047247][T25851] __nf_register_net_hook+0x2c9/0x930 [ 3613.047282][T25851] nf_register_net_hook+0xb2/0x190 [ 3613.047306][T25851] nf_register_net_hooks+0x44/0x1b0 [ 3613.047333][T25851] nf_ct_netns_do_get+0x212/0x5c0 [ 3613.047370][T25851] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 3613.047394][T25851] ? trace_contention_end+0x3d/0x140 [ 3613.047427][T25851] ? nf_ct_netns_get+0xe9/0x320 [ 3613.047455][T25851] connbytes_mt_check+0xdb/0x2a0 [ 3613.047483][T25851] xt_check_match+0x602/0xce0 [ 3613.047514][T25851] ? __pfx_xt_check_match+0x10/0x10 [ 3613.047541][T25851] ? pcpu_alloc_noprof+0x1036/0x1900 [ 3613.047581][T25851] ? xt_find_match+0x213/0x260 [ 3613.047614][T25851] translate_table+0x160e/0x2110 [ 3613.047636][T25851] ? __lock_acquire+0x747/0x2de0 [ 3613.047682][T25851] ? __pfx_translate_table+0x10/0x10 [ 3613.047702][T25851] ? lock_acquire+0x115/0x350 [ 3613.047747][T25851] ? _copy_from_user+0x94/0xb0 [ 3613.047779][T25851] do_ip6t_set_ctl+0xa5c/0xe30 [ 3613.047811][T25851] ? rcu_is_watching+0x16/0xb0 [ 3613.047837][T25851] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 3613.047877][T25851] ? __mutex_unlock_slowpath+0x731/0x900 [ 3613.047907][T25851] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 3613.047936][T25851] ? ksys_write+0x1e6/0x270 [ 3613.047974][T25851] nf_setsockopt+0x26f/0x290 [ 3613.048007][T25851] rawv6_setsockopt+0x276/0x5e0 [ 3613.048037][T25851] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 3613.048067][T25851] ? sock_common_setsockopt+0x36/0xc0 [ 3613.048090][T25851] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 3613.048115][T25851] do_sock_setsockopt+0x17c/0x1b0 [ 3613.048145][T25851] __x64_sys_setsockopt+0x13d/0x1b0 [ 3613.048178][T25851] do_syscall_64+0x166/0x520 [ 3613.048200][T25851] ? trace_irq_disable+0x3b/0x140 [ 3613.048221][T25851] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3613.048243][T25851] ? clear_bhb_loop+0x70/0xc0 [ 3613.048268][T25851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3613.048289][T25851] RIP: 0033:0x7f5cd279e159 [ 3613.048310][T25851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3613.048328][T25851] RSP: 002b:00007f5cd3600028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 3613.048359][T25851] RAX: ffffffffffffffda RBX: 00007f5cd2a25fa0 RCX: 00007f5cd279e159 [ 3613.048376][T25851] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000005 [ 3613.048390][T25851] RBP: 00007f5cd3600090 R08: 0000000000001758 R09: 0000000000000000 [ 3613.048402][T25851] R10: 00002000000009c0 R11: 0000000000000246 R12: 0000000000000002 [ 3613.048416][T25851] R13: 00007f5cd2a26038 R14: 00007f5cd2a25fa0 R15: 00007f5cd2b4fa48 [ 3613.048450][T25851] [ 3613.048507][T25851] xt_connbytes: cannot load conntrack support for proto=10 [ 3613.189651][T25854] netlink: 'syz.0.16190': attribute type 1 has an invalid length. [ 3613.192780][T25854] program syz.0.16190 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3613.352417][T25855] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 3613.607272][T25861] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16192'. [ 3613.946881][T29772] IPVS: starting estimator thread 0... [ 3614.035144][T25873] IPVS: using max 23 ests per chain, 55200 per kthread [ 3614.059000][T25877] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 3614.184234][ T8289] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 3614.223857][T25881] loop5: detected capacity change from 0 to 7 [ 3614.224768][T25881] Dev loop5: unable to read RDB block 7 [ 3614.224813][T25881] loop5: unable to read partition table [ 3614.225050][T25881] loop5: partition table beyond EOD, truncated [ 3614.225069][T25881] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 3614.344254][ T8289] usb 9-1: Using ep0 maxpacket: 32 [ 3614.345014][ T8289] usb 9-1: New USB device found, idVendor=0547, idProduct=7303, bcdDevice=e9.7b [ 3614.346216][ T8289] usb 9-1: config 8 has an invalid interface number: 8 but max is 0 [ 3614.346240][ T8289] usb 9-1: config 8 has no interface number 0 [ 3614.346271][ T8289] usb 9-1: config 8 interface 8 has no altsetting 0 [ 3614.348787][ T8289] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3614.348811][ T8289] usb 9-1: Product: syz [ 3614.348827][ T8289] usb 9-1: Manufacturer: syz [ 3614.348842][ T8289] usb 9-1: SerialNumber: syz [ 3614.572041][T25892] bridge1: entered promiscuous mode [ 3614.572060][T25892] bridge1: entered allmulticast mode [ 3614.577888][ T8304] usb 5-1: new low-speed USB device number 66 using dummy_hcd [ 3614.818345][ T8304] usb 5-1: device descriptor read/64, error -71 [ 3614.876981][T25898] netlink: 188 bytes leftover after parsing attributes in process `syz.9.16204'. [ 3614.934933][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 3615.102706][ T8304] usb 5-1: new low-speed USB device number 67 using dummy_hcd [ 3615.299227][T25904] bridge1: entered promiscuous mode [ 3615.299519][T25904] bridge1: entered allmulticast mode [ 3615.311252][ T8304] usb 5-1: device descriptor read/64, error -71 [ 3615.458243][ T8304] usb usb5-port1: attempt power cycle [ 3615.869960][ T8304] usb 5-1: new low-speed USB device number 68 using dummy_hcd [ 3616.010767][ T8304] usb 5-1: device descriptor read/8, error -71 [ 3616.289905][ T8304] usb 5-1: new low-speed USB device number 69 using dummy_hcd [ 3616.431661][ T8304] usb 5-1: device descriptor read/8, error -71 [ 3616.538457][ T8304] usb usb5-port1: unable to enumerate USB device [ 3616.911494][ T8289] gspca_main: dtcs033-2.14.0 probing 0547:7303 [ 3616.942096][ T8289] usb 9-1: USB disconnect, device number 45 [ 3617.211660][T25907] netlink: 72 bytes leftover after parsing attributes in process `syz.1.16207'. [ 3617.215845][T25907] netlink: 220 bytes leftover after parsing attributes in process `syz.1.16207'. [ 3617.215874][T25907] netlink: 184 bytes leftover after parsing attributes in process `syz.1.16207'. [ 3617.314264][T25916] netlink: 14975 bytes leftover after parsing attributes in process `syz.9.16212'. [ 3617.319648][T25916] netlink: 14975 bytes leftover after parsing attributes in process `syz.9.16212'. [ 3617.424250][T24733] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 3617.582913][T24733] usb 9-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 3617.597376][T24733] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3617.597440][T24733] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3617.646542][T24733] as10x_usb: device has been detected [ 3617.647560][T24733] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 3617.674932][T25929] loop5: detected capacity change from 0 to 7 [ 3617.675830][T25929] Dev loop5: unable to read RDB block 7 [ 3617.675873][T25929] loop5: unable to read partition table [ 3617.676129][T25929] loop5: partition table beyond EOD, truncated [ 3617.676149][T25929] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 3617.756494][T24733] usb 9-1: DVB: registering adapter 3 frontend 0 (Abilis Systems DVB-Titan)... [ 3617.785902][T24733] as10x_usb: error during firmware upload part1 [ 3617.786760][T24733] Registered device Abilis Systems DVB-Titan [ 3617.855068][T25912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3617.855611][T25912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3617.862766][T25912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3617.863346][T25912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3617.880289][T25359] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 3617.978003][ T31] kauditd_printk_skb: 59 callbacks suppressed [ 3617.978024][ T31] audit: type=1326 audit(1789418482.199:21530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25939 comm="syz.4.16221" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cd279e159 code=0x7ffc0000 [ 3617.978074][ T31] audit: type=1326 audit(1789418482.199:21531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25939 comm="syz.4.16221" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cd279e159 code=0x7ffc0000 [ 3618.026307][ T31] audit: type=1326 audit(1789418482.209:21532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25939 comm="syz.4.16221" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5cd275e98e code=0x7ffc0000 [ 3618.026364][ T31] audit: type=1326 audit(1789418482.209:21533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25939 comm="syz.4.16221" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cd279e159 code=0x7ffc0000 [ 3618.026405][ T31] audit: type=1326 audit(1789418482.209:21534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25939 comm="syz.4.16221" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f5cd279e159 code=0x7ffc0000 [ 3618.026445][ T31] audit: type=1326 audit(1789418482.209:21535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25939 comm="syz.4.16221" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cd279e159 code=0x7ffc0000 [ 3618.026490][ T31] audit: type=1326 audit(1789418482.209:21536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25939 comm="syz.4.16221" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f5cd279e159 code=0x7ffc0000 [ 3618.026532][ T31] audit: type=1326 audit(1789418482.209:21537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25939 comm="syz.4.16221" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cd279e159 code=0x7ffc0000 [ 3618.026571][ T31] audit: type=1326 audit(1789418482.209:21538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25939 comm="syz.4.16221" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f5cd279e159 code=0x7ffc0000 [ 3618.026610][ T31] audit: type=1326 audit(1789418482.209:21539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25939 comm="syz.4.16221" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5cd2797ed7 code=0x7ffc0000 [ 3618.064807][ T8304] usb 10-1: new full-speed USB device number 34 using dummy_hcd [ 3618.179675][T25359] usb 2-1: Using ep0 maxpacket: 8 [ 3618.438724][ T8304] usb 10-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 3618.474447][T25359] usb 2-1: unable to get BOS descriptor or descriptor too short [ 3618.474501][T25359] usb 2-1: New USB device found, idVendor=249c, idProduct=9006, bcdDevice= 0.40 [ 3618.538764][T17881] failed while handling packet from 1:-2 [ 3618.587958][ T8304] usb 10-1: config 0 interface 0 has no altsetting 0 [ 3618.588009][ T8304] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3618.591149][ T8304] usb 10-1: config 0 descriptor?? [ 3618.624480][T25359] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 16 [ 