last executing test programs: 36m39.689314487s ago: executing program 32 (id=1163): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth1\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000001c0)="ffffffffffff0011223344554305000f32000000000100112233445500112233445500ff0000", 0x26, 0x0, &(0x7f0000000200)={0x11, 0x300, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg$inet(r0, 0x0, 0x0, 0x40880d1) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3400000011000500000000000000000000030000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400030062617461647630000000"], 0x34}}, 0x0) 30m8.31592854s ago: executing program 33 (id=3698): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000ad98f71103100000000007e0500000000fb7c9500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0xfffffffe}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d000000040000000400000007"], 0x50) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x800005, 0x32, 0xffffffffffffffff, 0x852ac000) timerfd_create(0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000004c0)={'syzkaller0\x00', 0x1}) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20040004) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000006c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newtfilter={0xebc, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe88, 0x2, [@TCA_MATCHALL_ACT={0xe84, 0x2, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb, [{0x5, 0x2, 0x0, 0x0, 0x0, 0x800}]}, [{0x2, 0xfffffffa, 0x9, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x1}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x6}, {0x3, 0x8004, 0xc, 0x101, 0x103, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x0, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0xfffffff8, 0x7, 0x7, 0x8, 0x5}, {0x8001, 0x8, 0xfffffffe, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x10000}, {0xfffffffe, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x5}, {0x23c, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x6, 0x87}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x2008, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x0, 0xde4, 0x2}, {0x0, 0x3, 0x2, 0x1, 0x2, 0x9}, {0xffffffff, 0x1, 0x4a1, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x8006, 0xe, 0x0, 0x80}, {0xd, 0x7, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0xffffffff}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x86, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf, 0x8}, {0x5, 0x3, 0x6, 0xfff, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x1, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x9, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xff, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x4, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0xfcf6, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x4, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x8000, 0xc6e9}, {0x1, 0x2d73, 0x40000000, 0x5, 0x9f17, 0xffffff7f}, {0x10000, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x13, 0x100, 0x57}, {0x9, 0x5, 0x8, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x2, 0x6}, {0x1, 0x8f, 0x9, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd52, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x202}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x83ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x6, 0xffff0001, 0xcca}, {0x9, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x9}, {0x9, 0x7, 0x8001, 0x7, 0x2, 0x2}, {0x5, 0x0, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x16, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x9, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x9, 0xffffff11, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x6}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x104}, {0x81, 0x8, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x80, 0x8, 0xfffffff9, 0x8}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x80000004}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xbc, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x8002, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x80000000}, {0x20000009, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x47, 0x6, 0x8936, 0xdcb, 0x7, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x3}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0x9, 0x6, 0x7, 0xe77}, {0xfffffffe, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x9, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x80007, 0x104, 0x78d, 0xffffcff7, 0x4c0c}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0xf, 0x5, 0xfffffffa, 0xff, 0x80004, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {}, {}, {0x2}, {0x2}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x2}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x36bc5bece03d104f}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0xa}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {}, {0x3}, {0x6}, {0xa}, {0x5, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x5}, {0x2590228f88cc2931}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xebc}, 0x1, 0x0, 0x0, 0x10}, 0x0) 21m32.683390005s ago: executing program 34 (id=6687): syz_open_dev$usbmon(&(0x7f0000000000), 0xa, 0x600800) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='projid_map\x00') pread64$ublk_ch(r0, &(0x7f0000000300)=@buf_1k, 0x1000, 0x8) socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001380)=@newqdisc={0xa8, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2a, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x78, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x8000]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xcd}]}]}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x30}]}}]}, 0xa8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r2 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x406, 0x1bc}) r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.log\x00', 0x48000, 0x8) ioctl$XFS_IOC_FSGEOMETRY_V1(r3, 0x80705864, &(0x7f0000000280)) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r2, 0x2219, 0xcf74, 0x16, 0x0, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x3, 'vlan0\x00', {0x80000001}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r5 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x5a, 0x0, 0x0, 0x4001090}, 0x20000800) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000001440)) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000240)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="10", 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4020845) r6 = add_key$keyring(&(0x7f00000014c0), &(0x7f0000001500)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000001540), &(0x7f0000001580)={'fscrypt:', @desc4}, &(0x7f00000015c0)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r6) add_key$fscrypt_v1(&(0x7f0000001640), &(0x7f0000001680)={'fscrypt:', @desc1}, &(0x7f00000016c0)={0x0, "019af2614ba26291c38206ed71472d664f913df34e60a3f34636d6ee89c849cabd912b106409cfa2bdcb914279bc39e5bf797c6c8e61ec8cfce597ddec4540e5", 0x1a}, 0x48, r6) add_key$fscrypt_v1(&(0x7f0000001740), &(0x7f0000001780)={'fscrypt:', @auto=[0x1a83fea49a0a00b0, 0x30, 0x30, 0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x33]}, &(0x7f00000017c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x19}, 0x48, r6) add_key$fscrypt_v1(&(0x7f0000001840), &(0x7f0000001880)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36, 0x30, 0x35, 0x66, 0x30, 0x64, 0x30, 0x66]}, &(0x7f00000018c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbe4ddeeff00112233445566778899aabbccddeeff00112233c45566778899aabbccddeeff", 0x20}, 0x48, r6) add_key$fscrypt_v1(&(0x7f0000001940), &(0x7f0000001980)={'fscrypt:', @auto=[0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x34, 0x30, 0x30, 0x34]}, &(0x7f00000019c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r6) add_key$fscrypt_v1(&(0x7f0000001a40), &(0x7f0000001a80)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x35]}, &(0x7f0000001ac0)={0x0, "00112233445566778899aabbccddeeff00112233445566357a2e68bc1629ecff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r6) add_key$fscrypt_v1(&(0x7f0000001b40), &(0x7f0000001b80)={'fscrypt:', @auto=[0x31, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x36]}, &(0x7f0000001bc0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00", 0x40}, 0x48, r6) 16m14.629639487s ago: executing program 35 (id=8141): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(r2, &(0x7f0000000040)=@abs={0x1, 0x0, 0x80004e21}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000140), 0x2, 0x692a42) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/resume', 0x149a82, 0x80) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0x6) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000200)=r5) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000280)={0x1, r5}) openat$full(0xffffff9c, &(0x7f00000002c0), 0x1810c3, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/67, 0x0}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x14, &(0x7f0000000400), 0x50) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000440)={0x1, 0x1, &(0x7f0000000480)=""/247, &(0x7f0000000580)=""/87, &(0x7f0000000600)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xf3, &(0x7f00000006c0)=""/243}]}) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f00000007c0)={0x1, r5}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000800)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) sendmsg$nl_route(r3, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="4401000010000100feffffbf000100000000000000000000000000000000000020010000000000000000000000000001000103944e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac1414bb000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000060000000000050000000000000000001f00000000000000fd0100000000000002000000fcffffff000000002abd7000043500000a0001fd2000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0015005a07350003"], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) 16m11.092799917s ago: executing program 5 (id=8162): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000001080)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2}) sendmsg$nl_route(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 16m8.691476982s ago: executing program 36 (id=8163): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x1, 0xb, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000068a000000000000041f00001801000020696c25ffb00000002020207ba1d8ff000000007ba1000300000000070100000400ffffb702000008000000b703000002000000850000002effb00095"], &(0x7f0000000a00)='GPL\x00', 0xa, 0xffa, &(0x7f0000000a40)=""/4090, 0x0, 0xa8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94) 16m8.659901255s ago: executing program 5 (id=8165): syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) unshare(0x20000000) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000480)=@abs={0x0, 0x0, 0x4e20}, 0x6e) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/188, 0xbc, 0x100000e0) 16m8.07283382s ago: executing program 5 (id=8167): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@private2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x24}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="a00000002100010000000000feffffff7f00000100000000000000000000000000000000000000000000000000000001fffe0000000200000a00e080000080ff", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000050001100fcfeffff7f20000000000000000000007688f27e0000000000040000dd4231fd00000000000000000000ffffffffffffffffffff0000000000000000000000006c01000004"], 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) 16m7.344956864s ago: executing program 5 (id=8170): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, 0x0, 0x1, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0), 0x84000, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 16m6.178341682s ago: executing program 5 (id=8172): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x40000044}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x128}}, 0x0) 16m4.545263045s ago: executing program 37 (id=8173): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="0218000014000000000000000000000005000500000000000a00ffff00000000fe8000000000000000000000000000aa0000000000000000080012000000000003000000000000051200000000000000000000000000000002000002000000000000000000000000fc010000000000000000000000000000050006006c0000000a"], 0xa0}}, 0x0) 16m4.536580605s ago: executing program 5 (id=8175): syz_usb_connect(0x3, 0x3d, &(0x7f00000002c0)=ANY=[@ANYBLOB="120102030109010c09050c0c10000802400725010806050009050e000800f10f05"], 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r2, 0x29, 0x1a, &(0x7f00000001c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x14) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000200)={0x8, {{0xa, 0xfffe, 0x1, @empty, 0x65}}, {{0xa, 0xfefd, 0x0, @initdev={0xfe, 0x88, '\x00', 0x3, 0x0}}}}, 0x108) clock_gettime(0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000740)={&(0x7f0000000340)=@generic={0x11, "64e3cef363e557b38e80e562c98fd3e4907a2b3d7e7055e8435ccb57d8d3dcd1d74beff204f32918ec78ac3ac99052f2f710bdf1d23f24a33bff1ca1f42dd0a848539f59251e82c2cafbbb28e3c5c8f538f9f3af092f1376b0b6958e05d38ad1ea597aed25df23bb7f46dbad99157f33e8cccb00000000000000000800"}, 0x80, &(0x7f0000000680), 0xfffffffffffffd4, &(0x7f00000003c0)=ANY=[], 0x78}, 0x4048001) rt_sigprocmask(0x2, &(0x7f00000008c0)={[0xfffff7feffff7f7d]}, 0x0, 0x8) r3 = gettid() tkill(r3, 0x12) io_setup(0x2, &(0x7f0000000900)) r4 = socket(0x26, 0x800, 0x90c) r5 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r5, 0xc2604111, &(0x7f0000000e80)={0xfffffffe, [[0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff, 0xff, 0xffffffff, 0x3], [0xffffffff, 0xffffffff, 0xfffffffb, 0xffffffff, 0xffffffff, 0xffffdfff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0x9e4, 0x0, 0x0, 0x1}, {0x8, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x7, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0xffc, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r5, 0x4140, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f00000000c0)=""/23, &(0x7f0000000140)=0x17) ioctl$SNDRV_PCM_IOCTL_REWIND(r5, 0x40084146, &(0x7f0000000080)=0xa9e) ioctl$SNDRV_PCM_IOCTL_REWIND(r5, 0x40084146, &(0x7f0000000040)=0x7) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r4, &(0x7f0000000180)={0x11, 0x0, r7}, 0x14) setsockopt$packet_int(r4, 0x107, 0xc, &(0x7f0000000040)=0xe9, 0x4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0) sendmsg$netlink(r4, 0x0, 0x20040051) 16m3.901992233s ago: executing program 38 (id=8175): syz_usb_connect(0x3, 0x3d, &(0x7f00000002c0)=ANY=[@ANYBLOB="120102030109010c09050c0c10000802400725010806050009050e000800f10f05"], 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r2, 0x29, 0x1a, &(0x7f00000001c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x14) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000200)={0x8, {{0xa, 0xfffe, 0x1, @empty, 0x65}}, {{0xa, 0xfefd, 0x0, @initdev={0xfe, 0x88, '\x00', 0x3, 0x0}}}}, 0x108) clock_gettime(0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000740)={&(0x7f0000000340)=@generic={0x11, "64e3cef363e557b38e80e562c98fd3e4907a2b3d7e7055e8435ccb57d8d3dcd1d74beff204f32918ec78ac3ac99052f2f710bdf1d23f24a33bff1ca1f42dd0a848539f59251e82c2cafbbb28e3c5c8f538f9f3af092f1376b0b6958e05d38ad1ea597aed25df23bb7f46dbad99157f33e8cccb00000000000000000800"}, 0x80, &(0x7f0000000680), 0xfffffffffffffd4, &(0x7f00000003c0)=ANY=[], 0x78}, 0x4048001) rt_sigprocmask(0x2, &(0x7f00000008c0)={[0xfffff7feffff7f7d]}, 0x0, 0x8) r3 = gettid() tkill(r3, 0x12) io_setup(0x2, &(0x7f0000000900)) r4 = socket(0x26, 0x800, 0x90c) r5 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r5, 0xc2604111, &(0x7f0000000e80)={0xfffffffe, [[0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff, 0xff, 0xffffffff, 0x3], [0xffffffff, 0xffffffff, 0xfffffffb, 0xffffffff, 0xffffffff, 0xffffdfff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0x9e4, 0x0, 0x0, 0x1}, {0x8, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x7, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0xffc, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r5, 0x4140, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f00000000c0)=""/23, &(0x7f0000000140)=0x17) ioctl$SNDRV_PCM_IOCTL_REWIND(r5, 0x40084146, &(0x7f0000000080)=0xa9e) ioctl$SNDRV_PCM_IOCTL_REWIND(r5, 0x40084146, &(0x7f0000000040)=0x7) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r4, &(0x7f0000000180)={0x11, 0x0, r7}, 0x14) setsockopt$packet_int(r4, 0x107, 0xc, &(0x7f0000000040)=0xe9, 0x4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0) sendmsg$netlink(r4, 0x0, 0x20040051) 15m0.799428265s ago: executing program 9 (id=8407): mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) socket(0x400000000010, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000e6000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000140)={0x0, 0xc89d, 0xc000, 0xa, 0x40}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) symlinkat(&(0x7f0000000340)='.\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000280)=0x6, 0x4) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000002c0)=@assoc_value, &(0x7f0000000300)=0x8) syz_open_procfs(0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0xe0881) openat$hwrng(0xffffffffffffff9c, &(0x7f00000006c0), 0x64400, 0x0) write$sndseq(r2, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000400)={0x80, 0x1f4, 0x5, 0x7, 0x9, 0x3}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="38010000100001000100f8ff00010000e0000001000000000000000000000000ff010000000000000000000000000001ffff07144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c00000000000000000000000000ffffac1e000100000000000000009201000000000000060000000000000000000000000000001c250800000000000200000000000000f8fffffffffffffffc232e0e00000000090000000000000000000000000000001f00000002000000feffff0300ffffff02000000fcffcb24000000000000700003350000020001000000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c000000120001000000000000000000e0000002000004000000000000000000000004d50200"], 0x3c}}, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x48a, &(0x7f0000000100)={0x80, 0xc5b, 0xfff}, 0xc) 14m59.265463281s ago: executing program 9 (id=8412): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)={@rand_addr, @private, 0x0}, &(0x7f0000000040)=0xc) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @multicast1, @local}, 0xc) r2 = openat$binderfs_log(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder_logs/transactions_hashed\x00', 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x98, 0x0, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x38, 0x6, "f3ad4c0f74a6881f3b6c5b90a080343f5a6b5e89f940f8b29dade6270df2b6f1a4ebbba640fdb05cf68121c7aef7637317a4c355"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x54, 0x0, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_TABLE_USERDATA={0x3f, 0x6, "db76dfc3d5e0c9d17c9f675d86ca15f0838fbd4f8af49c704007e7fec399178e14a74787d3f8567605fdaae81b236ab30e06c8281dab5a9780ed7b"}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELFLOWTABLE={0x24, 0x18, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELTABLE={0x5c, 0x2, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x2a, 0x6, "a5515b55de8d1ff6e4bdabf263fbb9d368824cb4c5c7444802d459bd20f741c00e3e932a64e5"}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1f0}, 0x1, 0x0, 0x0, 0x8000}, 0x8011) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r2) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r3, 0x300, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x890) ioctl$KVM_CAP_DISABLE_QUIRKS(r2, 0x4068aea3, &(0x7f0000000500)={0x74, 0x0, 0x300}) ioctl$KVM_HAS_DEVICE_ATTR_vm(r2, 0x4018aee3, &(0x7f00000005c0)=@attr_other={0x0, 0x200, 0x6, &(0x7f0000000580)=0x4}) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, 0x0, 0xc21, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x80) ioctl$DRM_IOCTL_AGP_ACQUIRE(r2, 0x6430) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000700)={{{@in=@rand_addr=0x64010102, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0xffff, 0x4e21, 0x7, 0xa, 0xc0, 0x0, 0x9, r1}, {0x2, 0x4, 0x3, 0x4, 0x1, 0x8, 0x15c, 0x2}, {0x9, 0x8, 0x3a2d, 0x2}, 0x6, 0x6e6bb4, 0x1, 0x1, 0x0, 0x2}, {{@in=@rand_addr=0x64010101, 0x4d2, 0xff}, 0x2, @in6=@remote, 0x3503, 0x5, 0x3, 0x7, 0x0, 0x7, 0x8}}, 0xe8) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x72) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r2, 0x40045731, &(0x7f0000000800)=0x9) syz_ublk_setup_queues(r2, 0x0, &(0x7f0000000840)={0x0, 0x87f2, 0x1000, 0x3, 0x1ce}, &(0x7f00000008c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x67aa, 0x2000, 0x3, 0x2dc, 0x0, r2}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x25b8, 0x2000, 0x1, 0xb6, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4503, 0x800, 0x1, 0x272, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4c27, 0x2, 0x2, 0xc9, 0x0, r2}}], 0x4, &(0x7f0000001b40)={0x2e, 0x48, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x100}, 0x0, 0x0, '\x00', {0x0, 0x8b9, 0x0, &(0x7f0000000b40)=@buf_4k="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"}}, &(0x7f0000001bc0)) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001c40)={0x2e, 0x4e, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x6a2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000001c00)=@any_dev={0x4, 0x310, 0x0, 0x0, 0x1000, 0x2, 0xffffffffffffffff}}}, &(0x7f0000001cc0)=0x0) syz_ublk_setup_queues(r5, r6, &(0x7f0000001d00)={0x0, 0x4f57, 0x2, 0x3, 0x3b4, 0x0, r2}, &(0x7f0000001d80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1fe5, 0x800, 0x2, 0xa5, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x687a, 0x2, 0x0, 0x265, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xff0c, 0x40000, 0x2, 0x1f7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x57fe, 0x4000, 0x3, 0x12d, 0x0, r2}}], 0x4, &(0x7f0000003000)={0x2e, 0x44, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, '\x00', {0x4, 0xceb, 0x0, &(0x7f0000002000)=@buf_1k="5c85a206b077fd357da0d275d697a5d6b0db72a5d7ea893110d47fd715b00d9978f29c075a3bb2f094627b049195c3abd139063d995ca97b573b242bffd68a21c983e8227dfc68c601b8c2e581cbe865981dde0e7b01bc61e21f78c33bd6dc28a391e91170a8e2e521f0cedac302588e2f5ea6781906b19efef078cc6707ccf6193a3184873b0256572668d6c8c2e24c8600c55cad495803aef3d9ce1b2a4301e4e2d6e47defee75b5a85fbe33af041ba6cf98ec02fd516691722e536a5a50c2f08b0bcb9689c6f2af8eb9ad67dd65d8bde2d3ac27a55db3551ce8be30a833be8777ccc0ed69c218d8cad3df87562cccdee0eaa9401034695ec28bfaf65e1c6b8c78ef9ca987ded4a8692a7b23da98c1b5a3a2675c242796dd58d187623a3ecf7b563e0f57bba16e296650c0441d4a29db3f469918c31e50eb5e40733b151009ebcac80f5796527c0d3af268310b04394e6c5c9e1913d3c2cc4a95bc432ca85f8e7225d8cb62bcd2b3a27ad390047cea1e07e35bbe52193228c8c2a6a76d71a33a8ba0f73f2969ba44e9afbda229e418358075ff1454fff8087a5f19214d963d7d89b47297b6825e09350d85def2c473f8f027b78fe6f9b7c56643c08c0f2946b908cdd8b3703eb141c08934cc6e70c020a620c764f273466ef02cfc99e558ced81d61c5dbaa9b619d03995222278a85d0878960257595a863b17026e1307791188d276d3af74e81ff944a82f19563146c61ef36f02d327e1f6bfc3bf1a93677fb37e75162368a3800d33f5c69f3b0d8ead9a4f0d9f0c4f0e728b5b51a592f6ca34749e958e52478f4380bfebb2b01bace805eb64cf45646b084bd7089269760bff1730d15174951639ec06c54e903593b0117fcc25594cda633798f839d9df4dcbb0f3d967142ae94a4cd533c6b1843dc40c83a54e9a5c1f56914ae932c4aae9b1da3f2fb7c1b00b1cb5fe0e40ab22e5a5c972f735317657d82f9485cbb1a6805e201985f71cc1ba7944006c2e59e59a45f81e7de650f3ca2ba8cf03c986589fa512ba7026649ca6dd7c7f4bf7b31decf9e790f0e33ae4a5577d1b57d65296f67a66b075014eb4a50c370a4d5e54c1e61b07a296a8b5de0f32de7b4dc415754a0782c86c0b720e20cd91963185781f359cee30ef7c0eae054e8926f049cb2384fb79991599c099dbaba073d0b46260d4c8df08af98d4e823b7f33015cd8968e33bd1c073e2ac9feb0daffe14b21e84d046158cf323cae26a9342522a692b97fb07a106eb864c3be33f6f4bdadcec7793423542700b4c12e0dd41709684d74040ea54f20d1a666b2fce8d145b99866991bf8bbbc06cf3fe74b4687a30d8d6a41a0803463923025cb07f856894dd9a6386fe93dc0ea79a3f4e4693be8743488d8e54557c110481f542552772f1a21b19b0a705140fc015e5245ccf0e94255b8af"}}, &(0x7f0000003080)) syz_io_uring_setup(0x6a8c, &(0x7f00000030c0)={0x0, 0xfefa, 0x800, 0x1, 0x226, 0x0, r4}, &(0x7f0000003140), &(0x7f0000003180), &(0x7f00000031c0)) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) writev(r8, &(0x7f0000003540)=[{&(0x7f0000003200)="9b73fa2b81480e4d1785022497c0ed03ef23f40d3571a8e869ac16f18a8199e484ecb3bb06bc74aefae8918e16576aa358546aea5f7d55aae7e9ac0e17dd3a", 0x3f}, {&(0x7f0000003240)="0dad0c252db56718d2d3346a0842846c5c9b1527ed1637b9585b6c51f9258a8e06d1d45020a2860cb2dc8c10e6a642b87df7b827fdccfe8088d926ebcd82f37e26d4312d273899b1bd77538d776419ae7facaab60915bd3a000b5c64cf4cb8ad624cbd17020f1da4add5f3f483130bffb38464dcf60f3b79ab596cc1aadf", 0x7e}, {&(0x7f00000032c0)="be6db9657345f19a46e15258d164a8166793a9e5e0592e6d9e4d88d6fcca276842f7c2fe6b659a", 0x27}, {&(0x7f0000003300)="7a50f5f88acaa2f367dd77ffb5a2b81ac0ff8a292be067d3f3399530bfcfb6cebaa239f0159d65b7df28027bfe3a", 0x2e}, {&(0x7f0000003340)="158d7b1ca9b4c45553b4c183102f480b74f2b268faaa7bf09cc9978d58962bc98fba5af1e6c386681a0f64ee26b7543eeb87f7b208063a5ba868359a1a2faccbf83b00a0739bc6de259df1379aa37c559efd87e35e380e8277cad7ab2e596e458f96205327355c7ce631c3f23e35a7ed6402a648a62789f25b340cb1ba25c4c791850a68ce5152116905fd8e7fbaa3c2feea45746a691cfcff4e56a548ba625d362493406346b48aa8fd089102f93212f919c84122113710ae49dd81d90f7b6a2a3e16bc6927afb2fd0b32d05d87c0fe23e16d1b67644356144438568470eae72ab87a099b8f3385205ddafc654a", 0xee}, {&(0x7f0000003440)="5f198827ceb19fa4ea29b4bc83b5fbbfc9687943370ef57eca7fddb35d2c6867104ebbad22e8c2e426ed973659a06e6684ae4627b33d9d787fb6d242f0254d4c4f9472b1eeb2cbd56a3b45d7943b2c7d87fbf2dd8a4e48a9bfee37bfb1ef99cee85ef5aea90d6ec68e4907282524163923e93a9e64f4833071b2683a44b1d9e9e7ea8a3d86b3b126cd1b6f005512e2572680b3f5b24db6a8c34ddf84ee90cc0a15f26704e3784027a0bf56e9ec0b9ce889794b463eb93c9f855a0981d5cb480378dd10371b6eb256a67e906a29e50095ed98ef15533f5f4947fa9af92c9cf3cf43ec", 0xe2}], 0x6) r9 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000003600)) mount_setattr(r2, &(0x7f00000035c0)='./file0\x00', 0x800, &(0x7f0000003640)={0x81, 0x310bc0e699e7b3e6, 0x20000, {r9}}, 0x20) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000003680)={0x2, [0x0, 0x0]}, &(0x7f00000036c0)=0xc) pipe2(&(0x7f0000003700), 0x80c80) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000003740)={0x8, @pix_mp={0x8, 0x6, 0x44495658, 0x6, 0x7, [{0x3b4, 0x1}, {0x9, 0x3}, {0x2, 0x1}, {0x9, 0x8}, {0x5, 0x5}, {0xffffffc3, 0x1}, {0x3, 0x5}, {0x2, 0xf}], 0x0, 0x4, 0x6, 0x1}}) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000003840), 0x0) write$sndseq(r10, &(0x7f0000003880)=[{0x33, 0x0, 0x3, 0x6, @tick=0x6, {0xef, 0x2}, {0x4, 0x4}, @raw8={"feaade69aa081ca03c78ef74"}}, {0xff, 0x9, 0x9, 0x5, @time={0x40, 0x80}, {0xdf, 0xc}, {0xc3, 0x3}, @raw8={"039a41fb24b4599029b68ac0"}}], 0x38) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r7, 0x8002f515, &(0x7f00000038c0)) setsockopt$inet6_int(r2, 0x29, 0x4c, &(0x7f0000003900)=0x2, 0x4) 14m58.568540042s ago: executing program 9 (id=8415): r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x109000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000340)=0x1) write$ppp(r1, &(0x7f0000000080)="0adfc5", 0x3) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x81, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000006000000000000000000ad0000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f00002d6000/0x2000)=nil, 0x2000, 0xb) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x41000ffffffff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0xfff, 0x7dc, 0x38414761, 0xf, 0x1ff, 0xffffffff, 0x8, 0x1, 0x0, 0x3, 0x2}}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000540)=""/253, 0x114}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x4040000) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/power/disk', 0x2, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r8, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r7, &(0x7f00000000c0)="fc", 0x7}]) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) 14m57.60620712s ago: executing program 9 (id=8423): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f0000000640)=ANY=[], 0x1, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_clone(0x21000200, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000002c0), 0x318, 0x0) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000340)={0x60002005}) recvmmsg(r2, &(0x7f0000000380), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x2c, r5, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x8080) syz_emit_ethernet(0x4a, &(0x7f0000000500)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x84000, 0x0) 14m55.816125254s ago: executing program 9 (id=8430): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000380)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000003c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000400)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="00070800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c1122334400080000000500050000000500060007"], 0x4a) 14m55.432252129s ago: executing program 9 (id=8435): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a0010000000", 0x28}, {&(0x7f0000000000)="11c9064268", 0x5}], 0x2}, 0x8040050) 14m54.460312639s ago: executing program 39 (id=8435): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a0010000000", 0x28}, {&(0x7f0000000000)="11c9064268", 0x5}], 0x2}, 0x8040050) 14m2.411436142s ago: executing program 2 (id=8640): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r0, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40106f52, &(0x7f0000000240)={0x3, &(0x7f0000000280)=[{0x17, '\x00', @st={0x4, [{0x3, @svalue=0x9}, {0x2, @svalue=0x7}, {0x1, @svalue=0x3}, {0x1, @svalue=0xfffffffffffffffe}]}, 0x4}, {0x2, '\x00', @buffer={"556074847dff3ec92fd15c5a5ab6e820b94f2a1ade3e311b88351c3481518fff", 