last executing test programs: 47m50.001540404s ago: executing program 32 (id=291): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040109720770000000000010902350001010080320904000005ffffff000705810340000107058202"], 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e61b3a40fd080200"], 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) 47m40.568078822s ago: executing program 33 (id=327): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x54, 0x24, 0xd0f, 0x4703d2d, 0xfffffffd, {0x60, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}, {0xb, 0xfff3}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x7, 0x1, 0xfff, 0x0, 0x5, 0xfffffffe}}, {0x4}}]}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000080}, 0x44080) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c000}, 0x4044800) 46m57.889255453s ago: executing program 34 (id=581): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000180)=ANY=[], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10) 46m37.150906765s ago: executing program 35 (id=726): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000540)={0x8, r2}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000000)={0x48, 0x1, r2, 0x0, 0x800000000006, 0xbcd}) 45m9.230845479s ago: executing program 36 (id=1332): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f00005a4000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4014) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x400970, 0x1f280, 0xfffffffe, 0x399}) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xfffffffffffffe93, 0x29, 0xfffe, {0xffffffff}}, 0xb) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40040) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r0, 0x8ae, 0xfbb9, 0x35, 0x0, 0x0) quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0xffffffff80000200, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) 41m25.284561651s ago: executing program 9 (id=2927): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x6, 0x0) write$cgroup_devices(r2, 0x0, 0x6) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x10, 0x0, &(0x7f0000001500)=""/16, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4e2288bca9cf3ba, 0x0, 0xfffffffe}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980)={r3}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r3, 0x68, &(0x7f0000000200)}, 0x10) 41m24.635719399s ago: executing program 9 (id=2930): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1632d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 41m24.216025108s ago: executing program 9 (id=2934): syz_io_uring_setup(0x29d7, &(0x7f0000000380)={0x0, 0x1aa2, 0x40000, 0x2000000, 0xf}, 0x0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100002}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x60}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 41m23.951800336s ago: executing program 9 (id=2937): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x88101) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', 0x10) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r2, &(0x7f0000004200)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 41m23.682654045s ago: executing program 9 (id=2940): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x6) fchdir(r1) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) mknodat(r3, &(0x7f0000000100)='./file0/file0\x00', 0x8910, 0x4) getdents64(r2, &(0x7f0000000000)=""/49, 0x31) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) rmdir(&(0x7f0000010280)='./file0\x00') 41m23.349617975s ago: executing program 9 (id=2947): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, &(0x7f0000000400)}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001ac0)=[{{&(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}}], 0x1, 0x2404c0c0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x4, 0x4002004c2, 0x7ff, 0x9, 0x0, 0x400, 0x80, 0x89, 0x0, 0x8, 0x8d], 0x100000, 0x342056}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 41m22.875491235s ago: executing program 37 (id=2947): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, &(0x7f0000000400)}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001ac0)=[{{&(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}}], 0x1, 0x2404c0c0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x4, 0x4002004c2, 0x7ff, 0x9, 0x0, 0x400, 0x80, 0x89, 0x0, 0x8, 0x8d], 0x100000, 0x342056}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 39m5.919284138s ago: executing program 3 (id=3693): r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0x82) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) 39m5.653100268s ago: executing program 3 (id=3695): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x23, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r3], 0x5c}}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xc, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0xbf}], {0x95, 0x0, 0x700}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 39m4.881733243s ago: executing program 3 (id=3700): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000400)=""/106, 0x6a}], 0x3}, 0xc3ffffff}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x20, 0x1, {{0x0, 0x0, 0x2}}}]}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r0, &(0x7f0000000400)=ANY=[], 0x3a) 39m4.43279211s ago: executing program 3 (id=3703): syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) syz_ublk_setup_queues(r1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000001800)='./file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89802) 39m3.327572753s ago: executing program 3 (id=3710): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="38010000fe0000afe688f1"], 0x138) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x20000003}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r1, &(0x7f0000000140)=ANY=[], 0x20) 39m2.922055751s ago: executing program 3 (id=3714): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r0 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x5, 0x1, 0xfffff034}, {0x6, 0x1, 0x6, 0x6}]}, 0x10) sendto$packet(0xffffffffffffffff, &(0x7f0000000040)="f257a8ea7bc273dfaeab", 0xa, 0x81, 0x0, 0x0) dup(0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "0000000000000208", "5171bb74cd3660dab9e200000000a900", "d8a024e5", "20000926000200"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x2, &(0x7f0000000300)=[{0x2, 0x2, 0x8, 0x80000000}, {0x4, 0xd, 0x9, 0x5}]}) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000001840), 0x4) 39m2.180620176s ago: executing program 38 (id=3714): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r0 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x5, 0x1, 0xfffff034}, {0x6, 0x1, 0x6, 0x6}]}, 0x10) sendto$packet(0xffffffffffffffff, &(0x7f0000000040)="f257a8ea7bc273dfaeab", 0xa, 0x81, 0x0, 0x0) dup(0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "0000000000000208", "5171bb74cd3660dab9e200000000a900", "d8a024e5", "20000926000200"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x2, &(0x7f0000000300)=[{0x2, 0x2, 0x8, 0x80000000}, {0x4, 0xd, 0x9, 0x5}]}) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000001840), 0x4) 36m47.116864216s ago: executing program 1 (id=4218): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = syz_io_uring_setup(0xf08, &(0x7f0000000300)={0x0, 0xfefffffe, 0x10, 0x3, 0x200003ca}, &(0x7f0000000580)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) io_uring_enter(r3, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 36m39.978558045s ago: executing program 1 (id=4231): r0 = syz_usb_connect_ath9k(0x3, 0x97, &(0x7f0000000500)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x16b2f3ab525d7a8, [{{0x9, 0x2, 0xfffffffffffffdf8}}]}}, 0x0) set_mempolicy(0x4005, &(0x7f00000000c0)=0x4, 0x7) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(0xffffffffffffffff, 0x3ba0, &(0x7f0000000700)={0x48, 0x16, 0x0, 0x0, 0xe160, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x10, &(0x7f0000000600)=ANY=[]) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) set_mempolicy(0x8000, &(0x7f00000006c0)=0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x8, 0x35, 0x8, 0x0, 0x0}}, 0x10) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x10000}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f00000007c0)) 36m36.553870463s ago: executing program 1 (id=4241): r0 = memfd_create(&(0x7f00000013c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9b5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\\\xb0:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1exQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+\xa0\x1c\x14\x01\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1.E\b1\xcb\xa2\xbe}\xb2\xe4y\xbb\xe6\x1f\x10\x95y\x8e\xa6\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}, 0x2020) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r2, 0x4, 0x4) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x4001ffe, 0xa68d7c519fc00ff1, 0xffbc, 0x6, 0x7, 0x3, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f0000000000)='./file0\x00', 0x2000, 0x3) syz_fuse_handle_req(r0, &(0x7f0000006380)="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", 0x2000, &(0x7f000000cd40)={0x0, 0x0, 0x0, 0x0, &(0x7f000000a4c0)={0x18, 0x0, 0x2, {0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(r0) 28m8.606928848s ago: executing program 2 (id=6173): r0 = fanotify_init(0x200, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fanotify_mark(r0, 0x105, 0x9165, r1, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x10103c, 0x140) r3 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x1e1802, 0x0) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x455, 0x4800003e, 0xffffffffffffffff, 0x0) r5 = timerfd_create(0x6, 0x80000) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000500)={0x0, 0x30b5, 0x80, 0x0, 0x158, 0x0, r3}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x7f, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x2, 0xcb6, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x2}}}, &(0x7f0000000480)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = socket$packet(0x11, 0x3, 0x300) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r12, 0x1, 0x32, &(0x7f0000000040)=r13, 0x4) syz_emit_ethernet(0xd84, &(0x7f00000023c0)=ANY=[], 0x0) r14 = dup(r11) syz_ublk_setup_queues(r14, r10, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x4, 0x2100, 0x10000004, 0x0, r14}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x2, 0x100ae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x200, 0x0, 0x1f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 28m7.365075105s ago: executing program 2 (id=6179): sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000011140100000000000000000005000300000000"], 0x20}}, 0x801) syz_open_dev$video(&(0x7f0000000100), 0x3, 0x2000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x0, 0x100000000000006, 0xfa11, 0xffffffff}, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000080)) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x4000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001880)={'bond0\x00'}) msgctl$IPC_RMID(0x0, 0x13) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(0xffffffffffffffff, 0xc008aec1, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x7, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) semop(0x0, &(0x7f0000000000)=[{0x1, 0xfffb, 0x800}, {0x1, 0x7, 0x3800}], 0x2) 28m3.431287147s ago: executing program 2 (id=6192): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)={0x0, 0x30, 0x1, 'D'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000580)={0x0, 0xe, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000900)={0x2c, &(0x7f0000000800)={0x0, 0x16, 0x1, "dc"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000740)={0x20, 0x3, 0x1, 'T'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000f40)={0x44, &(0x7f0000000c40)={0x20, 0x13, 0x1, "e3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000240)={0x20, 0x17, 0x1, '|'}, 0x0, 0x0, 0x0, 0x0, 0x0}) 27m57.465718368s ago: executing program 2 (id=6205): syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000082}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$rds(0x15, 0x5, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) close(r2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x29, 0x5, 0x8, 0xffff, 0x11, @ipv4={'\x00', '\xff\xff', @loopback}, @local, 0x8, 0x1, 0x7}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x10000, 0x0, 0x0, 0x41100, 0x65, '\x00', r3, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400900}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000007060108e8ff0000000000000000000005"], 0x1c}, 0x1, 0x0, 0x0, 0x40854}, 0x0) r5 = fsopen(&(0x7f0000000e00)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000100)='addr\x00\xde\xbc\x1fB\x82\xff\x1ef\xfan\xcc\xa4\xcc~-3\x8dZ\xdd\x06(\xbeG\xd8\x00\x0f\x95_\xd0\xf5\xbc\xfc\xa1\x02a\xd9\xf9q\xb2j\x0f\xfel\x9a\xc0\xae8\x8bT\xaa\xde\xbe\x98E\xf3-\xab\xc2\n\x13\xe9X\x89\t\fC\xbc\xd5\n\xe1r\x0eq\xb6\xdc\xc9M:Y6F\xf13\x90\x1dO[P,\x8csKv\xdbJ\xf9\x00r`C\f)\"\x10\xb2\x8f\x876\xcd\x86\x95\x8dV\x0eF\x12\xf7\x89s\x98\xa5\xed\xfb\xc5\x86\x85\x9e\xf0Ee\xc4\x11\xc0\xc7%#\x95D\x84rq\xedb\xc4h\xd7\x05\x00\x04\x009\x96\x1d\xd2+\x1ay\x86N\xe3\xf4\xedw\xd7\xa3\xbe\xd7\x800\x0f\xa1\x90c%\xb1\x0e\xb2\x80C\xb3\x13`\x88\x13mH\x86[F4\x97)\r\x9e$\x934(\x7f\xa5 &\xabb\x00\x00\x00\x00\x00', &(0x7f0000000200)='127\x9b\xe5\x8e\x18.1B\xe8\x0e\xcf+W\x1fz\x9ch\b\xb0\xba_*bm\xfd\xa6\xc89%\x95\x82(\xf5Sk\x113\x04\x0f\xf4v\x8c\x18\xc0\x903\x9e\xc6\xd3\x04\b`\x80\xe2\x05\xfe\x82\x91\xa5c\xfa\xac\xf8\xdfh\xb2\xae\xbb1L\x1e\x06`\xb5IK\xa5u:\xab\xbcz\x99\x86\xd3%o\\\"\x93\xf5\xb8\x01Y\xf3<\xe9\xbdJ.2\x9d\xc9\tj\xaf\x9a\xa9\xef\xd1\xec\x8f5\xd8\xecO\x86\xa1ua\xfa\xd3M\x9eBQ\xe7\xb1_s\xef\x9c\x19\x89 \xd3\xc23\x06l\xb1]*SD\x0e', 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0x4) r6 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000002c0)=0x12) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r7, 0x8008af83, &(0x7f00000000c0)) r8 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_THP_DISABLE(0x44, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x50103}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 27m53.707848237s ago: executing program 2 (id=6222): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000300)}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000080)="2f9e", 0x2}], 0x1}}], 0x2, 0x4000000) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000340)=@assoc_value, &(0x7f0000000300)=0x8) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/config\x00') preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000200)=""/87, 0x57}], 0x1, 0xe, 0x7) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000100), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x2000c014}, 0x800) fcntl$setpipe(r0, 0x407, 0x9ec2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0x10, &(0x7f0000000180)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8001) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1040, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x40) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x7fffffff) 27m38.346568573s ago: executing program 40 (id=6222): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000300)}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000080)="2f9e", 0x2}], 0x1}}], 0x2, 0x4000000) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000340)=@assoc_value, &(0x7f0000000300)=0x8) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/config\x00') preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000200)=""/87, 0x57}], 0x1, 0xe, 0x7) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000100), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x2000c014}, 0x800) fcntl$setpipe(r0, 0x407, 0x9ec2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0x10, &(0x7f0000000180)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8001) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1040, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x40) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x7fffffff) 16m56.866623534s ago: executing program 5 (id=8072): r0 = syz_open_dev$loop(&(0x7f0000000280), 0x10, 0x80082) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0) readv(r1, &(0x7f0000004280)=[{&(0x7f0000002240)=""/4096, 0x1000}], 0x1) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002000)=ANY=[@ANYBLOB="28000000130a0103"], 0x28}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0x278) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x14d902, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e68080b8785d960001000000000000000000007efff100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd5992861ac00", "f4bd000000017000", [0x7, 0xffffffff9673e35d]}}) unlink(&(0x7f0000005580)='./file0\x00') ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) fallocate(r0, 0x3, 0x0, 0x5345) r3 = syz_open_dev$vim2m(&(0x7f0000000580), 0x659b40fd, 0x2) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x9}, 0x8) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000100)={0x410000, 0x2, 0x2}) r4 = socket$inet6(0xa, 0x3, 0xff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x0, 0x1, 0x3, 0xfffffffd, 0x14, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x7, 0xba08}}) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000009c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000005c0)={0x0, @win={{0x945559d4, 0x98c, 0x4, 0x80007}, 0x4, 0x7, 0x0, 0xfffffffe, 0x0, 0xfd}}) r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) r7 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') read$FUSE(r7, &(0x7f00000021c0)={0x2020}, 0x2020) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x12, r8, 0xfffff000) ioctl$KVM_SET_TSC_KHZ_vm(r8, 0xaea2, 0x6813) 16m54.003576962s ago: executing program 5 (id=8078): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r3, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) socket$can_raw(0x1d, 0x3, 0x1) sendmmsg$inet(r3, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) connect$inet6(r4, &(0x7f0000000800)={0xa, 0x4e24, 0xc0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xc58e}, 0x1c) writev(r5, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) syz_open_dev$sg(0x0, 0x0, 0x40100) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) preadv(r5, &(0x7f0000000300), 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'bridge_slave_1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={0xffffffffffffffff, 0x0, &(0x7f0000000640)=""/13, 0x2}, 0x20) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000680)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r3, &(0x7f00000000c0)="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", 0xffe3, 0x6000000000000000, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 16m50.704676898s ago: executing program 5 (id=8085): r0 = socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000300)=ANY=[@ANYRES32=r5, @ANYBLOB="08100200f6fd"], 0xa) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000040)=@assoc_id=r5, &(0x7f0000000180)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0xbd}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) unshare(0x22020600) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) renameat2(r7, &(0x7f00000002c0)='./file0\x00', r7, &(0x7f00000003c0)='./bus\x00', 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000400)={r6, 0x95, "d014622a445c7609c89d33da9f6d72b3df4abe0a8ceebdbb13d8472c15d00db0b0da077d5af91de525c553bc25f3c78362ec688715f44fdb39d3242ca9854844f789971cd0cd459b2c562b77b9a41ba60d3edacc067372053a62dc3798fc1277d86bef94cda01bac347ec5fb32e0b1b61c97b5b9ea29808d20708123eddadbc347ca2ccd22db17bdf12b2c41f4a1758aa2f04dee86"}, &(0x7f00000004c0)=0x9d) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock2(&(0x7f00004f5000/0x8000)=nil, 0x8000, 0x1) openat$random(0xffffffffffffff9c, 0x0, 0x400000, 0x0) r10 = getpid() r11 = syz_pidfd_open(r10, 0x0) setns(r11, 0x24020000) 16m45.461760623s ago: executing program 5 (id=8098): syz_usb_connect$uac3(0x5, 0xb2, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000086307302040000102030109026e0003010ac007080b0002012430e50904000000010130000a2401060a0007000000090401000001023000090401010101"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0x14000, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) unshare(0x22020600) r4 = fsopen(&(0x7f0000000140)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x1) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x5800000d}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x387c02, 0x0) open(0x0, 0x60840, 0x0) fsopen(&(0x7f0000000000)='overlay\x00', 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000180)=@x86={0x3, 0x5, 0x81, 0x0, 0x9, 0xe, 0x5, 0x2, 0x1, 0x1, 0x6, 0x5, 0x0, 0x1af2, 0x3, 0x8, 0xf, 0xf4, 0x9, '\x00', 0x5, 0x8}) set_mempolicy(0x2, &(0x7f0000000000)=0x4000000ffb, 0x1000000000008) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') io_submit(r6, 0x0, &(0x7f00000000c0)) io_setup(0x10000, &(0x7f00000014c0)) 16m38.970939388s ago: executing program 5 (id=8111): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x8031, 0xffffffffffffffff, 0xffffd000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x20040, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230007) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x28, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}, [@typed={0x8, 0x8, 0x0, 0x0, @u32=0x2}, @typed={0xb, 0x1f, 0x0, 0x0, @str='*{&!