3618.935539][T25359] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3618.935573][T25359] usb 2-1: Product: syz [ 3618.935588][T25359] usb 2-1: Manufacturer: syz [ 3618.935604][T25359] usb 2-1: SerialNumber: syz [ 3618.971044][T25928] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 3619.390211][T25359] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 3619.390275][T25359] usb 2-1: MIDIStreaming interface descriptor not found [ 3619.456443][ T8304] usbhid 10-1:0.0: can't add hid device: -71 [ 3619.456522][ T8304] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 3619.458272][ T8304] usb 10-1: USB disconnect, device number 34 [ 3619.465988][T25927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3619.466303][T25927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3619.492947][T25359] usb 2-1: USB disconnect, device number 67 [ 3619.932052][T25359] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 3620.210591][T25359] usb 2-1: Using ep0 maxpacket: 8 [ 3620.425227][T25359] usb 2-1: unable to get BOS descriptor or descriptor too short [ 3620.425291][T25359] usb 2-1: New USB device found, idVendor=249c, idProduct=9006, bcdDevice= 0.40 [ 3620.518710][T25971] loop5: detected capacity change from 0 to 7 [ 3620.520166][T25971] Dev loop5: unable to read RDB block 7 [ 3620.520213][T25971] loop5: unable to read partition table [ 3620.520453][T25971] loop5: partition table beyond EOD, truncated [ 3620.520472][T25971] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 3620.536580][T25359] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 3620.536619][T25359] usb 2-1: can't read configurations, error -71 [ 3620.948993][T25356] usb 9-1: USB disconnect, device number 46 [ 3621.054438][T25356] Unregistered device Abilis Systems DVB-Titan [ 3621.056620][T25356] as10x_usb: device has been disconnected [ 3621.305607][T25982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3621.306248][T25982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3621.429390][T25354] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 3621.556874][T25990] tipc: Started in network mode [ 3621.556909][T25990] tipc: Node identity ac1414aa, cluster identity 4711 [ 3621.557182][T25990] tipc: New replicast peer: 172.20.20.187 [ 3621.563032][T25990] tipc: Enabled bearer , priority 0 [ 3621.630376][T25993] netlink: 'syz.8.16236': attribute type 1 has an invalid length. [ 3621.631836][T25993] program syz.8.16236 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3621.725452][T25354] usb 10-1: Using ep0 maxpacket: 16 [ 3621.957581][T26001] loop5: detected capacity change from 0 to 7 [ 3621.958272][T26001] Dev loop5: unable to read RDB block 7 [ 3621.958300][T26001] loop5: unable to read partition table [ 3621.958435][T26001] loop5: partition table beyond EOD, truncated [ 3621.958448][T26001] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 3622.028397][T25354] usb 10-1: unable to get BOS descriptor or descriptor too short [ 3622.028464][T25354] usb 10-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 3622.113569][T26004] Cannot find set identified by id 0 to match [ 3622.595313][T26020] fuse: Unknown parameter 'ŸH®ª^Œ­' [ 3622.639335][T25356] tipc: Node number set to 2886997162 [ 3622.716031][T26024] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3622.776141][T25354] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3622.776173][T25354] usb 10-1: Product: syz [ 3622.776190][T25354] usb 10-1: Manufacturer: syz [ 3622.776206][T25354] usb 10-1: SerialNumber: syz [ 3623.106644][T26031] loop5: detected capacity change from 0 to 7 [ 3623.120517][T26031] Dev loop5: unable to read RDB block 7 [ 3623.120565][T26031] loop5: unable to read partition table [ 3623.120821][T26031] loop5: partition table beyond EOD, truncated [ 3623.120841][T26031] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 3623.246138][T26033] program syz.0.16252 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3623.362520][T26034] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 3623.596001][T26040] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3623.703016][ T31] kauditd_printk_skb: 21 callbacks suppressed [ 3623.703039][ T31] audit: type=1804 audit(1789418487.919:21561): pid=26040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.16254" name="bus" dev="ramfs" ino=403414 res=1 errno=0 [ 3623.738023][ T31] audit: type=1804 audit(1789418487.959:21562): pid=26040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.16254" name="bus" dev="ramfs" ino=403414 res=1 errno=0 [ 3624.038121][T25354] usb 10-1: USB disconnect, device number 35 [ 3624.226820][T26056] Context (ID=0x0) not attached to queue pair (handle=0x4e5:0x0) [ 3624.725321][T26066] kvm: pic: non byte read [ 3624.725396][T26066] kvm: pic: non byte read [ 3624.725405][T26066] kvm: pic: non byte read [ 3624.725410][T26066] kvm: pic: non byte read [ 3624.725416][T26066] kvm: pic: non byte read [ 3624.725421][T26066] kvm: pic: non byte read [ 3624.725426][T26066] kvm: pic: non byte read [ 3624.725431][T26066] kvm: pic: non byte read [ 3624.725436][T26066] kvm: pic: non byte read [ 3624.725441][T26066] kvm: pic: non byte read [ 3625.101785][T26074] netlink: 'syz.0.16266': attribute type 1 has an invalid length. [ 3625.105868][T26074] program syz.0.16266 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3625.215933][T26077] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 3626.254248][T24733] usb 9-1: new full-speed USB device number 47 using dummy_hcd [ 3626.405318][T24733] usb 9-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 3626.409338][T24733] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64 [ 3626.409362][T24733] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3626.411395][T24733] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3626.411423][T24733] usb 9-1: Product: syz [ 3626.411438][T24733] usb 9-1: Manufacturer: syz [ 3626.411453][T24733] usb 9-1: SerialNumber: syz [ 3626.468533][ T8289] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 3626.501020][T24733] usb 9-1: config 0 descriptor?? [ 3626.501917][T26115] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 3626.518194][T24733] port100 9-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 3626.625898][ T8289] usb 5-1: Using ep0 maxpacket: 16 [ 3626.629227][ T8289] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 3626.632432][ T8289] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3626.632450][ T8289] usb 5-1: Product: syz [ 3626.632459][ T8289] usb 5-1: Manufacturer: syz [ 3626.632469][ T8289] usb 5-1: SerialNumber: syz [ 3626.650765][ T8289] r8152-cfgselector 5-1: Unknown version 0x0000 [ 3626.650786][ T8289] r8152-cfgselector 5-1: config 0 descriptor?? [ 3626.706863][T26115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3626.707224][T26115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3626.871605][T25356] usb 9-1: USB disconnect, device number 47 [ 3627.632338][T26127] netlink: 'syz.1.16280': attribute type 1 has an invalid length. [ 3627.636844][T26127] program syz.1.16280 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3627.700363][T26128] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 3627.825853][T26130] loop0: detected capacity change from 0 to 6 [ 3627.877481][T26130] Dev loop0: unable to read RDB block 6 [ 3627.877536][T26130] loop0: unable to read partition table [ 3627.877771][T26130] loop0: partition table beyond EOD, truncated [ 3627.877792][T26130] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 3628.352864][T26141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3628.361334][T25354] usb 2-1: new low-speed USB device number 70 using dummy_hcd [ 3628.373528][T26141] 8021q: adding VLAN 0 to HW filter on device team0 [ 3628.390701][T26141] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3628.520771][T26141] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3628.535794][T26141] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3628.542022][T26141] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3628.542049][T26141] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3628.592078][T26141] veth1_vlan: left promiscuous mode [ 3628.593388][T26141] veth0_vlan: left promiscuous mode [ 3628.595109][T26141] veth0_vlan: entered promiscuous mode [ 3628.598475][T26141] veth1_vlan: entered promiscuous mode [ 3628.604839][T26141] veth1_macvtap: left promiscuous mode [ 3628.606175][T26141] veth0_macvtap: left promiscuous mode [ 3628.607484][T26141] veth0_macvtap: entered promiscuous mode [ 3628.608846][T26141] veth1_macvtap: entered promiscuous mode [ 3628.633198][T26141] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 3628.634292][T26141] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 3628.635368][T26141] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 3628.636468][T26141] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 3628.644989][T26141] 8021q: adding VLAN 0 to HW filter on device bond1 [ 3628.710345][T17882] bridge0: port 1(bridge_slave_0) entered blocking state [ 3628.710468][T17882] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3628.712796][T17882] bridge0: port 2(bridge_slave_1) entered blocking state [ 3628.712911][T17882] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3628.864495][T29772] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 3628.864536][T29772] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3628.864580][T29772] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 3628.864605][T29772] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3628.864645][T29772] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 3628.864670][T29772] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3628.864710][T29772] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 3628.864736][T29772] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3628.959370][T25354] usb 2-1: unable to get BOS descriptor or descriptor too short [ 3628.959427][T25354] usb 2-1: New USB device found, idVendor=0403, idProduct=e80a, bcdDevice= 0.b8 [ 3629.054225][T24733] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 3629.055436][T26154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3629.055933][T26154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3629.111282][T25354] usb 2-1: config 127 has an invalid interface number: 106 but max is 0 [ 3629.111314][T25354] usb 2-1: config 127 has no interface number 0 [ 3629.111365][T25354] usb 2-1: config 127 interface 106 altsetting 8 endpoint 0xF has invalid maxpacket 128, setting to 8 [ 3629.111393][T25354] usb 2-1: config 127 interface 106 has