last executing test programs: 17m34.062362887s ago: executing program 2 (id=1652): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000036c0)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x1, @local, 0x6}, 0x1c, &(0x7f0000000000)=[{0x0}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e22, 0x2, @private1, 0xfffffff8}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000001c0)='Q', 0x1}], 0x1}}], 0x2, 0x4040044) shutdown(r0, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa2ea}}, [0x0, 0x2, 0x100000001, 0xfffffffffffffff7, 0x3, 0x8, 0x80, 0x6, 0x7ff, 0x8, 0xffffffffffffffff, 0x9, 0xfffffffffffffffd, 0xfffffffffffff001, 0x1000]}, &(0x7f0000000180)=0x100) 17m34.016931717s ago: executing program 2 (id=1655): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x34000, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000040)={0x1, 0x2, 0x4, 0xffff, 0x0, "008ef14ba278887cb0baba08431799317e6324"}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_delrule={0x38, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x3}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'macvtap0\x00'}]}, 0x38}}, 0x0) openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{0x1, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000640)='%-010d \x00'}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9, 0x0, r2}, 0x50) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="800100001000010000000000000000007f0000010000000000000000000000007f00000100000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e000000200000000000000000000000000001234320000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000001b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020002000000000000000000480002006469676573745f6e756c6c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000480002006369706865725f6e756c6c"], 0x180}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="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", 0x148}], 0x1}}], 0x1, 0x2090) socketpair$unix(0x1, 0x5, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x114}}, 0x0) r6 = syz_usb_connect(0x0, 0x24, &(0x7f00000003c0)=ANY=[@ANYRES64=r4], 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)=ANY=[@ANYBLOB="2011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r7, 0x720, &(0x7f0000000200)={0x1, 0x87, 0x5, 0x0}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) writev(0xffffffffffffffff, &(0x7f0000000940), 0x0) write(0xffffffffffffffff, &(0x7f0000001e00)="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", 0x2ef) 17m30.882548141s ago: executing program 2 (id=1664): unshare(0x36020780) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x750, 0x0, 0x0, 'queue0\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x3}}) close(0x3) unshare(0x40000000) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000003480), 0x81402, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000000280)='0', 0xfffd, 0x4000854, &(0x7f0000000300)={0xa, 0x4e21, 0xbe7, @loopback, 0x800000c0}, 0x1c) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000000400)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x5}, 0xffffffff}, 0x1c, &(0x7f0000000700)=[{&(0x7f0000000440)="87", 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}, 0xd}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000022c0)='t', 0x1}], 0x1}}], 0x2, 0x48081) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x9, 0x4, 0x81, 0xffffffff, 0xffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=ANY=[@ANYBLOB="700000001000030528bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000500012800b000100697036677265000040000280060003009e000000080005000000600006000f0004000000080004000200000006000200ff01000004001200060002"], 0x70}}, 0x0) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid_for_children\x00') setns(r7, 0x0) shutdown(r5, 0x1) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000200)={0x0, 0x1}, 0x8) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f0000000040)={0x1d, r9, 0x3, {0x0, 0x0, 0x5}, 0x1}, 0x18) sendmsg$can_j1939(r8, &(0x7f0000000500)={&(0x7f0000000100)={0x1d, r9, 0x0, {0x2, 0x1, 0x1}, 0xff}, 0x18, &(0x7f0000000000)={0x0}}, 0x4004150) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, &(0x7f00000001c0)) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r2}, 0x8) 17m30.01475429s ago: executing program 2 (id=1669): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000480)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x8, 0x3a, 0xff, @private2, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x7fff, 0x8}}}}}}, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x12, r0, 0xfffff000) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r2, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) getsockname$inet(r2, &(0x7f0000000080)={0x2, 0x0, @multicast1}, &(0x7f00000000c0)=0x10) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r3, &(0x7f0000004200)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002800), &(0x7f0000002840)='./file0\x00', 0x4002, &(0x7f0000002ac0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0xa000}}, 0x1, 0x0, 0x0) 17m29.722575511s ago: executing program 2 (id=1670): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="280000005e00010000000000000000000c00fe0001000000000000800c00018008000400", @ANYRESOCT=r0], 0x28}], 0x1, 0x0, 0x0, 0x40045}, 0x6000) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000000040)=0x8001) shutdown(r2, 0x1) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000008440), 0x4) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, &(0x7f00000003c0)={0x14, &(0x7f00000002c0)={0x40, 0x21, 0x6, {0x6, 0x10, "2fade649"}}, &(0x7f0000000300)={0x0, 0x3, 0x99, @string={0x99, 0x3, "5c76e864591c71b53ded29c4f9361637d29ac522a7185b748f2be5bdd0014e3c815bc947ee96b909ab8610aa92bdbaa25dc48101775943b1405f2bb237e33a2dab41e400dc5b24fc6e07d6743b6aa24f16c9dae9a57e27036c274b8ddfd824ed415116e8bf8c63090e79f6f7552f80ac9f04b66dd0286716c44788396de16cdaf59e2a054e0ee9c447eba7457562f296fcefaeea514f77"}}}, &(0x7f0000000900)={0x44, &(0x7f0000000640)={0x0, 0xf, 0x2c, "5ee247dd09de45f1d17ffa647aa0f877d0845465956c85975aabdc2a2db21b2ef5880399a97aa4ed67e0498d"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000740)={0x20, 0x81, 0x3, '\x00\x00/'}, &(0x7f00000008c0)={0x20, 0x82, 0x3, "0084d1"}, &(0x7f0000000780)={0x20, 0x83, 0x1, "95"}, &(0x7f00000007c0)={0x20, 0x84, 0x1, '@'}, &(0x7f0000000800)={0x20, 0x85, 0x3, 'G8_'}}) syz_usb_control_io$printer(r0, 0x0, 0x0) r5 = syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002c10db287"], 0x0) syz_usb_control_io(r5, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000340)={0x0, 0x10, 0x1, "c4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r5, 0x0, &(0x7f0000000ec0)={0x1c, &(0x7f0000000380)={0x20, 0xe, 0x1, 'F'}, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$uac1(0x4, 0xb9, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x644, 0x800f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa7, 0x3, 0x1, 0xc3, 0x10, 0xf8, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xf64f, 0x3a}, [@selector_unit={0xb, 0x24, 0x5, 0x5, 0x6, "623bc3f6da02"}, @extension_unit={0xd, 0x24, 0x8, 0x6, 0x8, 0x7, "e6d86eb53016"}, @selector_unit={0x6, 0x24, 0x5, 0x4, 0x81, 'U'}, @processing_unit={0x8, 0x24, 0x7, 0x3, 0x3, 0x0, "ce"}, @mixer_unit={0xa, 0x24, 0x4, 0x5, 0x7, "6d6d924f55"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0xc3, 0x3, 0xa, 0xd}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x52, 0xdc, 0x4, {0x7, 0x25, 0x1, 0x0, 0x7, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0xff53, 0x9, 0x7, "9e1bd87316fa"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x4, 0x1, 0xd, {0x7, 0x25, 0x1, 0xc, 0x18, 0x89d}}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x310, 0x0, 0x3, 0x4, 0x40, 0x3}, 0x5, &(0x7f0000000200)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x42c}}, {0x102, &(0x7f00000004c0)=@string={0x102, 0x3, "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"}}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x400a}}]}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_connect(0x5, 0x5e, 0x0, 0x0) 17m29.186411333s ago: executing program 2 (id=1673): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, 0x0, 0x0) socket(0x10, 0x803, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000240)=[{0x10, 0xe3, 0x6b, 0x8000002}, {0x8006, 0xd, 0x3, 0x2}]}) write$ppp(r2, &(0x7f00000000c0)="4399b62f7e1008", 0x7) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9400000002060108000000000000000000000001050005000a0000000900020073797a3000000000050005000700000005000100070000005c000780060004404e210000080013400000046908000a400000ffff0800084000000080050007000130000008000b4000000002080008400000000208000b4000000000180002801400024000000000000000000000ffffe0000002"], 0x94}}, 0x0) socket$netlink(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket(0xa, 0x5, 0x0) dup(0xffffffffffffffff) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x3, 0x0, 0xfffffffe, 0xff, "00769a7d004700"}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r1, 0x1, 0x42, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r10, 0xc008ae88, &(0x7f0000000280)={0x1, 0x0, [{0x28e, 0x0, 0x14}]}) getsockopt$inet6_mptcp_buf(r7, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f0000000100)=0x98) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f00000001c0)={0x86ed, 0x401, 0x6b1, 0x2, 0xe, "5e84c1744101fb71"}) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r3, @ANYBLOB="05"], 0x0) 17m28.524219222s ago: executing program 32 (id=1673): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, 0x0, 0x0) socket(0x10, 0x803, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000240)=[{0x10, 0xe3, 0x6b, 0x8000002}, {0x8006, 0xd, 0x3, 0x2}]}) write$ppp(r2, &(0x7f00000000c0)="4399b62f7e1008", 0x7) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9400000002060108000000000000000000000001050005000a0000000900020073797a3000000000050005000700000005000100070000005c000780060004404e210000080013400000046908000a400000ffff0800084000000080050007000130000008000b4000000002080008400000000208000b4000000000180002801400024000000000000000000000ffffe0000002"], 0x94}}, 0x0) socket$netlink(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket(0xa, 0x5, 0x0) dup(0xffffffffffffffff) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x3, 0x0, 0xfffffffe, 0xff, "00769a7d004700"}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r1, 0x1, 0x42, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r10, 0xc008ae88, &(0x7f0000000280)={0x1, 0x0, [{0x28e, 0x0, 0x14}]}) getsockopt$inet6_mptcp_buf(r7, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f0000000100)=0x98) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f00000001c0)={0x86ed, 0x401, 0x6b1, 0x2, 0xe, "5e84c1744101fb71"}) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r3, @ANYBLOB="05"], 0x0) 7m11.618644072s ago: executing program 3 (id=4809): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000f000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f00000000c0)="0f2172f2f775c9f00fb3050fc7b50000b8de000f00d8b839000f00d0660f3a41545200f30f1efa0f01d1", 0x2a}], 0x1, 0x40, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000380)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0x32600) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000040)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e3, &(0x7f0000000240)={0xffffffffffffffff, r2}) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r5, 0x0, 0xc, &(0x7f00000000c0)="e0", 0x1) getsockopt$inet_opts(r5, 0x0, 0x400000000000009, &(0x7f0000937fed)=""/16, &(0x7f0000000080)=0x2b) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7m11.338086089s ago: executing program 3 (id=4812): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x48800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14eaffff3800070125bd7000ffdbdf25197c3600fcea7e91cfc7040d90aa"], 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x400c094) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) write$vhost_msg_v2(r4, &(0x7f0000000040)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x4}}, 0x48) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0x8, 0xc5, 0x0, 0x3, 0x9, 0x4, 0x6, 0x1, 0xf8, 0x0, 0x1, 0x0, 0x3, 0x6, 0x6, 0x9, 0x4, 0xfe, '\x00', 0x4, 0x4}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x41, 0x0, 0x0) 7m11.11964246s ago: executing program 3 (id=4813): r0 = socket$nl_generic(0x11, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r3) getsockname$packet(r3, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, r4, 0x108c3, 0xc4a48b7f26ba2e0b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r4, 0x20200, 0x281}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x404c000}, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x2458a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000040) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x19, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b80f8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000008500000005000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000001000010400000000fedbdf2500000000", @ANYRES32=r8, @ANYBLOB="00030000800000000a0001"], 0x2c}}, 0x884) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x5) 7m10.845083922s ago: executing program 3 (id=4815): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000004c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) bind$unix(0xffffffffffffffff, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x2) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) syz_usb_connect(0x1, 0x1b, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0xab, 0xe5, 0x5a, 0x20, 0xbda, 0x8754, 0xd5fd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x6, 0x8, 0x80, 0x40}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x16, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c000000020601010000000000000000000000000900020073797a3000000000050001000600000005000500000000000500040000000000140007800800114000000000050015000c8537350d000300686173683a6d6163"], 0x5c}}, 0x4000) r2 = accept4$inet6(r0, 0x0, &(0x7f0000000400), 0x0) r3 = syz_ublk_setup_io_uring(0x22, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1db}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0, &(0x7f00000004c0)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000980)=@IORING_OP_RECVMSG={0xa, 0x37, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)=[{0x0}, {0x0}], 0x2}, 0x0, 0x100, 0x1, {0x3}}) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x0, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) r7 = getpid() ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000480)=r7) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000100)={0xffff8001}, 0x4) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xc8, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x41}}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20000011}, 0x20000080) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) r10 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x40702) ioctl$USBDEVFS_CONNECTINFO(r10, 0x80045505, 0x0) move_mount(r9, &(0x7f0000004200)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002800), &(0x7f0000002840)='./file0\x00', 0x4002, &(0x7f0000002ac0)={{'fd', 0x3d, r11}, 0x2c, {'rootmode', 0x3d, 0xa000}}, 0x1, 0x0, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0xfffffffffffffe7d, &(0x7f00000000c0)={&(0x7f0000000b00)={0x224, 0x41, 0x107, 0xfffffafe, 0x0, {0x1, 0x7c}, [@nested={0x1c0, 0x25, 0x0, 0x1, [@nested={0xf0, 0xe7, 0x0, 0x1, [@typed={0x8, 0x13, 0x0, 0x0, @u32}, @generic="911fc7e0d501989e7e31cb54599f413d07618922cf4f3c834be72cde5c002dcbccf162067bc6bdaf05ff29c5afcad69eb11fc8949901c9a184f88a2a6f5a59939a73fb99514e36516d874793e6fc8a132d0fd7e63ccbb9cea257449f1a382c9db85e12adda763975106c7fe6508c537766f2fd50070c4405d5ca180d7257415f1f2805389323ab9c17998a6adeacf6ed11c0a52ff8969fa616bdd1a2cedcce9742c269078cce347585c9a3ae10000000", @nested={0x34, 0x42, 0x0, 0x1, [@nested={0x4}, @generic="6c322df307a7e26172349f8eb8c5315ae193897e0d68175c4679f58ae7cc4c898d73a3d76a7de61b13b5e468779b2b463a5811e619dd1cfddcb36df6e53a6c228c05725157005ea71c2c43e9ae0f8408b4eaa002079e230be79d7b79dc406c0fa6a2745b0d77b58382dd7383a746d5f7e2455ad77c34ce2be5fa9b1bcd329da5efd55cb1c2f71b56b612f4", @nested={0x4, 0x62, 0x0, 0x1, [@typed={0x0, 0xf9, 0x0, 0x0, @binary="46ae1a7169ab145341c7809b624a4af511b71b56"}]}, @generic="7e3ab10f9cdbfc837be3cfb288cddeeb67d5881692e881c4bff458af834c118647f4a9403c113a1541c7343c3ad7854033caf7a666ca9dc55caec6577c2f2220176f86b2ac12933198059e801cc066155e96e5d649e3c7d07cb72694"]}]}, @generic="bf3124e0f1f87878cf4b18919aeeade71a7e7cbeda47b1171c4e21d503e6b6af6fff8625a7cd1862823f8c3b46f5e5163468a8646c0b18df4a0b7d061f4692ee92733586f0671307fc6f79dd5ded871df38528a6f5bda6293c96e6e0a9ebeca4dfb1b42028f7c196c921eb2aa95cdf15994c599e64e33103ee3a53bc9a5390075fd632ad514b47e13c8959c9b2588fa283689ec3d708adbbec82f6bb69247032fae0374ec336eb842d75da1874954a48b26e824be23f24da02cd48baa830307cb52e71d347db92724d623dc5"]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x33}}]}, @nested={0x4, 0x2}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) ioctl$sock_inet_SIOCRTMSG(r8, 0x890d, &(0x7f0000000380)={0x0, {0x2, 0x4e21, @private=0xa010100}, {0x2, 0x4e22, @multicast2}, {0x2, 0x4e20, @private=0xa010100}, 0x200, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000340)='pim6reg1\x00', 0x81, 0x5, 0x9871}) 7m10.067823447s ago: executing program 3 (id=4820): pipe(&(0x7f0000000080)={0xffffffffffffffff}) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = gettid() waitid(0x1, r3, 0x0, 0x1000000, 0x0) (async) r4 = syz_open_dev$sndpcmp(0x0, 0xfffffffffffffff1, 0x402000) (async) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {r6, 0x7fffffff, 0x12, 0x0, 0x0, @in={0x2, 0x4e20, @rand_addr=0x64010100}, @in6={0xa, 0x4e1f, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x80000001}}}, 0x118) (async) syz_open_dev$vbi(&(0x7f0000000340), 0x3, 0x2) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x62, 0x3, 0x80000, 0x200000000000009, 0x3ca, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) (async) readlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000380)=""/187, 0xbb) (async) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4342, 0x0) r8 = dup(r7) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) (async) r9 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) r11 = syz_clone(0x2808000, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) recvmmsg(r10, &(0x7f00000064c0)=[{{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x8004}, {{0x0, 0x0, 0x0}}], 0x3, 0x30100, 0x0) (async) sendmmsg(r9, &(0x7f0000000500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @mcast1, 0x10004, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="2800000000000050466d0212a108f1ad630e1a99f961bcf4481a388388c4cd4b0720b6313efc46e51d47a99f6fcfcbdaf008ea5d5785298e090b4c45b5126b5f459c1fd7a7c767b1d4be80ee21c791c16d265cce33388b973ccce05c8ffc90effcd6d0d3e1d87f715800a3678b240ad2a9a6aa03e9e9725c870c733988eeee27525486fe3c0ddc5dfd478fc8f6c2f8c040da"], 0x28}}], 0x1, 0x4000000) (async) close(r4) (async) write$6lowpan_enable(r8, &(0x7f0000000440)='1', 0x1) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) 7m8.16062036s ago: executing program 3 (id=4822): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0x8}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000004c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r3 = open(&(0x7f0000000100)='./file1\x00', 0x147842, 0x88) preadv2(r3, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x41) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000080)}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0xfe, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0xff, 0x1f}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x9}, {0x9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1000000}], 0x4}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) syz_emit_ethernet(0x85, &(0x7f00000003c0)={@local, @empty, @void, {@llc={0x4, {@snap={0xaa, 0xa8, 'I', "099c90", 0x88f7, "f05484ec91e88f6ca83a5bbf0ae2c66acf0be5bc41e79eaa248a58b3275693b99c5f84b8d6b3143ed1bf7034568145812d8afc242391613829d17478cb6f0e00fde9135c7b4f3ba36326ab89311ecd809a92d2353287e57a7fcd50b70d0cd621a78901404753645b136fa3b866215e"}}}}}, &(0x7f0000000480)={0x1, 0x1, [0x830, 0xc43, 0xc0000, 0x50]}) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x439, 0x70bd23, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, 0xb081}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @private2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4040844) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f00000002c0)={0x4800, 0x3}, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x16, 0xa01, 0x0, 0x2, {0xa}, [@typed={0x8, 0x3ffe, 0x0, 0x0, @ipv4=@multicast1}]}, 0x1c}}, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c0000001000374429bd7000fcdbdf2500000000", @ANYRES32=r8, @ANYBLOB="890c020044cc04004c0012800b00010069703667726500003c00028014000700fc0000000000000000000000000000001400060020"], 0x6c}, 0x1, 0x0, 0x0, 0x2000c800}, 0x20000000) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) 7m7.489417236s ago: executing program 33 (id=4822): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0x8}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000004c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r3 = open(&(0x7f0000000100)='./file1\x00', 0x147842, 0x88) preadv2(r3, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x41) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000080)}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0xfe, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0xff, 0x1f}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x9}, {0x9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1000000}], 0x4}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) syz_emit_ethernet(0x85, &(0x7f00000003c0)={@local, @empty, @void, {@llc={0x4, {@snap={0xaa, 0xa8, 'I', "099c90", 0x88f7, "f05484ec91e88f6ca83a5bbf0ae2c66acf0be5bc41e79eaa248a58b3275693b99c5f84b8d6b3143ed1bf7034568145812d8afc242391613829d17478cb6f0e00fde9135c7b4f3ba36326ab89311ecd809a92d2353287e57a7fcd50b70d0cd621a78901404753645b136fa3b866215e"}}}}}, &(0x7f0000000480)={0x1, 