{}\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x42014}, 0x4080040) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x44) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x4040000) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001e95bf3410140e1271234f4d5cf4e8dee8a73dac9416183b9c702b541ca98eb6d34062a86e5232e719c8d55acc6ca8120fd2f681d4ba98517be1cdc40d06832c2e3f003ce0f1c2092927135c811f27da4c7eabe4ac4951532c817f408a7ed43d7396c966e32d7f6dc73d05c854a1b5aefa9b2e82bf1b83005017989b17af2b937a7f0e510e816af5b94511d9c12d7189f109886593c50b4ef4de189b72271e0c3bba68a19359464b68f0659ced4d15cfa47c6240a"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24004080) 16m33.710028856s ago: executing program 5 (id=8125): madvise(&(0x7f00003c7000/0x1000)=nil, 0x1000, 0x17) creat(&(0x7f0000000080)='./file0\x00', 0x5d) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x8, 0x0, 0x0, 0x4, 0x5f, 0xfffefe0000000009, 0x7, 0xffffffff}, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x20) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x20a02, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r4, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1f, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x8001, 0xc8, 0xb, 0x7ffc0101}]}) mincore(&(0x7f0000223000/0x2000)=nil, 0x2000, &(0x7f0000000000)) connect$inet(r4, &(0x7f0000000240)={0x2, 0x4e23, @private=0xa010100}, 0x10) listen(r4, 0xda8d) accept$inet(r4, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x337) shmget(0x3, 0x1000, 0x10, &(0x7f0000ffd000/0x1000)=nil) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x8000) fcntl$setlease(r2, 0x400, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f0000000240)="c8", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x7, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(0x0, r7) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r8, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="5a000e008090030008021100000008021100000108021100000005000c00c6c105000000000000006400d04c010004060606080000002d1a02001802000000000000"], 0x78}, 0x1, 0x0, 0x0, 0x4800}, 0x4048000) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0xff, @local, 0x7}, 0x1c) 16m18.350260907s ago: executing program 41 (id=8125): madvise(&(0x7f00003c7000/0x1000)=nil, 0x1000, 0x17) creat(&(0x7f0000000080)='./file0\x00', 0x5d) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x8, 0x0, 0x0, 0x4, 0x5f, 0xfffefe0000000009, 0x7, 0xffffffff}, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x20) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x20a02, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r4, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1f, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x8001, 0xc8, 0xb, 0x7ffc0101}]}) mincore(&(0x7f0000223000/0x2000)=nil, 0x2000, &(0x7f0000000000)) connect$inet(r4, &(0x7f0000000240)={0x2, 0x4e23, @private=0xa010100}, 0x10) listen(r4, 0xda8d) accept$inet(r4, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x337) shmget(0x3, 0x1000, 0x10, &(0x7f0000ffd000/0x1000)=nil) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x8000) fcntl$setlease(r2, 0x400, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f0000000240)="c8", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x7, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(0x0, r7) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r8, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="5a000e008090030008021100000008021100000108021100000005000c00c6c105000000000000006400d04c010004060606080000002d1a02001802000000000000"], 0x78}, 0x1, 0x0, 0x0, 0x4800}, 0x4048000) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0xff, @local, 0x7}, 0x1c) 16.651812478s ago: executing program 0 (id=11037): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYRES16=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8000000) writev(0xffffffffffffffff, 0x0, 0x0) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000480), 0x4a6f81, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x24000085) r3 = epoll_create(0x400) ioctl$AUTOFS_IOC_EXPIRE(r3, 0x810c9365, &(0x7f0000000640)={{0x3, 0x5}, 0x100, './file0\x00'}) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r4 = socket$kcm(0x2, 0x1, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @private2, 0xa}, 0x1c) setsockopt$sock_attach_bpf(r4, 0x84, 0x85, &(0x7f0000000000), 0x90) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000380)=0x1c) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) r5 = fsopen(&(0x7f0000000000)='jfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000003c0)='iochabset\xd9S\xdc\x85\xba\xbd\xd5\xb4B\x1b\x88$6\x85\\\xfe\x13\x1e\f\x14d\x04\x8e;\x9f\xa1/\xbe\xab\xc4\x82o\xe3c\xc5\xdd5\x1ca<\xdd\xd4\f\x14\xc2\xbd\xd2\x93H\x1a\xc3\x03\xf7\"\x16\xe2\xe6\xa5\xf7\ar\x0e\xedU\xb8!T\x13-\xef\x9fO\x1a\x03w\x99\xc5\xc3\x89\xd8\x99\xb6y\x18\x11\xb9\xf0\x17\x7fX\xfc\xb2\xc6\xc5\xbd\xde-\xdco*\xcd\xe8\xe9\x13\x04B\x9dw\xedH\xb0\xe0\x91\x04\xe6\t\xf1U\xb2Jn\x8da\xafv a\xee\xc3\xcf\x16+\xb4\xbbn \x1d<\xeeC\x1cv\'\xc8n\xd9.\xb8\xbe\xd7\xe0\xa8\xbb;\xf5\x1agV\xfcT\\\xb6\x7f\x9e|\xc5\xec6P\xd14\xfb\xe6~\xaa0\x955W6\xc8\x8d\x85\x86Q\x89\xf9\t3a\xed\xda\xb6\xc7\xf8\xa3\xcb>\x8a\xbd\x7fH\x80\x14', 0x0) r6 = dup2(r2, r2) read$FUSE(r6, &(0x7f00000063c0)={0x2020}, 0x2020) 13.00834621s ago: executing program 0 (id=11058): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)=ANY=[@ANYBLOB="120100003a982a08cd0ca310a223010203010902120001000000000904"], 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="400a06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 9.771355102s ago: executing program 0 (id=11084): r0 = socket$inet6(0xa, 0x3, 0x3) syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) r3 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000180)='./file1\x00', 0x0, 0x0, r3}, 0x18) getsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000000), 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x400) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0x8) r7 = accept4(r6, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7d, &(0x7f0000000140)={0x0, 0x4}, 0x8) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r8 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_PEC(r8, 0x708, 0x2) ioctl$I2C_SMBUS(r8, 0x720, &(0x7f00000000c0)={0x1, 0x1, 0x4, &(0x7f0000000000)={0x17, "90f5000000f3c9f1bd0d00"}}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x8, 0xfffff038}, {0x20, 0xf, 0x0, 0xffffefff}, {0x6}]}, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmmsg(r4, &(0x7f0000000180), 0x4000190, 0xc03e) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@empty, @in=@empty, 0x4f23, 0x0, 0x4e23, 0x2, 0xa, 0x2a11bad3d5f03f04, 0x30, 0x2f}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x100000000, 0xfffffffffffffffb, 0x3, 0x8, 0x7fff}, {0x4, 0xfffffffffffffffe, 0x4, 0x9}, 0x10001, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0xa, @in=@remote, 0xfffffffe, 0x0, 0x0, 0x17, 0x0, 0x0, 0xfffffffb}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0) 8.458068821s ago: executing program 4 (id=11090): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c1122334400008000000500050000000580040007"], 0x4a) 8.180990618s ago: executing program 4 (id=11092): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYRES16=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) userfaultfd(0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8000000) writev(0xffffffffffffffff, 0x0, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000480), 0x4a6f81, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x24000085) r2 = epoll_create(0x400) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f0000000640)={{0x3, 0x5}, 0x100, './file0\x00'}) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={0x0, r3, r3}, 0x0, 0x0, 0x0) r4 = socket$kcm(0x2, 0x1, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @private2, 0xa}, 0x1c) setsockopt$sock_attach_bpf(r4, 0x84, 0x85, &(0x7f0000000000), 0x90) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000380)=0x1c) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) r5 = fsopen(&(0x7f0000000000)='jfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000003c0)='iochabset\xd9S\xdc\x85\xba\xbd\xd5\xb4B\x1b\x88$6\x85\\\xfe\x13\x1e\f\x14d\x04\x8e;\x9f\xa1/\xbe\xab\xc4\x82o\xe3c\xc5\xdd5\x1ca<\xdd\xd4\f\x14\xc2\xbd\xd2\x93H\x1a\xc3\x03\xf7\"\x16\xe2\xe6\xa5\xf7\ar\x0e\xedU\xb8!T\x13-\xef\x9fO\x1a\x03w\x99\xc5\xc3\x89\xd8\x99\xb6y\x18\x11\xb9\xf0\x17\x7fX\xfc\xb2\xc6\xc5\xbd\xde-\xdco*\xcd\xe8\xe9\x13\x04B\x9dw\xedH\xb0\xe0\x91\x04\xe6\t\xf1U\xb2Jn\x8da\xafv a\xee\xc3\xcf\x16+\xb4\xbbn \x1d<\xeeC\x1cv\'\xc8n\xd9.\xb8\xbe\xd7\xe0\xa8\xbb;\xf5\x1agV\xfcT\\\xb6\x7f\x9e|\xc5\xec6P\xd14\xfb\xe6~\xaa0\x955W6\xc8\x8d\x85\x86Q\x89\xf9\t3a\xed\xda\xb6\xc7\xf8\xa3\xcb>\x8a\xbd\x7fH\x80\x14', 0x0) r6 = dup2(r1, r1) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f00000001c0)=0x2) read$FUSE(r6, &(0x7f00000063c0)={0x2020}, 0x2020) 7.020569899s ago: executing program 4 (id=11096): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) userfaultfd(0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8000000) writev(0xffffffffffffffff, 0x0, 0x0) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000480), 0x4a6f81, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x24000085) r3 = epoll_create(0x400) ioctl$AUTOFS_IOC_EXPIRE(r3, 0x810c9365, &(0x7f0000000640)={{0x3, 0x5}, 0x100, './file0\x00'}) r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={0x0, r4, r4}, 0x0, 0x0, 0x0) r5 = socket$kcm(0x2, 0x1, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @private2, 0xa}, 0x1c) setsockopt$sock_attach_bpf(r5, 0x84, 0x85, &(0x7f0000000000), 0x90) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000380)=0x1c) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) r6 = fsopen(&(0x7f0000000000)='jfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000003c0)='iochabset\xd9S\xdc\x85\xba\xbd\xd5\xb4B\x1b\x88$6\x85\\\xfe\x13\x1e\f\x14d\x04\x8e;\x9f\xa1/\xbe\xab\xc4\x82o\xe3c\xc5\xdd5\x1ca<\xdd\xd4\f\x14\xc2\xbd\xd2\x93H\x1a\xc3\x03\xf7\"\x16\xe2\xe6\xa5\xf7\ar\x0e\xedU\xb8!T\x13-\xef\x9fO\x1a\x03w\x99\xc5\xc3\x89\xd8\x99\xb6y\x18\x11\xb9\xf0\x17\x7fX\xfc\xb2\xc6\xc5\xbd\xde-\xdco*\xcd\xe8\xe9\x13\x04B\x9dw\xedH\xb0\xe0\x91\x04\xe6\t\xf1U\xb2Jn\x8da\xafv a\xee\xc3\xcf\x16+\xb4\xbbn \x1d<\xeeC\x1cv\'\xc8n\xd9.\xb8\xbe\xd7\xe0\xa8\xbb;\xf5\x1agV\xfcT\\\xb6\x7f\x9e|\xc5\xec6P\xd14\xfb\xe6~\xaa0\x955W6\xc8\x8d\x85\x86Q\x89\xf9\t3a\xed\xda\xb6\xc7\xf8\xa3\xcb>\x8a\xbd\x7fH\x80\x14', 0x0) r7 = dup2(r2, r2) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f00000001c0)=0x2) read$FUSE(r7, &(0x7f00000063c0)={0x2020}, 0x2020) 4.572775333s ago: executing program 0 (id=11108): pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) sendto$inet6(r1, &(0x7f00000014c0)="7499c7b3f187a41a1a154637a4", 0xd, 0x44010, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x2e93, 0x0) 4.325200499s ago: executing program 0 (id=11109): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x84, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x54, 0x2, [@TCA_BASIC_ACT={0x50, 0x3, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}, @TCA_CT_ACTION={0x6, 0x3, 0x9}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x84}}, 0x0) write$tun(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="4500001c123440004011149b0a0000010a00000204d2162e0008"], 0x1c) 4.300239392s ago: executing program 4 (id=11111): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_io_uring_setup(0xf08, &(0x7f0000000300)={0x0, 0x2d85, 0x40000, 0x3, 0x800000c3}, &(0x7f0000000580), 0x0, &(0x7f0000000f40)) socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000f80)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x0, 0x168, 0x10, 0x0, 0xb, 0x260, 0x250, 0x250, 0x260, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0x0, 0xff000000], [0x0, 0xffffffff], 'veth1_to_batadv\x00', 'veth1_to_hsr\x00', {}, {}, 0x3a}, 0x6000000, 0x128, 0x190, 0x0, {0x0, 0x28e}, [@common=@icmp6={{0x28}, {0x0, 'K\r'}}, @common=@inet=@hashlimit1={{0x58}, {'tunl0\x00', {0x0, 0x0, 0x9, 0x1, 0x0, 0x10000, 0x80000001}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0x0, 0xffffffff, 0xff], 'veth1_vlan\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x21, 0xff, 0x1, 0x52}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) r1 = socket$inet6(0xa, 0x3, 0x5) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20000) ioctl$SG_BLKTRACESETUP(r2, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x21fd, 0xdd36, 0x80, 0x1df, 0x81}) ioctl$SG_BLKTRACETEARDOWN(r2, 0x1276, 0x3800) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmmsg(r1, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="120000000000000029", @ANYRES64=r1], 0x108}}], 0x1, 0xc040) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a0010000000", 0x28}, {&(0x7f0000000000)="11c9064268e9", 0x6}], 0x2}, 0x40) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r5 = socket(0xa, 0x3, 0x3a) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$MRT6_INIT(r5, 0x29, 0xc8, &(0x7f0000000000), 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x1, r7}, 0xc) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000300), 0x5c) syz_emit_ethernet(0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="33330000000100112233445586dd6000000000003b4020010db8000000000000000000000001ff0e0000000000000000000000000001"], 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r9 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000080)={0x4000201e}) epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r8, &(0x7f0000000040)={0x10}) 3.659745482s ago: executing program 0 (id=11118): r0 = socket$inet6(0xa, 0x3, 0x3) syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) r3 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000180)='./file1\x00', 0x0, 0x0, r3}, 0x18) getsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000000), 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x400) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0x8) r7 = accept4(r6, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7d, &(0x7f0000000140)={0x0, 0x4}, 0x8) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r8 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_PEC(r8, 0x708, 0x2) ioctl$I2C_SMBUS(r8, 0x720, &(0x7f00000000c0)={0x1, 0x1, 0x4, &(0x7f0000000000)={0x17, "90f5000000f3c9f1bd0d00"}}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x8, 0xfffff038}, {0x20, 0xf, 0x0, 0xffffefff}, {0x6}]}, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmmsg(r4, &(0x7f0000000180), 0x4000190, 0xc03e) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@empty, @in=@empty, 0x4f23, 0x0, 0x4e23, 0x2, 0xa, 0x2a11bad3d5f03f04, 0x30, 0x2f}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x100000000, 0xfffffffffffffffb, 0x3, 0x8, 0x7fff}, {0x4, 0xfffffffffffffffe, 0x4, 0x9}, 0x10001, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0xa, @in=@remote, 0xfffffffe, 0x0, 0x0, 0x17, 0x0, 0x0, 0xfffffffb}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0) 3.62809965s ago: executing program 8 (id=11119): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @ioapic={0xeeee0000, 0x3, 0x8, 0xbfb, 0x0, [{0x8, 0x5, 0xf, '\x00', 0xd}, {0x52, 0x6, 0x8, '\x00', 0x7}, {0x9, 0x1, 0x7, '\x00', 0x8}, {0x22, 0x9, 0x8, '\x00', 0x4}, {0x8, 0xc, 0xda, '\x00', 0x3}, {0x9, 0x3, 0x83, '\x00', 0x2}, {0x0, 0x2, 0xa, '\x00', 0xa0}, {0x6, 0xa, 0x81, '\x00', 0xe}, {0x8, 0x8, 0x0, '\x00', 0x8}, {0x1, 0x40, 0x6, '\x00', 0x7f}, {0x7, 0x4, 0x2, '\x00', 0x8}, {0x7f, 0xbf, 0xfd, '\x00', 0x8}, {0x3, 0x5, 0x9, '\x00', 0x81}, {0x9, 0xf9, 0x3, '\x00', 0xa}, {0x8, 0x8, 0xf, '\x00', 0x8}, {0xc, 0x5, 0x80, '\x00', 0x5}, {0xff, 0x85, 0x9, '\x00', 0x1}, {0x1, 0x4, 0x6, '\x00', 0x5}, {0x3, 0xea, 0x3, '\x00', 0x6}, {0x7, 0xb, 0x8, '\x00', 0x80}, {0x1, 0x1, 0x4, '\x00', 0xa}, {0x0, 0xa8, 0x8, '\x00', 0x7f}, {0xa, 0xf4, 0x7f, '\x00', 0xf0}, {0x10, 0x4, 0x20, '\x00', 0x1a}]}}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x4e22, @multicast2}}, 0x0, 0x0, 0x21, 0x0, "a386bcb957f6ee650a88e8065cb3b0852da5b6b12cf609fdffffff0f392be7124f3883ab73ec229f5fab90b052c3572db8ed729eed0700001400000000de12709700"}, 0xd8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000740)={"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"}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x10, 0x3, 0x93, 0x0, 0x1, 0x1, 0xba, 0x2, 0xc0, 0x4d, 0x9, 0x61, 0x7, 0x90, 0xd}}) 3.337684714s ago: executing program 4 (id=11121): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) userfaultfd(0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8000000) writev(0xffffffffffffffff, 0x0, 0x0) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000480), 0x4a6f81, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x24000085) r3 = epoll_create(0x400) ioctl$AUTOFS_IOC_EXPIRE(r3, 0x810c9365, &(0x7f0000000640)={{0x3, 0x5}, 0x100, './file0\x00'}) r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={0x0, r4, r4}, 0x0, 0x0, 0x0) r5 = socket$kcm(0x2, 0x1, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @private2, 0xa}, 0x1c) setsockopt$sock_attach_bpf(r5, 0x84, 0x85, &(0x7f0000000000), 0x90) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000380)=0x1c) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) r6 = fsopen(&(0x7f0000000000)='jfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000003c0)='iochabset\xd9S\xdc\x85\xba\xbd\xd5\xb4B\x1b\x88$6\x85\\\xfe\x13\x1e\f\x14d\x04\x8e;\x9f\xa1/\xbe\xab\xc4\x82o\xe3c\xc5\xdd5\x1ca<\xdd\xd4\f\x14\xc2\xbd\xd2\x93H\x1a\xc3\x03\xf7\"\x16\xe2\xe6\xa5\xf7\ar\x0e\xedU\xb8!T\x13-\xef\x9fO\x1a\x03w\x99\xc5\xc3\x89\xd8\x99\xb6y\x18\x11\xb9\xf0\x17\x7fX\xfc\xb2\xc6\xc5\xbd\xde-\xdco*\xcd\xe8\xe9\x13\x04B\x9dw\xedH\xb0\xe0\x91\x04\xe6\t\xf1U\xb2Jn\x8da\xafv a\xee\xc3\xcf\x16+\xb4\xbbn \x1d<\xeeC\x1cv\'\xc8n\xd9.\xb8\xbe\xd7\xe0\xa8\xbb;\xf5\x1agV\xfcT\\\xb6\x7f\x9e|\xc5\xec6P\xd14\xfb\xe6~\xaa0\x955W6\xc8\x8d\x85\x86Q\x89\xf9\t3a\xed\xda\xb6\xc7\xf8\xa3\xcb>\x8a\xbd\x7fH\x80\x14', 0x0) r7 = dup2(r2, r2) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f00000001c0)=0x2) read$FUSE(r7, &(0x7f00000063c0)={0x2020}, 0x2020) 3.274614654s ago: executing program 8 (id=11123): shmget(0x1, 0x1000, 0x2, &(0x7f00003ae000/0x1000)=nil) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$sndpcmp(0x0, 0xfffffffffffffff1, 0x402000) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000284000/0x1000)=nil, 0x1000, 0x3) landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff, 0xc, 0x2, 0x86cb}, 0x30, 0x1) landlock_restrict_self(r2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00', 0xfffff801}}}, 0x32) getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, &(0x7f0000000100)) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) close(r7) syz_clone3(&(0x7f00000003c0)={0x122125000, &(0x7f00000000c0), 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/ipc\x00') syz_emit_ethernet(0xe0, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaa2bbbbbbbbbbbbb08004c0000d2000000000873907800000000ffffffff441c0ed3ac1414aa000000087f00000100000005ac1414aa000000030000000000a290000000e9ecce97f6597f81a704997d1e508ae9b4d11f533b24f570cedad160792fcc578ffa4cf1a285fa"], 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) 2.397406012s ago: executing program 6 (id=11126): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000000)={[{0x81fffffe, 0x4, 0xc1, 0x4f, 0x3, 0xbd, 0x80, 0x6, 0x1, 0x44, 0x8, 0x3, 0x100}, {0xb, 0xa6f2, 0x6, 0x8, 0x9, 0xfb, 0x44, 0x87, 0xa, 0x6, 0x7, 0x6}, {0x1fd, 0x8, 0xd, 0x21, 0xf1, 0x9, 0x1, 0x16, 0x3, 0x15, 0x0, 0x7, 0x4}], 0x20000002}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x67a, 0x8000000000000000, 0x3fe, 0x0, 0x1000, 0x2, 0x4002004c4, 0x1000, 0x0, 0x97, 0x200000000010, 0x401, 0x2, 0x4, 0x8, 0x1aa], 0x2, 0x400}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.098773887s ago: executing program 7 (id=11127): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000380)={0x8, 0x4d, 0x2ba8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x8, 0x8, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x3ff, 0x52a1, 0x34}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xff, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 2.041877815s ago: executing program 6 (id=11128): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYRES16=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) userfaultfd(0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8000000) writev(0xffffffffffffffff, 0x0, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000480), 0x4a6f81, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x24000085) r2 = epoll_create(0x400) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f0000000640)={{0x3, 0x5}, 0x100, './file0\x00'}) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={0x0, r3, r3}, 0x0, 0x0, 0x0) r4 = socket$kcm(0x2, 0x1, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @private2, 0xa}, 0x1c) setsockopt$sock_attach_bpf(r4, 0x84, 0x85, &(0x7f0000000000), 0x90) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000380)=0x1c) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) r5 = fsopen(&(0x7f0000000000)='jfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000003c0)='iochabset\xd9S\xdc\x85\xba\xbd\xd5\xb4B\x1b\x88$6\x85\\\xfe\x13\x1e\f\x14d\x04\x8e;\x9f\xa1/\xbe\xab\xc4\x82o\xe3c\xc5\xdd5\x1ca<\xdd\xd4\f\x14\xc2\xbd\xd2\x93H\x1a\xc3\x03\xf7\"\x16\xe2\xe6\xa5\xf7\ar\x0e\xedU\xb8!T\x13-\xef\x9fO\x1a\x03w\x99\xc5\xc3\x89\xd8\x99\xb6y\x18\x11\xb9\xf0\x17\x7fX\xfc\xb2\xc6\xc5\xbd\xde-\xdco*\xcd\xe8\xe9\x13\x04B\x9dw\xedH\xb0\xe0\x91\x04\xe6\t\xf1U\xb2Jn\x8da\xafv a\xee\xc3\xcf\x16+\xb4\xbbn \x1d<\xeeC\x1cv\'\xc8n\xd9.\xb8\xbe\xd7\xe0\xa8\xbb;\xf5\x1agV\xfcT\\\xb6\x7f\x9e|\xc5\xec6P\xd14\xfb\xe6~\xaa0\x955W6\xc8\x8d\x85\x86Q\x89\xf9\t3a\xed\xda\xb6\xc7\xf8\xa3\xcb>\x8a\xbd\x7fH\x80\x14', 0x0) r6 = dup2(r1, r1) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f00000001c0)=0x2) read$FUSE(r6, &(0x7f00000063c0)={0x2020}, 0x2020) 1.84001404s ago: executing program 7 (id=11129): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x8000001, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfa}}, 0x7}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd00ac6700000000000000000000c2888e7d52164ec480e79200000100", [0x0, 0x2000000000001]}}) 1.561951621s ago: executing program 7 (id=11130): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0xfd, 0x5479, 0x103d, 0x80200000000006, 0x0, 0x32a, 0x1, 0x1, 0x1, 0x40000000009, 0x8000000000005, 0x800000068], 0x8080000, 0xdd1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000400)={0x8, {"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", 0x1000}}, 0xfffffe69) syz_emit_ethernet(0x86, 0x0, 0x0) 1.227085711s ago: executing program 7 (id=11131): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x200000, &(0x7f0000200000/0x200000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000200)={0x0, 0x200000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x200000, &(0x7f0000200000/0x200000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000300)={0x0, 0x200, 0x0, &(0x7f0000000400)=[0xffffffffffffffff, 0xffffffffffffffff, 0x80000001, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5d99, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xdf, 0x10000, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffdffffffffffff, 0xffffffffffffffff, 0xff7fffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x56, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0xffffffffffffffff]}) 989.733015ms ago: executing program 8 (id=11132): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$video(&(0x7f0000000040), 0x2000000008, 0x101840) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x47) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="02043c00ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57", 0x46, 0x800, 0x0, 0x0) 947.335167ms ago: executing program 6 (id=11133): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="000000000000000010010c8013000c800ca3"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) recvmmsg(r0, &(0x7f0000000080), 0x400014c, 0x40000103, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x8, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000000)=0x8, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x10, @mcast2}, 0x1c) sendto$inet6(r1, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0) 835.452347ms ago: executing program 7 (id=11134): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x7c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4c, 0x2, [@TCA_BASIC_ACT={0x48, 0x3, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x7c}}, 0x0) write$tun(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="4500001c12344000402f149b0a0000010a00000204d2162e"], 0x1c) 765.200228ms ago: executing program 8 (id=11135): openat$iommufd(0xffffffffffffff9c, 0x0, 0x88800, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080), 0x8, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x8000008, 0x252, "679c51ecbc83d1e22e845e3ede57135adc714d432546da16827000", 0x10001, 0xd0000000, 0x0, 0x4, 0x80001681}) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$SG_IO(r1, 