no altsetting 0 [ 3629.242444][T25356] r8152-cfgselector 5-1: USB disconnect, device number 70 [ 3629.267533][T24733] usb 9-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 3629.271336][T24733] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3629.271366][T24733] usb 9-1: Product: syz [ 3629.271380][T24733] usb 9-1: Manufacturer: syz [ 3629.271395][T24733] usb 9-1: SerialNumber: syz [ 3629.317691][T24733] usb 9-1: config 0 descriptor?? [ 3629.335979][ T8304] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 3629.557410][T25354] usb 2-1: string descriptor 0 read error: -22 [ 3629.557590][T25354] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3629.570828][T25359] usb 9-1: USB disconnect, device number 48 [ 3629.640284][T25354] ftdi_sio 2-1:127.106: FTDI USB Serial Device converter detected [ 3629.641785][T25354] usb 2-1: Detected SIO [ 3629.643992][T25354] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 3629.711478][ T8304] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 3629.711512][ T8304] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 3629.848376][ T8304] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3629.848414][ T8304] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3629.848431][ T8304] usb 10-1: config 0 interface 0 has no altsetting 0 [ 3629.900599][T25354] usb 2-1: USB disconnect, device number 70 [ 3629.935435][T25354] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 3629.935927][T25354] ftdi_sio 2-1:127.106: device disconnected [ 3629.995985][ T8304] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3629.996050][ T8304] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3629.996079][ T8304] usb 10-1: config 0 interface 0 has no altsetting 0 [ 3630.132741][T26173] netlink: 'syz.1.16293': attribute type 1 has an invalid length. [ 3630.133995][T26173] program syz.1.16293 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3630.144426][ T8304] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3630.144482][ T8304] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3630.144507][ T8304] usb 10-1: config 0 interface 0 has no altsetting 0 [ 3630.259852][T26174] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 3630.286820][ T8304] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3630.286857][ T8304] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3630.286874][ T8304] usb 10-1: config 0 interface 0 has no altsetting 0 [ 3630.432451][ T8304] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3630.432509][ T8304] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3630.432527][ T8304] usb 10-1: config 0 interface 0 has no altsetting 0 [ 3630.439281][T26176] netlink: 8 bytes leftover after parsing attributes in process `syz.8.16295'. [ 3630.452667][T21676] bridge0: port 1(syz_tun) entered disabled state [ 3630.564810][T21676] syz_tun (unregistering): left allmulticast mode [ 3630.564842][T21676] syz_tun (unregistering): left promiscuous mode [ 3630.564936][T21676] bridge0: port 1(syz_tun) entered disabled state [ 3630.597431][ T8304] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3630.597490][ T8304] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3630.597508][ T8304] usb 10-1: config 0 interface 0 has no altsetting 0 [ 3630.748152][ T8304] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3630.748200][ T8304] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3630.748217][ T8304] usb 10-1: config 0 interface 0 has no altsetting 0 [ 3630.896592][ T8304] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3630.896657][ T8304] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3630.896685][ T8304] usb 10-1: config 0 interface 0 has no altsetting 0 [ 3631.201095][ T8304] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 3631.201128][ T8304] usb 10-1: Product: syz [ 3631.201142][ T8304] usb 10-1: Manufacturer: syz [ 3631.201156][ T8304] usb 10-1: SerialNumber: syz [ 3631.222058][ T8304] usb 10-1: config 0 descriptor?? [ 3631.299393][ T8304] yurex 10-1:0.0: USB YUREX device now attached to Yurex #0 [ 3631.758955][T24733] usb 10-1: USB disconnect, device number 36 [ 3631.782584][T24733] yurex 10-1:0.0: USB YUREX #0 now disconnected [ 3632.019582][T16882] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 3632.047368][T16882] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 3632.048761][T16882] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 3632.052462][T16882] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 3632.055901][T16882] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 3632.223084][T26220] netlink: 'syz.0.16306': attribute type 1 has an invalid length. [ 3632.236527][T26220] program syz.0.16306 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3632.239472][T26221] loop0: detected capacity change from 0 to 6 [ 3632.264517][ T8293] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 3632.284543][T26221] Dev loop0: unable to read RDB block 6 [ 3632.284590][T26221] loop0: unable to read partition table [ 3632.284821][T26221] loop0: partition table beyond EOD, truncated [ 3632.284841][T26221] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 3632.313569][T26222] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 3632.427830][ T8293] usb 2-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 3632.429365][ T8293] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 3632.429419][ T8293] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3632.486231][ T8293] usb 2-1: config 0 descriptor?? [ 3632.487160][T26213] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 3632.781865][T26231] netlink: 'syz.8.16311': attribute type 1 has an invalid length. [ 3632.977532][ T8293] uclogic 0003:5543:0064.0080: unknown main item tag 0x0 [ 3632.977581][ T8293] uclogic 0003:5543:0064.0080: unknown main item tag 0x0 [ 3632.977608][ T8293] uclogic 0003:5543:0064.0080: unknown main item tag 0x0 [ 3632.977635][ T8293] uclogic 0003:5543:0064.0080: unknown main item tag 0x0 [ 3632.977662][ T8293] uclogic 0003:5543:0064.0080: unknown main item tag 0x0 [ 3632.977689][ T8293] uclogic 0003:5543:0064.0080: unknown main item tag 0x0 [ 3632.977716][ T8293] uclogic 0003:5543:0064.0080: unknown main item tag 0x0 [ 3632.977742][ T8293] uclogic 0003:5543:0064.0080: unknown main item tag 0x0 [ 3632.977769][ T8293] uclogic 0003:5543:0064.0080: unknown main item tag 0x0 [ 3632.977795][ T8293] uclogic 0003:5543:0064.0080: unknown main item tag 0x0 [ 3633.069232][ T8293] uclogic 0003:5543:0064.0080: hidraw0: USB HID v7b.fd Device [HID 5543:0064] on usb-dummy_hcd.1-1/input0 [ 3633.185643][T26213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3633.186169][T26213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3633.187797][T25359] usb 2-1: USB disconnect, device number 71 [ 3633.428825][T26243] netlink: 16 bytes leftover after parsing attributes in process `syz.8.16315'. [ 3633.657027][T26217] bridge0: port 1(bridge_slave_0) entered blocking state [ 3633.657329][T26217] bridge0: port 1(bridge_slave_0) entered disabled state [ 3633.657504][T26217] bridge_slave_0: entered allmulticast mode [ 3633.659882][T26217] bridge_slave_0: entered promiscuous mode [ 3633.705332][T26217] bridge0: port 2(bridge_slave_1) entered blocking state [ 3633.705527][T26217] bridge0: port 2(bridge_slave_1) entered disabled state [ 3633.705723][T26217] bridge_slave_1: entered allmulticast mode [ 3633.707806][T26217] bridge_slave_1: entered promiscuous mode [ 3633.824623][T26217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3633.827674][T26217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3633.846866][T26217] team0: Port device team_slave_0 added [ 3633.909893][T26217] team0: Port device team_slave_1 added [ 3634.060186][T26262] netlink: Setting conntrack mark requires 'commit' flag. [ 3634.060231][T26262] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 3634.094815][T26217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3634.094835][T26217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3634.094862][T26217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3634.097131][T26217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3634.097148][T26217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3634.097175][T26217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3634.141440][T16882] Bluetooth: hci8: command tx timeout [ 3634.403524][T26217] hsr_slave_0: entered promiscuous mode [ 3634.406002][T26217] hsr_slave_1: entered promiscuous mode [ 3634.406858][T26217] debugfs: 'hsr0' already exists in 'hsr' [ 3634.406879][T26217] Cannot create hsr debugfs directory [ 3634.466862][T26270] netlink: 'syz.8.16322': attribute type 1 has an invalid length. [ 3635.187744][T26281] binder: BINDER_SET_CONTEXT_MGR already set [ 3635.187802][T26281] binder: 26280:26281 ioctl 4018620d 200000000100 returned -16 [ 3635.187900][T26281] binder: BINDER_SET_CONTEXT_MGR already set [ 3635.187910][T26281] binder: 26280:26281 ioctl 4018620d 200000000100 returned -16 [ 3635.188028][T26281] binder: BINDER_SET_CONTEXT_MGR already set [ 3635.188038][T26281] binder: 26280:26281 ioctl 4018620d 200000000100 returned -16 [ 3635.188131][T26281] binder: BINDER_SET_CONTEXT_MGR already set [ 3635.188142][T26281] binder: 26280:26281 ioctl 4018620d 200000000100 returned -16 [ 3635.188236][T26281] binder: BINDER_SET_CONTEXT_MGR already set [ 3635.188244][T26281] binder: 26280:26281 ioctl 4018620d 200000000100 returned -16 [ 3635.188345][T26281] binder: BINDER_SET_CONTEXT_MGR already set [ 3635.188354][T26281] binder: 26280:26281 ioctl 4018620d 200000000100 returned -16 [ 3635.188449][T26281] binder: BINDER_SET_CONTEXT_MGR already set [ 3635.188458][T26281] binder: 26280:26281 ioctl 4018620d 200000000100 returned -16 [ 3635.188554][T26281] binder: BINDER_SET_CONTEXT_MGR already set [ 3635.188564][T26281] binder: 26280:26281 ioctl 4018620d 200000000100 returned -16 [ 3635.188657][T26281] binder: BINDER_SET_CONTEXT_MGR already set [ 3635.188667][T26281] binder: 26280:26281 ioctl 4018620d 200000000100 returned -16 [ 3635.188762][T26281] binder: BINDER_SET_CONTEXT_MGR already set [ 3635.188772][T26281] binder: 26280:26281 ioctl 4018620d 200000000100 returned -16 [ 3635.188869][T26281] binder: BINDER_SET_CONTEXT_MGR already set [ 3635.188879][T26281] binder: 26280:26281 ioctl 4018620d 200000000100 returned -16 [ 3635.188984][T26281] binder: BINDER_SET_CONTEXT_MGR already set [ 3635.188994][T26281] binder: 26280:26281 ioctl 4018620d 200000000100 returned -16 [ 3635.189250][T26281] binder: BINDER_SET_CONTEXT_MGR already