0x20}, 0x9}, {0x3d, '\x00', @st={0x4, [{0x2, @svalue=0x787a9145}, {0x3, @svalue=0x939}, {0x3, @svalue=0x5}, {0x0, @svalue=0x50}]}, 0xe6}]}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r2 = memfd_create(&(0x7f0000000940)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r3 = dup(r2) write$binfmt_elf64(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="7f454c4606ff78a33e0200000000000003003e00"], 0x40) execveat(r3, &(0x7f0000000a80)='\x00', 0x0, 0x0, 0x1000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x9}}, './file0\x00'}) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x2e, 0x70, 0x0, r3, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000f80)=@new_dev={0x2, 0x6a0, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x1}}}, &(0x7f0000001040)=0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000001380)={0xffffffffffffffff, 0x2, 0x4, 0x584}) accept4$unix(0xffffffffffffffff, &(0x7f0000002640)=@abs, &(0x7f00000026c0)=0x6e, 0x80000) syz_ublk_setup_queues(r4, r5, &(0x7f0000000480)={0x0, 0x4dd2, 0x0, 0x2, 0x1b1, 0x0, r3}, &(0x7f0000001100)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x314e, 0x20000, 0x1, 0xcc, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2f7e, 0x80, 0x0, 0x17b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcf7, 0x1, 0x2, 0x38d, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb026, 0x4, 0x2, 0x2fd, 0x0, r3}}], 0x4, &(0x7f00000023c0)={0x2e, 0x20, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x1}, 0x0, 0x0, '\x00', {0x2, 0x541, 0x0, &(0x7f00000013c0)=@buf_max_buf="38cc3ee28f5e1a3fac0887de64af2b7f1a80090817ff7cd72d7323a8df3a95c87d9d05e48c7cbc4a3d36158e66a860daca5f2e183f807bafd8b4c76251490cd588fcda17e4ca384f78641c923fde4adfb440772a32f17c151ba06027d9cdf8e435a094e4cd1edd30f96ae538cf738da495a5fa52e279a5c41e0fdfd2b197ec4ad8ddcc92ba65f8b546416cc0eb995ba0325687ad68bc84cd73667a92698681e0245c58e1fa1046ffd8b1dd35a8cd96a445bb897c9ae0d284d81dbc790412cfe9d8cd359d9c7f05831ab5a076cd2bbd1ea91dfe746175d007f9cb9157e986ae44817223b83187280a132ebc17b532f7117639a116c1c00e5297fd754880e2560af78014c2a0ed99a76d3d9660695282b3cedda7cf7342042104690ff219529658b111ab850c6c5112a1837b8fb9c2ef1815631ae21260945abac040ca280f3e6e738c886c7585388c0f9291d88ca7fa432e972e3b2fd1c422af6f184ab60cbc584dae7bfd59aa7ad708f48e1ceb921dbf67a68f5a739faed468c4166d5650f3bea816e0e945cacb7d05223a7f1a74da19eb587cdf0368d34674d4b6aa7cd58cf8d957d0afb9b856bb2fffba2588f4dfe318e45df40897ea5984c2b3f492630ee348fd4bde6c716f824caeb1f6554a4f2f56eb23b5d57d33edec688c6fd0d0795b09bc93823b091c1caa79c8104256e6094648ae7bf19b28daa5389bfc6517ca86bf4352624638068223b402aa69033b64f18cbfbc248e7dba4f6ca251413928130c6a6801e0970aafa05036563e80685290f399d825d058be1532a6a6e06e89841f7f5c6cb7710ce828ba814f0af53bda3ad6194cc9bab2200bf69298d45074320f6d7abd9a4a10712a374d7df9e18cd7d856b792fcd581a84b2c9d6d56815a9a5c6d8b1bd62fe9eb0a7e537d15b72abe1ed72e206ac07aa432cc858bc8264a6216c67061aa3cb74baa9166f588c6b54039518202a135cd725b902694f281d81583adc92b13e6c7e4c469fb83682007a48843502d5812358d922c80628d4294280d227edd1ace337a2f582977082b70acb2906afb3ec0d78f82250c3196c4370a669f2aa98b389b018c826d43c9fbbb0f4249c0ed4318bcdea0e02e06bd39ec143226295c3c2a11976fefe2707dfe58d2310adfca76b09e037a31a71fdcecc4eac4b3accb604ddb6becd2495bd9d880ffbdc0961e2dc5c4a4e69d0301326000325a4e99ba3a63611f5ea256fcea57044310b73dedff9e6b14da3a2a67d0903a3de884dcc3ff4ee7232bc6bb5630469970fe774f9d7c6b8aa4ac4a487b8c54259e4aa644a4a5a24c8a36c3a41133c36a79fa44029f326f5e67bac2db1d02441f02eeb54fdbac1b0dd667eaac1226104040bb13083ccac1bb30a9dbd752d35cdeb0ba692c95f8238f3ab0cdac9bd7685b80808a028245ee14a84ee602a54d95244a04824024b4947b078f3c4b942675a84fefc393334076921fc43f77ffa7d8df040d8d272d5eb29b098d51d683500c6942ff55dbffda7017fdfffb5eb240f75a618ec58d1bd392cc487c4242ea75c3f60b33732f9e66882880a487ceaf73a35f3f431023dc563347e759e8486c056dc5f1bf1a0bbd48b71db18b00f49735136b11ad78b81d85094d0b64119068e739e2ca31815c0193570cfd55d26c9cc5b9cab8ef5be4060f8853b35e2d9a5271c72e607464f30e5e58c25880c95c7861a7f67ae675019ce942e0899f0840d5fe8e1bf759a5474cb02ec358020458029381ab9dad462fde6cb4acc5aefc58ed09fe1afc87e989975573c7c207365975c222ca7247f1ebacbefd39be39b5db8a6c02d55e9b8685e15a8206d797b6d13e15ff8a2cfdb8efa61a085a5689bfc3df1faf7c68475ebb803f94402e360db464c5e53476657e33f6ce0dea4655287367deb1a30cf2f9c0cbdbab224f6e8974d9afadcd5caa5d1cbbd6018ab40211cb98aa2eb3a18904fd66f41212e7c887ef05a6f281f718e87747e7594f8da16d7172958ee59d1c8d432ecd230dc83d0c306d55ac23a77ede4cbc4f6fc3f8d09f2e457445b98878857911ccd32d3a51612fcdb372fa89ae0e1e2d71c07720fbd6c547d066ea06312363013b5557bbc3c96f106639cc037c3568469a9851ef1ebd5b88492df1a915fce4ac49f7595910f677e5412e9c65a3cb8d2f39a2fdfe86ab478c382d9bc5b649901e1c1c65f38115d2decf8b05c313eb6131fd67586dc143c9f74e563f464005f4ba68d53803326011973cfe5f36d274f3b4a3cfcff1fbe2a98bcc2165b501680078e4e3b6392c58cec0fc02fba88e321d755f57b2b18cb91d9b4e57fdbc203e915d3169214ef4791172708a33c02eb0315c19901c9f399e0a40120f35814cf4e851b7ff574f880020b269f0ef7462a9a816c19a6c8a0a80f6a6304bb7561bae7cb34577ef67809e4ea1e9d385fc999c61cf4413bb862299ce353a7864b9a3bacb66e48f710321f06dfb5a3b77987fea41e80a8961bbcc543256494904fd85d836fc9ea795a7c18b5a214113e6e004f903f3359daab787ab49e9ac6f8e11c996d9ec87fbfb7dc7e224a9342ea7823bb8e67a61fca604fcc1ead16ceb835e695a371260c0c05b7219465d78faf3ed8d6fe4616e149ae7ff8a4d1a9557fbe6205c0b49276b91d62755586bae9793ada6ec15be761ea2efee08e33ac3d260972e131477f7662e49675df7339ad983fa750fe4ab668cc0aa0db7593121ecf27b1ee93170f159be53aded03d02546869aff7febb75fa146ad77fc67fe630dfce26d227484c2e3eada137f59a553fea761b4376953b4cf2bf2794b37f9cf9c750e00970356e257fb830d129e7527bc707ca21b01b3c0331c13719262038940d89326c2180f0b18519fc8fcc187026df083dcd195866c62a06546efd1cf66fb9c5f667d0acfc762d7fb19b678fd5ba7f83d1fe7c34badff1cf6548d2af50f1e35d9a59eb922cfb8b86acd6bd2510b38eeff94d2a1d2abb1b0de19cda18f8a69a309ea711b2e58c76dabdd776f8f4931bc9eb2ad8b45eb246917826ee19198495c4af7370b31dbdb122304c1e6b2c6c8967382904511df4fd3ef8d3154468ada20c3ff6ac94c809f8ff20b1e4e952f8123c5f0129dd43fc04ab9365679cff18bfc8803fff8cf9a15da730546bd64015fb58b158b98d3db74957694311aa8fd50bbc89f45949abdd61d206c8abea783035da3bf32f31ce6fef735221852b0855c3dbc708b6cb9b31782a5139145cbf379b53b3ccfd9d9a978a25b1fbfa3f1d2bac40b315984dbfd5cca20049590baa2ecf835fbc84d4fe382e8fa95e8ecb275bf609cf7eb4ea7da1f033de6c188843087b7b4c3e786c4ab317484be00c21c9a0f3674d8cbcf407a4059726a73eee3a3704aa802ed6450cb037ff45627601cfed74385348c9a1341e7a231faa71715bf40cb9702deb26c2e81df0ee5ef92539d492700cebaa3a5d29faa4609d38ecd417dc7ad33e3cb38611b868f7c5939e4ec2a684321fc5bc540d197710f8ec127668438a37518be6eed3d05c97be981803761f6e49e29028f3a0abdfcd48c64b482814b30d884f1fb277d812bd7c6bbe094767e7b8df0a2e475a451a42325e878f70cf73d3c5b42cc5af9c4faa27a90a8d8f05c235eb0539bbd9452b5db7864f7ef7a1b78439aad39aa294e436c3b8e605618faf9ccfe1e2fa7de06f60c345d136fe53b02b7f99e0edbf73274d048c512c5091add76dcf692dcfdd03c817f87c5898b9212466e513ba21aa6a0623b4255df40d0b1260dbc2bb3a3ff99abce24bbc3f715626df8d748135dddf6be249c2734f4197136bc008224e6ecad79b7409d8c8c49bbd2708d4e57827dc413ab631937e486b11e4f112400cfc76407ece88215a9c81af1ac4147eaaae919e0f01f5a71c2cf30db804a99490061098a629c4748cdd57974e43ae1de0dfa4a2e29d3ee8ea2454a9aa2d1729ab76f8c49265beb61b83b6f8e2bc5e2a5c05e87fb9df5da04f494fa3d342bdde2356cca415fdf91088e7b71aef6842f0f520be7e6f5206247aa43bbbed8356a10c849bbce2ae31264b3bbba2bc01a042d9e14290e5fe4e26fada2ac8d24b251265e9d45061514b98c7a4456ac4fb5a00a7f58effb25715a7f4d96c36ccb494e976c3bab35f2f5e542d775cb79735ca0ae9b9d948197819a7b23940d4dbba0b267169bc4b847a9ccaeeca9dd58bd81acb3986baaad3cd4daadc2012186a2b1088fb0f4e737028f068a828d899e83a0dd277fc41d8b6708e75a592efda78cc0822e8cdbe3c0f806df9a3c5ad10e8dec781b290e46f81db63a9170cda434188a0c818954031ebcf6146c5550782e66da338e2046ece6830a4815c9fc5c6be9f105b33d326d16bcc45b5e3c980912fba3191ae7ffe8b3c2df16f3ff721a9ab185be39cd4edf734ba9a3e392db1b40b0d35ce791f32181890a7789e32f49aacda590a97f43374ff7d7dcee66eade08d0f10d4beb593fc097beeda9e89da20700eb72345d343368601c61d49bc6da5e1904f378e6b0a7e7c4534cfd3dd042ca98a2037eb492aac8dfabf180b6264b07ecca7baa9a8b6b0d7e596ed6c9c91fb94f505ea983d5ed2a35015d653fd5478fd8de5422365056237a586e475a33b3965bae5380261970ecb023cbdf6fbb9cf57fd4d3e00c8299085d203bd4b4ad918e0e0f105e07d788fe39bb42c6db2ca015c266e18ffe4d68ae81d52ef9f3076ec8408adb0255854dd8ce0520f2dde3ed09ad31dbb09c57135e3516361e2d6c73895c95ed197bf1894b4f0a28e4c978e6fed59363cc34187d08463a384528dd75bd12226e14561e3d48dd746c30c452bd7570af4a5108073ed444d1dbd18260281334add343b8b59a9ea029c67b24594b988b2ffbc43f441b2989c2630c175685b2938315bcc2a17ed2cad6b800b9f7fb03e49cd0a293dda10aadc11b9e2263b46fb93ef0da47e092802237e5e91b1f766f6fef5bdd0272d0129b8f80aafc034212d92775c05ee18549185f9a45bd25ad27f3fb5def1ebb9a086e4a9eef737d095895313cea7bd13be0b129ce277d91064e0fbbc3a9cab285c4d2136805c8fdb242c6caf69284e6856a3e885fb0867ca6f2681db25bc77211b5e0b65f7921db8b7aca305f678b80180b6515b17278ff7b0175d5b01628c2eaa602899c99b26eadfe89e114ed20373639ff5aa68e96a10bdb9845b08f5a4204c052258a352c21bda76676638884761efa999f3018698c7323b64ec7bb42a1695c7eb71dc5ed3ff3fc1d4a69c8131fb866d32ca6f6e733973586f06aa6b0e42208dd425f9b2f02a2c9a8754650e5ca2d98e289b08189016c8461c789db3387a0293f0fe1cd87bd27765ae224b81236db312efd641b71d6615b17cd9f5c7105c84a9d655cd716ffef45c9f77a1181c9837ab35fca5516bf84f52210dbd676e6deb939200098f09d4b559e6e64467eb7dcbac53078a8db0f8d8b201aed2ce2da09ffc3accfb9e43a1301a1bc9ed974375fc1d8ac95cf35bdd00a4f9d106cea2488752ca0e965200a8e89108633b8eeb0c12362455077c552846f656a70133b88e6b80f2e539a9505694b6673480514a81bd3c6731868191a2b6ad84126ffdf97d45411cfbd5e85dc15d0b8a36843adcbecb866a79be73ed43dc89081169de09028fea00b72cfd45cf0a958f404c1c4ed2cff7d497224eded781278f3c74e58239f716abe5a33e2b115a131340a4291cd264052068a0626d356b3a656a764fd2d5f64f492097c72f689f5de2c8962fdefd89320556515cf1102"}}, &(0x7f0000002440)) r7 = openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) syz_emit_ethernet(0x66, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f0000002700), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000002740)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x80) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000002780)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000002800)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r9}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000002880)={0x0, 0x0, 0x0, 0x0, 0x8000, r10}, 0x38) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000000c0)={[0x800, 0xfffffffffffffffd, 0x81, 0x4, 0x8, 0x0, 0x7, 0x12, 0x400, 0x2, 0xfffffffffffffffc, 0x7, 0x6, 0x6, 0x100000000001, 0xfffffffffffffffe], 0x8000000, 0x4fb40}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x24, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0x19}}}, 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r11 = accept$inet(r6, &(0x7f0000002480)={0x2, 0x0, @initdev}, &(0x7f00000024c0)=0x10) recvfrom$inet(r11, &(0x7f0000002500)=""/249, 0xf9, 0x40000000, &(0x7f0000002600)={0x2, 0x4e23, @multicast1}, 0x10) sendmsg(r3, &(0x7f0000000f40)={&(0x7f0000000380)=@x25, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000400)="1cee171d40b86a9d807bd76c94d8c5c766e8fa74456a6d1510c638", 0x1b}, {&(0x7f0000000ac0)="5b761405599cd9ea6ee290d74843cd1e40265a1b35a964efa7cfe2572d9d779fdabf98673ab45c958ff28955a10b21a409e6ee152a5fcf477f219e07fcd583ab6efd69fa12afe5aefff224d64631269ee62d01776bc0a6defe1257dfeb4dc374a200381867f771a7262f0f6d20f831325bbb31e95a21796b5fb29bb42503d75880897107ae6646219a06a3c6f53dfe681ef0c3da4e4f1f3c8a739929cd3dabb4fd53709dcb86e668a252f591f0ab75941f515cba33108fbc3ccd59eecfb38f50", 0xc0}, {&(0x7f0000000b80)="b0d2f51d0408f5005a0a59cf54408e17c49199b721a30930c0394b4cd5f1d5ee148e0780761d4388930af81f5fbc6f", 0x2f}, {&(0x7f0000000bc0)="4ed7a2f9caa63e0276a1ba24b0b4b75acd75e747823b3ef09c3f4f1c1c98840bfd83b044e2e1661859648490a74ac0c7e2c0b6cdc5178eb79b40c2146d76b982cd8c0a48de8896468d1e7c5826a8f221209c548a1e46abbd54a802720ae743533d65277fb9b9e0f477d9476bb0ee3c41f337b33bbaa65aba376270f6d5cad6d6ed76cc3f76f913c44226889831ff8bcb2f077347cb61277fa64321beec9dd120033d7f", 0xa3}, {&(0x7f0000000c80)="4727c0bfeb2e5885bd2a312ec42a93b1686a040b3fa4ab5328cfb224ff1b2be39857942c215474cb884ba6e51d9de320b3f049898debfc1b3a48d4279c9b3fc28b715c62793bc038d3e21d52cac4fbff450bde2104efb102d54b80b205600962794057700dba42e94d80475fb0069295313084dc44d3c242d5e399dcc29b3fe8deedd18b8cc04edb6ddf5121f8255a856cc1bf462954", 0x96}, {&(0x7f0000000d40)="c7cd91e9531c752683add63add315b8ed7c386f6a8c95a6002da66e444bf0ea367678b09699ae57e7f93150479871041e02c27d40910910124c1961a6ec6cc24e5a5e2df821d11d4f831d73c308f3d048b328305bec9cc9b1ee6e62f6e86472aea9a778694e5d25dfd0352b21e27e7b08106b23d729b0edd794e5fa5182fcff07ed0102cd681", 0x86}, {&(0x7f0000000e00)="2d79ae3fddc3bb2041594a2f2a98039188c787dd865e26a9c41144cf399845b7c8a10a165c03c9a08ef6c1a33e06b7c96fc58169fe9a86220259dc3e5d24cc83b7931f58604ece5c31e85557569a5325b5ec8f5f17fc1d5d10039c7e5f8064e4c0d49259037314cb009de5b79c9af338bd25cc1bd7126d069673c401561bbeb80e9538ff42113a8e4843ae2cdbaf801ea30d92aaec5bffddaf667fc04e085dd7a3958a94f8776971dc4ed38ca5d8d61bbfe23120110b", 0xb6}], 0x7}, 0x80) 14m1.086592441s ago: executing program 2 (id=8645): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x1, 0xb, &(0x7f0000000b40)=ANY=[@ANYBLOB="18000000068a000000000000041f00181801000020696c257b000000002020207ba1d8fd000000007ba1000000000000040100000400ffffb702000008001f00b703000002000020850000002effb00095"], &(0x7f0000000000)='syzkaller\x00', 0xa, 0xffa, &(0x7f0000000c00)=""/4090, 0x0, 0xa8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94) 14m0.724635151s ago: executing program 2 (id=8647): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="900000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="0815010021100000680012800b000100697036746e6c00005800028014000300000000000000000400aa00000000000114000200ff011000000000000000000100"/80, @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r1, @ANYRESOCT=r0, @ANYRES32=r1, @ANYBLOB="060012004e2000000400130008000a00", @ANYRES32=r1, @ANYBLOB], 0x90}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x220002, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x89b0, &(0x7f00000004c0)={'bond0\x00', &(0x7f0000001a40)=@ethtool_rx_ntuple={0x35, {0x6, @ether_spec={@remote, @local}, @hdata="dea974350c591aa7728a425c6f304927b6068f101d867845dd77d5dec611c566776f32a45b52f3b29ddb43be5fba52155db120607cbcedee565fd799cf2319eb9b1cae3dadf27093", 0x7, 0x6, 0x9, 0xc7dc, 0xffffffffffffffff}}}) syz_open_dev$sndctrl(&(0x7f0000000500), 0x0, 0x0) (async) r4 = syz_open_dev$sndctrl(&(0x7f0000000500), 0x0, 0x0) r5 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r5, 0x1000) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f00000019c0)=0x44) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x1, 0x6}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28031f00260029002dbd7000000000001100000013005e0019ae0f249efa6f98a40a9190a021b500"], 0x28}, 0x1, 0x0, 0x0, 0x8c811}, 0x40040) (async) sendmsg$nl_generic(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28031f00260029002dbd7000000000001100000013005e0019ae0f249efa6f98a40a9190a021b500"], 0x28}, 0x1, 0x0, 0x0, 0x8c811}, 0x40040) r7 = add_key(&(0x7f0000001a00)='cifs.idmap\x00', &(0x7f0000001fc0)={'syz', 0x1}, &(0x7f0000002000)="7a7fcd76a8f988500d8a1b48f29f864611266be1d6e07fa8d3d63dfebb57a2535f0116a079ed2b54952b7eaf3af3d01430c5fcf75d877dfa5501d982ee031a20fdc748df736cbae728ee19d5356d223f8a7e84874004319996f320936a93993482c50fac279f3fcfa43fbf2cf1f66fad568174e7ac5d58127fc74e6a664cffec1f56ed413af3ed51508e3b55c53f18c0132a4ef0a7e57d1f3051508b3e5e4b70a5", 0xa1, 0xfffffffffffffffa) keyctl$get_keyring_id(0x0, r7, 0x1) io_setup(0x6, &(0x7f0000000340)=0x0) r9 = eventfd(0x1) r10 = eventfd2(0x5, 0x1) unshare(0x2c010a00) r11 = syz_open_dev$vcsu(&(0x7f0000000880), 0xfffffffffffffffd, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000018c0), 0xa4342, 0x0) (async) r12 = openat$nullb(0xffffffffffffff9c, &(0x7f00000018c0), 0xa4342, 0x0) r13 = dup(r12) write$6lowpan_enable(r13, &(0x7f0000001900)='0', 0xfffffd86) ioctl$TIOCSETD(r13, 0x5423, &(0x7f00000020c0)=0x2) (async) ioctl$TIOCSETD(r13, 0x5423, &(0x7f00000020c0)=0x2) io_submit(r8, 0x4, &(0x7f0000001980)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x8, 0x3, r0, &(0x7f0000000380)="658503c19116042c468ed87d27057a25f5dcef8428a1916c203ec8d14340a8d22c006dd1c6ce890697827ad3f19d15b9c56f13e8d263aed8339f2e38231822cf2f822b5fd3a1218fe1f472c286c2f7c80a300952f591c181f45a43bd281aa6b989fa624ba7686a1de43b0d36e0c4f066afc48a1e4d6ecf4d6ee0270b062b35b2a8f7378d8eea485ff310ec3418cd89dd6c204039a72fd17ea4", 0x99, 0x401, 0x0, 0x0, r9}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x2, 0x4, 0xffffffffffffffff, &(0x7f0000000640)="725527981aa19af8edce6e273a511496411ae71bc9f05bf5698155570e0f4abbbb26a8440dae32cb8fbbdc3c55d09da05b5fb79d57b7bb32039c68305cd197bbff627faf2112585cd6e6c7eadeb2994af93b50b3bf19facbf8b14577bb777c13ddec583382b195d3d3bae3db4079d0fd67cbd15512d2b4208d16031e2738a8ffd98e767db0d07e8c9e6ba506dcbbd567ffe4a9a7f2a13e1f935925dc998ac748a71882ffbcfc26fe50b0589facef0f47f17024c21e23a6fa9f7f88f8aa1a50720047b0f80401c78da49e6176c05e6b102bc0837b183ab79c60ba", 0xda, 0x8, 0x0, 0x2}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x6, 0x3, r0, &(0x7f0000000780)="539da65399987f0f2fe2a0da35606fb507f600274fbf23cca6fe98988dc58720fa65566cb1cf5a59e44d12865e85c5004a404754a0300ca33ba3179dd0bedea2c6353d1d0d24f672c2767f9b8b915a11b6bd0ac77767be369588b6c95554af0e12d34e0313fe510a1020ba3bb5e948ed5496b26a1416a3ca716aab4555f6a84e28d18fb02ca1390eec41b6394f2608d9260b1b95afe8d0037b3d18", 0x9b, 0xffffffffffffff7f, 0x0, 0x2, r10}, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x3, 0x1ff, r11, &(0x7f00000008c0)="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", 0x1000, 0x35, 0x0, 0x3, r13}]) request_key(&(0x7f0000000000)='.dead\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f00000001c0)='ip6tnl\x00', 0xfffffffffffffffe) (async) r14 = request_key(&(0x7f0000000000)='.dead\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f00000001c0)='ip6tnl\x00', 0xfffffffffffffffe) keyctl$revoke(0x3, r14) (async) keyctl$revoke(0x3, r14) sendmsg$TIPC_NL_NAME_TABLE_GET(r11, &(0x7f0000001f80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001bc0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x338}, 0x1, 0x0, 0x0, 0x8800}, 0x20004080) (async) sendmsg$TIPC_NL_NAME_TABLE_GET(r11, &(0x7f0000001f80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001bc0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000fbdbdf25100000000c0005800700010069620000d40206804000040067636d286165732900000000000000000000000000000000000000000000000018000000000001000100140000000000000000000000000000000000e6000300ba4c4550ec06ec5b1e8eb8e1b7f65d13267abc6cbb579790549116b029789229b1df9fbc21e3def4cf42523607b735ce9dd9a2ed2fdc0a32b65ee13cee59877344074c3a451da87abbfbe897ddb06d66b6b0a0f2c42b504c8b2db9f40b7601c1dff381c967453407e13583619c27708068231bc9e1bd4278ba66b65969d5c37fef2877870f93f8977ac6904147b22769bdfef99f703e65017281106c156d56afac3365930c9cfa8cfe61a84cd393306b70629d27debe6fd55214caf78acc1fac6bf95cb8549a9745628a9425ea14ca66d5d214cbfd7656637691fed0c532957553e6000063000300828d7d535df330dc7ef0ecf20e76260d501fb2c4db880d74389f00c242fdbd854f1c7d346375f413da12d62f7d3e81d0f8d192bd00bbf059dbd2ef5fc0ac86838800d7ee060d300e4efdaec4984d2b17d1817bd4c97891da1b19a05ae7b44f004400040067636d28616573290000000000000000000000000000000000000000000000001c000000de64b5c37a5dcc0ca6d2fd008503f82f85fda8cd8f072535147fd0090800010004000000ec000300aca6572fe5edc5c1c5c4cbfc83568fedb0807bf13985fd87d25421b09f66597fa66413faecf1100b5adbdfb3f4b7f33a6b798616a11363491e68e60f8018fecc1c4f6ff67382fa1959e4b7960d57a8702e263055ccb64e290b98a303e6c39f3dbdf215ce23b8cb7602ab60367f36c4db08f9b53ee272ade93a35d154e8578730bf7eeab2a4a2655dcf01078913090fd41cd2a345b17ac57186ae93e10a17228d9def9b80c58f66d8658197f6a02be881fcb1756412fd26c53f5de59a26c483a81784e3b0a329e3e94aef44309502404f51c5f0dfb71cf6ea5b6d3d354ac41347c794e7926a1f432b0800060008000000040005001c00098008000200ffffffff08000200ff0300000800020001000000100007800c00030043000000000000001800028008000100ff000000080001000300000004000400"], 0x338}, 0x1, 0x0, 0x0, 0x8800}, 0x20004080) 14m0.376350373s ago: executing program 2 (id=8649): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f0000000640)=ANY=[], 0x1, 0x0, 0x0) r1 = syz_open_dev$video(&(0x7f0000000100), 0x6, 0x40800) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000001c0)={0x5, 0x4, 0x1, "8ac6fcf96c03b72b2c0d443ecc8c730b129a9393163681e178a0327ad0980ade", 0x3433354d}) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x84000, 0x0) 13m59.141266559s ago: executing program 2 (id=8656): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x1, 0xb, &(0x7f0000000d00)=ANY=[@ANYBLOB="18000000068a000000000000040000001801000020696c2500000000002020207b1ad8ff000000007ba1000000000000070100000400feffb702000008000000b703000002000000850000002e00000095"], &(0x7f0000000d80)='GPL\x00', 0xe, 0xffa, &(0x7f0000000dc0)=""/4090, 0x0, 0xab, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fffff}, 0x94) 13m58.62053749s ago: executing program 2 (id=8659): r0 = socket$kcm(0x29, 0x2, 0x0) userfaultfd(0x1801) (async) userfaultfd(0x1801) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000040), 0x4) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000080)={r0}) r2 = socket$key(0xf, 0x3, 0x2) recvmsg(r2, &(0x7f0000000300)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000001780)=[{&(0x7f0000000340)=""/237, 0xde}, {&(0x7f0000000180)=""/105, 0x5f}, {&(0x7f00000027c0)=""/4097, 0x1006}, {&(0x7f0000000740)=""/4096}], 0x3, &(0x7f0000000640)=""/98, 0x41}, 0x20) (async) recvmsg(r2, &(0x7f0000000300)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000001780)=[{&(0x7f0000000340)=""/237, 0xde}, {&(0x7f0000000180)=""/105, 0x5f}, {&(0x7f00000027c0)=""/4097, 0x1006}, {&(0x7f0000000740)=""/4096}], 0x3, &(0x7f0000000640)=""/98, 0x41}, 0x20) syz_usb_connect(0x2, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100035517c340927322b72e2501020301090224000103cbb3c13f876831b6f5040b10b409043e0202ffffff0809050202ff071d0705090505102000010908"], &(0x7f0000000700)={0x5f, 0x0, 0x0, 0x0, 0x1}) 13m57.497331608s ago: executing program 40 (id=8659): r0 = socket$kcm(0x29, 0x2, 0x0) userfaultfd(0x1801) (async) userfaultfd(0x1801) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000040), 0x4) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000080)={r0}) r2 = socket$key(0xf, 0x3, 0x2) recvmsg(r2, &(0x7f0000000300)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000001780)=[{&(0x7f0000000340)=""/237, 0xde}, {&(0x7f0000000180)=""/105, 0x5f}, {&(0x7f00000027c0)=""/4097, 0x1006}, {&(0x7f0000000740)=""/4096}], 0x3, &(0x7f0000000640)=""/98, 0x41}, 0x20) (async) recvmsg(r2, &(0x7f0000000300)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000001780)=[{&(0x7f0000000340)=""/237, 0xde}, {&(0x7f0000000180)=""/105, 0x5f}, {&(0x7f00000027c0)=""/4097, 0x1006}, {&(0x7f0000000740)=""/4096}], 0x3, &(0x7f0000000640)=""/98, 0x41}, 0x20) syz_usb_connect(0x2, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100035517c340927322b72e2501020301090224000103cbb3c13f876831b6f5040b10b409043e0202ffffff0809050202ff071d0705090505102000010908"], &(0x7f0000000700)={0x5f, 0x0, 0x0, 0x0, 0x1}) 13m53.807220107s ago: executing program 8 (id=8676): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000001080)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2}) sendmsg$nl_route(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000012", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 13m52.638257837s ago: executing program 8 (id=8678): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1b0}}, 0x0) 13m52.264512901s ago: executing program 8 (id=8680): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x1, 0xb, &(0x7f0000000b40)=ANY=[@ANYBLOB="18000000068a000000000000041f00181801000020696c25af000000002020207ba1d8fd000000007ba1000000000000040100000400ffffb702000008001f00b703000002000020850000002effb00095"], &(0x7f0000000000)='syzkaller\x00', 0xa, 0xffa, &(0x7f0000000c00)=""/4090, 0x0, 0xa8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94) 13m51.928671486s ago: executing program 8 (id=8682): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) r1 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0xc0064, &(0x7f00000002c0)=ANY=[], 0x1, 0x0, 0x0) mknodat$null(r1, &(0x7f0000000100)='./file0/file0\x00', 0x1000, 0x103) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) fstatfs(r0, &(0x7f00000001c0)=""/220) r3 = syz_usb_connect$printer(0x1, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x80, 0x6, "", [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x7, 0x1, 0x3, 0x7f, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x2, 0xc6}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x2e, 0x7, 0xf8}}]}}}]}}]}}, &(0x7f0000000a40)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x201, 0x9, 0x67, 0x6, 0x8, 0x4}, 0x24, &(0x7f0000000380)={0x5, 0xf, 0x24, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "7833c6e2bc24c5053558aa805378b9f5"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x20, 0xd, 0x4, 0x0, 0x7}]}, 0x8, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x5ef274487c9b2e42}}, {0xc8, &(0x7f0000000400)=@string={0xc8, 0x3, "b040d1e34c70a19eebf3125cf01283398c80190a6ef298f55074fc76a819c53ef53e3aa53b45dd6f601b27060f4a01e58e3d7a4731218eaa3a49330543ee882b36d40b999f710e28e0eaf8561431c55806bdae23212a5815d7bde27dccfa682e8e242d763e5f77229b46a07b97b4ef8f9254b5405db953111e231a99a90a2cbd0c73204bb98531eba572fad68617c7e4f313bac52882ae9ad3f2d984380119a56e71608905e0ab43d7682309250ed039293fb3c41f17bee3d70f5139e0406279fe0960aad447"}}, {0xd0, &(0x7f0000000680)=@string={0xd0, 0x3, "bfb4b00b10dc9c520730780374c28a3ad72e0e83c69683f0691f4742d29361d37f40efc129893da124c81519b4cbf2c83aa1108f1765e224f07879c4b49850bae00b343e93e582a45c498e6a2dbf577459a1ed7af3d1232d1ba0dd2c7affc9cfa93e084d247089d1f4bc9794ae367839bfe00433d6eaea825f280ff4cb2ab7ab6e71516468f87236f64f16ba97c2e82191d725db270d050bc424f7bd273b2a83f5d5fa7c3aad05a87abe312b453ac9f3c3b315a499e8b5afbe4ef154d1fe1ff90674d4f4ef91fbaaf50647f3d9c4"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x425}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x500a}}, {0xf7, &(0x7f0000000800)=@string={0xf7, 0x3, "859c96f7839008fb5101450b644f47d75eb41f6be00b33c19e09dd73ad2c7eb08e186fadc2191a8239ab778ad0ef3efcf53ee04c133281a62707e4fe6d66f27678ba764b10c62fc07390e6370b03e3f46577e80cb5e9e69843e061d280ccdd36c9202041ee95f2deb2cde1091594d5c17ec029bef052a0dc7d852eba8d612faed106378a3b3c5d123ff9077cd89bf356e56f66e13a43c74f288e2e6c1ecb2e35735957b6f7f185a1ad78f0160f7567aeac6916ffa3ff5ac3bf1838431943c0b75882b6fb7e82e9a815b48e1f15321790b377af27f99eeebfbb2fec3f4eb5040e9ba655f0f9d2fd178a272630f6ef6f7fff0b4852fe"}}, {0xd9, &(0x7f0000000900)=@string={0xd9, 0x3, "256507449477561cb9afe1c923b409657c99cd9acc5b2d045d5a78754f8b702adf257381a3aebefafafbbfe677bf2350315e93b30be5d1c1ad3c89466c23473f451e97d589746fe89ab1db239949498a1a1a9ec395e9a0114bac4fd049c74865e20246c010e48e383cdf0b16daf8b7d16d2015969fe49b1aa02f717acfd55558b1d642b3e9db630359fbe873a05eb1b819d736ea0565a3705b400fb849bf24a8c3e9709b20dec5e94743e6212905f1d9652f523434e4e3006621915708819c06909de08f883a1b47fd24f60ad73eeda941bc958ca8aeed"}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x459}}]}) syz_usb_disconnect(r3) mount$fuse(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x84000, 0x0) 13m48.698446096s ago: executing program 8 (id=8686): openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000040)={0x1, 0xffff}) unshare(0x2040400) (async) r1 = fsopen(&(0x7f0000000080)='virtiofs\x00', 0x1) fcntl$dupfd(r1, 0x0, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x20004090) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="0100000007000000040000000200000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000000480)={0xc, {"a2e3ad21ed0d52f90925090987f70e06d038e7ff7fc6e5539b3243078b089b3b33386d090890e0878f0e1ac6e7049b334c959b4a9a240f5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d076d0936cd3b78130daa61d8e809ea02b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203821b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18809a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348071f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed2bf1f847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aea019c982cd3b43eaeb1a5fb135c0c7dce61a0b29aa328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a06007c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d8c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687ea84afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb8052ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000014c0)={{r3}, &(0x7f0000001500), &(0x7f0000001540)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001580)={r3, &(0x7f00000015c0)='\t', &(0x7f0000001600)=""/150}, 0x20) (async) syz_usb_connect(0x0, 0x24, &(0x7f00000016c0)=ANY=[@ANYBLOB="12010000e3ddef20501da1604fa1010203010902120001000000000904"], 0x0) (async) add_key(&(0x7f0000000240)='asymmetric\x00', 0x0, &(0x7f0000000300)="3082010c3081baa003020102020101300a06082a85030701010302300c310a30080603550403130141301e170d3230303130313030303030305a170d3330303130313030303030305a300c310a300806035504031301413068302106082a85030701010101301506092a850307010201010106082a85030701010202034300044001010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101300a06082a8503070101030203410002020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202", 0x110, 0xfffffffffffffffd) gettid() (async) socket$inet6_sctp(0xa, 0x5, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000001740)='./file0\x00', 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001a40)=ANY=[], 0x50) bind$inet(0xffffffffffffffff, &(0x7f0000001a80)={0x1d, 0x4e20, @remote}, 0x10) (async) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001ac0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000001cc0)='./file0\x00', &(0x7f0000001d00), 