last executing test programs: 22m50.944303518s ago: executing program 4 (id=1440): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x4, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000098082eba000000000700000085200fd8010000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r4, 0x1000) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000240)={0xf400, 0x1000000}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0xff, 0x829, 0x3, 0x81, 0xf, "7c6ced0300000088eea0ed80268d56ec22424b"}) r5 = dup(r1) write$UHID_INPUT(r5, &(0x7f0000002080)={0xf, {"a2e3ad21e08eeb661b5e060987f70e06d038e7ff7fc6e5539b0d650e8b089b3f363b68090890e0878f0e1ac6e7049b3b46959b429a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07440936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0da42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x104d}}, 0x1006) r6 = socket(0x355f7c96c900578a, 0x6, 0xfffffffe) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@getstats={0x1c, 0x5e, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x4048885}, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r6) sendmsg$ETHTOOL_MSG_PAUSE_SET(r6, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, r8, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x4) ioctl$VIDIOC_G_STD(r4, 0x80085617, &(0x7f0000000140)) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000040)={0x827, 0x6da, 0x6, 0x0, 0x0, [{{r0}, 0x6}, {{}, 0xfffffffffffffffe}, {{r0}, 0x6}, {{r0}, 0x1}, {{r0}, 0x8001}, {{r0}, 0x4}]}) 22m50.782256079s ago: executing program 4 (id=1441): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x2c, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x203, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="9484b0b4811cde8bb1ea00a40c8275ca7fd41a7c914986c347da760c15896dc72a2e6fbfb7db8d35e59fe3c4401c046b23cdaa0e4ed66d5c6af6ee6ad55e23c8bb1b838c6ea08bfd5fddc5d02abd", @ANYRES64=r0, @ANYRES16=r1, @ANYRESOCT=r0, @ANYRESHEX=r0, @ANYRESOCT=r0, @ANYRES8=r0], 0x48}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000000208", @ANYRES64=0x0, @ANYRES64=0x0], 0x80}}, 0x800) close(0x3) 22m50.78048203s ago: executing program 4 (id=1442): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000011000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007afdff0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 22m50.758669312s ago: executing program 4 (id=1443): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c0001800500010003000000060004000a0a000006"], 0xbc}}, 0x0) memfd_create(&(0x7f0000000080)=',)[\x81@\x00', 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x44000, 0x0) 22m49.85744062s ago: executing program 4 (id=1445): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r1 = dup(r0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_REMOTE_UDP_ENCAPS_PORT(r1, 0x84, 0x84, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xbe7c}}, 0x4e24}, &(0x7f0000000480)=0x90) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000040)={0x800, 0x0, 0x0, 0x2000, 0x6, 0x9, 0x68660199, 0xfffffffd, r3}, &(0x7f0000000080)=0x20) getsockopt$inet_sctp_SCTP_REMOTE_UDP_ENCAPS_PORT(r2, 0x84, 0x84, &(0x7f00000001c0)={r4, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3c}}}, 0x4e20}, &(0x7f0000000280)=0x90) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x1, 0x1, 0x80000001}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x34000) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x4}}, 0x34000) 22m49.658235359s ago: executing program 4 (id=1449): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002e00000036000000d2e057c89500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0xd2e057c8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x4f}, 0x48) 22m49.379877143s ago: executing program 32 (id=1449): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002e00000036000000d2e057c89500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0xd2e057c8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x4f}, 0x48) 20m4.596359927s ago: executing program 1 (id=2272): socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200ca}, [@IFLA_MASTER={0x8}, @IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x4008044) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, 0x0, 0x0, 0xfff0) 20m4.393438209s ago: executing program 1 (id=2274): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newtaction={0x64, 0x30, 0x400, 0x70bd2b, 0xfffffefd, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x1, 0x9, 0x7860, 0xfff}, 0x4c}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x404c081}, 0x80) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) unshare(0x8040480) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x4, r0, 