set [ 3635.189262][T26281] binder: 26280:26281 ioctl 4018620d 200000000100 returned -16 [ 3635.189362][T26281] binder: BINDER_SET_CONTEXT_MGR already set [ 3635.189372][T26281] binder: 26280:26281 ioctl 4018620d 200000000100 returned -16 [ 3635.189469][T26281] binder: BINDER_SET_CONTEXT_MGR already set [ 3635.189479][T26281] binder: 26280:26281 ioctl 4018620d 200000000100 returned -16 [ 3635.189574][T26281] binder: BINDER_SET_CONTEXT_MGR already set [ 3635.189582][T26281] binder: 26280:26281 ioctl 4018620d 200000000100 returned -16 [ 3635.189678][T26281] binder: BINDER_SET_CONTEXT_MGR already set [ 3635.189688][T26281] binder: 26280:26281 ioctl 4018620d 200000000100 returned -16 [ 3635.189786][T26281] binder: BINDER_SET_CONTEXT_MGR already set [ 3635.189796][T26281] binder: 26280:26281 ioctl 4018620d 200000000100 returned -16 [ 3635.189894][T26281] binder: BINDER_SET_CONTEXT_MGR already set [ 3635.189903][T26281] binder: 26280:26281 ioctl 4018620d 200000000100 returned -16 [ 3635.190042][T26281] binder: BINDER_SET_CONTEXT_MGR already set [ 3635.190052][T26281] binder: 26280:26281 ioctl 4018620d 200000000100 returned -16 [ 3635.190148][T26281] binder: BINDER_SET_CONTEXT_MGR already set [ 3635.347726][T26281] binder: 26280:26281 ioctl 4018620d 200000000100 returned -16 [ 3635.348043][T26281] binder: BINDER_SET_CONTEXT_MGR already set [ 3635.348057][T26281] binder: 26280:26281 ioctl 4018620d 200000000100 returned -16 [ 3635.348142][T26281] binder: BINDER_SET_CONTEXT_MGR already set [ 3635.348152][T26281] binder: 26280:26281 ioctl 4018620d 200000000100 returned -16 [ 3635.348234][T26281] binder: BINDER_SET_CONTEXT_MGR already set [ 3635.348245][T26281] binder: 26280:26281 ioctl 4018620d 200000000100 returned -16 [ 3635.348327][T26281] binder: BINDER_SET_CONTEXT_MGR already set [ 3635.348336][T26281] binder: 26280:26281 ioctl 4018620d 200000000100 returned -16 [ 3635.348421][T26281] binder: BINDER_SET_CONTEXT_MGR already set [ 3635.348431][T26281] binder: 26280:26281 ioctl 4018620d 200000000100 returned -16 [ 3635.348528][T26281] binder: BINDER_SET_CONTEXT_MGR already set [ 3635.348538][T26281] binder: 26280:26281 ioctl 4018620d 200000000100 returned -16 [ 3635.348619][T26281] binder: BINDER_SET_CONTEXT_MGR already set [ 3635.348629][T26281] binder: 26280:26281 ioctl 4018620d 200000000100 returned -16 [ 3635.348713][T26281] binder: BINDER_SET_CONTEXT_MGR already set [ 3635.348723][T26281] binder: 26280:26281 ioctl 4018620d 200000000100 returned -16 [ 3635.348808][T26281] binder: BINDER_SET_CONTEXT_MGR already set [ 3635.348818][T26281] binder: 26280:26281 ioctl 4018620d 200000000100 returned -16 [ 3635.348900][T26281] binder: BINDER_SET_CONTEXT_MGR already set [ 3635.348910][T26281] binder: 26280:26281 ioctl 4018620d 200000000100 returned -16 [ 3635.348991][T26281] binder: BINDER_SET_CONTEXT_MGR already set [ 3635.349001][T26281] binder: 26280:26281 ioctl 4018620d 200000000100 returned -16 [ 3635.349084][T26281] binder: BINDER_SET_CONTEXT_MGR already set [ 3635.349095][T26281] binder: 26280:26281 ioctl 4018620d 200000000100 returned -16 [ 3635.349180][T26281] binder: BINDER_SET_CONTEXT_MGR already set [ 3635.349190][T26281] binder: 26280:26281 ioctl 4018620d 200000000100 returned -16 [ 3635.349271][T26281] binder: BINDER_SET_CONTEXT_MGR already set [ 3635.349282][T26281] binder: 26280:26281 ioctl 4018620d 200000000100 returned -16 [ 3635.349364][T26281] binder: BINDER_SET_CONTEXT_MGR already set [ 3635.349374][T26281] binder: 26280:26281 ioctl 4018620d 200000000100 returned -16 [ 3635.349473][T26281] binder: BINDER_SET_CONTEXT_MGR already set [ 3635.349483][T26281] binder: 26280:26281 ioctl 4018620d 200000000100 returned -16 [ 3635.349570][T26281] binder: BINDER_SET_CONTEXT_MGR already set [ 3635.349580][T26281] binder: 26280:26281 ioctl 4018620d 200000000100 returned -16 [ 3635.349664][T26281] binder: BINDER_SET_CONTEXT_MGR already set [ 3635.349674][T26281] binder: 26280:26281 ioctl 4018620d 200000000100 returned -16 [ 3635.349758][T26281] binder: BINDER_SET_CONTEXT_MGR already set [ 3635.349768][T26281] binder: 26280:26281 ioctl 4018620d 200000000100 returned -16 [ 3635.349852][T26281] binder: BINDER_SET_CONTEXT_MGR already set [ 3635.349861][T26281] binder: 26280:26281 ioctl 4018620d 200000000100 returned -16 [ 3635.349945][T26281] binder: BINDER_SET_CONTEXT_MGR already set [ 3635.349956][T26281] binder: 26280:26281 ioctl 4018620d 200000000100 returned -16 [ 3635.350037][T26281] binder: BINDER_SET_CONTEXT_MGR already set [ 3635.350047][T26281] binder: 26280:26281 ioctl 4018620d 200000000100 returned -16 [ 3635.350128][T26281] binder: BINDER_SET_CONTEXT_MGR already set [ 3635.350138][T26281] binder: 26280:26281 ioctl 4018620d 200000000100 returned -16 [ 3635.350220][T26281] binder: BINDER_SET_CONTEXT_MGR already set [ 3635.350230][T26281] binder: 26280:26281 ioctl 4018620d 200000000100 returned -16 [ 3635.350314][T26281] binder: BINDER_SET_CONTEXT_MGR already set [ 3635.350325][T26281] binder: 26280:26281 ioctl 4018620d 200000000100 returned -16 [ 3635.350407][T26281] binder: BINDER_SET_CONTEXT_MGR already set [ 3635.350417][T26281] binder: 26280:26281 ioctl 4018620d 200000000100 returned -16 [ 3635.350505][T26281] binder: BINDER_SET_CONTEXT_MGR already set [ 3635.350515][T26281] binder: 26280:26281 ioctl 4018620d 200000000100 returned -16 [ 3635.350597][T26281] binder: BINDER_SET_CONTEXT_MGR already set [ 3635.350607][T26281] binder: 26280:26281 ioctl 4018620d 200000000100 returned -16 [ 3635.350691][T26281] binder: BINDER_SET_CONTEXT_MGR already set [ 3635.350701][T26281] binder: 26280:26281 ioctl 4018620d 200000000100 returned -16 [ 3635.350784][T26281] binder: BINDER_SET_CONTEXT_MGR already set [ 3635.350794][T26281] binder: 26280:26281 ioctl 4018620d 200000000100 returned -16 [ 3635.350877][T26281] binder: BINDER_SET_CONTEXT_MGR already set [ 3635.350887][T26281] binder: 26280:26281 ioctl 4018620d 200000000100 returned -16 [ 3635.350968][T26281] binder: BINDER_SET_CONTEXT_MGR already set [ 3635.350978][T26281] binder: 26280:26281 ioctl 4018620d 200000000100 returned -16 [ 3635.351062][T26281] binder: BINDER_SET_CONTEXT_MGR already set [ 3635.351072][T26281] binder: 26280:26281 ioctl 4018620d 200000000100 returned -16 [ 3635.351158][T26281] binder: BINDER_SET_CONTEXT_MGR already set [ 3635.351168][T26281] binder: 26280:26281 ioctl 4018620d 200000000100 returned -16 [ 3635.351258][T26281] binder: BINDER_SET_CONTEXT_MGR already set [ 3635.351267][T26281] binder: 26280:26281 ioctl 4018620d 200000000100 returned -16 [ 3635.351349][T26281] binder: BINDER_SET_CONTEXT_MGR already set [ 3635.351359][T26281] binder: 26280:26281 ioctl 4018620d 200000000100 returned -16 [ 3635.351445][T26281] binder: BINDER_SET_CONTEXT_MGR already set [ 3635.351464][T26281] binder: 26280:26281 ioctl 4018620d 200000000100 returned -16 [ 3635.351545][T26281] binder: BINDER_SET_CONTEXT_MGR already set [ 3635.351555][T26281] binder: 26280:26281 ioctl 4018620d 200000000100 returned -16 [ 3635.351641][T26281] binder: BINDER_SET_CONTEXT_MGR already set [ 3635.351651][T26281] binder: 26280:26281 ioctl 4018620d 200000000100 returned -16 [ 3635.351733][T26281] binder: BINDER_SET_CONTEXT_MGR already set [ 3635.351744][T26281] binder: 26280:26281 ioctl 4018620d 200000000100 returned -16 [ 3635.351834][T26281] binder: BINDER_SET_CONTEXT_MGR already set [ 3635.351845][T26281] binder: 26280:26281 ioctl 4018620d 200000000100 returned -16 [ 3635.351928][T26281] binder: BINDER_SET_CONTEXT_MGR already set [ 3635.351939][T26281] binder: 26280:26281 ioctl 4018620d 200000000100 returned -16 [ 3635.352022][T26281] binder: BINDER_SET_CONTEXT_MGR already set [ 3635.352033][T26281] binder: 26280:26281 ioctl 4018620d 200000000100 returned -16 [ 3635.398061][ T31] audit: type=1326 audit(1789418499.619:21563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26280 comm="syz.9.16325" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34eed9e159 code=0x7ffc0000 [ 3635.399926][ T31] audit: type=1326 audit(1789418499.619:21564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26280 comm="syz.9.16325" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f34eed9ddeb code=0x7ffc0000 [ 3635.399979][ T31] audit: type=1326 audit(1789418499.619:21565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26280 comm="syz.9.16325" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34eed9e159 code=0x7ffc0000 [ 3635.400019][ T31] audit: type=1326 audit(1789418499.619:21566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26280 comm="syz.9.16325" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34eed9e159 code=0x7ffc0000 [ 3635.456187][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 3635.456245][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 3636.254063][T19517] Bluetooth: hci8: command tx timeout [ 3636.923893][T26305] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3637.034593][T26305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16331'. [ 3637.384892][T25359] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 3637.510196][T19517] Bluetooth: hci1: command 0x0406 tx timeout [ 3637.575698][T26323] netlink: 8 bytes leftover after parsing attributes in process `syz.8.16333'. [ 3637.684558][T25359] usb 10-1: Using ep0 maxpacket: 32 [ 3637.760016][T25359] usb 10-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 3637.866398][T26217] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 3637.919404][T25359] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 3637.919442][T25359] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 3637.919469][T25359] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 3637.919491][T25359] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 3637.919516][T25359] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 3637.920502][T26325] netlink: 8 bytes leftover after parsing attributes in process `syz.8.16333'. [ 3637.925564][T26217] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 3637.928294][T26217] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 3638.027827][T26217] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 3638.045882][T26217] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 3638.211896][T25359] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3638.211928][T25359] usb 10-1: Product: syz [ 3638.211944][T25359] usb 10-1: Manufacturer: syz [ 3638.211959][T25359] usb 10-1: SerialNumber: syz [ 3638.215724][T25359] usb 10-1: config 0 descriptor?? [ 3638.298368][T26217] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 