0x301, &(0x7f0000000300)={0x53, 0xfffffffffffffffd, 0x0, 0xad, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x2, 0x10021, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55aaffff}) 589.657251ms ago: executing program 6 (id=11136): r0 = socket$inet6(0xa, 0x802, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) r3 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) unshare(0x400) r4 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000000c0)=0x3) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r5, &(0x7f0000005f40)=[{{&(0x7f00000010c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f00000012c0)=ANY=[], 0x28}}], 0x1, 0x4000004) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x96, 0x1, 0x2, 0xd59f80, 0x19ef, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x8, {0x80008, 0xffffffff}, 0xd0, 0x9}}) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x178, 0xe138, 0x198, 0x0, 0x198, 0x230, 0x358, 0x358, 0x230, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'nicvf0\x00', 'veth0_to_bond\x00'}, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0003000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c429955608b9952bed40ce4a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000080049", 0x4}}, @inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x5, 0x1, 0x9, 0xf, 'pptp\x00', {0xe}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0xb20, 0x1c0, 0x43, 0xa0, 0x0, 0x98, 0xa88, 0x178, 0x178, 0xa88, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1a0, 0x1c0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x3, {0x100000001}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x888, 0x8c8, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x9}, {0x3}, {0x1, 0x1}, {0x0, 0x3}, {0x4, 0x2}, {0xb1d}, {0x3}, {0x8}, {0x2, 0x3}, {0x3}, {0x103}], [{0xe8f3, 0x5}, {0x1d, 0x6}, {0x1, 0x8}, {0x0, 0x4}, {0x4, 0xc3e}, {0x1, 0x100}, {0x6, 0x7}, {0x3, 0x3}, {0xf2, 0x3}, {0x3ff, 0x8}, {0x10, 0x3}], 0x6, 0x6}, {[{0x80, 0x3}, {0x2}, {0x6, 0x1}, {0x355cbac3, 0x2}, {0x0, 0x2}, {0x0, 0x2}, {0x7}, {0xe7, 0x2}, {0x3, 0x3}, {0x5598e8fe, 0x2}, {0x6, 0x1}], [{0x9, 0x9097}, {0x7, 0x9}, {0x7, 0xa}, {0x6, 0x8}, {0x20080, 0x5}, {0x13, 0xc0000000}, {0x40, 0xb}, {0x9, 0x6}, {0x4, 0x2}, {0x6, 0x7fffffff}, {0x7fffffff, 0x400}], 0x7}, {[{0x84, 0x2}, {}, {0x0, 0x2}, {0xffffffff, 0x1}, {}, {0x5, 0x1}, {0x5, 0x2}, {0x8, 0x3}, {0x2, 0x3}, {0x8, 0x1}, {0x7, 0x1}], [{0x9, 0x5}, {0x80, 0x32}, {0x0, 0xfffffff7}, {0xff, 0x1}, {0x7, 0xfffffff6}, {0xdb9, 0xff4}, {0x6, 0x3ff}, {0x3, 0x6}, {0x5, 0x10}, {0x9, 0x6}, {0x10000, 0x10002}], 0x3, 0x2a}, {[{0x3, 0x2}, {0xa, 0x1}, {0x6, 0x1}, {0x10, 0x3}, {0x2, 0x2}, {0x2, 0x2}, {0x3, 0x1}, {0x2, 0x3}, {0x3, 0x1}, {0x2, 0x2}, {0x477d, 0x1}], [{0x0, 0xffffffff}, {0x200, 0x6}, {0x4be1, 0x4044}, {0x1}, {0x5, 0xc}, {0x3, 0x4}, {0x2, 0x4}, {0x800, 0x8000}, {0x8, 0x800}, {0x3, 0x2}, {0xe, 0x8000}], 0x4, 0xb}, {[{0x7, 0x1}, {0xd, 0x3}, {0x5}, {0x61}, {0x9}, {}, {0x2}, {0x1}, {0x40000000, 0x2}, {0x9, 0x3}, {0x5, 0x3}], [{0x58d, 0x3ff}, {0x0, 0x7f}, {0x6}, {0xfc9b, 0x80000001}, {0x101, 0x7}, {0x7, 0x1}, {0x7, 0x8001}, {0x2, 0x1}, {0x2, 0x2}, {0x9, 0x4cf}, {0x7, 0x10000}], 0x1}, {[{0x2}, {0x9}, {0x8, 0x1}, {0x2, 0x3}, {0x71, 0x3}, {0x0, 0x2}, {0xe, 0x2}, {0x6, 0x2}, {0x5}, {0x3000000, 0x3}, {0x6}], [{0x9, 0x3}, {0x5, 0x7fffffff}, {0xffff, 0x4}, {0x0, 0x7}, {0x8, 0xb502}, {0x1ff, 0x86}, {0x6, 0xffffffff}, {0x3, 0x4}, {0x5, 0x6}, {0xf, 0xf93}, {0x5, 0x4}], 0x3, 0x3}, {[{0x7, 0x1}, {0x3, 0x1}, {0x45d7}, {0xfff, 0x3}, {0xc4f, 0x3}, {0x0, 0x2}, {0x400, 0x1}, {0x2, 0x1}, {0x4, 0x2}, {0xfffffffd}, {0x2}], [{0x3, 0x6}, {0xed, 0xd}, {0x80, 0xb81d}, {0x2ca, 0x80000000}, {0x8, 0xff}, {0x7, 0x45a8}, {0x8, 0x6}, {0x4, 0x1}, {0x2, 0x6}, {0xfc, 0x6}, {0xd, 0x138c}], 0x6}, {[{0x4, 0x1}, {0x800}, {0x9, 0x2}, {0xf0000000, 0x2}, {0x6, 0x3}, {0x3, 0x2}, {0x8, 0x2}, {}, {0x9}, {0x400, 0x2}, {0x8, 0x3}], [{0x7, 0xfffffffd}, {0x2}, {0x2, 0x2}, {0x8f, 0x6}, {0x7, 0x5}, {0x8, 0x7}, {0xb, 0x82c6}, {0xb1b}, {0xbd5c, 0xffff}, {0x1, 0x9b8d}, {0xec, 0x5}], 0x0, 0x6}, {[{0x8}, {0x0, 0x1}, {0xac000000}, {0x6, 0x2}, {0x2d8, 0x3}, {0x7e3ea4bc}, {0x8, 0x1324f499ce9a99e8}, {0x4f, 0x3}, {0x4, 0x2}, {0xfffffff7}, {0x3, 0x2}], [{0x5, 0x42}, {0x76a74689, 0xfffff156}, {0x1}, {0x8000, 0x7}, {0x400, 0xdd}, {0xfff, 0x8}, {0x76b, 0xfffffffe}, {0xa6d00, 0xfffffff7}, {0x10001, 0xfc8d}, {0x0, 0x10001}, {0x4, 0x3}], 0x1, 0x9}, {[{0x8, 0x1}, {0x3, 0x3}, {0x18, 0x3}, {0x3ff, 0x3}, {0x7fffffff}, {0x8}, {0x1}, {0x8, 0x3}, {0xf1b6}, {0x80, 0x3}, {0x4, 0x2}], [{0x2, 0x4}, {0x3, 0xf}, {0x9, 0x6}, {0x7f, 0x8}, {0x7, 0x273e1899}, {0x4, 0x1}, {0x6, 0x3}, {0x1, 0xb7}, {0x8, 0x3}, {0x3, 0x1}, {0x7ff, 0x63}], 0xb, 0x3}, {[{0x1, 0x2}, {0x6, 0x3}, {0xffff, 0x1}, {0x1}, {0x4, 0x3}, {0x4, 0x3}, {0xaa7}, {0x100, 0x3}, {0x2}, {0xfffffff7, 0xb90af65875a5dc08}, {0x4, 0x3}], [{0x3}, {0x8001, 0x7}, {0x10000, 0x7524}, {0x73d, 0x4}, {0x0, 0x280000}, {0x3, 0x3af}, {0x5, 0x2}, {0x101, 0xbf}, {0x10000, 0x6}, {0x3, 0x800}], 0x8, 0x5}], 0x3}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xb80) ptrace(0x10, r6) ptrace(0x4206, r6) ptrace$cont(0x1f, r6, 0x100000000, 0x2681) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000180)) sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="010000006b0100000100000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=r9, @ANYBLOB="0000000001"], 0x48}}, 0x20000000) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e21, 0x2, @private2, 0xb53d}, 0x1c) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000000), &(0x7f0000000040)=ANY=[@ANYBLOB="00fbd0037fd1791a69224fef67b7f342f2274b27c4f56aea4805c02fd974ef5c5bdcd04d6625c91ad287b266afbe98576302cd7b67982ef22c391fcf6e3be2ec5ccdb4e3a3bd100231b9209ea32b1a8bec7ab83ac0249df72228a706cd3c6d4c0aafd687d45f6c80bbb14de7ff00443be18610c25ac15cca3187c124855c67fda1ddedbfd9aebc6406840a8c7aae10d3d096e8ba7fa9ba951cd380de1859c87929636ecfc89493b58817e07a40d5676e26d7b49fd20c71d1cd80f203b4389399f6cd63f751fe885a421070944528dccf"], 0xd0, 0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000010"], 0x30, 0x400c010}}], 0x1, 0x8000) sendmmsg$inet6(r0, 0x0, 0x0, 0x888) 486.63616ms ago: executing program 8 (id=11137): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20c01, 0x36) socket$kcm(0x11, 0x3, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) write$vga_arbiter(r0, &(0x7f0000001580)=ANY=[@ANYBLOB='target PCI:', @ANYRES8=r0], 0x13) 411.067918ms ago: executing program 7 (id=11138): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYRES16=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) userfaultfd(0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8000000) writev(0xffffffffffffffff, 0x0, 0x0) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000480), 0x4a6f81, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x24000085) r3 = epoll_create(0x400) ioctl$AUTOFS_IOC_EXPIRE(r3, 0x810c9365, &(0x7f0000000640)={{0x3, 0x5}, 0x100, './file0\x00'}) r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={0x0, r4, r4}, 0x0, 0x0, 0x0) r5 = socket$kcm(0x2, 0x1, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @private2, 0xa}, 0x1c) setsockopt$sock_attach_bpf(r5, 0x84, 0x85, &(0x7f0000000000), 0x90) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000380)=0x1c) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) r6 = fsopen(&(0x7f0000000000)='jfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000003c0)='iochabset\xd9S\xdc\x85\xba\xbd\xd5\xb4B\x1b\x88$6\x85\\\xfe\x13\x1e\f\x14d\x04\x8e;\x9f\xa1/\xbe\xab\xc4\x82o\xe3c\xc5\xdd5\x1ca<\xdd\xd4\f\x14\xc2\xbd\xd2\x93H\x1a\xc3\x03\xf7\"\x16\xe2\xe6\xa5\xf7\ar\x0e\xedU\xb8!T\x13-\xef\x9fO\x1a\x03w\x99\xc5\xc3\x89\xd8\x99\xb6y\x18\x11\xb9\xf0\x17\x7fX\xfc\xb2\xc6\xc5\xbd\xde-\xdco*\xcd\xe8\xe9\x13\x04B\x9dw\xedH\xb0\xe0\x91\x04\xe6\t\xf1U\xb2Jn\x8da\xafv a\xee\xc3\xcf\x16+\xb4\xbbn \x1d<\xeeC\x1cv\'\xc8n\xd9.\xb8\xbe\xd7\xe0\xa8\xbb;\xf5\x1agV\xfcT\\\xb6\x7f\x9e|\xc5\xec6P\xd14\xfb\xe6~\xaa0\x955W6\xc8\x8d\x85\x86Q\x89\xf9\t3a\xed\xda\xb6\xc7\xf8\xa3\xcb>\x8a\xbd\x7fH\x80\x14', 0x0) r7 = dup2(r2, r2) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f00000001c0)=0x2) read$FUSE(r7, &(0x7f00000063c0)={0x2020}, 0x2020) 409.505929ms ago: executing program 6 (id=11139): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000007100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x2b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, 0x50) read$FUSE(r0, &(0x7f000000cdc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r3}, 0x10) syz_fuse_handle_req(r0, &(0x7f0000004940)="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", 0x2000, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x3c}}) syz_fuse_handle_req(r0, &(0x7f0000002780)="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", 0x2000, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)={0x20, 0x0, 0x9, {0x7, 0x0, 0x3, 0xfff}}, 0x0}) ioctl$FS_IOC_RESVSP(r1, 0x40086602, &(0x7f0000002740)={0x0, 0x1, 0x3}) 279.061986ms ago: executing program 8 (id=11140): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x1000, 0x1000, &(0x7f0000001000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl(r1, 0x4038ae7a, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00@\x00'/56) ioctl(r1, 0x4048aec9, &(0x7f0000000300)="01000000000000000100"/72) ioctl(r2, 0x4048aecb, &(0x7f0000000400)='\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'/72) ioctl(r1, 0x400caed0, &(0x7f0000000500)="0100000000000000ffffffff") ioctl$KVM_RUN(r2, 0xae80, 0x0) 216.212353ms ago: executing program 4 (id=11141): close(0xffffffffffffffff) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e1d, 0x1, @mcast1, 0x8}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x400ad84, &(0x7f00000000c0)={0xa, 0x4e20, 0x5b3, @ipv4={'\x00', '\xff\xff', @local}, 0x8}, 0x1c) socket$inet6(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="b3ab706204ee39c9dae21a1718ee351ebc92d2f0d482a863ae5c0b4d768ffe745af2c53a083d9b761b", 0x29}], 0x1}}], 0x1, 0x0) 0s ago: executing program 6 (id=11142): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000340)=ANY=[@ANYBLOB="0014af"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000a80)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): n unexpected descriptor of type 0x2, skipping [ 2756.328840][ T5745] usb 9-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2756.328854][ T5745] usb 9-1: config 220 has no interface number 2 [ 2756.328897][ T5745] usb 9-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 2756.329394][ T5745] usb 9-1: config 220 interface 0 has no altsetting 0 [ 2756.329417][ T5745] usb 9-1: config 220 interface 76 has no altsetting 0 [ 2756.329439][ T5745] usb 9-1: config 220 interface 1 has no altsetting 0 [ 2756.333184][ T5745] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2756.333212][ T5745] usb 9-1: Product: syz [ 2756.333229][ T5745] usb 9-1: Manufacturer: syz [ 2756.333245][ T5745] usb 9-1: SerialNumber: syz [ 2756.457281][ C1] TC_ACT_REPEAT abuse ? [ 2756.457398][ C1] TC_ACT_REPEAT abuse ? [ 2756.599174][ T5745] usb 9-1: selecting invalid altsetting 0 [ 2756.627359][ T5745] uvcvideo 9-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 2756.627465][ T5745] uvcvideo 9-1:220.0: No valid video chain found. [ 2756.660736][ T5745] usb 9-1: selecting invalid altsetting 0 [ 2756.660759][ T5745] usbtest 9-1:220.1: probe with driver usbtest failed with error -22 [ 2756.692302][ T5745] usb 9-1: USB disconnect, device number 50 [ 2757.463342][ T9887] gretap0: entered promiscuous mode [ 2757.497989][ C1] TC_ACT_REPEAT abuse ? [ 2757.498120][ C1] TC_ACT_REPEAT abuse ? [ 2758.537242][ C1] net_ratelimit: 1 callbacks suppressed [ 2758.537267][ C1] TC_ACT_REPEAT abuse ? [ 2758.537376][ C1] TC_ACT_REPEAT abuse ? [ 2758.763770][ T9919] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9945'. [ 2758.842154][ T9921] JFS: charset not found [ 2759.227537][ T9925] fuse: fd is not a fuse device [ 2759.577081][ C1] TC_ACT_REPEAT abuse ? [ 2759.577164][ C1] TC_ACT_REPEAT abuse ? [ 2759.964392][ T9934] JFS: charset not found [ 2760.617561][ C1] TC_ACT_REPEAT abuse ? [ 2760.617695][ C1] TC_ACT_REPEAT abuse ? [ 2761.657380][ C1] TC_ACT_REPEAT abuse ? [ 2761.657460][ C1] TC_ACT_REPEAT abuse ? [ 2762.476334][ T10] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 2762.627473][ T10] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 2762.631216][ T10] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2762.631275][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2762.678898][ T10] usb 9-1: config 0 descriptor?? [ 2762.697318][ C1] TC_ACT_REPEAT abuse ? [ 2762.697431][ C1] TC_ACT_REPEAT abuse ? [ 2763.130606][ T10] ath6kl: Unsupported hardware version: 0x0 [ 2763.132362][ T10] ath6kl: Failed to init ath6kl core: -22 [ 2763.132926][ T10] ath6kl_usb 9-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 2763.329492][ T9974] JFS: charset not found [ 2763.350777][ T10] usb 9-1: USB disconnect, device number 51 [ 2763.737163][ C1] TC_ACT_REPEAT abuse ? [ 2763.737279][ C1] TC_ACT_REPEAT abuse ? [ 2764.676627][ T9994] xt_hashlimit: size too large, truncated to 1048576 [ 2764.676651][ T9994] xt_hashlimit: max too large, truncated to 1048576 [ 2764.677003][ T9994] xt_hashlimit: Unknown mode mask B2F8C501, kernel too old? [ 2764.777125][ C1] TC_ACT_REPEAT abuse ? [ 2764.777255][ C1] TC_ACT_REPEAT abuse ? [ 2765.116779][T10002] JFS: charset not found [ 2765.817527][ C1] TC_ACT_REPEAT abuse ? [ 2765.817640][ C1] TC_ACT_REPEAT abuse ? [ 2766.857279][ C1] TC_ACT_REPEAT abuse ? [ 2766.857391][ C1] TC_ACT_REPEAT abuse ? [ 2767.186519][ T7353] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 2767.217398][T10026] netlink: 'syz.6.9979': attribute type 1 has an invalid length. [ 2767.303854][T10026] bond11: entered promiscuous mode [ 2767.305866][T10026] 8021q: adding VLAN 0 to HW filter on device bond11 [ 2767.320381][ T7353] usb 9-1: device descriptor read/64, error -71 [ 2767.340861][T10028] macvtap4: entered allmulticast mode [ 2767.366053][T10026] macvtap5: entered allmulticast mode [ 2767.372679][T10026] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9979'. [ 2767.411836][T10026] netlink: 128 bytes leftover after parsing attributes in process `syz.6.9979'. [ 2767.556882][ T7353] usb 9-1: new high-speed USB device number 53 using dummy_hcd [ 2767.688490][ T7353] usb 9-1: device descriptor read/64, error -71 [ 2767.798647][ T7353] usb usb9-port1: attempt power cycle [ 2767.823752][T10046] program syz.6.9986 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2767.897143][ C1] TC_ACT_REPEAT abuse ? [ 2767.897225][ C1] TC_ACT_REPEAT abuse ? [ 2768.136883][ T7353] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 2768.160878][ T7353] usb 9-1: device descriptor read/8, error -71 [ 2768.396455][ T7353] usb 9-1: new high-speed USB device number 55 using dummy_hcd [ 2768.417239][ T7353] usb 9-1: device descriptor read/8, error -71 [ 2768.526793][ T7353] usb usb9-port1: unable to enumerate USB device [ 2768.937270][ C1] TC_ACT_REPEAT abuse ? [ 2768.937394][ C1] TC_ACT_REPEAT abuse ? [ 2769.977539][ C1] TC_ACT_REPEAT abuse ? [ 2769.977628][ C1] TC_ACT_REPEAT abuse ? [ 2770.268519][T10074] SET target dimension over the limit! [ 2770.275248][T10074] netlink: 9 bytes leftover after parsing attributes in process `syz.0.9993'. [ 2770.508661][T10074] bond24: Unable to set down delay as MII monitoring is disabled [ 2770.735311][T10074] bond24 (unregistering): Released all slaves [ 2771.017660][ C1] TC_ACT_REPEAT abuse ? [ 2771.017810][ C1] TC_ACT_REPEAT abuse ? [ 2771.101339][T10089] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 2771.487497][T10085] bond0: entered allmulticast mode [ 2771.487527][T10085] bond_slave_0: entered allmulticast mode [ 2772.057061][ C1] TC_ACT_REPEAT abuse ? [ 2772.057145][ C1] TC_ACT_REPEAT abuse ? [ 2773.097066][ C1] TC_ACT_REPEAT abuse ? [ 2773.097183][ C1] TC_ACT_REPEAT abuse ? [ 2774.130994][T10130] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10008'. [ 2774.147087][ C1] net_ratelimit: 1 callbacks suppressed [ 2774.147104][ C1] TC_ACT_REPEAT abuse ? [ 2774.147198][ C1] TC_ACT_REPEAT abuse ? [ 2774.176906][T10128] loop6: detected capacity change from 0 to 1 [ 2774.182327][T10128] Dev loop6: unable to read RDB block 1 [ 2774.182376][T10128] loop6: unable to read partition table [ 2774.185313][T10128] loop6: partition table beyond EOD, truncated [ 2774.185354][T10128] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2774.339513][T10131] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 2774.701741][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 2774.701787][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 2775.177257][ C1] TC_ACT_REPEAT abuse ? [ 2775.177341][ C1] TC_ACT_REPEAT abuse ? [ 2776.213330][T10158] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10019'. [ 2776.218346][ C1] TC_ACT_REPEAT abuse ? [ 2776.218651][ C1] TC_ACT_REPEAT abuse ? [ 2776.363721][T10160] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 2776.474818][T10169] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10024'. [ 2776.474858][T10169] netlink: 'syz.0.10024': attribute type 2 has an invalid length. [ 2776.574620][T10171] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10023'. [ 2776.656621][T11027] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 2776.808162][T11027] usb 9-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 2776.810319][T11027] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2776.812373][T11027] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2776.812401][T11027] usb 9-1: Product: syz [ 2776.812412][T11027] usb 9-1: Manufacturer: syz [ 2776.812424][T11027] usb 9-1: SerialNumber: syz [ 2776.871037][T11027] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 2777.257432][ C1] TC_ACT_REPEAT abuse ? [ 2777.257560][ C1] TC_ACT_REPEAT abuse ? [ 2777.333350][T11027] gspca_mr97310a: reg read [21] error -71 [ 2777.333448][T11027] mr97310a 9-1:1.0: probe with driver mr97310a failed with error -71 [ 2777.356872][T11027] usb 9-1: USB disconnect, device number 56 [ 2777.534571][T10192] SET target dimension over the limit! [ 2777.543047][T10192] netlink: 9 bytes leftover after parsing attributes in process `syz.6.10031'. [ 2777.543753][T10192] 1·: renamed from c0· (while UP) [ 2777.568198][T10192] A link change request failed with some changes committed already. Interface c1· may have been left with an inconsistent configuration, please check. [ 2777.689507][T10192] bond12: Unable to set down delay as MII monitoring is disabled [ 2777.694332][T10192] bond12 (unregistering): Released all slaves [ 2777.720903][T10195] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 2778.297475][ C1] TC_ACT_REPEAT abuse ? [ 2778.486490][T10211] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10038'. [ 2779.001946][T10218] JFS: charset not found [ 2779.337405][ C1] net_ratelimit: 1 callbacks suppressed [ 2779.337447][ C1] TC_ACT_REPEAT abuse ? [ 2779.337584][ C1] TC_ACT_REPEAT abuse ? [ 2780.158985][T10246] SET target dimension over the limit! [ 2780.183718][T10246] netlink: 9 bytes leftover after parsing attributes in process `syz.7.10052'. [ 2780.191116][T10246] 0·: renamed from c1· (while UP) [ 2780.283683][T10246] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 2780.377883][ C1] TC_ACT_REPEAT abuse ? [ 2780.378016][ C1] TC_ACT_REPEAT abuse ? [ 2780.424293][T10256] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10053'. [ 2780.492672][T10247] bond3: Unable to set down delay as MII monitoring is disabled [ 2780.518473][T10247] bond3 (unregistering): Released all slaves [ 2780.603745][T10259] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10055'. [ 2781.417165][ C1] TC_ACT_REPEAT abuse ? [ 2781.417289][ C1] TC_ACT_REPEAT abuse ? [ 2782.168451][T10275] netlink: 28 bytes leftover after parsing attributes in process `syz.7.10060'. [ 2782.362869][T10277] netlink: 'syz.7.10061': attribute type 1 has an invalid length. [ 2782.413293][T10277] bond3: entered promiscuous mode [ 2782.415480][T10277] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2782.457278][ C1] TC_ACT_REPEAT abuse ? [ 2782.457405][ C1] TC_ACT_REPEAT abuse ? [ 2782.500994][T10277] macvtap1: entered allmulticast mode [ 2782.539562][T10277] macvtap2: entered allmulticast mode [ 2782.542366][T10277] netlink: 28 bytes leftover after parsing attributes in process `syz.7.10061'. [ 2782.568228][T10277] netlink: 128 bytes leftover after parsing attributes in process `syz.7.10061'. [ 2782.975195][T10286] netlink: 20 bytes leftover after parsing attributes in process `syz.7.10064'. [ 2783.013874][T10286] loop6: detected capacity change from 0 to 1 [ 2783.014841][T10286] Dev loop6: unable to read RDB block 1 [ 2783.014885][T10286] loop6: unable to read partition table [ 2783.015136][T10286] loop6: partition table beyond EOD, truncated [ 2783.015175][T10286] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2783.485026][T10298] JFS: charset not found [ 2783.497346][ C1] TC_ACT_REPEAT abuse ? [ 2784.461595][T10312] JFS: charset not found [ 2784.487898][ T10] usb 9-1: new high-speed USB device number 57 using dummy_hcd [ 2784.537108][ C1] net_ratelimit: 1 callbacks suppressed [ 2784.537136][ C1] TC_ACT_REPEAT abuse ? [ 2784.537244][ C1] TC_ACT_REPEAT abuse ? [ 2784.736306][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 2784.738646][ T10] usb 9-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 2784.739757][ T10] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 2784.745275][ T10] usb 9-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 2784.745295][ T10] usb 9-1: Product: syz [ 2784.745307][ T10] usb 9-1: Manufacturer: syz [ 2784.745319][ T10] usb 9-1: SerialNumber: syz [ 2784.967576][ T10] usb 9-1: Handspring Visor / Palm OS: No valid connect info available [ 2784.967597][ T10] usb 9-1: Handspring Visor / Palm OS: port 231, is for unknown use [ 2784.967611][ T10] usb 9-1: Handspring Visor / Palm OS: port 193, is for Debugger use [ 2784.967626][ T10] usb 9-1: Handspring Visor / Palm OS: Number of ports: 2 [ 2785.169310][ T10] usb 9-1: palm_os_3_probe - error -71 getting bytes available request [ 2785.169375][ T10] visor 9-1:1.0: Handspring Visor / Palm OS converter detected [ 2785.172271][ T10] usb 9-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 2785.190308][ T10] usb 9-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 2785.232941][ T10] usb 9-1: USB disconnect, device number 57 [ 2785.274408][ T10] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 2785.295028][ T10] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 2785.302656][ T10] visor 9-1:1.0: device disconnected [ 2785.577210][ C1] TC_ACT_REPEAT abuse ? [ 2785.577340][ C1] TC_ACT_REPEAT abuse ? [ 2786.093411][T10337] netlink: 20 bytes leftover after parsing attributes in process `syz.7.10081'. [ 2786.108229][T10332] loop6: detected capacity change from 0 to 1 [ 2786.109983][T10332] Dev loop6: unable to read RDB block 1 [ 2786.110016][T10332] loop6: unable to read partition table [ 2786.110248][T10332] loop6: partition table beyond EOD, truncated [ 2786.110262][T10332] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2786.189211][T10339] netlink: 'syz.4.10082': attribute type 10 has an invalid length. [ 2786.189230][T10339] netlink: 67 bytes leftover after parsing attributes in process `syz.4.10082'. [ 2786.352843][T10342] netlink: 83 bytes leftover after parsing attributes in process `syz.8.10084'. [ 2786.617728][ C1] TC_ACT_REPEAT abuse ? [ 2786.617845][ C1] TC_ACT_REPEAT abuse ? [ 2786.978936][T10347] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10085'. [ 2787.009859][T10353] JFS: charset not found [ 2787.560144][T10366] [U]  [ 2787.560165][T10366] [U] K{‘ [ 2787.560309][T10366] [U] ÄT Ž1ÊÀŠªFÌÇÄFËŠÎ`GÊJǘÜGÖÆ¯¹¬¡—ÞÈOÕÑ/ÜMCÇ [ 2787.561236][T10366] [U] TžØ–/,�~ˆÄœ­‹JÕßÊ}8ÎÊÞ'O1�Ü"™7-΂JQœK—¤WºÏQÉ5C%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚Íȼ`+³Û(·Â¿!