0x1, [0x830, 0xc43, 0xc0000, 0x50]}) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x439, 0x70bd23, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, 0xb081}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @private2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4040844) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f00000002c0)={0x4800, 0x3}, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x16, 0xa01, 0x0, 0x2, {0xa}, [@typed={0x8, 0x3ffe, 0x0, 0x0, @ipv4=@multicast1}]}, 0x1c}}, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c0000001000374429bd7000fcdbdf2500000000", @ANYRES32=r8, @ANYBLOB="890c020044cc04004c0012800b00010069703667726500003c00028014000700fc0000000000000000000000000000001400060020"], 0x6c}, 0x1, 0x0, 0x0, 0x2000c800}, 0x20000000) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) 6.19797884s ago: executing program 4 (id=6650): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000040)=0xb3, r2, 0x0, 0x0, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @loopback, 0x10000bff}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8ed50f638facd57de629163"}, 0x8000000000000001, 0x2, 0x3}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r2, 0x4734}}, 0x10) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x20, 0x1405, 0x1, 0x70bd27, 0x25dfdbfb, "", [{{0xfffffffffffffe56, 0x1, 0x1}, {0x8, 0x3, 0x1}}]}, 0x20}}, 0x4800) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000280)="1400000016001963d25a80648c56915a1974a8d9", 0x14}], 0x1}, 0x44000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in=@private, 0x0, 0xecdf, 0x0, 0x0, 0xa, 0x0, 0x20}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x4}, {0x3bc7, 0x7, 0x80000007}, {0x2, 0x0, 0xffffffff}, 0x70bd2a, 0x800000, 0x2, 0x4, 0x0, 0xe5}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a}}, @sa_dir={0x5, 0x21, 0x2}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}}}]}, 0x160}}, 0x24004000) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4) 6.01803473s ago: executing program 4 (id=6652): r0 = socket$inet_tcp(0x2, 0x1, 0x0) io_uring_enter(0xffffffffffffffff, 0x560c, 0x1c95, 0x8, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22}, {0x2, 0x200, @local}, {0x2, 0x0, @broadcast}, 0x105, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0xe1b2}) socket$inet_tcp(0x2, 0x1, 0x0) r1 = memfd_secret(0x0) pipe2$watch_queue(0x0, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000001b40)={0x0, 0x0, 0x0}, 0x8000) mprotect(&(0x7f000002c000/0x1000)=nil, 0x1000, 0x2) syz_usb_connect(0x0, 0x91, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000406d04210800010102030109029e0002010080fa09040000010e0100000d240100013f000000000001010f240201010200000000001a2406038206616370"], 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080201000000040000a118000200ff21000097ff00000010000000000008003f16ea1f00084003bc5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f722f054f55153c6f94007134cf6ee08000a09108a8d8ef075c0100000000000000cb490000001fb791643a5e835913b06218df577b5ab4bcf151cdc280cc8a54440a6cdcdbd9d322fe7c9fd68775730d160036f4608a32660d8bcc0040a21ffc4fc84397ca3ce373e51e4194ddb57e481940c55a1c5667e0060000725c8bbb58", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004c04) recvmmsg(0xffffffffffffffff, &(0x7f0000007280)=[{{0x0, 0x0, 0x0}, 0xed}, {{0x0, 0x0, 0x0}, 0x7f}], 0x2, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x44b40, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r4, 0x4068aea3, &(0x7f0000000300)={0xc0, 0x0, 0x4000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800008, 0x31, r5, 0xfd5e6000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='smaps_rollup\x00') read$FUSE(r6, &(0x7f0000004900)={0x2020}, 0x2020) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) socket$netlink(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) 5.64857908s ago: executing program 0 (id=6656): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000280)="1400000016001963d25a80648c56915a1974a8d9", 0x14}], 0x1}, 0x44000) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4) (fail_nth: 4) 5.463017977s ago: executing program 0 (id=6657): ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000100)={"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"}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000000)={0x1, 0x2, 0x80100, 0xd6, 0xa}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x4, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3", 0x0, 0x4}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xcccc0000, 0x1000, &(0x7f0000f15000/0x1000)=nil}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x25) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000040)={0x10200, 0x0, &(0x7f0000003000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r7, 0x40106f52, &(0x7f0000000000)={0x18, &(0x7f00000000c0)=[{0x11, '\x00', @data=0xb, 0x9}]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x9, 0xf43, 0x3, 0xa2, 0x1000000000000005, 0x4, 0x1, 0x4, 0x8, 0xfffffffffffff9bf, 0x7, 0x8, 0x7, 0x1, 0x4, 0x101], 0xf000, 0x34680}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)=@x86={0x7, 0x8, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x1, 0xf8, 0x0, 0x1, 0x0, 0x3, 0x6, 0x6, 0x9, 0x4, 0xfe, '\x00', 0x4, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.119989606s ago: executing program 0 (id=6659): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) r3 = open(&(0x7f0000000080)='./file0\x00', 0x28000, 0x120) sendmsg$kcm(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="b44c5b2b5a4a0a3bc617aa722925fe3bd2376e1e9b1befc84189549211f2f91925d8b21977f9c7f899e42711d2916f7104e987dcd09ffa1e33f0b474728ab47e8fdcae444bb1980d50d823884301077ccc31adc6518bf5171bfa16cb2464e03dc07c729205536e9e8986b79a23220ce7621db2128d04ec9ae08084bdf06c884f26d67ed31ae526ea99957c0a1be3ec916f8bffce5cbeeb92df34b56afb38e623002f9355", 0xa4}, {&(0x7f0000000480)="8b67d24fe5b7658cbabd5f21f9c508bd98a4785b87f362794550a9bcce461f198cd0e6c7448fbe8059aeac56558d60393b25fdc2a1e70e8b4e00f2e7c1a7088ec32a0eebf5663a00e7b74abc99ec4536e539cbc077280dae859b3dd54e7a6ac8ae32d36f369f5f4983fd59ce68613995c529fc499793881d9b11c29afe83b338fab51ad50b64290852b9c0516bc4840a61ebc5514b8fec9a54a2143a9688e9ad99ed178b0568f9712169dd215ec03728f5c49fbde0c28203b0f4d5021e6b58f0c5ff692042ed", 0xc6}], 0x2, &(0x7f00000005c0)=[{0xd0, 0x10f, 0x1, "3e918e1d00bb494b506bd415a10e4d286ba0a69051aba406002f78814d468318a599a4fc59e801f1ffe587b3e978fcc44cf5f91d46af9a097ea18586f76543e2161a75ed114dd91c8fcbfcd001b3049a60202bc1037a7042097b4f34b3149a02d77f26dce705aeb45c8ec7fb8985f439b4df304eface6c227d9cd52cb69ec68acec29a8e9a789c52c2a2eef31860d91b49efbe1bcdb216bc62b66b3a87de2276a86b774f829f95e3a86359b70132c03d8c432ba2196de8cbbccb136e"}, {0x60, 0x103, 0x477, "742515e4631fa1835c3d4b6a848a2d93fb8320b9d3c3d79eb17a679d266dc5097ca8ca73ee0c6e11e606c1bdd5e863f39d395b20324f53fc3235e67faf4ac21cf08b4ab3315e79cd1122fd8f04"}, {0xf0, 0x111, 0x7ff, "2b5a0fe088534a4be0118f9e1fa7a1e99aac792519afb851707dcb0473138f715ad95a062c0d9b83f5f32581ebfb7d3a3c82d4746b8b2f1cd0e86ae1348957508db3112951ef162461751f4daa170df363126e5691ad82b84db38e69b9aaa4af171671fbfd0077873c9bb71d70156f8528264957d8bd4c87abab8cbcd934a23c5137611e5cd28aa9d684c758c5e9ba382af8a9314cec3836c393f3272f82de7351b6f11a60cf8c63d3a132444c10829e526bf0631c89a63ab95bfa1d2edf18ac6aebd006c15f7c0d654bcfeca7320e3e10c4eb9b7f3c2e6ab63d909ceb55"}, {0x88, 0x10b, 0x10000, "56d54c245f605b3d3839709b2de17596ac9ff7afc45cfebd523119df67b10ab86822eb890706d79c7c78beaab10b830807533edc87646b9d5d6dfa1bcd24a96043ca6e93567cd7e34b6b09a59f1d3f8e6d773d2a8c0b583c3d1dbfbbf6033271f6b80a9f29fee1de5fb62f511e8fa5aebca3"}, {0x20, 0x107, 0x80, "6c362c8b2d069f9dcd5d"}], 0x2c8}, 0x40) sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="01000000000000000300000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}, 0x1, 0x0, 0x0, 0x48485}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000030003"], 0x8) sendmsg$can_bcm(r1, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000022c0)=ANY=[@ANYBLOB="01000000670f00"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}, 0x1, 0x0, 0x0, 0xc080}, 0x11) r5 = socket$can_j1939(0x1d, 0x2, 0x7) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000080)='asymmetric\x00', 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02"], 0xe) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) socket$key(0xf, 0x3, 0x2) write$cgroup_subtree(r7, &(0x7f0000000080)=ANY=[], 0x48) splice(r6, 0x0, r8, 0x0, 0x3000, 0x100000000000000d) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r9, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 4.967208362s ago: executing program 0 (id=6660): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000140000feb7030000000000008500000008000000bf0900000000000055090100000000009500000000000000b7020000000000007baa00fe00000000b5090800000000007baaf0ff00000000bf8700000000000007070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004602010076000000bf98000000000000be080000000000008500000007000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0xb, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) r3 = socket$inet_smc(0x2b, 0x1, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) syz_fuse_handle_req(r4, &(0x7f00000022c0)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0xffffffff, {0x7, 0x29, 0x1, 0x69015a58, 0x2, 0xff, 0x7, 0x3, 0x0, 0x0, 0x40, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f00000042c0)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x78, 0x0, 0x1, {0x0, 0xfffffffc, 0x0, {0x4, 0x6, 0x40000000000005, 0x5, 0x3, 0x0, 0x4, 0x7, 0x4, 0x2000, 0x9e7, 0xffffffffffffffff, 0x0, 0x3e, 0x400}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) r5 = syz_open_dev$vim2m(&(0x7f00000001c0), 0xc00000001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000003c0)={0x1, @pix_mp={0xffffffff, 0x7fff, 0x34324152, 0x5, 0x2, [{0x7, 0x3}, {0x8, 0x4000000}, {0x8, 0x21}, {0xc91, 0x80000000}, {0x6, 0x9}, {0x4, 0x1000c}, {0x802, 0x2}, {0xfffffffe}], 0xb, 0x5, 0x8, 0x2, 0x5}}) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff000000000000000000000000000000000000000000000000000040000000000000000000000000fcffffff000000000000000000"]}, 0x108) 4.871518487s ago: executing program 0 (id=6661): memfd_create(&(0x7f0000000780)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\nh<\x99\xaa\xe1\xf3\xb8Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev<\x97\x1a2_\x82\xfa\x15h$\x01\xdd\xe5\xceC\x19\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xb2\xf5\x1e5.\xc1\xa1\x05\x92\x82d\x0e\xf5PMjIt\xc5u~Tw\xbeNg\xb5\xeeP\x9c\xce\xfaS\xa7\xec0\xf4\xd2\xc2+@\x12=\xaa\b\xd2&\x19k6\xc7\xa6+\x04V\xc3\xe1\xd3\fZZ\x1cJo\xa5(& \r\xf1\xa4\xb8\xc23\x16\xc3\xaejA/', 0x0) r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r0, 0x0, 0xa) fchdir(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1c8080, 0x81) getdents(r3, &(0x7f0000000200)=""/4096, 0x1000) 4.7689685s ago: executing program 0 (id=6663): r0 = socket$kcm(0x10, 0x5, 0x10) syz_emit_ethernet(0x4c, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c20000030180c2000000080045f53256bd01777be111907800000000000000004e210000002a90786220000000000000bce430f20d16ddb0478d09e8338d405fcd630373bf27867b215f"], 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000280)="1400000016001963d25a80648c56915a1974a8d9", 0x14}], 0x1}, 0x44000) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040), 0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0xc0011023, 0x0, 0x4}]}) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r7 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) readv(r7, &(0x7f000000ad80)=[{&(0x7f0000009c80)=""/4096, 0x1000}], 0x1) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) 4.635021254s ago: executing program 6 (id=6664): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) (async) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0xe, 0x0, 0x102}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x88}}, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000d80)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x89}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) (async) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000140)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") (async) ptrace$getregset(0x4205, r4, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) 4.435514821s ago: executing program 6 (id=6666): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = userfaultfd(0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) mremap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000004000/0x3000)=nil) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x3}}, @NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xb}}}, 0x78}}, 0x0) 4.209847114s ago: executing program 6 (id=6667): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x8000001, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, 0x10}, 0x1c) (async) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) (async) connect(r0, &(0x7f0000000100)=@sco, 0x80) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) (async) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd00ac6700000000000000000000c2888e7d52164ec480e79200000100", [0x0, 0x2000000000001]}}) 3.992537058s ago: executing program 6 (id=6669): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1}}], 0x1, 0x4040040) sendmmsg(r0, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000002c0)="cf", 0xffa6}], 0x1, &(0x7f00000006c0)=ANY=[], 0x7}}], 0x1, 0x4044044) 3.898756431s ago: executing program 6 (id=6671): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100004898b610c2154500201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0) syz_usb_disconnect(r0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0xa, 0x4}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) (async) r3 = dup3(r2, r1, 0x0) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000940)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000400)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x2, 0x3b}, @ptr={0x70742a85, 0x20000000, &(0x7f0000000580)=""/236, 0xec, 0x1, 0x26}, @fda={0x66646185, 0xc, 0x1, 0xb4}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1040}], 0x0, 0x0, 0x0}) (async) r5 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x3, 0x40, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xfb, 0xb0, 0xc, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r5, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0003210000020207"]}, 0x0) (async, rerun: 64) syz_usb_control_io(r5, 0x0, 0x0) (rerun: 64) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000300), 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000640)=0xce0, 0x4) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r6) (async) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r7, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) (async) close(r7) (async) io_setup(0x7, &(0x7f00000000c0)=0x0) io_submit(r8, 0x1, &(0x7f0000000100)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, r3}]) ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, &(0x7f0000000480)) (async) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r9, &(0x7f00000007c0)="0bcde56ca9a62cbf", 0x8) 3.751291663s ago: executing program 4 (id=6673): memfd_create(&(0x7f0000000780)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\nh<\x99\xaa\xe1\xf3\xb8Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev<\x97\x1a2_\x82\xfa\x15h$\x01\xdd\xe5\xceC\x19\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xb2\xf5\x1e5.\xc1\xa1\x05\x92\x82d\x0e\xf5PMjIt\xc5u~Tw\xbeNg\xb5\xeeP\x9c\xce\xfaS\xa7\xec0\xf4\xd2\xc2+@\x12=\xaa\b\xd2&\x19k6\xc7\xa6+\x04V\xc3\xe1\xd3\fZZ\x1cJo\xa5(& \r\xf1\xa4\xb8\xc23\x16\xc3\xaejA/', 0x0) r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r0, 0x0, 0xa) fchdir(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1c8080, 0x81) getdents(r3, &(0x7f0000000200)=""/4096, 0x1000) 3.697803644s ago: executing program 4 (id=6674): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0xffff}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000240), &(0x7f0000000280)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000080ffff0000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(r1, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000700), 0x0, &(0x7f00000019c0)=""/151, 0x97}}, {{0x0, 0x0, &(0x7f0000002c00)=[{0x0}, {0x0}], 0x2, &(0x7f0000002c40)=""/216, 0xd8}, 0x10001}], 0x2, 0x40010000, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000000)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000100)=0x28) 2.747994027s ago: executing program 4 (id=6675): setxattr$trusted_overlay_nlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)={'U-', 0xff}, 0x16, 0x2) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000280)="1400000016001963d25a80648c56915a1974a8d9", 0x14}], 0x1}, 0x44000) socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x10105) r1 = socket$igmp6(0xa, 0x3, 0x2) sendto$inet6(r1, &(0x7f00000002c0)="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", 0x1000, 0x20008090, &(0x7f00000012c0)={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, '\x00', 0x16}, 0x87a5}, 0x1c) 2.454988383s ago: executing program 4 (id=6676): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = userfaultfd(0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x3}}, @NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xb}}}, 0x78}}, 0x0) 2.175962801s ago: executing program 5 (id=6678): r0 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffd000/0x1000)=nil, r0, 0x2000000, 0x4000010, 0xffffffffffffffff, 0x0) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x141400, 0x0) read$FUSE(r1, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) stat(&(0x7f0000002080)='./file0\x00', &(0x7f00000020c0)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) getgroups(0x9, &(0x7f0000002140)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xee00, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0]) write$FUSE_ATTR(r1, &(0x7f0000002180)={0x78, 0xfffffffffffffff5, r2, {0x6, 0x10, 0x0, {0x6, 0x7fff, 0x252, 0x5, 0x0, 0x3ff, 0x1, 0x10000, 0xb4, 0xe000, 0x7, r4, r10, 0x7, 0x8}}}, 0x78) r11 = syz_open_dev$swradio(&(0x7f0000002200), 0x1, 0x2) (async) stat(&(0x7f0000002240)='./file0\x00', &(0x7f0000002280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) stat(&(0x7f0000002300)='./file0\x00', &(0x7f0000002340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x8, &(0x7f00000023c0)=[r8, r5, r9, r3, r12, r13, r3, r7]) (async) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000002400)={0x0, 0x0, 0x0}, &(0x7f0000002440)=0xc) getgroups(0x1, &(0x7f0000002480)=[r15]) (async) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) stat(&(0x7f00000024c0)='./file0\x00', &(0x7f0000002500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x4, &(0x7f0000002580)=[r6, r14, r9, r16]) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000025c0)={'wg0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000002680)={'syztnl0\x00', &(0x7f0000002600)={'syztnl2\x00', r17, 0x29, 0x2, 0x80, 0xfffffffe, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x40, 0x0, 0x87}}) (async) bind$inet6(r1, &(0x7f00000026c0)={0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x200}, 0x1c) r18 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002740), 0x10000, 0x0) splice(r11, &(0x7f0000002700)=0x164e97c, r18, &(0x7f0000002780)=0x3, 0xf, 0x2) (async) r19 = socket$nl_generic(0x10, 0x3, 0x10) r20 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002800), r1) sendmsg$NL80211_CMD_START_SCHED_SCAN(r19, &(0x7f0000002900)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000028c0)={&(0x7f0000002840)={0x7c, r20, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1}, @NL80211_ATTR_IE={0x21, 0x2a, [@rann={0x7e, 0x15, {{0x1, 0x64}, 0x10, 0x7, @broadcast, 0xfffffff4, 0x6, 0x5}}, @chsw_timing={0x68, 0x4, {0x6, 0xaa}}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x0, 0xf7}}, @NL80211_ATTR_SCAN_FREQUENCIES={0x1c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x2}, {0x8, 0x0, 0x7ff}, {0x8, 0x0, 0x2ee}]}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x5}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x4844) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000002940)) (async) write$P9_RREADDIR(r1, &(0x7f0000002980)={0x87, 0x29, 0x2, {0x68, [{{0x1, 0x1, 0x6}, 0xfffffffffffffff7, 0x8, 0x7, './file0'}, {{0x10, 0x2, 0x1}, 0x3, 0x15, 0x7, './file0'}, {{0x0, 0x1, 0x3}, 0x1, 0x9, 0x7, './file0'}, {{0x40, 0x0, 0x4}, 0xb8, 0xf, 0x7, './file0'}]}}, 0x87) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000002c00)={{r11, &(0x7f0000002a40)='\xff\xff\xff\xff\xff\xff', 0x410a00, &(0x7f0000002a80)={@align, {0x4, 0x3ff, 0x9, 0x9}}, 0x3, &(0x7f0000002ac0), &(0x7f0000002b00)=0x1}, {[0x1, 0x8, 0x4, 0x1]}, 0xe0, 0x9a, &(0x7f0000002b40)=""/154}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r21, 0x8982, &(0x7f0000002c80)) (async) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r21, 0x84, 0x1b, &(0x7f0000002cc0)={0x0, 0xbb, "3a4801ecc568312204896c0b7984333776630d38a98615ffd0130a7d1d3333f71421e7ae20e997f7047ebbfcbc07f001f4aa414b0ac7bc9a4afaf94da3eacfb147adce1eea2b323eb5c17e2a50838c059d5757a11c12f2a77dcd7482ec715a71edcb5e6a25e57a4ac26d66f8d3e24207e20fe23a38cf8012c8ad0560dbe461585cb1f072662ff6f30c6549350998dd9b66bf05a52174fc45d77a2c619872ce2df6719e3e188c98aa95613a555f44f36b334b8f6f8e430678f61a29"}, &(0x7f0000002dc0)=0xc3) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r21, 0x84, 0x13, &(0x7f0000002e00)={r22, 0x101}, &(0x7f0000002e40)=0x8) 2.054720942s ago: executing program 1 (id=6679): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000280)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xfffffffffffffdea, &(0x7f00000000c0)={0x0}}, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r3, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0x0, 0x0, 0x40000}, 0x20) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000000)={0x48, 0x2, r2}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x1) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f00000000c0)={0x0, 0x1, 0xf2f2, 0x6, 0x0, 0xbeff, 