last executing test programs: 1m10.445095194s ago: executing program 3 (id=1414): sched_setscheduler(0x0, 0x1, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) unshare(0x66000080) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r0 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000100)='io.pressure\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x309}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000571000/0x4000)=nil, 0x4000}, 0x5}) msync(&(0x7f00009bd000/0x1000)=nil, 0x1000, 0x4) readv(r1, &(0x7f00000002c0)=[{&(0x7f0000000400)=""/224, 0x20}], 0x1000000000000108) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18) unlinkat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) 1m10.234047101s ago: executing program 1 (id=1416): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x600000, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x169a41, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000c400)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000a00)="52973bffae9619ad9a57b2c2c09c72dd0d7c95d5ab5fca8f30411377f1921ab11b9b706ccc3fe4c1f8d2013f9e318fe09e800b015f3443c5a688095c96ee2ec1dea3e3a6f69e432b4256cf7ad4d94957ae826b2cfbcf27ab6260d2e1ccbcd4251b82b6c6ecd51fa54074ac2dc259fe842bfe39949a454b13512dde", 0x7b}, {0x0}], 0x2, &(0x7f0000000e00)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00040000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x4080}}, {{0x0, 0x0, &(0x7f0000005f00)=[{&(0x7f0000004580)="ae017579034f09f9fa2b94", 0xb}, {&(0x7f0000004e80)="a6f93b8431a4e835806ec98df29440bb45bfc75e0d8f5bfb7c17e4a79f9e0cf2b00139f6a69641bd873dcef9624c1c4bf19e91978b3ea4019e626fdc99db004d61412401eff4d363c76b3787fb08dce3706436c50aa8083801443a2b85f653144409f174e67ae52808775b51d77b2187399f827200baa8ba823b9347541cbd24288d06fb3f8c3c3593feb5af38d312dc2f86a48e40d8dff33b8a0befa71c560539e0d4a36318187465eacc0fe1f0ae27156184564e4320a51004b2001617bdc7eec134f8d846ad071e90bba2143d2c98d900da946aa854faa37506749e19dda511abc274e45cf331df66b25e31088fc2ba66bcc2f9b547c73e81b3de245e5db7b3af6c0e86699ae47f6b9fe1626ac00152eeb4f2e85f8c9d11a0e9c4ac7bcdc3794739169cf326b9b1e243a3db72d4df6495c8ea85e3d5fc8883b6ded59348b0b2a1a7735151fec8a88992e00e033e1484fc5de8a8af0ed35b8b46333633de77a5cecc5f05b7594532c37089389704b7f6eafb9d27fb89445996926643b9c89e25ae94a4e7f559839443c41f2f9a7716eff030816ea90a5c54a5bf4d1aab297425129639d4de0e5ad6daba55689fafb1d548f906b3a0fdf79c7e8990494d74c0ebf7e4b79a65d3abfd918968a2ab3283e8e9652a2253d5d51ba28761b21e030502d17fa4fb7ae7cef532732cd665a0d6585c28c53b51c04958e1247450598ab1dbae773b25f030362e91b36e3d94b176159d87d8084aefd15da438735594d916fbdfe70c38c319296312d1321f3ae3d888840b1221bbc191c7a10bc649900d2b1306dd14f58353164016a823f4c1916dbc61a31ced55a107c2a2b4267c2b42e50dbf818e8d91e58f42241939c876ee23366d2ddaee60b3d55d176a1027448ab4b92fe1a23368b81081278ff5b26005ba3cb74620e38bf7f8e5041f5efa30e8d95714f21f75420cd1c88c2cba56f78f99d95cd7a0e2dc16109e11063f4bbbb3f4bbc7bce08098c9056ef8d0600c6bd4ad5f6e69e471422056e691d9de8460d05b10eee4a5b75f8869d3d051bf35c4fa338ca75fc07cda6d235800221b492d6ad9b62cff8bde54c5253424f00565ff80a0135f05c57e4595413ae092ca85fb5ca03749955f1fb5520e6219474cb1812cb316d67351b48dbebd9f6987704bfddff4834bf9ef6f14eda0f77a003dced952c791cfc8d6ca3c4b9198f4f4cc815178451d28702a8687392173618317903d2c95d4c1b269ee192e5d532ce8c6b59639686b7083c9cd151a65b7a0ba4682fb23ee4a811a67850964409438066589fa11b85be42a9872e2549f8177e42e6139446cd5b5fd9bcf8416675d0fc062ed346e3568a5bbdc583b2248d40f9b3ed75073aadfb664e3db09dd229c015e141ad509f95bf41351dacbc6b499abb00878fc76c04c406f534ec1bcdd0e921e6c6b5e38204522e0339e8b3444fe13558abbf9de4022b032b22cdb4b62a4bdb53952d9bf6c97f7179f2b52f093d2c4483576b87f44899d74b8b2f58a6db0e97bf96bb5872e84967a6fcb9c5bb3f013965dd5ecd33850ab1034412f5e46821bee5196598b2d76090beec7fb7279234b62326133c88ee2a4017875755997c5abd4d9ab69532774bbcdea2d07439170245f0800986ec2ed7783a4858ea7e106c36704d6902737f528960fead820a5563c5bfa271a68cd19fe0118ed13ea1642369e6059a41f512c57448a2cb414598c764889d8dc58a5a29580aa3d0b107f5f3e1fc28361042cdac058984c931a5e4a2bf61174208f46b0a114f6ddd1c3abb8b909ab3861d5ced53e60e5955b92846a3a4c7463faf8127c1dc2c310b49bd3560552a1466fed9a07de91b34bf6e1ba5a741dc2a526871fda01dc89e24ba8d725aba2cd9546148f336e432b173b5e5e3e01a9b0be66e813d6e456f64939c0b4b4122fe08a40c68a655037ee880655926b7221545017f99e8d7ccf89335d3cad59b515e82ebed3ffd77704202ec783bbb10cf7865ad71d6afee80d8277ebc5e3fbf894ab05e08df20ee667f2b8722f9e5b070035dd2958b907beff604c356ab89a4b09dd4c9f5f86f6892987a027355d77c64d2e9e8539f313dec032a35a126786753cfd1f1244c316255f4dbf5870c8201a85a2bea7504fadf527dea2b1d4ae975091800c86d8eb2adb3986d9317145239de76be57cceab83d2d92f6aabc3ef942a9c3aa9d23060b737f91bfe33fd6fe2f14329f1b919cd506cc26cbc28187dbbb9883897ae20e314ed52b754a8004182d5b41bca0b0760cfa3c191ecd3196cf15c6d140ff7862e35b718f5827e7ebfc70a9cead96980e83b980364cad468f94f20ac732e10839196a51bfadb24f10f71a2ea8ba0ad025d9d4b2fb615b93533a52c06633be206a2007858d91fd29fb5f692556a97d919de9e1e1aa82217b8b2ba4a58978f6956cec212acc75bbfae8d04fd7d6b11152d412af7019efcf9befa084b9ff898f1adaeafe0c9ed3ae7ec838ce57d3d968ed5323b99cae5dc6639778b871f5b32e5de4678440412b7c2572aeaf34bb89a7554f1e92bf4279ac347b47bc2fe400f04cefa02c75d06e47e044f66ddb375160177d2f638e137260fb25dae01b4c78bf6e5f38da8050f00d78762a9b2cafd5827f4d18529e42f891853b9fb8b81ed7da0dadc9e2f8856ed7f5883a63ed1d10f0709024bf87a28a91d51d4c419ace259c70388c6cc4b4f5aab8ec36d6de3519ab5305e93732efd4684fb16bb14707fd2b43c36cbe07646f2731773354edcc4c923f5dc86576fa212df8754c82672e0aa5d647e2fd50da3af77a92424db9fa9ae8907e44a919be024986c08431ae6ab29e41505b82e182f657fb4700700d2fad0b65cac96bc6340d9ffcae87b2190831e2380e318a28c83570c05957e8cbdfd858a9ee50477a45148217af175f4d09858fafb4a7b13b2944ed021be7bc9f09cc648f8e1d8c3fa0161f7e68ac4a3dbd3885bc58ef85585a18f97d7d27833a3726edc4693e8b587a7c1d4851eb33a32d78330121fadbfb0bd60fa5d7756e2f666694b4b5daf785ff302b06fedad43787aa33f67c13a4413785ba68d33c507439d9c739454f48939087873294a7cf5a57a00ba98444ce52a83a546c67deb6f2f3a8bda150cd98c72631a0be009d0a263ebbc4f512a949e4cf120909f4e5e64114c4a2b459f16323ad8771870f944d14fcdba311a9d89668b770415a7deab2da586592c41b251e7e52ee99bb35a9c0e630dddd7585d24ef96821378b5c17ad18b275d37021f02334aaf9a10bec0e0d7234c66db5961f7b13e0011f6af7feff35fe2ad853b26427cb1af8d0dcb290a1bc1898e74f6a7c2a2b034e84d7a736f42e171615e8d0027c23b6208c90e635a978fd6584c22bed7edc73e6a18ff7012fff2cd4cd722fc4ba1e64b81a8afd9395423066b38454e250c7f447106ffd6ca61b98f7b1b125df91c7b39880e043b357acecf94826722fdfa9939dfffd6d2fd47f3fea2f58c1d6d3115b39bf9ffc1096d5cacdb65b6b43c62e35fe2738e8748a17472f3c5529d230ec7f60f726563680a476b144eb30c6c6182948406dbde662823e982ea90ae11b863d1fb002b62f21cad783b96620d93c82ed7a1000ee8a878d32c31d2b4deb49491a8629acc7de7edb13685c1b631f510d7fa274334e39c7f81d1d66dc0a4f2939163987efff299d59f88c7c28bf4545bac172e427dd22adc15923fea208d6425e28933b235f69400c60095e241a6a2b446926f0d5e8def17941461f73227357c3f0f5fe50a7564e3984ac747229d0ffe35341ba2662aa22af1ea4f63191e111f0de03b5890c479a53441ea41a90ab37fbd0ad15fe17c6fd9ec3dabda164fd784a15a0e651e890c301e762fb41439dc1eef76aef97156a400d4c6f726c3652c9c55e51052613bcac11c17b25a868ce13687239d9ca62b6baba8e4dea8a2a895a56afa07ad5158d40ca223a41b2edc933b3b0918c17e17d22256395250a33b99052b49e2820adf8b0b648f7c83fd487d0186b13901e92be2f93afc61ca61cc642fe84e12973d79b4eb4d3b03f10b490a7e0a9678405cab203f5cf8b40975dcdc3a8995b2e29c19e18ee9f2699847457cfaa8f602e974b0c720282338980244d9ed63e0a32dcd3f651264faf0ba5829d8747d50060e64f968c3c545d0036d651ac0adc242e6cc704564b47f5e460bdcc0c253f52eb6cb00075b17959f7741d1cdeee1c5d3dfc23b13feb04589ce98ee3d9fc20b720dd53089fffd6b4d51b05fdac269701e5dd2ababc70640fe3d75e972ace0c7eb10282b9c84509832c4b87fa85d700f32a1d8dba53a7b3d6645cba0a22fde49fadd7f4ea0c70a451831389c0da9eed603188287842ecf329f0904df9d7c650ebd71095281ff7e5754ce20205644f795239e65513529644e4a15d6cd2ee6c46c54ee76a3a1d8d5cf25939f1c016e500596a4a34fc7cdb7988f161608a50b122b96c0ca4592b4bb1bc51d76fcda0da30b91ce665c9e7956ade4eec9f754b0e78b24d8116abfe6e33a68b05f4abd69d716ce0601fdcf084b8c085cf8c2c0c7d7dc05c0b9f64d5bf6f3697fd37002a34c87a864ad6001cd5cad78e11de385138151d3326db253a812113cbcf5ce6a7caf22f07d8239132149c5b370efc05d10f78413858774d59cb156a3185b86087f8d1c1f7cd4a1d1d1c63ad9dbcf6cfe6668416f131d47b5917727177c95a2244489ecaf18678c7ebf3d39f92d6a15bafd209dd0746e268859f4c658636f317cf36275601eacd4139d1730b2db5b0257dd689432cacad0fdde0d42f7edbe6c7298e0cb1aa5464ab044fb7aea547033583d7868c714bc75711e070ae83252af0dd054f4ada1a05650f744379ec265f4fd60bfdd0d7af94855d875b87746bb2d263dfffa236152c6560c21e62c74fa6ac9c70050562bb1213c2b00ff957d38d5fd495d89bea1da9a85374e608bb1c4506aaa994e711d14748129f194457a25f7d1e9f4257ea172d2c4b8a203cc94e6cd42e8cdb6315577ebfcd9671ac820d50a800bd33a6adff6cdd9891b0f9caff51c485c75bbd2eb7ddcfde96766b11aac9d5be02c3c21324f304565d701f5b06bd242e750fbfa8449f18b7c2a8b8baa8c45d8246d3efaa21f19ee8f99f304cd4ce1de5cba4e8588494958643549f46a5b035fc7ec9a360aa56f0b781b7488c28d619b51e2daa999f4e612ba8914ab23f17ddc47147b81499c41a34050a613ed11f02c72df1165b6f42156cf4f9906bee3bc38f4f6e37c72cb2f72b926c0ce4e13e913ebaa54e89905f49e2bdb477acb90fcd819cd96f4fa7a78eff4c49016ab85dde00f74f44a89e66c4f4052137d02ad9e5e0db62a1dd779b2eed7d6d6830e717aa8b97418fe900b31b8a8f30bb32bdfa3371afe9cbd325246f348656f76c1e395d258e7d8fa23d64328d07d858f701ff7bf95e41e1f7f4b7eaa5996df47cffe32b1dc31ff6f8ee4a3d8587713bdea7fd64ff20a41797dbd5d12d541ddfb7b6aea55d0a880c38217f4b69fe53d0c605455606b79d9ca5a2a1b1b1e9e0f25c4d75a6ac8095cad53515b01829f33f11d65b2a5253e91f3112572a550f483411638ac7bfce4e4eff070249a9807a809821f8ee38fe7402f128a08be6dff017461c03a99a18928ad4643c80e80fc1dae8cbb8682f4b7c4fa2fe4b53999a6c69ceafee939518294abb16fec96f6feacc2685b92ae35042296eae037649378f0d6e3f6aaff1eebc3a51720ce8b64904e1c3e3c98b7a7b3977a5056613eda8f1f7fae96a8", 0x1000}, {&(0x7f0000005e80)="55c86e538e72f448faecaf96e0df30e2a67ad4bd5b7a7630093653c08aa259e3563b34f4cca89beedb5a6dc6cf1ba502b0a1e160a95b7b5b43a7a3b7c2be1da83b96f068ba3679ef0afed086ebf5290a1260ba4ff07ed1af81ed017c9db2d6264bc4483628048284502a", 0x6a}], 0x3, &(0x7f0000000e80)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESDEC, @ANYBLOB='\x00\x00\x00\x00$\x00'/20, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0xc0, 0x8000}}, {{&(0x7f000000c240)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f000000c3c0)=[{&(0x7f000000c2c0)="b40df7fd4aacc8942acec7e540ae506349088a7c198c5c41be38dad6ebc080602b", 0x21}, {&(0x7f000000c300)="5fccd73e48c22000813bce18d76a23484a633051e93dab3d234662735821e34192b230f45c4b6dc24e8fcdfd14a1118724b6468336c3e7d2ac2cfd84df1ef6788236719bde89bfdd97e8d2a872fef787aeb7cef33be5ad7e865a4b677c36480a7d4891dea80e1f6b4629deb264daee33b8fc0e9b9210830ed6a99774249c76f41f9b660f37f49c2a1fc1321ac64038477132fa594e34cea2bdfa5d4a730fd7c90a8ef5b050b727bdf8c394", 0xab}], 0x2, 0x0, 0x0, 0x4000}}], 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000009c0)=[{{&(0x7f0000000540)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000000840)=[{&(0x7f00000003c0)=""/212, 0xd4}, {&(0x7f0000000740)=""/76, 0x4c}, {&(0x7f00000007c0)=""/128, 0x80}], 0x3, &(0x7f0000000940)=""/107, 0x6b}, 0x3}], 0x1, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000980), 0xfdef) splice(r4, 0x0, r3, 0x0, 0x86, 0x4) sendfile(r2, r2, 0x0, 0x20000005) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendfile(r6, r2, 0x0, 0x1002000ff) fcntl$dupfd(r6, 0x0, r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c00000010000100297000fadbdf250000000000", @ANYRES32=r8, @ANYBLOB="1380000023b205003c00128009000100626f6e64000000002c0002800800070081000000080003"], 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0xc094) splice(r7, 0x0, r7, 0x0, 0x2, 0x3) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='cdg', 0x3) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x49, 0x20008000) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000004c0)=@ccm_128={{}, '\x00', "bcf87c7910b661b4be4ae0143548a525", '\x00', "1aec271e54d0bbda"}, 0x28) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380), 0x4) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x200}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000002640)=""/4080, 0xff0}, {&(0x7f0000000880)=""/142, 0x8e}, {&(0x7f0000000c80)=""/174, 0xae}, {&(0x7f0000003780)=""/241, 0xf1}, {&(0x7f0000003880)=""/184, 0xb8}, {&(0x7f0000000bc0)=""/180, 0xb4}, {&(0x7f0000000040)=""/9, 0x9}], 0x8}, 0x1}], 0x4, 0x100, 0x0) 1m10.081254341s ago: executing program 1 (id=1417): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)=ANY=[@ANYBLOB="120100003a982a08cd0ca310a223010203010902120001000000000904"], 0x0) syz_usb_connect$uac2(0x5, 0x8b, &(0x7f0000000500)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x79, 0x3, 0x1, 0x8, 0x40, 0x3, {0x8, 0xb, 0x1, 0x1, 0x1, 0xb, 0x20, 0xe}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x100, 0x7, 0x19, 0x9}, [@mixer_unit={0x9, 0x24, 0x4, 0x3, 0x1, "aaf12f18"}, @multiply_unit={0x7, 0x24, 0xc, 0xe9, 0x3, 0x40, 0x8}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x4, 0xe, 0x2, {0x8, 0x25, 0x1, 0x81, 0x33, 0x40, 0xfffb}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x5, 0x5, 0xb2, {0x8, 0x25, 0x1, 0x80, 0x30, 0x81, 0x4}}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x7, 0x1, 0x1, 0x0, 0x80}, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x5, [{0x66, &(0x7f00000001c0)=@string={0x66, 0x3, "36d5604f66328363b1bc903ec38aaf54de251f130b05c39c8bfd7ad6ae2b944224be5718674f6e3cddacdf5189740afe20d7efaf3778fd080e83550f12a2a683a7be3d72220a11c22c3b40846b36b5c501a2589472fc482c6522bdd5d64a89ac66ebe14a"}}, {0x49, &(0x7f0000000240)=@string={0x49, 0x3, "0b163b73cfd517f1649fd24549c5db075f8ad392e1389f353e363e860b19b179887221850b3c99633736fb72a381394e6e86f3471296d63d069b3a9bf72c2072b4182252e1d5d9"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x44f}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x200a}}, {0x40, &(0x7f0000000180)=@string={0x40, 0x3, "73829edfb6d9eebf1aeec1cd3c665c83bba33fa019e23178a4a971d8de7ba339a08e8157cdf46976de9541dc725a6ea65b94f617a755cdfd66994f23bde6"}}]}) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 64) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) (rerun: 64) r2 = socket$inet(0x2, 0x3, 0x1) sendmsg$inet(r2, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0xffff, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000280)=[{0x0}], 0x1, &(0x7f0000000100)=ANY=[], 0x40}, 0xfffe) (async) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x5, 0x401d031, 0xffffffffffffffff, 0x0) (async) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x38) (async) semget(0x1, 0x2, 0x397) (async) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x54c, 0x268, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x0, 0xbe, "", [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x1, 0x1, 0xe, {0x9, 0x21, 0xbc0, 0x3, 0x1, {0x22, 0x341}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x1, 0x40, 0x6}}}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x2, 0x4, 0x7, 0x40, 0x8}, 0x31, &(0x7f0000000080)={0x5, 0xf, 0x31, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x22, 0x7, 0x6, 0x5c, 0x1}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x9, 0x1, 0x5, 0xf0f, 0xf6ed, [0x3f00]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0xd, 0x2, 0x994}, @ext_cap={0x7, 0x10, 0x2, 0x1c, 0x2, 0x5, 0x3}]}, 0x7, [{0xd, &(0x7f0000000340)=@string={0xd, 0x3, "4a1b93f6402c46262830bc"}}, {0x33, &(0x7f0000000400)=@string={0x33, 0x3, "4dff5fb480a33c1028f2cd0f4205f792c8492a32dd6d7c15dad7a8aff75da6a09250b60e4dd198bba517d719bf63cb87c7"}}, {0x15, &(0x7f0000000440)=@string={0x15, 0x3, "689495a29e400bb75f30a07038038746e8c9a2"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x42a}}, {0x27, &(0x7f0000000600)=@string={0x27, 0x3, "4bfaf695a84bb38e46ff15355936afb5024eb3002ef5240f6f88691432bb1d74f1a220aba7"}}, {0x42, &(0x7f0000000640)=@string={0x42, 0x3, "3a8d831d43c6cc83f0364d1c74a67775b5ffc1c36fe7d4f07fd2b25a018c1b90ec6e8a7413b144ea60bde332523cd25218493b2ca5fad12407a74d911a457d48"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x2c09}}]}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="400a06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) flistxattr(r1, &(0x7f0000000c80)=""/164, 0xa4) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_connect$uac2(0x5, 0xa4, &(0x7f0000000780)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x46d, 0x8f6, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0x8, 0x0, 0xa, {0x8, 0xb, 0x2, 0x0, 0x1, 0xa, 0x20, 0x7f}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4, 0x1, 0x1e, 0x6}, [@selector_unit={0x5, 0x24, 0xb, 0xe}, @input_terminal={0x10, 0x24, 0x2, 0x4, 0x405, 0x6, 0x1, 0x5, 0x7, 0x40, 0x2, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x9, 0x5, 0x9, {0x8, 0x25, 0x1, 0x80, 0xc, 0x80, 0x8001}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x97e3, 0x8, 0x81, 0x4}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x7, 0x1, 0x2, 0x5, "8498"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x6, 0x3, 0x97, {0x8, 0x25, 0x1, 0x82, 0x3c, 0x6, 0x13}}}}}}}}]}}, &(0x7f0000000c00)={0xa, &(0x7f0000000840)={0xa, 0x6, 0x200, 0x6, 0x5, 0xb3, 0x40, 0xfb}, 0x11c, &(0x7f0000000880)={0x5, 0xf, 0x11c, 0x4, [@generic={0xfe, 0x10, 0x1, "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"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x40, 0x3, 0x4, 0x8, 0x33}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x4, 0x3, 0x1}]}, 0x6, [{0x4f, &(0x7f0000000a00)=@string={0x4f, 0x3, "8e452c4b2c9ae2e3315713a10ce63989aaaa2f69e1e2f4c81e2416c7348df15407dc0b32b5c0d3385f7d462a555525ae5dcaa9ad4264327a4e2555931e2cc6776a06060ab233a87337264f6860"}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x4801}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x42a}}, {0x5e, &(0x7f0000000b00)=@string={0x5e, 0x3, "cbaa3f4512b8c2bdcbf58825a017ad1739d15e38086a01fb289922bf2f2b82d5e175837527acaf27f5103817f3952af8e417398017dbd8e608bd672e7eed72135e726492a94e172efdf60ee2c826dd3260f591d62a49ebf65cac5b7e"}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x804}}, {0x1f, &(0x7f0000000bc0)=@string={0x1f, 0x3, "744423dfc0f3c1a3c5f8fc1465a1ff58af67e3a1e374e675a521ecd2e8"}}]}) 1m9.454532194s ago: executing program 3 (id=1420): r0 = epoll_create(0xeb5) r1 = syz_open_dev$sndpcmp(&(0x7f0000000700), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x10000000}) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) write$char_usb(r2, &(0x7f0000000000)='9>5/', 0x4) 1m8.560037133s ago: executing program 3 (id=1427): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x600000, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x169a41, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000c400)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000a00)="52973bffae9619ad9a57b2c2c09c72dd0d7c95d5ab5fca8f30411377f1921ab11b9b706ccc3fe4c1f8d2013f9e318fe09e800b015f3443c5a688095c96ee2ec1dea3e3a6f69e432b4256cf7ad4d94957ae826b2cfbcf27ab6260d2e1ccbcd4251b82b6c6ecd51fa54074ac2dc259fe842bfe39949a454b13512dde", 0x7b}, {0x0}], 0x2, &(0x7f0000000e00)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00040000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x4080}}, {{0x0, 0x0, &(0x7f0000005f00)=[{&(0x7f0000004580)="ae017579034f09f9fa2b94", 0xb}, {&(0x7f0000004e80)="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", 0x1000}, {&(0x7f0000005e80)="55c86e538e72f448faecaf96e0df30e2a67ad4bd5b7a7630093653c08aa259e3563b34f4cca89beedb5a6dc6cf1ba502b0a1e160a95b7b5b43a7a3b7c2be1da83b96f068ba3679ef0afed086ebf5290a1260ba4ff07ed1af81ed017c9db2d6264bc4483628048284502a", 0x6a}], 0x3, &(0x7f0000000e80)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESDEC, @ANYBLOB='\x00\x00\x00\x00$\x00'/20, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0xc0, 0x8000}}, {{&(0x7f000000c240)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f000000c3c0)=[{&(0x7f000000c2c0)="b40df7fd4aacc8942acec7e540ae506349088a7c198c5c41be38dad6ebc080602b", 0x21}, {&(0x7f000000c300)="5fccd73e48c22000813bce18d76a23484a633051e93dab3d234662735821e34192b230f45c4b6dc24e8fcdfd14a1118724b6468336c3e7d2ac2cfd84df1ef6788236719bde89bfdd97e8d2a872fef787aeb7cef33be5ad7e865a4b677c36480a7d4891dea80e1f6b4629deb264daee33b8fc0e9b9210830ed6a99774249c76f41f9b660f37f49c2a1fc1321ac64038477132fa594e34cea2bdfa5d4a730fd7c90a8ef5b050b727bdf8c394", 0xab}], 0x2, 0x0, 0x0, 0x4000}}], 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000009c0)=[{{&(0x7f0000000540)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000000840)=[{&(0x7f00000003c0)=""/212, 0xd4}, {&(0x7f0000000740)=""/76, 0x4c}, {&(0x7f00000007c0)=""/128, 0x80}], 0x3, &(0x7f0000000940)=""/107, 0x6b}, 0x3}], 0x1, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000980), 0xfdef) splice(r4, 0x0, r3, 0x0, 0x86, 0x4) sendfile(r2, r2, 0x0, 0x20000005) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendfile(r6, r2, 0x0, 0x1002000ff) fcntl$dupfd(r6, 0x0, r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c00000010000100297000fadbdf250000000000", @ANYRES32=r8, @ANYBLOB="1380000023b205003c00128009000100626f6e64000000002c0002800800070081000000080003"], 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0xc094) splice(r7, 0x0, r7, 0x0, 0x2, 0x3) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='cdg', 0x3) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x49, 0x20008000) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000004c0)=@ccm_128={{}, '\x00', "bcf87c7910b661b4be4ae0143548a525", '\x00', "1aec271e54d0bbda"}, 0x28) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380), 0x4) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x200}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000002640)=""/4080, 0xff0}, {&(0x7f0000000880)=""/142, 0x8e}, {&(0x7f0000000c80)=""/174, 0xae}, {&(0x7f0000003780)=""/241, 0xf1}, {&(0x7f0000003880)=""/184, 0xb8}, {&(0x7f0000000bc0)=""/180, 0xb4}, {&(0x7f0000000040)=""/9, 0x9}], 0x8}, 0x1}], 0x4, 0x100, 0x0) 1m8.118890558s ago: executing program 1 (id=1429): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) r2 = openat$sequencer2(0xffffff9c, &(0x7f0000000280), 0x40000, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) unshare(0x22020600) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_usb_connect(0x3, 0x36, 0x0, 0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FICLONERANGE(r5, 0x4020940d, &(0x7f0000000c00)={{r4}, 0xbb28}) ioctl$SNDCTL_TMR_STOP(r2, 0x5403) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffee6}, 0x68) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="01000000000000000000070000000c0001800500020001000000"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8) 1m7.703487137s ago: executing program 