3638.301194][T26217] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 3638.328322][T26217] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 3638.355422][T16882] Bluetooth: hci8: command tx timeout [ 3638.631430][T26217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3638.679236][T26217] 8021q: adding VLAN 0 to HW filter on device team0 [ 3638.703976][T29772] bridge0: port 1(bridge_slave_0) entered blocking state [ 3638.704097][T29772] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3638.762535][T23584] bridge0: port 2(bridge_slave_1) entered blocking state [ 3638.762661][T23584] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3638.814153][T25359] iforce 10-1:0.0: usb_submit_urb failed: -32 [ 3638.814216][T25359] input input229: Device does not respond to id packet M [ 3638.886217][T25359] iforce 10-1:0.0: usb_submit_urb failed: -32 [ 3638.886278][T25359] input input229: Device does not respond to id packet P [ 3638.891314][T26350] loop3: detected capacity change from 0 to 1 [ 3638.893488][T26350] Dev loop3: unable to read RDB block 1 [ 3638.893532][T26350] loop3: unable to read partition table [ 3638.893805][T26350] loop3: partition table beyond EOD, truncated [ 3638.893828][T26350] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 3638.959546][T25359] iforce 10-1:0.0: usb_submit_urb failed: -32 [ 3638.959599][T25359] input input229: Device does not respond to id packet B [ 3639.013906][T26217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3639.038409][T25359] input input229: Limiting number of effects to 32 (device reports 123) [ 3639.082961][T26217] veth0_vlan: entered promiscuous mode [ 3639.107260][T26217] veth1_vlan: entered promiscuous mode [ 3639.144380][T24733] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 3639.162897][T26217] veth0_macvtap: entered promiscuous mode [ 3639.177070][T26217] veth1_macvtap: entered promiscuous mode [ 3639.200765][T26217] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3639.217606][T26217] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3639.228710][T28549] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3639.229140][T28549] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3639.229427][T28549] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3639.229721][T28549] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3639.295105][T24733] usb 9-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 3639.296459][T24733] usb 9-1: config 220 has an invalid interface number: 76 but max is 2 [ 3639.296485][T24733] usb 9-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 3639.296505][T24733] usb 9-1: config 220 has no interface number 2 [ 3639.296583][T24733] usb 9-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 3639.296621][T24733] usb 9-1: config 220 interface 0 has no altsetting 0 [ 3639.296640][T24733] usb 9-1: config 220 interface 76 has no altsetting 0 [ 3639.296659][T24733] usb 9-1: config 220 interface 1 has no altsetting 0 [ 3639.299008][T24733] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3639.299031][T24733] usb 9-1: Product: syz [ 3639.299046][T24733] usb 9-1: Manufacturer: syz [ 3639.299062][T24733] usb 9-1: SerialNumber: syz [ 3639.691944][T26350] netlink: 20 bytes leftover after parsing attributes in process `syz.8.16337'. [ 3639.692847][T26350] key id 00000001 not found [ 3639.712424][ T2084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3639.712448][ T2084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3639.754752][T24733] usb 9-1: selecting invalid altsetting 0 [ 3639.778663][T24733] uvcvideo 9-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 3639.778701][T24733] uvcvideo 9-1:220.0: No valid video chain found. [ 3639.810130][T24733] usb 9-1: selecting invalid altsetting 0 [ 3639.810883][T24733] usbtest 9-1:220.1: probe with driver usbtest failed with error -22 [ 3639.832362][T24733] usb 9-1: USB disconnect, device number 49 [ 3639.997205][T29772] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3639.997231][T29772] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3640.102606][T25359] iforce 10-1:0.0: usb_submit_urb failed: -110 [ 3640.141812][T25359] iforce 10-1:0.0: usb_submit_urb failed: -32 [ 3640.184638][T25359] iforce 10-1:0.0: usb_submit_urb failed: -32 [ 3640.217317][T25359] iforce 10-1:0.0: usb_submit_urb failed: -32 [ 3640.220037][T25359] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input229 [ 3640.375468][T16882] Bluetooth: hci8: command tx timeout [ 3640.383367][T24603] wiimote 0005:057E:0306.0081: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 3640.383851][T24603] wiimote 0005:057E:0306.0081: New device registered [ 3640.453360][T24733] usb 10-1: USB disconnect, device number 37 [ 3640.678151][T25359] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 3640.768523][T26376] netlink: 'syz.8.16341': attribute type 1 has an invalid length. [ 3640.789242][ T8305] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 3640.981093][T25359] usb 2-1: Using ep0 maxpacket: 8 [ 3641.053927][T25359] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 3641.097766][ T8305] usb 6-1: Using ep0 maxpacket: 16 [ 3641.165385][ T8305] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 3641.206326][T25359] usb 2-1: config index 0 descriptor too short (expected 254, got 25) [ 3641.206358][T25359] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3641.206378][T25359] usb 2-1: config 1 has no interfaces? [ 3641.257164][T26384] FAULT_INJECTION: forcing a failure. [ 3641.257164][T26384] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3641.257200][T26384] CPU: 0 UID: 0 PID: 26384 Comm: syz.8.16344 Tainted: G L syzkaller #0 PREEMPT(full) [ 3641.257229][T26384] Tainted: [L]=SOFTLOCKUP [ 3641.257237][T26384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3641.257249][T26384] Call Trace: [ 3641.257258][T26384] [ 3641.257268][T26384] dump_stack_lvl+0xe8/0x150 [ 3641.257304][T26384] should_fail_ex+0x410/0x560 [ 3641.257334][T26384] _copy_to_user+0x31/0xb0 [ 3641.257364][T26384] simple_read_from_buffer+0xe1/0x170 [ 3641.257398][T26384] proc_fail_nth_read+0x1bb/0x230 [ 3641.257419][T26384] ? common_file_perm+0x20e/0x2b0 [ 3641.257447][T26384] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3641.257471][T26384] ? rw_verify_area+0x24a/0x4c0 [ 3641.257504][T26384] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3641.257524][T26384] vfs_read+0x213/0xa80 [ 3641.257558][T26384] ? __pfx___mutex_lock+0x10/0x10 [ 3641.257585][T26384] ? __pfx_vfs_read+0x10/0x10 [ 3641.257625][T26384] ? __fget_files+0x2a/0x420 [ 3641.257659][T26384] ? __fget_files+0x3a2/0x420 [ 3641.257686][T26384] ? __fget_files+0x2a/0x420 [ 3641.257723][T26384] ksys_read+0x150/0x270 [ 3641.257757][T26384] ? __pfx_ksys_read+0x10/0x10 [ 3641.257799][T26384] do_syscall_64+0x166/0x520 [ 3641.257823][T26384] ? trace_irq_disable+0x3b/0x140 [ 3641.257843][T26384] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3641.257864][T26384] ? clear_bhb_loop+0x70/0xc0 [ 3641.257890][T26384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3641.257912][T26384] RIP: 0033:0x7f2b5f95e98e [ 3641.257931][T26384] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 3641.257950][T26384] RSP: 002b:00007f2b608f9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3641.257974][T26384] RAX: ffffffffffffffda RBX: 00007f2b608fa6c0 RCX: 00007f2b5f95e98e [ 3641.257990][T26384] RDX: 000000000000000f RSI: 00007f2b608fa0a0 RDI: 0000000000000004 [ 3641.258003][T26384] RBP: 00007f2b608fa090 R08: 0000000000000000 R09: 0000000000000000 [ 3641.258017][T26384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3641.258030][T26384] R13: 00007f2b5fc26038 R14: 00007f2b5fc25fa0 R15: 00007f2b5fd4fa48 [ 3641.258065][T26384] [ 3641.313296][ T8305] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 3641.313323][ T8305] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3641.313341][ T8305] usb 6-1: config 0 has no interface number 0 [ 3641.434942][T24603] wiimote 0005:057E:0306.0081: detected device: Nintendo Wii Remote (Gen 1) [ 3641.448555][T24603] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0081/input/input231 [ 3641.468334][T24603] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0081/input/input232 [ 3641.497769][T25359] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3641.497796][T25359] usb 2-1: Product: syz [ 3641.497810][T25359] usb 2-1: Manufacturer: syz [ 3641.497823][T25359] usb 2-1: SerialNumber: syz [ 3641.516888][T24603] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0081/input/input230 [ 3641.605553][ T8305] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3641.605581][ T8305] usb 6-1: Product: syz [ 3641.605603][ T8305] usb 6-1: Manufacturer: syz [ 3641.605617][ T8305] usb 6-1: SerialNumber: syz [ 3641.610413][ T8305] usb 6-1: config 0 descriptor?? [ 3641.800082][T26360] xt_LOG: level 64 >= 8 [ 3641.801490][T26360] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16338'. [ 3641.853763][T26363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3641.854139][T26363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3641.951341][T26366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3641.951864][T26366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3641.981486][T26366] netlink: 112 bytes leftover after parsing attributes in process `syz.5.16301'. [ 3642.015047][T26396] netdevsim netdevsim9: loading /lib/firmware// failed with error -22 [ 3642.015093][T26396] netdevsim netdevsim9: Direct firmware load for / failed with error -22 [ 3642.015114][T26396] netdevsim netdevsim9: Falling back to sysfs fallback for: / [ 3642.078241][T26398] netlink: 'syz.0.16349': attribute type 1 has an invalid length. [ 3642.079684][T26398] program syz.0.16349 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3642.092604][T26359] wiimote 0005:057E:0306.0081: Device removed [ 3642.140343][T26400] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 3642.155351][T25359] usb 2-1: USB disconnect, device number 72 [ 3642.227390][ T8305] uvcvideo 6-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 3642.227429][ T8305] uvcvideo 6-1:0.105: No valid video chain found. [ 3642.229721][ T8305] usb 6-1: USB disconnect, device number 6 [ 3642.611129][T26403] bridge3: entered promiscuous mode [ 3642.611189][T26403] bridge3: entered allmulticast mode [ 3642.880367][T26406] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16351'. [ 3642.963080][T26406] bond1: option mode: invalid value (255) [ 3642.965303][T26406] bond1 (unregistering): Released all slaves [ 