0x20000}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c001680080001"], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) (async) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) fcntl$setpipe(r4, 0x407, 0xffffffff80000000) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)={0x24, r5, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20040040) 20m4.258790922s ago: executing program 1 (id=2276): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000033d000/0x18000)=nil, 0x0, 0x0, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fdf000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, 0x0}], 0x1, 0x1b, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x20, 0x5, 0xfd}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x7df, 0x40, 0x9, 0xff, 0xbc, 0x8001, 0x455, 0xb, 0x3, 0xffffffff, 0xfffffffffffffff, 0xc, 0x1, 0x20000000000ff, 0x2, 0x80000000], 0x8080000, 0x40005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20m1.257549803s ago: executing program 1 (id=2285): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000140)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000300)=@IORING_OP_FSETXATTR={0x29, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000004040)='./file0\x00', 0x0, 0x3}) io_uring_enter(r2, 0x2000, 0xfffffffa, 0x9, 0x0, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r7 = syz_io_uring_setup(0x26a3, &(0x7f0000000180)={0x0, 0x1d2a, 0x13500}, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000000)) io_uring_enter(r7, 0x448e, 0x96c9, 0x41, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r7, 0x21, &(0x7f0000000440), 0x1) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r8, r8, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 20m0.318139715s ago: executing program 1 (id=2291): unshare(0x22020600) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='uid_map\x00') preadv(r0, &(0x7f0000000540)=[{&(0x7f0000000080)=""/23, 0x1f}], 0x1, 0x2, 0x4) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000d40)={0x5, 0x0, [{0x50000, 0xb7, &(0x7f0000000a40)=""/183}, {0x1ff8, 0x0, &(0x7f0000000b00)}, {0x2ffc, 0x14, &(0x7f0000000b40)=""/20}, {0x2, 0x84, &(0x7f0000000b80)=""/132}, {0x54000, 0xfe, &(0x7f0000000c40)=""/254}]}) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x80800}, &(0x7f0000000080)=0xc) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x3a0, 0xffffffff, 0x0, 0x118, 0x1e0, 0xffffffff, 0xffffffff, 0x308, 0x308, 0x308, 0xffffffff, 0x4, &(0x7f00000000c0), {[{{@ip={@local, @empty, 0x0, 0xff000000, 'veth0_to_batadv\x00', 'dvmrp1\x00', {0xff}, {}, 0x73, 0x0, 0xd0}, 0x0, 0xb8, 0x118, 0x0, {}, [@common=@unspec=@ipvs={{0x48}, {@ipv6=@local, [0xffffffff, 0xff000000, 0xffffff00, 0xff], 0x4e24, 0x16, 0x2, 0x4e23, 0x2, 0x10}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x6, 0x3, 0x1, 0x1, 0x1, 0x5], 0x6}, {0x3, [0x2, 0x2, 0x2, 0x0, 0x3], 0x1, 0x4}}}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mark={{0x30}, {0x4, 0x9, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@icmp={{0x28}, {0xb, "73ae", 0x5}}, @common=@ah={{0x30}, {[0x19aa, 0xd340], 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, 0xad9, 0xd, [0x13, 0x3c, 0xd, 0x40, 0x40, 0x3b, 0x2c, 0x3a, 0xc, 0x20, 0x2b, 0x2c, 0x1d, 0x15, 0x19, 0x36], 0x2, 0x20, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0x40405514, &(0x7f0000000540)={{0x200, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffe00, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x81, 0x0, 0x3ffff, 0x0, 0x4000000000000000, 0xfffffffffffffffe, 0x8000000, 0x26, 0x2, 0x3, 0x54, 0x0, 0x0, 0x10000, 0x0, 0x3, 0x801, 0x0, 0x5ef76024, 0x732, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8, 0x7, 0xfffffffffffffffe, 0x0, 0x0, 0x10000cb, 0x81, 0x0, 0x9, 0x6, 0x2, 0x6b, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x400, 0xfffffffffffffffc, 0x0, 0x80481, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0xfffffffd, 0xff, 0x0, 0x200, 0x0, 0xa1f, 0x0, 0x0, 0x0, 0x800000000000000, 0x20000, 0x7, 0xffffeffffffffffc, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x7fffffff, 0xfffffffffffffffb, 0x0, 0x0, 0x2, 0x1, 0x3, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0xffffffff, 0x400]}) 19m59.535724448s ago: executing program 1 (id=2293): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x40002002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) syz_emit_ethernet(0x46, &(0x7f0000000100)=ANY=[], 0x0) (async) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) (async) shmdt(0x0) r0 = socket(0x1e, 0x4, 0x0) (async) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) (async) r4 