2 (id=1434): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, &(0x7f0000000200)={0x1, 0x0, 0x101, 0x2, {0x2b5b, 0x5, 0x7, 0xc}}) shutdown(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) sendmsg$nl_xfrm(r2, 0x0, 0x844) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, r3, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x8000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x4000, 0x21) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, 0x0, 0x0, 0x0) getdents(r4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f00000003c0)={0x1, 0x0, 0x9, 0x3, 0x7f, 0x5, 0xc0e}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) umount2(&(0x7f00000000c0)='./file0\x00', 0x3) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e2400000000000100000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffc"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r6 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r7, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0, 0x2}, 0x8) 1m7.65894763s ago: executing program 4 (id=1435): r0 = socket$inet6(0xa, 0x3, 0x7) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x20}}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}, 0xf5ff}], 0x1, 0x0) 1m7.640253766s ago: executing program 3 (id=1436): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mmap(&(0x7f0000ad0000/0x1000)=nil, 0x1000, 0x300000f, 0x4000010, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8b27, &(0x7f0000000040)) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x8, 0x1) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) r1 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x45e, 0x3b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2, 0x80, 0x60, "", [{{0x9, 0x4, 0x0, 0xa, 0x1, 0x3, 0x1, 0x3, 0x6, {0x9, 0x21, 0x2, 0x2, 0x1, {0x22, 0x18d}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x7, 0x9, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x9, 0x7, 0x7}}]}}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x110, 0x8, 0x6, 0x1, 0x10, 0x38}, 0xf4, &(0x7f00000002c0)={0x5, 0xf, 0xf4, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x7, 0x9, 0x400}, @ssp_cap={0x10, 0x10, 0xa, 0x5, 0x1, 0x6, 0xff0f, 0x4, [0x0]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xe, 0x4, 0x8, 0x5}, @generic={0xc3, 0x10, 0x2, "7daa815e2e82f478bd989f9825043ab36851316c82ef7469cb0d0d081375b616c63c14a543491241393d542474d30b3ba29489dba6c0f91fe4478e56b5660744fd5cd9fca8783de5bc431ccae9c9596db9a642f2691d7d31c2c86eeb42d974bd9b60a9d0407efc9dd41b98b0df6e4fd3ee782d983e4f8e88e00e4d5afef445a3754b258849876f49d5b7d821cb50fe1c275126f5b4c37c48d9fdb65e381fa5cbe19335985e97336e62cbf9d40ef2939084905c5700b08e31ff09bd9732307775"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x2, 0x4, 0x4, 0xf1}]}, 0xa, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x41d}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x42d}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x180c}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x424}}, {0x4a, &(0x7f00000004c0)=@string={0x4a, 0x3, "2fffea6663043ddf52cdaf4b0beec061de7ec389bbfba8c01c4659c6786c14511ef0f4c63792d8a311e4a3a5887adec98190c27596c4709771bd5fbb66fb408157698da41f887355"}}, {0xcc, &(0x7f0000000540)=@string={0xcc, 0x3, "0dc12d13b0c569246fbb14d6968c2136964673fb4e3671587cbefeaafa7167d1b486551a82d4d65244ef910ba86c41c0208b38bb05efeadfc4609f38476a2ed698098f5856d7e219a0cdf405e3c0bf09f415528064e705e03758339dda0a05fc1ef7a7141371491a70b34b43dfe92c6070ea625d264c4a54fc9d2b7713636b9ae107f226cdf5a000634cc8cce15aff197eb81e27ef7a89e4dd085e8e8db83554c476a6e23355c8b666d56b9775869b32a635b29e9f7535210d14203b16dae10f0ec1081a9323cb1e4a9e"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0xfcff}}, {0x7, &(0x7f0000000680)=ANY=[@ANYBLOB="030354ce6cd844"]}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x40f}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x807}}]}) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000800)={0x40, 0x6, 0x6e, {0x6e, 0xc, "1f7fc18359f0a07da97cdce423fc97b6cbff9544f5dd604293133d06d4dd5d891a9a5263488631e054410e7f64183aebb8e7d50a7d80f9b1134ca3d353a4fbbee590e1df65b9a6a8d2e481e704699d7af442430e54976cdbdadbf3097c5902ae3c9e6538cf06d538034099bb"}}, &(0x7f0000000f80)=ANY=[@ANYBLOB="00030400000004030d044429b58e1dbe758f07306a2fe2fd5a54df813b262776275c5e1805d9cac80c5bfdd0f9355f50a55100b2b01135ff8360bada7f25931075eae1df54a5537c40b16c5a721010fdab1ac20da27400"/97], &(0x7f00000008c0)={0x0, 0xf, 0x1c, {0x5, 0xf, 0x1c, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x7, 0x2, 0x7e4}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xf, 0x3, 0x1, 0x4}]}}, &(0x7f0000000980)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb7, 0x10, 0x2, 0x5d, "4933bcb3", "48f4943f"}}, &(0x7f00000009c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x4, 0xe, 0x9, 0x0, 0x9}}}, &(0x7f0000000ec0)={0x84, &(0x7f0000000a40)={0x36cdb7d612abe86c, 0x11, 0xa2, "ebf4e382e76396c8ec9bcd302901cbaa6cb374a6c2d4f4e3dd6cc5247630012468a16eae00808fc8abac12be52017ebc55f7adad2f2424ef55d0762000b287daaaecef1c21a85ad3a334699463290e6889ec51e9f5e3c8f45d752c0135749db5868c5002878903e3cbe285bbdbfd22b19b0660054c7cdb3ac95a1fa56a2c1ef39c8e6d4bbe6ca75a77bc142b40184002e51e30ba9d44af1948f8c27280be0b7f81bf"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0xea}, &(0x7f0000000b80)={0x20, 0x0, 0x4, {0x4, 0x2}}, &(0x7f0000000bc0)={0x20, 0x0, 0x4, {0x140, 0x20}}, &(0x7f0000000c00)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000c40)={0x40, 0x9, 0x1, 0x10}, &(0x7f0000000c80)={0x40, 0xb, 0x2, "3b99"}, &(0x7f0000000cc0)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000d00)={0x40, 0x13, 0x6, @local}, &(0x7f0000000d40)={0x40, 0x17, 0x6}, &(0x7f0000000d80)={0x40, 0x19, 0x2, "a8e6"}, &(0x7f0000000dc0)={0x40, 0x1a, 0x2}, &(0x7f0000000e00)={0x40, 0x1c, 0x1, 0xff}, &(0x7f0000000e40)={0x40, 0x1e, 0x1}, &(0x7f0000000e80)={0x40, 0x21, 0x1, 0x86}}) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000fd2d000000000000090000009500000000000000"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x61, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4041}, 0x20000010) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r4, 0x0, 0x4801) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x28011, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(0xffffffffffffffff, 0x0, 0x4) 1m7.531521469s ago: executing program 4 (id=1437): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48040}, 0x947678477f21e77b) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000380)="cd", 0x1}], 0x1}}], 0x1, 0x48000) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000480)={0x1, 0x0, [{0x40000070, 0x0, 0x400006}]}) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) ioctl$PPPIOCGIDLE64(r0, 0x8010743f, &(0x7f0000000040)) 1m7.41252349s ago: executing program 2 (id=1438): timer_create(0x3, 0x0, &(0x7f0000000300)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x0, 0x0}) rseq(&(0x7f0000001080), 0x20, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=ANY=[@ANYBLOB="7400000002060104000000000000000006000002050005000200000005000400000000001400078008001240001000000800134000005bad050001000700000005000100"], 0x74}}, 0x4000004) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}, 0x1, 0x0, 0x0, 0x48040}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) keyctl$clear(0x7, 0xfffffffffffffffb) 1m7.358407653s ago: executing program 1 (id=1439): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000002e40)=ANY=[@ANYBLOB="00020201"], 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000000c0)={@local, @dev}, &(0x7f00000001c0)=0xc) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000240)=ANY=[@ANYBLOB="9d000000", @ANYRES16=r3, @ANYBLOB="010000000000fedbdf251000000008000700000000001800018014000200776c616e3100000000000000000000000800080000000000"], 0x3c}}, 0x20000000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x202, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'gretap0\x00', &(0x7f0000000480)={'syztnl2\x00', 0x0, 0x7810, 0x1, 0x40, 0x8, {{0x5, 0x4, 0x3, 0x1, 0x14, 0x64, 0x0, 0xfe, 0x29, 0x0, @empty, @loopback}}}}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r6, 0xc008ae88, &(0x7f0000000380)={0x21, 0x0, [{0x298, 0x0, 0x100}]}) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r7 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_ifreq(r7, 0x8927, &(0x7f0000000500)={'veth1_virt_wifi\x00', @ifru_mtu=0x101}) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000180)=ANY=[], 0x20) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000000)) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r9 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000005c0)=0x0) syz_ublk_add_dev(r9, r10, r11, r12, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@new_dev={0x4, 0x3c9}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r8, r13, &(0x7f0000000540)={0x0, 0xa77, 0x0, 0xfffffffe, 0x5}, &(0x7f00000007c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1302, 0x1, 0x0, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x20, 0xfffffffd, 0x69, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffefffe, 0x40}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6253, 0x80000, 0x3, 0xffffffff}}], 0x1, &(0x7f00000003c0)={0x2e, 0x4c, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x4000, 0xdbd, 0x0, 0x0}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x94) 1m7.323789895s ago: executing program 2 (id=1440): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xc0803, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x4, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x1, 0x10, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x5f, 0x9, 0x5f, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x6, 0x0, 0xa, 0x3c1b, 0x1, 0x24, 0x800000d, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x42, 0x3, 0xc, 0xce71, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0xfffffff9, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0x3, 0xaff, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x3, 0x2f, 0xe, 0x6, 0x78, 0xea4, 0x0, 0x3, 0x7, 0x3, 0x6, 0x400, 0x40000401, 0x6, 0x1, 0x7, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xf, 0xffff8001, 0x47, 0x31f3, 0x1, 0xfe000000, 0xfffe, 0x202, 0x4, 0x5, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x3, 0x42, 0x3], [0x5, 0x40c, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x0, 0x2, 0x5, 0x8, 0x4, 0x5, 0xffffffff, 0x4, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4004, 0xffffff11, 0x6, 0x38, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x3, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x40000001, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x9a09, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x2, 0x938, 0x6, 0x6, 0x0, 0xb9, 0x9, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0xfffffffe, 0x4, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x1, 0xc8, 0x1, 0xfffff000, 0x5, 0x3, 0x0, 0x100, 0x9602, 0x7, 0xaf, 0x6fcb, 0x6, 0x1, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1e, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3440, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x3291, 0x0, 0x3, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x1d, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0x3b5, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) syz_ublk_setup_queues(r12, r10, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x5, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x1e5, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x4, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x20000000, 0xe4, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x2, 0x2, 0x80000250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x0, 0xc0107520, 0x700}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20084884) 1m7.243893798s ago: executing program 4 (id=1441): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x18) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) (async) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00f80ecdb4cb9f207c804a020000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r4 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote}}}], 0x20}, 0x48000) sendmsg$inet(r4, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}], 0x20}, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x3c, &(0x7f0000000640)=[@in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e24, 0x1, @mcast1, 0x1}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={r5, 0xd6b}, &(0x7f0000000140)=0xc) (async) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) (async) r6 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) (async) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x380, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r7, 0xc0189378, &(0x7f0000000600)={{0x1, 0x1, 0x18, r6, {r0}}, './file0\x00'}) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) (async) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_int(r10, &(0x7f0000000140)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_subtree(r11, &(0x7f0000000080)=ANY=[@ANYBLOB='-', @ANYRESOCT=r10], 0x27) getsockopt$inet6_tcp_buf(r9, 0x6, 0xd, 0x0, &(0x7f0000000000)) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa0000000000000000000000004e220005000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000900040000000000000a000000000000080000000000000000000000000000080000000000000000000100000000000044000500fc020000000000000000000000000000000004d36c00000002000000ff0100000000000000000000e8000001073500000103091b0200000001000f0004000000f9ac86114d550448883a0a2a458ebf55bda4a800f11b0c68952d558edc70bd989a6d8433089313f063dd4544fc4094f3dc31dc0de7e5620dcd72f4ce24c4dcb63c8d3a71a19cea0480eca69c9a0482e007b96a9a705f456913648349584809805a80d2a069a4f969eaca1379573a0a3662f9a8b3947c64b5130f9094fd1cb5f9c48c7777e43659eb3606d842ad13d5692103e868b7f0926d39a0ecac461373f872d94a1c3c866660a32786117c7f14fc85809ddc7316e01f61b7cac28fda0419d1b0fbebcadeec034fb1b073ac9b27b4eb3039f3aa63d67790144927f800dfafa286d32be8fda762794a"], 0xfc}}, 0x0) (async) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2004c450) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000031c0)={0x30, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="0f000000", @typed={0x12, 0x1, 0x0, 0x0, @binary="00112233445566778899aabb8847"}, @nested={0x4, 0x8002}]}, 0x30}}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a010400000000000000000a0000050900020073797a32000000003800048034000180090001007866726d000000002400028008000140000000100800024000000002050003000000000008000440000000030900010073797a31"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async) sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x2c, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="cc0000002100010000000000fefffffffe8000000000000000000000000000aa00000000000000000000000000000000fffe0000000200000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000050001100fc020000000000000000000000000000ff010000000000000000000000000001ff020000000000000000000000000001fff1ffff0000000000000000000000006c010000000000000a000afd2c0013"], 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1m6.645626181s ago: executing program 3 (id=1443): sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB="fdc9d14fe1b6c414b1b7715bda1dd9b3c72398a3229b1534e00d95c6330ff28f2ec4746da81d532d881e3c730f7ea8c9f76eb4fe86a03cae4f96b8a4d9e5e5170133505dbe604f40fef1e9015733634c0134acd7a1f29a0f49f8b8021956a1d351c95aa16e049ed0cb22d14fd3d04e66291665ad0ff55fc6fd62154d8ead30ffd99b7ba9a761c19f0e798987f3961a55"], 0x208}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x38, r2, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000008060000", @ANYRES64=r3], 0xfdef) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc89c, 0xc000, 0x2, 0x20002f7}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0xa400, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ece8161023040a00d0ad010301090212000107074003090403010028fe190400"], 0x0) syz_usb_control_io$lan78xx(r6, 0x0, 0x0) syz_usb_control_io$lan78xx(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, &(0x7f0000001f40)={0x14, 0x0, &(0x7f0000001f00)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text16={0x10, 0x0}], 0x1, 0x6d, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x3, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed33226a8d1c8e17", 0x0, 0xfffffffffffffe3f}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x42}, 0x94) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x2, 0x40, 0xb, '\x00', 0x3e}) ioctl$KVM_RUN(r7, 0xae80, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc89c, 0xc000, 0x2, 0x20002f7}) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc89c, 0xc000, 0x2, 0x20002f7}) 1m6.395560723s ago: executing program 4 (id=1444): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0x4000201e}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x10}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x13, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@ldst={0x0, 0x3, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0xfffffffffffffff0}, @generic={0x9, 0x5, 0x5, 0x1ff, 0xd}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000480)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x5, 0x2, 0x8, 0xfffffffb}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000500)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000540)=[{0x0, 0x4, 0x5}, {0x1, 0x1, 0x3, 0xb}, {0x2, 0x1, 0x5, 0xb}, {0x1, 0x3, 0x9, 0xa}, {0x4, 0x4, 0xb, 0x2}, {0x5, 0x2, 0x6, 0x6}, {0x4, 0x3, 0x2, 0xc}, {0x1, 0x2, 0x10, 0xa}, {0x2, 0x4, 0xa, 0x6}], 0x10, 0xb}, 0x94) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, r5, 0x0, 0x10000, 0x0, 0x8, 0x2ea473, 0x2eb80c}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000040)={0xfffffff9, 0xe, 0x4, 0x70000, 0x8, {0x77359400}, {0x2, 0x0, 0x5, 0x7, 0x55, 0x8, "ae36b57b"}, 0x1ff, 0x4, {}, 0xfff}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 1m5.713400818s ago: executing program 0 (id=1446): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x600000, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x169a41, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000c400)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000a00)="52973bffae9619ad9a57b2c2c09c72dd0d7c95d5ab5fca8f30411377f1921ab11b9b706ccc3fe4c1f8d2013f9e318fe09e800b015f3443c5a688095c96ee2ec1dea3e3a6f69e432b4256cf7ad4d94957ae826b2cfbcf27ab6260d2e1ccbcd4251b82b6c6ecd51fa54074ac2dc259fe842bfe39949a454b13512dde", 0x7b}, {&(0x7f0000000a80)}], 0x2, &(0x7f0000000e00)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00040000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x4080}}, {{0x0, 0x0, &(0x7f0000005f00)=[{&(0x7f0000004580)="ae017579034f09f9fa2b94", 0xb}, {&(0x7f0000004e80)="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", 0x1000}, {&(0x7f0000005e80)="55c86e538e72f448faecaf96e0df30e2a67ad4bd5b7a7630093653c08aa259e3563b34f4cca89beedb5a6dc6cf1ba502b0a1e160a95b7b5b43a7a3b7c2be1da83b96f068ba3679ef0afed086ebf5290a1260ba4ff07ed1af81ed017c9db2d6264bc4483628048284502a", 0x6a}], 0x3, &(0x7f0000000e80)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESDEC, @ANYBLOB='\x00\x00\x00\x00$\x00'/20, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0xc0, 0x8000}}, {{&(0x7f000000c240)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f000000c3c0)=[{&(0x7f000000c2c0)="b40df7fd4aacc8942acec7e540ae506349088a7c198c5c41be38dad6ebc080602b", 0x21}, {&(0x7f000000c300)="5fccd73e48c22000813bce18d76a23484a633051e93dab3d234662735821e34192b230f45c4b6dc24e8fcdfd14a1118724b6468336c3e7d2ac2cfd84df1ef6788236719bde89bfdd97e8d2a872fef787aeb7cef33be5ad7e865a4b677c36480a7d4891dea80e1f6b4629deb264daee33b8fc0e9b9210830ed6a99774249c76f41f9b660f37f49c2a1fc1321ac64038477132fa594e34cea2bdfa5d4a730fd7c90a8ef5b050b727bdf8c394", 0xab}], 0x2, 0x0, 0x0, 0x4000}}], 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000009c0)=[{{&(0x7f0000000540)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000000840)=[{&(0x7f00000003c0)=""/212, 0xd4}, {&(0x7f0000000740)=""/76, 0x4c}, {&(0x7f00000007c0)=""/128, 0x80}], 0x3, &(0x7f0000000940)=""/107, 0x6b}, 0x3}], 0x1, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000980), 0xfdef) splice(r4, 0x0, r3, 0x0, 0x86, 0x4) sendfile(r2, r2, 0x0, 0x20000005) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendfile(r6, r2, 0x0, 0x1002000ff) fcntl$dupfd(r6, 0x0, r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c00000010000100297000fadbdf250000000000", @ANYRES32=r8, @ANYBLOB="1380000023b205003c00128009000100626f6e64000000002c0002800800070081000000080003"], 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0xc094) splice(r7, 0x0, r7, 0x0, 0x2, 0x3) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='cdg', 0x3) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x49, 0x20008000) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000004c0)=@ccm_128={{}, '\x00', "bcf87c7910b661b4be4ae0143548a525", '\x00', "1aec271e54d0bbda"}, 0x28) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380), 0x4) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x200}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000002640)=""/4080, 0xff0}, {&(0x7f0000000880)=""/142, 0x8e}, {&(0x7f0000000c80)=""/174, 0xae}, {&(0x7f0000003780)=""/241, 0xf1}, {&(0x7f0000003880)=""/184, 0xb8}, {&(0x7f0000000bc0)=""/180, 0xb4}, {&(0x7f0000000040)=""/9, 0x9}], 0x8}, 0x1}], 0x4, 0x100, 0x0) 1m4.516752878s ago: executing program 0 (id=1447): syz_clone3(&(0x7f0000000080)={0x180801400, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x6, &(0x7f00005fe000/0x1000)=nil, &(0x7f0000ca5000/0x4000)=nil, 0xb1f2, 0x0, 0x0, 0x7dc, 0x58, 0x0, 0x0, 0x40}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40800) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = fsopen(&(0x7f0000000000)='gfs2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000002c0)='source', &(0x7f0000000640)='//\xf2b\x06\b\xba\xdfXo\xdc\xea\x95\x9a\x9b/Q9\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce\x14/8\\\x00\x00\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5\x00\x02\x00\x00\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x00\x00\x00\x00\x00\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00\xac8t\xc5\xd7Q?