0x0}) close_range(r4, 0xffffffffffffffff, 0x2) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000fc0), 0x0, 0x0) quotactl_fd$Q_GETINFO(r4, 0xffffffff80000501, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f00000005c0)={{{@in=@local, @in6=@dev}}, {{@in=@initdev}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nfsfs\x00') lseek(r9, 0x1, 0x1) getdents64(r9, 0xffffffffffffffff, 0x43) ioctl$KVM_XEN_HVM_CONFIG(r8, 0x4038ae7a, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) 2.041258165s ago: executing program 5 (id=6680): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1}}], 0x1, 0x4040040) sendmmsg(r0, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000002c0)="cf", 0xffa6}], 0x1, &(0x7f00000006c0)=ANY=[], 0x7}}], 0x1, 0x4044044) 1.621108394s ago: executing program 1 (id=6681): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000680)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6, 0x1c, "fee899ab78fc979fd1e00d96072018001e029de2b7fb0000e60080b8785d9600f2ff00010000279b000000000000000000e3ffffff00", "2827e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac008000000000000200000000000000000000000000c9ff00", "f4bd000000801900", [0x8, 0xffffffff9673e359]}}) 1.485991737s ago: executing program 1 (id=6682): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffff9}, 0x1c, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000ffffac1414aa", @ANYRES32=0x0, @ANYBLOB="0000000000000000fb00987d375a70d3ce7696000000000000000000000000000000000000e22273650c48d497ffd5a918aac14bf85839020def59dc7b08d6abbc4d1d325cc44816790a585035a935282fbf34f4abf6f1663ff075c254c7472b8e22598d571ef5413ee5b63f166e070000e79704f2b355b52d6390cd6332963782e8d83497f4773f348f196ba63c44a4220d7773dc7e632002cd2347eb6f066a9c9ecf5d33572fb5518b11237e17268da8ca837b72ac25cbd891d544f69f43730396f91ce300000000"], 0x40}}], 0x1, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000007d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x10001, 0x7fff, 0x34325852, 0x0, 0xa, [{0x8, 0x400}, {0x9, 0x6}, {0x10, 0x8}, {0x3ff, 0x2}, {0x8, 0x7}, {0x5, 0x7}, {0x4, 0x7fffffff}, {0x5, 0x8}], 0xf, 0x39, 0x8, 0x1, 0x5}}) r6 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_STD(r6, 0x40085618, &(0x7f0000000000)=0x1700) ioctl$VIDIOC_G_SLICED_VBI_CAP(r6, 0xc0745645, &(0x7f0000000440)={0xc, [0x36, 0x6aa6, 0xfb, 0x1, 0x0, 0x3, 0x4, 0x81, 0x8, 0xa33, 0x1, 0x4, 0x6, 0x6, 0xe2, 0xf, 0x3, 0x7, 0xd, 0x40, 0xf, 0x7ff, 0x1440, 0xac9, 0x5, 0x7, 0x1, 0xc048, 0x3, 0x4, 0x4d8d, 0x9, 0x3, 0xfff7, 0x7, 0x8, 0x58, 0xa3, 0x5, 0x7fff, 0x7, 0xa2c1, 0x7, 0xfff7, 0x7, 0x6, 0xa8a, 0x1], 0x7}) io_submit(r3, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp6\x00') read$FUSE(r7, &(0x7f0000000940)={0x2020}, 0x2020) r8 = socket$kcm(0x10, 0x2, 0x4) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x9, 0x0, 0x81, 0xffffffff}) sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x3}, 0x6e) r9 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r9, 0x0, 0x0, 0x48000) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000540), &(0x7f0000000680)=0x8) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xc, 0x0, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r9, 0x84, 0x19, &(0x7f00000000c0)={0x0, 0x160}, 0x8) r10 = creat(&(0x7f00000004c0)='./file0\x00', 0x120) ioctl$KVM_CAP_SPLIT_IRQCHIP(r10, 0x4068aea3, 0x0) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r12 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r12, 0x4b72, &(0x7f0000000480)={0x1, 0x0, 0x17, 0x1d, 0x1f8, &(0x7f0000000080)}) 1.150954692s ago: executing program 5 (id=6683): r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r0, 0x0, 0xa) fchdir(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1c8080, 0x81) getdents(r3, &(0x7f0000000200)=""/4096, 0x1000) 1.098624339s ago: executing program 5 (id=6684): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0xffff}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000240), &(0x7f0000000280)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000085ffffff0000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(r1, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000700), 0x0, &(0x7f00000019c0)=""/151, 0x97}}, {{0x0, 0x0, &(0x7f0000002c00)=[{0x0}, {0x0}], 0x2, &(0x7f0000002c40)=""/216, 0xd8}, 0x10001}], 0x2, 0x40010000, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000000)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000100)=0x28) 811.226176ms ago: executing program 1 (id=6685): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000016c0)) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000003c0)={0x1}) r1 = socket$kcm(0x10, 0x3, 0x10) syz_emit_ethernet(0x106, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000280)="1400000016001963d25a80648c56915a1974a8d9", 0x14}], 0x1}, 0x44000) recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4) 810.795828ms ago: executing program 6 (id=6686): mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2000009, 0x2172, 0xffffffffffffffff, 0x60f4b000) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r1 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\n\x8c0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) close(0x3) io_uring_register$IORING_REGISTER_MEM_REGION(0xffffffffffffffff, 0x22, &(0x7f0000000200)={&(0x7f00000001c0)={0x0, 0x0, 0x0, 0xc, 0xb}, 0x1}, 0x1) socket$xdp(0x2c, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x1, 0x5, 0x9, 0x10008, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0xffffffff, 0x2, 0x6, 0x7, 0x81, 0x9, 0x79, 0x25713dc3, 0x10000, 0x0, 0x95, 0x4, 0x4, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x1000, 0xef1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x8, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff3f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x7, 0xf1, 0x4, 0x1, 0xffff, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0xfffffffe, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0x5, 0xd3, 0x408, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0x4, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0x40bfc, 0x8, 0x5, 0x7f, 0x2a29, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x1, 0x19d86, 0xd, 0xfffffff7, 0x8, 0x6, 0x5396, 0x3, 0x200006, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x8, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x201, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8008, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x2, 0x1, 0x9]}, 0x45c) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x2, 0xe5e54be0630c28fa, 0x4, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'gre0\x00', &(0x7f0000000200)=@ethtool_ringparam={0x10, 0x80000001, 0x3, 0x1, 0xd, 0xefe, 0x0, 0x0, 0x8}}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)={0x3c, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}]}, @NL80211_ATTR_BSS_BASIC_RATES={0x5, 0x24, [{0x1, 0x1}]}]}, 0x3c}}, 0x0) 190.593522ms ago: executing program 1 (id=6688): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) futex(0x0, 0xd, 0x4, 0x0, 0x0, 0xfffffffe) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000ec0), 0xffffffffffffffff) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="000000000000000a140000001100010000bc58ee18bbde7cea1c23000000000000000000000a00000d07eb6ac8e48f5b788a3f9e68559c8cbf7a892a7966ca44c578a6ed620aff2059ef1326c876d4696ad44ee2b010c790c1258ca0d9f7c4d37d1d865fe1d0c8627350efedd9115870999a72bee4353278"], 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYRESHEX=r0], 0x14}, 0x1, 0x0, 0x0, 0x4008844}, 0x30004016) r2 = syz_open_dev$dri(&(0x7f0000000340), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xd9}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4c840}, 0x8010) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYBLOB='\a\x00'/20, @ANYRES32=r4, @ANYRES32=r0, @ANYBLOB="01000000050000000300"/28], 0x50) poll(&(0x7f0000000040), 0x0, 0x9) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000001300020000000900010073797a300000000058000000120a01040000000000000000020000000900010073797a30000000000900020073797a30000000000800030000000004240004800c0001000000001c000000010c00020000000000000000010800040000000001"], 0xbc}, 0x1, 0x0, 0x0, 0x40000851}, 0x0) move_mount(r0, 0x0, r0, 0x0, 0x266) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="360000005dd5996338566d56ad0a6f3337a4029c0f57449c81ed0b16fa697a163c452b2358de6ce5fd7fa3cd6cec3592257c07f7decc74d5caa955cf40646eac1457c94f17adc4bebf9cb9fbff1aa574ce2e22bf36466d6cd418d2a77c77a822b74d535ac755644af20291b9e209", @ANYRES16=0x0, @ANYRES8=r10, @ANYRES32=r9, @ANYBLOB="08004d01"], 0x24}, 0x1, 0x0, 0x0, 0x51}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000000)={"b9864c57ebeb2cf9cdc23b1bf545ee7185fbbd183fcb507ca6bcc4d3845eeb7a"}) r11 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r11, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) 103.155228ms ago: executing program 5 (id=6689): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x1c, r1, 0xffffffffffffffff, 0x170bd2c, 0x8000, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xb8, 0x2000000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6008010}, 0x20000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000)=0x3, 0x4) 0s ago: executing program 5 (id=6690): r0 = socket$inet6(0xa, 0x80802, 0x0) sendmmsg$inet6(r0, &(0x7f0000004bc0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x40, @local, 0x200}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1400000000000000290000003e00000006000000000000002400000000000000290000003200000000000000000000000000ffffac1414aa8b"], 0x40}}], 0x1, 0x401c040) syz_usb_connect$uac1(0x3, 0x82, &(0x7f0000000180)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70, 0x3, 0x1, 0x4, 0xa8, 0x3f, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xc5c5, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x88292dbfc6105e23, 0x7, 0x80, 0x9, {0x7, 0x25, 0x1, 0xc, 0xfa, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0xff, 0xa, 0x8, 0x9}, @as_header={0x7, 0x24, 0x1, 0x10, 0x3, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x218, 0x1c, 0x14, 0x2, {0x7, 0x25, 0x1, 0xc, 0x61, 0x8}}}}}}}}]}}, &(0x7f00000009c0)={0xa, &(0x7f0000000900)={0xa, 0x6, 0x201, 0x5, 0x0, 0x1, 0x20, 0x6}, 0x0, 0x0}) kernel console output (not intermixed with test programs): x115/0x350 [ 1575.548248][T28353] ? __fget_files+0x2a/0x420 [ 1575.548265][T28353] ? __pfx_bpf_check_cfg+0x10/0x10 [ 1575.548285][T28353] ? fput+0xa0/0xd0 [ 1575.548307][T28353] ? add_used_map+0xff/0x110 [ 1575.548327][T28353] ? array_map_direct_value_addr+0x7c/0x100 [ 1575.548352][T28353] ? check_and_resolve_insns+0x1d54/0x21d0 [ 1575.548381][T28353] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 1575.548402][T28353] ? add_kfuncs+0x251/0x2e0 [ 1575.548425][T28353] bpf_check+0x24b6/0x2e10 [ 1575.548453][T28353] ? ktime_get_with_offset+0x93/0x2d0 [ 1575.548467][T28353] ? __pfx_bpf_check+0x10/0x10 [ 1575.548479][T28353] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1575.548496][T28353] bpf_prog_load+0x14d6/0x1c20 [ 1575.548513][T28353] ? __pfx_bpf_prog_load+0x10/0x10 [ 1575.548537][T28353] __sys_bpf+0xd0d/0xd90 [ 1575.548561][T28353] ? __pfx___sys_bpf+0x10/0x10 [ 1575.548578][T28353] ? __fget_files+0x2a/0x420 [ 1575.548599][T28353] ? ksys_write+0x242/0x270 [ 1575.548615][T28353] ? __pfx_ksys_write+0x10/0x10 [ 1575.548631][T28353] __x64_sys_bpf+0xba/0xd0 [ 1575.548644][T28353] do_syscall_64+0x166/0x520 [ 1575.548660][T28353] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1575.548671][T28353] ? clear_bhb_loop+0x70/0xc0 [ 1575.548683][T28353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1575.548694][T28353] RIP: 0033:0x7f088d59e159 [ 1575.548705][T28353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1575.548714][T28353] RSP: 002b:00007f088e3f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1575.548728][T28353] RAX: ffffffffffffffda RBX: 00007f088d825fa0 RCX: 00007f088d59e159 [ 1575.548736][T28353] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 1575.548743][T28353] RBP: 00007f088e3f0090 R08: 0000000000000000 R09: 0000000000000000 [ 1575.548750][T28353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1575.548756][T28353] R13: 00007f088d826038 R14: 00007f088d825fa0 R15: 00007f088d94fa48 [ 1575.548772][T28353] [ 1576.513224][T28375] loop4: detected capacity change from 0 to 7 [ 1576.523562][T28375] Dev loop4: unable to read RDB block 7 [ 1576.529662][T28375] loop4: unable to read partition table [ 1576.535662][T28375] loop4: partition table beyond EOD, truncated [ 1576.535678][T28375] loop_reread_partitions: partition scan of loop4 (þ虫xü—ŸÑà– ) failed (rc=-5) [ 1576.889870][T12156] usb 6-1: new full-speed USB device number 95 using dummy_hcd [ 1577.060030][T12156] usb 6-1: New USB device found, idVendor=2b73, idProduct=003c, bcdDevice= 0.40 [ 1577.073564][T12156] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 4 [ 1577.073612][T12156] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 1577.100475][T12156] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1577.100517][T12156] usb 6-1: Product: syz [ 1577.100571][T12156] usb 6-1: Manufacturer: syz [ 1577.100591][T12156] usb 6-1: SerialNumber: syz [ 1577.276018][T28387] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1577.761287][T28412] loop4: detected capacity change from 0 to 7 [ 1577.775456][T28412] Dev loop4: unable to read RDB block 7 [ 1577.781684][T28412] loop4: unable to read partition table [ 1577.788436][T28412] loop4: partition table beyond EOD, truncated [ 1577.795604][T28412] loop_reread_partitions: partition scan of loop4 (þ虫xü—ŸÑà– ) failed (rc=-5) [ 1578.071958][T28416] loop3: detected capacity change from 0 to 7 [ 1578.075045][T28416] loop3: p1 p4 [ 1578.075069][T28416] loop3: partition table partially beyond EOD, truncated [ 1578.326777][ T25] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1578.489510][ T25] usb 2-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 1578.490499][ T25] usb 2-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 1578.490567][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1578.508867][ T25] usb 2-1: 1:1 : no or invalid class specific endpoint descriptor [ 1578.545949][T28424] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6312'. [ 1578.704416][ T25] usb 2-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 4) [ 1578.783276][T28428] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6313'. [ 1578.960997][ T25] usb 2-1: USB disconnect, device number 110 [ 1579.166786][ T5677] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1579.316756][ T5677] usb 5-1: Using ep0 maxpacket: 16 [ 1579.322114][ T5677] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 1579.324969][ T5677] usb 5-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 1579.324993][ T5677] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1579.330441][ T5677] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1579.330464][ T5677] usb 5-1: SerialNumber: syz [ 1579.354611][ T5677] usb 5-1: 0:2 : does not exist [ 1579.595486][ T5677] usb 5-1: 5:0: cannot get min/max values for control 4 (id 5) [ 1579.611337][ T5677] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1579.629130][ T5677] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1579.651157][ T5677] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 1579.724410][ T5677] usb 5-1: 5:0: failed to get current value for ch 2 (-22) [ 1579.738168][T17788] net_ratelimit: 96 callbacks suppressed [ 1579.738211][T17788] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1579.758050][T17788] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1579.760401][ T5677] usb 5-1: 5:0: failed to get current value for ch 3 (-22) [ 1579.780016][T17766] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1579.806888][T17766] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1579.827536][T17766] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1579.848082][T28310] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1579.853457][ T5677] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1579.867647][T28310] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1579.887636][T17787] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1579.887673][T17787] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 1579.940094][T28436] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1579.953035][ T5677] usb 5-1: USB disconnect, device number 87 [ 1579.997157][T17787] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1580.138730][T12156] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1580.188576][T12156] usb 6-1: USB disconnect, device number 95 [ 1580.782360][T28451] loop4: detected capacity change from 0 to 7 [ 1580.790368][T28451] Dev loop4: unable to read RDB block 7 [ 1580.790409][T28451] loop4: unable to read partition table [ 1580.790534][T28451] loop4: partition table beyond EOD, truncated [ 1580.790549][T28451] loop_reread_partitions: partition scan of loop4 (þ虫xü—ŸÑà– ) failed (rc=-5) [ 1581.007108][T28453] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6317'. [ 1581.016304][T28443] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6317'. [ 1581.045240][T28458] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1581.058136][T28456] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6322'. [ 1581.356016][T28464] overlayfs: failed to resolve 'ô$½ÒãW¿­»=ê¥&©(°úU6ÛËmR aM¿]d`Ä­®€ÉùÝÕ­<0&…ˆÉÇŽ°è45h1YáˆYF8¥XŠnÌ È¿7лÿ?i­@Å€à|ÌÖfêS—Åù!üúq¦NÑœ§g°MelhÅìScY~çÏÛñiäRV»;,ÉœÌ:‡‹´½€0fWúü·L3噦°ïLL;†Œw/á¨ïž¯i­þcnjïÞƒ¥,Œ¹}e¥,—¸Ë¿•+­Ñ5ûÜÃOƒê+ƒàâ”x†(—c#ŠìúÁô÷Ó˜M®„‘†ûo': -2 [ 1581.600057][T13178] Bluetooth: hci3: unexpected event for opcode 0x2039 [ 1581.616222][T28469] loop3: detected capacity change from 0 to 7 [ 1581.619476][T28469] loop3: p1 p4 [ 1581.619498][T28469] loop3: partition table partially beyond EOD, truncated [ 1581.640368][T28473] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6324'. [ 1582.428746][ T1219] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 1582.591561][ T1219] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1582.591629][ T1219] usb 2-1: New USB device found, idVendor=1235, idProduct=8002, bcdDevice= 0.40 [ 1582.592641][ T1219] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 138, changing to 7 [ 1582.594561][ T1219] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1582.594583][ T1219] usb 2-1: Product: 釯続∆墄羔轮ë‚⤽὞ï¦è€€å·¿Þƒë†¥ë²¢â ä„¿ [ 1582.594599][ T1219] usb 2-1: Manufacturer: й [ 1582.594613][ T1219] usb 2-1: SerialNumber: 넂섉髀ᕷ㯵謹ç¬á“–ಥ拯뱺슣샞퉉⌕憑äŽæ¿¼éˆ»ë¨ë³°çŠºë쑟猭ບ妦⬟鰿⼆èˆÈ¦ä¥°ë‰‘ꨦ鋕ዌꔦ姧౜í°î»§ë–ƒê’¬ç•„芪⿙♽圓⌠銋㘔î³â­â‚™îˆ‡å¶«å„„୦홢欷Ṓ㚔䧒뙛퀊뤼䚪ﲗ쾈䵊蹤î˜íœ¥ê­±ê½„飑ë°ã¨ŽêŒ¶ãŽ€äŽ„鵰‡鱳뚚蒰湈 [ 1582.730953][ T31] kauditd_printk_skb: 152 callbacks suppressed [ 1582.731019][ T31] audit: type=1326 audit(1788617651.086:4885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28491 comm="syz.5.6331" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f088d59e159 code=0x0 [ 1582.922711][ T1219] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1582.923254][ T1219] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1583.019129][ T1219] usb 2-1: USB disconnect, device number 111 [ 1583.140919][ T31] audit: type=1326 audit(1788617651.496:4886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28501 comm="syz.4.6332" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f719fb9e159 code=0x0 [ 1583.545069][T28509] binder_alloc: 28508: binder_alloc_buf, no vma [ 1583.655223][T28511] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6335'. [ 1583.655269][T28511] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6335'. [ 1583.667765][T28511] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6335'. [ 1583.667786][T28511] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6335'. [ 1583.868495][T28521] nvme_fabrics: unknown parameter or missing value '#! »›¦1ÝÖæ³R¹Û?