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmdt(r4) (async) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) (async) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) syz_emit_ethernet(0xbd, &(0x7f0000000280)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08004add00af006500000c0190780a010102e0000001445408730000000000000010ac1e0101000000060a010101ffffff26ac1414aa00000007ac1e0001000000080a010100000000800000000000000007e0000002000003abac1e010100000e4fe00000010000000203009078000000014f10fe01006800070ab10294040100441495937f000001000000000a01010100000006830f45ac1e0001ac"], 0x0) sendmmsg(r2, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) (async) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc, 0x2}, 0x10) (async) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r5 = dup3(r1, r0, 0x0) recvmmsg(r5, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}, 0x1}], 0x1, 0x40000001, 0x0) read$FUSE(r5, 0x0, 0x0) (async) unshare(0x2030b00) (async) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000380), 0x0, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8010) (async) request_key(&(0x7f0000000740)='dns_resolver\x00', 0x0, 0x0, 0xffffffffffffffff) (async) msgrcv(0x0, &(0x7f0000000d40)={0x0, ""/4096}, 0x1008, 0x0, 0x1000) msgsnd(0x0, &(0x7f00000000c0)={0x3}, 0x8, 0x800) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 19m59.078832399s ago: executing program 33 (id=2293): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x40002002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) syz_emit_ethernet(0x46, &(0x7f0000000100)=ANY=[], 0x0) (async) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) (async) shmdt(0x0) r0 = socket(0x1e, 0x4, 0x0) (async) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) (async) r4 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmdt(r4) (async) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) (async) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) syz_emit_ethernet(0xbd, &(0x7f0000000280)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08004add00af006500000c0190780a010102e0000001445408730000000000000010ac1e0101000000060a010101ffffff26ac1414aa00000007ac1e0001000000080a010100000000800000000000000007e0000002000003abac1e010100000e4fe00000010000000203009078000000014f10fe01006800070ab10294040100441495937f000001000000000a01010100000006830f45ac1e0001ac"], 0x0) sendmmsg(r2, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) (async) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc, 0x2}, 0x10) (async) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r5 = dup3(r1, r0, 0x0) recvmmsg(r5, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}, 0x1}], 0x1, 0x40000001, 0x0) read$FUSE(r5, 0x0, 0x0) (async) unshare(0x2030b00) (async) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000380), 0x0, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8010) (async) request_key(&(0x7f0000000740)='dns_resolver\x00', 0x0, 0x0, 0xffffffffffffffff) (async) msgrcv(0x0, &(0x7f0000000d40)={0x0, ""/4096}, 0x1008, 0x0, 0x1000) msgsnd(0x0, &(0x7f00000000c0)={0x3}, 0x8, 0x800) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 4m30.18994301s ago: executing program 0 (id=7351): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="180000007a0001060000000000000000070000004f"], 0x18}], 0x1}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000024c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f00000084c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x3c, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0xc880) openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x0, [{0x0, 0x4d88, 0x6, &(0x7f0000000640)="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"}, {0x0, 0x0, 0x1ff, 0x0}, {0x3, 0x0, 0x100d5b6, 0x0}, {0x2, 0x0, 0xfffffff8, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x7, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0x1000, 0x0}, {0x3, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40007, 0x0}]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x18, 0x1407, 0x0, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r5}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x4018894) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r6, 0x4068aea3, &(0x7f0000000300)={0xdf, 0x0, 0x8a000}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000040)={0x1ff, 0x1, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil}) ioctl$KVM_RUN(r7, 0xae80, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x200, @loopback={0xfec0ffffffffffff}, 0x80000000}, @in={0x2, 0x4e24, @rand_addr=0x64010102}, @in6={0xa, 0x4e23, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40}], 0x48) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(r1, 0x407, 0x7f) ioctl$sock_SIOCETHTOOL(r8, 0x89f1, &(0x7f0000010640)={'ip6_vti0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x2e, 0x5, 0x6, 0x0, 0x7, 0x0, 0x0, 0xfc, 0x0, 0xfc, 0x0, 0xfffffffc, 0x0, 0xff, 0x0, 