\xb4\xeex@\xe4\xcc\xfe\x98\xf63\xde\xcd\x1841\x93\xe5\xb7D\xd49\"\f<\x8d\xa5m\x883\xcf\xc7\xe5Y\xb6H\xa4\xc4_Q|\v\x06:\xdap48T\xa6\xcb:+\x7f\x9771fK=\xc2)\xa60\x1d>\xd2\xe8\xc0\x03\xa7e\xbeo\x8d\xe3\x854\x11\xc5d\xcb\x82', 0x40, 0x10a, 0x0) r7 = mq_open(&(0x7f0000000000)='eth0\x00', 0x42, 0x14, 0x0) mq_notify(r7, &(0x7f0000000240)={0x0, 0x3, 0x1, @thr={0x0, 0x0}}) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r8, 0x29, 0x35, 0x0, 0x0) bind$inet6(r8, 0x0, 0x0) setsockopt$inet6_int(r8, 0x29, 0xb, 0x0, 0x0) mq_notify(r6, &(0x7f0000000a00)={0x0, 0x2d, 0x0, @thr={0x0, 0x0}}) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000200)={{0x7, @multicast1, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x3, 0x1}}, 0x44) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @loopback}], 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) sendmsg$nl_route(r9, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000038c0)=ANY=[@ANYBLOB="200000001000014b5e85864593c42d7fef11c328", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00 \x00'], 0x20}}, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r10, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10) 1m4.252684451s ago: executing program 1 (id=1448): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}}) write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba3500000000002b000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b800294429118927"], 0xfdef) 1m4.171210828s ago: executing program 2 (id=1449): openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = signalfd(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000ce0100000000d0085a168d0bf46d32345653600648d0a00120002", 0x3d, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x600) syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000bff000/0x400000)=nil) 1m3.921572289s ago: executing program 2 (id=1450): timer_create(0x3, 0x0, &(0x7f0000000300)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x0, 0x0}) rseq(&(0x7f0000001080), 0x20, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=ANY=[@ANYBLOB="7400000002060104000000000000000006000002050005000200000005000400000000001400078008001240001000000800134000005bad050001000700000005000100"], 0x74}}, 0x4000004) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}, 0x1, 0x0, 0x0, 0x48040}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) keyctl$clear(0x7, 0xfffffffffffffffb) 1m3.669017827s ago: executing program 2 (id=1451): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) msync(&(0x7f0000bc9000/0x2000)=nil, 0x2000, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x206f1c, 0xffffffffffffffff, 0x43}, 0x38) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000004c0)="99", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x3, 0xfffc, 0xe652, 0x2, 0x14, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x1, 0xf06, 0x0, 0xac, 0x81, 0x5}, 0x9c) r2 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x883c1) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f0000000100)={0xe000000, 0x52424752, 0xf00, 0x870, 0x2, @stepwise={{0x1fb, 0xfffffff7}, {0x100, 0x5}, {0x6, 0x10000}}}) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x401, 0x1, 0xffff1896, 0x5, 0xa6, 0x0, 0x6}, 0x9c) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80) openat$dlm_monitor(0xffffff9c, &(0x7f0000000380), 0x290581, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000340)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f0000000080)={0x0, 0x10001}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406a053b0300000000000109022200010100803209040000010300000009211101000122170007058103400001"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022170000000600ff0901a10185020901150026ff00750895098102c0"], 0x0}, 0x0) 1m3.546640284s ago: executing program 0 (id=1452): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x7ff, @empty, 0x9}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f00000000c0)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000380)=@phonet, 0x80, &(0x7f00000009c0), 0x0, &(0x7f0000001cc0)=""/4097, 0x1001}, 0x7}, {{&(0x7f0000001a40)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000001bc0)=[{&(0x7f00000005c0)=""/203, 0xcb}], 0x1, &(0x7f00000001c0)=""/40, 0x28}, 0x2}], 0x2, 0x40000103, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004184, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1m3.244567253s ago: executing program 0 (id=1453): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) getitimer(0x1, &(0x7f0000000000)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = fcntl$getown(r2, 0x9) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r4, 0x1, 0x14, &(0x7f0000000340)=""/56, &(0x7f0000000380)=0x38) sched_getparam(r3, &(0x7f0000000100)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x7, &(0x7f0000000140)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) write$P9_RSTATu(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x232) 1m3.159275489s ago: executing program 4 (id=1454): openat$pidfd(0xffffffffffffff9c, 0x0, 0x100800, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2000}}) io_uring_enter(r1, 0x1, 0xfffffffd, 0x4a, 0x0, 0x3) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000040)={0x4, r1, 0x6, {0x4, 0x8}, 0x5}, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'xfrm0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x34, 0x4, 0x0, 0x4, 0x7, 0x2, 0x3, 0x1, 0x57, 0x8, 0xfffffffd, 0x4, 0x8, 0xef, 0x9a, 0x45, [0x3, 0x471]}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000340)={'tunl0\x00', 0x0}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000012) mount$fuse(0x0, 0x0, 0x0, 0xa0000, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 1m2.904525174s ago: executing program 0 (id=1455): r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000380)=0x2, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x28040041, &(0x7f0000000040)={0x2, 0x24e23, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000004640)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000700)='?', 0x1}], 0x1}}], 0x1, 0x24000000) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/72, 0x48}, 0x6}], 0x41f, 0x40, 0x0) syz_usb_connect$uac3(0x5, 0x89, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201100100000010630780204000010203010902770003017f0006080b0002012030230904000000010130"], 0x0) syz_usb_connect$uac1(0x0, 0x105, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0xff, 0xb, 0x1, 0x40, 0x4}, 0x2a, &(0x7f0000000180)={0x5, 0xf, 0x2a, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0xc, 0xd, 0x4973}, @ss_container_id={0x14, 0x10, 0x4, 0xf7, "6db861d4006f0797d66b14ad4a3f4a7e"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x5, 0x2, 0x3ff}]}, 0x4, [{0xb5, &(0x7f0000000600)=ANY=[@ANYBLOB="b503b370359f506a199c24fe1596c38b09bc15b03abc14ecddcacde5645522ce272596e59e19c43a8a0acd4d4a90c821ac260ed7e1a5c811a7b6f029d0b8026175cf51414fbc2a4d8c15e68da0a38a2dbab8ddfb560fc17e171ed2936ffc55eaed0035f9c65ce9fc123bb8e6e1916b24de7681b0716064cca766233c348d7c0407865a0292b2767d221e477ac1b94bd62a3a4e087f1ff500bc70f8393fd2b8443f00373ef678fe3488ba1babe631d242f65e9a1f451581"]}, {0x33, &(0x7f00000002c0)=@string={0x33, 0x3, "58d2f3276ebbd37a246cef3f8ee4785e703175bcd9a64bb1eb04e269317453df48fd977819905a1bd86712b13453f41825"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x582d}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x1004}}]}) 1m2.197606236s ago: executing program 4 (id=1456): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x8, 0x6, 0x0, 0x100, 0x4, 0x540000, r1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={@private1, @private0={0xfc, 0x0, '\x00', 0x1}, @private0, 0x0, 0x6, 0x3, 0x100, 0xdc7, 0x180103, r1}) recvmmsg(0xffffffffffffffff, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/43, 0x2b}], 0x1}, 0x7}, {{&(0x7f0000000580)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000400), 0x0, &(0x7f0000000440)=""/57, 0x39}, 0x800006}], 0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) madvise(&(0x7f00009c0000/0x1000)=nil, 0x1000, 0xc) r3 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000600)={{0x9, 0x4, 0x5, 0x6, 'syz0\x00', 0x87}, 0x0, 0x200, 0xc0000000, r3, 0x2, 0x0, 'syz1\x00', &(0x7f0000000140)=['\x00', 'net_prio.prioidx\x00'], 0x12}) fanotify_mark(0xffffffffffffffff, 0x161, 0x8000000, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="000000020000000008000a00", @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) 1m1.405616253s ago: executing program 1 (id=1457): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x600000, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x169a41, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000c400)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000a00)="52973bffae9619ad9a57b2c2c09c72dd0d7c95d5ab5fca8f30411377f1921ab11b9b706ccc3fe4c1f8d2013f9e318fe09e800b015f3443c5a688095c96ee2ec1dea3e3a6f69e432b4256cf7ad4d94957ae826b2cfbcf27ab6260d2e1ccbcd4251b82b6c6ecd51fa54074ac2dc259fe842bfe39949a454b13512dde", 0x7b}, {&(0x7f0000000a80)}], 0x2, &(0x7f0000000e00)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00040000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x4080}}, {{0x0, 0x0, &(0x7f0000005f00)=[{&(0x7f0000004580)="ae017579034f09f9fa2b94", 0xb}, {&(0x7f0000004e80)="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", 0x1000}, {&(0x7f0000005e80)="55c86e538e72f448faecaf96e0df30e2a67ad4bd5b7a7630093653c08aa259e3563b34f4cca89beedb5a6dc6cf1ba502b0a1e160a95b7b5b43a7a3b7c2be1da83b96f068ba3679ef0afed086ebf5290a1260ba4ff07ed1af81ed017c9db2d6264bc4483628048284502a", 0x6a}], 0x3, &(0x7f0000000e80)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESDEC, @ANYBLOB='\x00\x00\x00\x00$\x00'/20, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0xc0, 0x8000}}, {{&(0x7f000000c240)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f000000c3c0)=[{&(0x7f000000c2c0)="b40df7fd4aacc8942acec7e540ae506349088a7c198c5c41be38dad6ebc080602b", 0x21}, {&(0x7f000000c300)="5fccd73e48c22000813bce18d76a23484a633051e93dab3d234662735821e34192b230f45c4b6dc24e8fcdfd14a1118724b6468336c3e7d2ac2cfd84df1ef6788236719bde89bfdd97e8d2a872fef787aeb7cef33be5ad7e865a4b677c36480a7d4891dea80e1f6b4629deb264daee33b8fc0e9b9210830ed6a99774249c76f41f9b660f37f49c2a1fc1321ac64038477132fa594e34cea2bdfa5d4a730fd7c90a8ef5b050b727bdf8c394", 0xab}], 0x2, 0x0, 0x0, 0x4000}}], 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000009c0)=[{{&(0x7f0000000540)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000000840)=[{&(0x7f00000003c0)=""/212, 0xd4}, {&(0x7f0000000740)=""/76, 0x4c}, {&(0x7f00000007c0)=""/128, 0x80}], 0x3, &(0x7f0000000940)=""/107, 0x6b}, 0x3}], 0x1, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000980), 0xfdef) splice(r4, 0x0, r3, 0x0, 0x86, 0x4) sendfile(r2, r2, 0x0, 0x20000005) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendfile(r6, r2, 0x0, 0x1002000ff) fcntl$dupfd(r6, 0x0, r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c00000010000100297000fadbdf250000000000", @ANYRES32=r8, @ANYBLOB="1380000023b205003c00128009000100626f6e64000000002c0002800800070081000000080003"], 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0xc094) splice(r7, 0x0, r7, 0x0, 0x2, 0x3) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='cdg', 0x3) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x49, 0x20008000) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000004c0)=@ccm_128={{}, '\x00', "bcf87c7910b661b4be4ae0143548a525", '\x00', "1aec271e54d0bbda"}, 0x28) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380), 0x4) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x200}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000002640)=""/4080, 0xff0}, {&(0x7f0000000880)=""/142, 0x8e}, {&(0x7f0000000c80)=""/174, 0xae}, {&(0x7f0000003780)=""/241, 0xf1}, {&(0x7f0000003880)=""/184, 0xb8}, {&(0x7f0000000bc0)=""/180, 0xb4}, {&(0x7f0000000040)=""/9, 0x9}], 0x8}, 0x1}], 0x4, 0x100, 0x0) 1m0.723856837s ago: executing program 0 (id=1458): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x48}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x84}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0xc0, 0x6, 0xa, 0xc05, 0xfffffffc, 0x0, {0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x94, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xe}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CMP_OP={0x8}, @NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}}}, {0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}]}]}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xe8}}, 0x0) 46.197646624s ago: executing program 3 (id=1459): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1a, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="099102000500000018502000fcffffff07000000000000001800000009000000000000005cbf800085100000060000004a7adc329bffd79268d63746761b3a879bf372666203297ff93902ae9e434d66"], &(0x7f0000000100)='GPL\x00', 0x100, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x2, 0xc, 0x9, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000000240)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000280)=[{0x2, 0x1, 0xa, 0xc}, {0x4, 0x4, 0xf, 0x6}, {0x5, 0x3, 0xc, 0xd}, {0x3, 0x5, 0x1, 0x3}, {0x1, 0x3, 0x2, 0x1}], 0x10, 0x101}, 0x94) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0xa002, 0x0) write$uinput_user_dev(r1, &(0x7f00000003c0)={'syz1\x00', {0x5, 0x7, 0x0, 0xd}, 0x13, [0x2, 0xe0000000, 0x8, 0xee97, 0x7, 0xe, 0x8, 0x5, 0xb, 0x6, 0x400, 0x572e6534, 0x2, 0x9, 0x3, 0xb36, 0x6, 0x1, 0x7, 0xffffff9c, 0x8, 0x1ff, 0x40, 0x10000, 0x2d58, 0x8, 0x4, 0xe, 0x8, 0x0, 0xcc, 0x2bc, 0x400, 0x0, 0x4, 0x7, 0x6, 0xddb, 0x60a7f7ca, 0x1000, 0x7, 0x1, 0x9, 0x678, 0x0, 0x5b9f, 0x4, 0x1, 0x7fff, 0xc, 0x18d6a901, 0x0, 0x6, 0xc98c, 0x7, 0xa45, 0x34b, 0x6, 0xf81, 0xcb, 0x878, 0x3, 0x9, 0x4], [0x4, 0x8, 0x48, 0x8, 0x6, 0x9, 0x4e, 0x176, 0xff, 0x6, 0x1000, 0x9, 0x9, 0x8, 0xa3, 0xfff, 0x8, 0x46e, 0x7, 0x3d, 0x4, 0x5, 0x7, 0x5, 0x3, 0x3b1ce787, 0x0, 0x10001, 0x5, 0xf, 0xa00000, 0x7, 0x800, 0x0, 0xae, 0x8, 0xe693, 0x2, 0x4, 0x8, 0x529f9c06, 0x2, 0xfffffff6, 0x0, 0x3, 0x9, 0xfffffffe, 0x2, 0x5, 0x3ff, 0xfff, 0x10001, 0x9, 0x8, 0xc3, 0x7, 0x1, 0x3, 0x3, 0xffffffff, 0x68, 0x3ff, 0xfffffff9], [0xfffffff9, 0x81, 0x4, 0x2, 0x2, 0x0, 0x4, 0x80, 0x7ff, 0x5, 0xfffff0a8, 0xffffffff, 0x6, 0x5, 0x3, 0x3, 0x3, 0x6, 0xfffff0d3, 0x5, 0x23ffee33, 0x1, 0x80000000, 0x7dfc, 0x7, 0x468, 0x5, 0x5, 0x9e, 0x7d, 0x0, 0x10, 0x3, 0x3, 0x7ff, 0x8, 0x0, 0x3, 0x100, 0x8, 0x7fff, 0x8, 0x7, 0xc, 0x9605, 0x9, 0x5, 0x2, 0x2, 0xe8, 0x3ff, 0x3, 0x3, 0x0, 0x5, 0x3, 0x1, 0x0, 0x4, 0xf, 0x5, 0x5, 0x5779c01b, 0x1], [0x8, 0x7fff, 0x2, 0x4, 0x3, 0x8, 0x9, 0x1, 0x5, 0x3, 0x13, 0xfffffff8, 0x3, 0xe, 0x3, 0x8, 0x2, 0x800, 0xcf65, 0x5, 0x4a34, 0xc00, 0x101, 0x80, 0xffffffff, 0x4, 0x80000001, 0x8f1, 0x6, 0x9, 0x401, 0x6, 0x4, 0x9a, 0xffffffff, 0x6, 0x180, 0x8, 0x8cb7, 0x3, 0x7, 0x8, 0xff, 0x2, 0x4, 0x9, 0xf, 0x0, 0x80, 0xe357, 0x0, 0x0, 0x7, 0x1, 0x5, 0x2, 0xea, 0xffffffff, 0x7f, 0x2, 0x77, 0x2, 0x3ff, 0xfffff001]}, 0x45c) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) (async, rerun: 32) r2 = socket(0x10, 0x3, 0x0) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) (async) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0xfffffffd}}, 0x10) (async) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) (async) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f00000000c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x804}, 0x4) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r3) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005000c0001000000080007000100000008000600000100000800050002000000080013007cc4000008000d000400000005000b000400000008000e0081000000080006"], 0x74}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) (async) r8 = syz_open_dev$loop(&(0x7f0000000180), 0x200000000, 0x1) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x34, r10, 0x6a9354ab0d020bb7, 0x0, 0x0, {0x2a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x10012, r8, 0x0) (async, rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async) r11 = socket$igmp(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x4, 0x4, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x18, 0x1}, 0x50) (async, rerun: 64) setsockopt$ARPT_SO_SET_REPLACE(r11, 0x0, 0x60, &(0x7f0000000600)={'filter\x00', 0xb001, 0x4, 0x3d0, 0x0, 0xe8, 0x1f8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @multicast2, 0x2}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'netpci0\x00'}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) (async, rerun: 64) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x18}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) (async) sendmsg$NFT_BATCH(r13, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000060a010400000000000000000a0000010900010073797a3100000000200004801c0001800b0001006f626a72656600000c00028008000340000000010900020073797a3200000000140000001100010000000000000000000000000a8868e29b29b39ce8421caef51cbbcdf1aaca2523940591555eebd4ef388691b0d33b2888e5dd5254db94d3e926601cdd704fcef3163820ec54cb6166bbacfa81a684ca15a97b1e9d0bcab2969f17eeefc5a598e553f84340c3c1ac6b9e0d332ec6261bf554bed71c0966ee1c2c3e1b2761e2288d3055e54c6c908519f091"], 0x74}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) 0s ago: executing program 32 (id=1457): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x600000, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x169a41, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000c400)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000a00)="52973bffae9619ad9a57b2c2c09c72dd0d7c95d5ab5fca8f30411377f1921ab11b9b706ccc3fe4c1f8d2013f9e318fe09e800b015f3443c5a688095c96ee2ec1dea3e3a6f69e432b4256cf7ad4d94957ae826b2cfbcf27ab6260d2e1ccbcd4251b82b6c6ecd51fa54074ac2dc259fe842bfe39949a454b13512dde", 0x7b}, {&(0x7f0000000a80)}], 0x2, &(0x7f0000000e00)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00040000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x4080}}, {{0x0, 0x0, &(0x7f0000005f00)=[{&(0x7f0000004580)="ae017579034f09f9fa2b94", 0xb}, {&(0x7f0000004e80)="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", 0x1000}, {&(0x7f0000005e80)="55c86e538e72f448faecaf96e0df30e2a67ad4bd5b7a7630093653c08aa259e3563b34f4cca89beedb5a6dc6cf1ba502b0a1e160a95b7b5b43a7a3b7c2be1da83b96f068ba3679ef0afed086ebf5290a1260ba4ff07ed1af81ed017c9db2d6264bc4483628048284502a", 0x6a}], 0x3, &(0x7f0000000e80)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESDEC, @ANYBLOB='\x00\x00\x00\x00$\x00'/20, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0xc0, 0x8000}}, {{&(0x7f000000c240)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f000000c3c0)=[{&(0x7f000000c2c0)="b40df7fd4aacc8942acec7e540ae506349088a7c198c5c41be38dad6ebc080602b", 0x21}, {&(0x7f000000c300)="5fccd73e48c22000813bce18d76a23484a633051e93dab3d234662735821e34192b230f45c4b6dc24e8fcdfd14a1118724b6468336c3e7d2ac2cfd84df1ef6788236719bde89bfdd97e8d2a872fef787aeb7cef33be5ad7e865a4b677c36480a7d4891dea80e1f6b4629deb264daee33b8fc0e9b9210830ed6a99774249c76f41f9b660f37f49c2a1fc1321ac64038477132fa594e34cea2bdfa5d4a730fd7c90a8ef5b050b727bdf8c394", 0xab}], 0x2, 0x0, 0x0, 0x4000}}], 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000009c0)=[{{&(0x7f0000000540)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000000840)=[{&(0x7f00000003c0)=""/212, 0xd4}, {&(0x7f0000000740)=""/76, 0x4c}, {&(0x7f00000007c0)=""/128, 0x80}], 0x3, &(0x7f0000000940)=""/107, 0x6b}, 0x3}], 0x1, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000980), 0xfdef) splice(r4, 0x0, r3, 0x0, 0x86, 0x4) sendfile(r2, r2, 0x0, 0x20000005) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendfile(r6, r2, 0x0, 0x1002000ff) fcntl$dupfd(r6, 0x0, r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c00000010000100297000fadbdf250000000000", @ANYRES32=r8, @ANYBLOB="1380000023b205003c00128009000100626f6e64000000002c0002800800070081000000080003"], 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0xc094) splice(r7, 0x0, r7, 0x0, 0x2, 0x3) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='cdg', 0x3) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x49, 0x20008000) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000004c0)=@ccm_128={{}, '\x00', "bcf87c7910b661b4be4ae0143548a525", '\x00', "1aec271e54d0bbda"}, 0x28) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380), 0x4) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x200}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000002640)=""/4080, 0xff0}, {&(0x7f0000000880)=""/142, 0x8e}, {&(0x7f0000000c80)=""/174, 0xae}, {&(0x7f0000003780)=""/241, 0xf1}, {&(0x7f0000003880)=""/184, 0xb8}, {&(0x7f0000000bc0)=""/180, 0xb4}, {&(0x7f0000000040)=""/9, 0x9}], 0x8}, 0x1}], 0x4, 0x100, 0x0) kernel console output (not intermixed with test programs): 67.369778][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 267.369870][ C0] buffer_io_error: 11 callbacks suppressed [ 267.369882][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 267.450810][ T9668] sg_write: data in/out 443356/194 bytes for SCSI command 0x0-- guessing data in; [ 267.450810][ T9668] program syz.2.1214 not setting count and/or reply_len properly [ 267.642876][ T9675] __nla_validate_parse: 1 callbacks suppressed [ 267.642895][ T9675] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1214'. [ 267.676831][ T6795] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 267.833463][ T6795] usb 5-1: Using ep0 maxpacket: 8 [ 267.834265][ T6795] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 267.855624][ T6795] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 267.855675][ T6795] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 267.855695][ T6795] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 267.855716][ T6795] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 267.855737][ T6795] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 267.855775][ T6795] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.985884][ T9680] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1217'. [ 268.091026][ T6795] usb 5-1: usb_control_msg returned -32 [ 268.091074][ T6795] usbtmc 5-1:16.0: can't read capabilities [ 268.122376][ T6798] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 268.292045][ T6798] usb 4-1: Using ep0 maxpacket: 16 [ 268.293050][ T6798] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 268.295824][ T6798] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 268.301151][ T6798] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.301178][ T6798] usb 4-1: Product: syz [ 268.301191][ T6798] usb 4-1: Manufacturer: syz [ 268.301205][ T6798] usb 4-1: SerialNumber: syz [ 268.313006][ T6798] r8152-cfgselector 4-1: Unknown version 0x0000 [ 268.313032][ T6798] r8152-cfgselector 4-1: config 0 descriptor?? [ 268.746744][ T987] usb 2-1: USB disconnect, device number 42 [ 268.784039][ T987] legousbtower 2-1:14.228: LEGO USB Tower #-160 now disconnected [ 268.816718][ T6798] r8152-cfgselector 4-1: USB disconnect, device number 44 [ 268.931719][ T5622] Bluetooth: hci4: unexpected event for opcode 0x0c26 [ 269.249715][ T5625] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 269.257446][ T5625] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 269.265975][ T5625] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 269.279344][ T5625] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 269.281438][ T5625] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 269.422945][ T987] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 269.459421][ T9726] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1223'. [ 269.575719][ T987] usb 2-1: New USB device found, idVendor=08b7, idProduct=0a00, bcdDevice= 0.00 [ 269.576205][ T987] usb 2-1: config 0 has no interfaces? [ 269.578197][ T987] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 269.578220][ T987] usb 2-1: SerialNumber: syz [ 269.580208][ T987] usb 2-1: config 0 descriptor?? [ 269.651587][ T1168] bond0 (unregistering): Released all slaves [ 269.666093][ T1168] bond1 (unregistering): Released all slaves [ 269.677757][ T1168] bond2 (unregistering): Released all slaves [ 269.791720][ T1168] : left promiscuous mode [ 269.803867][ T987] usb 2-1: USB disconnect, device number 43 [ 270.112642][ T1168] tipc: Left network mode [ 270.446080][ T9736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.446493][ T9736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.517419][ T9747] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1225'. [ 270.519909][ T987] usb 5-1: USB disconnect, device number 48 [ 270.668906][ T9755] FAULT_INJECTION: forcing a failure. [ 270.668906][ T9755] name failslab, interval 1, probability 0, space 0, times 0 [ 270.668938][ T9755] CPU: 1 UID: 0 PID: 9755 Comm: syz.4.1227 Not tainted syzkaller #0 PREEMPT(full) [ 270.668958][ T9755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 270.668969][ T9755] Call Trace: [ 270.668976][ T9755] [ 270.668984][ T9755] dump_stack_lvl+0xe8/0x150 [ 270.669015][ T9755] should_fail_ex+0x410/0x560 [ 270.669042][ T9755] should_failslab+0xa8/0x100 [ 270.669068][ T9755] __kmalloc_noprof+0xfe/0x720 [ 270.669086][ T9755] ? __kmalloc_noprof+0x1ab/0x720 [ 270.669102][ T9755] ? pfkey_add+0x154a/0x2e50 [ 270.669127][ T9755] ? pfkey_add+0x154a/0x2e50 [ 270.669159][ T9755] pfkey_add+0x154a/0x2e50 [ 270.669203][ T9755] ? __pfx_pfkey_add+0x10/0x10 [ 270.669242][ T9755] pfkey_sendmsg+0xceb/0x11d0 [ 270.669280][ T9755] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 270.669326][ T9755] ? aa_sock_msg_perm+0x144/0x210 [ 270.669355][ T9755] ? apparmor_socket_sendmsg+0x98/0x360 [ 270.669378][ T9755] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 270.669402][ T9755] sock_sendmsg_nosec+0x13a/0x180 [ 270.669423][ T9755] ____sys_sendmsg+0x54e/0x850 [ 270.669451][ T9755] ? __pfx_____sys_sendmsg+0x10/0x10 [ 270.669483][ T9755] ? import_iovec+0x73/0xa0 [ 270.669509][ T9755] ___sys_sendmsg+0x2a5/0x360 [ 270.669532][ T9755] ? __lock_acquire+0x747/0x2de0 [ 270.669555][ T9755] ? __pfx____sys_sendmsg+0x10/0x10 [ 270.669613][ T9755] ? __fget_files+0x2a/0x420 [ 270.669641][ T9755] ? __fget_files+0x3a2/0x420 [ 270.669671][ T9755] __x64_sys_sendmsg+0x1b1/0x290 [ 270.669698][ T9755] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 270.669748][ T9755] do_syscall_64+0x166/0x520 [ 270.669771][ T9755] ? trace_irq_disable+0x3b/0x140 [ 270.669788][ T9755] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.669808][ T9755] ? clear_bhb_loop+0x70/0xc0 [ 270.669828][ T9755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.669846][ T9755] RIP: 0033:0x7fec60b9e159 [ 270.669864][ T9755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.669879][ T9755] RSP: 002b:00007fec61a9f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 270.669899][ T9755] RAX: ffffffffffffffda RBX: 00007fec60e25fa0 RCX: 00007fec60b9e159 [ 270.669912][ T9755] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 270.669924][ T9755] RBP: 00007fec61a9f090 R08: 0000000000000000 R09: 0000000000000000 [ 270.669935][ T9755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.669946][ T9755] R13: 00007fec60e26038 R14: 00007fec60e25fa0 R15: 00007fec60f4fa48 [ 270.669978][ T9755] [ 270.708287][ T6798] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 270.924075][ T6638] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 271.002079][ T6798] usb 3-1: Using ep0 maxpacket: 16 [ 271.002795][ T6798] usb 3-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 271.003778][ T6798] usb 3-1: config 0 has an invalid interface number: 126 but max is 0 [ 271.003800][ T6798] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.003818][ T6798] usb 3-1: config 0 has no interface number 0 [ 271.003856][ T6798] usb 3-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 271.003880][ T6798] usb 3-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 271.003904][ T6798] usb 3-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 271.003927][ T6798] usb 3-1: config 0 interface 126 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 271.003965][ T6798] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.011166][ T6798] usb 3-1: config 0 descriptor?? [ 271.055512][ T9737] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 271.097829][ T6638] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 271.099153][ T6638] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 271.100685][ T6638] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 271.100707][ T6638] usb 2-1: Product: syz [ 271.100720][ T6638] usb 2-1: Manufacturer: syz [ 271.150435][ T6638] usb 2-1: selecting invalid altsetting 1 [ 271.150586][ T6638] dvb_ttusb_budget: ttusb_init_controller: error [ 271.150597][ T6638] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 271.192097][ T6804] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 271.193553][ T6798] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 271.325764][ T5278] 8021q: adding VLAN 0 to HW filter on device eth1 [ 271.342509][ T6804] usb 4-1: Using ep0 maxpacket: 8 [ 271.343241][ T6804] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 271.344255][ T6804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 271.344296][ T6804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.347087][ T6804] usb 4-1: config 0 descriptor?? [ 271.354743][ T6638] DVB: Unable to find symbol cx22700_attach() [ 271.377528][ T5622] Bluetooth: hci1: command tx timeout [ 271.449233][ T9751] dvb_ttusb_budget: failed urb submission (0: err = -2)! [ 271.457886][ T9751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.463293][ T6638] DVB: Unable to find symbol tda10046_attach() [ 271.463308][ T6638] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 271.481209][ T9751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.526695][ T6638] usb 2-1: USB disconnect, device number 44 [ 271.562753][ T6795] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 271.568675][ T6804] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 271.658021][ T6798] snd-usb-audio 3-1:0.126: probe with driver snd-usb-audio failed with error -2 [ 271.673186][ T6798] usb 3-1: USB disconnect, device number 41 [ 271.707002][ T1168] hsr_slave_0: left promiscuous mode [ 271.707900][ T1168] hsr_slave_1: left promiscuous mode [ 271.736397][ T6795] usb 5-1: Using ep0 maxpacket: 32 [ 271.745065][ T6795] usb 5-1: unable to get BOS descriptor or descriptor too short [ 271.745115][ T6795] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 271.746069][ T6795] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 271.746090][ T6795] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 271.746108][ T6795] usb 5-1: config 14 has no interface number 0 [ 271.746122][ T6795] usb 5-1: config 14 has no interface number 1 [ 271.746180][ T6795] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 271.746201][ T6795] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 271.746223][ T6795] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 271.746247][ T6795] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 271.746271][ T6795] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 271.746294][ T6795] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 271.746317][ T6795] usb 5-1: config 14 interface 57 has no altsetting 0 [ 271.746333][ T6795] usb 5-1: config 14 interface 228 has no altsetting 0 [ 271.748254][ T6795] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.748276][ T6795] usb 5-1: Product: syz [ 271.748289][ T6795] usb 5-1: Manufacturer: syz [ 271.748302][ T6795] usb 5-1: SerialNumber: syz [ 271.865828][ T9757] FAULT_INJECTION: forcing a failure. [ 271.865828][ T9757] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 271.865861][ T9757] CPU: 1 UID: 0 PID: 9757 Comm: syz.3.1228 Not tainted syzkaller #0 PREEMPT(full) [ 271.865883][ T9757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 271.865892][ T9757] Call Trace: [ 271.865899][ T9757] [ 271.865907][ T9757] dump_stack_lvl+0xe8/0x150 [ 271.865938][ T9757] should_fail_ex+0x410/0x560 [ 271.865963][ T9757] _copy_to_user+0x31/0xb0 [ 271.865989][ T9757] iowarrior_read+0x7a1/0xb60 [ 271.866012][ T9757] ? get_pid_task+0x20/0x1f0 [ 271.866042][ T9757] ? __pfx_iowarrior_read+0x10/0x10 [ 271.866065][ T9757] ? __pfx_autoremove_wake_function+0x10/0x10 [ 271.866090][ T9757] ? bpf_lsm_file_permission+0x9/0x20 [ 271.866114][ T9757] ? security_file_permission+0x75/0x260 [ 271.866135][ T9757] ? rw_verify_area+0x24a/0x4c0 [ 271.866161][ T9757] ? __pfx_iowarrior_read+0x10/0x10 [ 271.866182][ T9757] vfs_read+0x213/0xa80 [ 271.866215][ T9757] ? __pfx_vfs_read+0x10/0x10 [ 271.866243][ T9757] ? __fget_files+0x2a/0x420 [ 271.866268][ T9757] ? __fget_files+0x2a/0x420 [ 271.866289][ T9757] ? __fget_files+0x3a2/0x420 [ 271.866311][ T9757] ? __fget_files+0x2a/0x420 [ 271.866343][ T9757] ksys_read+0x150/0x270 [ 271.866370][ T9757] ? __pfx_ksys_read+0x10/0x10 [ 271.866405][ T9757] do_syscall_64+0x166/0x520 [ 271.866425][ T9757] ? trace_irq_disable+0x3b/0x140 [ 271.866442][ T9757] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.866461][ T9757] ? clear_bhb_loop+0x70/0xc0 [ 271.866483][ T9757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.866501][ T9757] RIP: 0033:0x7f8f3a79e159 [ 271.866519][ T9757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.866534][ T9757] RSP: 002b:00007f8f3b5d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 271.866553][ T9757] RAX: ffffffffffffffda RBX: 00007f8f3aa25fa0 RCX: 00007f8f3a79e159 [ 271.866566][ T9757] RDX: 000000000000004a RSI: 0000200000000480 RDI: 0000000000000009 [ 271.866578][ T9757] RBP: 00007f8f3b5d3090 R08: 0000000000000000 R09: 0000000000000000 [ 271.866597][ T9757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.866608][ T9757] R13: 00007f8f3aa26038 R14: 00007f8f3aa25fa0 R15: 00007f8f3ab4fa48 [ 271.866637][ T9757] [ 272.118544][ T6789] usb 4-1: USB disconnect, device number 45 [ 272.190392][ T6795] legousbtower 5-1:14.57: interrupt endpoints not found [ 272.518654][ T6795] legousbtower 5-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 272.529563][ T6795] legousbtower 5-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 272.692458][ T9788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.717171][ T9788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.882536][ T9790] usb 5-1: LEGO USB Tower reset control request failed [ 272.922148][ T6795] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 272.967762][ T9724] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.967940][ T9724] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.968098][ T9724] bridge_slave_0: entered allmulticast mode [ 272.975641][ T9724] bridge_slave_0: entered promiscuous mode [ 272.986164][ T9724] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.986270][ T9724] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.986427][ T9724] bridge_slave_1: entered allmulticast mode [ 272.989872][ T9724] bridge_slave_1: entered promiscuous mode [ 273.082236][ T6795] usb 2-1: Using ep0 maxpacket: 8 [ 273.084247][ T6795] usb 2-1: New USB device found, idVendor=0499, idProduct=1032, bcdDevice=e9.a4 [ 273.085226][ T6795] usb 2-1: config 3 has an invalid interface number: 178 but max is 0 [ 273.085250][ T6795] usb 2-1: config 3 has no interface number 0 [ 273.085289][ T6795] usb 2-1: config 3 interface 178 altsetting 64 endpoint 0xB has invalid wMaxPacketSize 0 [ 273.085310][ T6795] usb 2-1: config 3 interface 178 altsetting 64 endpoint 0x9 has invalid maxpacket 1088, setting to 64 [ 273.085336][ T6795] usb 2-1: config 3 interface 178 altsetting 64 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 273.085369][ T6795] usb 2-1: config 3 interface 178 altsetting 64 has a duplicate endpoint with address 0xC, skipping [ 273.085390][ T6795] usb 2-1: config 3 interface 178 altsetting 64 has a duplicate endpoint with address 0xF, skipping [ 273.085409][ T6795] usb 2-1: config 3 interface 178 altsetting 64 has a duplicate endpoint with address 0xF, skipping [ 273.085442][ T6795] usb 2-1: config 3 interface 178 altsetting 64 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 273.085464][ T6795] usb 2-1: config 3 interface 178 has no altsetting 0 [ 273.087493][ T6795] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.087516][ T6795] usb 2-1: Product: ÐŒ [ 273.087530][ T6795] usb 2-1: SerialNumber: щ [ 273.105257][ T9793] syzkaller0: entered promiscuous mode [ 273.105281][ T9793] syzkaller0: entered allmulticast mode [ 273.354556][ T6795] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 273.463232][ T5622] Bluetooth: hci1: command tx timeout [ 273.495268][ T9797] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1235'. [ 273.536145][ T6795] snd-usb-audio 2-1:3.178: probe with driver snd-usb-audio failed with error -2 [ 273.573136][ T6795] usb 2-1: USB disconnect, device number 45 [ 273.647225][ T5931] udevd[5931]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:3.178/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 274.350469][ T9818] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1236'. [ 274.487743][ T6797] usb 5-1: USB disconnect, device number 49 [ 274.497381][ T6797] legousbtower 5-1:14.228: LEGO USB Tower #-160 now disconnected [ 274.974790][ T6638] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 275.123037][ T6638] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 275.124168][ T6638] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 275.124193][ T6638] usb 5-1: config 1 has no interface number 0 [ 275.124246][ T6638] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0xE has invalid maxpacket 8 [ 275.127023][ T6638] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.127046][ T6638] usb 5-1: Product: syz [ 275.127058][ T6638] usb 5-1: Manufacturer: syz [ 275.127071][ T6638] usb 5-1: SerialNumber: syz [ 275.189710][ T9823] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 275.191913][ T6638] usb 5-1: Error in usbnet_get_endpoints (-22) [ 275.418703][ T9824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.419132][ T9824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.432599][ T9823] netlink: 45349 bytes leftover after parsing attributes in process `syz.4.1238'. [ 275.532602][ T5622] Bluetooth: hci1: command tx timeout [ 276.631837][ T9724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.649212][ T9724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.760615][ T5278] 8021q: adding VLAN 0 to HW filter on device eth2 [ 276.783218][ T9823] 0ªX¹¦Dö»: renamed from gretap0 [ 276.786208][ T9823] 0ªX¹¦Dö»: entered allmulticast mode [ 276.859061][ T6804] usb 5-1: USB disconnect, device number 50 [ 277.025087][ T9724] team0: Port device team_slave_0 added [ 277.037001][ T9724] team0: Port device team_slave_1 added [ 277.245066][ T9724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.245083][ T9724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 277.245106][ T9724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.256963][ T9724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.256979][ T9724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 277.257002][ T9724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.365237][ T1168] IPVS: stop unused estimator thread 0... [ 277.559781][ T9724] hsr_slave_0: entered promiscuous mode [ 277.571239][ T9724] hsr_slave_1: entered promiscuous mode [ 277.573317][ T9724] debugfs: 'hsr0' already exists in 'hsr' [ 277.573337][ T9724] Cannot create hsr debugfs directory [ 277.612121][ T5622] Bluetooth: hci1: command tx timeout [ 278.313245][ T6638] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 278.415078][ T6804] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 278.470162][ T6638] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 278.485509][ T6638] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 278.485558][ T6638] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 278.485577][ T6638] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 278.485597][ T6638] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 278.485633][ T6638] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.595103][ T6804] usb 4-1: Using ep0 maxpacket: 8 [ 278.597057][ T6804] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 278.601371][ T6804] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 278.601406][ T6804] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 278.601463][ T6804] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 278.601488][ T6804] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 278.601510][ T6804] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 278.601533][ T6804] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 278.601556][ T6804] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 278.601581][ T6804] usb 4-1: config 168 interface 0 has no altsetting 0 [ 278.611634][ T6804] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 278.611677][ T6804] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 278.611738][ T6804] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 278.611762][ T6804] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 278.611784][ T6804] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 278.611806][ T6804] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 278.611829][ T6804] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 278.611870][ T6804] usb 4-1: config 168 interface 0 has no altsetting 0 [ 278.612971][ T6804] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 278.613001][ T6804] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 278.613033][ T6804] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 278.613056][ T6804] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 278.613078][ T6804] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 278.613100][ T6804] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 278.613123][ T6804] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 278.613146][ T6804] usb 4-1: config 168 interface 0 has no altsetting 0 [ 278.623774][ T6804] usb 4-1: string descriptor 0 read error: -22 [ 278.623928][ T6804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.651907][ T6804] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 278.934030][ T6804] usb 4-1: USB disconnect, device number 46 [ 279.178091][ T6797] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 279.194449][ T6797] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 279.317299][ T6638] gud 5-1:1.0: probe with driver gud failed with error -71 [ 279.351876][ T6638] usb 5-1: USB disconnect, device number 51 [ 279.392491][ T6795] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 279.548663][ T6795] usb 2-1: New USB device found, idVendor=0424, idProduct=7800, bcdDevice=d1.38 [ 279.550907][ T6795] usb 2-1: config 4 has an invalid interface number: 226 but max is 0 [ 279.550931][ T6795] usb 2-1: config 4 has no interface number 0 [ 279.550971][ T6795] usb 2-1: config 4 interface 226 altsetting 6 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 279.550996][ T6795] usb 2-1: config 4 interface 226 altsetting 6 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 279.551020][ T6795] usb 2-1: config 4 interface 226 has no altsetting 0 [ 279.588297][ T6795] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.588322][ T6795] usb 2-1: Product: syz [ 279.588336][ T6795] usb 2-1: Manufacturer: syz [ 279.588349][ T6795] usb 2-1: SerialNumber: syz [ 279.692749][ T9878] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 279.877639][ T9889] Invalid logical block size (1380209483) [ 280.106566][ T9724] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 280.127621][ T9724] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 280.129164][ T9724] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 280.190037][ T9724] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 280.195199][ T9724] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 280.239045][ T9724] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 280.242450][ T9724] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 280.290236][ T9724] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 280.303313][ T9878] nvme nvme0: failed to connect socket: -101 [ 280.494901][ T9918] input: syz0 as /devices/virtual/input/input29 [ 280.714247][ T9724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.766901][ T9724] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.772147][ T6804] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 280.780889][ T5755] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.780996][ T5755] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.789391][ T1199] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.789488][ T1199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.934306][ T6804] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 280.953509][ T6804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 17, changing to 8 [ 280.953556][ T6804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.957888][ T6804] usb 4-1: config 0 descriptor?? [ 281.092925][ T9724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.299479][ T9724] veth0_vlan: entered promiscuous mode [ 281.351405][ T9724] veth1_vlan: entered promiscuous mode [ 281.627649][ T6804] pyra 0003:1E7D:2CF6.0012: unbalanced collection at end of report description [ 281.633641][ T6804] pyra 0003:1E7D:2CF6.0012: parse failed [ 281.633706][ T6804] pyra 0003:1E7D:2CF6.0012: probe with driver pyra failed with error -22 [ 281.676745][ T9724] veth0_macvtap: entered