3643.025083][T26412] netlink: 'syz.9.16353': attribute type 1 has an invalid length. [ 3643.030980][T26410] netlink: 32 bytes leftover after parsing attributes in process `syz.5.16351'. [ 3643.130060][T26413] bond1: option mode: invalid value (255) [ 3643.130814][T26425] xt_connbytes: Forcing CT accounting to be enabled [ 3643.133165][T26413] bond1 (unregistering): Released all slaves [ 3643.226541][T26415] netlink: 32 bytes leftover after parsing attributes in process `syz.5.16351'. [ 3643.872148][T26444] netlink: 'syz.8.16360': attribute type 1 has an invalid length. [ 3643.877520][T26444] program syz.8.16360 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3643.975982][T26445] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 3644.578650][T26454] netlink: 8 bytes leftover after parsing attributes in process `syz.9.16363'. [ 3644.634460][T26457] netlink: 'syz.0.16364': attribute type 1 has an invalid length. [ 3645.704348][T24733] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 3645.857012][T24733] usb 6-1: Using ep0 maxpacket: 32 [ 3645.868108][T24733] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 3645.869264][T24733] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 3645.869287][T24733] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3645.869304][T24733] usb 6-1: config 0 has no interface number 0 [ 3645.869344][T24733] usb 6-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3645.872900][T24733] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3645.872923][T24733] usb 6-1: Product: syz [ 3645.872936][T24733] usb 6-1: Manufacturer: syz [ 3645.872950][T24733] usb 6-1: SerialNumber: syz [ 3645.884277][T24733] usb 6-1: config 0 descriptor?? [ 3645.888746][T24733] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 3645.888988][T24733] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -22 [ 3646.258466][T26487] netlink: 'syz.8.16372': attribute type 1 has an invalid length. [ 3646.292518][T26487] program syz.8.16372 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3646.368043][T26488] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 3646.628323][T26490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3646.628860][T26490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3647.780927][T26501] netlink: 'syz.8.16376': attribute type 1 has an invalid length. [ 3648.070591][T26507] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16379'. [ 3648.179460][T26509] FAULT_INJECTION: forcing a failure. [ 3648.179460][T26509] name failslab, interval 1, probability 0, space 0, times 0 [ 3648.179498][T26509] CPU: 0 UID: 0 PID: 26509 Comm: syz.0.16380 Tainted: G L syzkaller #0 PREEMPT(full) [ 3648.179525][T26509] Tainted: [L]=SOFTLOCKUP [ 3648.179534][T26509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3648.179547][T26509] Call Trace: [ 3648.179556][T26509] [ 3648.179566][T26509] dump_stack_lvl+0xe8/0x150 [ 3648.179603][T26509] should_fail_ex+0x410/0x560 [ 3648.179632][T26509] should_failslab+0xa8/0x100 [ 3648.179659][T26509] __kmalloc_noprof+0xfe/0x720 [ 3648.179679][T26509] ? rcu_is_watching+0x16/0xb0 [ 3648.179705][T26509] ? tomoyo_realpath_from_path+0xef/0x640 [ 3648.179730][T26509] ? tomoyo_realpath_from_path+0xef/0x640 [ 3648.179766][T26509] tomoyo_realpath_from_path+0xef/0x640 [ 3648.179804][T26509] ? tomoyo_path_number_perm+0x219/0x5f0 [ 3648.179828][T26509] tomoyo_path_number_perm+0x246/0x5f0 [ 3648.179855][T26509] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 3648.179877][T26509] ? __lock_acquire+0x747/0x2de0 [ 3648.179917][T26509] ? hook_file_ioctl+0x1f2/0x600 [ 3648.179973][T26509] ? __fget_files+0x2a/0x420 [ 3648.180006][T26509] ? __fget_files+0x2a/0x420 [ 3648.180031][T26509] ? __fget_files+0x3a2/0x420 [ 3648.180057][T26509] ? __fget_files+0x2a/0x420 [ 3648.180087][T26509] security_file_ioctl+0xc3/0x2a0 [ 3648.180111][T26509] __se_sys_ioctl+0x47/0x170 [ 3648.180135][T26509] do_syscall_64+0x166/0x520 [ 3648.180157][T26509] ? trace_irq_disable+0x3b/0x140 [ 3648.180177][T26509] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3648.180197][T26509] ? clear_bhb_loop+0x70/0xc0 [ 3648.180222][T26509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3648.180241][T26509] RIP: 0033:0x7f2c7ef9e159 [ 3648.180260][T26509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3648.180277][T26509] RSP: 002b:00007f2c7fe2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3648.180300][T26509] RAX: ffffffffffffffda RBX: 00007f2c7f225fa0 RCX: 00007f2c7ef9e159 [ 3648.180315][T26509] RDX: 0000200000000140 RSI: 00000000400caed0 RDI: 0000000000000004 [ 3648.180328][T26509] RBP: 00007f2c7fe2e090 R08: 0000000000000000 R09: 0000000000000000 [ 3648.180341][T26509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3648.180353][T26509] R13: 00007f2c7f226038 R14: 00007f2c7f225fa0 R15: 00007f2c7f34fa48 [ 3648.180387][T26509] [ 3648.180395][T26509] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3648.201202][T24603] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 3648.460008][ T8293] usb 6-1: USB disconnect, device number 7 [ 3648.572460][T24603] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3648.803908][T26519] netlink: 'syz.0.16383': attribute type 1 has an invalid length. [ 3648.805258][T26519] program syz.0.16383 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3648.885214][T26520] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 3649.014044][T24603] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3649.014076][T24603] usb 9-1: Product: syz [ 3649.014091][T24603] usb 9-1: Manufacturer: syz [ 3649.014105][T24603] usb 9-1: SerialNumber: syz [ 3649.513285][T26535] loop5: detected capacity change from 0 to 7 [ 3649.520909][T26535] Dev loop5: unable to read RDB block 7 [ 3649.520956][T26535] loop5: unable to read partition table [ 3649.521222][T26535] loop5: partition table beyond EOD, truncated [ 3649.521243][T26535] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 3650.148968][T24603] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3650.250751][ T8305] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 3650.379913][T26503] netlink: 4 bytes leftover after parsing attributes in process `syz.8.16377'. [ 3650.439106][T25359] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 3650.442624][ T31] audit: type=1326 audit(1789418514.659:21567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26502 comm="syz.8.16377" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5f99e159 code=0x7ffc0000 [ 3650.442760][ T31] audit: type=1326 audit(1789418514.659:21568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26502 comm="syz.8.16377" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5f99e159 code=0x7ffc0000 [ 3650.443399][ T31] audit: type=1326 audit(1789418514.659:21569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26502 comm="syz.8.16377" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f2b5f99e159 code=0x7ffc0000 [ 3650.443580][ T31] audit: type=1326 audit(1789418514.659:21570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26502 comm="syz.8.16377" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5f99e159 code=0x7ffc0000 [ 3650.444014][ T31] audit: type=1326 audit(1789418514.659:21571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26502 comm="syz.8.16377" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f2b5f99e159 code=0x7ffc0000 [ 3650.445278][ T31] audit: type=1326 audit(1789418514.669:21572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26502 comm="syz.8.16377" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5f99e159 code=0x7ffc0000 [ 3650.445331][ T31] audit: type=1326 audit(1789418514.669:21573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26502 comm="syz.8.16377" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2b5f99e159 code=0x7ffc0000 [ 3650.446854][ T31] audit: type=1326 audit(1789418514.669:21574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26502 comm="syz.8.16377" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5f99e159 code=0x7ffc0000 [ 3650.448588][ T31] audit: type=1326 audit(1789418514.669:21575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26502 comm="syz.8.16377" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5f99e159 code=0x7ffc0000 [ 3650.450483][ T31] audit: type=1326 audit(1789418514.669:21576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26502 comm="syz.8.16377" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2b5f99e159 code=0x7ffc0000 [ 3650.555275][ T8305] usb 2-1: Using ep0 maxpacket: 32 [ 3650.621430][ T8305] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 3650.743569][ T8304] usb 9-1: USB disconnect, device number 50 [ 3650.856720][T26553] 8021q: VLANs not supported on wg1 [ 3650.891219][T26558] netlink: 'syz.5.16395': attribute type 1 has an invalid length. [ 3650.892581][T26558] program syz.5.16395 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3650.984538][T26560] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 3651.071951][ T8305] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3651.071984][ T8305] usb 2-1: Product: syz [ 3651.072000][ T8305] usb 2-1: Manufacturer: syz [ 3651.072016][ T8305] usb 2-1: SerialNumber: syz [ 3651.075242][ T8305] usb 2-1: config 0 descriptor?? [ 3651.143968][ T8305] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 3651.217943][T24603] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 3651.218166][T24603] ath9k_htc: Failed to initialize the device [ 3651.220359][ T8304] usb 9-1: ath9k_htc: USB layer deinitialized [ 3651.885725][T26576] netlink: 'syz.0.16401': attribute type 1 has an invalid length. [ 3651.914249][ T8293] usb 9-1: new low-speed USB device number 51 using dummy_hcd [ 3651.983013][T26578] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16402'. [ 3652.044491][ T8293] usb 9-1: device descriptor read/64, error -71 [ 3652.284425][ T8293] usb 9-1: new low-speed USB device number 52 using dummy_hcd [ 3652.355769][T26584] bridge4: entered promiscuous mode [ 3652.355889][T26584] bridge4: entered allmulticast mode [ 3652.414645][ T8293] usb 9-1: device descriptor read/64, error -71 [ 3652.524729][ T8293] usb usb9-port1: attempt power cycle [ 3652.586229][T26586] bridge1: entered promiscuous mode [ 3652.586258][T26586] bridge1: entered allmulticast mode [ 3652.842314][ T8305] gspca_ov534_9: reg_w failed -110 [ 3652.864079][ T8293] usb 9-1: new low-speed USB device number 53 using dummy_hcd [ 3652.886124][ T8293] usb 9-1: device descriptor read/8, error -71 [ 3653.124092][ T8293] usb 9-1: new low-speed USB