0x404, &(0x7f0000001d40)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) read$FUSE(r6, &(0x7f0000001dc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000003e00)={0x50, 0x0, r7, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r8 = syz_create_resource$binfmt(&(0x7f0000003e80)='./file0/file1\x00') openat$binfmt(0xffffffffffffff9c, r8, 0x41, 0x1ff) (async) syz_open_procfs(0x0, &(0x7f0000003ec0)='net/tcp6\x00') statx(0xffffffffffffff9c, &(0x7f0000003f00)='./file0/file1\x00', 0x1000, 0x100, 0x0) 13m48.389006173s ago: executing program 8 (id=8688): r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000005c0)=0x0) (async) r7 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) read$FUSE(r0, &(0x7f0000001e80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000003ec0)=0x0) (async) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000003f00)=0x0) (async) ioctl$UBLK_U_CMD_START_DEV(r2, 0xc0207506, &(0x7f0000003f40)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) r12 = gettid() tkill(r12, 0x12) fcntl$getownex(r3, 0x10, &(0x7f0000003fc0)={0x0, 0x0}) syz_clone3(&(0x7f0000004040)={0x10400, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000340), {0xc}, &(0x7f0000000600)=""/141, 0x8d, &(0x7f00000006c0)=""/244, &(0x7f0000004000)=[r8, r9, r10, 0x0, 0x0, r11, r12, r13], 0x8, {r2}}, 0x58) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r7, 0x40146f2c, &(0x7f0000000100)={0x2, 0x1, 0x3, 0x14, 0x4}) (async) ioctl$DVB_DEMUX_DMX_ADD_PID(r7, 0x40026f33, &(0x7f0000000040)=0x312) r14 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r14, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b1889b90f105d66b3e5a7c94742"}, 0x4, 0x4}) (async) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000180)={0x2e, 0x19, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x29}}}, &(0x7f0000000300)=0x0) (async) syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r16 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r16, &(0x7f0000000480)=[{&(0x7f0000000440)="90e7", 0x2}, {&(0x7f00000002c0)="d6a5a87479c1f4b466100d1c655210006555e3e974fdb971b60fe5960bcd802fe3f7da93acf4e6414158438095dc8ca02f5134d635bfc8e5c5704af7e46dd4506719ff2fc92cc098786865efc9ab3fd66cee", 0x52}], 0x2) syz_ublk_setup_queues(r2, r15, &(0x7f0000000540)={0x0, 0x0, 0x0, 0xfffffffe, 0x20000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1302, 0x82, 0x0, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1000004, 0x800, 0x3, 0x69, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfdff0000, 0x800, 0x2, 0x0, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6253, 0x40, 0x3, 0xffffffff}}], 0x1, &(0x7f00000003c0)={0x2e, 0x4c, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x3fff, 0xdbc, 0x0, 0x0}}, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x94) (async) syz_usb_connect(0x0, 0x32, 0x0, 0x0) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 13m47.364336175s ago: executing program 41 (id=8688): r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000005c0)=0x0) (async) r7 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) read$FUSE(r0, &(0x7f0000001e80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000003ec0)=0x0) (async) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000003f00)=0x0) (async) ioctl$UBLK_U_CMD_START_DEV(r2, 0xc0207506, &(0x7f0000003f40)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) r12 = gettid() tkill(r12, 0x12) fcntl$getownex(r3, 0x10, &(0x7f0000003fc0)={0x0, 0x0}) syz_clone3(&(0x7f0000004040)={0x10400, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000340), {0xc}, &(0x7f0000000600)=""/141, 0x8d, &(0x7f00000006c0)=""/244, &(0x7f0000004000)=[r8, r9, r10, 0x0, 0x0, r11, r12, r13], 0x8, {r2}}, 0x58) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r7, 0x40146f2c, &(0x7f0000000100)={0x2, 0x1, 0x3, 0x14, 0x4}) (async) ioctl$DVB_DEMUX_DMX_ADD_PID(r7, 0x40026f33, &(0x7f0000000040)=0x312) r14 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r14, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b1889b90f105d66b3e5a7c94742"}, 0x4, 0x4}) (async) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000180)={0x2e, 0x19, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x29}}}, &(0x7f0000000300)=0x0) (async) syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r16 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r16, &(0x7f0000000480)=[{&(0x7f0000000440)="90e7", 0x2}, {&(0x7f00000002c0)="d6a5a87479c1f4b466100d1c655210006555e3e974fdb971b60fe5960bcd802fe3f7da93acf4e6414158438095dc8ca02f5134d635bfc8e5c5704af7e46dd4506719ff2fc92cc098786865efc9ab3fd66cee", 0x52}], 0x2) syz_ublk_setup_queues(r2, r15, &(0x7f0000000540)={0x0, 0x0, 0x0, 0xfffffffe, 0x20000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1302, 0x82, 0x0, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1000004, 0x800, 0x3, 0x69, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfdff0000, 0x800, 0x2, 0x0, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6253, 0x40, 0x3, 0xffffffff}}], 0x1, &(0x7f00000003c0)={0x2e, 0x4c, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x3fff, 0xdbc, 0x0, 0x0}}, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x94) (async) syz_usb_connect(0x0, 0x32, 0x0, 0x0) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 11m30.920946029s ago: executing program 6 (id=9396): syz_usb_connect(0x0, 0x43, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000e7c2f708210435030e5f0000000109023100010000000009040000000202ff00052406000005240200000d240f"], 0x0) (async) syz_usb_connect$cdc_ncm(0x2, 0x74, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x2, 0x1, 0x7, 0x20, 0xa, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "b72faaeff7b2"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x7, 0x8, 0x20}, {0x6, 0x24, 0x1a, 0xb7d, 0x4}}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x73, 0xf, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x5, 0xfe, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x4, 0x1}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x3, 0x6, 0x7, 0x40, 0x9}, 0x39, &(0x7f00000000c0)={0x5, 0xf, 0x39, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x4, 0x5, 0xff7f}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4c, 0x4, 0x5, 0x7, 0x82}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x3, 0x4, 0x101, 0xf00, 0x9, [0xffff21, 0xff00, 0xff0000, 0x3fcf]}]}, 0x5, [{0xd9, &(0x7f0000000100)=@string={0xd9, 0x3, "16df11fd9f960be63d1229d4a0f62c95285e9eb1e9417e7cbca1aa5e9f28caa36da6474a9d9e8a2a2da02e2163722ad052f578db619b1c23f9509845a87dbab48694d829d6c6bf6660f1413360b89f5f3d311ec58dc483332f53e724381338cf35b3a6553dda71ee25f585614ad857136687275c02fa1a4fac4d569983f05af465395da485f9d038375214c93cf922375a7f7a8f65a02fb4bb7f6474af107fd2408d4040c413793873e0eefbe25c19838be5da9709784e9bc2ee681130565d5177c93da0900979b2a36eea47a5652b9bdc2bec8b6b1ada"}}, {0x8e, &(0x7f0000000240)=@string={0x8e, 0x3, "59d6acde2f0a7bf2f3fb3fd8e16d81a23e1971182a9ed36c1e87ef11dee9f3693b02602b863ea89451f12b9fafbe090213464cb035599741a88f8ebe7991506d81edb0368b3d42968a345f39db914f630581d905543ea8ca25396b45804f3a67631cd03108f8f01d72b8afe34f9b533889709efb6d0be257913e0f25abb317215160f15b0369cfcd97f4c8e0"}}, {0xee, &(0x7f0000000300)=@string={0xee, 0x3, "bcfc0a41ece4ea3d2add26f99a93c2837b38ad267085e3597410f6d5518724f974199c3d205b6782fca871330ea90e6df1b925d0e8513d865e8df062951feef8511f0e4796d3fa36245c8e836eb9c5d2a8b792dd42d6c755f3d6d078f68f1b44b1a311225083382eee7a60f5ed4bd5a24989ca0b55a4754ef62dbf7fbc955759f3a38a191b31211ee88b43b0e6f55f33d873fb1805d87a74ee8fc6b2cbb29dbf0a99a1401df60525854ee62b3c82c27b90dbbf906c4a951204cfd2a76cc794ae41b5989340b2de908c7a0875d36290061bdbb5ea2c4d434a47c9f8462bf4e5c33006637dd009b133acdab83a"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x404}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x3422}}]}) 11m27.768172049s ago: executing program 6 (id=9414): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000580)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="110086dd0000110000000000000060ec970000382c00fe8000000000000000000000000000aaff02000000000000000000007ffffffe04"], 0xfdef) 11m27.264983795s ago: executing program 6 (id=9416): bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0100000003000000fd0900008400000005010000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00#\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000040)={0x0, 0xf1, "330d61d5e4850be504f1ec08036ff666dc0b17d72b0aebcbc90b93e236a2893cb6d1d7a87b3a61d626afac35092e2841f372da6ca2751feda0b982c24f2418af7d59bf5152b1f1c7bf8c048a77610d81d97e858880ccd372aa7362ec7461fa7d0b62c907fc5b87a54eca1b2732bb005d458d025db3594ff01eec0313b6a7602daecf370d3dbdce8eab1fb92efc1ae2f742a34feab5bd427ac959c3474f2ba7396af8474ba613cb5b972c39e5482e3eedb976764ea6b8ce17d2057f82ee6ec0ebca2909089117dffd0434c6fd1538e1e50cebe7ad1742282740fb06f0b57be7a15ba0fab91af38dac91209874bd3c7c967e"}, &(0x7f0000000140)=0xf9) read$eventfd(r0, &(0x7f0000000340), 0x8) 11m26.972503562s ago: executing program 6 (id=9418): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000280)={0x0, &(0x7f0000000100)=[@nested_load_code={0x12e, 0x4d, {0x3, "f36d660ff6a7ed8800000f20e035000002000f22e065670fc799038000000f799adf000000652626fa0fc71f0f00dc420fc738040f"}}], 0x4d}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x7, 0x2, 0x100000000000005, 0xc39, 0x0, 0x2004cb, 0xffffffdfffffffff, 0xa1d, 0x7, 0x100005, 0x5d1d6263, 0x3, 0x2], 0x3332d000, 0x602}) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x1c1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x80, &(0x7f0000000600)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) add_key(&(0x7f0000006b40)='dns_resolver\x00', &(0x7f0000006b80)={'syz', 0x0}, &(0x7f0000006bc0)='foo#dnserror=1\x00', 0xf, 0xfffffffffffffffe) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000006c00)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000006c40)={0x2020}, 0x15be) read$FUSE(r3, &(0x7f0000000680)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f00000026c0)={0x50, 0x0, r5, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000002740)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r3, &(0x7f0000002780)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000004780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004840)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004880)="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", 0x2000, &(0x7f0000006880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006940)={0x1f0, 0x0, 0x3, [{{0x4, 0x3, 0x28000, 0x3, 0x9, 0x10001, {0x6, 0x9, 0x4, 0xb, 0x6, 0x0, 0x6, 0x1, 0x6, 0x8000, 0xde, 0x0, 0x0, 0x8001, 0x80000000}}, {0x1, 0x1, 0x1, 0x32540194, '\x00'}}, {{0x4, 0x0, 0x4, 0x0, 0xfff, 0xf4, {0x4, 0x7, 0x7, 0xfffffffffffffff9, 0x0, 0x80000000, 0x8, 0x806, 0x5, 0xa000, 0x33c1bc78, 0x0, r7, 0x1fd}}, {0x6, 0xe6, 0x2, 0x7, 'fd'}}, {{0x4, 0x3, 0x7ff, 0x7fffffffffffffff, 0xfff, 0x7ff, {0x3, 0x9, 0x3, 0x6, 0x5, 0x2, 0x2, 0x6, 0x7, 0x8000, 0x0, r6, r7, 0x1, 0x3}}, {0x0, 0x7, 0x1, 0x300, '\x00'}}]}, 0x0, 0x0, 0x0}) getdents64(r8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x7fff, 0x40, 0x2, 0x4000000000000, 0xffffffffffffffff, 0x10, 0xfffffffffffffff8, 0x1, 0xfffffffffffe0000, 0x7, 0x400, 0x8, 0xde, 0xd63, 0x7], 0x3000, 0x40000}) r9 = socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x70) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000340)='\x00', 0x9801) move_mount(r10, &(0x7f0000000380)='.\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0) move_mount(r10, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x267) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xc}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}, @TCA_FQ_PIE_BYTEMODE={0x10, 0xb, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x9b6b4f4cc3fcc40b}, 0x2000400c) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11m25.775239465s ago: executing program 6 (id=9423): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1b0}, 0x1, 0xf5}, 0x0) 11m24.784603497s ago: executing program 6 (id=9427): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101400, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0xca58c30f81b6079f}) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f00000003c0)={0x0, &(0x7f00000004c0)}, 0x10) accept$inet(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x84) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r7, &(0x7f0000000500)={0xa, 0x0, 0xffffffff, @local, 0x9}, 0x1c) writev(r5, &(0x7f0000000540)=[{&(0x7f00000006c0)="8881f9d9fa4b245cf7b4a154f3e05dccb68cb43fe8ebedbd6f8ac4c0312b33432e475639120e0ecf15d3c5f57621ec259ec136e4e831615e8f2316c4869b0e396fecfb375f1fe42ae3617f6a165ea8065d588f0d58e8deac752ff7c1a1bce52f6c74ab97d30ea045208ac8534dfdfb731e798ee271215a0f228eb82ff19983789f455fc75f2ba3396fa0f7840751325325f2d36bf1a8f8fc5ab74cfe9dc74621ff04353a37512e16c5955beb08ba1fa9", 0xb0}], 0x1) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'ip6gretap0\x00', 0x2000}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x2901, 0x0) close(r8) socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000380)={'syzkaller0\x00', @link_local}) write$tun(r5, &(0x7f00000003c0)=ANY=[], 0x16) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000005c0)="2548cb5b3ef19b4b031cf79c73c8e1ca4dfd23e4e3244ba9fc75b00e3803a65b81f05460e6020000000000000042785a18e131e08037c02b00fe12944b3c1a7cc879fed90773eafa98dc06b063c356df3868bc54f56ae656ba6b9933ad07cd796762de2ae83661590cd965e6a07df648015afdb9c160a38d1e73a7c41c7fbe12c4e67dffc3960b66719e1b41c2e23df3462324cbb5dca718b1624e7d3a7b7110b9763d6438e25e699511911880da09391919bf2d02cfd8d09191bef6c19d91d70f103906b30f5352", 0xc8, 0x44045, &(0x7f0000000480)={0x11, 0x11, r9, 0x1, 0x8, 0x6, @multicast}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) 11m23.556395936s ago: executing program 42 (id=9427): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101400, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0xca58c30f81b6079f}) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f00000003c0)={0x0, &(0x7f00000004c0)}, 0x10) accept$inet(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x84) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r7, &(0x7f0000000500)={0xa, 0x0, 0xffffffff, @local, 0x9}, 0x1c) writev(r5, &(0x7f0000000540)=[{&(0x7f00000006c0)="8881f9d9fa4b245cf7b4a154f3e05dccb68cb43fe8ebedbd6f8ac4c0312b33432e475639120e0ecf15d3c5f57621ec259ec136e4e831615e8f2316c4869b0e396fecfb375f1fe42ae3617f6a165ea8065d588f0d58e8deac752ff7c1a1bce52f6c74ab97d30ea045208ac8534dfdfb731e798ee271215a0f228eb82ff19983789f455fc75f2ba3396fa0f7840751325325f2d36bf1a8f8fc5ab74cfe9dc74621ff04353a37512e16c5955beb08ba1fa9", 0xb0}], 0x1) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'ip6gretap0\x00', 0x2000}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x2901, 0x0) close(r8) socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000380)={'syzkaller0\x00', @link_local}) write$tun(r5, &(0x7f00000003c0)=ANY=[], 0x16) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000005c0)="2548cb5b3ef19b4b031cf79c73c8e1ca4dfd23e4e3244ba9fc75b00e3803a65b81f05460e6020000000000000042785a18e131e08037c02b00fe12944b3c1a7cc879fed90773eafa98dc06b063c356df3868bc54f56ae656ba6b9933ad07cd796762de2ae83661590cd965e6a07df648015afdb9c160a38d1e73a7c41c7fbe12c4e67dffc3960b66719e1b41c2e23df3462324cbb5dca718b1624e7d3a7b7110b9763d6438e25e699511911880da09391919bf2d02cfd8d09191bef6c19d91d70f103906b30f5352", 0xc8, 0x44045, &(0x7f0000000480)={0x11, 0x11, r9, 0x1, 0x8, 0x6, @multicast}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) 16.469832497s ago: executing program 3 (id=12893): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x80000001, 0x162842) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000220d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e00000010e200", [0x0, 0x400]}}) 16.064798085s ago: executing program 3 (id=12895): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000340)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="000086dd0000110000080000000060ec970000302c00fe5ad3f8fac16fdaf58000000000000000000000000000aaff02000000000000000000000000000c02009078"], 0x66) 15.457255144s ago: executing program 7 (id=12901): socket$rds(0x15, 0x5, 0x0) syz_ublk_setup_io_uring(0x2261, &(0x7f0000000300)={0x0, 0xd58c, 0x80, 0x2, 0x30b}, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) eventfd2(0x1, 0x80001) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0x3b5, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x5, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x20000000, 0xe4, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x2, 0x2, 0x80000250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0xfeffffff, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20084884) 15.411357243s ago: executing program 3 (id=12902): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0xa, 0x2400000001, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000000)={0x1, {{0xa, 0xffff, 0x0, @empty}}}, 0x88) getsockopt$inet6_buf(r1, 0x29, 0x10000000000030, &(0x7f00000000c0)=""/144, &(0x7f0000000180)=0x90) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=ANY=[@ANYBLOB="280000000406010300000000000000000500000805000100070000eca777215e4970a1310000000005871a5b3c55a2036b3490585c8680d4b90f1c3ed86347cb095d855e535e8551c5e04cf293080401c8c49835ef06562f55db747575e3fe1c0f65c6a0ac39891ddac621f9bd3cbf328be4e17c86a5259ec1a6047bbf319f921e8fda1750034a2203b596e2fc59496e0e879997f964597aacc05792ab67cf827cb08efa5c5bd437de531d72f775"], 0x28}, 0x1, 0x0, 0x0, 0x408c0}, 0x4000000) 15.135723682s ago: executing program 3 (id=12903): sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYRES16, @ANYBLOB="01002b"], 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000040) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000003c0)=[@nested_amd_invlpga={0x17d, 0x20, {0x50000, 0x3e79}}], 0x20}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0xca341, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x0, &(0x7f0000000180)=[@cr4={0x1, 0x40002}], 0x1) ptrace(0x10, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) syz_usb_connect(0x3, 0xcc, &(0x7f0000000400)={{0x12, 0x1, 0x300, 0xad, 0x80, 0x67, 0x40, 0x856, 0xac31, 0xfb7c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xba, 0x2, 0x0, 0x7, 0x60, 0x9, "", [{{0x9, 0x4, 0x94, 0x8, 0x0, 0x39, 0x40, 0x71}}, {{0x9, 0x4, 0x5, 0x10, 0x1, 0xae, 0x53, 0x3b, 0x10, [@generic={0x8f, 0x23, "9b3b2e48dd6861a261066ec1d5b3c99c92130eaf090578596ae770bb4b005bbef77a7e7d3d147b98a27a8b1c8efe47065338c4282e351dad6ae449214fd609c56141cb4bb1a2485209f2642f8f1b64bb10db94d6897dc5ba74ca8a2e0fff3ee5d93497832ff48d9f7216f2f8d571f059dc0a3a9645fa9be093077cd689fd28e0eb5ead8de2ecf6147e3c70455b"}], [{{0x9, 0x5, 0x7, 0x10, 0x3ff, 0x4, 0x10, 0x79, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x9}]}}]}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x13, &(0x7f0000000540)={0x5, 0xf, 0x13, 0x2, [@wireless={0xb, 0x10, 0x1, 0x8, 0x80, 0xf, 0x0, 0xf16f, 0x1}, @ptm_cap={0x3}]}}) syz_emit_ethernet(0x2e, &(0x7f0000000580)={@random="c5a500429b3a", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0xe, 0x20, 0x66, 0x0, 0x3, 0x11, 0x0, @empty, @empty=0xe0000001}, {0x4e1f, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x6, 0x100, @void}}}}}}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000240)="0f0d51f40f01d10fc75800f30fc73600102ed5c01dc0000000008ec0640f017400aa66b9e408000066b81f6269e766ba000000000f3036db45ef0c0cb8d09bbc8966efbafc0cedba4300ba210066ed3626f00fc70d", 0x55}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14.020151954s ago: executing program 7 (id=12904): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) open(&(0x7f0000000140)='./bus\x00', 0x24040, 0x10) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x901800, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="24000000760009eeffffffffffffff0400030000", @ANYRES32=0x0, @ANYBLOB="04000d80080005"], 0x24}, 0x1, 0x5502000000000000}, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async, rerun: 32) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) (async, rerun: 32) munlockall() writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) 13.045984997s ago: executing program 3 (id=12905): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x10, 0x1a, r0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x442081, 0x0) utimensat(r2, 0x0, &(0x7f0000000080)={{0x0, 0xea60}, {0x0, 0x3ffffffe}}, 0x0) syz_usb_connect$midi(0x1, 0x3e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002000000205e048302d8000102030109022c000101a2100d09040000020103200f0905261010000c04090425010009050a10"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) r3 = fsopen(&(0x7f00000000c0)='ceph\x00', 0x1) fsmount(r3, 0x1, 0xfa) 12.740707653s ago: executing program 7 (id=12908): socket$nl_rdma(0x10, 0x3, 0x14) r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x4000000000000d, 0x123002) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0xffff, @multicast1=0xe0000306}, 0x10, &(0x7f0000000280)=[{&(0x7f00000002c0)="be39", 0x2}], 0x1, &(0x7f0000000300)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0x20}, 0x0) ioctl$VIDIOC_OVERLAY(r2, 0x4004560e, &(0x7f0000000340)=0x14) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000380)={0x80000000, 0x274, "fff36ab55c12f199d3991e3d9d905d0cea2d3fd26f7e47dfc8f7a2a23a95ab69", 0x1, 0x8, 0xfffffffffffffad0, 0x9, 0x8, 0x9, 0xd3e, 0x7, [0x7, 0x80003, 0x6685974d]}) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e20, @remote}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000004c0)=[{&(0x7f0000000500)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000d, 0x204031, 0xffffffffffffffff, 0x6334f000) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSPTLCK(r5, 0x40045431, &(0x7f0000000dc0)=0x1) r6 = socket(0xa, 0x5, 0x0) listen(r6, 0x267) r7 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r7, &(0x7f00000005c0)={0x0, &(0x7f0000000600)=[@uexit={0x0, 0x18, 0x10000}, @nested_amd_clgi={0x17f, 0x10}, @code={0xa, 0x79, {"c46178131966b8d0008ec0440f01c466baf80cb8e27fce89ef66bafc0c66b8c78366ef66baf80cb89815dd88ef66bafc0cb800000000ef0f01cb8f0978838cf000000000360f64e7c744240000680000c744240200000080c7442406000000000f011c24470f01c4"}}, @nested_vmresume={0x130, 0x18, 0x1}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0xbe, 0x7, 0x7fffffffffffffff}}, @nested_amd_invlpga={0x17d, 0x20, {0xdddd0000, 0xdb80}}, @out_dx={0x6a, 0x28, {0x1e79, 0x4, 0x47}}, @in_dx={0x69, 0x20, {0x54ba}}, @nested_create_vm={0x12d, 0x18, 0x3}, @enable_nested={0x12c, 0x18}, @rdmsr={0x66, 0x18, {0xc0000084}}, @cpuid={0x64, 0x18, {0x9, 0x81}}, @wrmsr={0x65, 0x20, {0xafd, 0x3}}, @nested_amd_inject_event={0x180, 0x38, {0x1, 0x7a, 0x0, 0xffffffffffffffff, 0x1}}, @wr_drn={0x68, 0x20, {0x4, 0x1ff}}, @uexit={0x0, 0x18, 0x6}, @nested_amd_vmload={0x182, 0x18, 0x1}, @nested_amd_stgi={0x17e, 0x10}, @nested_load_syzos={0x136, 0x15a, {0x1, 0xe6, [@nested_amd_invlpga={0x17d, 0x20, {0x0, 0xcb3b}}, @code={0xa, 0x42, {"2e3666420fc7b348000000c462a1b669a56665440f32c422e1bafb660f01f80f06470f01ca650f01d1c4c1fe2c180f781f"}}, @nested_amd_vmload={0x182, 0x18, 0x1}, @nested_amd_clgi={0x17f, 0x10}, @nested_create_vm={0x12d, 0x18, 0x1}, @nested_amd_invlpga={0x17d, 0x20, {0x42000, 0xbed9}}, @nested_amd_clgi={0x17f, 0x10}, @nested_load_syzos={0x136, 0x20, {0x0, 0x81}}, @in_dx={0x69, 0x20, {0xa707, 0x4}}, @out_dx={0x6a, 0x28, {0x5f30, 0x2, 0x27fcb26e}}]}}, @rdmsr={0x66, 0x18, {0x39f}}, @nested_load_code={0x12e, 0x76, {0x1, "2e0f01c50f0fc8aa66baf80cb8f2919383ef66bafc0c66b8000066ef660f388109c4e2f945970000000066b873000f00d066baf80cb8ba765a84ef66bafc0cb0d0eef3400f1ef8f240e10cc7442400a3000000c7442402f8000000ff1c24"}}], 0x459}) writev(0xffffffffffffffff, &(0x7f0000000a80)=[{&(0x7f0000000ac0)="480000001400190d09004beafc0d8c560a8447608004000000000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)=""/34, 0x22}, 0x2}], 0x1, 0x40018160, 0x0) setsockopt$sock_int(r3, 0x1, 0x35, &(0x7f0000000d80)=0x1, 0x4) 12.527378691s ago: executing program 7 (id=12909): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600"/100}}}}}}, 0x0) 12.341440423s ago: executing program 7 (id=12910): add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000080)="000000000000000463656c6c000000020000004400000006000000000000000000000000000000000000000000000000000000000000000000ffffffbf00000000000000000000000000000400000000000000040000000000000014a300000200"/112, 0x70, 0xffffffffffffffff) 12.248823038s ago: executing program 7 (id=12911): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2040}, 0x50) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc0000000000000080ffffff0000000000000000000000000a0030"], 0xb8}, 0x1, 0x30}, 0x4000) 9.889809602s ago: executing program 3 (id=12917): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x6, 0x7fff7ffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000054000500010000000000000007000000", @ANYRES32=r1, @ANYBLOB="20000100", @ANYRES32=r2, @ANYBLOB="01000000ef010101000000000000000000000000080000002800028005000300010000001c0002800c000180080001000a0000010c000180080001000a0000"], 0x60}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f00000004c0)={0x0, 0x21}, &(0x7f0000000500)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000540)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_delete(r3) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETS(r4, 0x545c, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "43e6323cce19dc42a867c4e745c80552a700"}) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCMSET(r5, 0x5418, &(0x7f0000000440)=0x8001) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x4400, 0x0) r6 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000200000010f3044d07000000000001090224000100005000090400050303000000092100000901221800090581031000001587c2be60e8f194d3d60d974deb9e63cea31e44e677a2fd88df8b19656f042b2c0013ed73b568806a6b4512b1ab17d839173e9728dba58ae0c1e0e1037e7d7528193a72260b3d8c07a99ea4fecddf9e735c54fbfa7ccc2b62af1edff7b3eb8741184437d5ac53180ffbe9126b5cc4771befc7330c9d1a4ed0c50a9630e0920c4c4ffa7d8104ec922ae918b32b6bab7bd42536881ec09d85b615352cc229a0c7da906dd29fb388fd9f5f5c2aac88aa2d"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) r7 = syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000640)={{0x1, 0x1, 0x18, r5, {0x1}}, './file0\x00'}) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000680)={0xaa, 0x411}) ioctl$HIDIOCGCOLLECTIONINDEX(r7, 0x40184810, &(0x7f0000000480)={0x1, 0x1, 0x7, 0x1, 0x9, 0xb1b}) ioctl$F2FS_IOC_GET_PIN_FILE(r7, 0x8004f50e, &(0x7f00000002c0)) r9 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r9, &(0x7f0000000580)='10000', 0x5) getsockname$packet(r9, &(0x7f00000005c0), &(0x7f0000000600)=0x14) 9.409486884s ago: executing program 4 (id=12920): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000f88d00000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaacdaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r1], 0x68}, 0x1, 0x0, 0x0, 0x80080}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x44060}, 0x20000880) r2 = socket(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, 0x0, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x1}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x4}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x4}, @ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0xc5}, @ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0x7}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x2}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x9ae}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x2}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0xffff}, @ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x4040010) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 7.845862645s ago: executing program 4 (id=12924): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x200000) pwrite64(r0, &(0x7f0000000240)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f0000000280)="55aa", 0x2, 0x1fe) pwrite64(r0, &(0x7f00000002c0)='PRIVHEAD', 0x8, 0xc00) pwrite64(r0, &(0x7f0000000300)="0002000b", 0x4, 0xc0c) pwrite64(r0, &(0x7f0000000340)='12345678-1234-1234-1234-123456789612', 0x24, 0xc30) pwrite64(r0, &(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\a', 0x7, 0xd23) pwrite64(r0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00\x00\b', 0x7, 0xd2b) pwrite64(r0, &(0x7f0000000400)='PRIVHEAD', 0x8, 0x1e8000) pwrite64(r0, &(0x7f0000000440)="0002000b", 0x4, 0x1e800c) pwrite64(r0, &(0x7f0000000480)='12345678-1234-1234-1234-123456789612', 0x24, 0x1e8030) pwrite64(r0, &(0x7f00000004c0)='\x00\x00\x00\x00\x00\x00\a', 0x69, 0x1e8123) pwrite64(r0, &(0x7f0000000500)='\x00C', 0x2, 0x1e812f) r1 = syz_open_dev$loop(&(0x7f0000000540), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', "000000000000000000000000000000000000000000000000000000001200"}) 7.296769891s ago: executing program 4 (id=12927): syz_open_dev$dvb_frontend(0x0, 0x0, 0x882) r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000240)={0xf123, 0x30383653, 0x3, @discrete={0x6, 0x8001}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0xc2, 0x2c9, 0x32314752, 0x0, 0x100000ff, 0xc, 0x0, 0x6, 0x1, 0x6, 0x2, 0x3}}) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000180), 0x4, 0x4a6242) lseek(r2, 0x952e, 0x3) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x1000, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) memfd_create(&(0x7f0000000480)='\xecO\xdd\xbd\xfc\xfa\xe1\xea\xea\x00\xb0\xd8Y\x03\x00\x00\x00\x00\x00\x00\x7f.\x14\x89|cW\x11\x0e$]7\x99\x11\xfd\xbe/6&\xe6\x97\x1e\xfbon\'\x0f<;\xbe\xa5`\"E]\xda]\xb9\xeb>\xe9\xf2\x99\xa8\xbeOA\xf8\\\xeb[\xd7:{\r\x91.\xdbxn\x1b\x17\xccMz\x1dc\x1d5\x9fe/\xb7k}\xd7\xa6\xd1\xcf\x1f\xf3\xae\x9e\xd6\x040\x19\x88\xa7:OYw\xfe\xaf\xdf\x16\x88\xfe\xd3\x13\x9f!