promiscuous mode [ 281.709621][ T9724] veth1_macvtap: entered promiscuous mode [ 281.813249][ T9724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.839788][ T9724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.894051][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.894347][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.894381][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.894410][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.059113][ T6795] usb 2-1: USB disconnect, device number 46 [ 282.250951][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.250971][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.481703][ T1199] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.481724][ T1199] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.818132][ T6789] usb 4-1: USB disconnect, device number 47 [ 282.923375][ T6795] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 283.085515][ T6795] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 283.087465][ T6795] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 283.087490][ T6795] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.087525][ T6795] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.094136][ T6795] usb 3-1: config 0 descriptor?? [ 283.154978][ T6798] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 283.303893][ T6798] usb 5-1: Using ep0 maxpacket: 32 [ 283.304600][ T6798] usb 5-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 283.305953][ T6798] usb 5-1: config 0 has an invalid interface number: 119 but max is 0 [ 283.305975][ T6798] usb 5-1: config 0 has no interface number 0 [ 283.306011][ T6798] usb 5-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 283.306053][ T6798] usb 5-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xD3, changing to 0x83 [ 283.306077][ T6798] usb 5-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 283.306096][ T6798] usb 5-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 283.312901][ T6798] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.312922][ T6798] usb 5-1: Product: syz [ 283.312934][ T6798] usb 5-1: Manufacturer: syz [ 283.312946][ T6798] usb 5-1: SerialNumber: syz [ 283.333422][ T6798] usb 5-1: config 0 descriptor?? [ 283.348379][ T6798] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.119/input/input30 [ 283.614252][ T9976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.614677][ T9976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.637633][ T6795] isku 0003:1E7D:319C.0013: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.2-1/input0 [ 283.678598][ T6798] usb 5-1: USB disconnect, device number 52 [ 284.562047][ T6638] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 284.696977][T10031] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1277'. [ 284.701337][T10031] FAULT_INJECTION: forcing a failure. [ 284.701337][T10031] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 284.701355][T10031] CPU: 0 UID: 0 PID: 10031 Comm: syz.3.1277 Not tainted syzkaller #0 PREEMPT(full) [ 284.701376][T10031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 284.701386][T10031] Call Trace: [ 284.701394][T10031] [ 284.701401][T10031] dump_stack_lvl+0xe8/0x150 [ 284.701433][T10031] should_fail_ex+0x410/0x560 [ 284.701453][T10031] _copy_from_user+0x2d/0xb0 [ 284.701469][T10031] ___sys_sendmsg+0x1c6/0x360 [ 284.701493][T10031] ? __lock_acquire+0x747/0x2de0 [ 284.701516][T10031] ? __pfx____sys_sendmsg+0x10/0x10 [ 284.701547][T10031] ? kstrtouint+0x6e/0xe0 [ 284.701590][T10031] ? __fget_files+0x2a/0x420 [ 284.701605][T10031] ? __fget_files+0x3a2/0x420 [ 284.701623][T10031] __sys_sendmmsg+0x273/0x4d0 [ 284.701639][T10031] ? __pfx___sys_sendmmsg+0x10/0x10 [ 284.701661][T10031] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 284.701699][T10031] ? ksys_write+0x242/0x270 [ 284.701729][T10031] ? __pfx_ksys_write+0x10/0x10 [ 284.701753][T10031] __x64_sys_sendmmsg+0xa0/0xc0 [ 284.701767][T10031] do_syscall_64+0x166/0x520 [ 284.701779][T10031] ? trace_irq_disable+0x3b/0x140 [ 284.701790][T10031] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.701800][T10031] ? clear_bhb_loop+0x70/0xc0 [ 284.701820][T10031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.701839][T10031] RIP: 0033:0x7f8f3a79e159 [ 284.701856][T10031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.701870][T10031] RSP: 002b:00007f8f3b5d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 284.701890][T10031] RAX: ffffffffffffffda RBX: 00007f8f3aa25fa0 RCX: 00007f8f3a79e159 [ 284.701898][T10031] RDX: 0400000000000235 RSI: 0000200000000000 RDI: 0000000000000004 [ 284.701905][T10031] RBP: 00007f8f3b5d3090 R08: 0000000000000000 R09: 0000000000000000 [ 284.701911][T10031] R10: 0000000000000600 R11: 0000000000000246 R12: 0000000000000001 [ 284.701917][T10031] R13: 00007f8f3aa26038 R14: 00007f8f3aa25fa0 R15: 00007f8f3ab4fa48 [ 284.701935][T10031] [ 284.713751][ T6638] usb 2-1: Using ep0 maxpacket: 32 [ 284.728588][ T6638] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 284.795003][ T6638] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 284.795053][ T6638] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 284.795077][ T6638] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 284.795099][ T6638] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 284.910442][ T6638] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.910466][ T6638] usb 2-1: Product: syz [ 284.910480][ T6638] usb 2-1: Manufacturer: syz [ 284.910493][ T6638] usb 2-1: SerialNumber: syz [ 284.917528][T10035] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1279'. [ 284.927425][T10035] x_tables: unsorted entry at hook 2 [ 285.046663][ C0] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 285.062893][ T6638] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input32 [ 285.264344][ T6638] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 285.264364][ T6638] (id 0x00) [ 285.343922][ T6795] isku 0003:1E7D:319C.0013: couldn't init struct isku_device [ 285.343954][ T6795] isku 0003:1E7D:319C.0013: couldn't install keyboard [ 285.347748][ T6795] isku 0003:1E7D:319C.0013: probe with driver isku failed with error -71 [ 285.376957][ T6795] usb 3-1: USB disconnect, device number 42 [ 285.462399][ T6638] rc_core: IR keymap rc-imon-pad not found [ 285.462417][ T6638] Registered IR keymap rc-empty [ 285.462495][ T6638] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 285.462511][ T6638] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 285.503366][ T6638] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 285.514525][T10048] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1280'. [ 285.528000][ T6638] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input33 [ 285.529043][T10047] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1282'. [ 285.555993][ T6638] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:47> initialized [ 285.693081][T10052] loop8: detected capacity change from 0 to 7 [ 285.697424][T10046] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 285.726582][T10052] Dev loop8: unable to read RDB block 7 [ 285.726757][T10052] loop8: unable to read partition table [ 285.727118][T10052] loop8: partition table beyond EOD, truncated [ 285.756522][T10052] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 285.794903][T10053] imon:send_packet: task interrupted [ 285.794980][T10053] imon:send_packet: packet tx failed (-512) [ 285.795544][T10053] imon:vfd_write: send packet #2 failed [ 285.820524][T10053] imon:send_packet: packet tx failed (-32) [ 285.836696][T10053] imon:vfd_write: send packet #0 failed [ 285.939384][T10047] FAULT_INJECTION: forcing a failure. [ 285.939384][T10047] name failslab, interval 1, probability 0, space 0, times 0 [ 285.939404][T10047] CPU: 1 UID: 0 PID: 10047 Comm: syz.0.1282 Not tainted syzkaller #0 PREEMPT(full) [ 285.939416][T10047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 285.939423][T10047] Call Trace: [ 285.939427][T10047] [ 285.939432][T10047] dump_stack_lvl+0xe8/0x150 [ 285.939451][T10047] should_fail_ex+0x410/0x560 [ 285.939466][T10047] should_failslab+0xa8/0x100 [ 285.939479][T10047] ? __kernfs_new_node+0xe6/0x980 [ 285.939490][T10047] kmem_cache_alloc_noprof+0xa1/0x600 [ 285.939507][T10047] ? __kernfs_new_node+0xe6/0x980 [ 285.939521][T10047] __kernfs_new_node+0xe6/0x980 [ 285.939536][T10047] ? __pfx___kernfs_new_node+0x10/0x10 [ 285.939547][T10047] ? kernfs_root+0x1c/0x230 [ 285.939559][T10047] ? kernfs_root+0x1c/0x230 [ 285.939569][T10047] ? kernfs_root+0x1c/0x230 [ 285.939577][T10047] ? kernfs_root+0x1c/0x230 [ 285.939588][T10047] kernfs_new_node+0xea/0x140 [ 285.939601][T10047] __kernfs_create_file+0x4b/0x2e0 [ 285.939616][T10047] sysfs_add_file_mode_ns+0x237/0x300 [ 285.939634][T10047] internal_create_group+0x679/0x1180 [ 285.939653][T10047] ? __pfx_internal_create_group+0x10/0x10 [ 285.939664][T10047] ? up_write+0x19d/0x4a0 [ 285.939681][T10047] sysfs_create_groups+0x59/0x120 [ 285.939693][T10047] device_add_attrs+0xde/0x600 [ 285.939706][T10047] ? __pfx_device_add_attrs+0x10/0x10 [ 285.939719][T10047] ? device_add_class_symlinks+0x21f/0x240 [ 285.939740][T10047] device_add+0x488/0xb80 [ 285.939766][T10047] netdev_register_kobject+0x197/0x350 [ 285.939788][T10047] register_netdevice+0x1433/0x1eb0 [ 285.939811][T10047] ? __pfx_register_netdevice+0x10/0x10 [ 285.939828][T10047] ? __pfx_hsr_add_port+0x10/0x10 [ 285.939840][T10047] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 285.939864][T10047] hsr_dev_finalize+0x6d5/0xaa0 [ 285.939879][T10047] hsr_newlink+0x818/0x930 [ 285.939891][T10047] ? __pfx_hsr_newlink+0x10/0x10 [ 285.939903][T10047] ? rtnl_create_link+0xa04/0xd70 [ 285.939915][T10047] ? __pfx_hsr_newlink+0x10/0x10 [ 285.939927][T10047] rtnl_newlink_create+0x305/0x7b0 [ 285.939944][T10047] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 285.939961][T10047] ? __pfx___mutex_lock+0x10/0x10 [ 285.939979][T10047] ? ns_capable+0x89/0xe0 [ 285.939995][T10047] rtnl_newlink+0x166d/0x1c30 [ 285.940016][T10047] ? __pfx_rtnl_newlink+0x10/0x10 [ 285.940027][T10047] ? do_syscall_64+0x166/0x520 [ 285.940039][T10047] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.940068][T10047] ? kasan_quarantine_put+0xbb/0x1f0 [ 285.940078][T10047] ? lockdep_hardirqs_on+0x7b/0x110 [ 285.940093][T10047] ? nlmon_xmit+0xb0/0x100 [ 285.940104][T10047] ? kmem_cache_free+0x182/0x650 [ 285.940120][T10047] ? __lock_acquire+0x747/0x2de0 [ 285.940136][T10047] ? __local_bh_enable_ip+0xd6/0x140 [ 285.940151][T10047] ? lockdep_hardirqs_on+0x7b/0x110 [ 285.940172][T10047] ? __dev_queue_xmit+0x29b/0x3820 [ 285.940198][T10047] ? __local_bh_enable_ip+0xd6/0x140 [ 285.940219][T10047] ? __dev_queue_xmit+0x29b/0x3820 [ 285.940253][T10047] ? lock_acquire+0x115/0x350 [ 285.940283][T10047] ? __pfx_rtnl_newlink+0x10/0x10 [ 285.940296][T10047] rtnetlink_rcv_msg+0x802/0xc00 [ 285.940311][T10047] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 285.940323][T10047] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 285.940334][T10047] ? ref_tracker_free+0x689/0x830 [ 285.940349][T10047] ? __pfx_ref_tracker_free+0x10/0x10 [ 285.940364][T10047] ? __asan_memcpy+0x40/0x70 [ 285.940373][T10047] ? __skb_clone+0x5c/0x6c0 [ 285.940391][T10047] netlink_rcv_skb+0x226/0x4a0 [ 285.940407][T10047] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 285.940421][T10047] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 285.940442][T10047] ? netlink_deliver_tap+0x2e/0x1b0 [ 285.940452][T10047] ? netlink_deliver_tap+0x2e/0x1b0 [ 285.940465][T10047] netlink_unicast+0x7bd/0x940 [ 285.940485][T10047] netlink_sendmsg+0x813/0xb40 [ 285.940500][T10047] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.940514][T10047] ? apparmor_socket_sendmsg+0x98/0x360 [ 285.940528][T10047] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.940538][T10047] sock_sendmsg_nosec+0x13a/0x180 [ 285.940550][T10047] ____sys_sendmsg+0x54e/0x850 [ 285.940567][T10047] ? __pfx_____sys_sendmsg+0x10/0x10 [ 285.940586][T10047] ? import_iovec+0x73/0xa0 [ 285.940609][T10047] ___sys_sendmsg+0x2a5/0x360 [ 285.940629][T10047] ? __lock_acquire+0x747/0x2de0 [ 285.940641][T10047] ? __pfx____sys_sendmsg+0x10/0x10 [ 285.940674][T10047] ? __fget_files+0x2a/0x420 [ 285.940687][T10047] ? __fget_files+0x3a2/0x420 [ 285.940706][T10047] __x64_sys_sendmsg+0x1b1/0x290 [ 285.940721][T10047] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 285.940746][T10047] do_syscall_64+0x166/0x520 [ 285.940758][T10047] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.940769][T10047] ? clear_bhb_loop+0x70/0xc0 [ 285.940781][T10047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.940791][T10047] RIP: 0033:0x7f94feb9e159 [ 285.940802][T10047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.940811][T10047] RSP: 002b:00007f94ffb05028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 285.940823][T10047] RAX: ffffffffffffffda RBX: 00007f94fee25fa0 RCX: 00007f94feb9e159 [ 285.940830][T10047] RDX: 0000000000008000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 285.940837][T10047] RBP: 00007f94ffb05090 R08: 0000000000000000 R09: 0000000000000000 [ 285.940843][T10047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 285.940859][T10047] R13: 00007f94fee26038 R14: 00007f94fee25fa0 R15: 00007f94fef4fa48 [ 285.940876][T10047] [ 286.109847][T10060] netlink: 'syz.0.1285': attribute type 10 has an invalid length. [ 286.186338][ T6804] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 286.401654][ T6804] usb 5-1: New USB device found, idVendor=1e59, idProduct=0002, bcdDevice=98.ed [ 286.425183][ T6804] usb 5-1: config 253 has an invalid interface number: 130 but max is 0 [ 286.425209][ T6804] usb 5-1: config 253 has no interface number 0 [ 286.425249][ T6804] usb 5-1: config 253 interface 130 has no altsetting 0 [ 286.522041][ T6795] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 286.548414][ T6804] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.548455][ T6804] usb 5-1: Product: syz [ 286.548468][ T6804] usb 5-1: Manufacturer: syz [ 286.548482][ T6804] usb 5-1: SerialNumber: syz [ 286.672356][ T6795] usb 3-1: Using ep0 maxpacket: 8 [ 286.672866][ T6795] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 286.674894][ T6795] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 286.674917][ T6795] usb 3-1: config 0 has an invalid interface number: 149 but max is -1 [ 286.674936][ T6795] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 286.674955][ T6795] usb 3-1: config 0 has no interface number 0 [ 286.674979][ T6795] usb 3-1: too many endpoints for config 0 interface 149 altsetting 215: 148, using maximum allowed: 30 [ 286.675015][ T6795] usb 3-1: config 0 interface 149 altsetting 215 endpoint 0x84 has invalid wMaxPacketSize 0 [ 286.675630][ T6795] usb 3-1: config 0 interface 149 altsetting 215 has 1 endpoint descriptor, different from the interface descriptor's value: 148 [ 286.675657][ T6795] usb 3-1: config 0 interface 149 has no altsetting 0 [ 286.680332][ T6795] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.680354][ T6795] usb 3-1: Product: syz [ 286.680375][ T6795] usb 3-1: Manufacturer: syz [ 286.680388][ T6795] usb 3-1: SerialNumber: syz [ 286.703182][ T6795] usb 3-1: config 0 descriptor?? [ 286.711225][ T6795] hub 3-1:0.149: bad descriptor, ignoring hub [ 286.711248][ T6795] hub 3-1:0.149: probe with driver hub failed with error -5 [ 286.887985][T10068] netlink: 'syz.0.1287': attribute type 29 has an invalid length. [ 286.888005][T10068] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1287'. [ 286.888199][T10067] netlink: 'syz.0.1287': attribute type 29 has an invalid length. [ 286.888208][T10067] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1287'. [ 286.920972][T10068] binder: BINDER_SET_CONTEXT_MGR already set [ 286.920984][T10068] binder: 10066:10068 ioctl 4018620d 200000000040 returned -16 [ 287.212535][ T6795] usb 3-1: USB disconnect, device number 43 [ 287.263050][ T6804] dvb-usb: found a 'EvolutePC TVWay+' in cold state, will try to load a firmware [ 287.325087][ T6795] usb 2-1: USB disconnect, device number 47 [ 287.514249][ T6804] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 287.514293][ T6804] dib0700: firmware download failed at 7 with -22 [ 287.967154][T10092] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 288.019318][T10094] netlink: 'syz.2.1297': attribute type 21 has an invalid length. [ 288.293879][T10105] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 288.409808][T10114] netlink: 'syz.1.1305': attribute type 7 has an invalid length. [ 288.409830][T10114] netlink: 'syz.1.1305': attribute type 5 has an invalid length. [ 288.409843][T10114] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1305'. [ 288.494655][T10125] loop4: detected capacity change from 0 to 2279 [ 289.072337][ T6798] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 289.098086][ T6795] usb 5-1: USB disconnect, device number 53 [ 289.242387][ T6798] usb 2-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 289.247098][ T6798] usb 2-1: config 0 has an invalid descriptor of length 116, skipping remainder of the config [ 289.247114][ T6798] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 289.271848][ T6798] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.271873][ T6798] usb 2-1: Product: syz [ 289.271887][ T6798] usb 2-1: Manufacturer: syz [ 289.271900][ T6798] usb 2-1: SerialNumber: syz [ 289.283027][ T6798] usb 2-1: config 0 descriptor?? [ 289.507472][ T6795] usb 2-1: USB disconnect, device number 48 [ 289.606244][T10142] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1313'. [ 289.626031][T10143] tipc: Enabling of bearer rejected, failed to enable media [ 289.694472][ T6804] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 289.861262][T10151] 0ªX¹¦Dö»: left allmulticast mode [ 289.871336][ T6804] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 289.881743][ T6804] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 289.881759][ T6804] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 289.902718][ T6804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=249 [ 289.902735][ T6804] usb 4-1: SerialNumber: syz [ 289.904706][ T6804] usb 4-1: config 0 descriptor?? [ 289.909212][ T6804] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 289.909248][ T6804] dvb-usb: bulk message failed: -22 (3/0) [ 289.947575][T10151] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 289.988122][ T6804] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 289.988795][ T6804] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 289.988828][ T6804] usb 4-1: media controller created [ 290.014284][ T6804] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 290.040006][ T6804] dvb-usb: bulk message failed: -22 (6/0) [ 290.040179][ T6804] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 290.056660][ T6804] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input34 [ 290.058964][ T6804] dvb-usb: schedule remote query interval to 150 msecs. [ 290.058987][ T6804] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 290.091109][ T6798] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 290.216385][ T987] dvb-usb: bulk message failed: -22 (1/0) [ 290.217520][ T987] dvb-usb: error while querying for an remote control event. [ 290.242877][ T6798] usb 1-1: New USB device found, idVendor=0b3a, idProduct=8002, bcdDevice= 0.00 [ 290.244057][ T6798] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 290.244086][ T6798] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.244106][ T6798] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 290.244143][ T6798] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.254362][ T6798] usb 1-1: config 0 descriptor?? [ 290.292564][T10159] tipc: New replicast peer: 255.255.255.255 [ 290.293343][T10159] tipc: Enabled bearer , priority 10 [ 290.372091][ T987] dvb-usb: bulk message failed: -22 (1/0) [ 290.372125][ T987] dvb-usb: error while querying for an remote control event. [ 290.442061][ T6804] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 290.532389][ T987] dvb-usb: bulk message failed: -22 (1/0) [ 290.532424][ T987] dvb-usb: error while querying for an remote control event. [ 290.594679][ T6804] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 290.595747][ T6804] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 290.595775][ T6804] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 290.597733][ T6804] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.597756][ T6804] usb 5-1: Product: syz [ 290.597770][ T6804] usb 5-1: Manufacturer: syz [ 290.597783][ T6804] usb 5-1: SerialNumber: syz [ 290.692314][ T987] dvb-usb: bulk message failed: -22 (1/0) [ 290.692378][ T987] dvb-usb: error while querying for an remote control event. [ 290.723938][ T6795] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 290.770418][ T6798] hid-generic 0003:0B3A:8002.0014: item fetching failed at offset 21/24 [ 290.771029][ T6798] hid-generic 0003:0B3A:8002.0014: probe with driver hid-generic failed with error -22 [ 290.791673][ T6798] usb 4-1: USB disconnect, device number 48 [ 290.873032][ T6795] usb 2-1: Using ep0 maxpacket: 32 [ 290.873724][ T6795] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 290.875664][ T6795] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 290.875689][ T6795] usb 2-1: config 0 has no interface number 0 [ 290.880428][ T6795] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.880447][ T6795] usb 2-1: Product: syz [ 290.880460][ T6795] usb 2-1: Manufacturer: syz [ 290.880474][ T6795] usb 2-1: SerialNumber: syz [ 290.914878][ T6795] usb 2-1: config 0 descriptor?? [ 290.928375][ T6795] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 290.989823][T10173] loop8: detected capacity change from 0 to 7 [ 290.989988][T10173] FAULT_INJECTION: forcing a failure. [ 290.989988][T10173] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 290.990020][T10173] CPU: 1 UID: 0 PID: 10173 Comm: syz.3.1325 Not tainted syzkaller #0 PREEMPT(full) [ 290.990032][T10173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 290.990039][T10173] Call Trace: [ 290.990043][T10173] [ 290.990049][T10173] dump_stack_lvl+0xe8/0x150 [ 290.990070][T10173] should_fail_ex+0x410/0x560 [ 290.990085][T10173] prepare_alloc_pages+0x223/0x600 [ 290.990100][T10173] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 290.990114][T10173] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 290.990125][T10173] ? __alloc_frozen_pages_noprof+0x29e/0x5a0 [ 290.990140][T10173] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 