(ÉÛÉZ'ÀTXLN»I®GÅJ– °ÜÝ­·PÅ~÷7Í!‘ÕÒ"بÎ ¾ª(È5ˆOBܤ‡ÍƒJÖ [ 2787.561459][T10366] [U] ±K\&—}6£6œXÎHX� ¥Ôµ„ÌÞ.`¸A“$Û40|϶¿�9°ØÞ¨„¯À ÏU‚Ò4�ÔÄ®VBZÃÐ}ÌWÔM”TºŽÍQŸÝΦR’ 4”ß [ 2787.562447][T10366] [U] ".H6ØÞ"ÖKÇ[›‰¤ŒJÁ4ÇØI�N¨™[Z(•„C|TË]Z{�Â3ŸC=»¨XÎԞ˅Î4¿W‰)\T‘XJØ�SH{Q;̹¢…ÖTÔÇ+‹¦÷GÍÈß®D„.Ë‚³>Yž�÷ÉWUH„FN—Ž�ÇHL]SÔ2ŠÇÙ\G%ŠO¼&Z)µК'¨PUL‚_<à ¢Ø°‰Ò®ÔÅ`Ò±TÔÁÞœÐËÞ;_Ô"(‘U{7Jœ¿2X ‘/€'ÝÙCÑÌÕIº©ÀÏH¿C�Õ³žV¦=�‘AIÇ%W¼ESž RšŸJŠÎœƒÚ”GÂ÷RÁ¹Í¡HI˜¢œAÏÌ6-ÚD�ÚV¨Á I"ØÅNƨ ÞÚASC~4Áª¹8CØ*­OO5/ßœJš~º§¡W—VK+¬®‰Œ3ÈÇY)޹M°¸ÆV¶ÌYQƽ€DTR¯OTPEM%F×ÊEJÍA5ÆÔT_-X~ ^AAÛ‚Ò˜½QÖÅ [ 2787.564357][T10366] [U] +�W‰G?]£Ó'A: »Ú)ÕÏÓ™“' B>T¢ ¡F/™÷<'ÈUÓ'–¼H§IÉ.+]EŸ.½-ɿ߿Ò%÷È>2`¶^Uß8F.Š6¤Å3ÓØ+ËA¾Â««„°G3ÓPÂÓ6:�^0À�TÉÈV÷'EÕT¼€ÛÂYC‰N¾ÞRÏ©ÞNÈPJ× ;ÆZ†ÊÔÑÛ‘8!¯È\Ù…¸AØÊ–2Á£$е™Â­WI.ÍÇ#ŠÈ/BAI¼�Ä`ÐÁ4J’ÔDÎY@ÓZ„ÜGW÷5Ë¿BÄ µÙœ NÓY"VI2ÛÌ [ 2787.564958][T10366] [U] ÔT¦_K5¸T¬YJÐÞÎ9ÐÕCÊ$BRŸLÚNUL ¶Ü9WÈÝÍ|žGÅ"ʃÆ%ÇÚ¶ÊCªØ�°¶ºQÎÙ ŸÇ3‹ÆQ¯ÔN^HP*½Ü$ µ.Î7YÓ±œ2³ [ 2787.565322][T10366] [U] ½?�©ß HÜÄ*ÙÁ”Î3Í�7ÜÉ�¾^#Q�"0~‡ ‚Ð(ÉOÏX LŒB£,'VÎÓ=‹ÝËCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷ξ™÷P#Ò2DO*Ƀ [ 2787.596385][T10366] [U] ©S¹“Gžµ²¶“˜GUÐÔD-{¸™Â|&“�®ŸŸÑ�2µ›LÞC_©œ!`¨ÍOZÖ¥¢B¶³%>ÊRѶÖWχݎSSÂH"£YA4£O.šYÙÛÄ�„RTÔ¶ŒBÚ[+/<>—¡{Q¢Ú×_²Õ�LX8ÊU„ÇØÎ{ÐZ³ÍØ�)ßÒ7?ËRR;ßC¿R HײڣÁ»¨È1Å>)©Mă‰ÏT§²Ú(ÌÇAÏ�„}9·Ú¥ÃJ*MÑœ¥Ä¡«'L¹£Q ÌDWŸÒظ=ؽ|Q¬ ÏÆ™W;5ÆÙŽª!ÑDB¸X`ɧÖ/÷ÂE�`ƦM¢XÎÂ"Ä\ [ 2787.751329][T10366] [U] {;Ž Õ¥ÂÙ˜_ˆO2«Ñ)ÎO®›.2ÐW2ʲ¨ÐYÙÃÃX_ HPϱœSªD­�¦Ø:]‚{Ë©ÔÝÆÈ½ [ 2787.751798][T10366] [U] I,Ç>ÇÓ¤ ÎÙ5�1Ñ÷^1ÒN4¯OǶÞ'0Ý?Ö’IÙ9W.Ï_.¶WŠA¼Š�Vˆ±`)ÑZ¬ÏÆC6GIÓ¹²A»¬XL[¢›½¡FÜ*ÀÑO‰W)+‡Ç'\NÆ[K@ÑËÄÜ2ÇǬ–®¡P"^`Á‰Í Ø¿ [ 2787.751866][T10366] [U] 22½“Æ©ÐÛ©X?0;3U± [ 2787.752539][T10366] [U] ÞœÕÆ�ÓSOBX 8”Wˆ4Á‘(Ð~/§¿ÍKÇUžÃÔ–OQËE+·G®-YµGY_•>V¢ÜÈË—3.HÁÓ™]Í„²2‘”)™DË, ‘Ä ÞD~×D©£¡+ÃW; A\˜FPÉÞȘ|$ºØ)�KØ�I³ÉÐÉ¿KÑYT^RÍÜÙÇ™µ“ËA=±#–Üœ ÝÍ¿ËAE©�TÅ1·Îݯ4K¯.E"RÚS|ПÀSÖ’Á:•Ù>P ™…RÐ"Z‰Ú­ÛÚÉ#P!˜KY"›}ÃÆF¿N84ܳƒÅHÞ±£O•ÈS¿™Ì«%DLWÙMÆ²Ç [ 2787.803556][T10366] [U] [ª['XN€'²÷ Á¿Ü,MR¦«/žšœÂ1D=!DŽX91BÙWÇ»R—LF…ƒÆK̤ZÕÊ# `Ì‘ LØ›§Ëœ»×B~ÅMÒÔÖ [ 2787.803815][T10366] [U] ™LÖ>�Ñ�D+ˆD¯§—®Ì"5ŽÊ��H3<ª¨ÅIR=F^”F�NÕÓÜÀ‰¿Û­VÛ÷œDÁOIOÚ:UÖ>ÖY [ 2787.804021][T10366] [U] 'B—6VÝ20³Ä·Çž¥·×ŒÏ"T8Ñ{9ÆFW��]ÔÊÄÌ©� [ 2787.818751][T10366] [U] Ù72Þ‰ÏÂÃUÞC6™ÎÜÔÏ„I]8Cª£TÛ¨QSK�YÞÎIÒÀ¹ ¿|V'ÛTV/ÙÅG•$[ 9KH`Ú"Ü‘ÚÕ}€Ñ[^=ˆÚ0Á]½Ã%ÆÌ‚T“Šž¹ØFÌ_VÖ4C¸ÒÅ [ 2787.818867][T10366] [U] ¹ EC� [ 2787.888551][T10366] [U] �—”|‚ÊÌ<ÄÎ:^Ü3$7NK~Ø-™@÷¦?Ÿ–/MTL·�Û¾©IˆWȬ@G~TØ{ÊÜP¿+Æ$ªJP|µ ŽÇIÛRIÓ�PMÐ Õ·YÓ Ú”8ÌTÉÐÞVžÙ߯Ë,ÎLÂ,Õ [ 2787.921311][T10365] [U] ˆKÌÚÛÕ‰)0ÄÄÝ~ܳʪÁIP'ÍFÓÒœZÚÞR¬™ß @BÓ]Â5ÝÊ{­©Ê¼Ô'À8ÅÆ¥F‡¹UTQUDÇ©¤K;7ͪ0C[„ÃY–¼ÈYC¦¶»Ø°Mª™LÒ8’T…ÍšÎ5³ÝÝRX�™¶ÐWÍ X¤²ÓOQHVI'8œ¥Î…Lµ [ 2788.697717][ C1] TC_ACT_REPEAT abuse ? [ 2788.697844][ C1] TC_ACT_REPEAT abuse ? [ 2788.771334][T10383] netlink: 'syz.0.10098': attribute type 10 has an invalid length. [ 2788.771352][T10383] netlink: 67 bytes leftover after parsing attributes in process `syz.0.10098'. [ 2789.203264][T10393] netlink: 20 bytes leftover after parsing attributes in process `syz.7.10102'. [ 2789.205590][T10391] loop6: detected capacity change from 0 to 1 [ 2789.206413][T10391] Dev loop6: unable to read RDB block 1 [ 2789.206456][T10391] loop6: unable to read partition table [ 2789.207093][T10391] loop6: partition table beyond EOD, truncated [ 2789.207144][T10391] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2789.737711][ C1] TC_ACT_REPEAT abuse ? [ 2789.737829][ C1] TC_ACT_REPEAT abuse ? [ 2789.836281][ T5745] usb 9-1: new full-speed USB device number 58 using dummy_hcd [ 2789.945390][ T31] kauditd_printk_skb: 61 callbacks suppressed [ 2789.945418][ T31] audit: type=1326 audit(1790371216.174:6842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10413 comm="syz.6.10110" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89dc39e159 code=0x7ffc0000 [ 2789.985777][ T31] audit: type=1326 audit(1790371216.214:6843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10413 comm="syz.6.10110" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89dc39e159 code=0x7ffc0000 [ 2789.985836][ T31] audit: type=1326 audit(1790371216.214:6844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10413 comm="syz.6.10110" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f89dc39e159 code=0x7ffc0000 [ 2789.999586][ T31] audit: type=1326 audit(1790371216.224:6845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10413 comm="syz.6.10110" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89dc39e159 code=0x7ffc0000 [ 2789.999762][ T31] audit: type=1326 audit(1790371216.224:6846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10413 comm="syz.6.10110" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89dc39e159 code=0x7ffc0000 [ 2790.003063][ T31] audit: type=1326 audit(1790371216.224:6847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10413 comm="syz.6.10110" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f89dc39e159 code=0x7ffc0000 [ 2790.003200][ T31] audit: type=1326 audit(1790371216.224:6848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10413 comm="syz.6.10110" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89dc39e159 code=0x7ffc0000 [ 2790.027390][ T5745] usb 9-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 2790.034770][ T31] audit: type=1326 audit(1790371216.224:6849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10413 comm="syz.6.10110" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89dc39e159 code=0x7ffc0000 [ 2790.034931][ T31] audit: type=1326 audit(1790371216.244:6850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10413 comm="syz.6.10110" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f89dc39e159 code=0x7ffc0000 [ 2790.035054][ T31] audit: type=1326 audit(1790371216.244:6851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10413 comm="syz.6.10110" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89dc39e159 code=0x7ffc0000 [ 2790.094042][ T5745] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2790.094122][ T5745] usb 9-1: Product: syz [ 2790.094166][ T5745] usb 9-1: Manufacturer: syz [ 2790.094208][ T5745] usb 9-1: SerialNumber: syz [ 2790.251216][ T5745] usb 9-1: config 0 descriptor?? [ 2790.271232][ T5745] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 2790.310902][T10415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10108'. [ 2790.479809][ T5745] gspca_m5602: Failed to find a sensor [ 2790.479822][ T5745] ALi m5602 9-1:0.0: ALi m5602 webcam failed [ 2790.516042][ T5745] usb 9-1: USB disconnect, device number 58 [ 2790.778243][ C1] TC_ACT_REPEAT abuse ? [ 2790.778398][ C1] TC_ACT_REPEAT abuse ? [ 2791.002395][ T5745] usb 9-1: new high-speed USB device number 59 using dummy_hcd [ 2791.156423][ T5745] usb 9-1: Using ep0 maxpacket: 8 [ 2791.158125][ T5745] usb 9-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 2791.162128][ T5745] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2791.162155][ T5745] usb 9-1: Product: syz [ 2791.162170][ T5745] usb 9-1: Manufacturer: syz [ 2791.162187][ T5745] usb 9-1: SerialNumber: syz [ 2791.194998][ T5745] usb 9-1: config 0 descriptor?? [ 2791.218725][ T5745] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 2791.618158][ T5745] gspca_m5602: Failed to find a sensor [ 2791.618171][ T5745] ALi m5602 9-1:0.0: ALi m5602 webcam failed [ 2791.623999][ T5745] usb 9-1: USB disconnect, device number 59 [ 2791.764787][T10439] netlink: 'syz.6.10117': attribute type 10 has an invalid length. [ 2791.764806][T10439] netlink: 67 bytes leftover after parsing attributes in process `syz.6.10117'. [ 2791.817500][ C1] TC_ACT_REPEAT abuse ? [ 2791.817646][ C1] TC_ACT_REPEAT abuse ? [ 2792.427728][ T7353] usb 9-1: new high-speed USB device number 60 using dummy_hcd [ 2792.457943][T10444] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10119'. [ 2792.579724][ T7353] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 2792.581207][ T7353] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2792.584017][ T7353] usb 9-1: config 0 descriptor?? [ 2792.758738][T10452] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10122'. [ 2792.763344][T10451] loop6: detected capacity change from 0 to 1 [ 2792.765465][T10451] Dev loop6: unable to read RDB block 1 [ 2792.765512][T10451] loop6: unable to read partition table [ 2792.765780][T10451] loop6: partition table beyond EOD, truncated [ 2792.792317][T10451] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2792.828848][ T7353] udl 9-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 2792.857103][ C1] TC_ACT_REPEAT abuse ? [ 2792.857230][ C1] TC_ACT_REPEAT abuse ? [ 2793.030332][ T7353] [drm:udl_init] *ERROR* Selecting channel failed [ 2793.063984][ T7353] [drm] Initialized udl 0.0.1 for 9-1:0.0 on minor 1 [ 2793.065801][ T7353] [drm] Initialized udl on minor 1 [ 2793.101668][ T7353] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2793.104225][ T7353] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 2793.124081][ T7354] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2793.136635][ T7354] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2793.136872][ T7354] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 2793.168768][ T7353] usb 9-1: USB disconnect, device number 60 [ 2793.897340][ C1] TC_ACT_REPEAT abuse ? [ 2793.897439][ C1] TC_ACT_REPEAT abuse ? [ 2794.875508][T10485] netlink: 'syz.0.10132': attribute type 10 has an invalid length. [ 2794.875527][T10485] netlink: 67 bytes leftover after parsing attributes in process `syz.0.10132'. [ 2794.937389][ C1] TC_ACT_REPEAT abuse ? [ 2794.937519][ C1] TC_ACT_REPEAT abuse ? [ 2795.655963][T10505] netlink: 'syz.4.10140': attribute type 1 has an invalid length. [ 2795.655982][T10505] netlink: 'syz.4.10140': attribute type 2 has an invalid length. [ 2795.919770][T10510] netlink: 44 bytes leftover after parsing attributes in process `syz.0.10141'. [ 2795.936698][T10511] netlink: 'syz.4.10143': attribute type 1 has an invalid length. [ 2795.936766][T10511] netlink: 'syz.4.10143': attribute type 2 has an invalid length. [ 2795.977158][ C1] TC_ACT_REPEAT abuse ? [ 2795.977279][ C1] TC_ACT_REPEAT abuse ? [ 2796.260721][T10521] SET target dimension over the limit! [ 2796.335341][T10525] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 2796.785656][T10533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10150'. [ 2797.017845][ C1] TC_ACT_REPEAT abuse ? [ 2797.017959][ C1] TC_ACT_REPEAT abuse ? [ 2797.052013][T10536] netlink: 'syz.8.10151': attribute type 10 has an invalid length. [ 2797.052056][T10536] netlink: 67 bytes leftover after parsing attributes in process `syz.8.10151'. [ 2798.057206][ C1] TC_ACT_REPEAT abuse ? [ 2798.057327][ C1] TC_ACT_REPEAT abuse ? [ 2798.120143][T10549] JFS: charset not found [ 2798.595092][T10564] SET target dimension over the limit! [ 2798.646619][T10564] netlink: 9 bytes leftover after parsing attributes in process `syz.6.10158'. [ 2798.648386][T10564] 0·: renamed from c1· (while UP) [ 2798.889500][T10564] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 2799.097770][ C1] TC_ACT_REPEAT abuse ? [ 2799.161780][T10574] netlink: 20 bytes leftover after parsing attributes in process `syz.8.10160'. [ 2799.183749][T10573] loop6: detected capacity change from 0 to 1 [ 2799.185449][T10573] Dev loop6: unable to read RDB block 1 [ 2799.185481][T10573] loop6: unable to read partition table [ 2799.185629][T10573] loop6: partition table beyond EOD, truncated [ 2799.185643][T10573] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2799.224027][T10565] bond12: Unable to set down delay as MII monitoring is disabled [ 2799.275418][T10565] bond12 (unregistering): Released all slaves [ 2800.137016][ C1] net_ratelimit: 1 callbacks suppressed [ 2800.137035][ C1] TC_ACT_REPEAT abuse ? [ 2800.137125][ C1] TC_ACT_REPEAT abuse ? [ 2800.675969][T10590] netlink: 83 bytes leftover after parsing attributes in process `syz.7.10166'. [ 2801.161632][T10599] ip_tables: iptables: counters copy to user failed while replacing table [ 2801.177675][ C1] TC_ACT_REPEAT abuse ? [ 2801.177856][ C1] TC_ACT_REPEAT abuse ? [ 2801.220733][T10602] netlink: 'syz.8.10172': attribute type 1 has an invalid length. [ 2801.320348][T10602] bond23: entered promiscuous mode [ 2801.323394][T10602] 8021q: adding VLAN 0 to HW filter on device bond23 [ 2801.404847][T10605] macvtap12: entered allmulticast mode [ 2801.442577][T10605] netlink: 128 bytes leftover after parsing attributes in process `syz.8.10172'. [ 2801.483241][T10602] macvtap13: entered allmulticast mode [ 2802.217556][ C1] TC_ACT_REPEAT abuse ? [ 2802.217639][ C1] TC_ACT_REPEAT abuse ? [ 2802.592199][T10628] netlink: 20 bytes leftover after parsing attributes in process `syz.8.10179'. [ 2802.628281][T10626] loop6: detected capacity change from 0 to 1 [ 2802.630874][T10626] Dev loop6: unable to read RDB block 1 [ 2802.630906][T10626] loop6: unable to read partition table [ 2802.631075][T10626] loop6: partition table beyond EOD, truncated [ 2802.631089][T10626] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2802.871058][T10630] program syz.0.10180 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2803.257188][ C1] TC_ACT_REPEAT abuse ? [ 2803.257334][ C1] TC_ACT_REPEAT abuse ? [ 2804.297437][ C1] TC_ACT_REPEAT abuse ? [ 2804.840086][T10646] netlink: 24 bytes leftover after parsing attributes in process `syz.7.10186'. [ 2804.888026][ T10] usb 9-1: new high-speed USB device number 61 using dummy_hcd [ 2805.040759][ T10] usb 9-1: Using ep0 maxpacket: 16 [ 2805.043042][ T10] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2805.048444][ T10] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 2805.048588][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2805.116634][ T10] usb 9-1: config 0 descriptor?? [ 2805.146518][ T10] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 2805.337718][ C1] net_ratelimit: 1 callbacks suppressed [ 2805.337742][ C1] TC_ACT_REPEAT abuse ? [ 2805.337859][ C1] TC_ACT_REPEAT abuse ? [ 2805.531419][ T10] usb 9-1: USB disconnect, device number 61 [ 2806.081849][T10661] fuse: fd is not a fuse device [ 2806.377342][ C1] TC_ACT_REPEAT abuse ? [ 2806.377480][ C1] TC_ACT_REPEAT abuse ? [ 2807.417561][ C1] TC_ACT_REPEAT abuse ? [ 2807.417648][ C1] TC_ACT_REPEAT abuse ? [ 2807.463858][T10671] netlink: 20 bytes leftover after parsing attributes in process `syz.6.10195'. [ 2807.480763][T10671] loop6: detected capacity change from 0 to 1 [ 2807.497369][T10671] Dev loop6: unable to read RDB block 1 [ 2807.497419][T10671] loop6: unable to read partition table [ 2807.497633][T10671] loop6: partition table beyond EOD, truncated [ 2807.497654][T10671] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2807.617238][T10674] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 2808.016423][ T7353] usb 9-1: new high-speed USB device number 62 using dummy_hcd [ 2808.168094][ T7353] usb 9-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 2808.171979][ T7353] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2808.172023][ T7353] usb 9-1: Product: syz [ 2808.172041][ T7353] usb 9-1: Manufacturer: syz [ 2808.172059][ T7353] usb 9-1: SerialNumber: syz [ 2808.214550][ T7353] usb 9-1: config 0 descriptor?? [ 2808.457324][ C1] TC_ACT_REPEAT abuse ? [ 2808.457426][ C1] TC_ACT_REPEAT abuse ? [ 2808.652011][ T7353] usb 9-1: Firmware: major: 171, minor: 0, hardware type: ATUSB (0) [ 2808.855311][ T7353] usb 9-1: failed to fetch extended address, random address set [ 2808.972999][ T7353] usb 9-1: USB disconnect, device number 62 [ 2809.396532][T10696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2809.497067][ C1] TC_ACT_REPEAT abuse ? [ 2809.497165][ C1] TC_ACT_REPEAT abuse ? [ 2810.316382][ T7353] usb 9-1: new high-speed USB device number 63 using dummy_hcd [ 2810.466991][ T7353] usb 9-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 2810.467983][ T7353] usb 9-1: config index 0 descriptor too short (expected 1572, got 36) [ 2810.468003][ T7353] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2810.470189][ T7353] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2810.470209][ T7353] usb 9-1: Product: syz [ 2810.470220][ T7353] usb 9-1: Manufacturer: syz [ 2810.470232][ T7353] usb 9-1: SerialNumber: syz [ 2810.537241][ C1] TC_ACT_REPEAT abuse ? [ 2810.537321][ C1] TC_ACT_REPEAT abuse ? [ 2810.539252][ T7353] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/input/input129 [ 2810.767454][ T7353] bcm5974 9-1:1.0: could not read from device [ 2810.830707][ T4970] bcm5974 9-1:1.0: could not read from device [ 2810.850451][ T7353] input: failed to attach handler mousedev to device input129, error: -5 [ 2810.851935][ T4970] bcm5974 9-1:1.0: could not read from device [ 2810.901973][ T4970] bcm5974 9-1:1.0: could not read from device [ 2810.908897][ T7353] usb 9-1: USB disconnect, device number 63 [ 2811.577644][ C1] TC_ACT_REPEAT abuse ? [ 2811.577729][ C1] TC_ACT_REPEAT abuse ? [ 2811.648538][T10712] netlink: 20 bytes leftover after parsing attributes in process `syz.8.10210'. [ 2811.659431][T10711] loop6: detected capacity change from 0 to 1 [ 2811.662734][T10711] Dev loop6: unable to read RDB block 1 [ 2811.662884][T10711] loop6: unable to read partition table [ 2811.663532][T10711] loop6: partition table beyond EOD, truncated [ 2811.663587][T10711] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2811.735859][T10710] netlink: 'syz.0.10203': attribute type 8 has an invalid length. [ 2812.606977][T11027] usb 9-1: new high-speed USB device number 64 using dummy_hcd [ 2812.619059][ C1] TC_ACT_REPEAT abuse ? [ 2812.619444][ C1] TC_ACT_REPEAT abuse ? [ 2812.757485][T11027] usb 9-1: Using ep0 maxpacket: 32 [ 2812.758282][T11027] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2812.759456][T11027] usb 9-1: config 0 has an invalid interface number: 51 but max is 0 [ 2812.759476][T11027] usb 9-1: config 0 has no interface number 0 [ 2812.761581][T11027] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2812.761600][T11027] usb 9-1: Product: syz [ 2812.761612][T11027] usb 9-1: Manufacturer: syz [ 2812.761623][T11027] usb 9-1: SerialNumber: syz [ 2812.764335][T11027] usb 9-1: config 0 descriptor?? [ 2812.825315][T11027] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2812.971826][T11027] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2812.975902][T11027] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2813.171548][T10721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2813.172315][T10721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2813.379066][T10728] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 2813.479922][ C1] usb 9-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2813.480534][ T10] usb 9-1: USB disconnect, device number 64 [ 2813.503865][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2813.528820][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2813.529590][ T10] quatech2 9-1:0.51: device disconnected [ 2813.657144][ C1] TC_ACT_REPEAT abuse ? [ 2813.657287][ C1] TC_ACT_REPEAT abuse ? [ 2814.426409][T11027] usb 9-1: new high-speed USB device number 65 using dummy_hcd [ 2814.577181][T11027] usb 9-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 2814.578590][T11027] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2814.578612][T11027] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 2814.578641][T11027] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2814.630124][T11027] idmouse 9-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 2814.696967][ C1] TC_ACT_REPEAT abuse ? [ 2814.697058][ C1] TC_ACT_REPEAT abuse ? [ 2814.894825][T10758] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10231'. [ 2815.737372][ C1] TC_ACT_REPEAT abuse ? [ 2815.737488][ C1] TC_ACT_REPEAT abuse ? [ 2816.231058][ T10] usb 9-1: USB disconnect, device number 65 [ 2816.234719][ T10] idmouse 9-1:1.0: disconnected [ 2816.777358][ C1] TC_ACT_REPEAT abuse ? [ 2816.777480][ C1] TC_ACT_REPEAT abuse ? [ 2817.661599][T10794] JFS: charset not found [ 2817.817137][ C1] TC_ACT_REPEAT abuse ? [ 2817.817219][ C1] TC_ACT_REPEAT abuse ? [ 2818.142624][T10816] netlink: 83 bytes leftover after parsing attributes in process `syz.7.10250'. [ 2818.859310][ C1] TC_ACT_REPEAT abuse ? [ 2818.859436][ C1] TC_ACT_REPEAT abuse ? [ 2818.893207][T11027] wacom 0003:056A:003F.0035: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 2819.017214][T10829] fido_id[10829]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2819.284836][T10835] JFS: charset not found [ 2819.897449][ C1] TC_ACT_REPEAT abuse ? [ 2819.897569][ C1] TC_ACT_REPEAT abuse ? [ 2819.948427][T10850] netlink: 20 bytes leftover after parsing attributes in process `syz.7.10264'. [ 2819.953657][T10849] loop6: detected capacity change from 0 to 1 [ 2819.964037][T10849] Dev loop6: unable to read RDB block 1 [ 2819.964158][T10849] loop6: unable to read partition table [ 2819.965915][T10849] loop6: partition table beyond EOD, truncated [ 2819.965951][T10849] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2820.047169][ T31] audit: type=1326 audit(1790371246.284:6852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10851 comm="syz.4.10265" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f2d9e159 code=0x7ffc0000 [ 2820.048804][ T31] audit: type=1326 audit(1790371246.284:6853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10851 comm="syz.4.10265" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f2d9e159 code=0x7ffc0000 [ 2820.049886][ T31] audit: type=1326 audit(1790371246.284:6854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10851 comm="syz.4.10265" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe0f2d9e159 code=0x7ffc0000 [ 2820.050376][ T31] audit: type=1326 audit(1790371246.284:6855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10851 comm="syz.4.10265" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f2d9e159 code=0x7ffc0000 [ 2820.050518][ T31] audit: type=1326 audit(1790371246.284:6856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10851 comm="syz.4.10265" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f2d9e159 code=0x7ffc0000 [ 2820.051133][ T31] audit: type=1326 audit(1790371246.284:6857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10851 comm="syz.4.10265" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fe0f2d9e159 code=0x7ffc0000 [ 2820.053754][ T31] audit: type=1326 audit(1790371246.284:6858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10851 comm="syz.4.10265" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f2d9e159 code=0x7ffc0000 [ 2820.054591][ T31] audit: type=1326 audit(1790371246.284:6859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10851 comm="syz.4.10265" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7fe0f2d9e159 code=0x7ffc0000 [ 2820.054778][ T31] audit: type=1326 audit(1790371246.284:6860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10851 comm="syz.4.10265" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f2d9e159 