\xd7\xcf\x86\x9f\xe8)\x01\x01\x00\x00\x06^\xb4', 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYRES64=r1, @ANYRESOCT, @ANYRESOCT], 0x14}, 0x1, 0x0, 0x0, 0x49b5}, 0x44860) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) unshare(0x20000400) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r3, 0xc1105518, &(0x7f0000000540)={{0x5, 0x1, 0x1, 0x1, '\x00', 0x3d}, 0x0, 0x30, 0x5, 0x0, 0x0, 0xd, 'syz1\x00', 0x0}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) inotify_add_watch(r2, &(0x7f0000000140)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2) syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) 4.320885895s ago: executing program 4 (id=12930): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001540)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5dfff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x10}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x0) 3.897856114s ago: executing program 4 (id=12932): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000800)={0x0, @empty, @local}, &(0x7f0000000840)=0xc) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000880)={'tunl0\x00', r1, 0x20, 0x8, 0x3c, 0x3, {{0xc, 0x4, 0x3, 0x15, 0x30, 0x68, 0x0, 0xe, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x7, 0x7b, [@remote]}, @timestamp_prespec={0x44, 0x14, 0xc5, 0x3, 0x9, [{@broadcast, 0x2}, {@empty, 0xfffffa7d}]}]}}}}}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0x84, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000140)='veth0_virt_wifi\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000940), 0x2042, 0x0) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a00)=ANY=[@ANYBLOB="3c00000010000104c30000000000000000000000af4537608b27e65dd5ed54e7ab49d6cbb520de2274eabff8dff4e64c22a6b1a39efb349aee60a595ca8ef7f4df3a8dbef316eaf0bfcd4a7aa04bdfa915effe5ac1f6b40076d176e56b903343619f0dd40c817c6c25dd0544efab6eceb9b7584bb39f4b5363768f2c6927467df62e58e41ac1f4e6983b92192edd9c427decf583c1842d197dc6cd049d", @ANYRES32=0x0, @ANYBLOB="90600400089b000008000300", @ANYRES32=0x0, @ANYBLOB="1400128009000100626f6e640000000004000280"], 0x3c}, 0x1, 0x0, 0x0, 0x480c0}, 0x4000000) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r5, 0x40045567, 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000980), 0x6fb2, 0x10000) ioctl$I2C_FUNCS(r6, 0x705, &(0x7f00000009c0)=0x108) symlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f0000000500)=0x7d90) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000430005052abd708b617a00fcdbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0d0300000000000000001300000024000980080002"], 0x38}}, 0x4) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000c40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r10, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)={0x3c, r9, 0x801, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}, @NL80211_KEY_SEQ={0x6, 0x4, "a0ca"}]}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r7, &(0x7f0000000e00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000e40)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04000c03000000000000e0ffffffffffffff1f8fef3d69e5e95b41b725a33ee424af5b19ab329bbc1eb98a73c6a2e24b17e1f6b32adb40a1097dbedb22442d07654f5ffbc8b7b58530073f387a77ab6fd1fc20edf34bcd685d1421381a3abe7281ba32fbcb6d57f2c6", @ANYRES32=r11, @ANYBLOB="3600c700010604007c020e0405059e0707016c041001040009039604fb0100000a02140406071906040608017f0706c372c34fb563c200001800c7003103f600070607030603090759be584c5adb8388"], 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x43ccabc943be7567) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x0, r5}, 0x18) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000640)={'sit0\x00', &(0x7f0000000580)={'syztnl0\x00', 0x0, 0x8, 0x700, 0x7f, 0x9, {{0x1e, 0x4, 0x0, 0x0, 0x78, 0x68, 0x0, 0x6, 0x2f, 0x0, @rand_addr=0x64010102, @multicast2, {[@end, @ssrr={0x89, 0x1b, 0x49, [@rand_addr=0x64010102, @multicast2, @private=0xa010101, @rand_addr=0x64010100, @rand_addr=0x64010100, @rand_addr=0x64010102]}, @cipso={0x86, 0x9, 0xffffffffffffffff, [{0x5, 0x3, "04"}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0xc, 0x6e, 0x1, 0x1, [{@local, 0x2}]}, @timestamp_addr={0x44, 0x2c, 0x3c, 0x1, 0x3, [{@remote, 0xa}, {@remote}, {@private=0xa010102, 0x8000}, {@loopback, 0xfffffe00}, {@broadcast, 0x40e8}]}]}}}}}) r14 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000680)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000003000000030000000600000000080000", @ANYRES32=r12, @ANYBLOB="0f00f9a67d0000000000f6ffffffffffffff0000", @ANYRES32=r13, @ANYRES32=r14, @ANYBLOB="04000000010000000200"/28], 0x50) 3.460897478s ago: executing program 0 (id=12934): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0/..\x00', &(0x7f00000003c0)={0x200000, 0x0, 0x10}, 0x18) 3.327761217s ago: executing program 0 (id=12935): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x10000009, @loopback, 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000500)}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)="a3", 0x1}], 0x1}}], 0x2, 0x4040881) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000600)={&(0x7f000016c000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000001740)=""/4095, 0xfff, 0x0, 0x0}, &(0x7f0000000100)=0x40) epoll_create1(0x80000) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0xe0c81) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x7fffffff]}, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000002f00890025bd700000000000040000"], 0x14}, 0x1, 0x0, 0x0, 0x42014}, 0x4080040) pselect6(0x40, &(0x7f0000004bc0)={0x8, 0x0, 0x20000000000, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x2, 0x1000001000, 0x10}, 0x0, &(0x7f0000004c00)={0x3ff, 0x100000000, 0xffffffffffffffff, 0xbd79, 0xfffffffffffffffd, 0xf, 0x80000006}, 0x0, 0x0) 2.501874354s ago: executing program 1 (id=12937): r0 = memfd_create(&(0x7f0000000700)='\xecO\xf8YSRK\xf1~\xcc6\xd3\xdd\xbd\xfc\x00\x00\x00\x7f.\x14\x89|cW\x11\x0e$]7\x99\x7fs\xc0\xbb\xbe/6&\xe6\x97\x1e\xfbon\'\x0f<;\xbe\xa5\x9f\x00\x00\x00\x00\x00\x00\x00>\xe9\xf2\x7f\xa4\xbeOA\xf8\\\xeb[\xd7:{\r\x91.\xdbxn\x1bkm\xd7\xbd\xd1\xcf\x1f\xf3\xae\x9e\xd6\x040\xaf\xdf\x16\x88\xfe\xd3\x13\x9f!\xd7\xcf\x86\x9f\xe8)\x01\x01\x00\x00\x06^\xb4+\x86\xe8\x00\x00\x00\x00\"\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd0\x06\a\xe4V\x9d\x18\xd4\xd8\x9ed\x0fN[\xb4\xd5\xbb\xe5\x05\x80\xf2U=\xf0\x8d\xe2Nj\x99a\xb6M\xe2\xe2KL\xf0\x93\xf8\x87:\x13i\xc6\xa2\xb2[\xd4q\x93\xb6\xf4\xd5V:N\x0f\x01]\xa3\xaf;,t\xdb\x1c\rQ/C@\x93\x87\x81l\xea\xf6S\xfe\xf3\xd1\xf0\xdbRxw\xf9\xd7M\x0e\xf9\xc0\xb1s\xb2\xea\x01\"R\xc4[s\x82\xca\xd5&\x13\xd8&\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfa\xa92\xfe\x0e\xb7\'M\xe3j\x92\r\xef\xa7;\xa5\x0e\xd1\x8f\xdf\x19;\x0ea\x06\xb6\x00\x00q\x92\xb1\x9d\xef8\xdf\x8a\xda_\xcdX_\x0f.\x15N\xa3k9\xdc][~\xe0#\xa0\x05%\x02!%\xe4\xbd\xa3\x8c\xf3k\xc2\xd0!&\x95\x17W\xe9\xf5=I\x7f!\xbd\xa9\xf0=\x96\xa5V\xb1\xde\"\x9c\b\xab\xf8M\x9e', 0x1) (async) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$vhost_msg(r1, &(0x7f0000000680)={0x1, {&(0x7f0000000040)=""/4, 0x4, &(0x7f00000004c0)=""/81, 0x1, 0x3}}, 0x48) (async) ftruncate(r0, 0x8800000) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc000000190001000000000000000000200100000000000000000000000000017f0000010000000000000000000000004e220005000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000fc00000000000000000000000000000002000000000000000000000000000000ffffffffffffffff080000000000000000000000000000001000000000000000000a0000000000000003000000000000080000000000001900000000000500fc02000000000000000000000000000000000402000000ff0100000000000000000000000000010735000001030900020000000100000004000000"], 0xfc}}, 0x0) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)=ANY=[@ANYBLOB="a00000002100010000000000fefffffffe8000000000000000000000000000aa00000000000000000000000000000001fffe0000000200000a00e0805c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000050001100fc020000000000000000000000000000ff010000000000000000000000001701ac141426000000000000000000000000fe80000000000000000000000000000000000000000000000a000200e72960502d68471e2e46c926185d4c9406b64dfcc09668409a30a096f48aff72eeef9f"], 0xa0}, 0x1, 0x0, 0x0, 0x804}, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000000180)=[{{&(0x7f00000001c0)={0xa, 0x4e22, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000240)='H', 0x1}], 0x1}}], 0x1, 0x240040c1) shutdown(r2, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x83, &(0x7f0000000280)={0x0, 0x2}, 0x8) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) (async, rerun: 64) r5 = accept$alg(r4, 0x0, 0x0) (rerun: 64) r6 = dup3(r5, r4, 0x0) sendto$inet6(r6, &(0x7f0000000ac0)="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", 0x191, 0x2004c004, &(0x7f00000000c0)={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x80000000}, 0x1c) (async) sendfile(r6, r0, 0x0, 0x1000009) (async, rerun: 64) accept4(r4, 0x0, 0x0, 0x0) (rerun: 64) 2.033417985s ago: executing program 1 (id=12938): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2040}, 0x50) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000030000000000000000000000000000a0030"], 0xb8}, 0x1, 0x30}, 0x4000) 2.032564315s ago: executing program 4 (id=12939): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) close(0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x8031, 0xffffffffffffffff, 0xffffd000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x4200c0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110c230007) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x110e22fff6) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x90, 0x0, 0x8, {0x5, 0x2, 0x0, 0x4000000000008, 0x0, 0x4, {0x4, 0xfffffffffffffffb, 0x100, 0xa5, 0xa, 0x8, 0x800008, 0xfff, 0x10000008, 0x1000, 0x28001, 0x0, 0x0, 0x5, 0x7f}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_procfs$pagemap(0x0, &(0x7f0000000640)) ioctl$FS_IOC_SETFLAGS(r6, 0xc0606610, &(0x7f0000000680)=0x60) close(0x3) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="823180bce6140f87344c954b955fce734893fb880a6507b9b9c63a332285ea0bf45524ce6e0860d72db5a6e1a3a1a5559c28272e31eb20294c9029fc048f6c7c5c9e9a5f428a2834e47b3e90311b6a12d07fcd5506e717618791469c231ad96955506e561c5c5cecc0353edfb86ea90a8a29df6fd16e943ef45ce97e18f7021958e657a502d91b0bd1cd79c55b012623b8c4fe19f6616fffb4382a"], 0x28}, 0x1, 0x0, 0x0, 0x42014}, 0x4080040) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x44) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/zoneinfo\x00', 0x0, 0x0) 2.031136604s ago: executing program 0 (id=12940): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x203, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000001740)={0x0, 0x0, '\x00', @bt={0xf1, 0xc, 0x9, 0x2e, 0x800, 0x6, 0x1a, 0xa}}) (async) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) (async) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000002c0)=""/104, 0x68}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/9, 0x9}, {&(0x7f0000001380)=""/195, 0xc3}, {&(0x7f0000001480)=""/167, 0xa7}, {&(0x7f0000001540)=""/161, 0xce}, {&(0x7f0000001600)=""/97, 0x61}], 0x7}, 0x9}, {{0x0, 0x0, 0x0}, 0x9}], 0x3, 0x0, 0x0) (async) r2 = dup(0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0, r2) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) (async) close(0x3) (async) r4 = socket(0x2, 0x80805, 0x0) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) (async) close(0x3) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000001800)={0x0, 0x10, &(0x7f0000001840)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001880)=0x10) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f0000001b00)={0x1, 0x1, {0x9, 0x34, 0xf, 0x13, 0x6, 0xfe2d, 0x1, 0x91, 0x1}}) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f00000018c0)={r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000001980)=0x84) sendmmsg$inet_sctp(r4, &(0x7f00000019c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000001a40)={r6, @in6={{0xa, 0x4e23, 0x2, @empty, 0x9d7}}, 0x6, 0x0, 0x0, 0xb3, 0xb3550aa4ba878396, 0x0, 0x1}, 0x9c) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000001680)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f00000016c0)={0x48, 0x2, r7}) (async) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000080)={0x1, 0x0, {0x80000103, 0x20009, 0x3012, 0x4, 0xc, 0x0, 0x0, 0x6}}) 1.717364258s ago: executing program 1 (id=12941): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') ioctl$KDSKBLED(r0, 0xc0686611, 0x20000081) r1 = socket(0x10, 0x800, 0x0) write(r1, &(0x7f0000000040)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x4, 0x440, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000580], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"]}, 0x4b8) r3 = socket(0x0, 0x80805, 0x1) sendmmsg$inet(r3, &(0x7f0000003540), 0x0, 0x8011) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000000), 0x4) 1.536158184s ago: executing program 0 (id=12942): lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000200)=0xe8) quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f00000000c0)=@md0, r1, &(0x7f0000000240)) rt_sigprocmask(0x1, &(0x7f0000000280)={[0x5]}, &(0x7f00000002c0), 0x8) (async) r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_aout(r2, &(0x7f0000000300)={{0xcc, 0xd5, 0x6, 0x283, 0x2ab, 0xc, 0x1dc, 0x401}, "06e621f9a02463190e14e2231f189f0ac9987f0b92e6c8cbd4db7170287b1b5923b46894421f8bd29276e35a1b496724c1679e29516f8dd7cfaa3f871cfa873859ae5dd2b6896425a0db86f88d70e646b65b4a1df33944cf0c8871f368452d7e7430b89f", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa84) (async) ioctl$DVB_DEMUX_DMX_QUERYBUF(0xffffffffffffffff, 0xc0186f3d, &(0x7f0000000dc0)={0x5, 0xffff8000, 0x913, 0x8000, 0x10, 0x1}) (async) quotactl_fd$Q_QUOTAOFF(r2, 0xffffffff80000301, r1, 0x0) (async, rerun: 64) r3 = socket$kcm(0x29, 0x5, 0x0) (rerun: 64) sendmsg$kcm(r3, &(0x7f00000020c0)={&(0x7f0000000e00)=@isdn={0x22, 0xe, 0x2b, 0x10, 0x12}, 0x80, &(0x7f0000001f00)=[{&(0x7f0000000e80)="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", 0x1000}, {&(0x7f0000001e80)="b54ae332074dd8d89b714894584b5aee639c01ffc3c25d513de4a792ef0266d3f880398ffb66ffa28c9b8fe7b8cce9befa3722fb2f7b21d28a94dc5fe6b1be6e9b26ecbae4b441e61106a56bbda135a790e24232f4eec63a5cb15823bb1ba18f78049dbb19f0573bf93ecf8c8af50c1fb163c214a62037e1a4a6cb2c9df7", 0x7e}], 0x2, &(0x7f0000001f40)=[{0x20, 0x10e, 0x2, "04a626c91119b952a3233f9b103d1fc2"}, {0xc8, 0x119, 0x13dc8000, "ae264af34a11bff9c3cfc0265734bd6196f246872480105f85bdc3a67b769056cab70a52c140947e137322aeab56284b9ee084fd5da11a35c5b6130762c410a18f48dfdd885c7aa7321836cf2ba0880eff0865035892e6ae78dac120cb3b184c17df7c7640fb6571673510ee6168489857cd4b99cdd4e00b49600eb7b8d0bf0540c76be658556d8328d663b4f09f89dad80e7bedbc13accb9bd1f263f11b1fa69256859a0b78b60491e784d8dc719d363c7c10"}, {0x80, 0x10d, 0x3, "7261ca02168399190c9cc44801689160556b2db1c481d64452802da443b83e92f1a0279292bf8c9d6e6bc02d9de09388a5f4630cc9ba7656d67cf7c7ca301bf56d812f59e24ad8fd03d7f3b155cea6fababcfda65aeffce852df811810bd375b0d1148c46815eba960a9d47a1d6a6d"}], 0x168}, 0x40040c1) (async, rerun: 32) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002100)={0x1b, 0x0, 0x0, 0x131, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x2}, 0x50) (rerun: 32) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r4) (async) r5 = syz_io_uring_setup(0x4d86, &(0x7f0000002180)={0x0, 0xdaf9, 0x40000, 0xfffffffe, 0x28d, 0x0, r4}, &(0x7f0000002200), &(0x7f0000002240), &(0x7f0000002280)) io_uring_enter(r5, 0x60de, 0x72a2, 0x0, &(0x7f00000022c0)={[0x9]}, 0x8) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002340), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r6, &(0x7f0000002540)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x1010}, 0xc, &(0x7f0000002500)={&(0x7f0000002380)={0x154, r7, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1c}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8000}]}, @TIPC_NLA_BEARER={0x100, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x2014, @mcast2, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e23, @private=0xa010100}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x7f, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x30000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x27}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x624}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa7a}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) (async) getsockopt(r3, 0xffffffff, 0x7fffffff, &(0x7f0000002580)=""/28, &(0x7f00000025c0)=0x1c) (async) syz_extract_tcp_res(&(0x7f0000002600)={0x41424344, 0x41424344}, 0x7fffffff, 0x7) syz_emit_ethernet(0x17a, &(0x7f0000002640)={@empty, @broadcast, @void, {@ipv4={0x800, @tcp={{0x28, 0x4, 0x0, 0xa, 0x16c, 0x67, 0x0, 0xf, 0x6, 0x0, @empty, @local, {[@rr={0x7, 0x1b, 0x54, [@rand_addr=0x64010101, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x16}, @local, @remote]}, @lsrr={0x83, 0xf, 0x8c, [@multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0x18}]}, @ssrr={0x89, 0xb, 0x54, [@empty, @dev={0xac, 0x14, 0x14, 0x36}]}, @lsrr={0x83, 0x7, 0x80, [@dev={0xac, 0x14, 0x14, 0x24}]}, @cipso={0x86, 0x10, 0x0, [{0x2, 0x3, '^'}, {0x7, 0x7, "abd6da9c6a"}]}, @ssrr={0x89, 0x13, 0xb6, [@private=0xa010101, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100]}, @noop, @ra={0x94, 0x4}, @noop, @rr={0x7, 0x27, 0x22, [@multicast1, @remote, @private=0xa010100, @loopback, @broadcast, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @local]}]}}, {{0x4e21, 0x4e22, 0x41424344, r8, 0x0, 0x0, 0x11, 0x20, 0xf35c, 0x0, 0x8001, {[@generic={0x2, 0x8, "4f25a29bd830"}, @sack={0x5, 0xa, [0xffff, 0x0]}, @md5sig={0x13, 0x12, "b57498e378c6e7f096f04beaef04742e"}, @timestamp={0x8, 0xa, 0x0, 0xe23f}]}}, {"50b80e74a1559b1aaafc862bf9df03c0ad23249dc270e7f8265df41127cdc1d3cb8e7d7a50b6b2dc76f839cc78d0c973c89221619674d1982f1f60dc9ac4778179d83b73fa09da33c66cddc1f592e47f26acd5413d9982aeb8d7f65813e41b084cfc6a9ae4ce9642e7d89812b6f40981e41bf36a586c2a160e4586e1a337833bedbcbc3e75585af1"}}}}}}, &(0x7f00000027c0)={0x0, 0x4, [0xe9, 0xe10, 0x494, 0x151]}) r9 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000002800), 0x2, 0x0) write$cgroup_type(r9, &(0x7f0000002840), 0x9) (async) setsockopt$MRT6_PIM(r3, 0x29, 0xcf, &(0x7f0000002880)=0x2, 0x4) (async, rerun: 64) open_by_handle_at(r5, &(0x7f00000028c0)=@ceph_nfs_confh={0x10, 0x2, {0x7, 0x5}}, 0x0) (async, rerun: 64) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000002940), r6) sendmsg$DEVLINK_CMD_TRAP_SET(r6, &(0x7f0000002a40)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002a00)={&(0x7f0000002980)={0x58, r10, 0x4, 0x70bd26, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x4040810) (async, rerun: 64) r11 = syz_genetlink_get_family_id$fou(&(0x7f0000002ac0), r6) (rerun: 64) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000002b80)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002b40)={&(0x7f0000002b00)={0x30, r11, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010100}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4088) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000002bc0), 0x42, 0x0) ioctl$TUNSETIFINDEX(r12, 0x400454da, &(0x7f0000002c00)=r0) 1.141325239s ago: executing program 1 (id=12943): add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000080)="000000000000000463656c6c000000020000004400000006000000000000000000000000000000000000000000000000000000000000000000fffffffffffffe00000000000000000000000400000000000000040000000000000014a300000200"/112, 0x70, 0xffffffffffffffff) 874.865782ms ago: executing program 1 (id=12944): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0/..\x00', &(0x7f00000003c0)={0x200000, 0x0, 0x10}, 0x18) 655.319671ms ago: executing program 1 (id=12945): socket$rds(0x15, 0x5, 0x0) syz_ublk_setup_io_uring(0x2261, &(0x7f0000000300)={0x0, 0xd58c, 0x80, 0x2, 0x30b}, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) eventfd2(0x1, 0x80001) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0x3b5, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r4) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000007c0)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000840), 0x318, 0x0) recvmmsg(r5, &(0x7f0000000880), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = socket$inet(0x2, 0x1, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x25dfdbfe, {{@in=@private=0xa010100, @in=@dev={0xac, 0x14, 0x14, 0x44}, 0x0, 0x0, 0x1, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x100000000, 0x5, 0xfffffffffffffffb}, {0x0, 0x40004000000000, 0x200000000000000, 0x4000000}, 0x2, 0x0, 0x0, 0x1}, [@tmpl={0x184, 0x5, [{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d4, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x3507, 0x4, 0x0, 0x0, 0x7, 0x0, 0x2}, {{@in=@local, 0x4d3, 0x3c}, 0xa, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x4, 0x1, 0xc, 0x5, 0xf, 0x8}, {{@in=@local, 0x4d4, 0x2b}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3502, 0x1, 0x2, 0x2, 0x1a7, 0x81, 0x4}, {{@in=@rand_addr=0x64010101, 0x4d5, 0x33}, 0xa, @in=@rand_addr=0x64010102, 0x3502, 0x0, 0x3, 0x7, 0x4}, {{@in6=@empty, 0x4d5, 0x33}, 0xa, @in=@rand_addr=0x64010100, 0x3501, 0x1, 0x2, 0x40, 0x9, 0x4, 0x1}, {{@in=@local, 0x4d4, 0x32}, 0x30, @in=@local, 0x34ff, 0x3, 0x1, 0x9, 0xffff, 0x5, 0x7699}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) setsockopt$inet_opts(r7, 0x0, 0x4, 0x0, 0x0) r9 = gettid() sched_setattr(r9, &(0x7f0000000940)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x52, 0xffffffff}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) r10 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000980), 0xa1001) map_shadow_stack(&(0x7f00004d8000/0x3000)=nil, 0x166a, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r10, 0x40345410, 0x0) syz_open_dev$vim2m(&(0x7f00000009c0), 0x2, 0x2) 373.118428ms ago: executing program 0 (id=12946): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x1, 0xb, &(0x7f0000000b40)=ANY=[@ANYBLOB="18000000068a000000000000041f00181801000020696c2500000002012020207ba1d8fd000000007ba1000000000000040100000400ffffb702000008001f00b703000002000020850000002effb00095"], &(0x7f0000000000)='syzkaller\x00', 0xa, 0xffa, &(0x7f0000000c00)=""/4090, 0x0, 0xa8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94) 0s ago: executing program 0 (id=12947): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x80800) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x0, &(0x7f0000000440)}) shutdown(0xffffffffffffffff, 0x1) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x610003d5) r2 = inotify_init1(0x800) inotify_add_watch(r2, &(0x7f0000000080)='./file0\x00', 0x40000000) r3 = inotify_init() syz_usb_connect(0x1, 0x3d, &(0x7f0000000440)={{0x12, 0x1, 0xac877cbec12e8ed0, 0x5d, 0xb9, 0xa3, 0x8, 0xc2e, 0x720, 0xd429, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x8, 0x4, 0x40, 0x3, "", [{{0x9, 0x4, 0x6d, 0x0, 0x2, 0x78, 0x54, 0x99, 0x1, [], [{{0x9, 0x5, 0x3, 0x8, 0x200, 0x0, 0x5, 0x9, [@generic={0x7, 0x5, "8e33974a95"}]}}, {{0x9, 0x5, 0xb, 0x8, 0x8, 0x8, 0xc, 0x1}}]}}]}}]}}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0xa2000180) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newtaction={0x5c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x48, 0x1, [@m_tunnel_key={0x44, 0x1, 0x0, 0x0, {{0xf}, {0x14, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @empty=0x1000000}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xc, @local}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x4e800) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000640)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r4, &(0x7f0000000700)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000740)={0x362, @tick=0x440, 0xff}) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e1c, @multicast1}, 0x10) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x8, 0x9}, 0x18) execveat(r5, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)={[&(0x7f0000000240)='#^\x195@,\\\x00', &(0x7f0000000280)='-\x00']}, &(0x7f00000003c0)={[&(0x7f0000000300)='\x00', &(0x7f0000000340)='\\]*%,\x00', &(0x7f0000000380)='&&\x00']}, 0x800) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e22, @loopback}, 0x10) close_range(r1, r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000480)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) write$input_event(r6, &(0x7f00000004c0)={{0x77359400}, 0x11, 0x1ff, 0x80000000}, 0x18) kernel console output (not intermixed with test programs): video 4-1:1.1: Unknown video format 32595559-0000-0010-8000-00aa00380000 [ 2367.255565][ T5711] uvcvideo 4-1:1.0: Found UVC 1.00 device syz (225a:e1d4) [ 2367.266504][ T5711] uvcvideo 4-1:1.0: Failed to create links for entity 32769 [ 2367.266527][ T5711] uvcvideo 4-1:1.0: Failed to register entities (-22). [ 2367.358337][T10927] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 2367.385887][T15888] FAULT_INJECTION: forcing a failure. [ 2367.385887][T15888] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2367.385927][T15888] CPU: 1 UID: 0 PID: 15888 Comm: syz.0.12393 Tainted: G L syzkaller #0 PREEMPT(full) [ 2367.385959][T15888] Tainted: [L]=SOFTLOCKUP [ 2367.385969][T15888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2367.385983][T15888] Call Trace: [ 2367.385993][T15888] [ 2367.386003][T15888] dump_stack_lvl+0xe8/0x150 [ 2367.386059][T15888] should_fail_ex+0x410/0x560 [ 2367.386100][T15888] _copy_from_user+0x2d/0xb0 [ 2367.386139][T15888] ___sys_recvmsg+0x173/0x5a0 [ 2367.386174][T15888] ? __pfx____sys_recvmsg+0x10/0x10 [ 2367.386207][T15888] ? lock_acquire+0x115/0x350 [ 2367.386263][T15888] do_recvmmsg+0x31a/0x7f0 [ 2367.386300][T15888] ? __pfx_do_recvmmsg+0x10/0x10 [ 2367.386338][T15888] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2367.386370][T15888] ? __fget_files+0x3a2/0x420 [ 2367.386404][T15888] __x64_sys_recvmmsg+0x198/0x250 [ 2367.386439][T15888] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 2367.386480][T15888] do_syscall_64+0x166/0x520 [ 2367.386506][T15888] ? trace_irq_disable+0x3b/0x140 [ 2367.386532][T15888] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2367.386557][T15888] ? clear_bhb_loop+0x70/0xc0 [ 2367.386586][T15888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2367.386610][T15888] RIP: 0033:0x7f826ad9e559 [ 2367.386631][T15888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2367.386652][T15888] RSP: 002b:00007f826bc46028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2367.386677][T15888] RAX: ffffffffffffffda RBX: 00007f826b026180 RCX: 00007f826ad9e559 [ 2367.386694][T15888] RDX: 040000000000049e RSI: 0000200000001080 RDI: 0000000000000006 [ 2367.386711][T15888] RBP: 00007f826bc46090 R08: 0000000000000000 R09: 0000000000000000 [ 2367.386726][T15888] R10: 00001000000000fe R11: 0000000000000246 R12: 0000000000000002 [ 2367.386742][T15888] R13: 00007f826b026218 R14: 00007f826b026180 R15: 00007f826b14fa48 [ 2367.386779][T15888] [ 2367.469429][ T5711] usb 4-1: USB disconnect, device number 102 [ 2367.607002][T10927] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2367.636432][T10927] usb 2-1: config index 0 descriptor too short (asked for 9, got 0) [ 2367.636473][T10927] usb 2-1: can't read configurations, error -22 [ 2367.654401][T10927] usb usb2-port1: attempt power cycle [ 2368.038940][T10927] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 2368.062099][T10927] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2368.080629][T10927] usb 2-1: config index 0 descriptor too short (asked for 9, got 0) [ 2368.080670][T10927] usb 2-1: can't read configurations, error -22 [ 2368.164841][T15890] loop5: detected capacity change from 0 to 7 [ 2368.182145][T15890] Dev loop5: unable to read RDB block 7 [ 2368.182191][T15890] loop5: unable to read partition table [ 2368.182395][T15890] loop5: partition table beyond EOD, truncated [ 2368.182446][T15890] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2368.212127][T10927] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 2368.233158][T10927] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2368.237347][T10927] usb 2-1: config index 0 descriptor too short (asked for 9, got 0) [ 2368.237388][T10927] usb 2-1: can't read configurations, error -22 [ 2368.237660][T10927] usb usb2-port1: unable to enumerate USB device [ 2368.418252][T19803] usb 4-1: new low-speed USB device number 103 using dummy_hcd [ 2368.585255][T19803] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2368.585314][T19803] usb 4-1: New USB device found, idVendor=08e4, idProduct=017f, bcdDevice= 0.40 [ 2368.586858][T19803] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2368.586878][T19803] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2368.635769][T19803] usb 4-1: string descriptor 0 read error: -22 [ 2368.635928][T19803] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2369.041442][T19803] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 2369.046539][T19803] usb 4-1: USB disconnect, device number 103 [ 2369.224000][T15899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2369.229324][T15899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2369.370282][T15902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2369.370635][T15902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2369.371898][T15899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2369.372237][T15899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2369.448383][T32573] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 2369.590191][T15909] FAULT_INJECTION: forcing a failure. [ 2369.590191][T15909] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2369.590222][T15909] CPU: 1 UID: 0 PID: 15909 Comm: syz.7.12399 Tainted: G L syzkaller #0 PREEMPT(full) [ 2369.590244][T15909] Tainted: [L]=SOFTLOCKUP [ 2369.590251][T15909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2369.590261][T15909] Call Trace: [ 2369.590268][T15909] [ 2369.590275][T15909] dump_stack_lvl+0xe8/0x150 [ 2369.590304][T15909] should_fail_ex+0x410/0x560 [ 2369.590331][T15909] _copy_from_user+0x2d/0xb0 [ 