0x45}}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r10, &(0x7f00008aa000/0x400000)=nil) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f0000000040)={[0x1, 0x0, 0x3, 0x7, 0x80000001000, 0x79, 0x8000000001002, 0x9, 0x9, 0x6, 0x1, 0x4000002373, 0x80000000008bd9, 0xfffffffffffffefd, 0x7f, 0x8000000000020], 0x26000, 0x3d6243}) ioctl$KVM_RUN(r11, 0xae80, 0x0) 4m29.076327848s ago: executing program 0 (id=7355): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f00000012c0)={{r1}, "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"}) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r4, 0x560e, &(0x7f0000000000)) io_submit(0x0, 0x2, &(0x7f0000000300)=[0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_enter(0xffffffffffffffff, 0x806c23, 0x4e8b, 0x30, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000002030101000000000033000002000000080001000100000209000200000000000200000008000440000000020800054000000002"], 0x38}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00000006000000000001010000000000000000", @ANYRES32=0x0, @ANYBLOB="09000000000000000a000100aaaaaaaaaabb0000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r7 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r7, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x4d2, @remote}, 0x10) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x24000040) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140002"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) 4m28.598238277s ago: executing program 0 (id=7360): socket$netlink(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00009ed000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f000039a000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = getpgrp(0xffffffffffffffff) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) r4 = accept4(r1, 0x0, 0x0, 0x0) sendto(r4, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) 4m28.081360337s ago: executing program 0 (id=7362): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = syz_io_uring_setup(0x111, &(0x7f0000000500)={0x0, 0xa00d, 0x100, 0x1, 0xc1}, &(0x7f0000000580), &(0x7f0000000080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r2, 0x11, &(0x7f0000000780)='\x00', 0x1) r3 = syz_ublk_setup_io_uring(0x1c, &(0x7f0000000040)={0x0, 0x6e5b, 0x400, 0x2, 0x5a}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf4a, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4043, 0x8a, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, 0x1}}}, &(0x7f0000000480)) socket$inet_smc(0x2b, 0x1, 0x0) (async) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r7, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) connect$inet(r7, &(0x7f0000000100)={0x2, 0x4620, @empty}, 0x10) setsockopt$EBT_SO_SET_COUNTERS(r7, 0x0, 0x81, 0x0, 0x0) (async) setsockopt$EBT_SO_SET_COUNTERS(r7, 0x0, 0x81, 0x0, 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) (async) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) (async) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x232) 4m26.988120782s ago: executing program 0 (id=7367): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/blkio.throttle.write_iops_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000480)='252:0 ', 0x6) 4m26.663358386s ago: executing program 0 (id=7370): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f00000012c0)={{r1}, "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"}) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r4, 0x560e, &(0x7f0000000000)) io_submit(0x0, 0x2, &(0x7f0000000300)=[0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_enter(0xffffffffffffffff, 0x806c23, 0x4e8b, 0x30, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000002030101000000000033000002000000080001000100000209000200000000000200000008000440000000020800054000000002"], 0x38}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00000006000000000001010000000000000000", @ANYRES32=0x0, @ANYBLOB="09000000000000000a000100aaaaaaaaaabb0000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r7 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r7, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x4d2, @remote}, 0x10) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x24000040) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140002"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) 4m25.918091323s ago: executing program 34 (id=7370): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f00000012c0)={{r1}, "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"}) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r4, 0x560e, &(0x7f0000000000)) io_submit(0x0, 0x2, &(0x7f0000000300)=[0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_enter(0xffffffffffffffff, 0x806c23, 0x4e8b, 