¾Ó&nâ¶õ%²ßõƒºë“~ˆÜì[6=pÍŠyz\UÔj@5NãfåWÎrs„)ìq²‰' in ctrl creation request [ 1584.193552][T28523] input: syz0 as /devices/virtual/input/input184 [ 1584.286946][ T9] usb 5-1: new full-speed USB device number 88 using dummy_hcd [ 1584.464034][ T9] usb 5-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df [ 1584.475766][ T9] usb 5-1: config 201 has an invalid interface number: 249 but max is 0 [ 1584.475814][ T9] usb 5-1: config 201 has no interface number 0 [ 1584.490861][ T9] usb 5-1: config 201 interface 249 altsetting 4 has an endpoint descriptor with address 0xF1, changing to 0x81 [ 1584.491621][ T9] usb 5-1: config 201 interface 249 altsetting 4 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 1584.491674][ T9] usb 5-1: config 201 interface 249 has no altsetting 0 [ 1584.529118][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1584.529159][ T9] usb 5-1: Product: syz [ 1584.529200][ T9] usb 5-1: Manufacturer: syz [ 1584.529212][ T9] usb 5-1: SerialNumber: syz [ 1584.794551][ T9] ath6kl: Failed to submit usb control message: -71 [ 1584.794619][ T9] ath6kl: unable to send the bmi data to the device: -71 [ 1584.794633][ T9] ath6kl: Unable to send get target info: -71 [ 1584.807020][ T9] ath6kl: Failed to init ath6kl core: -71 [ 1584.828693][T17766] net_ratelimit: 104 callbacks suppressed [ 1584.829121][T17766] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1584.829145][T17766] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 1584.832197][ T9] ath6kl_usb 5-1:201.249: probe with driver ath6kl_usb failed with error -71 [ 1584.845024][ T9] usb 5-1: USB disconnect, device number 88 [ 1584.940622][T17781] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1584.940673][T17781] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 1585.047379][T17766] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1585.047434][T17766] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 1585.157138][T17775] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1585.157195][T17775] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 1585.277202][T17781] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1585.277258][T17781] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 1585.575231][T28550] input: syz1 as /devices/virtual/input/input185 [ 1585.595113][T28550] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6344'. [ 1585.655207][T28549] bond1: entered allmulticast mode [ 1585.662541][T28549] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1585.672247][T28553] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6344'. [ 1585.713076][ T31] audit: type=1326 audit(1788617654.066:4887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28554 comm="syz.5.6346" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f088d59e159 code=0x7ffc0000 [ 1585.713306][ T31] audit: type=1326 audit(1788617654.066:4888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28554 comm="syz.5.6346" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f088d59e159 code=0x7ffc0000 [ 1585.717583][ T31] audit: type=1326 audit(1788617654.076:4889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28554 comm="syz.5.6346" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f088d59e159 code=0x7ffc0000 [ 1585.719309][ T31] audit: type=1326 audit(1788617654.076:4890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28554 comm="syz.5.6346" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f088d59e159 code=0x7ffc0000 [ 1585.719517][ T31] audit: type=1326 audit(1788617654.076:4891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28554 comm="syz.5.6346" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f088d59e159 code=0x7ffc0000 [ 1585.719782][ T31] audit: type=1326 audit(1788617654.076:4892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28554 comm="syz.5.6346" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f088d59e159 code=0x7ffc0000 [ 1585.720316][ T31] audit: type=1326 audit(1788617654.076:4893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28554 comm="syz.5.6346" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f088d59e159 code=0x7ffc0000 [ 1585.720495][ T31] audit: type=1326 audit(1788617654.076:4894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28554 comm="syz.5.6346" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f088d59e159 code=0x7ffc0000 [ 1586.049577][T28557] syzkaller1: entered promiscuous mode [ 1586.049617][T28557] syzkaller1: entered allmulticast mode [ 1586.064836][T28559] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 1586.084312][T28557] netlink: 'syz.4.6347': attribute type 12 has an invalid length. [ 1586.379402][T28553] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1586.576416][T28560] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 1586.634193][T28577] sctp: [Deprecated]: syz.1.6353 (pid 28577) Use of int in max_burst socket option. [ 1586.634193][T28577] Use struct sctp_assoc_value instead [ 1586.887838][ T25] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1587.046797][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 1587.048430][ T25] usb 2-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 1587.049375][ T25] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 1587.054157][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1587.054182][ T25] usb 2-1: Product: 咨澦åšç œæµ§ì¹ˆÞžëŸ»íˆ¤ã²’梨ổ쌚嶷ೞ블౓処쵲诚æ´ä—ƒëŠŒà¨È‘嵧뛠彯哹ힺ톋㩧羊毼疌雭낞䞥ᄟꄉã•ä‡‘ë¾ä”¦è¤¶è‚¼á¤ªëš§é¡ìª¼è­æ¾¯á†µæ‡­æ¬†ëší…“ᩉ䧗çŸí‚Ÿä¹¿ï¾›ê¡•å½•í‹ªà¸¨í›¢â¿–ꤑᠦ窆씬◳êœáš½íŒ·à®—᧠ז김頟䯵í—걽賊湺牰螕쬫쇠ä¢å†›î„èŠè”¨ê¦€ãŸ„賉磉쪖闔⼹ã©ã‰ì„î™» [ 1587.054211][ T25] usb 2-1: Manufacturer: ⊠[ 1587.054224][ T25] usb 2-1: SerialNumber: ㎆谊癣Ⲡ套ῃä¤îšˆé±žä¿‰ä˜¸âƒ°êŠ¾á‘€ï¼ªì—®à¡†à»Šë±ì£½áŽ‹â¼†î‹ä£…쯫왲ዓ텖蹋â㧹쨄쌗濧ݠಳಯâ«ã³éŽà±«í‰â ƒÛ¯î¡¼é‚‘昕䴾늦㼯 [ 1587.481315][T28577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1587.481810][T28577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1587.489028][T28594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1587.489523][T28594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1587.549538][ T25] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1587.549614][ T25] usb 2-1: MIDIStreaming interface descriptor not found [ 1587.656759][ T9987] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1587.736055][ T25] usb 2-1: USB disconnect, device number 112 [ 1587.807068][ T9987] usb 5-1: Using ep0 maxpacket: 16 [ 1587.809780][ T9987] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 1587.813635][ T9987] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1587.813657][ T9987] usb 5-1: Product: syz [ 1587.813671][ T9987] usb 5-1: Manufacturer: syz [ 1587.813684][ T9987] usb 5-1: SerialNumber: syz [ 1588.029235][ T9987] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 1588.033682][ T9987] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1588.034023][ T9987] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 1588.034064][ T9987] usb 5-1: media controller created [ 1588.072933][ T9987] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1588.249980][ T9987] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1588.365211][ T9987] dvb_usb_gl861 5-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 1588.375045][ T9987] usb 5-1: USB disconnect, device number 89 [ 1588.382302][ T31] kauditd_printk_skb: 48 callbacks suppressed [ 1588.382361][ T31] audit: type=1326 audit(1788617656.736:4943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28606 comm="syz.1.6361" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7be9d9e159 code=0x0 [ 1588.484830][T28607] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1588.502250][T28607] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1588.502787][ T5677] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 1588.505876][T28607] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 1588.647863][ T5677] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1588.659153][ T5677] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1588.659201][ T5677] usb 6-1: Product: syz [ 1588.659216][ T5677] usb 6-1: Manufacturer: syz [ 1588.659229][ T5677] usb 6-1: SerialNumber: syz [ 1588.896870][T13178] Bluetooth: hci2: command 0x0406 tx timeout [ 1588.964989][ T5677] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1588.965044][ T5677] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1588.991208][ T5677] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 1589.004500][ T5677] usb 6-1: USB disconnect, device number 96 [ 1589.503764][T28625] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1589.546848][ T5677] usb 2-1: new full-speed USB device number 113 using dummy_hcd [ 1589.728239][T28631] FAULT_INJECTION: forcing a failure. [ 1589.728239][T28631] name failslab, interval 1, probability 0, space 0, times 0 [ 1589.728296][T28631] CPU: 1 UID: 0 PID: 28631 Comm: syz.5.6368 Tainted: G L syzkaller #0 PREEMPT(full) [ 1589.728321][T28631] Tainted: [L]=SOFTLOCKUP [ 1589.728327][T28631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1589.728336][T28631] Call Trace: [ 1589.728342][T28631] [ 1589.728349][T28631] dump_stack_lvl+0xe8/0x150 [ 1589.728379][T28631] should_fail_ex+0x410/0x560 [ 1589.728413][T28631] should_failslab+0xa8/0x100 [ 1589.728437][T28631] __kvmalloc_node_noprof+0x176/0x820 [ 1589.728459][T28631] ? __kvmalloc_node_noprof+0x345/0x820 [ 1589.728475][T28631] ? bpf_compute_postorder+0xda/0x970 [ 1589.728502][T28631] ? bpf_compute_postorder+0xda/0x970 [ 1589.728530][T28631] bpf_compute_postorder+0xda/0x970 [ 1589.728560][T28631] ? bpf_prune_dead_branches+0x7e1/0xab0 [ 1589.728587][T28631] bpf_check+0x2581/0x2e10 [ 1589.728616][T28631] ? ktime_get_with_offset+0x93/0x2d0 [ 1589.728639][T28631] ? __pfx_bpf_check+0x10/0x10 [ 1589.728661][T28631] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1589.728689][T28631] bpf_prog_load+0x14d6/0x1c20 [ 1589.728719][T28631] ? __pfx_bpf_prog_load+0x10/0x10 [ 1589.728763][T28631] __sys_bpf+0xd0d/0xd90 [ 1589.728790][T28631] ? __pfx___sys_bpf+0x10/0x10 [ 1589.728820][T28631] ? __fget_files+0x2a/0x420 [ 1589.728859][T28631] ? ksys_write+0x242/0x270 [ 1589.728886][T28631] ? __pfx_ksys_write+0x10/0x10 [ 1589.728915][T28631] __x64_sys_bpf+0xba/0xd0 [ 1589.728936][T28631] do_syscall_64+0x166/0x520 [ 1589.728962][T28631] ? trace_irq_disable+0x3b/0x140 [ 1589.728979][T28631] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1589.728998][T28631] ? clear_bhb_loop+0x70/0xc0 [ 1589.729019][T28631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1589.729037][T28631] RIP: 0033:0x7f088d59e159 [ 1589.729055][T28631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1589.729077][T28631] RSP: 002b:00007f088e3f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1589.729097][T28631] RAX: ffffffffffffffda RBX: 00007f088d825fa0 RCX: 00007f088d59e159 [ 1589.729109][T28631] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 1589.729121][T28631] RBP: 00007f088e3f0090 R08: 0000000000000000 R09: 0000000000000000 [ 1589.729133][T28631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1589.729144][T28631] R13: 00007f088d826038 R14: 00007f088d825fa0 R15: 00007f088d94fa48 [ 1589.729173][T28631] [ 1589.743398][ T5677] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1589.745192][ T5677] usb 2-1: not running at top speed; connect to a high speed hub [ 1589.745222][ T5677] usb 2-1: New USB device found, idVendor=041e, idProduct=3030, bcdDevice= 0.40 [ 1589.753302][ T5677] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1589.753323][ T5677] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1589.758724][ T5677] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1589.758748][ T5677] usb 2-1: Product: syz [ 1589.758760][ T5677] usb 2-1: Manufacturer: syz [ 1589.758773][ T5677] usb 2-1: SerialNumber: syz [ 1589.897290][T17787] net_ratelimit: 128 callbacks suppressed [ 1589.897329][T17787] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1589.916971][T17766] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1589.916998][T17766] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 1589.981206][T28622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1589.989160][T28622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1590.029165][T28309] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1590.049773][T28309] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1590.069497][T17788] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1590.081305][T28639] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6366'. [ 1590.086917][T17788] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1590.110084][T17788] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1590.126913][T17787] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1590.149252][T17788] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1590.199775][ T5677] usb 2-1: unit 9 not found! [ 1590.426287][ T5677] usb 2-1: USB disconnect, device number 113 [ 1590.781290][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88807585fc00: rx timeout, send abort [ 1590.849335][T28660] loop4: detected capacity change from 0 to 7 [ 1590.851129][T28660] Dev loop4: unable to read RDB block 7 [ 1590.851169][T28660] loop4: unable to read partition table [ 1590.851369][T28660] loop4: partition table beyond EOD, truncated [ 1590.851384][T28660] loop_reread_partitions: partition scan of loop4 (þ虫xü—ŸÑà– ) failed (rc=-5) [ 1590.908067][T28659] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6375'. [ 1590.908269][T28659] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6375'. [ 1590.955177][T28659] loop5: detected capacity change from 0 to 7 [ 1590.960867][T28659] Dev loop5: unable to read RDB block 7 [ 1590.960898][T28659] loop5: AHDI p1 p2 p3 [ 1590.960917][T28659] loop5: partition table partially beyond EOD, truncated [ 1590.961104][T28659] loop5: p1 start 1818582900 is beyond EOD, truncated [ 1590.961122][T28659] loop5: p3 start 335544320 is beyond EOD, truncated [ 1591.281439][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88807585fc00: abort rx timeout. Force session deactivation [ 1591.281737][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88807585f800: rx timeout, send abort [ 1591.384883][T28675] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[23221] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ /proc/sys/net/ipv4/tcp_wmem [ 1591.508991][T28677] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1591.597650][ T5677] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1591.747644][ T5677] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1591.748870][ T5677] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1591.748898][ T5677] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1591.749860][ T5677] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1591.749881][ T5677] usb 2-1: Manufacturer: syz [ 1591.754088][ T5677] usb 2-1: config 0 descriptor?? [ 1591.781778][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88807585f800: abort rx timeout. Force session deactivation [ 1592.013948][T28695] can: request_module (can-proto-3) failed. [ 1592.185733][T28701] input: syz1 as /devices/virtual/input/input186 [ 1592.332051][T28704] loop4: detected capacity change from 0 to 7 [ 1592.356279][T28704] Dev loop4: unable to read RDB block 7 [ 1592.356342][T28704] loop4: unable to read partition table [ 1592.356565][T28704] loop4: partition table beyond EOD, truncated [ 1592.356582][T28704] loop_reread_partitions: partition scan of loop4 (þ虫xü—ŸÑà– ) failed (rc=-5) [ 1592.386078][T28673] qrtr: Invalid version 0 [ 1592.421821][T28696] syz.5.6386 (28696): drop_caches: 2 [ 1592.602764][ T5677] input: syz Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.005A/input/input187 [ 1592.735404][ T5677] input: syz Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.005A/input/input188 [ 1592.788081][ T5677] input: syz Touch Strip as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.005A/input/input189 [ 1592.881543][ T5677] input: syz Dial as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.005A/input/input190 [ 1592.921348][ T5677] uclogic 0003:256C:006D.005A: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.1-1/input0 [ 1592.943823][ T5677] usb 2-1: USB disconnect, device number 114 [ 1593.291263][T28721] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6392'. [ 1593.962460][T17766] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 1593.972846][T28737] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 1594.196841][ T5677] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 1594.346782][ T5677] usb 6-1: Using ep0 maxpacket: 8 [ 1594.347584][ T5677] usb 6-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1594.348736][ T5677] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1594.348759][ T5677] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1594.348815][ T5677] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1594.351109][ T5677] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1594.351137][ T5677] usb 6-1: Product: syz [ 1594.351160][ T5677] usb 6-1: Manufacturer: syz [ 1594.351176][ T5677] usb 6-1: SerialNumber: syz [ 1594.907327][T17787] net_ratelimit: 112 callbacks suppressed [ 1594.907373][T17787] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1594.907425][T17787] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 1595.016920][T28309] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1595.016972][T28309] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 1595.060143][T28742] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1595.126932][T17781] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1595.147047][T17766] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1595.147102][T17766] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 1595.171209][T28737] lo: Caught tx_queue_len zero misconfig [ 1595.243456][T28737] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 1595.258044][T17766] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1595.258104][T17766] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 1595.300742][ T5677] usb 6-1: 1:1: cannot get freq (v2/v3): err -71 [ 1595.303144][ T5677] usb 6-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1595.460060][ T5677] usb 6-1: USB disconnect, device number 97 [ 1595.633361][T28747] loop4: detected capacity change from 0 to 7 [ 1595.643342][T28747] Dev loop4: unable to read RDB block 7 [ 1595.643401][T28747] loop4: unable to read partition table [ 1595.643623][T28747] loop4: partition table beyond EOD, truncated [ 1595.643649][T28747] loop_reread_partitions: partition scan of loop4 (þ虫xü—ŸÑà– ) failed (rc=-5) [ 1595.672967][T12156] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1595.826861][T12156] usb 2-1: Using ep0 maxpacket: 32 [ 1595.833169][T12156] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1595.844256][T12156] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 1595.844295][T12156] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1595.844315][T12156] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1595.844331][T12156] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1595.844377][T12156] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1595.847221][T12156] usb 2-1: config 0 descriptor?? [ 1595.899242][ T9987] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1596.056769][ T9987] usb 5-1: Using ep0 maxpacket: 32 [ 1596.063705][ T9987] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1596.077611][ T9987] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1596.085755][ T9987] usb 5-1: Product: syz [ 1596.085776][ T9987] usb 5-1: Manufacturer: syz [ 1596.085790][ T9987] usb 5-1: SerialNumber: syz [ 1596.104056][ T9987] usb 5-1: config 0 descriptor?? [ 1596.159723][ T31] audit: type=1326 audit(1788617664.516:4944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28744 comm="syz.1.6398" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7be9d9e159 code=0x7ffc0000 [ 1596.184851][ T5677] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 1596.193842][ T31] audit: type=1326 audit(1788617664.516:4945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28744 comm="syz.1.6398" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7be9d9e159 code=0x7ffc0000 [ 1596.219124][ T31] audit: type=1326 audit(1788617664.516:4946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28744 comm="syz.1.6398" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7be9d9e159 code=0x7ffc0000 [ 1596.219170][ T31] audit: type=1326 audit(1788617664.516:4947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28744 comm="syz.1.6398" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f7be9d9e159 code=0x7ffc0000 [ 1596.219211][ T31] audit: type=1326 audit(1788617664.556:4948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28744 comm="syz.1.6398" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7be9d9e159 code=0x7ffc0000 [ 1596.219271][ T31] audit: type=1326 audit(1788617664.556:4949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28744 comm="syz.1.6398" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7be9d9e159 code=0x7ffc0000 [ 1596.219308][ T31] audit: type=1326 audit(1788617664.556:4950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28744 comm="syz.1.6398" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7be9d9e159 code=0x7ffc0000 [ 1596.219350][ T31] audit: type=1326 audit(1788617664.556:4951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28744 comm="syz.1.6398" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7be9d9e159 code=0x7ffc0000 [ 1596.219412][ T31] audit: type=1326 audit(1788617664.556:4952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28744 comm="syz.1.6398" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7be9d9e159 code=0x7ffc0000 [ 1596.219450][ T31] audit: type=1326 audit(1788617664.556:4953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28744 comm="syz.1.6398" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7be9d9e159 code=0x7ffc0000 [ 1596.298779][T12156] usb 2-1: USB disconnect, device number 115 [ 1596.448895][ T5677] usb 6-1: Using ep0 maxpacket: 32 [ 1596.467285][ T5677] usb 6-1: New USB device found, idVendor=056a, idProduct=0015, bcdDevice= 0.40 [ 1596.478014][ T5677] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1596.489235][ T5677] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1596.499740][ T5677] usb 6-1: Product: ꙳ᯄ賂㪻ࢯ낻㑊殅眾ߜ雯他暅îƒì‰®äªë ›äœ¢ç¾§æ‚¿äœ æ´ºí™ïºžè Šîž¼å»°ï³´å±Ÿî‰©ï¬•æ‹æš”㳅ꌹ㚪ë˜ê—†ä©€è§‚䤳´ሎ瀄޷䳟츰ጙ袳ᶹ舋ã湲ᔙ䰧︯齳䲷눟⫈䲻惜å¢é†˜çªë£ºêµºã¡…हë…ìƒà¢ê’»ä„¨è ­ï§™è¯™æ™„è”ដ걢昅⻊ [ 1596.526057][ T5677] usb 6-1: Manufacturer: 렣䵭ታ濖ﯿᡮ䧷嚓쮋㮹铖鰮֌䌬䕡çŽí’¯â¸¯ê´ä•è¤§ì²„린ê†èººà´›â¼´ê„£ì…©à¤œâ‰¢á¿ž [ 1596.526106][ T5677] usb 6-1: SerialNumber: ÒŽä± í¼åŸ¬ì‹¿Ë²ì“몭ìŸá°®çšŒçŽ‰é·å³â­¸ç»ä–½â°·â™†îž£ë¬ºà¿½à»³ä¹ï¼šëŒ½ìº€î˜•ç ½è’¯â»¢å‹ê‹ã˜î·³ïŽ½æ…›å´ëŸªã˜¦ë’Ÿç£½ã¸¡è¸¢ã¶°è°˜å•žãŸ¸ [ 1596.576482][ T9987] airspy 5-1:0.0: Board ID: 00 [ 1596.576671][ T9987] airspy 5-1:0.0: Firmware version: [ 1596.986266][T28760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1596.988286][T28760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1597.189595][ T5677] usbhid 6-1:1.0: can't add hid device: -71 [ 1597.189724][ T5677] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 1597.198423][ T5677] usb 6-1: USB disconnect, device number 98 [ 1597.268992][ T9] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1597.427430][ T9] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1597.441744][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1597.443358][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1597.444805][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1597.446661][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1597.447407][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1597.522324][ T9987] airspy 5-1:0.0: usb_control_msg() failed -71 request 0f [ 1597.534646][ T9987] airspy 5-1:0.0: Registered as swradio24 [ 1597.534672][ T9987] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1597.540015][ T9987] usb 5-1: USB disconnect, device number 90 [ 1597.960071][T28771] netlink: 'syz.5.6406': attribute type 1 has an invalid length. [ 1598.043421][T28771] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1598.102900][T28773] bond2: (slave geneve3): making interface the new active one [ 1598.121000][ T9] gud 2-1:1.0: Failed to add properties (error=-5) [ 1598.129011][ T9] gud 2-1:1.0: probe with driver gud failed with error -5 [ 1598.155070][T28773] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 1598.238207][T28775] ipvlan2: entered allmulticast mode [ 1598.238256][T28775] virt_wifi0: entered allmulticast mode [ 1598.242745][T28775] batman_adv: batadv0: Adding interface: ipvlan2 [ 1598.242763][T28775] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1598.242794][T28775] batman_adv: batadv0: Interface activated: ipvlan2 [ 1598.350337][T28775] ipvlan3: entered allmulticast mode [ 1598.360561][T28775] batman_adv: batadv0: Adding interface: ipvlan3 [ 1598.360604][T28775] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1598.362218][T28775] batman_adv: The newly added mac address (02:ff:8d:7e:0a:e5) already exists on: ipvlan2 [ 1598.362236][T28775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1598.362250][T28775] batman_adv: batadv0: Interface activated: ipvlan3 [ 1599.036884][T28786] loop4: detected capacity change from 0 to 7 [ 1599.043856][T28786] Dev loop4: unable to read RDB block 7 [ 1599.050180][T28786] loop4: unable to read partition table [ 1599.056238][T28786] loop4: partition table beyond EOD, truncated [ 1599.062566][T28786] loop_reread_partitions: partition scan of loop4 (þ虫xü—ŸÑà– ) failed (rc=-5) [ 1599.466801][ T9] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1599.618057][ T9] usb 5-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 1599.628488][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1599.628545][ T9] usb 5-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 1599.660206][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1599.660251][ T9] usb 5-1: Product: syz [ 1599.660291][ T9] usb 5-1: Manufacturer: syz [ 1599.660309][ T9] usb 5-1: SerialNumber: syz [ 1599.698769][ T9] usb-storage 5-1:1.0: USB Mass Storage device detected [ 1599.712043][ T9] usb-storage 5-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 1599.725144][ T9] scsi host1: usb-storage 5-1:1.0 [ 1599.738640][T28792] xt_hashlimit: size too large, truncated to 1048576 [ 1599.739508][T28792] xt_hashlimit: max too large, truncated to 1048576 [ 1599.916778][T17788] net_ratelimit: 122 callbacks suppressed [ 1599.916829][T17788] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1599.916851][T17788] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 1600.031992][T17788] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1600.032036][T17788] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 1600.050759][ T9] usb 2-1: USB disconnect, device number 116 [ 1600.136980][T17788] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1600.137808][T17788] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 1600.251953][T17788] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1600.252621][T17788] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 1600.332124][ T5685] usb 5-1: USB disconnect, device number 91 [ 1600.356837][T28309] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1600.356876][T28309] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 1600.626820][ T9] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 1600.808598][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1600.837255][ T9] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1600.921335][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1600.921380][ T9] usb 6-1: Product: syz [ 1600.921415][ T9] usb 6-1: Manufacturer: syz [ 1600.921432][ T9] usb 6-1: SerialNumber: syz [ 1601.182638][T28822] syz_tun: entered promiscuous mode [ 1601.202296][T28822] syz_tun: left promiscuous mode [ 1601.216147][ T9] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 99 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1601.490856][T12156] usb 6-1: USB disconnect, device number 99 [ 1601.532900][T12156] usblp0: removed [ 1602.222990][T28837] kvm: requested 135771 ns i8254 timer period limited to 200000 ns [ 1602.232911][T28837] kvm: requested 63695 ns i8254 timer period limited to 200000 ns [ 1602.246415][T28837] kvm: requested 124038 ns i8254 timer period limited to 200000 ns [ 1602.256973][T28837] kvm: requested 78781 ns i8254 timer period limited to 200000 ns [ 1602.258653][T28837] kvm: requested 158400 ns i8254 timer period limited to 200000 ns [ 1602.258925][T28837] kvm: requested 56152 ns i8254 timer period limited to 200000 ns [ 1602.259786][T28837] kvm: requested 10895 ns i8254 timer period limited to 200000 ns [ 1602.352018][T28837] kvm: requested 150019 ns i8254 timer period limited to 200000 ns [ 1602.352324][T28837] kvm: requested 186895 ns i8254 timer period limited to 200000 ns [ 1602.355015][T28837] kvm: requested 111466 ns i8254 timer period limited to 200000 ns [ 1602.870444][T28859] bridge0: port 1(macsec2) entered blocking state [ 1602.884619][T28859] bridge0: port 1(macsec2) entered disabled state [ 1602.884888][T28859] macsec2: entered allmulticast mode [ 1602.885953][T15936] Bluetooth: hci2: unexpected event for opcode 0x2039 [ 1602.917014][T28861] loop3: detected capacity change from 0 to 7 [ 1602.917955][T28861] loop3: p1 p4 [ 1602.917979][T28861] loop3: partition table partially beyond EOD, truncated [ 1602.950596][T28859] macsec2: entered promiscuous mode [ 1603.105029][T28863] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1603.105248][T28863] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1603.105331][T28863] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1603.146746][T28863] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1603.146866][T28863] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1603.186804][ T9987] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1603.254386][T28866] xt_nfacct: accounting object `syz0' does not exist [ 1603.338732][ T9987] usb 5-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 1603.341634][ T9987] usb 5-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 1603.341703][ T9987] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1603.382313][ T9987] usb 5-1: 1:1 : no or invalid class specific endpoint descriptor [ 1603.416785][T12156] usb 2-1: new full-speed USB device number 117 using dummy_hcd [ 1603.547349][T12156] usb 2-1: device descriptor read/64, error -71 [ 1603.562001][ T9987] usb 5-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 4) [ 1603.763266][ T9987] usb 5-1: USB disconnect, device number 92 [ 1603.827346][T12156] usb 2-1: new full-speed USB device number 118 using dummy_hcd [ 1603.976872][T12156] usb 2-1: device descriptor read/64, error -71 [ 1604.025888][T28890] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6437'. [ 1604.069202][T28890] xfrm0: Caught tx_queue_len zero misconfig [ 1604.088348][T12156] usb usb2-port1: attempt power cycle [ 1604.139282][T28890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1604.229880][T28890] loop8: detected capacity change from 0 to 7 [ 1604.252024][T28890] Dev loop8: unable to read RDB block 7 [ 1604.258421][T28890] loop8: unable to read partition table [ 1604.258665][T28890] loop8: partition table beyond EOD, truncated [ 1604.258684][T28890] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1604.426785][T12156] usb 2-1: new full-speed USB device number 119 using dummy_hcd [ 1604.447703][T12156] usb 2-1: device descriptor read/8, error -71 [ 1604.563806][T28900] vivid-000: disconnect [ 1604.569649][T28900] vivid-000: reconnect [ 1604.686769][T12156] usb 2-1: new full-speed USB device number 120 using dummy_hcd [ 1604.707448][T12156] usb 2-1: device descriptor read/8, error -71 [ 1604.827449][T12156] usb usb2-port1: unable to enumerate USB device [ 1604.967137][T28311] net_ratelimit: 87 callbacks suppressed [ 1604.968671][T28311] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1604.968698][T28311] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 1604.989333][T28909] loop5: detected capacity change from 0 to 7 [ 1604.998042][T28909] Dev loop5: unable to read RDB block 7 [ 1605.003811][T28909] loop5: unable to read partition table [ 1605.004074][T28909] loop5: partition table beyond EOD, truncated [ 1605.004100][T28909] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1605.080889][T28309] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1605.080926][T28309] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 1605.136941][T15936] Bluetooth: hci4: command 0x0406 tx timeout [ 1605.136966][T13178] Bluetooth: hci3: command 0x0c1a tx timeout [ 1605.156332][T28912] netlink: 88 bytes leftover after parsing attributes in process `syz.0.6443'. [ 1605.187454][T28309] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1605.187492][T28309] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 1605.217356][T15936] Bluetooth: hci2: command 0x0406 tx timeout [ 1605.300740][T28311] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1605.300780][T28311] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 1605.408772][T28309] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1605.427054][T28309] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1605.767814][T28927] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6449'. [ 1605.802113][T28930] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6448'. [ 1606.264817][T28940] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6452'. [ 1606.267162][ T9987] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1606.330608][T28942] loop5: detected capacity change from 0 to 7 [ 1606.343979][T28942] Dev loop5: unable to read RDB block 7 [ 1606.344050][T28942] loop5: unable to read partition table [ 1606.344239][T28942] loop5: partition table beyond EOD, truncated [ 1606.344256][T28942] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1606.422995][ T9987] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1606.424274][ T9987] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1606.424319][ T9987] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1606.424340][ T9987] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1606.424360][ T9987] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1606.424397][ T9987] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1606.618850][T28946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6455'. [ 1606.834930][T28955] syzkaller0: entered promiscuous mode [ 1606.838487][T28955] syzkaller0: entered allmulticast mode [ 1606.844958][T28955] fuse: Bad value for 'rootmode' [ 1606.975614][ T5685] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1607.147329][ T5685] usb 2-1: Using ep0 maxpacket: 32 [ 1607.148186][ T5685] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1607.150969][ T5685] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1607.155835][ T5685] usb 2-1: config 0 descriptor?? [ 1607.197141][ T5685] as10x_usb: device has been detected [ 1607.202415][ T5685] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1607.216933][T15936] Bluetooth: hci4: command 0x0406 tx timeout [ 1607.252330][ T5685] usb 2-1: DVB: registering adapter 2 frontend 0 (nBox DVB-T Dongle)... [ 1607.282161][ T5685] as10x_usb: error during firmware upload part1 [ 1607.288967][ T5685] Registered device nBox DVB-T Dongle [ 1607.300621][T15936] Bluetooth: hci2: command 0x0406 tx timeout [ 1607.301378][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.301431][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.372856][ T5685] usb 2-1: USB disconnect, device number 121 [ 1607.539895][ T5685] Unregistered device nBox DVB-T Dongle [ 1607.550865][ T5685] as10x_usb: device has been disconnected [ 1607.583767][T28946] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6455'. [ 1607.609723][T28946] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6455'. [ 1607.891945][ T9987] gud 5-1:1.0: Failed to add properties (error=-71) [ 1607.892002][ T9987] gud 5-1:1.0: probe with driver gud failed with error -71 [ 1607.929752][ T9987] usb 5-1: USB disconnect, device number 93 [ 1608.326837][T12156] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 1608.401750][T28986] loop5: detected capacity change from 0 to 7 [ 1608.419065][T28986] Dev loop5: unable to read RDB block 7 [ 1608.419118][T28986] loop5: unable to read partition table [ 1608.419262][T28986] loop5: partition table beyond EOD, truncated [ 1608.419278][T28986] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1608.487540][T12156] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1608.503213][T12156] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1608.515175][T12156] usb 6-1: config 0 descriptor?? [ 1608.905223][ T9987] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1609.058740][ T9987] usb 2-1: Using ep0 maxpacket: 32 [ 1609.061234][ T9987] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1609.095002][ T9987] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 1609.095031][T12156] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1609.095046][ T9987] usb 2-1: config 0 has no interface number 0 [ 1609.095120][ T9987] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1609.118888][ T9] usb 5-1: new full-speed USB device number 94 using dummy_hcd [ 1609.138330][T12156] [drm:udl_init] *ERROR* Selecting channel failed [ 1609.152679][ T9987] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1609.152715][ T9987] usb 2-1: Product: syz [ 1609.152759][ T9987] usb 2-1: Manufacturer: syz [ 1609.152772][ T9987] usb 2-1: SerialNumber: syz [ 1609.160091][ T9987] usb 2-1: config 0 descriptor?? [ 1609.165039][T28989] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1609.221905][T12156] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 1 [ 1609.228778][T12156] [drm] Initialized udl on minor 1 [ 1609.241452][T12156] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1609.250153][T12156] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1609.270190][T12156] usb 6-1: USB disconnect, device number 100 [ 1609.279481][T12167] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1609.353316][T28991] fuse: fd is not a fuse device [ 1609.375240][T28989] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1609.394147][ T9] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1609.404366][ T9] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1609.404414][ T9] usb 5-1: can't read configurations, error -71 [ 1609.634773][T28996] Cannot find set identified by id 1 to match [ 1609.645295][T28996] Cannot find set identified by id 1 to match [ 1609.656119][T28996] Cannot find set identified by id 1 to match [ 1609.656282][T28996] Cannot find set identified by id 1 to match [ 1609.671300][T28996] Cannot find set identified by id 1 to match [ 1609.671471][T28996] Cannot find set identified by id 1 to match [ 1609.671605][T28996] Cannot find set identified by id 1 to match [ 1609.671730][T28996] Cannot find set identified by id 1 to match [ 1609.671865][T28996] Cannot find set identified by id 1 to match [ 1609.671994][T28996] Cannot find set identified by id 1 to match [ 1609.750814][T28999] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1609.788194][ T9987] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1609.789213][ T9987] asix 2-1:0.188: probe with driver asix failed with error -71 [ 1609.814654][ T9987] usb 2-1: USB disconnect, device number 122 [ 1610.037707][T28311] net_ratelimit: 94 callbacks suppressed [ 1610.037749][T28311] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1610.037770][T28311] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 1610.148767][T17787] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1610.148826][T17787] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 1610.269733][T28309] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1610.269772][T28309] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 1610.343891][T29014] vcan0: tx drop: invalid da for name 0x4000000000000000 [ 1610.377858][T17787] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1610.386265][T17787] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 1610.496911][T17787] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1610.496949][T17787] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 1610.648287][T29025] FAULT_INJECTION: forcing a failure. [ 1610.648287][T29025] name failslab, interval 1, probability 0, space 0, times 0 [ 1610.648344][T29025] CPU: 1 UID: 0 PID: 29025 Comm: syz.4.6477 Tainted: G L syzkaller #0 PREEMPT(full) [ 1610.648377][T29025] Tainted: [L]=SOFTLOCKUP [ 1610.648384][T29025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1610.648394][T29025] Call Trace: [ 1610.648401][T29025] [ 1610.648407][T29025] dump_stack_lvl+0xe8/0x150 [ 1610.648437][T29025] should_fail_ex+0x410/0x560 [ 1610.648471][T29025] should_failslab+0xa8/0x100 [ 1610.648504][T29025] __kvmalloc_node_noprof+0x176/0x820 [ 1610.648526][T29025] ? __kvmalloc_node_noprof+0x345/0x820 [ 1610.648543][T29025] ? bpf_compute_scc+0xec/0xb10 [ 1610.648569][T29025] ? bpf_compute_scc+0xec/0xb10 [ 1610.648601][T29025] bpf_compute_scc+0xec/0xb10 [ 1610.648645][T29025] bpf_check+0x25c9/0x2e10 [ 1610.648676][T29025] ? ktime_get_with_offset+0x93/0x2d0 [ 1610.648699][T29025] ? __pfx_bpf_check+0x10/0x10 [ 1610.648720][T29025] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1610.648748][T29025] bpf_prog_load+0x14d6/0x1c20 [ 1610.648780][T29025] ? __pfx_bpf_prog_load+0x10/0x10 [ 1610.648823][T29025] __sys_bpf+0xd0d/0xd90 [ 1610.648850][T29025] ? __pfx___sys_bpf+0x10/0x10 [ 1610.648880][T29025] ? __fget_files+0x2a/0x420 [ 1610.648923][T29025] ? rcu_is_watching+0x16/0xb0 [ 1610.648951][T29025] __x64_sys_bpf+0xba/0xd0 [ 1610.648972][T29025] do_syscall_64+0x166/0x520 [ 1610.648998][T29025] ? trace_irq_disable+0x3b/0x140 [ 1610.649015][T29025] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1610.649034][T29025] ? clear_bhb_loop+0x70/0xc0 [ 1610.649057][T29025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1610.649075][T29025] RIP: 0033:0x7f719fb9e159 [ 1610.649093][T29025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1610.649109][T29025] RSP: 002b:00007f71a0b29028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1610.649129][T29025] RAX: ffffffffffffffda RBX: 00007f719fe25fa0 RCX: 00007f719fb9e159 [ 1610.649143][T29025] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 1610.649154][T29025] RBP: 00007f71a0b29090 R08: 0000000000000000 R09: 0000000000000000 [ 1610.649166][T29025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1610.649178][T29025] R13: 00007f719fe26038 R14: 00007f719fe25fa0 R15: 00007f719ff4fa48 [ 1610.649207][T29025] [ 1610.827847][ T9] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1611.006816][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 1611.015423][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1611.015507][ T9] usb 2-1: New USB device found, idVendor=0000, idProduct=a300, bcdDevice= a.f3 [ 1611.034191][ T9] usb 2-1: config 2 has an invalid interface number: 99 but max is 0 [ 1611.042548][ T9] usb 2-1: config 2 has no interface number 0 [ 1611.042579][ T9] usb 2-1: config 2 interface 99 altsetting 7 has an endpoint descriptor with address 0xFE, changing to 0x8E [ 1611.042595][ T9] usb 2-1: config 2 interface 99 altsetting 7 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1611.042608][ T9] usb 2-1: config 2 interface 99 altsetting 7 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1611.042621][ T9] usb 2-1: config 2 interface 99 has no altsetting 0 [ 1611.095872][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1611.095915][ T9] usb 2-1: Product: syz [ 1611.095947][ T9] usb 2-1: Manufacturer: syz [ 1611.095974][ T9] usb 2-1: SerialNumber: syz [ 1611.377411][ T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:2.99/input/input191 [ 1611.425889][ T9] usb 2-1: USB disconnect, device number 123 [ 1611.628182][T29035] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1612.149551][T29046] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1612.416814][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 1612.757868][ T31] kauditd_printk_skb: 60 callbacks suppressed [ 1612.757915][ T31] audit: type=1326 audit(1788617681.116:5014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29060 comm="syz.6.6487" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f2997f9e159 code=0x7ffc0000 [ 1612.757966][ T31] audit: type=1326 audit(1788617681.116:5015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29060 comm="syz.6.6487" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2997f9e159 code=0x7ffc0000 [ 1612.758008][ T31] audit: type=1326 audit(1788617681.116:5016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29060 comm="syz.6.6487" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2997f9e159 code=0x7ffc0000 [ 1612.758048][ T31] audit: type=1326 audit(1788617681.116:5017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29060 comm="syz.6.6487" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2997f9e159 code=0x7ffc0000 [ 1612.764427][ T31] audit: type=1326 audit(1788617681.116:5019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29060 comm="syz.6.6487" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2997f9e159 code=0x7ffc0000 [ 1612.764478][ T31] audit: type=1326 audit(1788617681.116:5020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29060 comm="syz.6.6487" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2997f9e159 code=0x7ffc0000 [ 1612.764519][ T31] audit: type=1326 audit(1788617681.116:5021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29060 comm="syz.6.6487" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2997f9e159 code=0x7ffc0000 [ 1612.764559][ T31] audit: type=1326 audit(1788617681.116:5022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29060 comm="syz.6.6487" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2997f9e159 code=0x7ffc0000 [ 1612.764597][ T31] audit: type=1326 audit(1788617681.116:5018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29060 comm="syz.6.6487" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2997f9e159 code=0x7ffc0000 [ 1612.764635][ T31] audit: type=1326 audit(1788617681.116:5023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29060 comm="syz.6.6487" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2997f9e159 code=0x7ffc0000 [ 1612.994551][T29062] input: syz1 as /devices/virtual/input/input192 [ 1613.412649][T29076] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3345044383 (214082840512 ns) > initial count (60632714432 ns). Using initial count to start timer. [ 1613.426025][T29076] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2182154216 (4364308432 