code=0x7ffc0000 [ 2820.054955][ T31] audit: type=1326 audit(1790371246.284:6861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10851 comm="syz.4.10265" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f2d9e159 code=0x7ffc0000 [ 2820.539751][T10855] netlink: 83 bytes leftover after parsing attributes in process `syz.4.10266'. [ 2820.935951][T10863] netlink: 'syz.6.10269': attribute type 10 has an invalid length. [ 2820.935971][T10863] netlink: 67 bytes leftover after parsing attributes in process `syz.6.10269'. [ 2820.938031][ C1] TC_ACT_REPEAT abuse ? [ 2820.938176][ C1] TC_ACT_REPEAT abuse ? [ 2821.213742][T10872] JFS: charset not found [ 2821.474105][T10876] JFS: charset not found [ 2821.977308][ C1] TC_ACT_REPEAT abuse ? [ 2821.977425][ C1] TC_ACT_REPEAT abuse ? [ 2822.894873][T10893] SET target dimension over the limit! [ 2822.925337][T10893] netlink: 9 bytes leftover after parsing attributes in process `syz.4.10277'. [ 2822.938266][T10893] 0·: renamed from c1· (while UP) [ 2823.017156][ C1] TC_ACT_REPEAT abuse ? [ 2823.017239][ C1] TC_ACT_REPEAT abuse ? [ 2823.059401][T10893] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 2823.610426][T10907] netlink: 20 bytes leftover after parsing attributes in process `syz.7.10281'. [ 2823.621152][T10905] loop6: detected capacity change from 0 to 1 [ 2823.634768][T10905] Dev loop6: unable to read RDB block 1 [ 2823.634803][T10905] loop6: unable to read partition table [ 2823.644716][T10905] loop6: partition table beyond EOD, truncated [ 2823.644819][T10905] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2823.740416][T10893] bond22: Unable to set down delay as MII monitoring is disabled [ 2823.760043][T10893] bond22 (unregistering): Released all slaves [ 2823.800395][T10908] netlink: 83 bytes leftover after parsing attributes in process `syz.0.10282'. [ 2824.057068][ C1] TC_ACT_REPEAT abuse ? [ 2824.057219][ C1] TC_ACT_REPEAT abuse ? [ 2824.368297][ T4985] Dev loop6: unable to read RDB block 1 [ 2824.368346][ T4985] loop6: unable to read partition table [ 2824.368574][ T4985] loop6: partition table beyond EOD, truncated [ 2825.074288][T10928] kvm_pr_unimpl_wrmsr: 15456 callbacks suppressed [ 2825.074314][T10928] kvm [10927]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010000) = 0xbf [ 2825.097121][ C1] TC_ACT_REPEAT abuse ? [ 2825.205846][T10930] JFS: charset not found [ 2825.344241][T10935] netlink: 'syz.4.10290': attribute type 1 has an invalid length. [ 2825.428145][T10935] bond22: entered promiscuous mode [ 2825.429012][T10935] 8021q: adding VLAN 0 to HW filter on device bond22 [ 2825.449431][T10937] macvtap4: entered allmulticast mode [ 2825.449999][T10939] bridge0: port 1(bond0) entered blocking state [ 2825.450139][T10939] bridge0: port 1(bond0) entered disabled state [ 2825.492936][T10935] macvtap5: entered allmulticast mode [ 2825.494542][T10935] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10290'. [ 2825.507056][T10935] netlink: 128 bytes leftover after parsing attributes in process `syz.4.10290'. [ 2825.853940][T10949] netlink: 83 bytes leftover after parsing attributes in process `syz.6.10294'. [ 2826.137293][ C1] net_ratelimit: 1 callbacks suppressed [ 2826.137319][ C1] TC_ACT_REPEAT abuse ? [ 2826.137428][ C1] TC_ACT_REPEAT abuse ? [ 2827.177276][ C1] TC_ACT_REPEAT abuse ? [ 2827.177356][ C1] TC_ACT_REPEAT abuse ? [ 2827.600525][T10972] netlink: 'syz.0.10304': attribute type 1 has an invalid length. [ 2827.754861][T10972] bond24: entered promiscuous mode [ 2827.764460][T10972] 8021q: adding VLAN 0 to HW filter on device bond24 [ 2827.797967][T10975] macvtap17: entered allmulticast mode [ 2827.827270][T10979] macvtap18: entered allmulticast mode [ 2827.884916][T10975] netlink: 128 bytes leftover after parsing attributes in process `syz.0.10304'. [ 2827.956365][ T7353] usb 9-1: new high-speed USB device number 66 using dummy_hcd [ 2828.107058][ T7353] usb 9-1: Using ep0 maxpacket: 16 [ 2828.111030][ T7353] usb 9-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 2828.112286][ T7353] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2828.112337][ T7353] usb 9-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2828.112367][ T7353] usb 9-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2828.112390][ T7353] usb 9-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 2828.112417][ T7353] usb 9-1: config 0 interface 0 has no altsetting 0 [ 2828.112469][ T7353] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2828.115745][ T7353] usb 9-1: config 0 descriptor?? [ 2828.217112][ C1] TC_ACT_REPEAT abuse ? [ 2828.217240][ C1] TC_ACT_REPEAT abuse ? [ 2828.253302][T10986] JFS: charset not found [ 2828.266523][T10985] loop8: detected capacity change from 0 to 7 [ 2828.271599][T10985] Dev loop8: unable to read RDB block 7 [ 2828.275103][T10985] loop8: unable to read partition table [ 2828.292538][T10985] loop8: partition table beyond EOD, truncated [ 2828.292606][T10985] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 2828.634344][ T7353] logitech-djreceiver 0003:046D:C53A.0036: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.8-1/input0 [ 2828.810541][ T10] usb 9-1: USB disconnect, device number 66 [ 2828.972174][T10990] fido_id[10990]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 2829.257801][ C1] TC_ACT_REPEAT abuse ? [ 2829.257885][ C1] TC_ACT_REPEAT abuse ? [ 2829.594648][ T31] audit: type=1326 audit(1790371255.824:6862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11004 comm="syz.0.10312" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f368119e159 code=0x7ffc0000 [ 2829.629560][ T31] audit: type=1326 audit(1790371255.864:6863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11004 comm="syz.0.10312" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f368119e159 code=0x7ffc0000 [ 2829.634556][ T31] audit: type=1326 audit(1790371255.864:6864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11004 comm="syz.0.10312" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f368119e159 code=0x7ffc0000 [ 2829.634598][ T31] audit: type=1326 audit(1790371255.864:6865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11004 comm="syz.0.10312" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f368119e159 code=0x7ffc0000 [ 2829.635393][ T31] audit: type=1326 audit(1790371255.864:6866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11004 comm="syz.0.10312" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f368119e159 code=0x7ffc0000 [ 2829.635470][ T31] audit: type=1326 audit(1790371255.864:6867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11004 comm="syz.0.10312" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f368119e159 code=0x7ffc0000 [ 2829.635514][ T31] audit: type=1326 audit(1790371255.864:6868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11004 comm="syz.0.10312" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f368119e159 code=0x7ffc0000 [ 2829.662478][ T31] audit: type=1326 audit(1790371255.874:6869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11004 comm="syz.0.10312" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f368119e159 code=0x7ffc0000 [ 2829.665095][ T31] audit: type=1326 audit(1790371255.874:6870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11004 comm="syz.0.10312" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f368119e159 code=0x7ffc0000 [ 2829.665140][ T31] audit: type=1326 audit(1790371255.894:6871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11004 comm="syz.0.10312" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f368119e159 code=0x7ffc0000 [ 2830.296937][ C1] TC_ACT_REPEAT abuse ? [ 2830.297016][ C1] TC_ACT_REPEAT abuse ? [ 2831.258495][T11038] netlink: 44 bytes leftover after parsing attributes in process `syz.0.10320'. [ 2831.337209][ C1] TC_ACT_REPEAT abuse ? [ 2831.337294][ C1] TC_ACT_REPEAT abuse ? [ 2831.963845][T11045] bond_slave_1: Caught tx_queue_len zero misconfig [ 2832.376945][ C1] TC_ACT_REPEAT abuse ? [ 2832.377059][ C1] TC_ACT_REPEAT abuse ? [ 2832.470368][T11047] macvlan1: entered promiscuous mode [ 2832.513812][T11047] macvlan1: left promiscuous mode [ 2832.941388][T11059] JFS: charset not found [ 2833.213013][T11065] loop4: detected capacity change from 0 to 2640 [ 2833.213564][T11065] Buffer I/O error on dev loop4, logical block 0, async page read [ 2833.213611][T11065] Buffer I/O error on dev loop4, logical block 0, async page read [ 2833.213649][T11065] Buffer I/O error on dev loop4, logical block 0, async page read [ 2833.213685][T11065] Buffer I/O error on dev loop4, logical block 0, async page read [ 2833.213899][T11065] Buffer I/O error on dev loop4, logical block 0, async page read [ 2833.213962][T11065] Buffer I/O error on dev loop4, logical block 0, async page read [ 2833.213998][T11065] Buffer I/O error on dev loop4, logical block 0, async page read [ 2833.214021][T11065] Buffer I/O error on dev loop4, logical block 0, async page read [ 2833.214033][T11065] ldm_validate_partition_table(): Disk read failed. [ 2833.214055][T11065] Buffer I/O error on dev loop4, logical block 0, async page read [ 2833.214078][T11065] Buffer I/O error on dev loop4, logical block 0, async page read [ 2833.214115][T11065] Dev loop4: unable to read RDB block 0 [ 2833.214255][T11065] loop4: unable to read partition table [ 2833.214416][T11065] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 2833.417357][ C1] TC_ACT_REPEAT abuse ? [ 2833.417489][ C1] TC_ACT_REPEAT abuse ? [ 2834.383702][T11073] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10331'. [ 2834.457409][ C1] TC_ACT_REPEAT abuse ? [ 2834.457521][ C1] TC_ACT_REPEAT abuse ? [ 2835.497315][ C1] TC_ACT_REPEAT abuse ? [ 2835.497400][ C1] TC_ACT_REPEAT abuse ? [ 2835.997155][T11093] loop5: detected capacity change from 0 to 7 [ 2836.003183][T11093] Dev loop5: unable to read RDB block 7 [ 2836.003221][T11093] loop5: AHDI p1 p2 p3 [ 2836.003244][T11093] loop5: partition table partially beyond EOD, truncated [ 2836.006778][T11093] loop5: p1 size 16318467 extends beyond EOD, truncated [ 2836.019755][T11093] loop5: p2 start 167772160 is beyond EOD, truncated [ 2836.141003][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 2836.141064][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 2836.291955][T20851] udevd[20851]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 2836.537350][ C1] TC_ACT_REPEAT abuse ? [ 2836.537469][ C1] TC_ACT_REPEAT abuse ? [ 2837.004136][T11114] netlink: 'syz.8.10343': attribute type 10 has an invalid length. [ 2837.004156][T11114] netlink: 67 bytes leftover after parsing attributes in process `syz.8.10343'. [ 2837.577071][ C1] TC_ACT_REPEAT abuse ? [ 2837.577151][ C1] TC_ACT_REPEAT abuse ? [ 2837.651736][T11125] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10347'. [ 2838.097302][T11130] netlink: 'syz.7.10350': attribute type 1 has an invalid length. [ 2838.224280][T11130] bond4: entered promiscuous mode [ 2838.224783][T11130] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2838.301412][T11134] macvtap3: entered allmulticast mode [ 2838.324581][T11134] netlink: 28 bytes leftover after parsing attributes in process `syz.7.10350'. [ 2838.353551][T11130] macvtap4: entered allmulticast mode [ 2838.370336][T11130] netlink: 128 bytes leftover after parsing attributes in process `syz.7.10350'. [ 2838.473776][T11139] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 2838.617289][ C1] TC_ACT_REPEAT abuse ? [ 2838.617406][ C1] TC_ACT_REPEAT abuse ? [ 2838.920015][T11153] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10353'. [ 2839.657182][ C1] TC_ACT_REPEAT abuse ? [ 2839.657304][ C1] TC_ACT_REPEAT abuse ? [ 2840.217384][T11170] syzkaller1: entered promiscuous mode [ 2840.217411][T11170] syzkaller1: entered allmulticast mode [ 2840.503137][T11178] netlink: 20 bytes leftover after parsing attributes in process `syz.6.10363'. [ 2840.697363][ C1] TC_ACT_REPEAT abuse ? [ 2840.711380][T11177] loop6: detected capacity change from 0 to 1 [ 2840.728558][T11177] Dev loop6: unable to read RDB block 1 [ 2840.728608][T11177] loop6: unable to read partition table [ 2840.728857][T11177] loop6: partition table beyond EOD, truncated [ 2840.728906][T11177] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2840.959386][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 2840.959408][ T31] audit: type=1326 audit(1790371267.194:6874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11181 comm="syz.8.10366" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe5c59e159 code=0x7ffc0000 [ 2840.961487][ T31] audit: type=1326 audit(1790371267.194:6875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11181 comm="syz.8.10366" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe5c59e159 code=0x7ffc0000 [ 2840.962731][ T31] audit: type=1326 audit(1790371267.194:6876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11181 comm="syz.8.10366" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fbe5c59e159 code=0x7ffc0000 [ 2840.964387][ T31] audit: type=1326 audit(1790371267.194:6877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11181 comm="syz.8.10366" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe5c59e159 code=0x7ffc0000 [ 2840.964444][ T31] audit: type=1326 audit(1790371267.194:6878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11181 comm="syz.8.10366" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe5c59e159 code=0x7ffc0000 [ 2840.964494][ T31] audit: type=1326 audit(1790371267.194:6879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11181 comm="syz.8.10366" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbe5c59e159 code=0x7ffc0000 [ 2840.964541][ T31] audit: type=1326 audit(1790371267.194:6880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11181 comm="syz.8.10366" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe5c59e159 code=0x7ffc0000 [ 2840.964588][ T31] audit: type=1326 audit(1790371267.194:6881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11181 comm="syz.8.10366" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbe5c59e159 code=0x7ffc0000 [ 2840.964637][ T31] audit: type=1326 audit(1790371267.194:6882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11181 comm="syz.8.10366" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe5c59e159 code=0x7ffc0000 [ 2840.964687][ T31] audit: type=1326 audit(1790371267.194:6883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11181 comm="syz.8.10366" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe5c59e159 code=0x7ffc0000 [ 2841.737418][ C1] net_ratelimit: 1 callbacks suppressed [ 2841.737436][ C1] TC_ACT_REPEAT abuse ? [ 2841.737511][ C1] TC_ACT_REPEAT abuse ? [ 2841.769864][T11027] usb 9-1: new high-speed USB device number 67 using dummy_hcd [ 2841.926459][T11027] usb 9-1: Using ep0 maxpacket: 16 [ 2841.927521][T11027] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2841.928788][T11027] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2841.928827][T11027] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2841.928851][T11027] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2841.928895][T11027] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2842.022605][T11027] usb 9-1: config 0 descriptor?? [ 2842.778155][ C1] TC_ACT_REPEAT abuse ? [ 2842.778283][ C1] TC_ACT_REPEAT abuse ? [ 2843.817600][ C1] TC_ACT_REPEAT abuse ? [ 2843.817735][ C1] TC_ACT_REPEAT abuse ? [ 2844.351379][T11214] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2844.614020][T11218] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10378'. [ 2844.664960][T11027] usbhid 9-1:0.0: can't add hid device: -71 [ 2844.665071][T11027] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 2844.691550][T11027] usb 9-1: USB disconnect, device number 67 [ 2844.857542][ C1] TC_ACT_REPEAT abuse ? [ 2844.857676][ C1] TC_ACT_REPEAT abuse ? [ 2844.929182][T11228] netlink: 20 bytes leftover after parsing attributes in process `syz.7.10381'. [ 2844.932996][T11228] loop6: detected capacity change from 0 to 1 [ 2844.934832][T11228] Dev loop6: unable to read RDB block 1 [ 2844.934878][T11228] loop6: unable to read partition table [ 2844.935108][T11228] loop6: partition table beyond EOD, truncated [ 2844.935130][T11228] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2845.093378][T11230] netlink: 'syz.0.10383': attribute type 1 has an invalid length. [ 2845.166652][ T5745] usb 9-1: new high-speed USB device number 68 using dummy_hcd [ 2845.316308][ T5745] usb 9-1: Using ep0 maxpacket: 32 [ 2845.317872][ T5745] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 2845.318251][T11230] bond25: entered promiscuous mode [ 2845.318854][T11230] 8021q: adding VLAN 0 to HW filter on device bond25 [ 2845.324159][ T5745] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 2845.324189][ T5745] usb 9-1: config 0 has no interface number 0 [ 2845.338557][ T5745] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2845.338638][ T5745] usb 9-1: Product: syz [ 2845.338680][ T5745] usb 9-1: Manufacturer: syz [ 2845.338729][ T5745] usb 9-1: SerialNumber: syz [ 2845.362060][ T5745] usb 9-1: config 0 descriptor?? [ 2845.475827][T11232] macvtap19: entered allmulticast mode [ 2845.574014][T11230] netlink: 128 bytes leftover after parsing attributes in process `syz.0.10383'. [ 2845.610986][T11233] macvtap20: entered allmulticast mode [ 2845.789850][T11239] bond25: (slave bridge16): making interface the new active one [ 2845.789880][T11239] bridge16: entered promiscuous mode [ 2845.819236][T11239] bond25: (slave bridge16): Enslaving as an active interface with an up link [ 2845.897258][ C1] TC_ACT_REPEAT abuse ? [ 2845.897424][ C1] TC_ACT_REPEAT abuse ? [ 2846.269418][ T5745] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 2846.479519][ T5745] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 2846.479727][ T5745] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -71 [ 2846.508267][ T5745] usb 9-1: USB disconnect, device number 68 [ 2846.656600][T11259] tipc: Cannot configure node identity twice [ 2846.937051][ C1] TC_ACT_REPEAT abuse ? [ 2846.937167][ C1] TC_ACT_REPEAT abuse ? [ 2847.556663][ T5745] usb 9-1: new high-speed USB device number 69 using dummy_hcd [ 2847.726467][ T5745] usb 9-1: Using ep0 maxpacket: 32 [ 2847.728545][ T5745] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2847.731106][ T5745] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2847.773981][ T5745] usb 9-1: config 0 descriptor?? [ 2847.977441][ C1] TC_ACT_REPEAT abuse ? [ 2847.977563][ C1] TC_ACT_REPEAT abuse ? [ 2848.040263][ T5745] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 2848.132364][ T5745] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2848.158363][ T5745] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 2848.158407][ T5745] usb 9-1: media controller created [ 2848.227332][ T5745] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2848.966946][ T5745] az6027: usb out operation failed. (-71) [ 2848.966968][ T5745] stb0899_attach: Driver disabled by Kconfig [ 2848.966982][ T5745] az6027: no front-end attached [ 2848.966982][ T5745] [ 2848.967370][ T5745] az6027: usb out operation failed. (-71) [ 2848.967406][ T5745] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 2848.972073][ T5745] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input133 [ 2848.983201][ T5745] dvb-usb: schedule remote query interval to 400 msecs. [ 2848.983272][ T5745] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 2849.013699][ T5745] usb 9-1: USB disconnect, device number 69 [ 2849.020761][ C1] TC_ACT_REPEAT abuse ? [ 2849.020872][ C1] TC_ACT_REPEAT abuse ? [ 2849.270499][ T5745] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 2849.813720][T11286] netlink: 'syz.8.10396': attribute type 10 has an invalid length. [ 2849.813772][T11286] netlink: 67 bytes leftover after parsing attributes in process `syz.8.10396'. [ 2850.057588][ C1] TC_ACT_REPEAT abuse ? [ 2850.057724][ C1] TC_ACT_REPEAT abuse ? [ 2851.097814][ C1] TC_ACT_REPEAT abuse ? [ 2851.097945][ C1] TC_ACT_REPEAT abuse ? [ 2852.137754][ C1] TC_ACT_REPEAT abuse ? [ 2852.137869][ C1] TC_ACT_REPEAT abuse ? [ 2853.177790][ C1] TC_ACT_REPEAT abuse ? [ 2853.177899][ C1] TC_ACT_REPEAT abuse ? [ 2853.310839][T11339] loop2: detected capacity change from 0 to 7 [ 2853.313943][T11339] Dev loop2: unable to read RDB block 7 [ 2853.313976][T11339] loop2: unable to read partition table [ 2853.314147][T11339] loop2: partition table beyond EOD, truncated [ 2853.316266][T11339] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2854.217027][ C1] TC_ACT_REPEAT abuse ? [ 2854.217109][ C1] TC_ACT_REPEAT abuse ? [ 2855.257460][ C1] TC_ACT_REPEAT abuse ? [ 2855.257575][ C1] TC_ACT_REPEAT abuse ? [ 2855.758108][T11377] JFS: charset not found [ 2856.297130][ C1] TC_ACT_REPEAT abuse ? [ 2856.297211][ C1] TC_ACT_REPEAT abuse ? [ 2857.337429][ C1] TC_ACT_REPEAT abuse ? [ 2857.337550][ C1] TC_ACT_REPEAT abuse ? [ 2858.377382][ C1] TC_ACT_REPEAT abuse ? [ 2858.377500][ C1] TC_ACT_REPEAT abuse ? [ 2858.828418][T11407] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 2859.078016][T11414] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 2859.403826][T11430] bridge0: port 1(veth0) entered blocking state [ 2859.404027][T11430] bridge0: port 1(veth0) entered disabled state [ 2859.404215][T11430] veth0: entered allmulticast mode [ 2859.421451][ C1] TC_ACT_REPEAT abuse ? [ 2859.421565][ C1] TC_ACT_REPEAT abuse ? [ 2859.437557][T11430] veth0: entered promiscuous mode [ 2859.454742][T11431] netlink: 'syz.7.10445': attribute type 10 has an invalid length. [ 2859.454760][T11431] netlink: 67 bytes leftover after parsing attributes in process `syz.7.10445'. [ 2859.694239][T11435] input: syz1 as /devices/virtual/input/input134 [ 2860.273177][T11441] netlink: 27 bytes leftover after parsing attributes in process `syz.7.10451'. [ 2860.457311][ C1] TC_ACT_REPEAT abuse ? [ 2860.457441][ C1] TC_ACT_REPEAT abuse ? [ 2861.497423][ C1] TC_ACT_REPEAT abuse ? [ 2862.537661][ C1] net_ratelimit: 1 callbacks suppressed [ 2862.537678][ C1] TC_ACT_REPEAT abuse ? [ 2862.537761][ C1] TC_ACT_REPEAT abuse ? [ 2862.622702][T11468] netlink: 'syz.6.10461': attribute type 10 has an invalid length. [ 2862.622720][T11468] netlink: 67 bytes leftover after parsing attributes in process `syz.6.10461'. [ 2863.020039][T11477] JFS: charset not found [ 2863.048613][T11465] netlink: 'syz.4.10459': attribute type 8 has an invalid length. [ 2863.136587][ T5745] usb 9-1: new high-speed USB device number 70 using dummy_hcd [ 2863.297358][ T5745] usb 9-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 2863.300548][ T5745] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2863.300570][ T5745] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2863.311769][ T5745] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2863.311851][ T5745] usb 9-1: Product: syz [ 2863.311894][ T5745] usb 9-1: Manufacturer: syz [ 2863.311985][ T5745] usb 9-1: SerialNumber: syz [ 2863.387082][ T5745] ums-sddr09 9-1:1.0: USB Mass Storage device detected [ 2863.395670][ T5745] ums-sddr09 9-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 2863.395670][ T5745] Please send a copy of this message to and [ 2863.577183][ C1] TC_ACT_REPEAT abuse ? [ 2863.577311][ C1] TC_ACT_REPEAT abuse ? [ 2863.780947][T11490] SET target dimension