device number 54 using dummy_hcd [ 3653.145080][ T8293] usb 9-1: device descriptor read/8, error -71 [ 3653.178545][ T8305] gspca_ov534_9: Unknown sensor 0000 [ 3653.178611][ T8305] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 3653.255260][ T8293] usb usb9-port1: unable to enumerate USB device [ 3653.313829][T25359] usb 10-1: unable to get BOS descriptor or descriptor too short [ 3653.313868][T25359] usb 10-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 3653.313892][T25359] usb 10-1: no configurations [ 3653.313900][T25359] usb 10-1: can't read configurations, error -22 [ 3653.570021][T24733] usb 2-1: USB disconnect, device number 73 [ 3653.824855][T26590] sctp: [Deprecated]: syz.9.16406 (pid 26590) Use of struct sctp_assoc_value in delayed_ack socket option. [ 3653.824855][T26590] Use struct sctp_sack_info instead [ 3653.979365][T26594] netlink: 'syz.1.16407': attribute type 1 has an invalid length. [ 3654.056167][T26594] program syz.1.16407 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3654.118941][T26596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3654.123581][T26596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3654.177921][T26598] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 3654.437729][T25359] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 3654.754435][ T8293] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 3654.760899][T26616] netlink: 'syz.0.16412': attribute type 1 has an invalid length. [ 3654.815728][T25359] usb 10-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 3654.861837][T26618] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16413'. [ 3654.891676][T25359] usb 10-1: config 0 has no interfaces? [ 3654.905534][ T8293] usb 6-1: Using ep0 maxpacket: 32 [ 3654.907040][ T8293] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 3654.910832][ T8293] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 3654.910863][ T8293] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 3654.910882][ T8293] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 3654.910903][ T8293] usb 6-1: config 1 has no interface number 0 [ 3654.910948][ T8293] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3654.910976][ T8293] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 3654.911017][ T8293] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3655.035401][ T8293] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 3655.187782][T26624] FAULT_INJECTION: forcing a failure. [ 3655.187782][T26624] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3655.187825][T26624] CPU: 1 UID: 0 PID: 26624 Comm: syz.0.16416 Tainted: G L syzkaller #0 PREEMPT(full) [ 3655.187853][T26624] Tainted: [L]=SOFTLOCKUP [ 3655.187862][T26624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3655.187874][T26624] Call Trace: [ 3655.187883][T26624] [ 3655.187893][T26624] dump_stack_lvl+0xe8/0x150 [ 3655.187929][T26624] should_fail_ex+0x410/0x560 [ 3655.187959][T26624] _copy_to_user+0x31/0xb0 [ 3655.187999][T26624] simple_read_from_buffer+0xe1/0x170 [ 3655.188031][T26624] proc_fail_nth_read+0x1bb/0x230 [ 3655.188051][T26624] ? common_file_perm+0x20e/0x2b0 [ 3655.188079][T26624] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3655.188103][T26624] ? rw_verify_area+0x24a/0x4c0 [ 3655.188134][T26624] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3655.188154][T26624] vfs_read+0x213/0xa80 [ 3655.188188][T26624] ? __pfx___mutex_lock+0x10/0x10 [ 3655.188213][T26624] ? __pfx_vfs_read+0x10/0x10 [ 3655.188243][T26624] ? __fget_files+0x2a/0x420 [ 3655.188275][T26624] ? __fget_files+0x3a2/0x420 [ 3655.188300][T26624] ? __fget_files+0x2a/0x420 [ 3655.188337][T26624] ksys_read+0x150/0x270 [ 3655.188369][T26624] ? __pfx_ksys_read+0x10/0x10 [ 3655.188397][T26624] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 3655.188436][T26624] do_syscall_64+0x166/0x520 [ 3655.188458][T26624] ? trace_irq_disable+0x3b/0x140 [ 3655.188477][T26624] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3655.188497][T26624] ? clear_bhb_loop+0x70/0xc0 [ 3655.188523][T26624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3655.188542][T26624] RIP: 0033:0x7f2c7ef5e98e [ 3655.188563][T26624] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 3655.188581][T26624] RSP: 002b:00007f2c7fe2dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3655.188604][T26624] RAX: ffffffffffffffda RBX: 00007f2c7fe2e6c0 RCX: 00007f2c7ef5e98e [ 3655.188618][T26624] RDX: 000000000000000f RSI: 00007f2c7fe2e0a0 RDI: 0000000000000005 [ 3655.188631][T26624] RBP: 00007f2c7fe2e090 R08: 0000000000000000 R09: 0000000000000000 [ 3655.188644][T26624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3655.188655][T26624] R13: 00007f2c7f226038 R14: 00007f2c7f225fa0 R15: 00007f2c7f34fa48 [ 3655.188689][T26624] [ 3655.229228][T25359] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3655.229257][T25359] usb 10-1: Product: syz [ 3655.229270][T25359] usb 10-1: Manufacturer: syz [ 3655.229283][T25359] usb 10-1: SerialNumber: syz [ 3655.232293][T25359] usb 10-1: config 0 descriptor?? [ 3655.232623][ T8305] usb 2-1: new full-speed USB device number 74 using dummy_hcd [ 3655.276562][T26604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3655.277013][T26604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3655.385322][ T8293] snd_usb_pod 6-1:1.1: set_interface failed [ 3655.385575][ T8293] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 3655.385779][ T8293] snd_usb_pod 6-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 3655.444836][ T8305] usb 2-1: device descriptor read/64, error -71 [ 3655.497020][T22099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3655.497041][T22099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3655.531236][T26626] netlink: 8 bytes leftover after parsing attributes in process `syz.8.16417'. [ 3655.551929][ T8293] usb 6-1: USB disconnect, device number 8 [ 3655.596394][T26628] IPVS: sync thread started: state = BACKUP, mcast_ifn = ipvlan0, syncid = 5, id = 0 [ 3655.747092][ T8305] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 3655.769035][T26632] program syz.8.16418 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3655.966942][ T8305] usb 2-1: device descriptor read/64, error -71 [ 3656.012011][T26637] bridge5: entered promiscuous mode [ 3656.012096][T26637] bridge5: entered allmulticast mode [ 3656.053854][T26639] netlink: 'syz.8.16421': attribute type 1 has an invalid length. [ 3656.055244][T26639] program syz.8.16421 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3656.087681][T25359] usb 10-1: USB disconnect, device number 39 [ 3656.107148][ T8305] usb usb2-port1: attempt power cycle [ 3656.316182][T26642] netlink: 'syz.5.16423': attribute type 1 has an invalid length. [ 3656.318622][T26640] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 3656.342564][T26645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3656.343017][T26645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3656.437944][T26647] netlink: 8 bytes leftover after parsing attributes in process `syz.9.16422'. [ 3656.502326][ T8305] usb 2-1: new full-speed USB device number 76 using dummy_hcd [ 3656.663375][ T8305] usb 2-1: device descriptor read/8, error -71 [ 3656.690251][T25359] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 3656.931103][ T8305] usb 2-1: new full-speed USB device number 77 using dummy_hcd [ 3657.034703][T25359] usb 10-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 3657.073244][ T8305] usb 2-1: device descriptor read/8, error -71 [ 3657.176138][ T32] INFO: task syz.7.15746:24360 blocked for more than 143 seconds. [ 3657.176172][ T32] Tainted: G L syzkaller #0 [ 3657.176185][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3657.176196][ T32] task:syz.7.15746 state:D stack:24840 pid:24360 tgid:24359 ppid:18273 task_flags:0x400140 flags:0x00080002 [ 3657.176263][ T32] Call Trace: [ 3657.176272][ T32] [ 3657.176287][ T32] __schedule+0x17db/0x58f0 [ 3657.176317][ T32] ? __lock_acquire+0x747/0x2de0 [ 3657.176405][ T32] ? __pfx___schedule+0x10/0x10 [ 3657.176425][ T32] ? lock_acquire+0x115/0x350 [ 3657.176459][ T32] ? schedule+0x90/0x2b0 [ 3657.176484][ T32] schedule+0x164/0x2b0 [ 3657.176510][ T32] cgroup_lock_and_drain_offline+0x51a/0x650 [ 3657.176559][ T32] ? __pfx_cgroup_lock_and_drain_offline+0x10/0x10 [ 3657.176592][ T32] ? __pfx_autoremove_wake_function+0x10/0x10 [ 3657.176638][ T32] cgroup_kn_lock_live+0x120/0x230 [ 3657.176674][ T32] cgroup_subtree_control_write+0x4b5/0x1080 [ 3657.176722][ T32] ? __pfx_cgroup_subtree_control_write+0x10/0x10 [ 3657.176756][ T32] ? kernfs_root+0x1c/0x230 [ 3657.176775][ T32] ? kernfs_root+0x1c/0x230 [ 3657.176808][ T32] ? kernfs_root+0x1ea/0x230 [ 3657.176831][ T32] ? __pfx_cgroup_subtree_control_write+0x10/0x10 [ 3657.176863][ T32] cgroup_file_write+0x331/0x8f0 [ 3657.176901][ T32] ? __pfx_cgroup_file_write+0x10/0x10 [ 3657.176934][ T32] ? __kmalloc_noprof+0x38c/0x720 [ 3657.176967][ T32] ? __pfx_cgroup_file_write+0x10/0x10 [ 3657.176995][ T32] kernfs_fop_write_iter+0x3a4/0x540 [ 3657.177030][ T32] vfs_write+0x612/0xba0 [ 3657.177073][ T32] ? __pfx_vfs_write+0x10/0x10 [ 3657.177116][ T32] ? __fget_files+0x2a/0x420 [ 3657.177157][ T32] ksys_write+0x150/0x270 [ 3657.177191][ T32] ? __pfx_ksys_write+0x10/0x10 [ 3657.177235][ T32] do_syscall_64+0x166/0x520 [ 3657.177259][ T32] ? trace_irq_disable+0x3b/0x140 [ 3657.177280][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3657.177302][ T32] ? clear_bhb_loop+0x70/0xc0 [ 3657.177328][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3657.177350][ T32] RIP: 0033:0x7f995079e159 [ 3657.177370][ T32] RSP: 002b:00007f99516d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3657.177425][ T32] RAX: ffffffffffffffda RBX: 00007f9950a25fa0 RCX: 00007f995079e159 [ 3657.177441][ T32] RDX: 0000000000000005 RSI: 0000200000000300 RDI: 0000000000000008 [ 3657.177455][ T32] RBP: 00007f995083503b R08: 0000000000000000 R09: 0000000000000000 [ 3657.177469][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3657.177482][ T32] R13: 00007f9950a26038 R14: 00007f9950a25fa0 R15: 00007f9950b4fa48 [ 3657.177519][ T32] [ 3657.177553][ T32] [ 3657.177553][ T32] Showing all locks held in the system: [ 3657.177566][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 3657.177655][ T32] #0: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 3657.177771][ T32] locks held by udevd/4983: 2, last CPU#0: [ 3657.177803][ T32] #0: ffffffff8f4f1938 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x251/0x560 [ 3657.177857][ T32] #1: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 3657.177913][ T32] locks held by getty/5371: 2, on CPU#1: [ 3657.177928][ T32] #0: ffff888026abd0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 3657.177988][ T32] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 3657.178065][ T32] locks held by kworker/0:10/8305: 5, on CPU#0: [ 3657.178080][ T32] #0: ffff8880212b8940 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 3657.178137][ T32] #1: ffffc90004f87c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 3657.178193][ T32] #2: ffff88802338b1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 3657.178248][ T32] #3: ffff888023388568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x20a1/0x4d30 [ 3657.178300][ T32] #4: ffff88802966d160 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x20c9/0x4d30 [ 3657.178364][ T32] locks held by syz-executor/23704: 8, last CPU#0: [ 3657.178379][ T32] #0: ffffffff8ee363b0 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10f/0x480 [ 3657.178434][ T32] #1: ffff8880357c1d38 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 3657.178494][ T32] #2: ffff888021b029f8 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 3657.178557][ T32] #3: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 3657.178614][ T32] #4: ffff888075699438 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 3657.178705][ T32] #5: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 3657.178783][ T32] #6: ffff88805a381198 (ptlock_ptr(ptdesc)#2/1){+.