ns) > initial count (507749598 ns). Using initial count to start timer. [ 1613.711778][T29073] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6486'. [ 1614.286761][T12167] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1614.365341][T29093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1614.376258][ T9] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1614.390489][T29093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1614.548371][ T9] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1614.560822][ T9] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1614.562392][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1614.562413][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1614.562457][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1614.597344][ T9] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1614.597370][ T9] usb 2-1: Product: syz [ 1614.597384][ T9] usb 2-1: Manufacturer: syz [ 1614.605387][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 1614.605406][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 1614.611362][ T9] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1614.611383][ T9] cdc_wdm 2-1:1.0: Unknown control protocol [ 1615.147201][T17766] net_ratelimit: 83 callbacks suppressed [ 1615.154355][T17766] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1615.154512][T17766] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 1615.257025][T17788] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1615.257080][T17788] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 1615.353436][T29114] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6501'. [ 1615.353469][T29114] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6501'. [ 1615.353534][T29114] netlink: 'syz.4.6501': attribute type 15 has an invalid length. [ 1615.376098][T29114] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6501'. [ 1615.376122][T29114] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6501'. [ 1615.376146][T29114] netlink: 'syz.4.6501': attribute type 15 has an invalid length. [ 1615.381205][T17766] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1615.400685][T17766] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 1615.400730][T17766] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 1615.400762][T17766] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 1615.400793][T17766] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 1615.406817][T17788] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1615.426740][T17766] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1615.426767][T17766] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 1615.526840][T17766] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1615.534972][T17766] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 1615.536848][ T9] usb 6-1: new low-speed USB device number 101 using dummy_hcd [ 1615.689645][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1615.689717][ T9] usb 6-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=73.88 [ 1615.699035][ T9] usb 6-1: config 8 has an invalid interface number: 59 but max is 3 [ 1615.699061][ T9] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1615.699078][ T9] usb 6-1: config 8 has 1 interface, different from the descriptor's value: 4 [ 1615.699097][ T9] usb 6-1: config 8 has no interface number 0 [ 1615.699193][ T9] usb 6-1: config 8 interface 59 altsetting 2 has an endpoint descriptor with address 0x1A, changing to 0xA [ 1615.699278][ T9] usb 6-1: config 8 interface 59 altsetting 2 endpoint 0xA has invalid maxpacket 64, setting to 0 [ 1615.699305][ T9] usb 6-1: config 8 interface 59 altsetting 2 endpoint 0x4 has invalid maxpacket 1023, setting to 8 [ 1615.699330][ T9] usb 6-1: config 8 interface 59 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1615.699350][ T9] usb 6-1: config 8 interface 59 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 10 [ 1615.699376][ T9] usb 6-1: config 8 interface 59 has no altsetting 0 [ 1615.710769][ T9] usb 6-1: string descriptor 0 read error: -22 [ 1615.710895][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1615.719034][ T9] ttusbir 6-1:8.59: cannot find expected altsetting [ 1615.880520][T29119] bridge0: port 4(syz_tun) entered blocking state [ 1615.880852][T29119] bridge0: port 4(syz_tun) entered disabled state [ 1615.881093][T29119] syz_tun: entered allmulticast mode [ 1615.888702][T29119] syz_tun: entered promiscuous mode [ 1615.891188][T29119] bridge0: port 4(syz_tun) entered blocking state [ 1615.891273][T29119] bridge0: port 4(syz_tun) entered forwarding state [ 1616.018648][T29126] fuse: root generation should be zero [ 1616.143576][ T5685] usb 6-1: USB disconnect, device number 101 [ 1616.494862][T29135] netlink: 136 bytes leftover after parsing attributes in process `syz.4.6507'. [ 1617.076933][ T9987] usb 6-1: new full-speed USB device number 102 using dummy_hcd [ 1617.227590][ T9987] usb 6-1: device descriptor read/64, error -71 [ 1617.319845][T29157] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1617.463517][ T5685] usb 2-1: USB disconnect, device number 124 [ 1617.472044][ T9987] usb 6-1: new full-speed USB device number 103 using dummy_hcd [ 1617.617695][ T9987] usb 6-1: device descriptor read/64, error -71 [ 1617.727129][ T9987] usb usb6-port1: attempt power cycle [ 1618.066773][ T9987] usb 6-1: new full-speed USB device number 104 using dummy_hcd [ 1618.087538][ T9987] usb 6-1: device descriptor read/8, error -71 [ 1618.233765][T29176] fuse: fd is not a fuse device [ 1618.336989][ T9987] usb 6-1: new full-speed USB device number 105 using dummy_hcd [ 1618.357521][ T9987] usb 6-1: device descriptor read/8, error -71 [ 1618.467011][ T9987] usb usb6-port1: unable to enumerate USB device [ 1619.546876][T12167] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1619.581960][T29212] FAULT_INJECTION: forcing a failure. [ 1619.581960][T29212] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1619.582018][T29212] CPU: 0 UID: 0 PID: 29212 Comm: syz.0.6529 Tainted: G L syzkaller #0 PREEMPT(full) [ 1619.582041][T29212] Tainted: [L]=SOFTLOCKUP [ 1619.582047][T29212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1619.582055][T29212] Call Trace: [ 1619.582062][T29212] [ 1619.582070][T29212] dump_stack_lvl+0xe8/0x150 [ 1619.582110][T29212] should_fail_ex+0x410/0x560 [ 1619.582144][T29212] _copy_to_user+0x31/0xb0 [ 1619.582167][T29212] simple_read_from_buffer+0xe1/0x170 [ 1619.582195][T29212] proc_fail_nth_read+0x1bb/0x230 [ 1619.582222][T29212] ? common_file_perm+0x20e/0x2b0 [ 1619.582245][T29212] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1619.582274][T29212] ? rw_verify_area+0x24a/0x4c0 [ 1619.582301][T29212] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1619.582327][T29212] vfs_read+0x213/0xa80 [ 1619.582357][T29212] ? __pfx___mutex_lock+0x10/0x10 [ 1619.582376][T29212] ? __pfx_vfs_read+0x10/0x10 [ 1619.582405][T29212] ? __fget_files+0x2a/0x420 [ 1619.582433][T29212] ? __fget_files+0x3a2/0x420 [ 1619.582455][T29212] ? __fget_files+0x2a/0x420 [ 1619.582485][T29212] ksys_read+0x150/0x270 [ 1619.582512][T29212] ? __pfx_ksys_read+0x10/0x10 [ 1619.582548][T29212] do_syscall_64+0x166/0x520 [ 1619.582574][T29212] ? trace_irq_disable+0x3b/0x140 [ 1619.582590][T29212] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1619.582609][T29212] ? clear_bhb_loop+0x70/0xc0 [ 1619.582632][T29212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1619.582650][T29212] RIP: 0033:0x7face9d5e98e [ 1619.582667][T29212] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1619.582682][T29212] RSP: 002b:00007faceaba7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1619.582702][T29212] RAX: ffffffffffffffda RBX: 00007faceaba86c0 RCX: 00007face9d5e98e [ 1619.582716][T29212] RDX: 000000000000000f RSI: 00007faceaba80a0 RDI: 0000000000000004 [ 1619.582727][T29212] RBP: 00007faceaba8090 R08: 0000000000000000 R09: 0000000000000000 [ 1619.582739][T29212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1619.582750][T29212] R13: 00007facea026038 R14: 00007facea025fa0 R15: 00007facea14fa48 [ 1619.582780][T29212] [ 1619.706957][T12167] usb 2-1: Using ep0 maxpacket: 32 [ 1619.707693][T12167] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1619.708971][T12167] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1619.708993][T12167] usb 2-1: config 0 has no interface number 0 [ 1619.709027][T12167] usb 2-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1619.709047][T12167] usb 2-1: config 0 interface 1 has no altsetting 0 [ 1619.742426][T29210] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1619.746283][T12167] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1619.746309][T12167] usb 2-1: Product: syz [ 1619.746323][T12167] usb 2-1: Manufacturer: syz [ 1619.746336][T12167] usb 2-1: SerialNumber: syz [ 1619.777824][T12167] usb 2-1: config 0 descriptor?? [ 1620.004487][T12167] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1620.008343][T12167] cx231xx 2-1:0.1: Failed to read PCB config [ 1620.008402][T12167] cx231xx 2-1:0.1: probe with driver cx231xx failed with error -71 [ 1620.023304][T12167] usb 2-1: USB disconnect, device number 125 [ 1620.158590][T17787] net_ratelimit: 95 callbacks suppressed [ 1620.158634][T17787] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1620.178318][T28311] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1620.198455][T17787] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1620.217273][T28311] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1620.241940][T17781] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1620.260147][T17781] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1620.280286][T17781] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1620.296814][T17781] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1620.317236][T28311] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1620.339843][T17781] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1620.341108][T12167] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1620.488377][T12167] usb 2-1: Using ep0 maxpacket: 32 [ 1620.490032][T12167] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1620.491421][T12167] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1620.491444][T12167] usb 2-1: config 0 has no interface number 0 [ 1620.491480][T12167] usb 2-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1620.491500][T12167] usb 2-1: config 0 interface 1 has no altsetting 0 [ 1620.505091][T12167] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1620.505115][T12167] usb 2-1: Product: syz [ 1620.505129][T12167] usb 2-1: Manufacturer: syz [ 1620.505143][T12167] usb 2-1: SerialNumber: syz [ 1620.521539][T12167] usb 2-1: config 0 descriptor?? [ 1620.582152][T29222] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6532'. [ 1620.582229][T29222] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6532'. [ 1620.750673][T29225] 8021q: VLANs not supported on ip_vti0 [ 1620.752117][T12167] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1620.768154][T12167] cx231xx 2-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 1620.917930][T12167] cx231xx 2-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 1620.918325][T12167] cx231xx 2-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 1620.918732][T12167] cx231xx 2-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 1620.921268][T12167] cx231xx 2-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 1620.922645][T12167] cx231xx 2-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 1620.922665][T12167] cx231xx 2-1:0.1: Failed to set devmode to analog: error: -32 [ 1620.974049][T12167] i2c i2c-3: Added multiplexed i2c bus 5 [ 1620.991132][T12167] i2c i2c-3: Added multiplexed i2c bus 6 [ 1620.992231][T12167] cx231xx 2-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-71]! [ 1620.992252][T12167] cx231xx 2-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-71]! [ 1621.075072][T12167] cx231xx 2-1:0.1: probe with driver cx231xx failed with error -71 [ 1621.105358][T12167] usb 2-1: USB disconnect, device number 126 [ 1621.196157][T29235] netlink: 'syz.5.6536': attribute type 1 has an invalid length. [ 1621.247669][T29235] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1621.321964][T29239] netlink: 'syz.4.6537': attribute type 1 has an invalid length. [ 1621.336485][T29235] bond3: (slave geneve4): making interface the new active one [ 1621.346415][T29235] bond3: (slave geneve4): Enslaving as an active interface with an up link [ 1621.398008][T29239] bond2: entered promiscuous mode [ 1621.398389][T29239] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1621.400342][T29242] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6537'. [ 1621.584709][T29246] xt_TCPMSS: Only works on TCP SYN packets [ 1621.618828][T29246] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1621.828914][T29258] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6541'. [ 1621.838103][T29258] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6541'. [ 1621.887102][ T9] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1621.979179][T29264] macsec2: left promiscuous mode [ 1622.053328][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1622.053418][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=0272, bcdDevice= 0.40 [ 1622.054429][ T9] usb 5-1: config 1 interface 0 altsetting 35 endpoint 0x81 has an invalid bInterval 21, changing to 8 [ 1622.054459][ T9] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1622.056306][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1622.056328][ T9] usb 5-1: Product: syz [ 1622.056342][ T9] usb 5-1: Manufacturer: syz [ 1622.056363][ T9] usb 5-1: SerialNumber: syz [ 1622.079890][T29264] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6544'. [ 1622.219120][T17787] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 1622.219326][T29267] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 1622.306573][T29272] xt_limit: Overflow, try lower: 268435456/134217728 [ 1622.359032][ T9] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input194 [ 1622.367866][ T4966] bcm5974 5-1:1.0: could not read from device [ 1622.412453][ T4966] bcm5974 5-1:1.0: could not read from device [ 1622.416178][ T9] usb 5-1: USB disconnect, device number 97 [ 1622.426093][ T5685] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1622.435566][ T4966] bcm5974 5-1:1.0: could not read from device [ 1622.436088][ T4966] bcm5974 5-1:1.0: could not read from device [ 1622.596895][ T5685] usb 2-1: Using ep0 maxpacket: 8 [ 1622.608490][ T5685] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1622.617578][ T5685] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1622.617601][ T5685] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1622.617650][ T5685] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1622.619508][ T5685] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1622.619531][ T5685] usb 2-1: Product: syz [ 1622.619545][ T5685] usb 2-1: Manufacturer: syz [ 1622.619559][ T5685] usb 2-1: SerialNumber: syz [ 1622.732100][T17781] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 1622.745065][T29268] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 1622.806874][T12156] usb 6-1: new full-speed USB device number 106 using dummy_hcd [ 1622.967879][T12156] usb 6-1: not running at top speed; connect to a high speed hub [ 1622.967927][T12156] usb 6-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 1622.995843][T12156] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1623.013276][T12156] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1623.013320][T12156] usb 6-1: Product: syz [ 1623.013350][T12156] usb 6-1: Manufacturer: syz [ 1623.013368][T12156] usb 6-1: SerialNumber: syz [ 1623.054341][T12156] keyspan 6-1:1.0: Keyspan 4 port adapter converter detected [ 1623.059722][T29268] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1623.060937][T29267] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6545'. [ 1623.063780][T12156] keyspan 6-1:1.0: unsupported endpoint type 0 [ 1623.093412][T12156] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1623.107383][T12156] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1623.125642][T12156] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1623.139613][T12156] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1623.193869][T29268] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6545'. [ 1623.201649][T29270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1623.202173][T29270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1623.496937][ T9987] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1623.564693][ T1219] usb 6-1: USB disconnect, device number 106 [ 1623.577201][ T1219] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1623.588053][ T1219] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1623.601662][ T1219] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1623.613551][ T1219] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1623.614961][ T1219] keyspan 6-1:1.0: device disconnected [ 1623.624808][ T5685] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1623.646960][ T9987] usb 5-1: device descriptor read/64, error -71 [ 1623.703960][ T5685] usb 2-1: USB disconnect, device number 127 [ 1623.906877][ T9987] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1624.046927][ T9987] usb 5-1: device descriptor read/64, error -71 [ 1624.145585][T29286] netlink: 'syz.5.6551': attribute type 1 has an invalid length. [ 1624.167812][ T9987] usb usb5-port1: attempt power cycle [ 1624.260538][T29286] veth5: entered allmulticast mode [ 1624.343668][T29295] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1624.516871][ T9987] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1624.541229][ T9987] usb 5-1: device descriptor read/8, error -71 [ 1624.642151][T15936] Bluetooth: hci4: unexpected event for opcode 0x2039 [ 1624.651963][T29299] loop3: detected capacity change from 0 to 7 [ 1624.660421][T29299] loop3: p1 p4 [ 1624.665443][T29299] loop3: partition table partially beyond EOD, truncated [ 1624.703500][T29304] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6554'. [ 1624.807084][ T9987] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1624.831542][ T9987] usb 5-1: device descriptor read/8, error -71 [ 1624.939718][ T9987] usb usb5-port1: unable to enumerate USB device [ 1624.958565][ T25] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 1625.107474][ T25] usb 6-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 1625.108464][ T25] usb 6-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 1625.108532][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1625.140477][ T25] usb 6-1: 1:1 : no or invalid class specific endpoint descriptor [ 1625.241850][T17787] net_ratelimit: 102 callbacks suppressed [ 1625.241913][T17787] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1625.244391][T17787] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 1625.323178][ T25] usb 6-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 4) [ 1625.346770][T17788] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1625.346812][T17788] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 1625.459804][T17787] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1625.459854][T17787] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 1625.541686][ T25] usb 6-1: USB disconnect, device number 107 [ 1625.568925][T17766] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1625.568992][T17766] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 1625.678068][T17766] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1625.678137][T17766] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 1625.743065][T29316] loop4: detected capacity change from 0 to 7 [ 1625.744860][T29316] Dev loop4: unable to read RDB block 7 [ 1625.744900][T29316] loop4: unable to read partition table [ 1625.745171][T29316] loop4: partition table beyond EOD, truncated [ 1625.745189][T29316] loop_reread_partitions: partition scan of loop4 (þ虫xü—ŸÑà– ) failed (rc=-5) [ 1626.092420][T29331] loop5: detected capacity change from 0 to 7 [ 1626.100070][T29331] Dev loop5: unable to read RDB block 7 [ 1626.107809][T29331] loop5: unable to read partition table [ 1626.108054][T29331] loop5: partition table beyond EOD, truncated [ 1626.114336][T29331] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1626.222894][T29334] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1626.641617][T29347] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1626.646925][ T9987] usb 5-1: new full-speed USB device number 102 using dummy_hcd [ 1626.799847][ T9987] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1626.801081][ T9987] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1626.801112][ T9987] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1626.801173][ T9987] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1626.815056][ T9987] usb 5-1: config 0 descriptor?? [ 1627.224260][ T9987] usbhid 5-1:0.0: can't add hid device: -71 [ 1627.224375][ T9987] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1627.233463][ T9987] usb 5-1: USB disconnect, device number 102 [ 1627.698310][T29359] create_pit_timer: 8 callbacks suppressed [ 1627.698357][T29359] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1628.267863][T15936] Bluetooth: hci2: unexpected event for opcode 0x2039 [ 1628.302128][T29371] loop3: detected capacity change from 0 to 7 [ 1628.303035][T29371] loop3: p1 p4 [ 1628.303057][T29371] loop3: partition table partially beyond EOD, truncated [ 1628.425025][T29375] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6574'. [ 1628.434351][T29375] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6574'. [ 1628.708408][ T5685] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1628.716767][ T9987] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1628.809135][T29381] loop5: detected capacity change from 0 to 7 [ 1628.812588][T29381] Dev loop5: unable to read RDB block 7 [ 1628.812627][T29381] loop5: unable to read partition table [ 1628.814098][T29381] loop5: partition table beyond EOD, truncated [ 