2369.590358][T15909] do_ip6t_set_ctl+0x74c/0xe30 [ 2369.590400][T15909] ? rcu_is_watching+0x16/0xb0 [ 2369.590423][T15909] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 2369.590462][T15909] ? __mutex_unlock_slowpath+0x731/0x900 [ 2369.590487][T15909] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2369.590517][T15909] nf_setsockopt+0x26f/0x290 [ 2369.590537][T15909] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 2369.590563][T15909] do_sock_setsockopt+0x17c/0x1b0 [ 2369.590584][T15909] __x64_sys_setsockopt+0x13d/0x1b0 [ 2369.590605][T15909] do_syscall_64+0x166/0x520 [ 2369.590623][T15909] ? trace_irq_disable+0x3b/0x140 [ 2369.590642][T15909] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2369.590659][T15909] ? clear_bhb_loop+0x70/0xc0 [ 2369.590679][T15909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2369.590696][T15909] RIP: 0033:0x7fc55d79e559 [ 2369.590710][T15909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2369.590725][T15909] RSP: 002b:00007fc55e5b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2369.590742][T15909] RAX: ffffffffffffffda RBX: 00007fc55da25fa0 RCX: 00007fc55d79e559 [ 2369.590755][T15909] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 2369.590765][T15909] RBP: 00007fc55e5b3090 R08: 0000000000000390 R09: 0000000000000000 [ 2369.590776][T15909] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2369.590787][T15909] R13: 00007fc55da26038 R14: 00007fc55da25fa0 R15: 00007fc55db4fa48 [ 2369.590812][T15909] [ 2369.598327][T32573] usb 1-1: Using ep0 maxpacket: 8 [ 2369.600317][T32573] usb 1-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice= 0.00 [ 2369.704854][T32573] usb 1-1: config 0 has an invalid descriptor of length 41, skipping remainder of the config [ 2369.704893][T32573] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2369.705038][T32573] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2369.761839][T32573] usb 1-1: config 0 descriptor?? [ 2370.041230][T15910] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12398'. [ 2370.041717][T15910] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12398'. [ 2370.380286][ T32] kauditd_printk_skb: 5 callbacks suppressed [ 2370.380314][ T32] audit: type=1326 audit(1792173897.386:12641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15920 comm="syz.3.12403" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd804f9e559 code=0x7ffc0000 [ 2370.380536][ T32] audit: type=1326 audit(1792173897.386:12642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15920 comm="syz.3.12403" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd804f9e559 code=0x7ffc0000 [ 2370.380891][ T32] audit: type=1326 audit(1792173897.386:12643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15920 comm="syz.3.12403" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd804f9e559 code=0x7ffc0000 [ 2370.383018][ T32] audit: type=1326 audit(1792173897.386:12644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15920 comm="syz.3.12403" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd804f9e559 code=0x7ffc0000 [ 2370.383556][ T32] audit: type=1326 audit(1792173897.386:12645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15920 comm="syz.3.12403" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd804f9e559 code=0x7ffc0000 [ 2370.384327][ T32] audit: type=1326 audit(1792173897.386:12646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15920 comm="syz.3.12403" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd804f9e559 code=0x7ffc0000 [ 2370.385452][ T32] audit: type=1326 audit(1792173897.386:12647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15920 comm="syz.3.12403" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd804f9e559 code=0x7ffc0000 [ 2370.386256][ T32] audit: type=1326 audit(1792173897.386:12648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15920 comm="syz.3.12403" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd804f9e559 code=0x7ffc0000 [ 2370.386494][ T32] audit: type=1326 audit(1792173897.386:12649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15920 comm="syz.3.12403" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd804f9e559 code=0x7ffc0000 [ 2370.387191][ T32] audit: type=1326 audit(1792173897.386:12650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15920 comm="syz.3.12403" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd804f9e559 code=0x7ffc0000 [ 2370.426214][T15919] socket: no more sockets [ 2370.665118][T15919] socket: no more sockets [ 2370.703471][T15921] input: syz0 as /devices/virtual/input/input166 [ 2370.725605][T15919] socket: no more sockets [ 2370.763003][T15927] xt_CT: No such helper "pptp" [ 2370.835193][T15919] socket: no more sockets [ 2371.486611][T15941] veth1_vlan: entered allmulticast mode [ 2371.523511][T15941] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12409'. [ 2371.798191][T10927] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 2371.949525][T10927] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 2371.951985][T10927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2371.954592][T15943] FAULT_INJECTION: forcing a failure. [ 2371.954592][T15943] name failslab, interval 1, probability 0, space 0, times 0 [ 2371.954618][T15943] CPU: 1 UID: 0 PID: 15943 Comm: syz.4.12410 Tainted: G L syzkaller #0 PREEMPT(full) [ 2371.954640][T15943] Tainted: [L]=SOFTLOCKUP [ 2371.954646][T15943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2371.954656][T15943] Call Trace: [ 2371.954663][T15943] [ 2371.954669][T15943] dump_stack_lvl+0xe8/0x150 [ 2371.954697][T15943] should_fail_ex+0x410/0x560 [ 2371.954723][T15943] should_failslab+0xa8/0x100 [ 2371.954747][T15943] __kvmalloc_node_noprof+0x176/0x820 [ 2371.954777][T15943] ? xt_alloc_table_info+0x40/0xb0 [ 2371.954859][T15943] ? xt_alloc_table_info+0x40/0xb0 [ 2371.954882][T15943] xt_alloc_table_info+0x40/0xb0 [ 2371.954900][T15943] do_ip6t_set_ctl+0x96b/0xe30 [ 2371.954932][T15943] ? rcu_is_watching+0x16/0xb0 [ 2371.954954][T15943] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 2371.954991][T15943] ? __mutex_unlock_slowpath+0x731/0x900 [ 2371.955016][T15943] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2371.955045][T15943] nf_setsockopt+0x26f/0x290 [ 2371.955063][T15943] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 2371.955090][T15943] do_sock_setsockopt+0x17c/0x1b0 [ 2371.955140][T15943] __x64_sys_setsockopt+0x13d/0x1b0 [ 2371.955167][T15943] do_syscall_64+0x166/0x520 [ 2371.955196][T15943] ? trace_irq_disable+0x3b/0x140 [ 2371.955214][T15943] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2371.955230][T15943] ? clear_bhb_loop+0x70/0xc0 [ 2371.955249][T15943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2371.955265][T15943] RIP: 0033:0x7fa1a699e559 [ 2371.955281][T15943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2371.955295][T15943] RSP: 002b:00007fa1a7842028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2371.955312][T15943] RAX: ffffffffffffffda RBX: 00007fa1a6c25fa0 RCX: 00007fa1a699e559 [ 2371.955324][T15943] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 2371.955334][T15943] RBP: 00007fa1a7842090 R08: 0000000000000390 R09: 0000000000000000 [ 2371.955344][T15943] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2371.955354][T15943] R13: 00007fa1a6c26038 R14: 00007fa1a6c25fa0 R15: 00007fa1a6d4fa48 [ 2371.955378][T15943] [ 2372.052391][T10927] usb 4-1: config 0 descriptor?? [ 2372.295013][T10927] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 2372.536785][T10927] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 2372.536805][T10927] [drm] Initialized udl on minor 1 [ 2372.739512][T32573] usb 1-1: USB disconnect, device number 64 [ 2374.266477][T15982] netlink: 'syz.0.12419': attribute type 8 has an invalid length. [ 2374.357821][ T2295] usb 2-1: new full-speed USB device number 108 using dummy_hcd [ 2374.545206][ T2295] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2374.557636][ T2295] usb 2-1: not running at top speed; connect to a high speed hub [ 2374.566216][ T2295] usb 2-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice=e0.47 [ 2374.585796][ T2295] usb 2-1: config 133 has an invalid interface number: 109 but max is 0 [ 2374.585827][ T2295] usb 2-1: config 133 has no interface number 0 [ 2374.585901][ T2295] usb 2-1: config 133 interface 109 altsetting 3 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 2374.585932][ T2295] usb 2-1: config 133 interface 109 has no altsetting 0 [ 2374.633175][ T2295] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2374.633198][ T2295] usb 2-1: Product: syz [ 2374.633209][ T2295] usb 2-1: Manufacturer: syz [ 2374.633220][ T2295] usb 2-1: SerialNumber: syz [ 2374.774037][T15986] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12422'. [ 2375.343361][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880566cc000: rx timeout, send abort [ 2375.343601][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880566cc000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 2376.766307][ T2295] kaweth 2-1:133.109: couldn't find required endpoints [ 2376.785547][ T32] kauditd_printk_skb: 25 callbacks suppressed [ 2376.785569][ T32] audit: type=1800 audit(1792173903.786:12676): pid=16010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.12427" name="/" dev="fuse" ino=1 res=0 errno=0 [ 2376.833919][ T2295] usb 2-1: USB disconnect, device number 108 [ 2377.558125][T10927] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 2377.558565][T10927] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 2377.597350][T10927] usb 4-1: USB disconnect, device number 104 [ 2377.676688][T19803] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2377.677212][T19803] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 2378.643096][T16035] kAFS: unable to lookup cell 'ÿ' [ 2378.687558][T16037] kAFS: unable to lookup cell '(,c¾Ì' [ 2378.960491][T16048] syzkaller0: entered promiscuous mode [ 2378.960518][T16048] syzkaller0: entered allmulticast mode [ 2378.998318][T16048] tipc: Enabled bearer , priority 10 [ 2378.999901][T16047] tipc: Resetting bearer [ 2379.127810][ T5711] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 2379.156223][T16047] tipc: Disabling bearer [ 2379.197995][T32573] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 2379.281681][ T5711] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 2379.282725][ T5711] usb 4-1: config 171 has an invalid interface number: 109 but max is 0 [ 2379.282756][ T5711] usb 4-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 2379.282772][ T5711] usb 4-1: config 171 has no interface number 0 [ 2379.284841][ T5711] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2379.284860][ T5711] usb 4-1: Product: syz [ 2379.284871][ T5711] usb 4-1: Manufacturer: syz [ 2379.284883][ T5711] usb 4-1: SerialNumber: syz [ 2379.347816][T32573] usb 2-1: Using ep0 maxpacket: 8 [ 2379.350134][T32573] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 2379.352552][T32573] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 2379.352574][T32573] usb 2-1: config 0 has no interface number 0 [ 2379.352605][T32573] usb 2-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2379.352623][T32573] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2379.352641][T32573] usb 2-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 2379.352660][T32573] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 2379.352679][T32573] usb 2-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 2379.356267][T32573] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2379.356294][T32573] usb 2-1: Product: syz [ 2379.356311][T32573] usb 2-1: Manufacturer: syz [ 2379.356329][T32573] usb 2-1: SerialNumber: syz [ 2379.419905][T32573] usb 2-1: config 0 descriptor?? [ 2379.603740][T16054] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12440'. [ 2379.604506][T16054] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12440'. [ 2379.730760][T32573] iowarrior 2-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 2380.113289][ T5711] ath6kl: Failed to submit usb control message: -71 [ 2380.113423][ T5711] ath6kl: unable to send the bmi data to the device: -71 [ 2380.113437][ T5711] ath6kl: Unable to send get target info: -71 [ 2380.118701][ T5711] ath6kl: Failed to init ath6kl core: -71 [ 2380.164940][ T5711] ath6kl_usb 4-1:171.109: probe with driver ath6kl_usb failed with error -71 [ 2380.188919][ T5711] usb 4-1: USB disconnect, device number 105 [ 2380.497953][T32573] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 2380.502668][T16067] vlan0: entered promiscuous mode [ 2380.648821][T32573] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2380.650300][T32573] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2380.650325][T32573] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2380.651629][T32573] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2380.651658][T32573] usb 1-1: SerialNumber: syz [ 2380.797842][ T2295] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 2380.922018][T32573] usb 1-1: 0:2 : does not exist [ 2380.959399][ T2295] usb 4-1: Using ep0 maxpacket: 8 [ 2380.960137][ T2295] usb 4-1: New USB device found, idVendor=1b3d, idProduct=013a, bcdDevice= 6.e3 [ 2380.961339][ T2295] usb 4-1: config 5 has an invalid interface number: 78 but max is 1 [ 2380.961366][ T2295] usb 4-1: config 5 has an invalid interface number: 207 but max is 1 [ 2380.961388][ T2295] usb 4-1: config 5 has no interface number 0 [ 2380.961406][ T2295] usb 4-1: config 5 has no interface number 1 [ 2380.961466][ T2295] usb 4-1: config 5 interface 78 altsetting 128 endpoint 0xC has an invalid bInterval 128, changing to 11 [ 2380.961507][ T2295] usb 4-1: config 5 interface 207 altsetting 217 has a duplicate endpoint with address 0xC, skipping [ 2380.961532][ T2295] usb 4-1: config 5 interface 78 has no altsetting 0 [ 2380.961583][ T2295] usb 4-1: config 5 interface 207 has no altsetting 0 [ 2380.964255][ T2295] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2380.964282][ T2295] usb 4-1: Product: syz [ 2380.964298][ T2295] usb 4-1: Manufacturer: syz [ 2380.964315][ T2295] usb 4-1: SerialNumber: syz [ 2380.967909][ T2295] usb 4-1: Interface #78 referenced by multiple IADs [ 2381.124536][T32573] usb 1-1: USB disconnect, device number 65 [ 2381.242782][ T5647] udevd[5647]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2381.854253][T16081] syzkaller0: entered promiscuous mode [ 2381.854281][T16081] syzkaller0: entered allmulticast mode [ 2381.880474][T16081] tipc: Enabled bearer , priority 10 [ 2381.884678][T16080] tipc: Resetting bearer [ 2382.044365][T16080] tipc: Disabling bearer [ 2382.215833][T32573] usb 2-1: USB disconnect, device number 109 [ 2383.529988][ T2295] ftdi_sio 4-1:5.78: FTDI USB Serial Device converter detected [ 2383.552104][ T2295] ftdi_sio ttyUSB0: unknown device type: 0x6e3 [ 2383.568577][ T2295] hub 4-1:5.207: Invalid hub with more than one config or interface [ 2383.568610][ T2295] hub 4-1:5.207: probe with driver hub failed with error -22 [ 2383.569477][ T2295] ftdi_sio 4-1:5.207: FTDI USB Serial Device converter detected [ 2383.603482][ T2295] ftdi_sio ttyUSB1: unknown device type: 0x6e3 [ 2383.618432][ T2295] usb 4-1: USB disconnect, device number 106 [ 2383.622127][ T2295] ftdi_sio 4-1:5.78: device disconnected [ 2383.626970][ T2295] ftdi_sio 4-1:5.207: device disconnected [ 2384.317389][T16105] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12456'. [ 2384.652666][ T32] audit: type=1326 audit(1792173911.656:12677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16115 comm="syz.3.12460" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd804f9e559 code=0x7ffc0000 [ 2384.652727][ T32] audit: type=1326 audit(1792173911.656:12678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16115 comm="syz.3.12460" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd804f9e559 code=0x7ffc0000 [ 2384.656033][ T32] audit: type=1326 audit(1792173911.656:12679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16115 comm="syz.3.12460" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fd804f9e559 code=0x7ffc0000 [ 2384.656090][ T32] audit: type=1326 audit(1792173911.656:12680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16115 comm="syz.3.12460" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd804f9e559 code=0x7ffc0000 [ 2384.656143][ T32] audit: type=1326 audit(1792173911.656:12681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16115 comm="syz.3.12460" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd804f9e559 code=0x7ffc0000 [ 2384.656189][ T32] audit: type=1326 audit(1792173911.656:12682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16115 comm="syz.3.12460" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fd804f9e559 code=0x7ffc0000 [ 2384.656234][ T32] audit: type=1326 audit(1792173911.656:12683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16115 comm="syz.3.12460" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd804f9e559 code=0x7ffc0000 [ 2384.656278][ T32] audit: type=1326 audit(1792173911.656:12684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16115 comm="syz.3.12460" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd804f9e559 code=0x7ffc0000 [ 2384.656325][ T32] audit: type=1326 audit(1792173911.656:12685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16115 comm="syz.3.12460" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd804f9e559 code=0x7ffc0000 [ 2384.803583][ T32] audit: type=1326 audit(1792173911.806:12686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16115 comm="syz.3.12460" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd804f9e559 code=0x7ffc0000 [ 2385.016721][T16118] netlink: 260 bytes leftover after parsing attributes in process `syz.3.12460'. [ 2385.259211][T16122] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12461'. [ 2385.259235][T16122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12461'. [ 2385.669629][T16126] PKCS7: Unknown OID: [4] 2.19.16263.96.12508(bad) [ 2385.669645][T16126] PKCS7: Only support pkcs7_signedData type [ 2385.859475][T32573] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 2386.016755][T32573] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2386.016811][T32573] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=9c.8d [ 2386.031051][T32573] usb 2-1: config 254 has an invalid interface number: 213 but max is 0 [ 2386.031134][T32573] usb 2-1: config 254 has no interface number 0 [ 2386.031212][T32573] usb 2-1: config 254 interface 213 has no altsetting 0 [ 2386.063229][T32573] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2386.063257][T32573] usb 2-1: Product: syz [ 2386.063273][T32573] usb 2-1: Manufacturer: syz [ 2386.063289][T32573] usb 2-1: SerialNumber: syz [ 2386.292084][T16144] netlink: 28 bytes leftover after parsing attributes in process `syz.7.12469'. [ 2386.638443][T32573] usb_ehset_test 2-1:254.213: probe with driver usb_ehset_test failed with error -32 [ 2386.653027][T32573] usb 2-1: USB disconnect, device number 110 [ 2386.836930][T16147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12472'. [ 2387.244575][T16163] FAULT_INJECTION: forcing a failure. [ 2387.244575][T16163] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2387.244604][T16163] CPU: 1 UID: 0 PID: 16163 Comm: syz.3.12475 Tainted: G L syzkaller #0 PREEMPT(full) [ 2387.244627][T16163] Tainted: [L]=SOFTLOCKUP [ 2387.244633][T16163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2387.244643][T16163] Call Trace: [ 2387.244649][T16163] [ 2387.244657][T16163] dump_stack_lvl+0xe8/0x150 [ 2387.244685][T16163] should_fail_ex+0x410/0x560 [ 2387.244713][T16163] _copy_from_user+0x2d/0xb0 [ 2387.244740][T16163] ___sys_sendmsg+0x1c6/0x360 [ 2387.244758][T16163] ? __lock_acquire+0x747/0x2de0 [ 2387.244779][T16163] ? __pfx____sys_sendmsg+0x10/0x10 [ 2387.244821][T16163] ? __fget_files+0x2a/0x420 [ 2387.244836][T16163] ? __fget_files+0x3a2/0x420 [ 2387.244881][T16163] __x64_sys_sendmsg+0x1b1/0x290 [ 2387.244913][T16163] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2387.244946][T16163] do_syscall_64+0x166/0x520 [ 2387.244964][T16163] ? trace_irq_disable+0x3b/0x140 [ 2387.244982][T16163] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2387.244998][T16163] ? clear_bhb_loop+0x70/0xc0 [ 2387.245018][T16163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2387.245034][T16163] RIP: 0033:0x7fd804f9e559 [ 2387.245049][T16163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2387.245062][T16163] RSP: 002b:00007fd8031f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2387.245079][T16163] RAX: ffffffffffffffda RBX: 00007fd805225fa0 RCX: 00007fd804f9e559 [ 2387.245091][T16163] RDX: 0000000000008000 RSI: 0000200000000580 RDI: 0000000000000003 [ 2387.245102][T16163] RBP: 00007fd8031f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2387.245112][T16163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2387.245121][T16163] R13: 00007fd805226038 R14: 00007fd805225fa0 R15: 00007fd80534fa48 [ 2387.245148][T16163] [ 2389.421607][T16189] syzkaller0: entered promiscuous mode [ 2389.421626][T16189] syzkaller0: entered allmulticast mode [ 2389.680056][T16193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12482'. [ 2389.988447][T10927] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 2390.168770][T10927] usb 2-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 2390.169962][T10927] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 2390.170010][T10927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2390.173769][T10927] usb 2-1: config 0 descriptor?? [ 2390.220972][T10927] smsusb:smsusb_probe: board id=8, interface number 0 [ 2390.221491][T10927] smsusb:smsusb_probe: Device initialized with return code -19 [ 2390.731417][ T2295] usb 2-1: USB disconnect, device number 111 [ 2391.574374][T16215] program syz.7.12488 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2391.613286][T16216] program syz.7.12488 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2391.811728][T16221] syzkaller0: entered promiscuous mode [ 2391.811755][T16221] syzkaller0: entered allmulticast mode [ 2391.853839][T16221] tipc: Enabled bearer , priority 10 [ 2391.882671][T16218] tipc: Resetting bearer [ 2391.987934][T16232] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12496'. [ 2392.040010][T16218] tipc: Disabling bearer [ 2392.381373][T16250] netlink: 'syz.4.12501': attribute type 4 has an invalid length. [ 2392.428803][T10927] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 2392.610824][T10927] usb 4-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 2392.611844][T10927] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2392.611893][T10927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2392.685367][T10927] as10x_usb: device has been detected [ 2392.696260][T10927] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 2392.735085][T10927] usb 4-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 2392.783003][T10927] as10x_usb: error during firmware upload part1 [ 2392.783685][T10927] Registered device Abilis Systems DVB-Titan [ 2393.333914][T16263] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12498'. [ 2393.395199][T16258] netlink: Conntrack attr has 8 unknown bytes [ 2393.395239][T16258] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2393.938262][ T2295] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 2394.088537][ T2295] usb 1-1: New USB device found, idVendor=0eef, idProduct=0000, bcdDevice= 0.00 [ 2394.090065][ T2295] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2394.090102][ T2295] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2394.090130][ T2295] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2394.090170][ T2295] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2394.092502][ T2295] usb 1-1: config 0 descriptor?? [ 2394.556007][ T2295] hid (null): invalid report_count 1290131696 [ 2394.581897][ T2295] hid-generic 0003:0EEF:0000.0059: invalid report_count 1290131696 [ 2394.581928][ T2295] hid-generic 0003:0EEF:0000.0059: item 0 4 1 9 parsing failed [ 2394.583599][ T2295] hid-generic 0003:0EEF:0000.0059: probe with driver hid-generic failed with error -22 [ 2394.779703][T10927] usb 1-1: USB disconnect, device number 66 [ 2395.161492][ T2295] usb 4-1: USB disconnect, device number 107 [ 2395.369035][ T2295] Unregistered device Abilis Systems DVB-Titan [ 2395.376543][ T2295] as10x_usb: device has been disconnected [ 2395.973174][T16294] netlink: 'syz.7.12514': attribute type 4 has an invalid length. [ 2396.049123][T16296] syzkaller0: entered promiscuous mode [ 2396.049141][T16296] syzkaller0: entered allmulticast mode [ 2396.093598][T16296] tipc: Enabled bearer , priority 0 [ 2396.119079][T16295] tipc: Resetting bearer [ 2396.176575][T16295] tipc: Disabling bearer [ 2396.336065][T16299] xt_CT: No such helper "pptp" [ 2396.698277][T10927] usb 2-1: new full-speed USB device number 112 using dummy_hcd [ 2396.853294][T10927] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2396.854015][T10927] usb 2-1: not running at top speed; connect to a high speed hub [ 2396.854051][T10927] usb 2-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice=e0.47 [ 2396.858085][T10927] usb 2-1: config 133 has an invalid interface number: 109 but max is 0 [ 2396.858113][T10927] usb 2-1: config 133 has no interface number 0 [ 2396.858167][T10927] usb 2-1: config 133 interface 109 altsetting 3 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 2396.858189][T10927] usb 2-1: config 133 interface 109 has no altsetting 0 [ 2396.925774][T10927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2396.925805][T10927] usb 2-1: Product: syz [ 2396.925822][T10927] usb 2-1: Manufacturer: syz [ 2396.925838][T10927] usb 2-1: SerialNumber: syz [ 2397.003875][T16314] FAULT_INJECTION: forcing a failure. [ 2397.003875][T16314] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2397.003916][T16314] CPU: 1 UID: 0 PID: 16314 Comm: syz.3.12520 Tainted: G L syzkaller #0 PREEMPT(full) [ 2397.003947][T16314] Tainted: [L]=SOFTLOCKUP [ 2397.003956][T16314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2397.003971][T16314] Call Trace: [ 2397.003981][T16314] [ 2397.003991][T16314] dump_stack_lvl+0xe8/0x150 [ 2397.004031][T16314] should_fail_ex+0x410/0x560 [ 2397.004064][T16314] _copy_from_user+0x2d/0xb0 [ 2397.004093][T16314] ___sys_recvmsg+0x173/0x5a0 [ 2397.004126][T16314] ? __pfx____sys_recvmsg+0x10/0x10 [ 2397.004155][T16314] ? lock_acquire+0x115/0x350 [ 2397.004201][T16314] do_recvmmsg+0x31a/0x7f0 [ 2397.004229][T16314] ? __pfx_do_recvmmsg+0x10/0x10 [ 2397.004259][T16314] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2397.004282][T16314] ? __fget_files+0x3a2/0x420 [ 2397.004314][T16314] __x64_sys_recvmmsg+0x198/0x250 [ 2397.004338][T16314] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 2397.004368][T16314] do_syscall_64+0x166/0x520 [ 2397.004388][T16314] ? trace_irq_disable+0x3b/0x140 [ 2397.004408][T16314] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2397.004427][T16314] ? clear_bhb_loop+0x70/0xc0 [ 2397.004454][T16314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2397.004472][T16314] RIP: 0033:0x7fd804f9e559 [ 2397.004489][T16314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2397.004505][T16314] RSP: 002b:00007fd8031b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2397.004524][T16314] RAX: ffffffffffffffda RBX: 00007fd805226180 RCX: 00007fd804f9e559 [ 2397.004538][T16314] RDX: 040000000000049e RSI: 0000200000001080 RDI: 0000000000000006 [ 2397.004551][T16314] RBP: 00007fd8031b4090 R08: 0000000000000000 R09: 0000000000000000 [ 2397.004563][T16314] R10: 00001000000000fe R11: 0000000000000246 R12: 0000000000000002 [ 2397.004579][T16314] R13: 00007fd805226218 R14: 00007fd805226180 R15: 00007fd80534fa48 [ 2397.004609][T16314] [ 2397.053266][T32573] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 2397.416764][T32573] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 2397.440172][T32573] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2397.440201][T32573] usb 1-1: Product: syz [ 2397.440221][T32573] usb 1-1: Manufacturer: syz [ 2397.440233][T32573] usb 1-1: SerialNumber: syz [ 2397.494674][T32573] r8152-cfgselector 1-1: Unknown version 0x0000 [ 2397.494702][T32573] r8152-cfgselector 1-1: config 0 descriptor?? [ 2397.672933][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057925400: rx timeout, send abort [ 2397.673202][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888057925400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 2399.056215][T10927] kaweth 2-1:133.109: couldn't find required endpoints [ 2399.100224][T10927] usb 2-1: USB disconnect, device number 112 [ 2400.100025][T16335] netlink: 'syz.7.12529': attribute type 4 has an invalid length. [ 2400.148904][T32573] r8152-cfgselector 1-1: Unknown version 0x0000 [ 2400.150426][T32573] r8152-cfgselector 1-1: No union descriptors [ 2400.173822][T32573] r8152-cfgselector 1-1: USB disconnect, device number 67 [ 2400.351499][T16340] syzkaller1: entered promiscuous mode [ 2400.351526][T16340] syzkaller1: entered allmulticast mode [ 2400.474102][T16344] trusted_key: encrypted_key: key user:syz not found [ 2400.846060][T16360] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12537'. [ 2400.864547][T16360] __report_access: 7 callbacks suppressed [ 2400.864568][T16360] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[13670] was attempted by "ci-upstream-kasan-gce/syz-executor exec"[16360] [ 2401.648148][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2401.700364][T16377] xt_CT: No such helper "pptp" [ 2402.321292][T16383] xt_CT: No such helper "pptp" [ 2402.905525][ T32] kauditd_printk_skb: 7 callbacks suppressed [ 2402.905547][ T32] audit: type=1326 audit(1792173929.896:12694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16395 