290.990153][T10173] ? __pfx_policy_nodemask+0x10/0x10 [ 290.990166][T10173] ? __get_vm_area_node+0x155/0x2f0 [ 290.990180][T10173] ? __vmalloc_node_range_noprof+0x343/0x1540 [ 290.990193][T10173] ? vzalloc_noprof+0xb2/0xe0 [ 290.990209][T10173] __alloc_pages_noprof+0x10/0x100 [ 290.990220][T10173] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 290.990236][T10173] ? alloc_pages_noprof+0x140/0x2b0 [ 290.990250][T10173] __kasan_populate_vmalloc+0xb7/0x1c0 [ 290.990264][T10173] alloc_vmap_area+0xd1a/0x1420 [ 290.990286][T10173] ? __pfx_alloc_vmap_area+0x10/0x10 [ 290.990298][T10173] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 290.990309][T10173] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 290.990325][T10173] ? __get_vm_area_node+0x155/0x2f0 [ 290.990341][T10173] __get_vm_area_node+0x200/0x2f0 [ 290.990359][T10173] __vmalloc_node_range_noprof+0x343/0x1540 [ 290.990374][T10173] ? bdev_disk_changed+0x4e0/0x17a0 [ 290.990400][T10173] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 290.990415][T10173] ? __kasan_kmalloc+0x93/0xb0 [ 290.990427][T10173] ? __kmalloc_cache_noprof+0x321/0x600 [ 290.990438][T10173] ? bdev_disk_changed+0x4e0/0x17a0 [ 290.990449][T10173] vzalloc_noprof+0xb2/0xe0 [ 290.990464][T10173] ? bdev_disk_changed+0x4e0/0x17a0 [ 290.990476][T10173] bdev_disk_changed+0x4e0/0x17a0 [ 290.990493][T10173] ? __pfx___mutex_lock+0x10/0x10 [ 290.990511][T10173] ? __pfx_bdev_disk_changed+0x10/0x10 [ 290.990521][T10173] ? kobject_uevent_env+0x375/0x9e0 [ 290.990532][T10173] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 290.990546][T10173] ? kobject_uevent_env+0x375/0x9e0 [ 290.990559][T10173] loop_reread_partitions+0x5f/0xf0 [ 290.990576][T10173] loop_configure+0xb4e/0xdc0 [ 290.990596][T10173] ? __pfx_loop_configure+0x10/0x10 [ 290.990608][T10173] ? __lock_acquire+0x747/0x2de0 [ 290.990635][T10173] lo_ioctl+0xae0/0x2010 [ 290.990650][T10173] ? lock_acquire+0x115/0x350 [ 290.990662][T10173] ? __pfx_lo_ioctl+0x10/0x10 [ 290.990676][T10173] ? lock_acquire+0x115/0x350 [ 290.990691][T10173] ? __lock_acquire+0x747/0x2de0 [ 290.990703][T10173] ? is_bpf_text_address+0x292/0x2b0 [ 290.990719][T10173] ? kernel_text_address+0xa5/0xe0 [ 290.990731][T10173] ? __kernel_text_address+0xd/0x30 [ 290.990742][T10173] ? unwind_get_return_address+0x4d/0x90 [ 290.990754][T10173] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 290.990765][T10173] ? arch_stack_walk+0xfb/0x150 [ 290.990779][T10173] ? __lock_acquire+0x747/0x2de0 [ 290.990794][T10173] ? __lock_acquire+0x747/0x2de0 [ 290.990809][T10173] ? __lock_acquire+0x747/0x2de0 [ 290.990823][T10173] ? __lock_acquire+0x747/0x2de0 [ 290.990840][T10173] ? lock_acquire+0x115/0x350 [ 290.990854][T10173] ? lock_acquire+0x115/0x350 [ 290.990869][T10173] ? is_bpf_text_address+0x26/0x2b0 [ 290.990883][T10173] ? is_bpf_text_address+0x292/0x2b0 [ 290.990895][T10173] ? is_bpf_text_address+0x26/0x2b0 [ 290.990908][T10173] ? kernel_text_address+0xa5/0xe0 [ 290.990920][T10173] ? __kernel_text_address+0xd/0x30 [ 290.990931][T10173] ? unwind_get_return_address+0x4d/0x90 [ 290.990942][T10173] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 290.990952][T10173] ? arch_stack_walk+0xfb/0x150 [ 290.990969][T10173] ? stack_trace_save+0xa9/0x100 [ 290.990978][T10173] ? __pfx_stack_trace_save+0x10/0x10 [ 290.990987][T10173] ? kasan_save_track+0x4f/0x80 [ 290.991000][T10173] ? stack_depot_save_flags+0x33/0x7f0 [ 290.991012][T10173] ? __lock_acquire+0x747/0x2de0 [ 290.991024][T10173] ? kasan_save_track+0x4f/0x80 [ 290.991033][T10173] ? kasan_save_track+0x3e/0x80 [ 290.991043][T10173] ? kasan_save_free_info+0x40/0x50 [ 290.991056][T10173] ? __kasan_slab_free+0x5c/0x80 [ 290.991066][T10173] ? kfree+0x1c5/0x650 [ 290.991078][T10173] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 290.991089][T10173] ? security_file_ioctl+0xc3/0x2a0 [ 290.991099][T10173] ? __se_sys_ioctl+0x47/0x170 [ 290.991109][T10173] ? do_syscall_64+0x166/0x520 [ 290.991121][T10173] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.991134][T10173] ? __asan_memset+0x22/0x50 [ 290.991143][T10173] ? blk_get_meta_cap+0x19d/0x780 [ 290.991159][T10173] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 290.991173][T10173] ? irqentry_exit+0x218/0x910 [ 290.991187][T10173] ? blkdev_common_ioctl+0x14b7/0x3250 [ 290.991205][T10173] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 290.991224][T10173] ? tomoyo_path_number_perm+0x219/0x5f0 [ 290.991236][T10173] ? tomoyo_path_number_perm+0x219/0x5f0 [ 290.991249][T10173] ? do_vfs_ioctl+0x116f/0x1530 [ 290.991279][T10173] ? __pfx_lo_ioctl+0x10/0x10 [ 290.991293][T10173] blkdev_ioctl+0x5e3/0x740 [ 290.991307][T10173] ? __pfx_blkdev_ioctl+0x10/0x10 [ 290.991323][T10173] ? __fget_files+0x2a/0x420 [ 290.991339][T10173] ? bpf_lsm_file_ioctl+0x9/0x20 [ 290.991354][T10173] ? __pfx_blkdev_ioctl+0x10/0x10 [ 290.991367][T10173] __se_sys_ioctl+0xfc/0x170 [ 290.991379][T10173] do_syscall_64+0x166/0x520 [ 290.991390][T10173] ? trace_irq_disable+0x3b/0x140 [ 290.991400][T10173] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.991411][T10173] ? clear_bhb_loop+0x70/0xc0 [ 290.991423][T10173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.991433][T10173] RIP: 0033:0x7f8f3a79e159 [ 290.991444][T10173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 290.991452][T10173] RSP: 002b:00007f8f3b5d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 290.991465][T10173] RAX: ffffffffffffffda RBX: 00007f8f3aa25fa0 RCX: 00007f8f3a79e159 [ 290.991472][T10173] RDX: 00002000000002c0 RSI: 0000000000004c0a RDI: 0000000000000003 [ 290.991479][T10173] RBP: 00007f8f3b5d3090 R08: 0000000000000000 R09: 0000000000000000 [ 290.991485][T10173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 290.991492][T10173] R13: 00007f8f3aa26038 R14: 00007f8f3aa25fa0 R15: 00007f8f3ab4fa48 [ 290.991508][T10173] [ 291.006101][T10173] warn_alloc: 1 callbacks suppressed [ 291.006119][T10173] syz.3.1325: vmalloc error: size 32768, align 0x1, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 291.006230][T10173] CPU: 1 UID: 0 PID: 10173 Comm: syz.3.1325 Not tainted syzkaller #0 PREEMPT(full) [ 291.006250][T10173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 291.006261][T10173] Call Trace: [ 291.006269][T10173] [ 291.006276][T10173] dump_stack_lvl+0xe8/0x150 [ 291.006315][T10173] warn_alloc+0x24d/0x270 [ 291.006338][T10173] ? lockdep_hardirqs_on+0x7b/0x110 [ 291.006365][T10173] ? __pfx_warn_alloc+0x10/0x10 [ 291.006382][T10173] ? kfree+0x1c5/0x650 [ 291.006413][T10173] ? __get_vm_area_node+0x219/0x2f0 [ 291.006447][T10173] __vmalloc_node_range_noprof+0x36b/0x1540 [ 291.006501][T10173] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 291.006528][T10173] ? __kasan_kmalloc+0x93/0xb0 [ 291.006551][T10173] ? __kmalloc_cache_noprof+0x321/0x600 [ 291.006570][T10173] ? bdev_disk_changed+0x4e0/0x17a0 [ 291.006591][T10173] vzalloc_noprof+0xb2/0xe0 [ 291.006617][T10173] ? bdev_disk_changed+0x4e0/0x17a0 [ 291.006640][T10173] bdev_disk_changed+0x4e0/0x17a0 [ 291.006672][T10173] ? __pfx___mutex_lock+0x10/0x10 [ 291.006702][T10173] ? __pfx_bdev_disk_changed+0x10/0x10 [ 291.006721][T10173] ? kobject_uevent_env+0x375/0x9e0 [ 291.006739][T10173] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 291.006767][T10173] ? kobject_uevent_env+0x375/0x9e0 [ 291.006788][T10173] loop_reread_partitions+0x5f/0xf0 [ 291.006818][T10173] loop_configure+0xb4e/0xdc0 [ 291.006855][T10173] ? __pfx_loop_configure+0x10/0x10 [ 291.006878][T10173] ? __lock_acquire+0x747/0x2de0 [ 291.006927][T10173] lo_ioctl+0xae0/0x2010 [ 291.006954][T10173] ? lock_acquire+0x115/0x350 [ 291.006975][T10173] ? __pfx_lo_ioctl+0x10/0x10 [ 291.007001][T10173] ? lock_acquire+0x115/0x350 [ 291.007029][T10173] ? __lock_acquire+0x747/0x2de0 [ 291.007050][T10173] ? is_bpf_text_address+0x292/0x2b0 [ 291.007077][T10173] ? kernel_text_address+0xa5/0xe0 [ 291.007099][T10173] ? __kernel_text_address+0xd/0x30 [ 291.007118][T10173] ? unwind_get_return_address+0x4d/0x90 [ 291.007139][T10173] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 291.007158][T10173] ? arch_stack_walk+0xfb/0x150 [ 291.007183][T10173] ? __lock_acquire+0x747/0x2de0 [ 291.007210][T10173] ? __lock_acquire+0x747/0x2de0 [ 291.007238][T10173] ? __lock_acquire+0x747/0x2de0 [ 291.007263][T10173] ? __lock_acquire+0x747/0x2de0 [ 291.007296][T10173] ? lock_acquire+0x115/0x350 [ 291.007326][T10173] ? lock_acquire+0x115/0x350 [ 291.007352][T10173] ? is_bpf_text_address+0x26/0x2b0 [ 291.007378][T10173] ? is_bpf_text_address+0x292/0x2b0 [ 291.007399][T10173] ? is_bpf_text_address+0x26/0x2b0 [ 291.007423][T10173] ? kernel_text_address+0xa5/0xe0 [ 291.007444][T10173] ? __kernel_text_address+0xd/0x30 [ 291.007463][T10173] ? unwind_get_return_address+0x4d/0x90 [ 291.007484][T10173] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 291.007502][T10173] ? arch_stack_walk+0xfb/0x150 [ 291.007533][T10173] ? stack_trace_save+0xa9/0x100 [ 291.007550][T10173] ? __pfx_stack_trace_save+0x10/0x10 [ 291.007566][T10173] ? kasan_save_track+0x4f/0x80 [ 291.007587][T10173] ? stack_depot_save_flags+0x33/0x7f0 [ 291.007610][T10173] ? __lock_acquire+0x747/0x2de0 [ 291.007630][T10173] ? kasan_save_track+0x4f/0x80 [ 291.007648][T10173] ? kasan_save_track+0x3e/0x80 [ 291.007666][T10173] ? kasan_save_free_info+0x40/0x50 [ 291.007689][T10173] ? __kasan_slab_free+0x5c/0x80 [ 291.007708][T10173] ? kfree+0x1c5/0x650 [ 291.007729][T10173] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 291.007748][T10173] ? security_file_ioctl+0xc3/0x2a0 [ 291.007766][T10173] ? __se_sys_ioctl+0x47/0x170 [ 291.007785][T10173] ? do_syscall_64+0x166/0x520 [ 291.007806][T10173] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.007830][T10173] ? __asan_memset+0x22/0x50 [ 291.007847][T10173] ? blk_get_meta_cap+0x19d/0x780 [ 291.007874][T10173] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 291.007900][T10173] ? irqentry_exit+0x218/0x910 [ 291.007925][T10173] ? blkdev_common_ioctl+0x14b7/0x3250 [ 291.007955][T10173] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 291.007991][T10173] ? tomoyo_path_number_perm+0x219/0x5f0 [ 291.008013][T10173] ? tomoyo_path_number_perm+0x219/0x5f0 [ 291.008036][T10173] ? do_vfs_ioctl+0x116f/0x1530 [ 291.008093][T10173] ? __pfx_lo_ioctl+0x10/0x10 [ 291.008118][T10173] blkdev_ioctl+0x5e3/0x740 [ 291.008143][T10173] ? __pfx_blkdev_ioctl+0x10/0x10 [ 291.008164][T10173] ? __fget_files+0x2a/0x420 [ 291.008192][T10173] ? bpf_lsm_file_ioctl+0x9/0x20 [ 291.008216][T10173] ? __pfx_blkdev_ioctl+0x10/0x10 [ 291.008239][T10173] __se_sys_ioctl+0xfc/0x170 [ 291.008261][T10173] do_syscall_64+0x166/0x520 [ 291.008283][T10173] ? trace_irq_disable+0x3b/0x140 [ 291.008301][T10173] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.008325][T10173] ? clear_bhb_loop+0x70/0xc0 [ 291.008347][T10173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.008365][T10173] RIP: 0033:0x7f8f3a79e159 [ 291.008384][T10173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 291.008399][T10173] RSP: 002b:00007f8f3b5d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 291.008417][T10173] RAX: ffffffffffffffda RBX: 00007f8f3aa25fa0 RCX: 00007f8f3a79e159 [ 291.008430][T10173] RDX: 00002000000002c0 RSI: 0000000000004c0a RDI: 0000000000000003 [ 291.008442][T10173] RBP: 00007f8f3b5d3090 R08: 0000000000000000 R09: 0000000000000000 [ 291.008454][T10173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 291.008464][T10173] R13: 00007f8f3aa26038 R14: 00007f8f3aa25fa0 R15: 00007f8f3ab4fa48 [ 291.008494][T10173] [ 291.021214][ T6804] cdc_ncm 5-1:1.0: bind() failure [ 291.031794][T10173] Mem-Info: [ 291.031889][T10173] active_anon:39184 inactive_anon:10 isolated_anon:0 [ 291.031889][T10173] active_file:14 inactive_file:20470 isolated_file:0 [ 291.031889][T10173] unevictable:0 dirty:211 writeback:0 [ 291.031889][T10173] slab_reclaimable:9587 slab_unreclaimable:96779 [ 291.031889][T10173] mapped:31942 shmem:33402 pagetables:1457 [ 291.031889][T10173] sec_pagetables:0 bounce:0 [ 291.031889][T10173] kernel_misc_reclaimable:0 [ 291.031889][T10173] free:1313382 free_pcp:11962 free_cma:0 [ 291.031932][T10173] Node 0 active_anon:156736kB inactive_anon:40kB active_file:56kB inactive_file:81688kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:127712kB dirty:820kB writeback:0kB shmem:133608kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13276kB pagetables:5708kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 291.035516][T10173] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:56kB dirty:24kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 291.035566][T10173] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 291.035617][T10173] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 291.035649][T10173] Node 0 DMA32 free:1286212kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:156736kB inactive_anon:40kB active_file:56kB inactive_file:81688kB unevictable:0kB writepending:820kB zspages:608kB present:3129332kB managed:2546896kB mlocked:0kB bounce:0kB free_pcp:47848kB local_pcp:31832kB free_cma:0kB [ 291.035702][T10173] lowmem_reserve[]: 0 0 0 0 0 [ 291.035732][T10173] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 291.035780][T10173] lowmem_reserve[]: 0 0 0 0 0 [ 291.038667][T10173] Node 1 Normal free:3951956kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:0kB writepending:24kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 291.038721][T10173] lowmem_reserve[]: 0 0 0 0 0 [ 291.038753][T10173] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 291.038855][T10173] Node 0 DMA32: 1*4kB (E) 438*8kB (UE) 91*16kB (UME) 307*32kB (UME) 157*64kB (UME) 75*128kB (UME) 20*256kB (UME) 7*512kB (UM) 2*1024kB (ME) 20*2048kB (UM) 293*4096kB (UM) = 1286276kB [ 291.038994][T10173] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 291.041803][T10173] Node 1 Normal: 5*4kB (UM) 8*8kB (UM) 12*16kB (UM) 10*32kB (UM) 8*64kB (UM) 4*128kB (UM) 3*256kB (M) 4*512kB (UM) 3*1024kB (UM) 2*2048kB (UM) 962*4096kB (M) = 3951956kB [ 291.043026][T10173] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 291.043042][T10173] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 291.043057][T10173] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 291.043072][T10173] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 291.043087][T10173] 53865 total pagecache pages [ 291.043095][T10173] 8 pages in swap cache [ 291.046392][T10173] Free swap = 124776kB [ 291.046406][T10173] Total swap = 124996kB [ 291.046415][T10173] 2097051 pages RAM [ 291.046422][T10173] 0 pages HighMem/MovableOnly [ 291.046429][T10173] 428711 pages reserved [ 291.046436][T10173] 0 pages cma reserved [ 291.098512][ T6798] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 291.144048][ T6797] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 291.180829][ T6795] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 291.246086][ T6795] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 291.295338][ T6797] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 291.300092][ T6797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.300123][ T6797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.300166][ T6797] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 291.300205][ T6797] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.358262][ T6797] usb 3-1: config 0 descriptor?? [ 291.391742][ T6798] usb 1-1: USB disconnect, device number 48 [ 291.518234][T10175] fuse: Bad value for 'fd' [ 291.526346][ T6804] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 291.526394][ T6804] cdc_ncm 5-1:1.1: bind() failure [ 292.006681][T10178] vivid-000: disconnect [ 292.295983][ T6797] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 292.337031][T10182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1329'. [ 292.337056][T10182] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1329'. [ 292.412489][ T6798] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 292.431423][ T6804] usb 5-1: USB disconnect, device number 54 [ 292.568520][ T6798] usb 4-1: Using ep0 maxpacket: 16 [ 292.569586][ T6798] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 292.576272][ T6798] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 292.576323][ T6798] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 292.596078][ T6798] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.596127][ T6798] usb 4-1: Product: syz [ 292.596140][ T6798] usb 4-1: Manufacturer: syz [ 292.596154][ T6798] usb 4-1: SerialNumber: syz [ 292.670318][T10182] macvtap1: entered allmulticast mode [ 292.670339][T10182] dummy0: entered allmulticast mode [ 292.670410][T10182] dummy0: entered promiscuous mode [ 292.868523][ T6798] usb 4-1: config 0 descriptor?? [ 292.904543][ T6798] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 292.904575][ T6798] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 292.952441][ T6804] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 293.103522][ T6804] usb 5-1: Using ep0 maxpacket: 32 [ 293.104246][ T6804] usb 5-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice= 0.00 [ 293.109294][ T6804] usb 5-1: too many endpoints for config 0 interface 0 altsetting 252: 33, using maximum allowed: 30 [ 293.109318][ T6804] usb 5-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.109329][ T6804] usb 5-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 293.109342][ T6804] usb 5-1: config 0 interface 0 has no altsetting 0 [ 293.109371][ T6804] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.115005][ T6804] usb 5-1: config 0 descriptor?? [ 293.126998][ T6804] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input35 [ 293.222097][ T987] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 293.366414][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 293.366766][ T6795] usb 2-1: USB disconnect, device number 49 [ 293.372817][ T987] usb 1-1: Using ep0 maxpacket: 32 [ 293.376197][ T987] usb 1-1: New USB device found, idVendor=056a, idProduct=00fa, bcdDevice= 0.00 [ 293.380071][ T987] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.380121][ T987] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 293.380157][ T987] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.388104][ T987] usb 1-1: config 0 descriptor?? [ 293.464664][ T6795] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 293.495322][ T6795] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 293.499434][ T6795] quatech2 2-1:0.51: device disconnected [ 293.609282][T10180] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 293.615627][T10180] xt_connbytes: Forcing CT accounting to be enabled [ 293.665539][T10180] 0: reclassify loop, rule prio 0, protocol 800 [ 293.717928][T10195] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1331'. [ 293.720726][T10195] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1331'. [ 293.743585][T10195] netlink: 'syz.1.1331': attribute type 1 has an invalid length. [ 293.802548][ T987] usbhid 1-1:0.0: can't add hid device: -71 [ 293.802679][ T987] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 293.829271][ T987] usb 1-1: USB disconnect, device number 49 [ 293.917348][ T4967] bcm5974 5-1:0.0: could not read from device [ 293.929221][T10178] vivid-000: reconnect [ 293.930855][ T4967] bcm5974 5-1:0.0: could not read from device [ 293.949604][ T4967] bcm5974 5-1:0.0: could not read from device [ 293.950842][ T4967] bcm5974 5-1:0.0: could not read from device [ 293.965596][ T6804] usb 5-1: USB disconnect, device number 55 [ 294.028518][ T5931] udevd[5931]: Error opening device "/dev/input/event4": No such file or directory [ 294.028610][ T5931] udevd[5931]: Unable to EVIOCGABS device "/dev/input/event4" [ 294.028668][ T5931] udevd[5931]: Unable to EVIOCGABS device "/dev/input/event4" [ 294.028758][ T5931] udevd[5931]: Unable to EVIOCGABS device "/dev/input/event4" [ 294.028903][ T5931] udevd[5931]: Unable to EVIOCGABS device "/dev/input/event4" [ 294.270431][ T6804] usb 3-1: USB disconnect, device number 44 [ 294.321726][T10202] xt_hashlimit: max too large, truncated to 1048576 [ 294.395290][T10204] ipip0: entered allmulticast mode [ 294.492998][ T6798] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 294.493514][ T6798] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 294.493904][ T6798] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 294.493920][ T6798] em28xx 4-1:0.0: No AC97 audio processor [ 294.579133][T10212] Invalid logical block size (1426063360) [ 294.592535][T10210] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1336'. [ 294.699382][T10220] syzkaller0: entered promiscuous mode [ 294.699405][T10220] syzkaller0: entered allmulticast mode [ 294.715620][T10220] tc mirred to Houston: device batadv_slave_0 is down [ 294.887819][T10214] sctp: [Deprecated]: syz.3.1339 (pid 10214) Use of struct sctp_assoc_value in delayed_ack socket option. [ 294.887819][T10214] Use struct sctp_sack_info instead [ 294.917490][T10228] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1342'. [ 295.031767][T10236] openvswitch: netlink: Port 570425345 exceeds max allowable 65535 [ 295.420670][T10251] fuse: Unknown parameter 'group' [ 295.454458][T10253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.473283][T10253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.490064][ T987] usb 1-1: new low-speed USB device number 50 using dummy_hcd [ 295.622569][ T987] usb 1-1: device descriptor read/64, error -71 [ 295.737443][T10249] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.737727][T10249] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.804397][T10249] tipc: Resetting bearer [ 295.863678][ T987] usb 1-1: new low-speed USB device number 51 using dummy_hcd [ 295.993831][ T987] usb 1-1: device descriptor read/64, error -71 [ 296.023762][T10267] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1356'. [ 296.075062][T10268] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1356'. [ 296.102779][ T987] usb usb1-port1: attempt power cycle [ 296.165656][T10249] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 296.197745][T10249] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 296.453230][ T987] usb 1-1: new low-speed USB device number 52 using dummy_hcd [ 296.472682][ T987] usb 1-1: device descriptor read/8, error -71 [ 296.672581][T10265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.674465][T10265] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.675242][T10265] tipc: Resetting bearer [ 296.681204][T10265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.712250][ T987] usb 1-1: new low-speed USB device number 53 using dummy_hcd [ 296.739256][ T987] usb 1-1: device descriptor read/8, error -71 [ 296.835965][T10265] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 296.835982][T10265] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 296.868099][ T987] usb usb1-port1: unable to enumerate USB device [ 296.876096][T10265] veth1_vlan: left promiscuous mode [ 296.880286][T10265] veth0_vlan: left promiscuous mode [ 296.881538][T10265] veth0_vlan: entered promiscuous mode [ 296.894050][T10265] veth1_vlan: entered promiscuous mode [ 296.913427][T10265] veth1_macvtap: left promiscuous mode [ 296.916779][T10265] veth0_macvtap: left promiscuous mode [ 296.917789][T10265] veth0_macvtap: entered promiscuous mode [ 296.920845][T10265] veth1_macvtap: entered promiscuous mode [ 296.938694][T10265] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 296.949009][T10265] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 296.960398][T10265] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 296.966840][T10265] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 297.278708][T10282] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1360'. [ 297.332248][ T50] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.332304][ T50] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.332341][ T50] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.332370][ T50] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.332398][ T50] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.332422][ T50] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.332452][ T50] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.332475][ T50] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.332504][ T50] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.332527][ T50] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.332556][ T50] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.332578][ T50] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.463831][ T6804] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 297.612113][ T6804] usb 3-1: Using ep0 maxpacket: 8 [ 297.614855][ T6804] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 297.616104][ T6804] usb 3-1: config 2 has an invalid interface number: 31 but max is 0 [ 297.616127][ T6804] usb 3-1: config 2 has no interface number 0 [ 297.616178][ T6804] usb 3-1: config 2 interface 31 has no altsetting 0 [ 297.618596][ T6804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.618617][ T6804] usb 3-1: Product: syz [ 297.618632][ T6804] usb 3-1: Manufacturer: syz [ 297.618645][ T6804] usb 3-1: SerialNumber: syz [ 297.826462][T10293] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1366'. [ 297.999332][T10298] netlink: 'syz.1.1367': attribute type 1 has an invalid length. [ 298.144523][ T6804] ch9200 3-1:2.31: probe with driver ch9200 failed with error -22 [ 298.148856][ T6804] usb 3-1: USB disconnect, device number 45 [ 298.184900][T10298] bond2: entered promiscuous mode [ 298.188304][T10298] 8021q: adding VLAN 0 to HW filter on device bond2 [ 298.401641][T10303] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1368'. [ 298.475258][T10298] bond2: (slave veth3): making interface the new active one [ 298.475284][T10298] veth3: entered promiscuous mode [ 298.513193][T10298] bond2: (slave veth3): Enslaving as an active interface with an up link [ 298.530727][T10303] FAULT_INJECTION: forcing a failure. [ 298.530727][T10303] name failslab, interval 1, probability 0, space 0, times 0 [ 298.530762][T10303] CPU: 1 UID: 0 PID: 10303 Comm: syz.0.1368 Not tainted syzkaller #0 PREEMPT(full) [ 298.530783][T10303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 298.530795][T10303] Call Trace: [ 298.530802][T10303] [ 298.530811][T10303] dump_stack_lvl+0xe8/0x150 [ 298.530846][T10303] should_fail_ex+0x410/0x560 [ 298.530873][T10303] should_failslab+0xa8/0x100 [ 298.530896][T10303] ? __kernfs_new_node+0xe6/0x980 [ 298.530916][T10303] kmem_cache_alloc_noprof+0xa1/0x600 [ 298.530946][T10303] ? __kernfs_new_node+0xe6/0x980 [ 298.530970][T10303] __kernfs_new_node+0xe6/0x980 [ 298.530997][T10303] ? __pfx___kernfs_new_node+0x10/0x10 [ 298.531017][T10303] ? kernfs_root+0x1c/0x230 [ 298.531041][T10303] ? kernfs_root+0x1c/0x230 [ 298.531058][T10303] ? kernfs_root+0x1c/0x230 [ 298.531072][T10303] ? kernfs_root+0x1c/0x230 [ 298.531094][T10303] kernfs_new_node+0xea/0x140 [ 298.531117][T10303] __kernfs_create_file+0x4b/0x2e0 [ 298.531143][T10303] sysfs_add_file_mode_ns+0x237/0x300 [ 298.531176][T10303] internal_create_group+0x679/0x1180 [ 298.531208][T10303] ? __pfx_internal_create_group+0x10/0x10 [ 298.531229][T10303] ? up_write+0x19d/0x4a0 [ 298.531258][T10303] sysfs_create_groups+0x59/0x120 [ 298.531279][T10303] device_add_attrs+0xde/0x600 [ 298.531302][T10303] ? __pfx_device_add_attrs+0x10/0x10 [ 298.531326][T10303] ? device_add_class_symlinks+0x21f/0x240 [ 298.531350][T10303] device_add+0x488/0xb80 [ 298.531373][T10303] netdev_register_kobject+0x197/0x350 [ 298.531399][T10303] register_netdevice+0x1433/0x1eb0 [ 298.531471][T10303] ? __pfx_register_netdevice+0x10/0x10 [ 298.531500][T10303] ? __pfx_hsr_add_port+0x10/0x10 [ 298.531517][T10303] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 298.531549][T10303] hsr_dev_finalize+0x6d5/0xaa0 [ 298.531574][T10303] hsr_newlink+0x818/0x930 [ 298.531592][T10303] ? __pfx_hsr_newlink+0x10/0x10 [ 298.531618][T10303] ? rtnl_create_link+0xa04/0xd70 [ 298.531638][T10303] ? __pfx_hsr_newlink+0x10/0x10 [ 298.531658][T10303] rtnl_newlink_create+0x305/0x7b0 [ 298.531688][T10303] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 298.531718][T10303] ? __pfx___mutex_lock+0x10/0x10 [ 298.531751][T10303] ? ns_capable+0x89/0xe0 [ 298.531780][T10303] rtnl_newlink+0x166d/0x1c30 [ 298.531819][T10303] ? __pfx_rtnl_newlink+0x10/0x10 [ 298.531840][T10303] ? do_syscall_64+0x166/0x520 [ 298.531861][T10303] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.531910][T10303] ? kasan_quarantine_put+0xbb/0x1f0 [ 298.531930][T10303] ? lockdep_hardirqs_on+0x7b/0x110 [ 298.531956][T10303] ? nlmon_xmit+0xb0/0x100 [ 298.531975][T10303] ? kmem_cache_free+0x182/0x650 [ 298.532006][T10303] ? __lock_acquire+0x747/0x2de0 [ 298.532033][T10303] ? __local_bh_enable_ip+0xd6/0x140 [ 298.532058][T10303] ? lockdep_hardirqs_on+0x7b/0x110 [ 298.532080][T10303] ? __dev_queue_xmit+0x29b/0x3820 [ 298.532105][T10303] ? __local_bh_enable_ip+0xd6/0x140 [ 298.532126][T10303] ? __dev_queue_xmit+0x29b/0x3820 [ 298.532159][T10303] ? lock_acquire+0x115/0x350 [ 298.532192][T10303] ? __pfx_rtnl_newlink+0x10/0x10 [ 298.532215][T10303] rtnetlink_rcv_msg+0x802/0xc00 [ 298.532242][T10303] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 298.532263][T10303] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 298.532283][T10303] ? ref_tracker_free+0x689/0x830 [ 298.532309][T10303] ? __pfx_ref_tracker_free+0x10/0x10 [ 298.532341][T10303] netlink_rcv_skb+0x226/0x4a0 [ 298.532370][T10303] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 298.532394][T10303] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 298.532435][T10303] ? netlink_deliver_tap+0x2e/0x1b0 [ 298.532459][T10303] ? netlink_deliver_tap+0x2e/0x1b0 [ 298.532482][T10303] netlink_unicast+0x7bd/0x940 [ 298.532518][T10303] netlink_sendmsg+0x813/0xb40 [ 298.532546][T10303] ? __pfx_netlink_sendmsg+0x10/0x10 [ 298.532571][T10303] ? apparmor_socket_sendmsg+0x98/0x360 [ 298.532594][T10303] ? __pfx_netlink_sendmsg+0x10/0x10 [ 298.532611][T10303] sock_sendmsg_nosec+0x13a/0x180 [ 298.532636][T10303] ____sys_sendmsg+0x54e/0x850 [ 298.532666][T10303] ? __pfx_____sys_sendmsg+0x10/0x10 [ 298.532700][T10303] ? import_iovec+0x73/0xa0 [ 298.532728][T10303] ___sys_sendmsg+0x2a5/0x360 [ 298.532751][T10303] ? __lock_acquire+0x747/0x2de0 [ 298.532773][T10303] ? __pfx____sys_sendmsg+0x10/0x10 [ 298.532833][T10303] ? __fget_files+0x2a/0x420 [ 298.532856][T10303] ? __fget_files+0x3a2/0x420 [ 298.532890][T10303] __x64_sys_sendmsg+0x1b1/0x290 [ 298.532919][T10303] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 298.532965][T10303] do_syscall_64+0x166/0x520 [ 298.532987][T10303] ? trace_irq_disable+0x3b/0x140 [ 298.533005][T10303] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.533024][T10303] ? clear_bhb_loop+0x70/0xc0 [ 298.533046][T10303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.533065][T10303] RIP: 0033:0x7f94feb9e159 [ 298.533084][T10303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.533099][T10303] RSP: 002b:00007f94ffb05028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 298.533119][T10303] RAX: ffffffffffffffda RBX: 00007f94fee25fa0 RCX: 00007f94feb9e159 [ 298.533133][T10303] RDX: 0000000000008000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 298.533145][T10303] RBP: 00007f94ffb05090 R08: 0000000000000000 R09: 0000000000000000 [ 298.533157][T10303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 298.533168][T10303] R13: 00007f94fee26038 R14: 00007f94fee25fa0 R15: 00007f94fef4fa48 [ 298.533198][T10303] [ 299.239785][T10319] SET target dimension over the limit! [ 299.292608][ T6789] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 299.443583][ T6789] usb 5-1: New USB device found, idVendor=0582, idProduct=009a, bcdDevice= 0.40 [ 299.444574][ T6789] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 299.444595][ T6789] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 299.446618][ T6789] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.446638][ T6789] usb 5-1: Product: syz [ 299.446651][ T6789] usb 5-1: Manufacturer: syz [ 299.446663][ T6789] usb 5-1: SerialNumber: syz [ 299.452277][ T6798] usb 3-1: new low-speed USB device number 46 using dummy_hcd [ 299.524695][T10328] Invalid logical block size (2097152) [ 299.622706][ T6798] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 299.630796][ T6798] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 299.630822][ T6798] usb 3-1: config 0 has no interface number 0 [ 299.630860][ T6798] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 299.630909][ T6798] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 299.630949][ T6798] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.683784][ T6798] usb 3-1: config 0 descriptor?? [ 299.688038][T10317] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 299.719416][ T6798] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 299.789403][T10333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.789915][T10333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.835621][ T6789] usb 5-1: 0:1 : does not exist [ 299.835666][ T6789] usb 5-1: unit 5 not found! [ 299.998177][T10338] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1381'. [ 300.124831][T10317] warning: `syz.2.1374' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 300.139380][ T6789] usb 5-1: USB disconnect, device number 56 [ 300.210471][ T6804] usb 3-1: USB disconnect, device number 46 [ 300.242835][ T5931] udevd[5931]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 300.287931][T10341] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1382'. [ 300.913100][T10365] FAULT_INJECTION: forcing a failure. [ 300.913100][T10365] name failslab, interval 1, probability 0, space 0, times 0 [ 300.913143][T10365] CPU: 1 UID: 0 PID: 10365 Comm: syz.3.1389 Not tainted syzkaller #0 PREEMPT(full) [ 300.913165][T10365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 300.913176][T10365] Call Trace: [ 300.913184][T10365] [ 300.913192][T10365] dump_stack_lvl+0xe8/0x150 [ 300.913223][T10365] should_fail_ex+0x410/0x560 [ 300.913250][T10365] should_failslab+0xa8/0x100 [ 300.913272][T10365] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 300.913301][T10365] kmem_cache_alloc_noprof+0xa1/0x600 [ 300.913329][T10365] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 300.913356][T10365] ? kmem_cache_alloc_noprof+0x156/0x600 [ 300.913384][T10365] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 300.913419][T10365] __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 300.913459][T10365] mmu_topup_memory_caches+0x21/0x170 [ 300.913483][T10365] kvm_mmu_load+0x9d/0x21e0 [ 300.913505][T10365] ? kvm_msr_allowed+0x9a/0x490 [ 300.913523][T10365] ? kvm_msr_allowed+0x3f4/0x490 [ 300.913541][T10365] ? kvm_msr_allowed+0x9a/0x490 [ 300.913561][T10365] ? kvm_msr_allowed+0x9a/0x490 [ 300.913587][T10365] ? kvm_apic_has_interrupt+0x740/0x770 [ 300.913623][T10365] vcpu_run+0x4f68/0x79b0 [ 300.913672][T10365] ? update_se+0x90/0xff0 [ 300.913738][T10365] ? __pfx_vcpu_run+0x10/0x10 [ 300.913756][T10365] ? lock_acquire+0x115/0x350 [ 300.913794][T10365] kvm_arch_vcpu_ioctl_run+0xe87/0x19c0 [ 300.913828][T10365] ? kvm_arch_vcpu_ioctl_run+0x1f8/0x19c0 [ 300.913859][T10365] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 300.913887][T10365] kvm_vcpu_ioctl+0xa61/0xfd0 [ 300.913914][T10365] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 300.913933][T10365] ? hook_file_ioctl+0x1f2/0x600 [ 300.913975][T10365] ? __fget_files+0x2a/0x420 [ 300.914004][T10365] ? __fget_files+0x2a/0x420 [ 300.914028][T10365] ? __fget_files+0x3a2/0x420 [ 300.914052][T10365] ? __fget_files+0x2a/0x420 [ 300.914082][T10365] ? bpf_lsm_file_ioctl+0x9/0x20 [ 300.914108][T10365] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 300.914135][T10365] __se_sys_ioctl+0xfc/0x170 [ 300.914160][T10365] do_syscall_64+0x166/0x520 [ 300.914184][T10365] ? trace_irq_disable+0x3b/0x140 [ 300.914202][T10365] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.914220][T10365] ? clear_bhb_loop+0x70/0xc0 [ 300.914244][T10365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.914263][T10365] RIP: 0033:0x7f8f3a79e159 [ 300.914281][T10365] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 300.914296][T10365] RSP: 002b:00007f8f3b5b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 300.914316][T10365] RAX: ffffffffffffffda RBX: 00007f8f3aa26090 RCX: 00007f8f3a79e159 [ 300.914330][T10365] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000082 [ 300.914342][T10365] RBP: 00007f8f3b5b2090 R08: 0000000000000000 R09: 0000000000000000 [ 300.914355][T10365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 300.914367][T10365] R13: 00007f8f3aa26128 R14: 00007f8f3aa26090 R15: 00007f8f3ab4fa48 [ 300.914399][T10365] [ 301.109700][T10373] loop8: detected capacity change from 0 to 7 [ 301.114611][T10373] FAULT_INJECTION: forcing a failure. [ 301.114611][T10373] name failslab, interval 1, probability 0, space 0, times 0 [ 301.114641][T10373] CPU: 1 UID: 0 PID: 10373 Comm: syz.4.1394 Not tainted syzkaller #0 PREEMPT(full) [ 301.114662][T10373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 301.114674][T10373] Call Trace: [ 301.114682][T10373] [ 301.114690][T10373] dump_stack_lvl+0xe8/0x150 [ 301.114720][T10373] should_fail_ex+0x410/0x560 [ 301.114748][T10373] should_failslab+0xa8/0x100 [ 301.114773][T10373] __kmalloc_node_noprof+0x100/0x720 [ 301.114792][T10373] ? __get_vm_area_node+0x200/0x2f0 [ 301.114819][T10373] ? __get_vm_area_node+0x283/0x2f0 [ 301.114842][T10373] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 301.114867][T10373] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 301.114901][T10373] __vmalloc_node_range_noprof+0x5b4/0x1540 [ 301.114955][T10373] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 301.114982][T10373] ? __kasan_kmalloc+0x93/0xb0 [ 301.115005][T10373] ? __kmalloc_cache_noprof+0x321/0x600 [ 301.115024][T10373] ? bdev_disk_changed+0x4e0/0x17a0 [ 301.115045][T10373] vzalloc_noprof+0xb2/0xe0 [ 301.115072][T10373] ? bdev_disk_changed+0x4e0/0x17a0 [ 301.115094][T10373] bdev_disk_changed+0x4e0/0x17a0 [ 301.115133][T10373] ? __pfx___mutex_lock+0x10/0x10 [ 301.115164][T10373] ? __pfx_bdev_disk_changed+0x10/0x10 [ 301.115183][T10373] ? kobject_uevent_env+0x375/0x9e0 [ 301.115202][T10373] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 301.115228][T10373] ? kobject_uevent_env+0x375/0x9e0 [ 301.115250][T10373] loop_reread_partitions+0x5f/0xf0 [ 301.115280][T10373] loop_configure+0xb4e/0xdc0 [ 301.115316][T10373] ? __pfx_loop_configure+0x10/0x10 [ 301.115339][T10373] ? __lock_acquire+0x747/0x2de0 [ 301.115388][T10373] lo_ioctl+0xae0/0x2010 [ 301.115416][T10373] ? lock_acquire+0x115/0x350 [ 301.115436][T10373] ? __pfx_lo_ioctl+0x10/0x10 [ 301.115462][T10373] ? lock_acquire+0x115/0x350 [ 301.115490][T10373] ? __lock_acquire+0x747/0x2de0 [ 301.115511][T10373] ? is_bpf_text_address+0x292/0x2b0 [ 301.115538][T10373] ? kernel_text_address+0xa5/0xe0 [ 301.115560][T10373] ? __kernel_text_address+0xd/0x30 [ 301.115579][T10373] ? unwind_get_return_address+0x4d/0x90 [ 301.115601][T10373] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 301.115619][T10373] ? arch_stack_walk+0xfb/0x150 [ 301.115645][T10373] ? __lock_acquire+0x747/0x2de0 [ 301.115673][T10373] ? __lock_acquire+0x747/0x2de0 [ 301.115701][T10373] ? __lock_acquire+0x747/0x2de0 [ 301.115727][T10373] ? __lock_acquire+0x747/0x2de0 [ 301.115759][T10373] ? lock_acquire+0x115/0x350 [ 301.115784][T10373] ? lock_acquire+0x115/0x350 [ 301.115811][T10373] ? is_bpf_text_address+0x26/0x2b0 [ 301.115837][T10373] ? is_bpf_text_address+0x292/0x2b0 [ 301.115858][T10373] ? is_bpf_text_address+0x26/0x2b0 [ 301.115883][T10373] ? kernel_text_address+0xa5/0xe0 [ 301.115904][T10373] ? __kernel_text_address+0xd/0x30 [ 301.115924][T10373] ? unwind_get_return_address+0x4d/0x90 [ 301.115944][T10373] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 301.115962][T10373] ? arch_stack_walk+0xfb/0x150 [ 301.115993][T10373] ? stack_trace_save+0xa9/0x100 [ 301.116010][T10373] ? __pfx_stack_trace_save+0x10/0x10 [ 301.116026][T10373] ? kasan_save_track+0x4f/0x80 [ 301.116048][T10373] ? stack_depot_save_flags+0x33/0x7f0 [ 301.116067][T10373] ? __lock_acquire+0x747/0x2de0 [ 301.116088][T10373] ? kasan_save_track+0x4f/0x80 [ 301.116105][T10373] ? kasan_save_track+0x3e/0x80 [ 301.116121][T10373] ? kasan_save_free_info+0x40/0x50 [ 301.116150][T10373] ? __kasan_slab_free+0x5c/0x80 [ 301.116170][T10373] ? kfree+0x1c5/0x650 [ 301.116192][T10373] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 301.116211][T10373] ? security_file_ioctl+0xc3/0x2a0 [ 301.116229][T10373] ? __se_sys_ioctl+0x47/0x170 [ 301.116246][T10373] ? do_syscall_64+0x166/0x520 [ 301.116268][T10373] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.116292][T10373] ? __asan_memset+0x22/0x50 [ 301.116308][T10373] ? blk_get_meta_cap+0x19d/0x780 [ 301.116335][T10373] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 301.116367][T10373] ? blkdev_common_ioctl+0x14b7/0x3250 [ 301.116397][T10373] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 301.116422][T10373] ? kasan_quarantine_put+0xbb/0x1f0 [ 301.116450][T10373] ? tomoyo_path_number_perm+0x219/0x5f0 [ 301.116472][T10373] ? tomoyo_path_number_perm+0x219/0x5f0 [ 301.116496][T10373] ? do_vfs_ioctl+0x116f/0x1530 [ 301.116552][T10373] ? __pfx_lo_ioctl+0x10/0x10 [ 301.116579][T10373] blkdev_ioctl+0x5e3/0x740 [ 301.116604][T10373] ? __pfx_blkdev_ioctl+0x10/0x10 [ 301.116625][T10373] ? __fget_files+0x2a/0x420 [ 301.116653][T10373] ? bpf_lsm_file_ioctl+0x9/0x20 [ 301.116678][T10373] ? __pfx_blkdev_ioctl+0x10/0x10 [ 301.116701][T10373] __se_sys_ioctl+0xfc/0x170 [ 301.116722][T10373] do_syscall_64+0x166/0x520 [ 301.116744][T10373] ? trace_irq_disable+0x3b/0x140 [ 301.116762][T10373] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.116781][T10373] ? clear_bhb_loop+0x70/0xc0 [ 301.116803][T10373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.116821][T10373] RIP: 0033:0x7fec60b9e159 [ 301.116839][T10373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 301.116854][T10373] RSP: 002b:00007fec61a9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 301.116874][T10373] RAX: ffffffffffffffda RBX: 00007fec60e25fa0 RCX: 00007fec60b9e159 [ 301.116888][T10373] RDX: 00002000000002c0 RSI: 0000000000004c0a RDI: 0000000000000003 [ 301.116899][T10373] RBP: 00007fec61a9f090 R08: 0000000000000000 R09: 0000000000000000 [ 301.116911][T10373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 301.116922][T10373] R13: 00007fec60e26038 R14: 00007fec60e25fa0 R15: 00007fec60f4fa48 [ 301.116951][T10373] [ 301.131184][T10373] syz.4.1394: vmalloc error: size 32768, failed to allocated page array size 64, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 301.131244][T10373] CPU: 1 UID: 0 PID: 10373 Comm: syz.4.1394 Not tainted syzkaller #0 PREEMPT(full) [ 301.131265][T10373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 301.131276][T10373] Call Trace: [ 301.131284][T10373] [ 301.131292][T10373] dump_stack_lvl+0xe8/0x150 [ 301.131321][T10373] warn_alloc+0x24d/0x270 [ 301.131346][T10373] ? __pfx_warn_alloc+0x10/0x10 [ 301.131370][T10373] ? __kmalloc_node_noprof+0x4d7/0x720 [ 301.131387][T10373] ? __get_vm_area_node+0x200/0x2f0 [ 301.131412][T10373] ? __get_vm_area_node+0x283/0x2f0 [ 301.131435][T10373] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 301.131461][T10373] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 301.131494][T10373] __vmalloc_node_range_noprof+0x969/0x1540 [ 301.131550][T10373] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 301.131577][T10373] ? __kasan_kmalloc+0x93/0xb0 [ 301.131599][T10373] ? __kmalloc_cache_noprof+0x321/0x600 [ 301.131619][T10373] ? bdev_disk_changed+0x4e0/0x17a0 [ 301.131640][T10373] vzalloc_noprof+0xb2/0xe0 [ 301.131666][T10373] ? bdev_disk_changed+0x4e0/0x17a0 [ 301.131688][T10373] bdev_disk_changed+0x4e0/0x17a0 [ 301.131721][T10373] ? __pfx___mutex_lock+0x10/0x10 [ 301.131752][T10373] ? __pfx_bdev_disk_changed+0x10/0x10 [ 301.131770][T10373] ? kobject_uevent_env+0x375/0x9e0 [ 301.131789][T10373] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 301.131816][T10373] ? kobject_uevent_env+0x375/0x9e0 [ 301.131837][T10373] loop_reread_partitions+0x5f/0xf0 [ 301.131868][T10373] loop_configure+0xb4e/0xdc0 [ 301.131905][T10373] ? __pfx_loop_configure+0x10/0x10 [ 301.131928][T10373] ? __lock_acquire+0x747/0x2de0 [ 301.131977][T10373] lo_ioctl+0xae0/0x2010 [ 301.132005][T10373] ? lock_acquire+0x115/0x350 [ 301.132025][T10373] ? __pfx_lo_ioctl+0x10/0x10 [ 301.132051][T10373] ? lock_acquire+0x115/0x350 [ 301.132079][T10373] ? __lock_acquire+0x747/0x2de0 [ 301.132100][T10373] ? is_bpf_text_address+0x292/0x2b0 [ 301.132132][T10373] ? kernel_text_address+0xa5/0xe0 [ 301.132153][T10373] ? __kernel_text_address+0xd/0x30 [ 301.132173][T10373] ? unwind_get_return_address+0x4d/0x90 [ 301.132194][T10373] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 301.132213][T10373] ? arch_stack_walk+0xfb/0x150 [ 301.132238][T10373] ? __lock_acquire+0x747/0x2de0 [ 301.132266][T10373] ? __lock_acquire+0x747/0x2de0 [ 301.132293][T10373] ? __lock_acquire+0x747/0x2de0 [ 301.132319][T10373] ? __lock_acquire+0x747/0x2de0 [ 301.132350][T10373] ? lock_acquire+0x115/0x350 [ 301.132376][T10373] ? lock_acquire+0x115/0x350 [ 301.132403][T10373] ? is_bpf_text_address+0x26/0x2b0 [ 301.132428][T10373] ? is_bpf_text_address+0x292/0x2b0 [ 301.132449][T10373] ? is_bpf_text_address+0x26/0x2b0 [ 301.132474][T10373] ? kernel_text_address+0xa5/0xe0 [ 301.132495][T10373] ? __kernel_text_address+0xd/0x30 [ 301.132514][T10373] ? unwind_get_return_address+0x4d/0x90 [ 301.132533][T10373] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 301.132550][T10373] ? arch_stack_walk+0xfb/0x150 [ 301.132582][T10373] ? stack_trace_save+0xa9/0x100 [ 301.132599][T10373] ? __pfx_stack_trace_save+0x10/0x10 [ 301.132615][T10373] ? kasan_save_track+0x4f/0x80 [ 301.132636][T10373] ? stack_depot_save_flags+0x33/0x7f0 [ 301.132657][T10373] ? __lock_acquire+0x747/0x2de0 [ 301.132679][T10373] ? kasan_save_track+0x4f/0x80 [ 301.132696][T10373] ? kasan_save_track+0x3e/0x80 [ 301.132713][T10373] ? kasan_save_free_info+0x40/0x50 [ 301.132736][T10373] ? __kasan_slab_free+0x5c/0x80 [ 301.132755][T10373] ? kfree+0x1c5/0x650 [ 301.132777][T10373] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 301.132796][T10373] ? security_file_ioctl+0xc3/0x2a0 [ 301.132813][T10373] ? __se_sys_ioctl+0x47/0x170 [ 301.132830][T10373] ? do_syscall_64+0x166/0x520 [ 301.132851][T10373] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.132875][T10373] ? __asan_memset+0x22/0x50 [ 301.132892][T10373] ? blk_get_meta_cap+0x19d/0x780 [ 301.132919][T10373] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 301.132949][T10373] ? blkdev_common_ioctl+0x14b7/0x3250 [ 301.132978][T10373] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 301.133004][T10373] ? kasan_quarantine_put+0xbb/0x1f0 [ 301.133031][T10373] ? tomoyo_path_number_perm+0x219/0x5f0 [ 301.133066][T10373] ? tomoyo_path_number_perm+0x219/0x5f0 [ 301.133089][T10373] ? do_vfs_ioctl+0x116f/0x1530 [ 301.133151][T10373] ? __pfx_lo_ioctl+0x10/0x10 [ 301.133176][T10373] blkdev_ioctl+0x5e3/0x740 [ 301.133202][T10373] ? __pfx_blkdev_ioctl+0x10/0x10 [ 301.133223][T10373] ? __fget_files+0x2a/0x420 [ 301.133251][T10373] ? bpf_lsm_file_ioctl+0x9/0x20 [ 301.133276][T10373] ? __pfx_blkdev_ioctl+0x10/0x10 [ 301.133299][T10373] __se_sys_ioctl+0xfc/0x170 [ 301.133321][T10373] do_syscall_64+0x166/0x520 [ 301.133343][T10373] ? trace_irq_disable+0x3b/0x140 [ 301.133360][T10373] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.133378][T10373] ? clear_bhb_loop+0x70/0xc0 [ 301.133401][T10373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.133419][T10373] RIP: 0033:0x7fec60b9e159 [ 301.133437][T10373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 301.133452][T10373] RSP: 002b:00007fec61a9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 301.133468][T10373] RAX: ffffffffffffffda RBX: 00007fec60e25fa0 RCX: 00007fec60b9e159 [ 301.133481][T10373] RDX: 00002000000002c0 RSI: 0000000000004c0a RDI: 0000000000000003 [ 301.133493][T10373] RBP: 00007fec61a9f090 R08: 0000000000000000 R09: 0000000000000000 [ 301.133505][T10373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 301.133516][T10373] R13: 00007fec60e26038 R14: 00007fec60e25fa0 R15: 00007fec60f4fa48 [ 301.133545][T10373] [ 301.147258][T10373] Mem-Info: [ 301.147272][T10373] active_anon:22683 inactive_anon:16365 isolated_anon:0 [ 301.147272][T10373] active_file:60 inactive_file:20497 isolated_file:0 [ 301.147272][T10373] unevictable:0 dirty:197 writeback:0 [ 301.147272][T10373] slab_reclaimable:9562 slab_unreclaimable:99938 [ 301.147272][T10373] mapped:31283 shmem:33289 pagetables:1539 [ 301.147272][T10373] sec_pagetables:3 bounce:0 [ 301.147272][T10373] kernel_misc_reclaimable:0 [ 301.147272][T10373] free:1306919 free_pcp:11613 free_cma:0 [ 301.147320][T10373] Node 0 active_anon:90732kB inactive_anon:65460kB active_file:240kB inactive_file:81808kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:125088kB dirty:784kB writeback:0kB shmem:133156kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13456kB pagetables:6036kB sec_pagetables:12kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 301.147369][T10373] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:180kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:44kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 301.147415][T10373] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 301.147466][T10373] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 301.147499][T10373] Node 0 DMA32 free:1260360kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:90732kB inactive_anon:65460kB active_file:240kB inactive_file:81808kB unevictable:0kB writepending:784kB zspages:1592kB present:3129332kB managed:2546896kB mlocked:0kB bounce:0kB free_pcp:46452kB local_pcp:26896kB free_cma:0kB [ 301.147551][T10373] lowmem_reserve[]: 0 0 0 0 0 [ 301.147582][T10373] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 301.147630][T10373] lowmem_reserve[]: 0 0 0 0 0 [ 301.147659][T10373] Node 1 Normal free:3951956kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:180kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 301.147706][T10373] lowmem_reserve[]: 0 0 0 0 0 [ 301.147735][T10373] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 301.147836][T10373] Node 0 DMA32: 1*4kB (E) 34*8kB (UE) 5*16kB (ME) 81*32kB (UME) 107*64kB (UME) 40*128kB (UME) 19*256kB (UME) 3*512kB (M) 2*1024kB (ME) 22*2048kB (UM) 291*4096kB (UM) = 1260356kB [ 301.147974][T10373] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 301.148060][T10373] Node 1 Normal: 6*4kB (UM) 9*8kB (UM) 12*16kB (UM) 10*32kB (UM) 8*64kB (UM) 4*128kB (UM) 3*256kB (M) 4*512kB (UM) 3*1024kB (UM) 2*2048kB (UM) 962*4096kB (M) = 3951968kB [ 301.148210][T10373] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 301.148226][T10373] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 301.148241][T10373] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 301.165367][T10373] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 301.165387][T10373] 53848 total pagecache pages [ 301.165396][T10373] 6 pages in swap cache [ 301.165402][T10373] Free swap = 124256kB [ 301.165410][T10373] Total swap = 124996kB [ 301.165419][T10373] 2097051 pages RAM [ 301.165425][T10373] 0 pages HighMem/MovableOnly [ 301.165433][T10373] 428711 pages reserved [ 301.165440][T10373] 0 pages cma reserved [ 301.344468][T10375] fuse: Bad value for 'fd' [ 302.178634][T10390] xt_CT: You must specify a L4 protocol and not use inversions on it [ 302.343168][T10384] tipc: Resetting bearer [ 302.810791][T10399] fuse: Bad value for 'fd' [ 303.015207][T10400] ªªªªªª: renamed from vlan0 [ 303.121637][T10406] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1403'. [ 303.342809][ T6797] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 303.492148][ T6797] usb 2-1: Using ep0 maxpacket: 8 [ 303.495059][ T6797] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 303.500750][ T6797] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 303.500780][ T6797] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.504312][ T6797] usb 2-1: config 0 descriptor?? [ 303.595356][T10418] openvswitch: netlink: Port 2228225 exceeds max allowable 65535 [ 303.679240][T10406] bridge_slave_0: left allmulticast mode [ 303.679268][T10406] bridge_slave_0: left promiscuous mode [ 303.697010][T10406] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.728390][ T6797] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 303.801037][T10406] bridge_slave_1: left allmulticast mode [ 303.801065][T10406] bridge_slave_1: left promiscuous mode [ 303.801293][T10406] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.973679][T10406] bond0: (slave bond_slave_0): Releasing backup interface [ 304.010981][T10406] bond0: (slave bond_slave_1): Releasing backup interface [ 304.020670][T10427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.021072][T10427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.119066][T10406] team0: Port device team_slave_0 removed [ 304.152448][T10406] team0: Port device team_slave_1 removed [ 304.157405][T10406] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.157432][T10406] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.188794][T10406] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.188819][T10406] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.210066][ T6804] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 304.241093][T10406] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 304.361493][ T6638] usb 2-1: USB disconnect, device number 50 [ 304.378851][ T6804] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 304.379813][ T6804] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 304.379836][ T6804] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 304.411710][ T6804] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.411727][ T6804] usb 5-1: Product: syz [ 304.411735][ T6804] usb 5-1: Manufacturer: syz [ 304.411742][ T6804] usb 5-1: SerialNumber: syz [ 304.572879][ T987] usb 3-1: new low-speed USB device number 47 using dummy_hcd [ 304.646543][T10429] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1411'. [ 304.742434][ T987] usb 3-1: Invalid ep0 maxpacket: 64 [ 304.802113][ T6638] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 304.864500][ T6804] usb 5-1: USB disconnect, device number 57 [ 304.882744][ T987] usb 3-1: new low-speed USB device number 48 using dummy_hcd [ 304.885872][ T5931] udevd[5931]: setting owner of /dev/bus/usb/005/057 to uid=0, gid=0 failed: No such file or directory [ 304.955406][ T6638] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 304.956594][ T6638] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 304.956618][ T6638] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 304.958652][ T6638] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.958675][ T6638] usb 1-1: Product: syz [ 304.958689][ T6638] usb 1-1: Manufacturer: syz [ 304.958703][ T6638] usb 1-1: SerialNumber: syz [ 305.032161][ T987] usb 3-1: Invalid ep0 maxpacket: 64 [ 305.032674][ T987] usb usb3-port1: attempt power cycle [ 305.097559][T10449] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1416'. [ 305.205192][T10440] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1413'. [ 305.382440][ T987] usb 3-1: new low-speed USB device number 49 using dummy_hcd [ 305.414075][ T987] usb 3-1: Invalid ep0 maxpacket: 64 [ 305.423863][ T6797] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 305.542068][ T987] usb 3-1: new low-speed USB device number 50 using dummy_hcd [ 305.563061][ T6638] usb 1-1: USB disconnect, device number 54 [ 305.563896][ T987] usb 3-1: Invalid ep0 maxpacket: 64 [ 305.564164][ T987] usb usb3-port1: unable to enumerate USB device [ 305.572124][ T6797] usb 2-1: Using ep0 maxpacket: 8 [ 305.572969][ T6797] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 305.576871][ T6797] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.576895][ T6797] usb 2-1: Product: syz [ 305.576908][ T6797] usb 2-1: Manufacturer: syz [ 305.576921][ T6797] usb 2-1: SerialNumber: syz [ 305.637443][ T6797] usb 2-1: config 0 descriptor?? [ 305.851008][T10452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.879004][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 305.879025][ T31] audit: type=1326 audit(1790391219.010:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10451 comm="syz.1.1417" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fc60479e159 code=0x7ffc0000 [ 305.879068][ T31] audit: type=1326 audit(1790391219.020:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10451 comm="syz.1.1417" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fc60479e159 code=0x7ffc0000 [ 305.881765][ T31] audit: type=1326 audit(1790391219.030:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10451 comm="syz.1.1417" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fc60479e159 code=0x7ffc0000 [ 305.883501][ T31] audit: type=1326 audit(1790391219.030:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10451 comm="syz.1.1417" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fc60479e159 code=0x7ffc0000 [ 305.883791][T10452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.885582][ T31] audit: type=1326 audit(1790391219.040:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10451 comm="syz.1.1417" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fc60479e159 code=0x7ffc0000 [ 305.885634][ T31] audit: type=1326 audit(1790391219.040:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10451 comm="syz.1.1417" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fc60479e159 code=0x7ffc0000 [ 305.986384][ T31] audit: type=1326 audit(1790391219.140:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10451 comm="syz.1.1417" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fc60479e159 code=0x7ffc0000 [ 305.986457][ T31] audit: type=1326 audit(1790391219.140:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10451 comm="syz.1.1417" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fc60479e159 code=0x7ffc0000 [ 305.986496][ T31] audit: type=1326 audit(1790391219.140:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10451 comm="syz.1.1417" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fc60479e159 code=0x7ffc0000 [ 305.991067][T10462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.002653][ T31] audit: type=1326 audit(1790391219.140:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10451 comm="syz.1.1417" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fc60479e159 code=0x7ffc0000 [ 306.010653][T10462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.019929][ T6797] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 306.119013][T10468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.129661][T10468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.257882][T10461] loop8: detected capacity change from 0 to 7 [ 306.259016][T10461] Dev loop8: unable to read RDB block 7 [ 306.259078][T10461] loop8: unable to read partition table [ 306.259372][T10461] loop8: partition table beyond EOD, truncated [ 306.259403][T10461] loop_reread_partitions: partition scan of loop8 (þè¢Ñâ·û) failed (rc=-5) [ 306.344571][T10472] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1422'. [ 306.500731][T10452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.516814][T10452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.548580][T10476] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1424'. [ 306.758511][T10482] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1427'. [ 307.020399][ T6797] usb write operation failed. (-71) [ 307.046331][ T6797] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 307.046890][ T6797] dvbdev: DVB: registering new adapter (Terratec H7) [ 307.046941][ T6797] usb 2-1: media controller created [ 307.047504][ T6797] usb read operation failed. (-71) [ 307.048568][ T6797] usb write operation failed. (-71) [ 307.095922][ T6797] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 307.136475][ T6797] usb 2-1: USB disconnect, device number 51 [ 307.440482][T10498] syzkaller0: entered promiscuous mode [ 307.440506][T10498] syzkaller0: entered allmulticast mode [ 307.467451][T10498] tipc: Enabled bearer , priority 0 [ 307.478925][T10496] tipc: Resetting bearer [ 307.510120][T10496] tipc: Disabling bearer [ 307.717253][T10503] loop2: detected capacity change from 0 to 7 [ 307.739955][T10503] loop2: [ 307.739985][T10503] loop2: partition table partially beyond EOD, truncated [ 307.744321][T10503] sctp: [Deprecated]: syz.2.1434 (pid 10503) Use of struct sctp_assoc_value in delayed_ack socket option. [ 307.744321][T10503] Use struct sctp_sack_info instead [ 307.996168][T10517] binder: 10516:10517 ioctl c0306201 0 returned -14 [ 308.000949][T10517] binder: 10516:10517 ioctl 4018620d 0 returned -22 [ 308.079124][T10523] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1441'. [ 308.511240][T10532] team_slave_0: entered promiscuous mode [ 309.304990][T10529] team_slave_0: left promiscuous mode [ 309.373060][T10535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.374404][T10535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.449004][T10541] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1445'. [ 309.562345][ T5708] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 309.712036][ T5708] usb 5-1: Using ep0 maxpacket: 8 [ 309.713089][ T5708] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 309.714482][ T5708] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 309.714529][ T5708] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 309.714550][ T5708] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 309.714572][ T5708] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 309.714593][ T5708] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 309.714630][ T5708] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.981059][T10543] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1446'. [ 310.035445][ T5708] usb 5-1: usb_control_msg returned -32 [ 310.035495][ T5708] usbtmc 5-1:16.0: can't read capabilities [ 310.951260][ T5755] IPVS: starting estimator thread 0... [ 311.032052][T10552] IPVS: using max 27 ests per chain, 64800 per kthread [ 311.100692][T10551] IPVS: set_ctl: invalid protocol: 7 224.0.0.1:21 [ 311.210252][T10554] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1449'. [ 311.211152][T10554] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1449'. [ 311.328643][T10549] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 311.952918][ T6797] usb 3-1: new low-speed USB device number 51 using dummy_hcd [ 312.058033][ T5708] usb 5-1: USB disconnect, device number 58 [ 312.114421][ T6797] usb 3-1: Invalid ep0 maxpacket: 64 [ 312.156600][ T31] kauditd_printk_skb: 57 callbacks suppressed [ 312.156619][ T31] audit: type=1326 audit(1790391225.310:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10567 comm="syz.4.1454" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fec60b9e159 code=0x0 [ 312.258542][ T6797] usb 3-1: new low-speed USB device number 52 using dummy_hcd [ 312.402479][ T6797] usb 3-1: Invalid ep0 maxpacket: 64 [ 312.404928][ T6797] usb usb3-port1: attempt power cycle [ 312.612071][ T5708] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 312.762166][ T5708] usb 1-1: Using ep0 maxpacket: 16 [ 312.762359][ T6797] usb 3-1: new low-speed USB device number 53 using dummy_hcd [ 312.763091][ T5708] usb 1-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 312.764458][ T5708] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 312.764479][ T5708] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 312.766953][ T5708] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.766976][ T5708] usb 1-1: Product: syz [ 312.766989][ T5708] usb 1-1: Manufacturer: syz [ 312.767004][ T5708] usb 1-1: SerialNumber: syz [ 312.840190][ T6797] usb 3-1: Invalid ep0 maxpacket: 64 [ 312.985475][ T6797] usb 3-1: new low-speed USB device number 54 using dummy_hcd [ 313.006260][ T6797] usb 3-1: Invalid ep0 maxpacket: 64 [ 313.006569][ T6797] usb usb3-port1: unable to enumerate USB device [ 313.073308][T10572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.081063][T10572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.115134][ T5708] usb 1-1: 0:1 : does not exist [ 313.115210][ T5708] usb 1-1: BAAD GENERIC IO: no channels? [ 313.168815][ T5708] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 313.187234][ T5708] usb 1-1: USB disconnect, device number 55 [ 313.285326][ T5931] udevd[5931]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 313.422914][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 314.056230][T10577] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1457'. [ 317.550179][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 318.375168][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 318.415027][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 318.430163][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 318.465662][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 318.485581][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 318.506800][ T0] NOHZ tick-stop error: local softirq work is pending, handler #88!!! [ 318.539324][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 318.576664][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 328.726638][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 328.741002][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 331.721965][ C0] sched: DL replenish lagged too much [ 379.779551][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 380.094052][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 398.201293][ T5618] Bluetooth: hci1: command 0x0406 tx timeout [ 440.388520][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.400748][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 461.003945][ T32] INFO: task syz.1.1457:10577 blocked for more than 142 seconds. [ 461.003973][ T32] Not tainted syzkaller #0 [ 461.003983][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 461.003992][ T32] task:syz.1.1457 state:D stack:26216 pid:10577 tgid:10575 ppid:5634 task_flags:0x400140 flags:0x00080002 [ 461.004053][ T32] Call Trace: [ 461.004064][ T32] [ 461.004078][ T32] __schedule+0x17db/0x58f0 [ 461.004136][ T32] ? __pfx___schedule+0x10/0x10 [ 461.004167][ T32] ? schedule+0x90/0x2b0 [ 461.004192][ T32] schedule+0x164/0x2b0 [ 461.004217][ T32] schedule_preempt_disabled+0x13/0x30 [ 461.004239][ T32] __mutex_lock+0x7c1/0x1550 [ 461.004270][ T32] ? __mutex_lock+0x5d4/0x1550 [ 461.004298][ T32] ? rtnl_newlink+0xc10/0x1c30 [ 461.004324][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 461.004359][ T32] ? ns_capable+0x89/0xe0 [ 461.004385][ T32] ? rtnl_nets_add+0x16c/0x300 [ 461.004409][ T32] ? refcount_inc+0x46/0x70 [ 461.004433][ T32] rtnl_newlink+0xc10/0x1c30 [ 461.004470][ T32] ? __pfx_rtnl_newlink+0x10/0x10 [ 461.004495][ T32] ? __lock_acquire+0x747/0x2de0 [ 461.004523][ T32] ? __lock_acquire+0x747/0x2de0 [ 461.004549][ T32] ? __lock_acquire+0x747/0x2de0 [ 461.004575][ T32] ? lock_acquire+0x115/0x350 [ 461.004608][ T32] ? lock_acquire+0x115/0x350 [ 461.004637][ T32] ? is_bpf_text_address+0x26/0x2b0 [ 461.004666][ T32] ? __lock_acquire+0x747/0x2de0 [ 461.004693][ T32] ? __kernel_text_address+0xd/0x30 [ 461.004713][ T32] ? unwind_get_return_address+0x4d/0x90 [ 461.004736][ T32] ? __pfx_stack_trace_consume_entry+0x10/0x10