over the limit! [ 2863.796331][T11490] netlink: 9 bytes leftover after parsing attributes in process `syz.6.10467'. [ 2863.796572][T11490] 1·: renamed from c0· (while UP) [ 2863.843668][T11490] A link change request failed with some changes committed already. Interface c1· may have been left with an inconsistent configuration, please check. [ 2864.133538][T11487] bond12: Unable to set down delay as MII monitoring is disabled [ 2864.200971][T11487] bond12 (unregistering): Released all slaves [ 2864.233013][ T5745] scsi host1: usb-storage 9-1:1.0 [ 2864.367194][ T5745] usb 9-1: USB disconnect, device number 70 [ 2864.618584][ C1] TC_ACT_REPEAT abuse ? [ 2864.618703][ C1] TC_ACT_REPEAT abuse ? [ 2865.236512][ T7353] usb 9-1: new full-speed USB device number 71 using dummy_hcd [ 2865.397066][ T7353] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2865.401991][ T7353] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 64 [ 2865.402042][ T7353] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 2865.402077][ T7353] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 2865.451018][ T7353] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2865.451053][ T7353] usb 9-1: Product: syz [ 2865.451070][ T7353] usb 9-1: Manufacturer: syz [ 2865.451088][ T7353] usb 9-1: SerialNumber: syz [ 2865.490840][ T7353] cdc_mbim 9-1:1.0: skipping garbage [ 2865.657134][ C1] TC_ACT_REPEAT abuse ? [ 2865.657232][ C1] TC_ACT_REPEAT abuse ? [ 2865.703142][T11500] JFS: charset not found [ 2865.711905][T11496] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2865.712014][T11496] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2865.799680][T11504] SET target dimension over the limit! [ 2865.812388][T11504] netlink: 9 bytes leftover after parsing attributes in process `syz.4.10471'. [ 2865.825936][T11504] 1·: renamed from c0· (while UP) [ 2865.863026][T11504] A link change request failed with some changes committed already. Interface c1· may have been left with an inconsistent configuration, please check. [ 2866.032379][T11505] bond23: Unable to set down delay as MII monitoring is disabled [ 2866.073847][T11505] bond23 (unregistering): Released all slaves [ 2866.326648][T11496] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2866.326775][T11496] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2866.328358][ T7353] cdc_mbim 9-1:1.0: dwNtbInMaxSize=11 is too small. Using 2048 [ 2866.328385][ T7353] cdc_mbim 9-1:1.0: setting rx_max = 2048 [ 2866.529933][ T7353] cdc_mbim 9-1:1.0: setting tx_max = 16384 [ 2866.552269][ T7353] cdc_ncm 9-1:1.1: probe with driver cdc_ncm failed with error -71 [ 2866.553069][ T7353] cdc_mbim 9-1:1.1: probe with driver cdc_mbim failed with error -71 [ 2866.554353][ T7353] usbtest 9-1:1.1: probe with driver usbtest failed with error -71 [ 2866.588453][ T7353] usb 9-1: USB disconnect, device number 71 [ 2867.167588][T11521] netlink: 'syz.8.10477': attribute type 10 has an invalid length. [ 2867.167607][T11521] netlink: 67 bytes leftover after parsing attributes in process `syz.8.10477'. [ 2867.458861][T11530] JFS: charset not found [ 2867.737206][ C1] net_ratelimit: 2 callbacks suppressed [ 2867.737232][ C1] TC_ACT_REPEAT abuse ? [ 2867.737347][ C1] TC_ACT_REPEAT abuse ? [ 2868.529867][T11538] JFS: charset not found [ 2868.629256][T11534] netlink: 'syz.8.10481': attribute type 8 has an invalid length. [ 2868.778001][ C1] TC_ACT_REPEAT abuse ? [ 2868.778112][ C1] TC_ACT_REPEAT abuse ? [ 2868.884224][T11542] netlink: 'syz.0.10484': attribute type 1 has an invalid length. [ 2868.961195][T11542] bond26: entered promiscuous mode [ 2868.965586][T11542] 8021q: adding VLAN 0 to HW filter on device bond26 [ 2869.003793][T11544] macvtap21: entered allmulticast mode [ 2869.083320][T11542] macvtap22: entered allmulticast mode [ 2869.107656][T11542] netlink: 128 bytes leftover after parsing attributes in process `syz.0.10484'. [ 2869.168149][T11547] SET target dimension over the limit! [ 2869.213933][T11547] netlink: 9 bytes leftover after parsing attributes in process `syz.4.10485'. [ 2869.214089][T11547] 0·: renamed from c1· (while UP) [ 2869.261095][T11547] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 2869.373808][T11553] netlink: 16 bytes leftover after parsing attributes in process `syz.8.10487'. [ 2869.438226][T11549] bond23: Unable to set down delay as MII monitoring is disabled [ 2869.455133][T11549] bond23 (unregistering): Released all slaves [ 2869.651515][T11560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10486'. [ 2869.817391][ C1] TC_ACT_REPEAT abuse ? [ 2869.817507][ C1] TC_ACT_REPEAT abuse ? [ 2870.262381][T11575] netlink: 20 bytes leftover after parsing attributes in process `syz.8.10491'. [ 2870.278768][T11573] loop6: detected capacity change from 0 to 1 [ 2870.282509][T11573] Dev loop6: unable to read RDB block 1 [ 2870.282541][T11573] loop6: unable to read partition table [ 2870.282730][T11573] loop6: partition table beyond EOD, truncated [ 2870.284199][T11573] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2870.382059][T11576] JFS: charset not found [ 2870.639454][T11580] JFS: charset not found [ 2870.857266][ C1] TC_ACT_REPEAT abuse ? [ 2870.857365][ C1] TC_ACT_REPEAT abuse ? [ 2870.990408][T11584] JFS: charset not found [ 2871.780346][T11590] netlink: 'syz.8.10496': attribute type 1 has an invalid length. [ 2871.887706][T11590] bond24: entered promiscuous mode [ 2871.890033][T11590] 8021q: adding VLAN 0 to HW filter on device bond24 [ 2871.897136][ C1] TC_ACT_REPEAT abuse ? [ 2871.970011][T11592] macvtap14: entered allmulticast mode [ 2871.999420][T11592] netlink: 128 bytes leftover after parsing attributes in process `syz.8.10496'. [ 2872.026047][T11590] macvtap15: entered allmulticast mode [ 2872.427190][T11599] netlink: 'syz.7.10500': attribute type 10 has an invalid length. [ 2872.427210][T11599] netlink: 67 bytes leftover after parsing attributes in process `syz.7.10500'. [ 2872.937504][ C1] net_ratelimit: 1 callbacks suppressed [ 2872.937528][ C1] TC_ACT_REPEAT abuse ? [ 2872.937617][ C1] TC_ACT_REPEAT abuse ? [ 2872.940571][T11607] netlink: 'syz.0.10501': attribute type 10 has an invalid length. [ 2872.940587][T11607] netlink: 67 bytes leftover after parsing attributes in process `syz.0.10501'. [ 2873.977407][ C1] TC_ACT_REPEAT abuse ? [ 2873.977532][ C1] TC_ACT_REPEAT abuse ? [ 2875.016998][ C1] TC_ACT_REPEAT abuse ? [ 2875.017110][ C1] TC_ACT_REPEAT abuse ? [ 2875.426520][T11644] netlink: 'syz.8.10515': attribute type 10 has an invalid length. [ 2875.426545][T11644] netlink: 67 bytes leftover after parsing attributes in process `syz.8.10515'. [ 2875.593229][T11647] netlink: 'syz.4.10517': attribute type 10 has an invalid length. [ 2875.593249][T11647] netlink: 67 bytes leftover after parsing attributes in process `syz.4.10517'. [ 2876.057054][ C1] TC_ACT_REPEAT abuse ? [ 2876.057179][ C1] TC_ACT_REPEAT abuse ? [ 2876.502875][T11652] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10519'. [ 2876.574595][T11659] JFS: charset not found [ 2877.097198][ C1] TC_ACT_REPEAT abuse ? [ 2877.097321][ C1] TC_ACT_REPEAT abuse ? [ 2877.402134][T11663] netlink: 56 bytes leftover after parsing attributes in process `syz.0.10522'. [ 2877.402159][T11663] netlink: 56 bytes leftover after parsing attributes in process `syz.0.10522'. [ 2877.456499][T11027] usb 9-1: new high-speed USB device number 72 using dummy_hcd [ 2877.606480][T11027] usb 9-1: Using ep0 maxpacket: 32 [ 2877.607261][T11027] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2877.608401][T11027] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2877.608425][T11027] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58999, setting to 1024 [ 2877.608458][T11027] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2877.615389][T11027] usb 9-1: config 0 descriptor?? [ 2877.655287][T11661] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2877.684306][T11027] hub 9-1:0.0: USB hub found [ 2877.892142][T11027] hub 9-1:0.0: 1 port detected [ 2877.933937][T11674] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10527'. [ 2877.935340][T11674] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10527'. [ 2878.137230][ C1] TC_ACT_REPEAT abuse ? [ 2878.137370][ C1] TC_ACT_REPEAT abuse ? [ 2878.252575][T11684] netlink: 'syz.0.10528': attribute type 10 has an invalid length. [ 2878.252603][T11684] netlink: 67 bytes leftover after parsing attributes in process `syz.0.10528'. [ 2878.728121][ T5745] usb 9-1: USB disconnect, device number 72 [ 2878.734995][T11687] netlink: 'syz.6.10530': attribute type 10 has an invalid length. [ 2878.735013][T11687] netlink: 67 bytes leftover after parsing attributes in process `syz.6.10530'. [ 2879.121434][T11689] ip_tables: iptables: counters copy to user failed while replacing table [ 2879.177253][ C1] TC_ACT_REPEAT abuse ? [ 2879.177380][ C1] TC_ACT_REPEAT abuse ? [ 2879.338225][T11697] netlink: 'syz.0.10534': attribute type 8 has an invalid length. [ 2879.338283][T11697] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10534'. [ 2879.524209][T11701] JFS: charset not found [ 2879.573926][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 2879.573942][ T31] audit: type=1326 audit(1790371305.804:6887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11703 comm="syz.6.10537" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89dc39e159 code=0x7ffc0000 [ 2879.574764][ T31] audit: type=1326 audit(1790371305.804:6888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11703 comm="syz.6.10537" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89dc39e159 code=0x7ffc0000 [ 2879.575607][ T31] audit: type=1326 audit(1790371305.804:6889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11703 comm="syz.6.10537" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89dc39e159 code=0x7ffc0000 [ 2879.575851][ T31] audit: type=1326 audit(1790371305.804:6890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11703 comm="syz.6.10537" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89dc39e159 code=0x7ffc0000 [ 2879.576009][ T31] audit: type=1326 audit(1790371305.804:6891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11703 comm="syz.6.10537" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f89dc39e159 code=0x7ffc0000 [ 2879.577955][ T31] audit: type=1326 audit(1790371305.814:6892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11703 comm="syz.6.10537" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89dc39e159 code=0x7ffc0000 [ 2879.585854][ T31] audit: type=1326 audit(1790371305.814:6893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11703 comm="syz.6.10537" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89dc39e159 code=0x7ffc0000 [ 2879.585990][ T31] audit: type=1326 audit(1790371305.814:6895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11703 comm="syz.6.10537" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f89dc39e159 code=0x7ffc0000 [ 2879.586104][ T31] audit: type=1326 audit(1790371305.814:6896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11703 comm="syz.6.10537" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89dc39e159 code=0x7ffc0000 [ 2879.586995][ T31] audit: type=1326 audit(1790371305.814:6897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11703 comm="syz.6.10537" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89dc39e159 code=0x7ffc0000 [ 2880.217341][ C1] TC_ACT_REPEAT abuse ? [ 2880.217473][ C1] TC_ACT_REPEAT abuse ? [ 2880.263922][T11715] netlink: 'syz.6.10541': attribute type 10 has an invalid length. [ 2880.263942][T11715] netlink: 67 bytes leftover after parsing attributes in process `syz.6.10541'. [ 2880.449145][T11718] SET target dimension over the limit! [ 2880.452307][T11718] netlink: 9 bytes leftover after parsing attributes in process `syz.0.10542'. [ 2880.583670][T11718] bond27: Unable to set down delay as MII monitoring is disabled [ 2880.597287][T11718] bond27 (unregistering): Released all slaves [ 2881.257342][ C1] TC_ACT_REPEAT abuse ? [ 2881.257453][ C1] TC_ACT_REPEAT abuse ? [ 2881.334882][T11731] netlink: 28 bytes leftover after parsing attributes in process `syz.7.10545'. [ 2882.297437][ C1] TC_ACT_REPEAT abuse ? [ 2882.750422][T11756] netlink: 'syz.8.10554': attribute type 10 has an invalid length. [ 2882.750440][T11756] netlink: 67 bytes leftover after parsing attributes in process `syz.8.10554'. [ 2882.871185][T11757] JFS: charset not found [ 2883.337254][ C1] net_ratelimit: 1 callbacks suppressed [ 2883.337270][ C1] TC_ACT_REPEAT abuse ? [ 2883.337344][ C1] TC_ACT_REPEAT abuse ? [ 2884.377256][ C1] TC_ACT_REPEAT abuse ? [ 2884.377391][ C1] TC_ACT_REPEAT abuse ? [ 2885.417307][ C1] TC_ACT_REPEAT abuse ? [ 2885.417421][ C1] TC_ACT_REPEAT abuse ? [ 2885.712178][T11788] SET target dimension over the limit! [ 2885.741409][T11788] netlink: 9 bytes leftover after parsing attributes in process `syz.4.10564'. [ 2885.741600][T11788] 1·: renamed from c0· (while UP) [ 2885.787880][T11788] A link change request failed with some changes committed already. Interface c1· may have been left with an inconsistent configuration, please check. [ 2886.081974][T11788] bond23: Unable to set down delay as MII monitoring is disabled [ 2886.101296][T11788] bond23 (unregistering): Released all slaves [ 2886.457169][ C1] TC_ACT_REPEAT abuse ? [ 2886.457276][ C1] TC_ACT_REPEAT abuse ? [ 2887.497585][ C1] TC_ACT_REPEAT abuse ? [ 2887.721882][T11802] netlink: 'syz.7.10569': attribute type 10 has an invalid length. [ 2887.721910][T11802] netlink: 67 bytes leftover after parsing attributes in process `syz.7.10569'. [ 2888.134544][T11806] JFS: charset not found [ 2888.537145][ C1] net_ratelimit: 1 callbacks suppressed [ 2888.537163][ C1] TC_ACT_REPEAT abuse ? [ 2888.537294][ C1] TC_ACT_REPEAT abuse ? [ 2889.485720][T11822] JFS: charset not found [ 2889.577348][ C1] TC_ACT_REPEAT abuse ? [ 2889.577435][ C1] TC_ACT_REPEAT abuse ? [ 2890.617364][ C1] TC_ACT_REPEAT abuse ? [ 2890.617480][ C1] TC_ACT_REPEAT abuse ? [ 2890.694943][T11838] JFS: charset not found [ 2891.657400][ C1] TC_ACT_REPEAT abuse ? [ 2891.657481][ C1] TC_ACT_REPEAT abuse ? [ 2892.251034][T11863] netlink: 'syz.6.10582': attribute type 10 has an invalid length. [ 2892.251060][T11863] netlink: 67 bytes leftover after parsing attributes in process `syz.6.10582'. [ 2892.404622][T11836] netlink: 'syz.4.10577': attribute type 8 has an invalid length. [ 2892.697679][ C1] TC_ACT_REPEAT abuse ? [ 2892.697793][ C1] TC_ACT_REPEAT abuse ? [ 2893.737101][ C1] TC_ACT_REPEAT abuse ? [ 2893.737183][ C1] TC_ACT_REPEAT abuse ? [ 2894.777902][ C1] TC_ACT_REPEAT abuse ? [ 2894.777988][ C1] TC_ACT_REPEAT abuse ? [ 2895.214744][T11878] netlink: 'syz.6.10584': attribute type 8 has an invalid length. [ 2895.817014][ C1] TC_ACT_REPEAT abuse ? [ 2895.817095][ C1] TC_ACT_REPEAT abuse ? [ 2896.857217][ C1] TC_ACT_REPEAT abuse ? [ 2896.857305][ C1] TC_ACT_REPEAT abuse ? [ 2897.000009][T11908] netlink: 'syz.8.10594': attribute type 10 has an invalid length. [ 2897.000028][T11908] netlink: 67 bytes leftover after parsing attributes in process `syz.8.10594'. [ 2897.169823][T11912] JFS: charset not found [ 2897.578323][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 2897.578371][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 2897.897114][ C1] TC_ACT_REPEAT abuse ? [ 2897.897199][ C1] TC_ACT_REPEAT abuse ? [ 2898.938512][ C1] TC_ACT_REPEAT abuse ? [ 2898.938623][ C1] TC_ACT_REPEAT abuse ? [ 2898.960694][T11931] binder: 11930:11931 ioctl c0306201 2000000003c0 returned -14 [ 2899.071888][T11935] loop9: detected capacity change from 0 to 16384 [ 2899.193964][T11940] netlink: 'syz.4.10606': attribute type 10 has an invalid length. [ 2899.193984][T11940] netlink: 67 bytes leftover after parsing attributes in process `syz.4.10606'. [ 2899.411569][T11942] netlink: 384 bytes leftover after parsing attributes in process `syz.7.10607'. [ 2899.411591][T11942] netlink: 384 bytes leftover after parsing attributes in process `syz.7.10607'. [ 2899.411603][T11942] netlink: 28 bytes leftover after parsing attributes in process `syz.7.10607'. [ 2899.859250][T11949] JFS: charset not found [ 2899.978011][ C1] TC_ACT_REPEAT abuse ? [ 2899.978131][ C1] TC_ACT_REPEAT abuse ? [ 2900.323711][T11957] netlink: 'syz.4.10611': attribute type 1 has an invalid length. [ 2900.432233][T11957] bond23: entered promiscuous mode [ 2900.445514][T11957] 8021q: adding VLAN 0 to HW filter on device bond23 [ 2900.521545][T11960] macvtap6: entered allmulticast mode [ 2900.595989][T11957] macvtap7: entered allmulticast mode [ 2900.620806][T11957] netlink: 128 bytes leftover after parsing attributes in process `syz.4.10611'. [ 2900.713784][T11960] bond23: (slave bridge15): making interface the new active one [ 2900.713813][T11960] bridge15: entered promiscuous mode [ 2900.732291][T11960] bond23: (slave bridge15): Enslaving as an active interface with an up link [ 2901.017672][ C1] TC_ACT_REPEAT abuse ? [ 2901.017767][ C1] TC_ACT_REPEAT abuse ? [ 2901.366349][ T10] usb 9-1: new high-speed USB device number 73 using dummy_hcd [ 2901.540645][ T10] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 2901.543734][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2901.569377][ T10] usb 9-1: config 0 descriptor?? [ 2901.779865][ T10] udl 9-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 2902.001404][ T10] [drm] Initialized udl 0.0.1 for 9-1:0.0 on minor 1 [ 2902.001432][ T10] [drm] Initialized udl on minor 1 [ 2902.057120][ C1] TC_ACT_REPEAT abuse ? [ 2902.057263][ C1] TC_ACT_REPEAT abuse ? [ 2903.097487][ C1] TC_ACT_REPEAT abuse ? [ 2903.097601][ C1] TC_ACT_REPEAT abuse ? [ 2903.202479][T12017] batadv_slave_0: entered promiscuous mode [ 2903.299602][T12017] bond5 (unregistering): Released all slaves [ 2903.429101][T12016] batadv_slave_0: left promiscuous mode [ 2903.675255][T12021] netlink: 'syz.7.10632': attribute type 10 has an invalid length. [ 2903.675281][T12021] netlink: 67 bytes leftover after parsing attributes in process `syz.7.10632'. [ 2904.137559][ C1] TC_ACT_REPEAT abuse ? [ 2904.137680][ C1] TC_ACT_REPEAT abuse ? [ 2904.511210][T12027] netlink: 'syz.7.10635': attribute type 20 has an invalid length. [ 2904.511237][T12027] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10635'. [ 2904.544576][T12027] netlink: 'syz.7.10635': attribute type 20 has an invalid length. [ 2904.544600][T12027] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10635'. [ 2904.565978][ T3293] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2904.568959][T18747] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2904.577736][T18747] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2904.577885][T18747] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2905.177440][ C1] TC_ACT_REPEAT abuse ? [ 2905.177560][ C1] TC_ACT_REPEAT abuse ? [ 2905.205353][T12049] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2905.573417][T12059] netlink: 'syz.0.10645': attribute type 10 has an invalid length. [ 2905.573442][T12059] netlink: 67 bytes leftover after parsing attributes in process `syz.0.10645'. [ 2906.217184][ C1] TC_ACT_REPEAT abuse ? [ 2906.217324][ C1] TC_ACT_REPEAT abuse ? [ 2907.016967][ T10] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 2907.017433][ T10] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 2907.042648][ T10] usb 9-1: USB disconnect, device number 73 [ 2907.053428][ T5745] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 2907.257873][ C1] TC_ACT_REPEAT abuse ? [ 2907.257989][ C1] TC_ACT_REPEAT abuse ? [ 2907.370595][T12092] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10659'. [ 2907.456261][T12093] netlink: 'syz.4.10658': attribute type 10 has an invalid length. [ 2907.456310][T12093] netlink: 67 bytes leftover after parsing attributes in process `syz.4.10658'. [ 2908.211423][ T31] kauditd_printk_skb: 10 callbacks suppressed [ 2908.211444][ T31] audit: type=1800 audit(1790371334.434:6907): pid=12112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.10663" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2733 res=0 errno=0 [ 2908.285913][T12112] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2908.298505][ C1] TC_ACT_REPEAT abuse ? [ 2908.298625][ C1] TC_ACT_REPEAT abuse ? [ 2908.575800][T12118] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10664'. [ 2909.337726][ C1] TC_ACT_REPEAT abuse ? [ 2909.337817][ C1] TC_ACT_REPEAT abuse ? [ 2909.539067][T12133] misc userio: Can't change port id on an already running userio instance [ 2909.834087][T12142] netlink: 'syz.8.10674': attribute type 10 has an invalid length. [ 2909.849703][T12142] netlink: 67 bytes leftover after parsing attributes in process `syz.8.10674'. [ 2910.377245][ C1] TC_ACT_REPEAT abuse ? [ 2910.377400][ C1] TC_ACT_REPEAT abuse ? [ 2910.894584][T12147] netlink: 'syz.4.10675': attribute type 8 has an invalid length. [ 2911.068522][ T10] usb 9-1: new high-speed USB device number 74 using dummy_hcd [ 2911.236842][ T10] usb 9-1: Using ep0 maxpacket: 16 [ 2911.237857][ T10] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2911.239251][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2911.239274][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2911.239291][ T10] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2911.239321][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2911.241634][ T10] usb 9-1: config 0 descriptor?? [ 2911.417361][ C1] TC_ACT_REPEAT abuse ? [ 2911.417535][ C1] TC_ACT_REPEAT abuse ? [ 2911.511545][ T10] usbhid 9-1:0.0: can't add hid device: -71 [ 2911.511676][ T10] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 2911.514808][ T10] usb 9-1: USB disconnect, device number 74 [ 2911.788268][T12169] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10685'. [ 2912.296589][T11027] usb 9-1: new full-speed USB device number 75 using dummy_hcd [ 2912.447225][T11027] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2912.448361][T11027] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2912.448390][T11027] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2912.448433][T11027] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2912.464670][ C1] TC_ACT_REPEAT abuse ? [ 2912.465012][ C1] TC_ACT_REPEAT abuse ? [ 2912.693884][T11027] usb 9-1: GET_CAPABILITIES returned 0 [ 2912.693940][T11027] usbtmc 9-1:16.0: can't read capabilities [ 2912.733328][ T31] audit: type=1326 audit(1790371338.964:6908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12181 comm="syz.4.10691" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f2d9e159 code=0x7ffc0000 [ 2912.734083][ T31] audit: type=1326 audit(1790371338.964:6909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12181 comm="syz.4.10691" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f2d9e159 code=0x7ffc0000 [ 2912.734324][ T31] audit: type=1326 audit(1790371338.964:6910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12181 comm="syz.4.10691" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fe0f2d9e159 code=0x7ffc0000 [ 2912.734739][ T31] audit: type=1326 audit(1790371338.964:6911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12181 comm="syz.4.10691" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f2d9e159 code=0x7ffc0000 [ 2912.734963][ T31] audit: type=1326 audit(1790371338.964:6912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12181 