comm="syz.0.12553" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f826ad9e559 code=0x7ffc0000 [ 2402.905601][ T32] audit: type=1326 audit(1792173929.906:12695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16395 comm="syz.0.12553" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f826ad9e559 code=0x7ffc0000 [ 2402.905647][ T32] audit: type=1326 audit(1792173929.906:12696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16395 comm="syz.0.12553" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f826ad9e559 code=0x7ffc0000 [ 2402.905693][ T32] audit: type=1326 audit(1792173929.906:12697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16395 comm="syz.0.12553" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f826ad9e559 code=0x7ffc0000 [ 2402.905740][ T32] audit: type=1326 audit(1792173929.906:12698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16395 comm="syz.0.12553" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f826ad9e559 code=0x7ffc0000 [ 2402.905784][ T32] audit: type=1326 audit(1792173929.906:12699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16395 comm="syz.0.12553" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f826ad9e559 code=0x7ffc0000 [ 2402.905829][ T32] audit: type=1326 audit(1792173929.906:12700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16395 comm="syz.0.12553" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f826ad9e559 code=0x7ffc0000 [ 2402.914873][ T32] audit: type=1326 audit(1792173929.916:12701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16395 comm="syz.0.12553" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f826ad9e559 code=0x7ffc0000 [ 2402.940715][ T32] audit: type=1326 audit(1792173929.916:12703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16395 comm="syz.0.12553" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f826ad9e559 code=0x7ffc0000 [ 2402.940775][ T32] audit: type=1326 audit(1792173929.916:12702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16395 comm="syz.0.12553" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f826ad9e559 code=0x7ffc0000 [ 2403.330289][T16406] bridge_slave_0: left allmulticast mode [ 2403.330317][T16406] bridge_slave_0: left promiscuous mode [ 2403.330585][T16406] bridge0: port 1(bridge_slave_0) entered disabled state [ 2403.332714][T16408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12557'. [ 2403.334294][T16406] bridge_slave_1: left allmulticast mode [ 2403.334312][T16406] bridge_slave_1: left promiscuous mode [ 2403.334519][T16406] bridge0: port 2(bridge_slave_1) entered disabled state [ 2403.390569][T16406] bond0: (slave bond_slave_0): Releasing backup interface [ 2403.414471][T16406] bond0: (slave bond_slave_1): Releasing backup interface [ 2403.420187][T32573] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 2403.452271][T16406] team0: Port device team_slave_0 removed [ 2403.472151][T16406] team0: Port device team_slave_1 removed [ 2403.474184][T16406] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2403.474203][T16406] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2403.475511][T16406] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2403.475527][T16406] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2403.491947][T16406] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2403.581965][T32573] usb 4-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=fb.7c [ 2403.593746][T32573] usb 4-1: config 0 has an invalid interface number: 148 but max is 1 [ 2403.593776][T32573] usb 4-1: config 0 has an invalid interface number: 5 but max is 1 [ 2403.593797][T32573] usb 4-1: config 0 has no interface number 0 [ 2403.593815][T32573] usb 4-1: config 0 has no interface number 1 [ 2403.593867][T32573] usb 4-1: config 0 interface 5 altsetting 16 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 2403.593897][T32573] usb 4-1: config 0 interface 148 has no altsetting 0 [ 2403.593917][T32573] usb 4-1: config 0 interface 5 has no altsetting 0 [ 2403.613264][T32573] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2403.613296][T32573] usb 4-1: Product: syz [ 2403.613312][T32573] usb 4-1: Manufacturer: syz [ 2403.613328][T32573] usb 4-1: SerialNumber: syz [ 2403.643699][T32573] usb 4-1: config 0 descriptor?? [ 2404.178072][T16425] netlink: 'syz.0.12563': attribute type 1 has an invalid length. [ 2404.314824][T16425] bond3: entered promiscuous mode [ 2404.315870][T16425] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2404.365963][T16430] bond3: (slave bridge1): making interface the new active one [ 2404.365991][T16430] bridge1: entered promiscuous mode [ 2404.381928][T16430] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 2405.288627][T16439] xt_CT: No such helper "pptp" [ 2405.288684][T16439] FAULT_INJECTION: forcing a failure. [ 2405.288684][T16439] name failslab, interval 1, probability 0, space 0, times 0 [ 2405.288757][T16439] CPU: 1 UID: 0 PID: 16439 Comm: syz.4.12567 Tainted: G L syzkaller #0 PREEMPT(full) [ 2405.288796][T16439] Tainted: [L]=SOFTLOCKUP [ 2405.288807][T16439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2405.288827][T16439] Call Trace: [ 2405.288839][T16439] [ 2405.288850][T16439] dump_stack_lvl+0xe8/0x150 [ 2405.288904][T16439] should_fail_ex+0x410/0x560 [ 2405.288953][T16439] should_failslab+0xa8/0x100 [ 2405.288997][T16439] __kvmalloc_node_noprof+0x176/0x820 [ 2405.289045][T16439] ? __nf_hook_entries_try_shrink+0x34e/0x720 [ 2405.289183][T16439] ? __nf_hook_entries_try_shrink+0x34e/0x720 [ 2405.289233][T16439] __nf_hook_entries_try_shrink+0x34e/0x720 [ 2405.289290][T16439] __nf_unregister_net_hook+0x4be/0x6d0 [ 2405.289348][T16439] nf_unregister_net_hooks+0xcb/0x140 [ 2405.289394][T16439] nf_ct_netns_put+0x36d/0x520 [ 2405.289502][T16439] xt_ct_tg_check+0x73e/0xa00 [ 2405.289564][T16439] ? rcu_is_watching+0x16/0xb0 [ 2405.289600][T16439] ? __pfx_xt_ct_tg_check+0x10/0x10 [ 2405.289636][T16439] xt_check_target+0x619/0xca0 [ 2405.289673][T16439] ? __pfx_xt_check_target+0x10/0x10 [ 2405.289704][T16439] ? pcpu_alloc_noprof+0x1036/0x1900 [ 2405.289740][T16439] ? xt_find_target+0x20f/0x260 [ 2405.289775][T16439] translate_table+0x1917/0x2110 [ 2405.289811][T16439] ? __lock_acquire+0x747/0x2de0 [ 2405.289865][T16439] ? __pfx_translate_table+0x10/0x10 [ 2405.289900][T16439] ? lock_acquire+0x115/0x350 [ 2405.289950][T16439] ? _copy_from_user+0x94/0xb0 [ 2405.289993][T16439] do_ip6t_set_ctl+0xa5c/0xe30 [ 2405.290040][T16439] ? rcu_is_watching+0x16/0xb0 [ 2405.290072][T16439] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 2405.290127][T16439] ? __mutex_unlock_slowpath+0x731/0x900 [ 2405.290164][T16439] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2405.290209][T16439] nf_setsockopt+0x26f/0x290 [ 2405.290235][T16439] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 2405.290271][T16439] do_sock_setsockopt+0x17c/0x1b0 [ 2405.290302][T16439] __x64_sys_setsockopt+0x13d/0x1b0 [ 2405.290333][T16439] do_syscall_64+0x166/0x520 [ 2405.290359][T16439] ? trace_irq_disable+0x3b/0x140 [ 2405.290403][T16439] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2405.290428][T16439] ? clear_bhb_loop+0x70/0xc0 [ 2405.290457][T16439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2405.290480][T16439] RIP: 0033:0x7fa1a699e559 [ 2405.290502][T16439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2405.290530][T16439] RSP: 002b:00007fa1a7842028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2405.290555][T16439] RAX: ffffffffffffffda RBX: 00007fa1a6c25fa0 RCX: 00007fa1a699e559 [ 2405.290573][T16439] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 2405.290589][T16439] RBP: 00007fa1a7842090 R08: 0000000000000390 R09: 0000000000000000 [ 2405.290604][T16439] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2405.290619][T16439] R13: 00007fa1a6c26038 R14: 00007fa1a6c25fa0 R15: 00007fa1a6d4fa48 [ 2405.290658][T16439] [ 2405.888645][T32573] mos7840 4-1:0.148: required endpoints missing [ 2405.930365][T32573] mos7840 4-1:0.5: required endpoints missing [ 2405.966629][T32573] usb 4-1: USB disconnect, device number 108 [ 2406.123040][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.123091][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 2406.712763][T16466] xt_CT: No such helper "pptp" [ 2406.906145][T16476] netlink: 'syz.4.12582': attribute type 4 has an invalid length. [ 2406.957468][T16477] ip6erspan0: entered allmulticast mode [ 2407.107498][T16481] netlink: 'syz.7.12583': attribute type 4 has an invalid length. [ 2407.423864][T16491] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12586'. [ 2407.905344][T16513] xt_CT: No such helper "pptp" [ 2407.965798][T10927] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 2408.020388][T16516] netlink: 'syz.0.12596': attribute type 4 has an invalid length. [ 2408.113711][T10927] usb 4-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00 [ 2408.114898][T10927] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2408.114952][T10927] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2408.114995][T10927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2408.394214][T16505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2408.395242][T16505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2408.460423][T16528] netlink: 'syz.7.12600': attribute type 322 has an invalid length. [ 2408.552773][T16505] ovs-dp0: entered promiscuous mode [ 2408.817950][T32573] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 2408.922831][T16550] netlink: 'syz.0.12608': attribute type 4 has an invalid length. [ 2408.978959][T32573] usb 2-1: Using ep0 maxpacket: 8 [ 2408.979819][T32573] usb 2-1: New USB device found, idVendor=1b3d, idProduct=013a, bcdDevice= 6.e3 [ 2408.981004][T32573] usb 2-1: config 5 has an invalid interface number: 78 but max is 1 [ 2408.981029][T32573] usb 2-1: config 5 has an invalid interface number: 207 but max is 1 [ 2408.981052][T32573] usb 2-1: config 5 has no interface number 0 [ 2408.981070][T32573] usb 2-1: config 5 has no interface number 1 [ 2408.981131][T32573] usb 2-1: config 5 interface 78 altsetting 128 endpoint 0xC has an invalid bInterval 128, changing to 11 [ 2408.981174][T32573] usb 2-1: config 5 interface 207 altsetting 217 has a duplicate endpoint with address 0xC, skipping [ 2408.981200][T32573] usb 2-1: config 5 interface 78 has no altsetting 0 [ 2408.981220][T32573] usb 2-1: config 5 interface 207 has no altsetting 0 [ 2408.983546][T32573] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2408.983572][T32573] usb 2-1: Product: syz [ 2408.983590][T32573] usb 2-1: Manufacturer: syz [ 2408.983606][T32573] usb 2-1: SerialNumber: syz [ 2408.991658][T32573] usb 2-1: Interface #78 referenced by multiple IADs [ 2409.021621][T10927] rtsx_usb 4-1:1.0: probe with driver rtsx_usb failed with error -110 [ 2409.320479][T16559] xt_CT: No such helper "pptp" [ 2409.433216][ T2272] usb 4-1: USB disconnect, device number 109 [ 2409.510324][T16564] FAULT_INJECTION: forcing a failure. [ 2409.510324][T16564] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2409.510392][T16564] CPU: 1 UID: 0 PID: 16564 Comm: syz.0.12611 Tainted: G L syzkaller #0 PREEMPT(full) [ 2409.510423][T16564] Tainted: [L]=SOFTLOCKUP [ 2409.510431][T16564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2409.510441][T16564] Call Trace: [ 2409.510449][T16564] [ 2409.510458][T16564] dump_stack_lvl+0xe8/0x150 [ 2409.510493][T16564] should_fail_ex+0x410/0x560 [ 2409.510536][T16564] _copy_from_user+0x2d/0xb0 [ 2409.510574][T16564] ___sys_recvmsg+0x173/0x5a0 [ 2409.510604][T16564] ? __pfx____sys_recvmsg+0x10/0x10 [ 2409.510627][T16564] ? irqentry_exit+0x218/0x920 [ 2409.510650][T16564] ? lockdep_hardirqs_on+0x7b/0x110 [ 2409.510698][T16564] do_recvmmsg+0x31a/0x7f0 [ 2409.510725][T16564] ? __pfx_do_recvmmsg+0x10/0x10 [ 2409.510755][T16564] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2409.510777][T16564] ? __fget_files+0x3a2/0x420 [ 2409.510804][T16564] __x64_sys_recvmmsg+0x198/0x250 [ 2409.510827][T16564] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 2409.510857][T16564] do_syscall_64+0x166/0x520 [ 2409.510878][T16564] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2409.510897][T16564] ? clear_bhb_loop+0x70/0xc0 [ 2409.510919][T16564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2409.510937][T16564] RIP: 0033:0x7f826ad9e559 [ 2409.510954][T16564] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2409.510970][T16564] RSP: 002b:00007f826bc46028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2409.510989][T16564] RAX: ffffffffffffffda RBX: 00007f826b026180 RCX: 00007f826ad9e559 [ 2409.511003][T16564] RDX: 040000000000049e RSI: 0000200000001080 RDI: 0000000000000006 [ 2409.511016][T16564] RBP: 00007f826bc46090 R08: 0000000000000000 R09: 0000000000000000 [ 2409.511029][T16564] R10: 00001000000000fe R11: 0000000000000246 R12: 0000000000000002 [ 2409.511041][T16564] R13: 00007f826b026218 R14: 00007f826b026180 R15: 00007f826b14fa48 [ 2409.511068][T16564] [ 2411.108414][T16585] netlink: 'syz.3.12619': attribute type 4 has an invalid length. [ 2411.302182][T16591] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12621'. [ 2411.349844][T16594] fuse: Bad value for 'fd' [ 2411.482522][T32573] ftdi_sio 2-1:5.78: FTDI USB Serial Device converter detected [ 2411.499083][T32573] ftdi_sio ttyUSB0: unknown device type: 0x6e3 [ 2411.530392][T32573] hub 2-1:5.207: Invalid hub with more than one config or interface [ 2411.530424][T32573] hub 2-1:5.207: probe with driver hub failed with error -22 [ 2411.531084][T32573] ftdi_sio 2-1:5.207: FTDI USB Serial Device converter detected [ 2411.536729][T32573] ftdi_sio ttyUSB1: unknown device type: 0x6e3 [ 2411.584507][T32573] usb 2-1: USB disconnect, device number 113 [ 2411.599607][T32573] ftdi_sio 2-1:5.78: device disconnected [ 2411.615950][T32573] ftdi_sio 2-1:5.207: device disconnected [ 2412.047856][T32573] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 2412.082638][T16589] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 2412.138498][T16611] xt_CT: No such helper "pptp" [ 2412.197879][T32573] usb 2-1: Using ep0 maxpacket: 16 [ 2412.198654][T32573] usb 2-1: New USB device found, idVendor=2001, idProduct=3a04, bcdDevice= f.ab [ 2412.199829][T32573] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 2412.201970][T32573] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2412.201993][T32573] usb 2-1: Product: syz [ 2412.202008][T32573] usb 2-1: Manufacturer: syz [ 2412.202023][T32573] usb 2-1: SerialNumber: syz [ 2412.359236][T16616] xt_ipcomp: unknown flags 1D [ 2412.401327][T16616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2412.403792][T16619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2412.411678][T16616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2412.426162][T16619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2412.555043][T32573] usb 2-1: Could not find all expected endpoints [ 2412.619993][T32573] usb 2-1: USB disconnect, device number 114 [ 2413.084147][T16625] netlink: 'syz.4.12632': attribute type 4 has an invalid length. [ 2415.648989][T16684] netlink: 'syz.0.12645': attribute type 4 has an invalid length. [ 2415.934524][T16687] nvme nvme0: rdma_resolve_addr failed (-19). [ 2416.321556][T16712] netlink: 'syz.0.12652': attribute type 1 has an invalid length. [ 2416.436969][T16712] bond4: entered promiscuous mode [ 2416.437312][T16712] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2416.512483][T16712] bond4: (slave bridge2): making interface the new active one [ 2416.512510][T16712] bridge2: entered promiscuous mode [ 2416.516176][T16712] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 2416.878094][T32573] usb 4-1: new full-speed USB device number 110 using dummy_hcd [ 2417.030732][T32573] usb 4-1: New USB device found, idVendor=041e, idProduct=3042, bcdDevice= 0.40 [ 2417.032073][T32573] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 2417.046151][T32573] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2417.046225][T32573] usb 4-1: Product: syz [ 2417.046275][T32573] usb 4-1: Manufacturer: syz [ 2417.046317][T32573] usb 4-1: SerialNumber: syz [ 2417.892011][T32573] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 2417.894294][T32573] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2418.075953][T32573] usb 4-1: USB disconnect, device number 110 [ 2418.263254][ T5648] udevd[5648]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2418.603144][T16750] netlink: 'syz.0.12665': attribute type 1 has an invalid length. [ 2418.710966][T16750] bond5: entered promiscuous mode [ 2418.711485][T16750] 8021q: adding VLAN 0 to HW filter on device bond5 [ 2418.815316][T16750] bond5: (slave bridge3): making interface the new active one [ 2418.815337][T16750] bridge3: entered promiscuous mode [ 2418.852379][T16750] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 2419.626764][T16770] macsec1: entered promiscuous mode [ 2419.626787][T16770] macsec1: entered allmulticast mode [ 2419.878199][ T2272] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 2420.007895][ T2272] usb 2-1: device descriptor read/64, error -71 [ 2420.247802][ T2272] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 2420.317326][T16786] netlink: 28 bytes leftover after parsing attributes in process `syz.7.12674'. [ 2420.379560][ T2272] usb 2-1: device descriptor read/64, error -71 [ 2420.488251][ T2272] usb usb2-port1: attempt power cycle [ 2420.829948][ T2272] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 2420.850483][ T2272] usb 2-1: device descriptor read/8, error -71 [ 2421.060362][T16793] ip6t_srh: unknown srh invflags 4000 [ 2421.088899][ T2272] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 2421.113439][ T2272] usb 2-1: device descriptor read/8, error -71 [ 2421.218255][ T2272] usb usb2-port1: unable to enumerate USB device [ 2421.410546][T16798] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12679'. [ 2421.410571][T16798] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12679'. [ 2423.040965][T16818] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12685'. [ 2423.337109][T16824] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12688'. [ 2423.411737][T16828] netlink: 'syz.0.12690': attribute type 4 has an invalid length. [ 2423.597842][ T2272] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 2423.741188][T16841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12695'. [ 2423.760242][ T2272] usb 4-1: New USB device found, idVendor=256a, idProduct=0084, bcdDevice= 0.00 [ 2423.761778][ T2272] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 2423.761815][ T2272] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2423.767503][ T2272] usb 4-1: config 0 descriptor?? [ 2423.812485][T16826] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2423.977817][ T2295] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 2424.024065][T16826] fuse: Bad value for 'user_id' [ 2424.024087][T16826] fuse: Bad value for 'user_id' [ 2424.038307][T16826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2424.045891][T16826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2424.069652][T16826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2424.070164][T16826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2424.130461][ T2295] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2424.130518][ T2295] usb 2-1: New USB device found, idVendor=8c29, idProduct=eaed, bcdDevice= 0.06 [ 2424.132183][ T2295] usb 2-1: config 7 has an invalid interface number: 246 but max is 0 [ 2424.132210][ T2295] usb 2-1: config 7 has no interface number 0 [ 2424.135552][ T2295] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2424.135571][ T2295] usb 2-1: Product: syz [ 2424.135599][ T2295] usb 2-1: Manufacturer: syz [ 2424.135617][ T2295] usb 2-1: SerialNumber: syz [ 2424.279014][T16826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2424.281212][T16826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2424.315027][ T2272] usbhid 4-1:0.0: can't add hid device: -71 [ 2424.315240][ T2272] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2424.337647][ T2272] usb 4-1: USB disconnect, device number 111 [ 2424.416333][T16841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2424.416737][T16841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2424.453744][ T2295] usb-storage 2-1:7.246: USB Mass Storage device detected [ 2424.570911][ T2295] usb 2-1: USB disconnect, device number 119 [ 2424.744803][T16849] netlink: 'syz.4.12697': attribute type 2 has an invalid length. [ 2424.983487][T16852] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12699'. [ 2426.001453][T16868] netlink: 140 bytes leftover after parsing attributes in process `syz.1.12705'. [ 2426.001541][T16868] netlink: 48 bytes leftover after parsing attributes in process `syz.1.12705'. [ 2426.390599][T16875] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12706'. [ 2426.428617][T16875] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12706'. [ 2426.647849][T19803] usb 2-1: new full-speed USB device number 120 using dummy_hcd [ 2426.819011][T19803] usb 2-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 2426.823769][T19803] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 2426.823800][T19803] usb 2-1: config 0 has no interface number 0 [ 2426.823840][T19803] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2426.823870][T19803] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2426.823887][T19803] usb 2-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2426.823908][T19803] usb 2-1: config 0 interface 1 has no altsetting 0 [ 2426.823932][T19803] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2426.828269][T19803] usb 2-1: config 0 descriptor?? [ 2427.034239][T19803] usbhid 2-1:0.1: can't add hid device: -71 [ 2427.034351][T19803] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 2427.046733][T16889] xt_nfacct: accounting object `syz0' does not exist [ 2427.060539][T16889] netlink: 28 bytes leftover after parsing attributes in process `syz.7.12710'. [ 2427.060614][T16889] netlink: 31 bytes leftover after parsing attributes in process `syz.7.12710'. [ 2427.088644][T19803] usb 2-1: USB disconnect, device number 120 [ 2427.153695][T16889] xt_CT: No such helper "pptp" [ 2427.243087][T16894] xt_CT: No such helper "pptp" [ 2427.688047][T32573] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 2427.833892][T16918] fuse: Bad value for 'user_id' [ 2427.833914][T16918] fuse: Bad value for 'user_id' [ 2427.851681][T32573] usb 4-1: Using ep0 maxpacket: 8 [ 2427.853312][T32573] usb 4-1: New USB device found, idVendor=1b3d, idProduct=013a, bcdDevice= 6.e3 [ 2427.860486][T32573] usb 4-1: config 5 has an invalid interface number: 78 but max is 1 [ 2427.860579][T32573] usb 4-1: config 5 has an invalid interface number: 207 but max is 1 [ 2427.860633][T32573] usb 4-1: config 5 has no interface number 0 [ 2427.860678][T32573] usb 4-1: config 5 has no interface number 1 [ 2427.860829][T32573] usb 4-1: config 5 interface 78 altsetting 128 endpoint 0xC has an invalid bInterval 128, changing to 11 [ 2427.860921][T32573] usb 4-1: config 5 interface 207 altsetting 217 has a duplicate endpoint with address 0xC, skipping [ 2427.860985][T32573] usb 4-1: config 5 interface 78 has no altsetting 0 [ 2427.861037][T32573] usb 4-1: config 5 interface 207 has no altsetting 0 [ 2427.869571][T32573] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2427.869647][T32573] usb 4-1: Product: syz [ 2427.869698][T32573] usb 4-1: Manufacturer: syz [ 2427.869756][T32573] usb 4-1: SerialNumber: syz [ 2427.890578][T32573] usb 4-1: Interface #78 referenced by multiple IADs [ 2427.936164][ T2272] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 2428.108366][ T2272] usb 1-1: Using ep0 maxpacket: 16 [ 2428.109324][ T2272] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2428.111159][ T2272] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2428.111185][ T2272] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2428.116552][ T2272] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2428.116580][ T2272] usb 1-1: Product: syz [ 2428.116625][ T2272] usb 1-1: Manufacturer: syz [ 2428.116642][ T2272] usb 1-1: SerialNumber: syz [ 2428.196493][ T2272] usb 1-1: 0:2 : does not exist [ 2428.370506][T16926] xt_CT: No such helper "pptp" [ 2428.411922][ T2272] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 2428.522770][ T2272] usb 1-1: USB disconnect, device number 68 [ 2428.592865][ T5649] udevd[5649]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2428.682208][T16931] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12725'. [ 2428.682346][T16931] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12725'. [ 2428.683537][T16931] ip_tables: iptables: counters copy to user failed while replacing table [ 2429.375770][T16946] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 4, id = 0 [ 2430.357503][T16953] netlink: 'syz.0.12734': attribute type 4 has an invalid length. [ 2430.404069][T32573] ftdi_sio 4-1:5.78: FTDI USB Serial Device converter detected [ 2430.406874][T32573] ftdi_sio ttyUSB0: unknown device type: 0x6e3 [ 2430.426841][T32573] hub 4-1:5.207: Invalid hub with more than one config or interface [ 2430.426871][T32573] hub 4-1:5.207: probe with driver hub failed with error -22 [ 2430.437114][T32573] ftdi_sio 4-1:5.207: FTDI USB Serial Device converter detected [ 2430.456445][T32573] ftdi_sio ttyUSB1: unknown device type: 0x6e3 [ 2430.470900][T32573] usb 4-1: USB disconnect, device number 112 [ 2430.489186][T32573] ftdi_sio 4-1:5.78: device disconnected [ 2430.492954][T32573] ftdi_sio 4-1:5.207: device disconnected [ 2431.887024][T19803] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 2432.048212][T19803] usb 1-1: Using ep0 maxpacket: 8 [ 2432.048984][T19803] usb 1-1: New USB device found, idVendor=1b3d, idProduct=013a, bcdDevice= 6.e3 [ 2432.050008][T19803] usb 1-1: config 5 has an invalid interface number: 78 but max is 1 [ 2432.050080][T19803] usb 1-1: config 5 has an invalid interface number: 207 but max is 1 [ 2432.050103][T19803] usb 1-1: config 5 has no interface number 0 [ 2432.050122][T19803] usb 1-1: config 5 has no interface number 1 [ 2432.050174][T19803] usb 1-1: config 5 interface 78 altsetting 128 endpoint 0xC has an invalid bInterval 128, changing to 11 [ 2432.050216][T19803] usb 1-1: config 5 interface 207 altsetting 217 has a duplicate endpoint with address 0xC, skipping [ 2432.050241][T19803] usb 1-1: config 5 interface 78 has no altsetting 0 [ 2432.050262][T19803] usb 1-1: config 5 interface 207 has no altsetting 0 [ 2432.053211][T19803] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2432.053237][T19803] usb 1-1: Product: syz [ 2432.053253][T19803] usb 1-1: Manufacturer: syz [ 2432.053269][T19803] usb 1-1: SerialNumber: syz [ 2432.056758][T19803] usb 1-1: Interface #78 referenced by multiple IADs [ 2432.427890][T10927] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 2432.567338][T17006] netlink: 'syz.1.12749': attribute type 1 has an invalid length. [ 2432.579903][T10927] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 2432.581193][T10927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2432.585345][T10927] usb 4-1: config 0 descriptor?? [ 2432.634880][T17006] bond12: entered promiscuous mode [ 2432.635328][T17006] 8021q: adding VLAN 0 to HW filter on device bond12 [ 2432.670275][T17006] bond12: (slave bridge8): making interface the new active one [ 2432.670302][T17006] bridge8: entered promiscuous mode [ 2432.674717][T17006] bond12: (slave bridge8): Enslaving as an active interface with an up link [ 2432.834227][T10927] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 2433.036373][T10927] [drm:udl_init] *ERROR* Selecting channel failed [ 2433.057338][T10927] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 2433.057392][T10927] [drm] Initialized udl on minor 1 [ 2433.075602][T10927] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2433.076166][T10927] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 2433.086070][ T2295] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2433.106493][T10927] usb 4-1: USB disconnect, device number 113 [ 2433.106988][ T2295] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2433.107259][ T2295] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 2433.775636][T17030] netlink: 'syz.1.12756': attribute type 4 has an invalid length. [ 2433.978002][T10927] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 2434.127840][T10927] usb 4-1: Using ep0 maxpacket: 32 [ 2434.129496][T10927] usb 4-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 2434.131005][T10927] usb 4-1: config 2 has an invalid interface number: 88 but max is 0 [ 2434.131025][T10927] usb 4-1: config 2 has no interface number 0 [ 2434.131055][T10927] usb 4-1: config 2 interface 88 has no altsetting 0 [ 2434.135599][T10927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2434.135620][T10927] usb 4-1: Product: syz [ 2434.135631][T10927] usb 4-1: Manufacturer: syz [ 2434.135642][T10927] usb 4-1: SerialNumber: syz [ 2434.252047][T17039] 8021q: VLANs not supported on gre0 [ 2434.432915][T10927] asix 4-1:2.88: probe with driver asix failed with error -71 [ 2434.471424][T10927] usb 4-1: USB disconnect, device number 114 [ 2434.594586][T19803] ftdi_sio 1-1:5.78: FTDI USB Serial Device converter detected [ 2434.609988][T19803] ftdi_sio ttyUSB0: unknown device type: 0x6e3 [ 2434.636737][T19803] hub 1-1:5.207: Invalid hub with more than one config or interface [ 2434.636770][T19803] hub 1-1:5.207: probe with driver hub failed with error -22 [ 2434.637636][T19803] ftdi_sio 1-1:5.207: FTDI USB Serial Device converter detected [ 2434.673802][T19803] ftdi_sio ttyUSB1: unknown device type: 0x6e3 [ 2434.695614][T19803] usb 1-1: USB disconnect, device number 69 [ 2434.720425][T19803] ftdi_sio 1-1:5.78: device disconnected [ 2434.737136][T19803] ftdi_sio 1-1:5.207: device disconnected [ 2434.947109][T17050] netlink: 232 bytes leftover after parsing attributes in process `syz.4.12763'. [ 2435.323425][T17061] netlink: 'syz.1.12768': attribute type 4 has an invalid length. [ 2435.405971][T17059] vlan2: entered promiscuous mode [ 2435.405991][T17059] bond0: entered promiscuous mode [ 2435.406003][T17059] bond_slave_0: entered promiscuous mode [ 2435.414758][T17059] bond_slave_1: entered promiscuous mode [ 2436.257029][T17082] FAULT_INJECTION: forcing a failure. [ 2436.257029][T17082] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2436.257069][T17082] CPU: 1 UID: 0 PID: 17082 Comm: syz.1.12773 Tainted: G L syzkaller #0 PREEMPT(full) [ 2436.257105][T17082] Tainted: [L]=SOFTLOCKUP [ 2436.257115][T17082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2436.257129][T17082] Call Trace: [ 2436.257140][T17082] [ 2436.257150][T17082] dump_stack_lvl+0xe8/0x150 [ 2436.257189][T17082] should_fail_ex+0x410/0x560 [ 2436.257226][T17082] prepare_alloc_pages+0x223/0x600 [ 2436.257252][T17082] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 2436.257275][T17082] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2436.257309][T17082] __alloc_pages_noprof+0x10/0x100 [ 2436.257331][T17082] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 2436.257356][T17082] ? copy_splice_read+0x16f/0xaa0 [ 2436.257372][T17082] ? copy_splice_read+0x16f/0xaa0 [ 2436.257392][T17082] copy_splice_read+0x19f/0xaa0 [ 2436.257414][T17082] ? __pfx_aa_file_perm+0x10/0x10 [ 2436.257433][T17082] ? __pfx_copy_splice_read+0x10/0x10 [ 2436.257449][T17082] ? __pfx___mutex_lock+0x10/0x10 [ 2436.257474][T17082] ? get_pid_task+0x20/0x1f0 [ 2436.257495][T17082] ? sock_splice_read+0xca/0x100 [ 2436.257519][T17082] ? __pfx_sock_splice_read+0x10/0x10 [ 2436.257538][T17082] splice_file_to_pipe+0x444/0x6b0 [ 2436.257564][T17082] do_splice+0x11c2/0x1970 [ 2436.257584][T17082] ? lock_acquire+0x115/0x350 [ 2436.257615][T17082] ? __pfx_do_splice+0x10/0x10 [ 2436.257639][T17082] __se_sys_splice+0x353/0x490 [ 2436.257683][T17082] ? __pfx___se_sys_splice+0x10/0x10 [ 2436.257712][T17082] ? __x64_sys_splice+0x21/0xf0 [ 2436.257740][T17082] do_syscall_64+0x166/0x520 [ 2436.257766][T17082] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2436.257790][T17082] ? clear_bhb_loop+0x70/0xc0 [ 2436.257818][T17082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2436.257847][T17082] RIP: 0033:0x7fe52ed9e559 [ 2436.257869][T17082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2436.257888][T17082] RSP: 002b:00007fe52fb92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2436.257913][T17082] RAX: ffffffffffffffda RBX: 00007fe52f025fa0 RCX: 00007fe52ed9e559 [ 2436.257930][T17082] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000008 [ 2436.257944][T17082] RBP: 00007fe52fb92090 R08: 000000000000ffff R09: 0000000000000000 [ 2436.257958][T17082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2436.257972][T17082] R13: 00007fe52f026038 R14: 00007fe52f025fa0 R15: 00007fe52f14fa48 [ 2436.258009][T17082] [ 2436.937766][T17089] netlink: 'syz.1.12775': attribute type 1 has an invalid length. [ 2437.732853][ T32] kauditd_printk_skb: 4 callbacks suppressed [ 2437.732874][ T32] audit: type=1326 audit(1792173964.736:12708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17099 comm="syz.0.12778" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f826ad9e559 code=0x7ffc0000 [ 2437.733188][ T32] audit: type=1326 audit(1792173964.736:12709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17099 comm="syz.0.12778" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f826ad9e559 code=0x7ffc0000 [ 2437.735338][ T32] audit: type=1326 audit(1792173964.736:12710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17099 comm="syz.0.12778" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f826ad9e559 code=0x7ffc0000 [ 2437.735828][ T32] audit: type=1326 audit(1792173964.736:12711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17099 comm="syz.0.12778" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f826ad9e559 code=0x7ffc0000 [ 2437.737198][ T32] audit: type=1326 audit(1792173964.736:12712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17099 comm="syz.0.12778" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f826ad9e559 code=0x7ffc0000 [ 2437.737326][ T32] audit: type=1326 audit(1792173964.736:12713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17099 comm="syz.0.12778" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f826ad9e559 code=0x7ffc0000 [ 2437.737510][ T32] audit: type=1326 audit(1792173964.736:12714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17099 comm="syz.0.12778" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f826ad9e559 code=0x7ffc0000 [ 2437.807202][ T32] audit: type=1326 audit(1792173964.746:12715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17099 comm="syz.0.12778" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f826ad9e559 code=0x7ffc0000 [ 2437.807341][ T32] audit: type=1326 audit(1792173964.746:12716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17099 comm="syz.0.12778" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f826ad9e559 code=0x7ffc0000 [ 2437.807460][ T32] audit: type=1326 audit(1792173964.746:12717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17099 comm="syz.0.12778" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f826ad9e559 code=0x7ffc0000 [ 2438.436642][T17104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12779'. [ 2440.638453][T32573] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 2440.798719][T32573] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 2440.800281][T32573] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2440.805509][T32573] usb 4-1: config 0 descriptor?? [ 2440.852755][T17127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2440.876898][T17127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2441.100190][T32573] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 2441.121452][T17120] bond5: entered allmulticast mode [ 2441.137918][T10927] usb 2-1: new full-speed USB device number 122 using dummy_hcd [ 2441.270027][T10927] usb 2-1: device descriptor read/64, error -71 [ 2441.370246][T32573] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 2441.370280][T32573] [drm] Initialized udl on minor 1 [ 2441.434632][T17135] netlink: 'syz.0.12788': attribute type 1 has an invalid length. [ 2441.517806][T10927] usb 2-1: new full-speed USB device number 123 using dummy_hcd [ 2441.521420][T17135] bond6: entered promiscuous mode [ 2441.522429][T17135] 8021q: adding VLAN 0 to HW filter on device bond6 [ 2441.648561][T10927] usb 2-1: device descriptor read/64, error -71 [ 2441.696500][T17135] bond6: (slave bridge4): making interface the new active one [ 2441.696527][T17135] bridge4: entered promiscuous mode [ 2441.712473][T17135] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 2441.760309][T10927] usb usb2-port1: attempt power cycle [ 2441.764812][T17138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2441.765392][T17138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2441.902587][T17138] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12785'. [ 2442.064621][T17140] FAULT_INJECTION: forcing a failure. [ 2442.064621][T17140] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2442.064693][T17140] CPU: 1 UID: 0 PID: 17140 Comm: syz.0.12789 Tainted: G L syzkaller #0 PREEMPT(full) [ 2442.064724][T17140] Tainted: [L]=SOFTLOCKUP [ 2442.064733][T17140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2442.064748][T17140] Call Trace: [ 2442.064757][T17140] [ 2442.064768][T17140] dump_stack_lvl+0xe8/0x150 [ 2442.064812][T17140] should_fail_ex+0x410/0x560 [ 2442.064850][T17140] _copy_to_user+0x31/0xb0 [ 2442.064881][T17140] copy_siginfo_to_user+0x22/0xc0 [ 2442.064916][T17140] x64_setup_rt_frame+0x764/0xc50 [ 2442.064974][T17140] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 2442.065021][T17140] arch_do_signal_or_restart+0x456/0x860 [ 2442.065059][T17140] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2442.065114][T17140] exit_to_user_mode_loop+0x10e/0x770 [ 2442.065142][T17140] ? rcu_is_watching+0x16/0xb0 [ 2442.065177][T17140] do_syscall_64+0x328/0x520 [ 2442.065204][T17140] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2442.065229][T17140] ? clear_bhb_loop+0x70/0xc0 [ 2442.065257][T17140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2442.065280][T17140] RIP: 0033:0x7f826ad9e557 [ 2442.065302][T17140] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 2442.065321][T17140] RSP: 002b:00007f826bc88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2442.065346][T17140] RAX: 0000000000000113 RBX: 00007f826b025fa0 RCX: 00007f826ad9e559 [ 2442.065363][T17140] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000008 [ 2442.065378][T17140] RBP: 00007f826bc88090 R08: 000000000000ffff R09: 0000000000000000 [ 2442.065393][T17140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2442.065407][T17140] R13: 00007f826b026038 R14: 00007f826b025fa0 R15: 00007f826b14fa48 [ 2442.065442][T17140] [ 2442.101685][T10927] usb 2-1: new full-speed USB device number 124 using dummy_hcd [ 2442.162818][T10927] usb 2-1: device descriptor read/8, error -71 [ 2442.418218][T10927] usb 2-1: new full-speed USB device number 125 using dummy_hcd [ 2442.440003][T10927] usb 2-1: device descriptor read/8, error -71 [ 2442.552245][T10927] usb usb2-port1: unable to enumerate USB device [ 2442.987810][ T2272] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 2443.147971][ T2272] usb 1-1: Using ep0 maxpacket: 8 [ 2443.148736][ T2272] usb 1-1: New USB device found, idVendor=1b3d, idProduct=013a, bcdDevice= 6.e3 [ 2443.150649][ T2272] usb 1-1: config 5 has an invalid interface number: 78 but max is 1 [ 2443.150669][ T2272] usb 1-1: config 5 has an invalid interface number: 207 but max is 1 [ 2443.150683][ T2272] usb 1-1: config 5 has no interface number 0 [ 2443.150717][ T2272] usb 1-1: config 5 has no interface number 1 [ 2443.150751][ T2272] usb 1-1: config 5 interface 78 altsetting 128 endpoint 0xC has an invalid bInterval 128, changing to 11 [ 2443.150778][ T2272] usb 1-1: config 5 interface 207 altsetting 217 has a duplicate endpoint with address 0xC, skipping [ 2443.150795][ T2272] usb 1-1: config 5 interface 78 has no altsetting 0 [ 2443.150810][ T2272] usb 1-1: config 5 interface 207 has no altsetting 0 [ 2443.152974][ T2272] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2443.152998][ T2272] usb 1-1: Product: syz [ 2443.153009][ T2272] usb 1-1: Manufacturer: syz [ 2443.153020][ T2272] usb 1-1: SerialNumber: syz [ 2443.156006][ T2272] usb 1-1: Interface #78 referenced by multiple IADs [ 2443.637472][T17154] netlink: 40 bytes leftover after parsing attributes in process `syz.7.12794'. [ 2443.653004][T17154] netlink: 12 bytes leftover after parsing attributes in process `syz.7.12794'. [ 2443.981544][T17160] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12797'. [ 2444.059444][T17162] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2444.748179][ T2295] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 2444.898276][ T2295] usb 2-1: Using ep0 maxpacket: 16 [ 2444.899014][ T2295] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 2444.900349][ T2295] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 2444.900378][ T2295] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2444.900401][ T2295] usb 2-1: config 0 has no interface number 0 [ 2444.900442][ T2295] usb 2-1: config 0 interface 34 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2444.902940][ T2295] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2444.902968][ T2295] usb 2-1: Product: syz [ 2444.902985][ T2295] usb 2-1: Manufacturer: syz [ 2444.903003][ T2295] usb 2-1: SerialNumber: syz [ 2444.906485][ T2295] usb 2-1: config 0 descriptor?? [ 2444.967584][ T2295] asix 2-1:0.34: probe with driver asix failed with error -22 [ 2445.730733][ T2272] ftdi_sio 1-1:5.78: FTDI USB Serial Device converter detected [ 2445.732201][ T2272] ftdi_sio ttyUSB0: unknown device type: 0x6e3 [ 2445.767224][ T2272] hub 1-1:5.207: Invalid hub with more than one config or interface [ 2445.767256][ T2272] hub 1-1:5.207: probe with driver hub failed with error -22 [ 2445.788604][ T2272] ftdi_sio 1-1:5.207: FTDI USB Serial Device converter detected [ 2445.789794][ T2272] ftdi_sio ttyUSB1: unknown device type: 0x6e3 [ 2445.815726][ T2272] usb 1-1: USB disconnect, device number 70 [ 2445.845249][ T2272] ftdi_sio 1-1:5.78: device disconnected [ 2445.860655][ T2272] ftdi_sio 1-1:5.207: device disconnected [ 2445.959781][T17190] FAULT_INJECTION: forcing a failure. [ 2445.959781][T17190] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2445.959823][T17190] CPU: 0 UID: 0 PID: 17190 Comm: syz.0.12802 Tainted: G L syzkaller #0 PREEMPT(full) [ 2445.959855][T17190] Tainted: [L]=SOFTLOCKUP [ 2445.959865][T17190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2445.959880][T17190] Call Trace: [ 2445.959893][T17190] [ 2445.959904][T17190] dump_stack_lvl+0xe8/0x150 [ 2445.959945][T17190] should_fail_ex+0x410/0x560 [ 2445.959985][T17190] _copy_from_user+0x2d/0xb0 [ 2445.960022][T17190] ___sys_recvmsg+0x173/0x5a0 [ 2445.960056][T17190] ? __pfx____sys_recvmsg+0x10/0x10 [ 2445.960124][T17190] do_recvmmsg+0x31a/0x7f0 [ 2445.960160][T17190] ? __pfx_do_recvmmsg+0x10/0x10 [ 2445.960201][T17190] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2445.960228][T17190] ? __fget_files+0x3a2/0x420 [ 2445.960257][T17190] __x64_sys_recvmmsg+0x198/0x250 [ 2445.960281][T17190] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 2445.960311][T17190] do_syscall_64+0x166/0x520 [ 2445.960331][T17190] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2445.960351][T17190] ? clear_bhb_loop+0x70/0xc0 [ 2445.960377][T17190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2445.960397][T17190] RIP: 0033:0x7f826ad9e559 [ 2445.960414][T17190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2445.960430][T17190] RSP: 002b:00007f826bc46028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2445.960450][T17190] RAX: ffffffffffffffda RBX: 00007f826b026180 RCX: 00007f826ad9e559 [ 2445.960464][T17190] RDX: 040000000000049e RSI: 0000200000001080 RDI: 0000000000000006 [ 2445.960476][T17190] RBP: 00007f826bc46090 R08: 0000000000000000 R09: 0000000000000000 [ 2445.960488][T17190] R10: 00001000000000fe R11: 0000000000000246 R12: 0000000000000002 [ 2445.960500][T17190] R13: 00007f826b026218 R14: 00007f826b026180 R15: 00007f826b14fa48 [ 2445.960533][T17190] [ 2446.327162][T17194] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12804'. [ 2446.438204][T32573] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 2446.465187][T17196] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12804'. [ 2446.493821][T32573] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 2446.507631][T32573] usb 4-1: USB disconnect, device number 115 [ 2447.093316][T17208] netlink: 244 bytes leftover after parsing attributes in process `syz.7.12808'. [ 2447.094281][T17208] netlink: 80 bytes leftover after parsing attributes in process `syz.7.12808'. [ 2447.106211][T17212] netlink: 'syz.3.12807': attribute type 1 has an invalid length. [ 2447.795439][T17172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2447.811613][T17172] 8021q: adding VLAN 0 to HW filter on device team0 [ 2447.825938][T17172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2447.902425][T17172] veth1_vlan: left promiscuous mode [ 2447.905852][T17172] vlan0: left promiscuous mode [ 2447.926552][T17172] veth1_vlan: entered promiscuous mode [ 2447.940150][T17172] veth1_macvtap: left promiscuous mode [ 2447.941065][T17172] veth0_macvtap: left promiscuous mode [ 2447.942613][T17172] veth0_macvtap: entered promiscuous mode [ 2447.944538][T17172] veth1_macvtap: entered promiscuous mode [ 2447.987353][T17172] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2448.000484][T17172] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2448.002901][T17172] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2448.004826][T17172] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2448.032402][T17172] bond1: left promiscuous mode [ 2448.032722][T17172] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2448.037024][T17172] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2448.040628][T17172] bond3: left promiscuous mode [ 2448.040693][T17172] bridge1: left promiscuous mode [ 2448.051049][T19803] usb 1-1: new full-speed USB device number 71 using dummy_hcd [ 2448.070325][T17172] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2448.084505][T17172] bond4: left promiscuous mode [ 2448.084524][T17172] bridge2: left promiscuous mode [ 2448.085651][T17172] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2448.099289][T17172] bond5: left promiscuous mode [ 2448.099312][T17172] bridge3: left promiscuous mode [ 2448.114975][T17172] 8021q: adding VLAN 0 to HW filter on device bond5 [ 2448.127542][T17172] 8021q: adding VLAN 0 to HW filter on device bond6 [ 2448.140662][T17172] bond7: left promiscuous mode [ 2448.140681][T17172] bridge4: left promiscuous mode [ 2448.142648][T17172] 8021q: adding VLAN 0 to HW filter on device bond7 [ 2448.152361][T17172] 8021q: adding VLAN 0 to HW filter on device bond8 [ 2448.161433][T17172] bond9: left promiscuous mode [ 2448.161456][T17172] bridge5: left promiscuous mode [ 2448.173825][T17172] 8021q: adding VLAN 0 to HW filter on device bond9 [ 2448.205841][T17172] bond10: left promiscuous mode [ 2448.205859][T17172] bridge6: left promiscuous mode [ 2448.211697][T17172] 8021q: adding VLAN 0 to HW filter on device bond10 [ 2448.233164][T17172] bond11: left promiscuous mode [ 2448.233182][T17172] bridge7: left promiscuous mode [ 2448.234879][T19803] usb 1-1: not running at top speed; connect to a high speed hub [ 2448.234917][T19803] usb 1-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 0.00 [ 2448.236109][T17172] 8021q: adding VLAN 0 to HW filter on device bond11 [ 2448.237338][T19803] usb 1-1: config index 0 descriptor too short (expected 43, got 25) [ 2448.237358][T19803] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2448.299871][T19803] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 2448.299900][T19803] usb 1-1: Product: syz [ 2448.299917][T19803] usb 1-1: Manufacturer: syz [ 2448.301482][T17172] ip6gre1: left promiscuous mode [ 2448.332325][T17178] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2448.346587][T17172] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 2448.388921][T17183] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2448.390299][T17172] batadv_slave_1: entered promiscuous mode [ 2448.390321][T17172] batadv_slave_1: entered allmulticast mode [ 2448.390644][T17172] macsec1: left promiscuous mode [ 2448.397214][T17172] bond12: left promiscuous mode [ 2448.397230][T17172] bridge8: left promiscuous mode [ 2448.437346][T17172] 8021q: adding VLAN 0 to HW filter on device bond12 [ 2448.473966][ T5711] usb 2-1: USB disconnect, device number 126 [ 2448.542131][T17223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12810'. [ 2448.542156][T17223] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12810'. [ 2448.602800][T17219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2448.603406][T17219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2448.682813][T17194] ovs_dp0: entered promiscuous mode [ 2448.683499][T17196] openvswitch: ovs_dp0: Dropping previously announced user features [ 2448.702140][T17212] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 2448.706178][T19803] msi2500 1-1:1.0: Registered as swradio24 [ 2448.706195][T19803] msi2500 1-1:1.0: SDR API is still slightly experimental and functionality changes may follow [ 2448.880686][ T5711] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 2448.982355][T10662] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2448.985561][T10662] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2449.043591][ T5711] usb 2-1: New USB device found, idVendor=174c, idProduct=56aa, bcdDevice= 1.00 [ 2449.045359][ T5711] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2449.045488][ T5711] usb 2-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 2449.084016][ T5711] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2449.084046][ T5711] usb 2-1: Product: syz [ 2449.084062][ T5711] usb 2-1: Manufacturer: syz [ 2449.084077][ T5711] usb 2-1: SerialNumber: syz [ 2449.108815][T17183] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2449.139873][ T5711] usb-storage 2-1:1.0: USB Mass Storage device detected [ 2449.181503][ T5711] scsi host1: usb-storage 2-1:1.0 [ 2449.319346][ T2295] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2449.343806][ T5711] usb 2-1: USB disconnect, device number 127 [ 2449.627831][ T2295] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 2449.778078][ T2295] usb 4-1: Using ep0 maxpacket: 8 [ 2449.779628][ T2295] usb 4-1: New USB device found, idVendor=1b3d, idProduct=013a, bcdDevice= 6.e3 [ 2449.781539][ T2295] usb 4-1: config 5 has an invalid interface number: 78 but max is 1 [ 2449.781567][ T2295] usb 4-1: config 5 has an invalid interface number: 207 but max is 1 [ 2449.781589][ T2295] usb 4-1: config 5 has no interface number 0 [ 2449.781607][ T2295] usb 4-1: config 5 has no interface number 1 [ 2449.781659][ T2295] usb 4-1: config 5 interface 78 altsetting 128 endpoint 0xC has an invalid bInterval 128, changing to 11 [ 2449.781708][ T2295] usb 4-1: config 5 interface 207 altsetting 217 has a duplicate endpoint with address 0xC, skipping [ 2449.781734][ T2295] usb 4-1: config 5 interface 78 has no altsetting 0 [ 2449.781754][ T2295] usb 4-1: config 5 interface 207 has no altsetting 0 [ 2449.785552][ T2295] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2449.785580][ T2295] usb 4-1: Product: syz [ 2449.785592][ T2295] usb 4-1: Manufacturer: syz [ 2449.785603][ T2295] usb 4-1: SerialNumber: syz [ 2449.799270][ T2295] usb 4-1: Interface #78 referenced by multiple IADs [ 2449.925492][ T32] kauditd_printk_skb: 10 callbacks suppressed [ 2449.925538][ T32] audit: type=1326 audit(1792173976.926:12728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17239 comm="syz.4.12814" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1a699e559 code=0x7ffc0000 [ 2449.926044][ T32] audit: type=1326 audit(1792173976.926:12729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17239 comm="syz.4.12814" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1a699e559 code=0x7ffc0000 [ 2449.987278][ T32] audit: type=1326 audit(1792173976.926:12730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17239 comm="syz.4.12814" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fa1a699e559 code=0x7ffc0000 [ 2450.035122][ T32] audit: type=1326 audit(1792173977.036:12731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17239 comm="syz.4.12814" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1a699e559 code=0x7ffc0000 [ 2450.067357][ T32] audit: type=1326 audit(1792173977.066:12732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17239 comm="syz.4.12814" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1a699e559 code=0x7ffc0000 [ 2450.105466][ T32] audit: type=1326 audit(1792173977.106:12733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17239 comm="syz.4.12814" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7fa1a699e559 code=0x7ffc0000 [ 2450.317146][ T32] audit: type=1326 audit(1792173977.316:12734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17239 comm="syz.4.12814" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1a699e559 code=0x7ffc0000 [ 2450.345240][ T32] audit: type=1326 audit(1792173977.346:12735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17239 comm="syz.4.12814" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa1a699e559 code=0x7ffc0000 [ 2450.373619][ T32] audit: type=1326 audit(1792173977.346:12736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17239 comm="syz.4.12814" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1a699e559 code=0x7ffc0000 [ 2450.377230][ T32] audit: type=1326 audit(1792173977.376:12737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17239 comm="syz.4.12814" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa1a699e559 code=0x7ffc0000 [ 2451.403734][T32573] usb 1-1: USB disconnect, device number 71 [ 2451.831415][T17260] fuse: Bad value for 'fd' [ 2451.856341][T17264] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12822'. [ 2452.228125][T32573] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 2452.265331][ T2295] ftdi_sio 4-1:5.78: FTDI USB Serial Device converter detected [ 2452.281590][ T2295] ftdi_sio ttyUSB0: unknown device type: 0x6e3 [ 2452.299296][ T2295] hub 4-1:5.207: Invalid hub with more than one config or interface [ 2452.299328][ T2295] hub 4-1:5.207: probe with driver hub failed with error -22 [ 2452.301415][ T2295] ftdi_sio 4-1:5.207: FTDI USB Serial Device converter detected [ 2452.304342][ T2295] ftdi_sio ttyUSB1: unknown device type: 0x6e3 [ 2452.341174][ T2295] usb 4-1: USB disconnect, device number 116 [ 2452.357844][T32573] usb 2-1: device descriptor read/64, error -71 [ 2452.360186][ T2295] ftdi_sio 4-1:5.78: device disconnected [ 2452.365805][ T2295] ftdi_sio 4-1:5.207: device disconnected [ 2452.597967][T32573] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 2452.668226][T10927] usb 1-1: new full-speed USB device number 72 using dummy_hcd [ 2452.721759][T17286] nvme_fabrics: unknown parameter or missing value 'ctrl_loss_tmo=' in ctrl creation request [ 2452.747770][T32573] usb 2-1: device descriptor read/64, error -71 [ 2452.822285][T10927] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2452.823230][T10927] usb 1-1: not running at top speed; connect to a high speed hub [ 2452.823280][T10927] usb 1-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice=e0.47 [ 2452.824588][T10927] usb 1-1: config 133 has an invalid interface number: 109 but max is 0 [ 2452.824608][T10927] usb 1-1: config 133 has no interface number 0 [ 2452.824638][T10927] usb 1-1: config 133 interface 109 altsetting 3 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 2452.824659][T10927] usb 1-1: config 133 interface 109 has no altsetting 0 [ 2452.827509][T10927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2452.827538][T10927] usb 1-1: Product: syz [ 2452.827549][T10927] usb 1-1: Manufacturer: syz [ 2452.827561][T10927] usb 1-1: SerialNumber: syz [ 2452.866343][T32573] usb usb2-port1: attempt power cycle [ 2453.158407][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2453.188634][T10927] kaweth 1-1:133.109: couldn't find required endpoints [ 2453.207313][T10927] usb 1-1: USB disconnect, device number 72 [ 2453.277890][T32573] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 2453.298812][T32573] usb 2-1: device descriptor read/8, error -71 [ 2453.548020][T32573] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 2453.569131][T32573] usb 2-1: device descriptor read/8, error -71 [ 2453.678551][T32573] usb usb2-port1: unable to enumerate USB device [ 2454.099288][T17303] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12837'. [ 2454.327840][T17178] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 2454.328520][T17307] syzkaller0: entered promiscuous mode [ 2454.328535][T17307] syzkaller0: entered allmulticast mode [ 2454.383915][T17307] tipc: Enabled bearer , priority 0 [ 2454.396847][T17306] tipc: Resetting bearer [ 2454.469454][T17306] tipc: Disabling bearer [ 2454.485777][T17178] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 2454.501923][T17178] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 2454.501948][T17178] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2454.501965][T17178] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 2454.506500][T17178] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2454.506528][T17178] usb 1-1: Product: syz [ 2454.507615][T17178] usb 1-1: Manufacturer: syz [ 2454.540146][T17178] usb 1-1: SerialNumber: syz [ 2454.568728][T17178] usb 1-1: config 0 descriptor?? [ 2454.780252][T17178] adutux 1-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 2455.069609][T17178] usb 1-1: USB disconnect, device number 73 [ 2455.580163][T17335] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12848'. [ 2456.013412][T17339] xt_CT: No such helper "pptp" [ 2456.567466][T17361] use of bytesused == 0 is deprecated and will be removed in the future, [ 2456.567484][T17361] use the actual size instead. [ 2457.795922][T17374] syzkaller0: entered promiscuous mode [ 2457.795940][T17374] syzkaller0: entered allmulticast mode [ 2458.044145][T17374] tipc: Enabled bearer , priority 0 [ 2458.047579][T17373] tipc: Resetting bearer [ 2458.185389][T17373] tipc: Disabling bearer [ 2459.197175][T17399] netlink: 'syz.1.12867': attribute type 1 has an invalid length. [ 2459.251868][T17396] netlink: 'syz.3.12866': attribute type 10 has an invalid length. [ 2459.251973][T17397] netlink: 'syz.3.12866': attribute type 10 has an invalid length. [ 2459.325553][T17400] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12866'. [ 2459.338594][T17402] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12866'. [ 2459.382839][T17404] bond13: (slave geneve2): making interface the new active one [ 2459.405711][T17404] bond13: (slave geneve2): Enslaving as an active interface with an up link [ 2459.408746][T10665] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 2459.473962][T17396] bridge0: port 2(bridge_slave_1) entered disabled state [ 2459.474281][T17396] bridge0: port 1(bridge_slave_0) entered disabled state [ 2459.533742][T17396] bridge0: port 2(bridge_slave_1) entered blocking state [ 2459.533837][T17396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2459.534167][T17396] bridge0: port 1(bridge_slave_0) entered blocking