1628.814118][T29381] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1628.867366][ T5685] usb 2-1: Using ep0 maxpacket: 32 [ 1628.873399][ T5685] usb 2-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 1628.873749][ T9987] usb 5-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 1628.894662][ T9987] usb 5-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 1628.894751][ T9987] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1628.894828][ T5685] usb 2-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 1628.894849][ T5685] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1628.894881][ T5685] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1628.946044][ T5685] usb 2-1: config 0 descriptor?? [ 1628.958180][ T9987] usb 5-1: 1:1 : no or invalid class specific endpoint descriptor [ 1629.164585][ T9987] usb 5-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 4) [ 1629.192103][T29387] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6579'. [ 1629.316471][ T9987] usb 5-1: USB disconnect, device number 103 [ 1629.456819][T12156] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 1629.606820][T12156] usb 6-1: Using ep0 maxpacket: 32 [ 1629.608354][T12156] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1629.611942][T12156] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1629.615018][T12156] usb 6-1: config 0 descriptor?? [ 1629.638027][T12156] as10x_usb: device has been detected [ 1629.640686][T12156] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1629.674089][T12156] usb 6-1: DVB: registering adapter 2 frontend 0 (nBox DVB-T Dongle)... [ 1629.691955][T12156] as10x_usb: error during firmware upload part1 [ 1629.692610][T12156] Registered device nBox DVB-T Dongle [ 1629.828385][T12156] usb 6-1: USB disconnect, device number 108 [ 1629.862112][T29392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1629.862625][T29392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1629.891454][T12156] Unregistered device nBox DVB-T Dongle [ 1629.894385][T12156] as10x_usb: device has been disconnected [ 1629.912919][T29394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1629.913406][T29394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1630.034487][T29387] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6579'. [ 1630.096921][ T9987] usb 5-1: new full-speed USB device number 104 using dummy_hcd [ 1630.262849][ T9987] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1630.273570][ T9987] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1630.273620][ T9987] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1630.273657][ T9987] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1630.273699][ T9987] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1630.279708][T17788] net_ratelimit: 90 callbacks suppressed [ 1630.279725][T17788] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1630.279747][T17788] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 1630.341732][ T9987] usb 5-1: config 0 descriptor?? [ 1630.387833][T17788] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1630.387879][T17788] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 1630.496946][T17781] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1630.496994][T17781] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 1630.606776][T17781] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1630.606825][T17781] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 1630.718771][T17788] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1630.718814][T17788] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 1630.763932][ T9987] plantronics 0003:047F:FFFF.005B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1630.844960][T29396] netlink: 64 bytes leftover after parsing attributes in process `syz.5.6581'. [ 1631.168508][T29407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1631.179954][T29407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1631.315902][T12156] usb 2-1: USB disconnect, device number 2 [ 1631.380068][T29413] vcan0: tx drop: invalid da for name 0x4000000000000000 [ 1631.520818][T29415] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6586'. [ 1631.846804][ T25] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1631.994883][T29421] loop5: detected capacity change from 0 to 7 [ 1632.002669][T29421] Dev loop5: unable to read RDB block 7 [ 1632.009842][ T25] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1632.020833][T29421] loop5: unable to read partition table [ 1632.027372][T29421] loop5: partition table beyond EOD, [ 1632.027469][ T25] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 1632.027516][ T25] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1632.027554][ T25] usb 2-1: config 220 has no interface number 2 [ 1632.027618][ T25] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1632.027643][ T25] usb 2-1: config 220 interface 0 has no altsetting 0 [ 1632.027663][ T25] usb 2-1: config 220 interface 76 has no altsetting 0 [ 1632.027683][ T25] usb 2-1: config 220 interface 1 has no altsetting 0 [ 1632.042368][T29421] truncated [ 1632.042384][T29421] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1632.116241][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1632.116291][ T25] usb 2-1: Product: syz [ 1632.116325][ T25] usb 2-1: Manufacturer: syz [ 1632.116343][ T25] usb 2-1: SerialNumber: syz [ 1632.362398][ T25] usb 2-1: selecting invalid altsetting 0 [ 1632.367710][T29423] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6590'. [ 1632.367747][T29423] netlink: 'syz.5.6590': attribute type 5 has an invalid length. [ 1632.367762][T29423] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6590'. [ 1632.386323][T29423] geneve5: entered promiscuous mode [ 1632.386351][T29423] geneve5: entered allmulticast mode [ 1632.394440][T17775] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 1632.394644][T17775] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 1632.394693][T17775] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 1632.394725][T17775] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 1632.400849][T29423] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6590'. [ 1632.415221][ T25] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1632.415256][ T25] uvcvideo 2-1:220.0: No valid video chain found. [ 1632.481189][ T25] usb 2-1: selecting invalid altsetting 0 [ 1632.487197][ T25] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 1632.502321][ T25] usb 2-1: USB disconnect, device number 3 [ 1632.730897][T29438] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6595'. [ 1632.775743][T29438] bridge0: port 4(syz_tun) entered disabled state [ 1632.847023][ T9] usb 5-1: USB disconnect, device number 104 [ 1632.936101][T29438] syz_tun (unregistering): left allmulticast mode [ 1632.943170][T29438] syz_tun (unregistering): left promiscuous mode [ 1632.949978][T29438] bridge0: port 4(syz_tun) entered disabled state [ 1632.972475][T29444] vcan0: tx drop: invalid da for name 0x4000000000000000 [ 1633.073047][T29450] netlink: 'syz.4.6595': attribute type 2 has an invalid length. [ 1633.276739][ T5677] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1633.382227][ T31] kauditd_printk_skb: 423 callbacks suppressed [ 1633.382621][ T31] audit: type=1326 audit(1788617701.736:5447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29460 comm="syz.0.6601" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7face9d9e159 code=0x7ffc0000 [ 1633.382665][ T31] audit: type=1326 audit(1788617701.736:5448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29460 comm="syz.0.6601" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7face9d9df57 code=0x7ffc0000 [ 1633.413252][ T5677] usb 2-1: device descriptor read/64, error -71 [ 1633.444125][ T31] audit: type=1326 audit(1788617701.796:5449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29460 comm="syz.0.6601" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7face9d5ae51 code=0x7ffc0000 [ 1633.444175][ T31] audit: type=1326 audit(1788617701.796:5450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29460 comm="syz.0.6601" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7face9d9ef49 code=0x7ffc0000 [ 1633.444438][ T31] audit: type=1326 audit(1788617701.796:5452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29460 comm="syz.0.6601" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7face9d9e159 code=0x7ffc0000 [ 1633.444514][ T31] audit: type=1326 audit(1788617701.796:5451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29460 comm="syz.0.6601" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7face9d5aebb code=0x7ffc0000 [ 1633.444708][ T31] audit: type=1326 audit(1788617701.796:5453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29460 comm="syz.0.6601" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7face9d9e159 code=0x7ffc0000 [ 1633.444814][ T31] audit: type=1326 audit(1788617701.796:5454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29460 comm="syz.0.6601" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7face9d5a5ac code=0x7ffc0000 [ 1633.444967][ T31] audit: type=1326 audit(1788617701.796:5455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29460 comm="syz.0.6601" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7face9d5a60e code=0x7ffc0000 [ 1633.446612][ T31] audit: type=1326 audit(1788617701.796:5456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29460 comm="syz.0.6601" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7face9d9e159 code=0x7ffc0000 [ 1633.706837][ T5677] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1633.827265][T29483] vcan0: tx drop: invalid da for name 0x4000000000000000 [ 1633.836776][ T5677] usb 2-1: device descriptor read/64, error -71 [ 1633.850533][T29485] loop5: detected capacity change from 0 to 7 [ 1633.858414][T29485] Dev loop5: unable to read RDB block 7 [ 1633.864170][T29485] loop5: unable to read partition table [ 1633.870292][T29485] loop5: partition table beyond EOD, truncated [ 1633.870317][T29485] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1633.946967][ T5677] usb usb2-port1: attempt power cycle [ 1634.038405][T29488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6609'. [ 1634.038450][T29488] netlink: 7 bytes leftover after parsing attributes in process `syz.0.6609'. [ 1634.089896][T29487] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6609'. [ 1634.307411][ T5677] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1634.339565][ T5677] usb 2-1: device descriptor read/8, error -71 [ 1634.413177][T29501] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1634.536731][ T5685] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1634.577212][ T5677] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1634.597323][ T5677] usb 2-1: device descriptor read/8, error -71 [ 1634.647021][T18456] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 1634.678247][ T5685] usb 5-1: device descriptor read/64, error -71 [ 1634.708786][ T5677] usb usb2-port1: unable to enumerate USB device [ 1634.799187][T18456] usb 6-1: Using ep0 maxpacket: 8 [ 1634.804895][T18456] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1634.807192][T18456] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1634.807243][T18456] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1634.807265][T18456] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1634.807287][T18456] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1634.807309][T18456] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1634.807346][T18456] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1634.926726][ T5685] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1635.034609][T18456] usb 6-1: usb_control_msg returned -32 [ 1635.034683][T18456] usbtmc 6-1:16.0: can't read capabilities [ 1635.056897][ T5685] usb 5-1: device descriptor read/64, error -71 [ 1635.167244][ T5685] usb usb5-port1: attempt power cycle [ 1635.223480][T29513] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1635.357926][T17781] net_ratelimit: 93 callbacks suppressed [ 1635.357993][T17781] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1635.358016][T17781] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 1635.467394][T17788] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1635.467448][T17788] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 1635.516741][ T5685] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1635.537407][ T5685] usb 5-1: device descriptor read/8, error -71 [ 1635.578552][T17766] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1635.578613][T17766] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 1635.688209][T17766] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1635.688263][T17766] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 1635.788082][T29518] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6612'. [ 1635.797952][ T5685] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1635.797963][T17787] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1635.797996][T17787] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 1635.837460][ T5685] usb 5-1: device descriptor read/8, error -71 [ 1635.954581][ T5685] usb usb5-port1: unable to enumerate USB device [ 1636.446953][ T5685] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1636.596756][ T5685] usb 2-1: Using ep0 maxpacket: 32 [ 1636.602537][ T5685] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1636.617597][ T5685] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 1636.626022][ T5685] usb 2-1: config 0 has no interface number 0 [ 1636.626100][ T5685] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1636.626132][ T5685] usb 2-1: config 0 interface 85 has no altsetting 0 [ 1636.655764][ T5685] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1636.664003][ T5685] usb 2-1: Product: syz [ 1636.668313][ T5685] usb 2-1: Manufacturer: syz [ 1636.673020][ T5685] usb 2-1: SerialNumber: syz [ 1636.682439][ T5685] usb 2-1: config 0 descriptor?? [ 1636.692590][T29529] loop5: detected capacity change from 0 to 7 [ 1636.694561][T29529] Dev loop5: unable to read RDB block 7 [ 1636.694600][T29529] loop5: unable to read partition table [ 1636.694783][T29529] loop5: partition table beyond EOD, truncated [ 1636.694799][T29529] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1637.301132][T29520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1637.301572][T29520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1637.304663][T29520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1637.308271][T29520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1637.338836][ T5685] appletouch 2-1:0.85: Failed to request geyser raw mode [ 1637.346205][ T5685] appletouch 2-1:0.85: probe with driver appletouch failed with error -5 [ 1637.364163][ T5685] usb 2-1: USB disconnect, device number 8 [ 1637.398000][ T5677] usb 6-1: USB disconnect, device number 109 [ 1637.500372][T29552] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6625'. [ 1637.926496][T29560] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6627'. [ 1637.953219][T29560] ipvlan4: entered allmulticast mode [ 1637.953256][T29560] erspan0: entered allmulticast mode [ 1638.556354][T29574] loop5: detected capacity change from 0 to 7 [ 1638.579469][T29574] Dev loop5: unable to read RDB block 7 [ 1638.585362][T29574] loop5: unable to read partition table [ 1638.592595][T29574] loop5: partition table beyond EOD, truncated [ 1638.592639][T29574] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1638.782239][T29577] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6626'. [ 1639.026765][T18456] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 1639.178942][T18456] usb 6-1: Using ep0 maxpacket: 32 [ 1639.179662][T18456] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1639.182202][T18456] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1639.184953][T18456] usb 6-1: config 0 descriptor?? [ 1639.199878][T18456] as10x_usb: device has been detected [ 1639.203818][T18456] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1639.235437][T18456] usb 6-1: DVB: registering adapter 2 frontend 0 (nBox DVB-T Dongle)... [ 1639.294366][T18456] as10x_usb: error during firmware upload part1 [ 1639.298701][T18456] Registered device nBox DVB-T Dongle [ 1639.441401][T18456] usb 6-1: USB disconnect, device number 110 [ 1639.499898][T18456] Unregistered device nBox DVB-T Dongle [ 1639.512990][T18456] as10x_usb: device has been disconnected [ 1639.650921][T29577] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6626'. [ 1639.664465][T29577] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6626'. [ 1639.807793][ T5677] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1639.969671][ T5677] usb 5-1: Using ep0 maxpacket: 16 [ 1639.975968][ T5677] usb 5-1: New USB device found, idVendor=2833, idProduct=0211, bcdDevice=1b.63 [ 1639.988209][ T5677] usb 5-1: config 16 has an invalid interface number: 75 but max is 0 [ 1639.989492][ T5677] usb 5-1: config 16 has no interface number 0 [ 1639.989552][ T5677] usb 5-1: config 16 interface 75 has no altsetting 0 [ 1640.019421][ T5677] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1640.019461][ T5677] usb 5-1: Product: syz [ 1640.019497][ T5677] usb 5-1: Manufacturer: syz [ 1640.019515][ T5677] usb 5-1: SerialNumber: syz [ 1640.089333][T29619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1640.089800][T29619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1640.263272][T29627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1640.263715][T29627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1640.297361][ T5677] uvcvideo 5-1:16.75: probe with driver uvcvideo failed with error -22 [ 1640.314188][ T5677] usb 5-1: USB disconnect, device number 109 [ 1640.386721][ T5685] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1640.470597][T17787] net_ratelimit: 83 callbacks suppressed [ 1640.470655][T17787] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1640.470676][T17787] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 1640.549214][ T5685] usb 2-1: Using ep0 maxpacket: 16 [ 1640.558199][ T5685] usb 2-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00 [ 1640.570343][ T5685] usb 2-1: too many endpoints for config 0 interface 0 altsetting 12: 254, using maximum allowed: 30 [ 1640.570403][ T5685] usb 2-1: config 0 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1640.570430][ T5685] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1640.570474][ T5685] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1640.579862][T17787] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1640.579893][T17787] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 1640.627911][ T5685] usb 2-1: config 0 descriptor?? [ 1640.679310][T29645] binder: 29644:29645 ioctl 5204 2000000020c0 returned -22 [ 1640.688003][T17781] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1640.696524][T17781] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 1640.706152][T29645] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(13) [ 1640.706179][T29645] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1640.713055][T29645] vhci_hcd vhci_hcd.0: Device attached [ 1640.817825][T17788] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1640.817877][T17788] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 1640.928634][ T5677] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1640.931070][T17788] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1640.931096][T17788] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 1640.971041][T29650] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6647'. [ 1640.980141][T29650] vlan2: entered allmulticast mode [ 1640.989905][T29650] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6647'. [ 1641.008221][ T5677] usb 33-1: new full-speed USB device number 3 using vhci_hcd [ 1641.047916][ T5685] elecom 0003:056E:010C.005C: ignoring exceeding usage max [ 1641.056429][ T5685] elecom 0003:056E:010C.005C: ignoring exceeding usage max [ 1641.066686][ T5685] elecom 0003:056E:010C.005C: usage index exceeded [ 1641.067222][ T5685] elecom 0003:056E:010C.005C: item 0 2 2 2 parsing failed [ 1641.071241][ T5685] elecom 0003:056E:010C.005C: probe with driver elecom failed with error -22 [ 1641.200896][T29658] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6648'. [ 1641.215431][T29650] syzkaller0: entered promiscuous mode [ 1641.215482][T29650] syzkaller0: entered allmulticast mode [ 1641.305677][T29647] vhci_hcd: connection reset by peer [ 1641.306311][T17766] vhci_hcd vhci_hcd.0: stop threads [ 1641.306334][T17766] vhci_hcd vhci_hcd.0: release socket [ 1641.306384][T17766] vhci_hcd vhci_hcd.0: disconnect device [ 1641.351840][T18456] usb 2-1: USB disconnect, device number 9 [ 1641.436804][ T9] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 1641.595448][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 1641.596874][ T9] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1641.598129][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1641.600700][ T9] usb 6-1: config 0 descriptor?? [ 1641.615057][ T9] as10x_usb: device has been detected [ 1641.624274][ T9] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1641.649481][ T9] usb 6-1: DVB: registering adapter 2 frontend 0 (nBox DVB-T Dongle)... [ 1641.681253][ T9] as10x_usb: error during firmware upload part1 [ 1641.684178][T29663] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6650'. [ 1641.685199][ T9] Registered device nBox DVB-T Dongle [ 1641.812298][T18456] usb 6-1: USB disconnect, device number 111 [ 1641.899473][T18456] Unregistered device nBox DVB-T Dongle [ 1641.981692][T18456] as10x_usb: device has been disconnected [ 1642.032902][T29658] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6648'. [ 1642.040094][T29658] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6648'. [ 1642.210464][T29676] FAULT_INJECTION: forcing a failure. [ 1642.210464][T29676] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1642.210511][T29676] CPU: 0 UID: 0 PID: 29676 Comm: syz.0.6656 Tainted: G L syzkaller #0 PREEMPT(full) [ 1642.210534][T29676] Tainted: [L]=SOFTLOCKUP [ 