comm="syz.4.10691" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f2d9e159 code=0x7ffc0000 [ 2912.735464][ T31] audit: type=1326 audit(1790371338.964:6913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12181 comm="syz.4.10691" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fe0f2d9e159 code=0x7ffc0000 [ 2912.735750][ T31] audit: type=1326 audit(1790371338.964:6914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12181 comm="syz.4.10691" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f2d9e159 code=0x7ffc0000 [ 2912.736055][ T31] audit: type=1326 audit(1790371338.964:6915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12181 comm="syz.4.10691" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f2d9e159 code=0x7ffc0000 [ 2912.812338][ T31] audit: type=1326 audit(1790371339.044:6916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12181 comm="syz.4.10691" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fe0f2d9e159 code=0x7ffc0000 [ 2912.972249][T11027] usb 9-1: USB disconnect, device number 75 [ 2913.240325][T12191] netlink: 'syz.7.10694': attribute type 10 has an invalid length. [ 2913.240344][T12191] netlink: 67 bytes leftover after parsing attributes in process `syz.7.10694'. [ 2913.240998][T12191] netlink: 72 bytes leftover after parsing attributes in process `syz.7.10694'. [ 2913.241374][T12191] netlink: 72 bytes leftover after parsing attributes in process `syz.7.10694'. [ 2913.245629][T12191] netlink: 72 bytes leftover after parsing attributes in process `syz.7.10694'. [ 2913.497358][ C1] TC_ACT_REPEAT abuse ? [ 2913.497473][ C1] TC_ACT_REPEAT abuse ? [ 2913.829460][T12205] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10698'. [ 2914.234411][T12212] netlink: 'syz.8.10700': attribute type 10 has an invalid length. [ 2914.234430][T12212] netlink: 67 bytes leftover after parsing attributes in process `syz.8.10700'. [ 2914.462615][T12214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10702'. [ 2914.537187][ C1] TC_ACT_REPEAT abuse ? [ 2914.537306][ C1] TC_ACT_REPEAT abuse ? [ 2914.624702][T12218] JFS: charset not found [ 2915.234319][T12232] syzkaller1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2915.291283][T12236] netlink: 'syz.0.10711': attribute type 10 has an invalid length. [ 2915.291300][T12236] netlink: 67 bytes leftover after parsing attributes in process `syz.0.10711'. [ 2915.304687][T12236] netlink: 72 bytes leftover after parsing attributes in process `syz.0.10711'. [ 2915.327754][T12236] netlink: 72 bytes leftover after parsing attributes in process `syz.0.10711'. [ 2915.333970][T12236] netlink: 72 bytes leftover after parsing attributes in process `syz.0.10711'. [ 2915.577176][ C1] TC_ACT_REPEAT abuse ? [ 2915.577299][ C1] TC_ACT_REPEAT abuse ? [ 2915.746529][T11027] usb 9-1: new high-speed USB device number 76 using dummy_hcd [ 2915.897559][T11027] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2915.899204][T11027] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2915.899228][T11027] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2915.899245][T11027] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2915.899277][T11027] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2915.904726][T11027] usb 9-1: config 0 descriptor?? [ 2916.005748][T12248] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10715'. [ 2916.313968][T12251] JFS: charset not found [ 2916.373414][T11027] hid_parser_main: 30 callbacks suppressed [ 2916.373435][T11027] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 2916.373459][T11027] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 2916.373479][T11027] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 2916.373499][T11027] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 2916.373519][T11027] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 2916.373539][T11027] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 2916.373559][T11027] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 2916.373579][T11027] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 2916.373616][T11027] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 2916.475994][T11027] plantronics 0003:047F:FFFF.0037: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 2916.617632][ C1] TC_ACT_REPEAT abuse ? [ 2916.617748][ C1] TC_ACT_REPEAT abuse ? [ 2916.640370][T11027] usb 9-1: USB disconnect, device number 76 [ 2916.706568][T12255] loop7: detected capacity change from 0 to 5 [ 2916.733695][T12255] loop7: detected capacity change from 5 to 0 [ 2917.045723][T12264] netlink: 'syz.4.10719': attribute type 10 has an invalid length. [ 2917.045744][T12264] netlink: 67 bytes leftover after parsing attributes in process `syz.4.10719'. [ 2917.465281][T12278] netlink: 'syz.8.10726': attribute type 10 has an invalid length. [ 2917.465301][T12278] netlink: 67 bytes leftover after parsing attributes in process `syz.8.10726'. [ 2917.474413][T12278] netlink: 72 bytes leftover after parsing attributes in process `syz.8.10726'. [ 2917.495006][T12278] netlink: 72 bytes leftover after parsing attributes in process `syz.8.10726'. [ 2917.512115][T12278] netlink: 72 bytes leftover after parsing attributes in process `syz.8.10726'. [ 2917.530665][T12279] JFS: charset not found [ 2917.657026][ C1] TC_ACT_REPEAT abuse ? [ 2917.657141][ C1] TC_ACT_REPEAT abuse ? [ 2918.392778][T12284] syzkaller0: Caught tx_queue_len zero misconfig [ 2918.697467][ C1] TC_ACT_REPEAT abuse ? [ 2918.697582][ C1] TC_ACT_REPEAT abuse ? [ 2918.842586][T12293] JFS: charset not found [ 2918.877704][T12296] netlink: 'syz.6.10732': attribute type 1 has an invalid length. [ 2918.966768][T12296] bond12: entered promiscuous mode [ 2918.969746][T12296] 8021q: adding VLAN 0 to HW filter on device bond12 [ 2919.012248][T12298] macvtap6: entered allmulticast mode [ 2919.069953][T12296] macvtap7: entered allmulticast mode [ 2919.126392][T12298] bond12: (slave bridge8): making interface the new active one [ 2919.126425][T12298] bridge8: entered promiscuous mode [ 2919.135444][T12298] bond12: (slave bridge8): Enslaving as an active interface with an up link [ 2919.509169][T12305] fuse: fd is not a fuse device [ 2919.737216][ C1] TC_ACT_REPEAT abuse ? [ 2919.737297][ C1] TC_ACT_REPEAT abuse ? [ 2919.802978][T12312] netlink: 'syz.7.10737': attribute type 10 has an invalid length. [ 2920.460072][T12318] netlink: 'syz.8.10738': attribute type 10 has an invalid length. [ 2920.460098][T12318] __nla_validate_parse: 3 callbacks suppressed [ 2920.460113][T12318] netlink: 67 bytes leftover after parsing attributes in process `syz.8.10738'. [ 2920.465525][T12318] netlink: 72 bytes leftover after parsing attributes in process `syz.8.10738'. [ 2920.483582][T12318] netlink: 72 bytes leftover after parsing attributes in process `syz.8.10738'. [ 2920.538684][T12318] netlink: 72 bytes leftover after parsing attributes in process `syz.8.10738'. [ 2920.777184][ C1] TC_ACT_REPEAT abuse ? [ 2920.777278][ C1] TC_ACT_REPEAT abuse ? [ 2920.991771][T12329] JFS: charset not found [ 2921.489775][T12341] netlink: 83 bytes leftover after parsing attributes in process `syz.4.10747'. [ 2921.553228][T12343] SET target dimension over the limit! [ 2921.562597][T12343] netlink: 9 bytes leftover after parsing attributes in process `syz.7.10748'. [ 2921.572809][T12343] 1·: renamed from c0· (while UP) [ 2921.587321][T12343] A link change request failed with some changes committed already. Interface c1· may have been left with an inconsistent configuration, please check. [ 2921.803541][T12343] bond5: Unable to set down delay as MII monitoring is disabled [ 2921.817684][ C1] TC_ACT_REPEAT abuse ? [ 2921.817818][ C1] TC_ACT_REPEAT abuse ? [ 2921.869761][T12343] bond5 (unregistering): Released all slaves [ 2922.078413][T12348] netlink: 'syz.8.10749': attribute type 8 has an invalid length. [ 2922.855972][T12361] netlink: 'syz.4.10752': attribute type 10 has an invalid length. [ 2922.855991][T12361] netlink: 67 bytes leftover after parsing attributes in process `syz.4.10752'. [ 2922.860118][ C1] TC_ACT_REPEAT abuse ? [ 2922.860377][ C1] TC_ACT_REPEAT abuse ? [ 2923.197656][T12370] netlink: 'syz.8.10756': attribute type 10 has an invalid length. [ 2923.197675][T12370] netlink: 67 bytes leftover after parsing attributes in process `syz.8.10756'. [ 2923.198243][T12370] netlink: 72 bytes leftover after parsing attributes in process `syz.8.10756'. [ 2923.198687][T12370] netlink: 72 bytes leftover after parsing attributes in process `syz.8.10756'. [ 2923.696410][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 2923.696431][ T31] audit: type=1326 audit(1790371349.924:6919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12373 comm="syz.4.10759" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f2d9e159 code=0x7ffc0000 [ 2923.697025][ T31] audit: type=1326 audit(1790371349.934:6920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12373 comm="syz.4.10759" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f2d9e159 code=0x7ffc0000 [ 2923.697691][ T31] audit: type=1326 audit(1790371349.934:6921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12373 comm="syz.4.10759" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7fe0f2d9e159 code=0x7ffc0000 [ 2923.697882][ T31] audit: type=1326 audit(1790371349.934:6922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12373 comm="syz.4.10759" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f2d9e159 code=0x7ffc0000 [ 2923.698327][ T31] audit: type=1326 audit(1790371349.934:6923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12373 comm="syz.4.10759" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f2d9e159 code=0x7ffc0000 [ 2923.698475][ T31] audit: type=1326 audit(1790371349.934:6924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12373 comm="syz.4.10759" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7fe0f2d9e159 code=0x7ffc0000 [ 2923.698652][ T31] audit: type=1326 audit(1790371349.934:6925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12373 comm="syz.4.10759" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f2d9e159 code=0x7ffc0000 [ 2923.698805][ T31] audit: type=1326 audit(1790371349.934:6926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12373 comm="syz.4.10759" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f2d9e159 code=0x7ffc0000 [ 2923.899320][ C1] TC_ACT_REPEAT abuse ? [ 2924.108512][T12380] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2924.610390][T12394] JFS: charset not found [ 2924.939422][ C1] net_ratelimit: 1 callbacks suppressed [ 2924.939455][ C1] TC_ACT_REPEAT abuse ? [ 2924.939564][ C1] TC_ACT_REPEAT abuse ? [ 2925.977268][ C1] TC_ACT_REPEAT abuse ? [ 2925.977375][ C1] TC_ACT_REPEAT abuse ? [ 2926.165395][T12415] netlink: 'syz.8.10772': attribute type 10 has an invalid length. [ 2926.165416][T12415] __nla_validate_parse: 4 callbacks suppressed [ 2926.165425][T12415] netlink: 67 bytes leftover after parsing attributes in process `syz.8.10772'. [ 2926.187435][T12415] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10772'. [ 2926.187517][T12415] netlink: 20 bytes leftover after parsing attributes in process `syz.8.10772'. [ 2926.211754][T12415] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10772'. [ 2926.211775][T12415] netlink: 20 bytes leftover after parsing attributes in process `syz.8.10772'. [ 2926.246942][T12415] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10772'. [ 2926.246965][T12415] netlink: 20 bytes leftover after parsing attributes in process `syz.8.10772'. [ 2926.502280][T12422] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 2926.959210][ T10] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 2927.014584][ T10] hid-generic 0000:0000:0000.0038: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2927.017176][ C1] TC_ACT_REPEAT abuse ? [ 2927.017291][ C1] TC_ACT_REPEAT abuse ? [ 2927.361650][T12433] netlink: 'syz.8.10780': attribute type 1 has an invalid length. [ 2927.444375][T12433] bond25: entered promiscuous mode [ 2927.445399][T12433] 8021q: adding VLAN 0 to HW filter on device bond25 [ 2927.496954][T12435] macvtap16: entered allmulticast mode [ 2927.535864][T12433] macvtap17: entered allmulticast mode [ 2927.602965][T12433] bond25: (slave bridge13): making interface the new active one [ 2927.602990][T12433] bridge13: entered promiscuous mode [ 2927.623205][T12435] netlink: 128 bytes leftover after parsing attributes in process `syz.8.10780'. [ 2927.649726][T12433] bond25: (slave bridge13): Enslaving as an active interface with an up link [ 2928.057193][ C1] TC_ACT_REPEAT abuse ? [ 2928.057277][ C1] TC_ACT_REPEAT abuse ? [ 2929.097744][ C1] TC_ACT_REPEAT abuse ? [ 2929.344319][T12464] netlink: 'syz.7.10789': attribute type 10 has an invalid length. [ 2929.344358][T12464] netlink: 67 bytes leftover after parsing attributes in process `syz.7.10789'. [ 2929.365797][T12464] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10789'. [ 2930.137552][ C1] net_ratelimit: 1 callbacks suppressed [ 2930.137580][ C1] TC_ACT_REPEAT abuse ? [ 2930.137694][ C1] TC_ACT_REPEAT abuse ? [ 2930.814450][T12499] input: syz0 as /devices/virtual/input/input136 [ 2931.177581][ C1] TC_ACT_REPEAT abuse ? [ 2931.177672][ C1] TC_ACT_REPEAT abuse ? [ 2932.217743][ C1] TC_ACT_REPEAT abuse ? [ 2932.217925][ C1] TC_ACT_REPEAT abuse ? [ 2932.879745][T12524] netlink: 'syz.6.10807': attribute type 10 has an invalid length. [ 2932.879764][T12524] __nla_validate_parse: 6 callbacks suppressed [ 2932.879774][T12524] netlink: 67 bytes leftover after parsing attributes in process `syz.6.10807'. [ 2932.884022][T12524] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10807'. [ 2932.884043][T12524] netlink: 20 bytes leftover after parsing attributes in process `syz.6.10807'. [ 2932.938282][T12525] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10807'. [ 2932.938305][T12525] netlink: 20 bytes leftover after parsing attributes in process `syz.6.10807'. [ 2932.987916][T12524] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10807'. [ 2932.989383][T12524] netlink: 20 bytes leftover after parsing attributes in process `syz.6.10807'. [ 2933.257463][ C1] TC_ACT_REPEAT abuse ? [ 2933.257566][ C1] TC_ACT_REPEAT abuse ? [ 2934.297451][ C1] TC_ACT_REPEAT abuse ? [ 2934.297570][ C1] TC_ACT_REPEAT abuse ? [ 2935.337702][ C1] TC_ACT_REPEAT abuse ? [ 2935.337805][ C1] TC_ACT_REPEAT abuse ? [ 2935.345671][T12551] fuse: fd is not a fuse device [ 2936.278992][T12562] netlink: 'syz.0.10808': attribute type 8 has an invalid length. [ 2936.377394][ C1] TC_ACT_REPEAT abuse ? [ 2936.377501][ C1] TC_ACT_REPEAT abuse ? [ 2936.733852][T12570] netlink: 'syz.4.10820': attribute type 10 has an invalid length. [ 2936.733893][T12570] netlink: 67 bytes leftover after parsing attributes in process `syz.4.10820'. [ 2936.784846][T12570] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10820'. [ 2936.784869][T12570] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10820'. [ 2937.417137][ C1] TC_ACT_REPEAT abuse ? [ 2937.417232][ C1] TC_ACT_REPEAT abuse ? [ 2938.457357][ C1] TC_ACT_REPEAT abuse ? [ 2938.457491][ C1] TC_ACT_REPEAT abuse ? [ 2939.497146][ C1] TC_ACT_REPEAT abuse ? [ 2939.497257][ C1] TC_ACT_REPEAT abuse ? [ 2940.537340][ C1] TC_ACT_REPEAT abuse ? [ 2940.537446][ C1] TC_ACT_REPEAT abuse ? [ 2941.130409][T12611] netlink: 'syz.7.10833': attribute type 10 has an invalid length. [ 2941.130427][T12611] __nla_validate_parse: 4 callbacks suppressed [ 2941.130437][T12611] netlink: 67 bytes leftover after parsing attributes in process `syz.7.10833'. [ 2941.135241][T12611] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10833'. [ 2941.135263][T12611] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10833'. [ 2941.151037][T12611] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10833'. [ 2941.151060][T12611] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10833'. [ 2941.268035][T12611] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10833'. [ 2941.269788][T12611] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10833'. [ 2941.577280][ C1] TC_ACT_REPEAT abuse ? [ 2941.577369][ C1] TC_ACT_REPEAT abuse ? [ 2941.725625][ T31] audit: type=1326 audit(1790371367.954:6927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12623 comm="syz.0.10837" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f3681197ed7 code=0x0 [ 2942.618455][ C1] TC_ACT_REPEAT abuse ? [ 2942.618606][ C1] TC_ACT_REPEAT abuse ? [ 2943.657022][ C1] TC_ACT_REPEAT abuse ? [ 2943.657135][ C1] TC_ACT_REPEAT abuse ? [ 2944.698409][ C1] TC_ACT_REPEAT abuse ? [ 2944.698541][ C1] TC_ACT_REPEAT abuse ? [ 2945.114228][T12668] tipc: Enabling of bearer rejected, failed to enable media [ 2945.737575][ C1] TC_ACT_REPEAT abuse ? [ 2945.737733][ C1] TC_ACT_REPEAT abuse ? [ 2946.150234][T12686] netlink: 'syz.8.10860': attribute type 8 has an invalid length. [ 2946.150258][T12686] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10860'. [ 2946.511317][T12700] JFS: charset not found [ 2946.777358][ C1] TC_ACT_REPEAT abuse ? [ 2946.777445][ C1] TC_ACT_REPEAT abuse ? [ 2947.817223][ C1] TC_ACT_REPEAT abuse ? [ 2947.817307][ C1] TC_ACT_REPEAT abuse ? [ 2947.964348][T12711] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10868'. [ 2948.249191][T12718] netlink: 7 bytes leftover after parsing attributes in process `syz.7.10870'. [ 2948.857403][ C1] TC_ACT_REPEAT abuse ? [ 2948.857526][ C1] TC_ACT_REPEAT abuse ? [ 2949.786665][ T5690] lg-g15 0003:046D:0A07.0039: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 2949.808362][T12741] netlink: 83 bytes leftover after parsing attributes in process `syz.6.10877'. [ 2949.813258][T12741] netlink: 72 bytes leftover after parsing attributes in process `syz.6.10877'. [ 2949.813844][T12741] netlink: 72 bytes leftover after parsing attributes in process `syz.6.10877'. [ 2949.829828][T12741] netlink: 72 bytes leftover after parsing attributes in process `syz.6.10877'. [ 2949.897025][ C1] TC_ACT_REPEAT abuse ? [ 2949.897107][ C1] TC_ACT_REPEAT abuse ? [ 2950.016071][ T5690] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.0039/input/input137 [ 2950.231278][T12744] netlink: 'syz.8.10869': attribute type 8 has an invalid length. [ 2950.937585][ C1] TC_ACT_REPEAT abuse ? [ 2950.937713][ C1] TC_ACT_REPEAT abuse ? [ 2951.977466][ C1] TC_ACT_REPEAT abuse ? [ 2951.977594][ C1] TC_ACT_REPEAT abuse ? [ 2953.017106][ C1] TC_ACT_REPEAT abuse ? [ 2953.017244][ C1] TC_ACT_REPEAT abuse ? [ 2953.249406][T12780] netlink: 83 bytes leftover after parsing attributes in process `syz.0.10888'. [ 2953.254120][T12780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10888'. [ 2953.254143][T12780] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10888'. [ 2953.291008][T12780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10888'. [ 2953.291044][T12780] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10888'. [ 2953.293563][T12780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10888'. [ 2953.293583][T12780] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10888'. [ 2953.575973][T12785] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 2953.980339][T12801] JFS: charset not found [ 2954.057300][ C1] TC_ACT_REPEAT abuse ? [ 2954.057457][ C1] TC_ACT_REPEAT abuse ? [ 2954.080013][T12804] JFS: charset not found [ 2954.924836][T12818] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 2955.097167][ C1] TC_ACT_REPEAT abuse ? [ 2955.097294][ C1] TC_ACT_REPEAT abuse ? [ 2956.137389][ C1] TC_ACT_REPEAT abuse ? [ 2956.137534][ C1] TC_ACT_REPEAT abuse ? [ 2956.153201][T12836] syzkaller1: entered promiscuous mode [ 2956.153228][T12836] syzkaller1: entered allmulticast mode [ 2957.176979][ C1] TC_ACT_REPEAT abuse ? [ 2957.177076][ C1] TC_ACT_REPEAT abuse ? [ 2957.373115][T12854] syzkaller1: entered promiscuous mode [ 2957.373133][T12854] syzkaller1: entered allmulticast mode [ 2957.914143][T12871] netlink: 'syz.7.10919': attribute type 1 has an invalid length. [ 2957.999879][T12871] bond5: entered promiscuous mode [ 2958.000334][T12871] 8021q: adding VLAN 0 to HW filter on device bond5 [ 2958.053748][T12873] JFS: charset not found [ 2958.080191][T12875] macvtap5: entered allmulticast mode [ 2958.101573][T12871] macvtap6: entered allmulticast mode [ 2958.152348][T12871] netlink: 128 bytes leftover after parsing attributes in process `syz.7.10919'. [ 2958.217203][ C1] TC_ACT_REPEAT abuse ? [ 2958.217334][ C1] TC_ACT_REPEAT abuse ? [ 2958.221596][T12875] bond5: (slave bridge5): making interface the new active one [ 2958.221625][T12875] bridge5: entered promiscuous mode [ 2958.242258][T12875] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 2959.018961][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 2959.019007][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 2959.055211][T12889] netlink: 68 bytes leftover after parsing attributes in process `syz.0.10923'. [ 2959.257236][ C1] TC_ACT_REPEAT abuse ? [ 2959.257343][ C1] TC_ACT_REPEAT abuse ? [ 2960.297727][ C1] TC_ACT_REPEAT abuse ? [ 2960.297822][ C1] TC_ACT_REPEAT abuse ? [ 2960.547368][T12900] netlink: 'syz.7.10924': attribute type 8 has an invalid length. [ 2961.337370][ C1] TC_ACT_REPEAT abuse ? [ 2961.337456][ C1] TC_ACT_REPEAT abuse ? [ 2962.377444][ C1] TC_ACT_REPEAT abuse ? [ 2962.377552][ C1] TC_ACT_REPEAT abuse ? [ 2962.621549][T12908] netlink: 'syz.0.10928': attribute type 1 has an invalid length. [ 2962.925114][T12908] bond27: entered promiscuous mode [ 2962.940198][T12908] 8021q: adding VLAN 0 to HW filter on device bond27 [ 2963.038884][T12911] macvtap23: entered allmulticast mode [ 2963.052743][T12908] netlink: 128 bytes leftover after parsing attributes in process `syz.0.10928'. [ 2963.176051][T12913] macvtap24: entered allmulticast mode [ 2963.376011][T12914] bond27: (slave bridge17): making interface the new active one [ 2963.376041][T12914] bridge17: entered promiscuous mode [ 2963.415482][T12914] bond27: (slave bridge17): Enslaving as an active interface with an up link [ 2963.418792][ C1] TC_ACT_REPEAT abuse ? [ 2963.419077][ C1] TC_ACT_REPEAT abuse ? [ 2963.634460][T12918] netlink: 'syz.8.10927': attribute type 8 has an invalid length. [ 2964.459974][ C1] TC_ACT_REPEAT abuse ? [ 2964.460051][ C1] TC_ACT_REPEAT abuse ? [ 2964.590068][T12933] JFS: charset not found [ 2964.969975][T12937] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10938'. [ 2965.033771][T12938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10938'. [ 2965.497645][ C1] TC_ACT_REPEAT abuse ? [ 2965.497749][ C1] TC_ACT_REPEAT abuse ? [ 2966.537140][ C1] TC_ACT_REPEAT abuse ? [ 2966.537227][ C1] TC_ACT_REPEAT abuse ? [ 2967.549032][T12951] netlink: 'syz.7.10943': attribute type 1 has an invalid length. [ 2967.577326][ C1] TC_ACT_REPEAT abuse ? [ 2967.577463][ C1] TC_ACT_REPEAT abuse ? [ 2967.828826][T12963] netlink: 128 bytes leftover after parsing attributes in process `syz.7.10943'. [ 2968.440626][T12972] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10948'. [ 2968.617159][ C1] TC_ACT_REPEAT abuse ? [ 2968.617316][ C1] TC_ACT_REPEAT abuse ? [ 2969.657273][ C1] TC_ACT_REPEAT abuse ? [ 2969.657408][ C1] TC_ACT_REPEAT abuse ? [ 2970.698249][ C1] TC_ACT_REPEAT abuse ? [ 2970.698411][ C1] TC_ACT_REPEAT abuse ? [ 2970.732016][T12974] fuse: fd is not a fuse device [ 2970.733120][T12974] fuse: fd is not a