+.}-{3:3}, at: copy_pmd_range+0x6fb/0x5c10 [ 3657.178860][ T32] #7: ffff8880949de2c0 (&q->current_entry_lock){-.-.}-{3:3}, at: advance_sched+0xc2/0xc80 [ 3657.178913][ T32] locks held by syz.7.15746/24360: 3, on CPU#0: [ 3657.178928][ T32] #0: ffff888054bc20f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 3657.178985][ T32] #1: ffff88807f9c4460 (sb_writers#9){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 3657.179048][ T32] #2: ffff888045416080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 3657.179103][ T32] locks held by kworker/0:0/24603: 2, last CPU#0: [ 3657.179118][ T32] #0: ffff888057b0b140 ((wq_completion)wg-crypt-wg0#9){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 3657.179180][ T32] #1: ffffc90003e27c40 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 3657.179241][ T32] locks held by kworker/0:7/25359: 3, on CPU#0: [ 3657.179255][ T32] #0: ffff8880212b8940 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 3657.179309][ T32] #1: ffffc90006b67c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 3657.179366][ T32] #2: ffff8880217661d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 3657.179420][ T32] locks held by syz-executor/26217: 4, last CPU#1: [ 3657.179435][ T32] #0: ffffffff8ee363b0 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10f/0x480 [ 3657.179489][ T32] #1: ffff88801b0936b8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 3657.179547][ T32] #2: ffff88807e924378 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 3657.179610][ T32] #3: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 3657.179669][ T32] [ 3657.179675][ T32] ============================================= [ 3657.179675][ T32] [ 3657.179686][ T32] NMI backtrace for cpu 1 [ 3657.179703][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 3657.179730][ T32] Tainted: [L]=SOFTLOCKUP [ 3657.179738][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3657.179751][ T32] Call Trace: [ 3657.179760][ T32] [ 3657.179769][ T32] dump_stack_lvl+0xe8/0x150 [ 3657.179809][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 3657.179839][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 3657.179873][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 3657.179907][ T32] sys_info+0x135/0x170 [ 3657.179934][ T32] watchdog+0xfd7/0x1030 [ 3657.179965][ T32] ? watchdog+0x1c7/0x1030 [ 3657.179993][ T32] kthread+0x38b/0x480 [ 3657.180015][ T32] ? __pfx_watchdog+0x10/0x10 [ 3657.180034][ T32] ? __pfx_kthread+0x10/0x10 [ 3657.180056][ T32] ret_from_fork+0x514/0xb70 [ 3657.180080][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 3657.180101][ T32] ? __switch_to+0xc89/0x1420 [ 3657.180133][ T32] ? __pfx_kthread+0x10/0x10 [ 3657.180155][ T32] ret_from_fork_asm+0x1a/0x30 [ 3657.180202][ T32] [ 3657.180211][ T32] Sending NMI from CPU 1 to CPUs 0: [ 3657.180241][ C0] NMI backtrace for cpu 0 [ 3657.180259][ C0] CPU: 0 UID: 0 PID: 23704 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 3657.180291][ C0] Tainted: [L]=SOFTLOCKUP [ 3657.180299][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3657.180310][ C0] RIP: 0010:check_preemption_disabled+0x0/0xd0 [ 3657.180336][ C0] Code: c7 20 a0 6d 8c 48 c7 c6 60 a0 6d 8c eb 1c 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <55> 41 57 41 56 53 65 8b 05 db 8d af 07 65 48 8b 0d ab 8d af 07 85 [ 3657.180352][ C0] RSP: 0018:ffffc90000007cf0 EFLAGS: 00000003 [ 3657.180369][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 3657.180381][ C0] RDX: 0000000000000000 RSI: ffffffff8c6da060 RDI: ffffffff8c6da020 [ 3657.180395][ C0] RBP: ffff8880949de300 R08: 0000000000000001 R09: 0000000000000000 [ 3657.180407][ C0] R10: dffffc0000000000 R11: fffffbfff20f47b0 R12: ffff8880b8628298 [ 3657.180422][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000001 [ 3657.180433][ C0] FS: 000055558e184500(0000) GS:ffff888124cd1000(0000) knlGS:0000000000000000 [ 3657.180450][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3657.180463][ C0] CR2: 00007f2b607556c8 CR3: 000000005e0d2000 CR4: 00000000003526f0 [ 3657.180482][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3657.180494][ C0] DR3: 0000000000004c0a DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 3657.180506][ C0] Call Trace: [ 3657.180514][ C0] [ 3657.180521][ C0] rcu_is_watching+0x16/0xb0 [ 3657.180544][ C0] lock_acquire+0x58/0x350 [ 3657.180564][ C0] ? __pfx_advance_sched+0x10/0x10 [ 3657.180585][ C0] _raw_spin_lock_irq+0x3d/0x50 [ 3657.180611][ C0] ? __hrtimer_run_queues+0x466/0xa10 [ 3657.180636][ C0] __hrtimer_run_queues+0x466/0xa10 [ 3657.180668][ C0] hrtimer_interrupt+0x4cd/0xaa0 [ 3657.180705][ C0] __sysvec_apic_timer_interrupt+0x102/0x430 [ 3657.180728][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 3657.180747][ C0] [ 3657.180754][ C0] [ 3657.180762][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3657.180781][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x18/0x80 [ 3657.180809][ C0] Code: cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 65 48 8b 0d a8 1f cd 11 65 48 8b 15 a8 1f cd 11 c2 00 01 00 ff 74 29 89 d6 81 e6 00 01 00 0f 81 fe 00 01 00 00 [ 3657.180825][ C0] RSP: 0018:ffffc900042a72f8 EFLAGS: 00000246 [ 3657.180840][ C0] RAX: ffffffff821eec01 RBX: 0000000000000183 RCX: ffff8880222b3e80 [ 3657.180854][ C0] RDX: 8000000000000002 RSI: 0000000000000183 RDI: 0000000000000001 [ 3657.180866][ C0] RBP: ffffc900042a7590 R08: ffffea0002119f47 R09: 1ffffd40004233e8 [ 3657.180880][ C0] R10: dffffc0000000000 R11: fffff940004233e9 R12: ffffea0002119f40 [ 3657.180894][ C0] R13: ffffea0002119f40 R14: 0000000000000000 R15: dffffc0000000000 [ 3657.180911][ C0] ? copy_pmd_range+0x9e1/0x5c10 [ 3657.180940][ C0] copy_pmd_range+0x9e1/0x5c10 [ 3657.180974][ C0] ? stack_depot_save_flags+0x33/0x7f0 [ 3657.181000][ C0] ? __pfx_copy_pmd_range+0x10/0x10 [ 3657.181028][ C0] ? __lock_acquire+0x747/0x2de0 [ 3657.181049][ C0] ? mas_wr_store_type+0xf80/0x1980 [ 3657.181071][ C0] copy_page_range+0xc82/0x1290 [ 3657.181099][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 3657.181121][ C0] ? __pfx___mapping_rmap_tree_augment_rotate+0x10/0x10 [ 3657.181153][ C0] dup_mmap+0xf17/0x1dc0 [ 3657.181186][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 3657.181211][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 3657.181241][ C0] ? lock_acquire+0x115/0x350 [ 3657.181267][ C0] copy_mm+0x11a/0x480 [ 3657.181297][ C0] ? copy_process+0xd3c/0x43e0 [ 3657.181320][ C0] copy_process+0x1e75/0x43e0 [ 3657.181347][ C0] ? copy_process+0xd3c/0x43e0 [ 3657.181378][ C0] ? __pfx_copy_process+0x10/0x10 [ 3657.181406][ C0] kernel_clone+0x2d7/0x940 [ 3657.181428][ C0] ? cgroup1_freezing+0x20/0x350 [ 3657.181454][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 3657.181486][ C0] __x64_sys_clone+0x1b6/0x230 [ 3657.181513][ C0] ? __pfx___x64_sys_clone+0x10/0x10 [ 3657.181545][ C0] ? do_user_addr_fault+0xc4c/0x1340 [ 3657.181569][ C0] do_syscall_64+0x166/0x520 [ 3657.181588][ C0] ? trace_irq_disable+0x3b/0x140 [ 3657.181606][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3657.181625][ C0] ? clear_bhb_loop+0x70/0xc0 [ 3657.181646][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3657.181663][ C0] RIP: 0033:0x7f2b5f9c6bd2 [ 3657.181679][ C0] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 3657.181694][ C0] RSP: 002b:00007f2b5fd4fc60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 3657.181714][ C0] RAX: ffffffffffffffda RBX: 00007f2b5fd4fc60 RCX: 00007f2b5f9c6bd2 [ 3657.181727][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 3657.181739][ C0] RBP: 00007f2b5fd4fdec R08: 0000000000000000 R09: 0000000000000001 [ 3657.181751][ C0] R10: 000055558e1847d0 R11: 0000000000000246 R12: 0000000000000001 [ 3657.181764][ C0] R13: 00000000000927c0 R14: 000000000037cd3b R15: 00007f2b5fd4fe40 [ 3657.181785][ C0] [ 3657.182237][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 3658.427977][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 3658.438773][ T32] Tainted: [L]=SOFTLOCKUP [ 3658.443149][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3658.453244][ T32] Call Trace: [ 3658.456533][ T32] [ 3658.459466][ T32] vpanic+0x56d/0xa60 [ 3658.463455][ T32] ? __pfx_vpanic+0x10/0x10 [ 3658.467963][ T32] ? console_srcu_read_unlock+0x3a/0x60 [ 3658.473511][ T32] panic+0xc5/0xd0 [ 3658.477407][ T32] ? __pfx_panic+0x10/0x10 [ 3658.481832][ T32] ? wq_watchdog_touch+0xf9/0x160 [ 3658.486910][ T32] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 3658.493116][ T32] watchdog+0x1030/0x1030 [ 3658.497462][ T32] ? watchdog+0x1c7/0x1030 [ 3658.501895][ T32] kthread+0x38b/0x480 [ 3658.505962][ T32] ? __pfx_watchdog+0x10/0x10 [ 3658.510630][ T32] ? __pfx_kthread+0x10/0x10 [ 3658.515245][ T32] ret_from_fork+0x514/0xb70 [ 3658.519840][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 3658.524968][ T32] ? __switch_to+0xc89/0x1420 [ 3658.529675][ T32] ? __pfx_kthread+0x10/0x10 [ 3658.534262][ T32] ret_from_fork_asm+0x1a/0x30 [ 3658.539069][ T32] [ 3658.542405][ T32] Kernel Offset: disabled [ 3658.546751][ T32] Rebooting in 86400 seconds..