1642.210541][T29676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1642.210552][T29676] Call Trace: [ 1642.210559][T29676] [ 1642.210567][T29676] dump_stack_lvl+0xe8/0x150 [ 1642.210597][T29676] should_fail_ex+0x410/0x560 [ 1642.210630][T29676] _copy_to_user+0x31/0xb0 [ 1642.210653][T29676] simple_read_from_buffer+0xe1/0x170 [ 1642.210693][T29676] proc_fail_nth_read+0x1bb/0x230 [ 1642.210720][T29676] ? common_file_perm+0x20e/0x2b0 [ 1642.210744][T29676] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1642.210773][T29676] ? rw_verify_area+0x24a/0x4c0 [ 1642.210800][T29676] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1642.210826][T29676] vfs_read+0x213/0xa80 [ 1642.210856][T29676] ? __pfx___mutex_lock+0x10/0x10 [ 1642.210878][T29676] ? __pfx_vfs_read+0x10/0x10 [ 1642.210903][T29676] ? __fget_files+0x2a/0x420 [ 1642.210930][T29676] ? __fget_files+0x3a2/0x420 [ 1642.210952][T29676] ? __fget_files+0x2a/0x420 [ 1642.210983][T29676] ksys_read+0x150/0x270 [ 1642.211010][T29676] ? __pfx_ksys_read+0x10/0x10 [ 1642.211045][T29676] do_syscall_64+0x166/0x520 [ 1642.211071][T29676] ? trace_irq_disable+0x3b/0x140 [ 1642.211090][T29676] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1642.211110][T29676] ? clear_bhb_loop+0x70/0xc0 [ 1642.211132][T29676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1642.211150][T29676] RIP: 0033:0x7face9d5e98e [ 1642.211168][T29676] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1642.211183][T29676] RSP: 002b:00007faceaba7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1642.211203][T29676] RAX: ffffffffffffffda RBX: 00007faceaba86c0 RCX: 00007face9d5e98e [ 1642.211216][T29676] RDX: 000000000000000f RSI: 00007faceaba80a0 RDI: 0000000000000004 [ 1642.211228][T29676] RBP: 00007faceaba8090 R08: 0000000000000000 R09: 0000000000000000 [ 1642.211240][T29676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1642.211251][T29676] R13: 00007facea026038 R14: 00007facea025fa0 R15: 00007facea14fa48 [ 1642.211281][T29676] [ 1642.511395][T29678] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3333159381 (13332637524 ns) > initial count (1750453420 ns). Using initial count to start timer. [ 1642.517700][T29678] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1642.687165][T18456] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1642.714468][T29688] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6659'. [ 1642.840164][T18456] usb 5-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 1642.842858][T18456] usb 5-1: config index 0 descriptor too short (expected 158, got 127) [ 1642.842892][T18456] usb 5-1: config 1 has an invalid descriptor of length 130, skipping remainder of the config [ 1642.842910][T18456] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1642.842950][T18456] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1642.848641][T18456] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1642.848666][T18456] usb 5-1: Product: syz [ 1642.848680][T18456] usb 5-1: Manufacturer: syz [ 1642.848694][T18456] usb 5-1: SerialNumber: syz [ 1642.868852][T18456] uvcvideo 5-1:1.0: probe with driver uvcvideo failed with error -22 [ 1643.087773][T29668] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6652'. [ 1643.410357][ T5685] usb 5-1: USB disconnect, device number 110 [ 1643.572942][T13178] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1643.595239][T13178] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1643.613446][T13178] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1643.633531][T13178] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1643.642888][T13178] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1643.686029][T29713] loop5: detected capacity change from 0 to 7 [ 1643.701005][T29713] loop5: [ 1643.701030][T29713] loop5: partition table partially beyond EOD, truncated [ 1643.913782][T29725] loop4: detected capacity change from 0 to 7 [ 1643.920703][T29725] Dev loop4: unable to read RDB block 7 [ 1643.920745][T29725] loop4: unable to read partition table [ 1643.920940][T29725] loop4: partition table beyond EOD, truncated [ 1643.920956][T29725] loop_reread_partitions: partition scan of loop4 (þ虫xü—ŸÑà– ) failed (rc=-5) [ 1644.106755][ T5685] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 1644.300027][ T25] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1644.317188][ T5685] usb 6-1: Using ep0 maxpacket: 32 [ 1644.323849][ T5685] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1644.336437][ T5685] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1644.347828][ T5685] usb 6-1: config 0 descriptor?? [ 1644.363154][ T5685] as10x_usb: device has been detected [ 1644.369652][ T5685] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1644.391646][T18642] team0: Port device syz_tun removed [ 1644.398633][ T5685] usb 6-1: DVB: registering adapter 2 frontend 0 (nBox DVB-T Dongle)... [ 1644.435356][ T5685] as10x_usb: error during firmware upload part1 [ 1644.444497][ T5685] Registered device nBox DVB-T Dongle [ 1644.457410][ T25] usb 2-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 1644.475995][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1644.487338][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1644.501610][ T25] usb 2-1: config 0 descriptor?? [ 1644.508881][T29729] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1644.561662][ T5685] usb 6-1: USB disconnect, device number 112 [ 1644.602796][ T5685] Unregistered device nBox DVB-T Dongle [ 1644.607957][ T5685] as10x_usb: device has been disconnected [ 1644.739637][T29716] bridge0: port 1(bridge_slave_0) entered blocking state [ 1644.740500][T29716] bridge0: port 1(bridge_slave_0) entered disabled state [ 1644.740662][T29716] bridge_slave_0: entered allmulticast mode [ 1644.745617][T29716] bridge_slave_0: entered promiscuous mode [ 1644.755535][T29716] bridge0: port 2(bridge_slave_1) entered blocking state [ 1644.757971][T29716] bridge0: port 2(bridge_slave_1) entered disabled state [ 1644.758133][T29716] bridge_slave_1: entered allmulticast mode [ 1644.763401][T29716] bridge_slave_1: entered promiscuous mode [ 1644.791260][T29741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1644.791813][T29718] __nla_validate_parse: 1 callbacks suppressed [ 1644.791828][T29718] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6668'. [ 1644.796373][T29741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1644.798009][T29718] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6668'. [ 1644.813662][T29742] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1644.916212][T29716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1644.946116][T29716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1645.110943][ T25] usbhid 2-1:0.0: can't add hid device: -71 [ 1645.111069][ T25] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1645.142729][ T25] usb 2-1: USB disconnect, device number 10 [ 1645.150199][T29716] team0: Port device team_slave_0 added [ 1645.164183][T29716] team0: Port device team_slave_1 added [ 1645.242199][T29716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1645.251185][T29716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1645.251245][T29716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1645.264676][T29716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1645.264693][T29716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1645.264718][T29716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1645.453384][T29716] hsr_slave_0: entered promiscuous mode [ 1645.460138][T29716] hsr_slave_1: entered promiscuous mode [ 1645.487430][T28309] net_ratelimit: 114 callbacks suppressed [ 1645.487484][T28309] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1645.507471][T17766] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1645.527501][T17766] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1645.547382][T28309] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1645.568307][T17766] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1645.588196][T28309] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1645.609226][T17766] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1645.627133][T17766] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1645.647424][T28309] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1645.667062][T28309] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1645.755132][ T31] kauditd_printk_skb: 22 callbacks suppressed [ 1645.755185][ T31] audit: type=1326 audit(1788617714.106:5479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29759 comm="syz.1.6679" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7be9d9e159 code=0x7ffc0000 [ 1645.757083][ T31] audit: type=1326 audit(1788617714.116:5480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29759 comm="syz.1.6679" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f7be9d9e159 code=0x7ffc0000 [ 1645.757410][ T31] audit: type=1326 audit(1788617714.116:5481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29759 comm="syz.1.6679" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7be9d9e159 code=0x7ffc0000 [ 1645.759251][ T31] audit: type=1326 audit(1788617714.116:5482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29759 comm="syz.1.6679" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7be9d9e159 code=0x7ffc0000 [ 1645.760001][ T31] audit: type=1326 audit(1788617714.116:5483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29759 comm="syz.1.6679" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f7be9d9e159 code=0x7ffc0000 [ 1645.760043][ T31] audit: type=1326 audit(1788617714.116:5484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29759 comm="syz.1.6679" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7be9d9e159 code=0x7ffc0000 [ 1645.760080][ T31] audit: type=1326 audit(1788617714.116:5485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29759 comm="syz.1.6679" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7be9d9e159 code=0x7ffc0000 [ 1645.760320][ T31] audit: type=1326 audit(1788617714.116:5486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29759 comm="syz.1.6679" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7be9d9e159 code=0x7ffc0000 [ 1645.776926][T15936] Bluetooth: hci0: command tx timeout [ 1645.797721][T29760] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1645.802020][ T31] audit: type=1326 audit(1788617714.156:5487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29759 comm="syz.1.6679" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7be9d9e159 code=0x7ffc0000 [ 1645.802191][ T31] audit: type=1326 audit(1788617714.156:5488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29759 comm="syz.1.6679" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7be9d9e159 code=0x7ffc0000 [ 1646.177017][ T5677] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1646.209429][T29765] loop4: detected capacity change from 0 to 7 [ 1646.216474][T29765] Dev loop4: unable to read RDB block 7 [ 1646.216539][T29765] loop4: unable to read partition table [ 1646.217911][T29765] loop4: partition table beyond EOD, truncated [ 1646.217932][T29765] loop_reread_partitions: partition scan of loop4 (þ虫xü—ŸÑà– ) failed (rc=-5) [ 1647.030024][T29775] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6686'. [ 1647.137229][T29716] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1647.152339][T29716] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1647.160710][T29716] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1647.173388][T29716] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1647.181632][T29716] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1647.196256][T29716] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1647.206189][T29716] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1647.220900][T29716] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1647.428313][T29716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1647.460503][T29716] 8021q: adding VLAN 0 to HW filter on device team0 [ 1647.466552][T28309] bridge0: port 1(bridge_slave_0) entered blocking state [ 1647.466724][T28309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1647.476692][T28309] bridge0: port 2(bridge_slave_1) entered blocking state [ 1647.476796][T28309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1647.736338][T29716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1647.856839][T15936] Bluetooth: hci0: command tx timeout [ 1647.865945][T29716] veth0_vlan: entered promiscuous mode [ 1647.877753][T29716] veth1_vlan: entered promiscuous mode [ 1647.922484][T29716] veth0_macvtap: entered promiscuous mode [ 1647.940827][T29716] veth1_macvtap: entered promiscuous mode [ 1647.974237][T29716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1648.008467][T29716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1657.052866][T18456] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 1753.276654][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1753.291268][ C1] rcu: 0-...!: (1 ticks this GP) idle=33dc/0/0x1 softirq=390085/390085 fqs=5 [ 1753.300126][ C1] rcu: (detected by 1, t=10503 jiffies, g=336117, q=23324 ncpus=2) [ 1753.308106][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1753.313337][ C0] NMI backtrace for cpu 0 [ 1753.313360][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1753.313386][ C0] Tainted: [L]=SOFTLOCKUP [ 1753.313394][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1753.313407][ C0] RIP: 0010:timerqueue_linked_add+0x24a/0x2e0 [ 1753.313444][ C0] Code: 00 74 08 4c 89 ef e8 a5 7b 57 f6 4d 89 75 00 49 8d 7d 08 ba 10 00 00 00 31 f6 e8 71 7d 57 f6 4c 89 f8 48 c1 e8 03 80 3c 28 00 <74> 08 4c 89 ff e8 7c 7b 57 f6 4d 89 2f 4c 89 ef 48 89 de e8 8e 64 [ 1753.313463][ C0] RSP: 0018:ffffc90000007d40 EFLAGS: 00000046 [ 1753.313482][ C0] RAX: 1ffff110170c50a3 RBX: ffff8880b8628518 RCX: 0000000000000000 [ 1753.313497][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8880299c2318 [ 1753.313510][ C0] RBP: dffffc0000000000 R08: ffff8880299c2317 R09: 0000000000000000 [ 1753.313524][ C0] R10: ffff8880299c2308 R11: ffffed1005338463 R12: 1ffff110170c5098 [ 1753.313540][ C0] R13: ffff8880299c2300 R14: 0000000000000000 R15: ffff8880b8628518 [ 1753.313554][ C0] FS: 0000000000000000(0000) GS:ffff888124cd8000(0000) knlGS:0000000000000000 [ 1753.313571][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1753.313585][ C0] CR2: 00002000000012c0 CR3: 0000000074d10000 CR4: 00000000003526f0 [ 1753.313603][ C0] Call Trace: [ 1753.313613][ C0] [ 1753.313624][ C0] ? trace_hrtimer_start+0x82/0x200 [ 1753.313658][ C0] enqueue_hrtimer+0x18e/0x2c0 [ 1753.313688][ C0] __hrtimer_run_queues+0x4ce/0xa10 [ 1753.313724][ C0] hrtimer_interrupt+0x4cd/0xaa0 [ 1753.313764][ C0] __sysvec_apic_timer_interrupt+0x102/0x430 [ 1753.313790][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1753.313819][ C0] [ 1753.313826][ C0] [ 1753.313834][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1753.313856][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1753.313884][ C0] Code: 2c 90 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 40 25 00 fb f4 cc 07 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1753.313901][ C0] RSP: 0018:ffffffff8ea07ca0 EFLAGS: 00000242 [ 1753.313917][ C0] RAX: 00000000013ed2d9 RBX: ffffffff819ba090 RCX: 8000000000000001 [ 1753.313933][ C0] RDX: 0000000000000001 RSI: ffffffff8e474cae RDI: ffffffff8c6d9480 [ 1753.313947][ C0] RBP: ffffffff8ea07d78 R08: ffff8880b8633a1b R09: 1ffff110170c6743 [ 1753.313962][ C0] R10: dffffc0000000000 R11: ffffed10170c6744 R12: 0000000000000000 [ 1753.313976][ C0] R13: 1ffffffff1d51df0 R14: 1ffffffff1d40f9c R15: dffffc0000000000 [ 1753.313994][ C0] ? do_idle+0x2e0/0x540 [ 1753.314028][ C0] default_idle+0x9/0x20 [ 1753.314046][ C0] default_idle_call+0x72/0xb0 [ 1753.314066][ C0] do_idle+0x2e0/0x540 [ 1753.314096][ C0] ? __pfx_do_idle+0x10/0x10 [ 1753.314130][ C0] cpu_startup_entry+0x43/0x60 [ 1753.314160][ C0] rest_init+0x378/0x3a0 [ 1753.314181][ C0] ? __pfx_rest_init+0x10/0x10 [ 1753.314207][ C0] ? __pfx_kernel_init+0x10/0x10 [ 1753.314229][ C0] ? __pfx_acpi_hw_get_mode+0x10/0x10 [ 1753.314346][ C0] ? acpi_ut_status_exit+0x120/0x1f0 [ 1753.314391][ C0] ? acpi_ut_status_exit+0x120/0x1f0 [ 1753.314412][ C0] ? acpi_enable_subsystem+0x286/0x3c0 [ 1753.314553][ C0] start_kernel+0x392/0x3e0 [ 1753.314596][ C0] x86_64_start_reservations+0x24/0x30 [ 1753.314678][ C0] x86_64_start_kernel+0x137/0x1b0 [ 1753.314708][ C0] common_startup_64+0x13e/0x157 [ 1753.314742][ C0] [ 1753.645405][ C1] rcu: rcu_preempt kthread starved for 9636 jiffies! g336117 f0x2 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=1 [ 1753.656540][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1753.666507][ C1] rcu: RCU grace-period kthread stack dump: [ 1753.672393][ C1] task:rcu_preempt state:R running task stack:27744 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1753.685916][ C1] Call Trace: [ 1753.689194][ C1] [ 1753.692129][ C1] __schedule+0x17db/0x58f0 [ 1753.696652][ C1] ? __lock_acquire+0x6df/0x2e50 [ 1753.701613][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 1753.706748][ C1] ? __pfx___schedule+0x10/0x10 [ 1753.711698][ C1] ? lock_acquire+0x115/0x350 [ 1753.716389][ C1] ? schedule+0x90/0x2b0 [ 1753.720643][ C1] schedule+0x164/0x2b0 [ 1753.724812][ C1] schedule_timeout+0x152/0x2c0 [ 1753.729680][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1753.735059][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1753.740361][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1753.746208][ C1] ? prepare_to_swait_event+0x322/0x350 [ 1753.753626][ C1] rcu_gp_fqs_loop+0x30c/0x11f0 [ 1753.758568][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1753.764775][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1753.770163][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1753.775431][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1753.781479][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 1753.786103][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1753.791330][ C1] ? __kthread_parkme+0x71/0x1f0 [ 1753.796293][ C1] ? __kthread_parkme+0x199/0x1f0 [ 1753.801342][ C1] kthread+0x38b/0x480 [ 1753.805417][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1753.810702][ C1] ? __pfx_kthread+0x10/0x10 [ 1753.815380][ C1] ret_from_fork+0x514/0xb70 [ 1753.819979][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1753.825108][ C1] ? __switch_to+0xc89/0x1420 [ 1753.829810][ C1] ? __pfx_kthread+0x10/0x10 [ 1753.834405][ C1] ret_from_fork_asm+0x1a/0x30 [ 1753.839203][ C1] [ 1753.842226][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1753.848553][ C1] CPU: 1 UID: 0 PID: 29778 Comm: iou-sqp-29775 Tainted: G L syzkaller #0 PREEMPT(full) [ 1753.859752][ C1] Tainted: [L]=SOFTLOCKUP [ 1753.864074][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1753.874128][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x75/0x80 [ 1753.880339][ C1] Code: 10 17 00 00 83 fa 02 75 21 48 8b 91 18 17 00 00 48 8b 32 48 8d 7e 01 8b 89 14 17 00 00 48 39 cf 73 08 48 89 3a 48 89 44 f2 08 06 8d 1f 0a cc 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 [ 1753.899953][ C1] RSP: 0018:ffffc9000489f1d8 EFLAGS: 00000293 [ 1753.906039][ C1] RAX: ffffffff81bb6bfe RBX: ffff8880b8643708 RCX: ffff88802e2bbe80 [ 1753.914017][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1753.921988][ C1] RBP: ffffc9000489f330 R08: ffff88802e2bd41f R09: 1ffff11005c57a83 [ 1753.929968][ C1] R10: dffffc0000000000 R11: 0000000000000000 R12: 1ffff110170c86e1 [ 1753.937947][ C1] R13: 0000000000000000 R14: ffff8880b8643700 R15: 0000000000000001 [ 1753.945924][ C1] FS: 0000000000000000(0000) GS:ffff888124dd8000(0000) knlGS:0000000000000000 [ 1753.954852][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1753.961437][ C1] CR2: 00007fee296a68d0 CR3: 00000000778f8000 CR4: 00000000003526f0 [ 1753.969414][ C1] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 1753.977388][ C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1753.985361][ C1] Call Trace: [ 1753.988646][ C1] [ 1753.991575][ C1] smp_call_function_many_cond+0x63e/0x1500 [ 1753.997484][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 1754.002699][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1754.009030][ C1] ? rcu_is_watching+0x16/0xb0 [ 1754.013817][ C1] ? trace_tlb_flush+0x3c/0x160 [ 1754.018702][ C1] flush_tlb_mm_range+0x8ff/0x1090 [ 1754.023861][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 1754.029438][ C1] ? unwind_next_frame+0x8f/0x2550 [ 1754.034564][ C1] ? unwind_next_frame+0x1baf/0x2550 [ 1754.039877][ C1] ? __lock_acquire+0x6df/0x2e50 [ 1754.044822][ C1] tlb_flush_mmu+0x1af/0xa30 [ 1754.049443][ C1] tlb_finish_mmu+0xf4/0x220 [ 1754.054048][ C1] free_ldt_pgtables+0x192/0x360 [ 1754.058994][ C1] ? __pfx_free_ldt_pgtables+0x10/0x10 [ 1754.064477][ C1] ? down_read+0x2be/0x330 [ 1754.068900][ C1] exit_mmap+0x1bf/0x9f0 [ 1754.073161][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 1754.077957][ C1] ? __pfx_exit_aio+0x10/0x10 [ 1754.082659][ C1] ? uprobe_clear_state+0x2a4/0x3d0 [ 1754.087888][ C1] __mmput+0x118/0x420 [ 1754.091997][ C1] exit_mm+0x221/0x2d0 [ 1754.096076][ C1] do_exit+0x6cd/0x2360 [ 1754.100253][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1754.105658][ C1] ? __pfx_do_exit+0x10/0x10 [ 1754.110262][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1754.116086][ C1] io_sq_thread+0x1bd0/0x1e50 [ 1754.120919][ C1] ? __pfx_io_sq_thread+0x10/0x10 [ 1754.125979][ C1] ? __lock_acquire+0x6df/0x2e50 [ 1754.130925][ C1] ? ktime_get+0x1f5/0x220 [ 1754.135358][ C1] ? cgroup1_freezing+0x20/0x350 [ 1754.140317][ C1] ? cgroup1_freezing+0x20/0x350 [ 1754.145287][ C1] ? cgroup1_freezing+0x20/0x350 [ 1754.150251][ C1] ? cgroup1_freezing+0x29a/0x350 [ 1754.156087][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1754.162186][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1754.167409][ C1] ? __pfx_io_sq_thread+0x10/0x10 [ 1754.172453][ C1] ret_from_fork+0x514/0xb70 [ 1754.177060][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1754.182185][ C1] ? __switch_to+0xc89/0x1420 [ 1754.186886][ C1] ? __pfx_io_sq_thread+0x10/0x10 [ 1754.191951][ C1] ret_from_fork_asm+0x1a/0x30 [ 1754.196767][ C1]