fuse device [ 2970.929255][T12976] fuse: fd is not a fuse device [ 2971.742890][ C1] TC_ACT_REPEAT abuse ? [ 2971.743040][ C1] TC_ACT_REPEAT abuse ? [ 2972.783236][ C1] TC_ACT_REPEAT abuse ? [ 2972.783397][ C1] TC_ACT_REPEAT abuse ? [ 2973.819570][ C1] TC_ACT_REPEAT abuse ? [ 2973.819691][ C1] TC_ACT_REPEAT abuse ? [ 2974.095463][T12937] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 2974.104734][T12937] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 2974.167972][T12938] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 2974.187089][T12938] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 2974.228743][T12951] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 2974.465078][T12988] batman_adv: batadv0: Adding interface: syzkaller0 [ 2974.465100][T12988] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1572 would solve the problem. [ 2974.465279][T12988] batman_adv: batadv0: Interface activated: syzkaller0 [ 2974.542447][T12987] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 2974.688503][T12987] batman_adv: batadv0: Removing interface: syzkaller0 [ 2974.857253][ C1] TC_ACT_REPEAT abuse ? [ 2974.857391][ C1] TC_ACT_REPEAT abuse ? [ 2975.732289][T13018] netlink: 'syz.8.10966': attribute type 1 has an invalid length. [ 2975.802954][T13018] bond26: entered promiscuous mode [ 2975.803390][T13018] 8021q: adding VLAN 0 to HW filter on device bond26 [ 2975.846720][T13018] macvtap18: entered allmulticast mode [ 2975.865011][T13018] macvtap19: entered allmulticast mode [ 2975.898224][ C1] TC_ACT_REPEAT abuse ? [ 2975.898353][ C1] TC_ACT_REPEAT abuse ? [ 2975.948119][T13018] bond26: (slave bridge14): making interface the new active one [ 2975.948148][T13018] bridge14: entered promiscuous mode [ 2975.953396][T13018] bond26: (slave bridge14): Enslaving as an active interface with an up link [ 2975.981898][T13018] netlink: 128 bytes leftover after parsing attributes in process `syz.8.10966'. [ 2976.117790][T13027] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 2976.222163][T13033] netlink: 76 bytes leftover after parsing attributes in process `syz.0.10969'. [ 2976.240572][T13035] fuse: fd is not a fuse device [ 2976.937301][ C1] TC_ACT_REPEAT abuse ? [ 2976.937456][ C1] TC_ACT_REPEAT abuse ? [ 2977.871762][T13070] netlink: 'syz.7.10983': attribute type 1 has an invalid length. [ 2977.918658][T13070] bond6: entered promiscuous mode [ 2977.918977][T13070] 8021q: adding VLAN 0 to HW filter on device bond6 [ 2977.974385][T13070] macvtap7: entered allmulticast mode [ 2977.977102][ C1] TC_ACT_REPEAT abuse ? [ 2977.977210][ C1] TC_ACT_REPEAT abuse ? [ 2978.023806][T13070] macvtap8: entered allmulticast mode [ 2978.068680][T13070] bond6: (slave bridge6): making interface the new active one [ 2978.068708][T13070] bridge6: entered promiscuous mode [ 2978.075070][T13070] bond6: (slave bridge6): Enslaving as an active interface with an up link [ 2978.113815][T13070] netlink: 128 bytes leftover after parsing attributes in process `syz.7.10983'. [ 2978.444007][T13082] fuse: fd is not a fuse device [ 2979.016929][ C1] TC_ACT_REPEAT abuse ? [ 2979.017033][ C1] TC_ACT_REPEAT abuse ? [ 2979.887772][T13105] netlink: 'syz.6.10997': attribute type 1 has an invalid length. [ 2979.989429][T13113] fuse: fd is not a fuse device [ 2980.047677][T13105] bond13: entered promiscuous mode [ 2980.048183][T13105] 8021q: adding VLAN 0 to HW filter on device bond13 [ 2980.057120][ C1] TC_ACT_REPEAT abuse ? [ 2980.057202][ C1] TC_ACT_REPEAT abuse ? [ 2980.124845][T13112] macvtap8: entered allmulticast mode [ 2980.179935][T13112] netlink: 128 bytes leftover after parsing attributes in process `syz.6.10997'. [ 2980.234298][T13116] macvtap9: entered allmulticast mode [ 2980.310269][T13120] netlink: 'syz.8.11000': attribute type 10 has an invalid length. [ 2980.310289][T13120] netlink: 67 bytes leftover after parsing attributes in process `syz.8.11000'. [ 2980.359182][T13105] bond13: (slave bridge9): making interface the new active one [ 2980.359209][T13105] bridge9: entered promiscuous mode [ 2980.384344][T13121] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11000'. [ 2980.408473][T13105] bond13: (slave bridge9): Enslaving as an active interface with an up link [ 2980.444560][T13120] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11000'. [ 2980.502711][T13120] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11000'. [ 2981.097158][ C1] TC_ACT_REPEAT abuse ? [ 2981.097238][ C1] TC_ACT_REPEAT abuse ? [ 2981.531122][T13142] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11007'. [ 2981.565906][T13142] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11007'. [ 2981.978013][T13147] netlink: 83 bytes leftover after parsing attributes in process `syz.8.11008'. [ 2981.980942][T13147] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11008'. [ 2982.037414][T13147] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11008'. [ 2982.074439][T13147] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11008'. [ 2982.111839][T13117] netlink: 'syz.7.10999': attribute type 8 has an invalid length. [ 2982.137196][ C1] TC_ACT_REPEAT abuse ? [ 2982.137285][ C1] TC_ACT_REPEAT abuse ? [ 2982.993291][T13156] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 2983.177093][ C1] TC_ACT_REPEAT abuse ? [ 2983.177173][ C1] TC_ACT_REPEAT abuse ? [ 2984.217122][ C1] TC_ACT_REPEAT abuse ? [ 2984.217248][ C1] TC_ACT_REPEAT abuse ? [ 2984.599971][T13185] netlink: 83 bytes leftover after parsing attributes in process `syz.8.11021'. [ 2984.602252][T13185] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11021'. [ 2984.604976][T13185] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11021'. [ 2984.647220][T13185] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11021'. [ 2984.737853][T13183] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 2984.842998][T13196] JFS: charset not found [ 2985.257361][ C1] TC_ACT_REPEAT abuse ? [ 2985.257475][ C1] TC_ACT_REPEAT abuse ? [ 2986.297362][ C1] TC_ACT_REPEAT abuse ? [ 2986.297461][ C1] TC_ACT_REPEAT abuse ? [ 2986.608641][T13198] netlink: 24 bytes leftover after parsing attributes in process `syz.6.11025'. [ 2986.608664][T13198] netlink: 24 bytes leftover after parsing attributes in process `syz.6.11025'. [ 2986.672360][T13202] ip6erspan1: entered allmulticast mode [ 2987.197458][T13211] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11029'. [ 2987.337174][ C1] TC_ACT_REPEAT abuse ? [ 2987.337297][ C1] TC_ACT_REPEAT abuse ? [ 2987.638124][T13226] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 2987.691898][T13232] netlink: 83 bytes leftover after parsing attributes in process `syz.6.11036'. [ 2987.695313][T13232] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11036'. [ 2987.731967][T13232] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11036'. [ 2987.753114][T13232] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11036'. [ 2988.377400][ C1] TC_ACT_REPEAT abuse ? [ 2988.377513][ C1] TC_ACT_REPEAT abuse ? [ 2988.492855][T13245] JFS: charset not found [ 2989.418527][ C1] TC_ACT_REPEAT abuse ? [ 2989.418620][ C1] TC_ACT_REPEAT abuse ? [ 2989.966536][T13270] JFS: charset not found [ 2990.457001][ C1] TC_ACT_REPEAT abuse ? [ 2990.457107][ C1] TC_ACT_REPEAT abuse ? [ 2991.475459][T13293] JFS: charset not found [ 2991.498431][ C1] TC_ACT_REPEAT abuse ? [ 2991.498555][ C1] TC_ACT_REPEAT abuse ? [ 2992.003401][T13302] JFS: charset not found [ 2992.492480][T13322] JFS: charset not found [ 2992.537114][ C1] TC_ACT_REPEAT abuse ? [ 2992.537232][ C1] TC_ACT_REPEAT abuse ? [ 2993.398644][ T31] audit: type=1326 audit(1790371419.634:6928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13331 comm="syz.6.11073" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f89dc39e159 code=0x0 [ 2993.529266][T13336] JFS: charset not found [ 2993.577499][ C1] TC_ACT_REPEAT abuse ? [ 2993.577642][ C1] TC_ACT_REPEAT abuse ? [ 2993.814098][T13339] JFS: charset not found [ 2994.069898][T13348] JFS: charset not found [ 2994.411797][T13352] tipc: Enabled bearer , priority 10 [ 2994.617080][ C1] TC_ACT_REPEAT abuse ? [ 2994.617162][ C1] TC_ACT_REPEAT abuse ? [ 2995.413918][T13378] JFS: charset not found [ 2995.422401][ T5690] tipc: Node number set to 515644107 [ 2995.658021][ C1] TC_ACT_REPEAT abuse ? [ 2995.658139][ C1] TC_ACT_REPEAT abuse ? [ 2996.677595][T13390] JFS: charset not found [ 2996.697101][ C1] TC_ACT_REPEAT abuse ? [ 2996.697176][ C1] TC_ACT_REPEAT abuse ? [ 2997.043501][T13394] SET target dimension over the limit! [ 2997.055846][T13394] netlink: 9 bytes leftover after parsing attributes in process `syz.7.11093'. [ 2997.163900][T13394] 0·: renamed from c1· (while UP) [ 2997.571759][T13397] bond7: Unable to set down delay as MII monitoring is disabled [ 2997.604011][T13397] bond7 (unregistering): Released all slaves [ 2997.737659][ C1] net_ratelimit: 1 callbacks suppressed [ 2997.737683][ C1] TC_ACT_REPEAT abuse ? [ 2997.737794][ C1] TC_ACT_REPEAT abuse ? [ 2997.960268][T13410] JFS: charset not found [ 2998.150350][T13414] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 2998.777159][ C1] TC_ACT_REPEAT abuse ? [ 2998.777279][ C1] TC_ACT_REPEAT abuse ? [ 2999.398950][T13439] JFS: charset not found [ 2999.437449][T13440] JFS: charset not found [ 2999.817141][ C1] TC_ACT_REPEAT abuse ? [ 2999.817223][ C1] TC_ACT_REPEAT abuse ? [ 3000.435335][T13449] netlink: 'syz.4.11111': attribute type 10 has an invalid length. [ 3000.558947][T13454] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x0) [ 3000.768710][T13460] netlink: 'syz.6.11115': attribute type 1 has an invalid length. [ 3000.857705][ C1] TC_ACT_REPEAT abuse ? [ 3000.857853][ C1] TC_ACT_REPEAT abuse ? [ 3000.879035][T13460] bond14: entered promiscuous mode [ 3000.881859][T13460] 8021q: adding VLAN 0 to HW filter on device bond14 [ 3000.920316][T13464] macvtap10: entered allmulticast mode [ 3000.946482][T13468] macvtap11: entered allmulticast mode [ 3000.998301][T13460] bond14: (slave bridge10): making interface the new active one [ 3000.998327][T13460] bridge10: entered promiscuous mode [ 3000.999827][T13464] netlink: 72 bytes leftover after parsing attributes in process `syz.6.11115'. [ 3001.000103][T13464] netlink: 128 bytes leftover after parsing attributes in process `syz.6.11115'. [ 3001.000757][T13460] bond14: (slave bridge10): Enslaving as an active interface with an up link [ 3001.572652][T13490] JFS: charset not found [ 3001.702603][T13491] JFS: charset not found [ 3001.897601][ C1] TC_ACT_REPEAT abuse ? [ 3001.897736][ C1] TC_ACT_REPEAT abuse ? [ 3002.000280][T13497] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 3002.861656][T13509] loop5: detected capacity change from 0 to 7 [ 3002.876632][T13509] loop5: [ 3002.876667][T13509] loop5: partition table partially beyond EOD, truncated [ 3002.910775][T13510] JFS: charset not found [ 3002.937261][ C1] TC_ACT_REPEAT abuse ? [ 3002.937342][ C1] TC_ACT_REPEAT abuse ? [ 3003.977027][ C1] TC_ACT_REPEAT abuse ? [ 3003.977155][ C1] TC_ACT_REPEAT abuse ? [ 3004.083078][T13528] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 3004.442245][T13540] JFS: charset not found [ 3004.576642][T13539] ------------[ cut here ]------------ [ 3004.576655][T13539] kvm_is_error_gpa(gpa) == kvm_is_error_hva(uhva) [ 3004.576666][T13539] WARNING: arch/x86/kvm/../../../virt/kvm/pfncache.c:267 at __kvm_gpc_refresh+0x1510/0x1710, CPU#1: syz.8.11140/13539 [ 3004.603218][T13539] Modules linked in: [ 3004.607265][T13539] CPU: 1 UID: 0 PID: 13539 Comm: syz.8.11140 Tainted: G L syzkaller #0 PREEMPT(full) [ 3004.618668][T13539] Tainted: [L]=SOFTLOCKUP [ 3004.623000][T13539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3004.633241][T13539] RIP: 0010:__kvm_gpc_refresh+0x1510/0x1710 [ 3004.639622][T13539] Code: c6 05 4b f1 22 0f 01 48 c7 c7 63 bc 3f 8e be 44 04 00 00 48 c7 c2 40 42 02 8c e8 6b b3 62 00 e9 81 ee ff ff e8 81 0b 87 00 90 <0f> 0b 90 bb ea ff ff ff 49 bf 00 00 00 00 00 fc ff df e9 4b f6 ff [ 3004.659459][T13539] RSP: 0018:ffffc90006e671c0 EFLAGS: 00010287 [ 3004.665540][T13539] RAX: ffffffff8140d07f RBX: ffff888000000000 RCX: 0000000000080000 [ 3004.673654][T13539] RDX: ffffc90005b49000 RSI: 0000000000000381 RDI: 0000000000000382 [ 3004.681794][T13539] RBP: ffffc90006e67350 R08: ffffffff907a607f R09: 1ffffffff20f4c0f [ 3004.690057][T13539] R10: dffffc0000000000 R11: fffffbfff20f4c10 R12: 1ffff92000dcce4c [ 3004.698219][T13539] R13: ffff888042a29d60 R14: ffff888000000000 R15: ffffffffffffff01 [ 3004.706332][T13539] FS: 00007fbe5d4956c0(0000) GS:ffff888124dca000(0000) knlGS:0000000000000000 [ 3004.715293][T13539] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3004.721968][T13539] CR2: 0000001b3381cff8 CR3: 0000000029454000 CR4: 00000000003526f0 [ 3004.730127][T13539] DR0: 0000000000000002 DR1: 00000000000012ad DR2: 0000000000007611 [ 3004.738217][T13539] DR3: 000000000000000a DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 3004.746276][T13539] Call Trace: [ 3004.749588][T13539] [ 3004.752564][T13539] ? lock_acquire+0x115/0x350 [ 3004.757361][T13539] ? kvm_gpc_refresh+0x31/0x110 [ 3004.762233][T13539] ? __pfx___kvm_gpc_refresh+0x10/0x10 [ 3004.767793][T13539] ? lock_acquire+0x115/0x350 [ 3004.772495][T13539] ? lock_acquire+0x115/0x350 [ 3004.777375][T13539] kvm_gpc_refresh+0xe1/0x110 [ 3004.782080][T13539] ? kvm_xen_set_evtchn+0x11e/0x220 [ 3004.787398][T13539] kvm_xen_set_evtchn+0x14f/0x220 [ 3004.792470][T13539] kvm_xen_hvm_evtchn_send+0x120/0x1e0 [ 3004.798014][T13539] kvm_arch_vm_ioctl+0xfad/0x1a10 [ 3004.803067][T13539] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 3004.808572][T13539] ? __lock_acquire+0x747/0x2de0 [ 3004.813524][T13539] ? __lock_acquire+0x747/0x2de0 [ 3004.818624][T13539] ? lock_acquire+0x115/0x350 [ 3004.823333][T13539] ? lock_acquire+0x115/0x350 [ 3004.828066][T13539] ? is_bpf_text_address+0x26/0x2b0 [ 3004.833285][T13539] ? is_bpf_text_address+0x292/0x2b0 [ 3004.838620][T13539] ? kernel_text_address+0xa5/0xe0 [ 3004.843751][T13539] ? __kernel_text_address+0xd/0x30 [ 3004.849033][T13539] ? unwind_get_return_address+0x4d/0x90 [ 3004.854675][T13539] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 3004.860955][T13539] ? arch_stack_walk+0xfb/0x150 [ 3004.865830][T13539] ? stack_trace_save+0xa9/0x100 [ 3004.872228][T13539] ? __pfx_stack_trace_save+0x10/0x10 [ 3004.877729][T13539] ? kasan_save_track+0x4f/0x80 [ 3004.882642][T13539] ? stack_depot_save_flags+0x33/0x7f0 [ 3004.889640][T13539] ? __lock_acquire+0x747/0x2de0 [ 3004.894633][T13539] ? kasan_save_track+0x4f/0x80 [ 3004.899572][T13539] ? kasan_save_track+0x3e/0x80 [ 3004.904465][T13539] ? kasan_save_free_info+0x40/0x50 [ 3004.909859][T13539] ? __kasan_slab_free+0x5c/0x80 [ 3004.914844][T13539] ? kfree+0x1c5/0x650 [ 3004.919052][T13539] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 3004.924740][T13539] ? security_file_ioctl+0xc3/0x2a0 [ 3004.930081][T13539] ? __se_sys_ioctl+0x47/0x170 [ 3004.934918][T13539] ? do_syscall_64+0x166/0x520 [ 3004.939863][T13539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3004.946028][T13539] kvm_vm_ioctl+0x8f7/0xd30 [ 3004.950690][T13539] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 3004.955789][T13539] ? kasan_quarantine_put+0xbb/0x1f0 [ 3004.961235][T13539] ? tomoyo_path_number_perm+0x219/0x5f0 [ 3004.967133][T13539] ? tomoyo_path_number_perm+0x219/0x5f0 [ 3004.972841][T13539] ? do_vfs_ioctl+0x116f/0x1530 [ 3004.977874][T13539] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 3004.982956][T13539] ? hook_file_ioctl+0x1f2/0x600 [ 3004.988022][T13539] ? __fget_files+0x2a/0x420 [ 3004.992690][T13539] ? __fget_files+0x2a/0x420 [ 3004.997442][T13539] ? __fget_files+0x3a2/0x420 [ 3005.002180][T13539] ? __fget_files+0x2a/0x420 [ 3005.006899][T13539] ? bpf_lsm_file_ioctl+0x9/0x20 [ 3005.011918][T13539] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 3005.018182][T13539] __se_sys_ioctl+0xfc/0x170 [ 3005.022833][T13539] do_syscall_64+0x166/0x520 [ 3005.027586][ C1] TC_ACT_REPEAT abuse ? [ 3005.031934][ C1] TC_ACT_REPEAT abuse ? [ 3005.036310][T13539] ? trace_irq_disable+0x3b/0x140 [ 3005.041390][T13539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3005.047587][T13539] ? clear_bhb_loop+0x70/0xc0 [ 3005.052321][T13539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3005.058348][T13539] RIP: 0033:0x7fbe5c59e159 [ 3005.062815][T13539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3005.082588][T13539] RSP: 002b:00007fbe5d495028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3005.091160][T13539] RAX: ffffffffffffffda RBX: 00007fbe5c825fa0 RCX: 00007fbe5c59e159 [ 3005.101188][T13539] RDX: 0000200000000500 RSI: 00000000400caed0 RDI: 0000000000000004 [ 3005.109494][T13539] RBP: 00007fbe5c63506b R08: 0000000000000000 R09: 0000000000000000 [ 3005.117622][T13539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3005.125639][T13539] R13: 00007fbe5c826038 R14: 00007fbe5c825fa0 R15: 00007fbe5c94fa48 [ 3005.133815][T13539] [ 3005.136928][T13539] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 3005.144214][T13539] CPU: 1 UID: 0 PID: 13539 Comm: syz.8.11140 Tainted: G L syzkaller #0 PREEMPT(full) [ 3005.155238][T13539] Tainted: [L]=SOFTLOCKUP [ 3005.159565][T13539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3005.169625][T13539] Call Trace: [ 3005.172916][T13539] [ 3005.175861][T13539] vpanic+0x56d/0xa60 [ 3005.179887][T13539] ? __pfx__printk+0x10/0x10 [ 3005.184489][T13539] ? __pfx_vpanic+0x10/0x10 [ 3005.189008][T13539] ? is_bpf_text_address+0x292/0x2b0 [ 3005.194305][T13539] ? is_bpf_text_address+0x26/0x2b0 [ 3005.199521][T13539] panic+0xc5/0xd0 [ 3005.203259][T13539] ? __pfx_panic+0x10/0x10 [ 3005.207719][T13539] __warn+0x315/0x4c0 [ 3005.211721][T13539] ? __kvm_gpc_refresh+0x1510/0x1710 [ 3005.217056][T13539] ? __kvm_gpc_refresh+0x1510/0x1710 [ 3005.222360][T13539] __report_bug+0x276/0x570 [ 3005.226951][T13539] ? check_path+0x21/0x40 [ 3005.231292][T13539] ? __kvm_gpc_refresh+0x1510/0x1710 [ 3005.236590][T13539] ? __pfx___report_bug+0x10/0x10 [ 3005.241621][T13539] ? lockdep_unlock+0x5c/0xd0 [ 3005.246322][T13539] ? __lock_acquire+0x1511/0x2de0 [ 3005.251381][T13539] ? __kvm_gpc_refresh+0x1510/0x1710 [ 3005.256735][T13539] report_bug+0x16b/0x220 [ 3005.261098][T13539] ? __kvm_gpc_refresh+0x1510/0x1710 [ 3005.266413][T13539] ? __kvm_gpc_refresh+0x1512/0x1710 [ 3005.271748][T13539] handle_bug+0x9c/0x200 [ 3005.276017][T13539] exc_invalid_op+0x1a/0x50 [ 3005.280571][T13539] asm_exc_invalid_op+0x1a/0x20 [ 3005.285518][T13539] RIP: 0010:__kvm_gpc_refresh+0x1510/0x1710 [ 3005.291427][T13539] Code: c6 05 4b f1 22 0f 01 48 c7 c7 63 bc 3f 8e be 44 04 00 00 48 c7 c2 40 42 02 8c e8 6b b3 62 00 e9 81 ee ff ff e8 81 0b 87 00 90 <0f> 0b 90 bb ea ff ff ff 49 bf 00 00 00 00 00 fc ff df e9 4b f6 ff [ 3005.311059][T13539] RSP: 0018:ffffc90006e671c0 EFLAGS: 00010287 [ 3005.317159][T13539] RAX: ffffffff8140d07f RBX: ffff888000000000 RCX: 0000000000080000 [ 3005.325139][T13539] RDX: ffffc90005b49000 RSI: 0000000000000381 RDI: 0000000000000382 [ 3005.333112][T13539] RBP: ffffc90006e67350 R08: ffffffff907a607f R09: 1ffffffff20f4c0f [ 3005.341091][T13539] R10: dffffc0000000000 R11: fffffbfff20f4c10 R12: 1ffff92000dcce4c [ 3005.349074][T13539] R13: ffff888042a29d60 R14: ffff888000000000 R15: ffffffffffffff01 [ 3005.357092][T13539] ? __kvm_gpc_refresh+0x150f/0x1710 [ 3005.362445][T13539] ? lock_acquire+0x115/0x350 [ 3005.367137][T13539] ? kvm_gpc_refresh+0x31/0x110 [ 3005.372029][T13539] ? __pfx___kvm_gpc_refresh+0x10/0x10 [ 3005.377524][T13539] ? lock_acquire+0x115/0x350 [ 3005.382222][T13539] ? lock_acquire+0x115/0x350 [ 3005.386905][T13539] kvm_gpc_refresh+0xe1/0x110 [ 3005.391603][T13539] ? kvm_xen_set_evtchn+0x11e/0x220 [ 3005.396872][T13539] kvm_xen_set_evtchn+0x14f/0x220 [ 3005.401930][T13539] kvm_xen_hvm_evtchn_send+0x120/0x1e0 [ 3005.407419][T13539] kvm_arch_vm_ioctl+0xfad/0x1a10 [ 3005.412457][T13539] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 3005.417922][T13539] ? __lock_acquire+0x747/0x2de0 [ 3005.422875][T13539] ? __lock_acquire+0x747/0x2de0 [ 3005.427831][T13539] ? lock_acquire+0x115/0x350 [ 3005.432543][T13539] ? lock_acquire+0x115/0x350 [ 3005.437231][T13539] ? is_bpf_text_address+0x26/0x2b0 [ 3005.442437][T13539] ? is_bpf_text_address+0x292/0x2b0 [ 3005.447730][T13539] ? kernel_text_address+0xa5/0xe0 [ 3005.452850][T13539] ? __kernel_text_address+0xd/0x30 [ 3005.458050][T13539] ? unwind_get_return_address+0x4d/0x90 [ 3005.463696][T13539] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 3005.469853][T13539] ? arch_stack_walk+0xfb/0x150 [ 3005.474720][T13539] ? stack_trace_save+0xa9/0x100 [ 3005.479658][T13539] ? __pfx_stack_trace_save+0x10/0x10 [ 3005.485029][T13539] ? kasan_save_track+0x4f/0x80 [ 3005.489887][T13539] ? stack_depot_save_flags+0x33/0x7f0 [ 3005.495350][T13539] ? __lock_acquire+0x747/0x2de0 [ 3005.500320][T13539] ? kasan_save_track+0x4f/0x80 [ 3005.505177][T13539] ? kasan_save_track+0x3e/0x80 [ 3005.510027][T13539] ? kasan_save_free_info+0x40/0x50 [ 3005.515254][T13539] ? __kasan_slab_free+0x5c/0x80 [ 3005.520200][T13539] ? kfree+0x1c5/0x650 [ 3005.524276][T13539] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 3005.529914][T13539] ? security_file_ioctl+0xc3/0x2a0 [ 3005.535115][T13539] ? __se_sys_ioctl+0x47/0x170 [ 3005.539880][T13539] ? do_syscall_64+0x166/0x520 [ 3005.544652][T13539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3005.551340][T13539] kvm_vm_ioctl+0x8f7/0xd30 [ 3005.555855][T13539] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 3005.560931][T13539] ? kasan_quarantine_put+0xbb/0x1f0 [ 3005.566244][T13539] ? tomoyo_path_number_perm+0x219/0x5f0 [ 3005.571886][T13539] ? tomoyo_path_number_perm+0x219/0x5f0 [ 3005.577531][T13539] ? do_vfs_ioctl+0x116f/0x1530 [ 3005.582389][T13539] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 3005.587423][T13539] ? hook_file_ioctl+0x1f2/0x600 [ 3005.592384][T13539] ? __fget_files+0x2a/0x420 [ 3005.596995][T13539] ? __fget_files+0x2a/0x420 [ 3005.601623][T13539] ? __fget_files+0x3a2/0x420 [ 3005.606354][T13539] ? __fget_files+0x2a/0x420 [ 3005.610961][T13539] ? bpf_lsm_file_ioctl+0x9/0x20 [ 3005.615904][T13539] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 3005.620945][T13539] __se_sys_ioctl+0xfc/0x170 [ 3005.625540][T13539] do_syscall_64+0x166/0x520 [ 3005.630139][T13539] ? trace_irq_disable+0x3b/0x140 [ 3005.635167][T13539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3005.641233][T13539] ? clear_bhb_loop+0x70/0xc0 [ 3005.645915][T13539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3005.651827][T13539] RIP: 0033:0x7fbe5c59e159 [ 3005.656253][T13539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3005.675860][T13539] RSP: 002b:00007fbe5d495028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3005.684277][T13539] RAX: ffffffffffffffda RBX: 00007fbe5c825fa0 RCX: 00007fbe5c59e159 [ 3005.692252][T13539] RDX: 0000200000000500 RSI: 00000000400caed0 RDI: 0000000000000004 [ 3005.700229][T13539] RBP: 00007fbe5c63506b R08: 0000000000000000 R09: 0000000000000000 [ 3005.708221][T13539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3005.716192][T13539] R13: 00007fbe5c826038 R14: 00007fbe5c825fa0 R15: 00007fbe5c94fa48 [ 3005.724179][T13539] [ 3005.727806][T13539] Kernel Offset: disabled [ 3005.732146][T13539] Rebooting in 86400 seconds..