state [ 2459.534256][T17396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2459.570840][T17396] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 2459.571099][T17397] bridge0: port 2(bridge_slave_1) entered disabled state [ 2459.571293][T17397] bridge0: port 1(bridge_slave_0) entered disabled state [ 2459.573454][T17400] bridge_slave_1: left allmulticast mode [ 2459.573478][T17400] bridge_slave_1: left promiscuous mode [ 2459.573715][T17400] bridge0: port 2(bridge_slave_1) entered disabled state [ 2459.641803][T17400] bridge_slave_0: left allmulticast mode [ 2459.641826][T17400] bridge_slave_0: left promiscuous mode [ 2459.642027][T17400] bridge0: port 1(bridge_slave_0) entered disabled state [ 2459.693305][T17400] bond0: (slave bridge0): Releasing backup interface [ 2459.748703][T12558] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 2459.750455][T12558] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 2459.750489][T12558] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 2460.137535][T17415] netlink: 'syz.1.12871': attribute type 4 has an invalid length. [ 2460.621746][T17421] syzkaller0: entered promiscuous mode [ 2460.621764][T17421] syzkaller0: entered allmulticast mode [ 2460.672210][T17421] tipc: Enabled bearer , priority 0 [ 2460.697440][T17420] tipc: Resetting bearer [ 2460.916634][T17420] tipc: Disabling bearer [ 2461.244040][T17429] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.12877' sets config #1 [ 2461.245032][T17429] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.12877' sets config #1 [ 2461.353983][T17434] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12876'. [ 2461.510689][T17437] xt_CT: No such helper "pptp" [ 2461.617895][T17178] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 2461.768771][T17178] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2461.772091][T17178] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2461.772122][T17178] usb 4-1: Product: syz [ 2461.772139][T17178] usb 4-1: Manufacturer: syz [ 2461.772156][T17178] usb 4-1: SerialNumber: syz [ 2461.800343][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2461.936367][T17446] netlink: 'syz.1.12883': attribute type 4 has an invalid length. [ 2462.158535][ T2295] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 2462.312347][ T2295] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2462.315346][ T2295] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 2462.315401][ T2295] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2462.315426][ T2295] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2462.358438][ T2295] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2462.358469][ T2295] usb 1-1: Product: syz [ 2462.358481][ T2295] usb 1-1: Manufacturer: syz [ 2462.358492][ T2295] usb 1-1: SerialNumber: syz [ 2462.365036][ T2295] usb 1-1: config 0 descriptor?? [ 2462.403060][ T2295] hub 1-1:0.0: bad descriptor, ignoring hub [ 2462.403096][ T2295] hub 1-1:0.0: probe with driver hub failed with error -5 [ 2462.430189][ T2295] usb 1-1: selecting invalid altsetting 0 [ 2463.075894][T17458] x_tables: duplicate entry at hook 2 [ 2463.345782][ T32] kauditd_printk_skb: 15 callbacks suppressed [ 2463.345808][ T32] audit: type=1800 audit(1792173990.346:12753): pid=17463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.12888" name="SYSV00000000" dev="tmpfs" ino=4 res=0 errno=0 [ 2463.734409][T17444] usb 1-1: reset high-speed USB device number 74 using dummy_hcd [ 2463.801573][T17444] usb 1-1: device reset changed ep0 maxpacket size! [ 2463.874243][ T5711] usb 1-1: USB disconnect, device number 74 [ 2463.996841][ C1] vcan0: j1939_tp_rxtimer: 0xffff888027576400: rx timeout, send abort [ 2463.997027][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888027576400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 2464.117838][ T5711] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 2464.209863][T17435] atomic_op ffff8880552df1e0 conn xmit_atomic 0000000000000000 [ 2464.288176][ T5711] usb 1-1: Using ep0 maxpacket: 32 [ 2464.289587][ T5711] usb 1-1: New USB device found, idVendor=0582, idProduct=009a, bcdDevice= 0.40 [ 2464.294408][ T5711] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 38, changing to 7 [ 2464.339794][ T5711] usb 1-1: string descriptor 0 read error: -22 [ 2464.342760][ T5711] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2464.384977][ T5711] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 2464.509806][T17178] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 2464.509857][T17178] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 2464.510697][T17178] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 2464.510770][T17178] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2464.567171][T17178] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2464.580199][T17178] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 2464.677947][ T5711] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 2464.749171][T17178] usb 4-1: USB disconnect, device number 117 [ 2464.776078][ T5649] udevd[5649]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2464.809805][ T5711] usb 1-1: USB disconnect, device number 75 [ 2465.475714][T17481] binder_alloc: 17479: binder_alloc_buf size -6877975147957664384 failed, no address space [ 2465.500928][T17481] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 2465.713835][T17480] xt_CT: No such helper "pptp" [ 2465.889060][T17490] netlink: 'syz.0.12894': attribute type 4 has an invalid length. [ 2466.589872][ T2295] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 2466.620828][T17509] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12902'. [ 2466.739096][ T2295] usb 1-1: Using ep0 maxpacket: 32 [ 2466.741022][ T2295] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 2466.742333][ T2295] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 2466.742358][ T2295] usb 1-1: config 0 has no interface number 0 [ 2466.742387][ T2295] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 2466.742403][ T2295] usb 1-1: config 0 interface 1 has no altsetting 0 [ 2466.800815][ T2295] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2466.800839][ T2295] usb 1-1: Product: syz [ 2466.800851][ T2295] usb 1-1: Manufacturer: syz [ 2466.800863][ T2295] usb 1-1: SerialNumber: syz [ 2466.833883][ T2295] usb 1-1: config 0 descriptor?? [ 2467.067430][ T2295] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 2467.069446][ T2295] cx231xx 1-1:0.1: Failed to read PCB config [ 2467.069906][ T2295] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -71 [ 2467.108361][ T2295] usb 1-1: USB disconnect, device number 76 [ 2467.287968][T10927] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 2467.441064][T10927] usb 4-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=fb.7c [ 2467.442572][T10927] usb 4-1: config 0 has an invalid interface number: 148 but max is 1 [ 2467.442593][T10927] usb 4-1: config 0 has an invalid interface number: 5 but max is 1 [ 2467.442607][T10927] usb 4-1: config 0 has no interface number 0 [ 2467.442620][T10927] usb 4-1: config 0 has no interface number 1 [ 2467.442656][T10927] usb 4-1: config 0 interface 5 altsetting 16 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 2467.442677][T10927] usb 4-1: config 0 interface 148 has no altsetting 0 [ 2467.442692][T10927] usb 4-1: config 0 interface 5 has no altsetting 0 [ 2467.444893][T10927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2467.444913][T10927] usb 4-1: Product: syz [ 2467.444924][T10927] usb 4-1: Manufacturer: syz [ 2467.444936][T10927] usb 4-1: SerialNumber: syz [ 2467.447311][T10927] usb 4-1: config 0 descriptor?? [ 2467.559778][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 2467.559823][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 2467.598201][ T2295] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 2467.749620][ T2295] usb 1-1: Using ep0 maxpacket: 32 [ 2467.751873][ T2295] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 2467.756643][ T2295] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 2467.756662][ T2295] usb 1-1: config 0 has no interface number 0 [ 2467.756713][ T2295] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 2467.756731][ T2295] usb 1-1: config 0 interface 1 has no altsetting 0 [ 2467.824083][ T2295] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2467.824122][ T2295] usb 1-1: Product: syz [ 2467.824133][ T2295] usb 1-1: Manufacturer: syz [ 2467.824145][ T2295] usb 1-1: SerialNumber: syz [ 2467.858743][ T2295] usb 1-1: config 0 descriptor?? [ 2467.872968][T10927] mos7840 4-1:0.148: required endpoints missing [ 2467.923821][T10927] mos7840 4-1:0.5: required endpoints missing [ 2467.975429][T10927] usb 4-1: USB disconnect, device number 118 [ 2468.024903][T17520] sit0: entered promiscuous mode [ 2468.025304][T17520] netlink: 'syz.7.12904': attribute type 1 has an invalid length. [ 2468.025325][T17520] netlink: 1 bytes leftover after parsing attributes in process `syz.7.12904'. [ 2468.164562][ T2295] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 2468.223310][ T2295] cx231xx 1-1:0.1: bad config in buspower!!!! [ 2468.223310][ T2295] config_info=40 [ 2468.223332][ T2295] cx231xx 1-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 2468.330536][ T2295] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 2468.331980][ T2295] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 2468.335227][ T2295] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 2468.385467][ T2295] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 2468.386052][ T2295] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 2468.386070][ T2295] cx231xx 1-1:0.1: Failed to set devmode to analog: error: -32 [ 2468.474015][ T2295] i2c i2c-2: Added multiplexed i2c bus 4 [ 2468.488851][ T2295] i2c i2c-2: Added multiplexed i2c bus 5 [ 2468.491943][ T2295] cx231xx 1-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-32]! [ 2468.491963][ T2295] cx231xx 1-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-32]! [ 2468.683443][ T2295] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -32 [ 2469.055587][T19803] usb 1-1: USB disconnect, device number 77 [ 2469.242150][ T2295] usb 4-1: new low-speed USB device number 119 using dummy_hcd [ 2469.285323][T17532] netlink: 'syz.7.12908': attribute type 4 has an invalid length. [ 2469.389048][ T2295] usb 4-1: Invalid ep0 maxpacket: 32 [ 2469.518210][ T2295] usb 4-1: new low-speed USB device number 120 using dummy_hcd [ 2469.668013][ T2295] usb 4-1: Invalid ep0 maxpacket: 32 [ 2469.668350][ T2295] usb usb4-port1: attempt power cycle [ 2470.007889][ T2295] usb 4-1: new low-speed USB device number 121 using dummy_hcd [ 2470.031808][ T2295] usb 4-1: Invalid ep0 maxpacket: 32 [ 2470.158013][ T2295] usb 4-1: new low-speed USB device number 122 using dummy_hcd [ 2470.179067][ T2295] usb 4-1: Invalid ep0 maxpacket: 32 [ 2470.179559][ T2295] usb usb4-port1: unable to enumerate USB device [ 2470.402648][T29006] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2470.421065][T29006] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2470.429695][T29006] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2470.476012][T29006] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2470.485519][T29006] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2470.804035][T17547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12913'. [ 2471.336449][ T7007] bridge_slave_1: left allmulticast mode [ 2471.336473][ T7007] bridge_slave_1: left promiscuous mode [ 2471.336637][ T7007] bridge0: port 2(bridge_slave_1) entered disabled state [ 2471.362316][ T7007] bridge_slave_0: left allmulticast mode [ 2471.362336][ T7007] bridge_slave_0: left promiscuous mode [ 2471.364315][ T7007] bridge0: port 1(bridge_slave_0) entered disabled state [ 2471.580062][T17550] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12914'. [ 2472.038040][T17178] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 2472.192040][T17178] usb 1-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=fb.7c [ 2472.193737][T17178] usb 1-1: config 0 has an invalid interface number: 148 but max is 1 [ 2472.193767][T17178] usb 1-1: config 0 has an invalid interface number: 5 but max is 1 [ 2472.193789][T17178] usb 1-1: config 0 has no interface number 0 [ 2472.193806][T17178] usb 1-1: config 0 has no interface number 1 [ 2472.193859][T17178] usb 1-1: config 0 interface 5 altsetting 16 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 2472.193897][T17178] usb 1-1: config 0 interface 148 has no altsetting 0 [ 2472.193918][T17178] usb 1-1: config 0 interface 5 has no altsetting 0 [ 2472.197021][T17178] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2472.197049][T17178] usb 1-1: Product: syz [ 2472.197066][T17178] usb 1-1: Manufacturer: syz [ 2472.197083][T17178] usb 1-1: SerialNumber: syz [ 2472.295481][T17178] usb 1-1: config 0 descriptor?? [ 2472.302786][ T7007] bond3 (unregistering): (slave bridge1): Releasing backup interface [ 2472.302816][ T7007] bridge1 (unregistering): left promiscuous mode [ 2472.354188][ T7007] bond4 (unregistering): (slave bridge2): Releasing backup interface [ 2472.354222][ T7007] bridge2 (unregistering): left promiscuous mode [ 2472.411251][ T7007] bond5 (unregistering): (slave bridge3): Releasing backup interface [ 2472.411281][ T7007] bridge3 (unregistering): left promiscuous mode [ 2472.491335][ T7007] bond6 (unregistering): (slave bridge4): Releasing backup interface [ 2472.491375][ T7007] bridge4 (unregistering): left promiscuous mode [ 2472.518616][T29006] Bluetooth: hci3: command tx timeout [ 2472.580418][T17178] mos7840 1-1:0.148: required endpoints missing [ 2472.595768][ T7007] bond7 (unregistering): (slave bridge5): Releasing backup interface [ 2472.595798][ T7007] bridge5 (unregistering): left promiscuous mode [ 2472.629180][T17178] mos7840 1-1:0.5: required endpoints missing [ 2472.660912][T17178] usb 1-1: USB disconnect, device number 78 [ 2472.700422][ T7007] bond8 (unregistering): (slave bridge6): Releasing backup interface [ 2472.700445][ T7007] bridge6 (unregistering): left promiscuous mode [ 2472.739953][T17183] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 2472.794220][ T7007] bond10 (unregistering): (slave bridge8): Releasing backup interface [ 2472.794252][ T7007] bridge8 (unregistering): left promiscuous mode [ 2472.844366][ T7007] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2472.861732][ T7007] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2472.862434][ T7007] bond0 (unregistering): Released all slaves [ 2472.895452][ T7007] bond1 (unregistering): Released all slaves [ 2472.908688][T17183] usb 4-1: Using ep0 maxpacket: 16 [ 2472.909583][T17183] usb 4-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 2472.910934][T17183] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2472.910969][T17183] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2472.910990][T17183] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2472.911015][T17183] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2472.982533][T17183] usb 4-1: config 0 descriptor?? [ 2473.024183][ T7007] bond2 (unregistering): Released all slaves [ 2473.070158][ T7007] bond3 (unregistering): Released all slaves [ 2473.122111][ T7007] bond4 (unregistering): Released all slaves [ 2473.169964][ T7007] bond5 (unregistering): Released all slaves [ 2473.233099][ T7007] bond6 (unregistering): Released all slaves [ 2473.299420][ T7007] bond7 (unregistering): Released all slaves [ 2473.369696][ T7007] bond8 (unregistering): Released all slaves [ 2473.424968][ T7007] bond9 (unregistering): Released all slaves [ 2473.503838][ T7007] bond10 (unregistering): Released all slaves [ 2473.535920][ T7007] bond11 (unregistering): Released all slaves [ 2473.567559][T17183] input: HID 04f3:074d as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:04F3:074D.005A/input/input168 [ 2473.698918][T17183] elan 0003:04F3:074D.005A: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 04f3:074d] on usb-dummy_hcd.3-1/input0 [ 2474.213820][ T7007] tipc: Left network mode [ 2474.227764][ T2295] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 2474.408095][ T2295] usb 2-1: Using ep0 maxpacket: 16 [ 2474.411009][ T2295] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 2474.415710][ T2295] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 2474.415741][ T2295] usb 2-1: config 0 has no interface number 0 [ 2474.482184][ T2295] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2474.482223][ T2295] usb 2-1: Product: syz [ 2474.482267][ T2295] usb 2-1: Manufacturer: syz [ 2474.482286][ T2295] usb 2-1: SerialNumber: syz [ 2474.539820][ T2295] usb 2-1: config 0 descriptor?? [ 2474.558377][ T2295] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 2474.607972][T29006] Bluetooth: hci3: command tx timeout [ 2475.047833][T17178] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 2475.198814][T17178] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2475.212382][T17178] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2475.212465][T17178] usb 1-1: Product: syz [ 2475.212517][T17178] usb 1-1: Manufacturer: syz [ 2475.212575][T17178] usb 1-1: SerialNumber: syz [ 2475.431771][T17178] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 2475.431833][T17178] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 2475.431856][T17178] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2475.475458][T17178] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 2475.533899][T17178] usb 1-1: USB disconnect, device number 79 [ 2475.616734][T17544] bridge0: port 1(bridge_slave_0) entered blocking state [ 2475.616914][T17544] bridge0: port 1(bridge_slave_0) entered disabled state [ 2475.617089][T17544] bridge_slave_0: entered allmulticast mode [ 2475.685839][T17544] bridge_slave_0: entered promiscuous mode [ 2475.698784][T17544] bridge0: port 2(bridge_slave_1) entered blocking state [ 2475.698899][T17544] bridge0: port 2(bridge_slave_1) entered disabled state [ 2475.699050][T17544] bridge_slave_1: entered allmulticast mode [ 2475.704357][T17544] bridge_slave_1: entered promiscuous mode [ 2475.851110][T17544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2475.907577][T17544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2476.045024][T17544] team0: Port device team_slave_0 added [ 2476.064696][T17544] team0: Port device team_slave_1 added [ 2476.197930][ T2295] gspca_spca1528: reg_w err -71 [ 2476.198073][ T2295] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71 [ 2476.201240][ T2295] usb 2-1: USB disconnect, device number 6 [ 2476.460754][T17544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2476.460769][T17544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2476.460790][T17544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2476.701183][T29006] Bluetooth: hci3: command tx timeout [ 2477.227481][T17606] FAULT_INJECTION: forcing a failure. [ 2477.227481][T17606] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2477.227551][T17606] CPU: 0 UID: 0 PID: 17606 Comm: syz.1.12929 Tainted: G L syzkaller #0 PREEMPT(full) [ 2477.227577][T17606] Tainted: [L]=SOFTLOCKUP [ 2477.227584][T17606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2477.227595][T17606] Call Trace: [ 2477.227603][T17606] [ 2477.227611][T17606] dump_stack_lvl+0xe8/0x150 [ 2477.227650][T17606] should_fail_ex+0x410/0x560 [ 2477.227687][T17606] _copy_from_user+0x2d/0xb0 [ 2477.227722][T17606] ___sys_recvmsg+0x173/0x5a0 [ 2477.227754][T17606] ? __pfx____sys_recvmsg+0x10/0x10 [ 2477.227786][T17606] ? lock_acquire+0x115/0x350 [ 2477.227841][T17606] do_recvmmsg+0x31a/0x7f0 [ 2477.227877][T17606] ? __pfx_do_recvmmsg+0x10/0x10 [ 2477.227917][T17606] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2477.227946][T17606] ? __fget_files+0x3a2/0x420 [ 2477.227978][T17606] __x64_sys_recvmmsg+0x198/0x250 [ 2477.228008][T17606] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 2477.228048][T17606] do_syscall_64+0x166/0x520 [ 2477.228073][T17606] ? trace_irq_disable+0x3b/0x140 [ 2477.228100][T17606] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2477.228124][T17606] ? clear_bhb_loop+0x70/0xc0 [ 2477.228152][T17606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2477.228175][T17606] RIP: 0033:0x7fe52ed9e559 [ 2477.228197][T17606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2477.228216][T17606] RSP: 002b:00007fe52cfd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2477.228240][T17606] RAX: ffffffffffffffda RBX: 00007fe52f026180 RCX: 00007fe52ed9e559 [ 2477.228258][T17606] RDX: 040000000000049e RSI: 0000200000001080 RDI: 0000000000000006 [ 2477.228274][T17606] RBP: 00007fe52cfd5090 R08: 0000000000000000 R09: 0000000000000000 [ 2477.228289][T17606] R10: 00001000000000fe R11: 0000000000000246 R12: 0000000000000002 [ 2477.228304][T17606] R13: 00007fe52f026218 R14: 00007fe52f026180 R15: 00007fe52f14fa48 [ 2477.228334][T17606] [ 2478.225065][T17615] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12932'. [ 2478.277954][ T7007] hsr_slave_0: left promiscuous mode [ 2478.283319][ T7007] hsr_slave_1: left promiscuous mode [ 2478.284098][ T7007] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2478.284686][ T7007] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2478.334929][T17617] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12932'. [ 2478.448568][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2478.502731][T17620] fuse: Unknown parameter 'grou00000000000000000000' [ 2478.771945][T29006] Bluetooth: hci3: command tx timeout [ 2479.204403][ T7007] team0 (unregistering): Port device team_slave_1 removed [ 2479.243090][ T7007] team0 (unregistering): Port device team_slave_0 removed [ 2479.437384][T17629] netlink: 68 bytes leftover after parsing attributes in process `syz.1.12937'. [ 2479.611096][T17544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2479.611118][T17544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2479.611148][T17544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2479.746439][T17544] hsr_slave_0: entered promiscuous mode [ 2479.747636][T17544] hsr_slave_1: entered promiscuous mode [ 2481.162852][T17667] fuse: Unknown parameter 'grou00000000000000000000' [ 2481.984322][T17544] ================================================================== [ 2481.984340][T17544] BUG: KASAN: null-ptr-deref in netlink_has_listeners+0x3d/0x3f0 [ 2481.984376][T17544] Read of size 8 at addr 0000000000000578 by task syz-executor/17544 [ 2481.984393][T17544] [ 2481.984407][T17544] CPU: 1 UID: 0 PID: 17544 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 2481.984437][T17544] Tainted: [L]=SOFTLOCKUP [ 2481.984446][T17544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2481.984460][T17544] Call Trace: [ 2481.984469][T17544] [ 2481.984479][T17544] dump_stack_lvl+0xe8/0x150 [ 2481.984513][T17544] ? netlink_has_listeners+0x3d/0x3f0 [ 2481.984536][T17544] kasan_report+0x117/0x150 [ 2481.984573][T17544] ? netlink_has_listeners+0x3d/0x3f0 [ 2481.984603][T17544] kasan_check_range+0x264/0x2c0 [ 2481.984636][T17544] netlink_has_listeners+0x3d/0x3f0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2481.984662][T17544] devlink_port_notify+0x18c/0x520 [ 2481.984774][T17544] ? work_grab_pending+0x3d1/0x930 [ 2481.984807][T17544] ? __pfx_devlink_port_notify+0x10/0x10 [ 2481.984842][T17544] ? lockdep_hardirqs_on+0x7b/0x110 [ 2481.984868][T17544] ? enable_work+0x1fd/0x230 [ 2481.984892][T17544] devl_port_unregister+0x13e/0x2a0 [ 2481.984927][T17544] __nsim_dev_port_del+0x1ad/0x200 [ 2481.985015][T17544] nsim_dev_reload_destroy+0x288/0x490 [ 2481.985054][T17544] nsim_drv_remove+0x58/0x170 [ 2481.985089][T17544] ? __pfx_nsim_bus_remove+0x10/0x10 [ 2481.985149][T17544] device_release_driver_internal+0x48b/0x880 [ 2481.985218][T17544] bus_remove_device+0x444/0x560 [ 2481.985248][T17544] ? __pfx_bus_remove_device+0x10/0x10 [ 2481.985277][T17544] ? kernfs_remove_by_name_ns+0x101/0x140 [ 2481.985312][T17544] device_del+0x524/0x8f0 [ 2481.985367][T17544] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2481.985396][T17544] ? __pfx_device_del+0x10/0x10 [ 2481.985427][T17544] ? lock_acquire+0x115/0x350 [ 2481.985453][T17544] device_unregister+0x21/0xf0 [ 2481.985483][T17544] del_device_store+0x2b5/0x370 [ 2481.985515][T17544] ? __pfx_del_device_store+0x10/0x10 [ 2481.985544][T17544] ? sysfs_file_kobj+0x1e4/0x230 [ 2481.985566][T17544] ? sysfs_kf_write+0x166/0x260 [ 2481.985587][T17544] ? __pfx_sysfs_kf_write+0x10/0x10 [ 2481.985608][T17544] kernfs_fop_write_iter+0x3a4/0x540 [ 2481.985642][T17544] vfs_write+0x612/0xba0 [ 2481.985670][T17544] ? __pfx_vfs_write+0x10/0x10 [ 2481.985693][T17544] ? do_sys_openat2+0x14e/0x200 [ 2481.985724][T17544] ? kmem_cache_free+0x182/0x650 [ 2481.985760][T17544] ksys_write+0x150/0x270 [ 2481.985785][T17544] ? __pfx_ksys_write+0x10/0x10 [ 2481.985814][T17544] do_syscall_64+0x166/0x520 [ 2481.985839][T17544] ? trace_irq_disable+0x3b/0x140 [ 2481.985863][T17544] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2481.985886][T17544] ? clear_bhb_loop+0x70/0xc0 [ 2481.985910][T17544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2481.985933][T17544] RIP: 0033:0x7f5743b5ed8e [ 2481.985953][T17544] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2481.985985][T17544] RSP: 002b:00007f5743f4f1f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2481.986010][T17544] RAX: ffffffffffffffda RBX: 000055556c048500 RCX: 00007f5743b5ed8e [ 2481.986026][T17544] RDX: 0000000000000001 RSI: 00007f5743f4f280 RDI: 0000000000000005 [ 2481.986039][T17544] RBP: 00007f5743c36174 R08: 0000000000000000 R09: 0000000000000000 [ 2481.986053][T17544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2481.986067][T17544] R13: 00007f5743f4f280 R14: 00007f5743f4fac0 R15: 0000000000000003 [ 2481.986092][T17544] [ 2481.986101][T17544] ================================================================== [ 2482.121998][T17544] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 2482.359664][T17544] CPU: 1 UID: 0 PID: 17544 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 2482.370828][T17544] Tainted: [L]=SOFTLOCKUP [ 2482.375179][T17544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2482.385255][T17544] Call Trace: [ 2482.388566][T17544] [ 2482.391518][T17544] vpanic+0x56d/0xa60 [ 2482.395545][T17544] ? __pfx_vpanic+0x10/0x10 [ 2482.400094][T17544] panic+0xc5/0xd0 [ 2482.403948][T17544] ? __pfx_panic+0x10/0x10 [ 2482.408414][T17544] ? preempt_schedule_thunk+0x16/0x40 [ 2482.413844][T17544] ? netlink_has_listeners+0x3d/0x3f0 [ 2482.419271][T17544] ? preempt_schedule_thunk+0x16/0x40 [ 2482.424693][T17544] ? netlink_has_listeners+0x3d/0x3f0 [ 2482.430098][T17544] check_panic_on_warn+0x89/0xb0 [ 2482.435082][T17544] ? netlink_has_listeners+0x3d/0x3f0 [ 2482.440500][T17544] end_report+0x73/0x170 [ 2482.444802][T17544] ? netlink_has_listeners+0x3d/0x3f0 [ 2482.450243][T17544] kasan_report+0x128/0x150 [ 2482.454793][T17544] ? netlink_has_listeners+0x3d/0x3f0 [ 2482.460206][T17544] kasan_check_range+0x264/0x2c0 [ 2482.465192][T17544] netlink_has_listeners+0x3d/0x3f0 [ 2482.470459][T17544] devlink_port_notify+0x18c/0x520 [ 2482.475618][T17544] ? work_grab_pending+0x3d1/0x930 [ 2482.480773][T17544] ? __pfx_devlink_port_notify+0x10/0x10 [ 2482.486491][T17544] ? lockdep_hardirqs_on+0x7b/0x110 [ 2482.491748][T17544] ? enable_work+0x1fd/0x230 [ 2482.496378][T17544] devl_port_unregister+0x13e/0x2a0 [ 2482.501612][T17544] __nsim_dev_port_del+0x1ad/0x200 [ 2482.506762][T17544] nsim_dev_reload_destroy+0x288/0x490 [ 2482.512263][T17544] nsim_drv_remove+0x58/0x170 [ 2482.517069][T17544] ? __pfx_nsim_bus_remove+0x10/0x10 [ 2482.522390][T17544] device_release_driver_internal+0x48b/0x880 [ 2482.528529][T17544] bus_remove_device+0x444/0x560 [ 2482.533525][T17544] ? __pfx_bus_remove_device+0x10/0x10 [ 2482.539031][T17544] ? kernfs_remove_by_name_ns+0x101/0x140 [ 2482.544790][T17544] device_del+0x524/0x8f0 [ 2482.549188][T17544] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2482.555044][T17544] ? __pfx_device_del+0x10/0x10 [ 2482.559944][T17544] ? lock_acquire+0x115/0x350 [ 2482.564686][T17544] device_unregister+0x21/0xf0 [ 2482.569490][T17544] del_device_store+0x2b5/0x370 [ 2482.574594][T17544] ? __pfx_del_device_store+0x10/0x10 [ 2482.579997][T17544] ? sysfs_file_kobj+0x1e4/0x230 [ 2482.584948][T17544] ? sysfs_kf_write+0x166/0x260 [ 2482.589848][T17544] ? __pfx_sysfs_kf_write+0x10/0x10 [ 2482.595072][T17544] kernfs_fop_write_iter+0x3a4/0x540 [ 2482.600408][T17544] vfs_write+0x612/0xba0 [ 2482.604688][T17544] ? __pfx_vfs_write+0x10/0x10 [ 2482.609483][T17544] ? do_sys_openat2+0x14e/0x200 [ 2482.614368][T17544] ? kmem_cache_free+0x182/0x650 [ 2482.619340][T17544] ksys_write+0x150/0x270 [ 2482.623688][T17544] ? __pfx_ksys_write+0x10/0x10 [ 2482.628585][T17544] do_syscall_64+0x166/0x520 [ 2482.633207][T17544] ? trace_irq_disable+0x3b/0x140 [ 2482.638272][T17544] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2482.644377][T17544] ? clear_bhb_loop+0x70/0xc0 [ 2482.649085][T17544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2482.655014][T17544] RIP: 0033:0x7f5743b5ed8e [ 2482.659455][T17544] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2482.679122][T17544] RSP: 002b:00007f5743f4f1f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2482.687572][T17544] RAX: ffffffffffffffda RBX: 000055556c048500 RCX: 00007f5743b5ed8e [ 2482.695579][T17544] RDX: 0000000000000001 RSI: 00007f5743f4f280 RDI: 0000000000000005 [ 2482.703575][T17544] RBP: 00007f5743c36174 R08: 0000000000000000 R09: 0000000000000000 [ 2482.711569][T17544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2482.719560][T17544] R13: 00007f5743f4f280 R14: 00007f5743f4fac0 R15: 0000000000000003 [ 2482.727575][T17544] [ 2482.731220][T17544] Kernel Offset: disabled [ 2482.735585][T17544] Rebooting in 86400 seconds..