0x30, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000002030101000000000033000002000000080001000100000209000200000000000200000008000440000000020800054000000002"], 0x38}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00000006000000000001010000000000000000", @ANYRES32=0x0, @ANYBLOB="09000000000000000a000100aaaaaaaaaabb0000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r7 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r7, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x4d2, @remote}, 0x10) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x24000040) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140002"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) 2m9.629411943s ago: executing program 5 (id=8085): r0 = socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) madvise(&(0x7f00002a8000/0x4000)=nil, 0x4000, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES64], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0x0) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14, 0x100800) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001240)=@newtfilter={0x38, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {0xfff1, 0xffff}, {0x6, 0x3}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x2, 0xe}}]}}]}, 0x38}}, 0x0) bind$packet(r1, &(0x7f0000000080)={0x11, 0x1a, r3, 0x1, 0x5, 0x6, @local}, 0x14) 2m9.45668746s ago: executing program 5 (id=8086): r0 = socket$unix(0x1, 0x2, 0x0) landlock_create_ruleset(&(0x7f0000000140)={0x10895, 0x3, 0x2}, 0x18, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001500)={'wg0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001540)={0xffffffffffffffff, r1, 0x25, 0xa, @void}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000a80)={0x0, 0xabba, 0x400, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f00000006c0)=0x0, &(0x7f0000000580)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000080)=@any_dev={0x3, 0xdf9, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1c}}}, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000001600)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x80000001, @empty, 0x3}, {0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, '\x00', 0x18}, 0x371920fb}, 0xffffffffffffffff, 0x3}}, 0x48) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r9, 0x1, 0x2a, &(0x7f0000000100)=0xfffe, 0x4) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000240)="3d4077e50823a7746c0ee30dd0afdfb5ff2a258d495dc9d2c2a25bc7dc0b11bde0d15d0770675db17901", 0x2a}, {&(0x7f0000000080)="b28231adddba8ed6f23bf98ca8caa015ab797f57", 0x14}], 0x2, 0x0) recvmmsg(r9, &(0x7f0000001440)=[{{&(0x7f0000000280)=@un=@abs, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)=""/1}, {&(0x7f0000000300)=""/102}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/111}]}}], 0x700, 0x40002002, 0x0) write$binfmt_misc(r8, &(0x7f0000000040), 0xffc1) setsockopt$sock_int(r9, 0x1, 0x10, &(0x7f0000000180)=0x55b7, 0x4) splice(0xffffffffffffffff, 0x0, r8, 0x0, 0x4ffe0, 0x0) 2m8.406232579s ago: executing program 5 (id=8091): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x49}], 0x1, 0x0, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={0x0}, &(0x7f0000000080)=0xc) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000004c0)={'\x00', 0xa9d8, 0x80000001, 0x100001c, 0x7fffffffffffffff, 0x5, r2}) wait4(r1, 0x0, 0x80000000, 0x0) ioctl$NILFS_IOCTL_SET_SUINFO(r0, 0x40186e8d, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x40) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r3, 0xc01064c4, &(0x7f00000001c0)={0x0}) ptrace(0x10, r1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) getpriority(0x1, 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) wait4(r1, 0x0, 0x2, 0x0) r4 = syz_pidfd_open(r1, 0x0) waitid$P_PIDFD(0x3, r4, 0x0, 0x2, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000140)='cdg', 0x3) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) r6 = socket(0x10, 0x803, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000840)={'syztnl1\x00', &(0x7f00000007c0)={'syztnl1\x00', r8, 0x4, 0x5, 0x4e, 0x2, 0x20, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x7800, 0x7fff, 0x80000001}}) sendmsg$nl_route_sched(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=@newtfilter={0x2c, 0x2c, 0x80e, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xd}, {}, {0x7, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040084) sendmmsg$inet(r5, &(0x7f0000000ac0)=[{{&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x6}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000540)="b6051b05b1c4f1866a846edfc1fc84d26853294e58a83357728ffe36f57626096cb23f7985ef89ba44c10ef1d6724be758569140b0be26fc5a7d41acb00d2bbe8786325e7361b3e878590714cec728dd5799f004f625e20c6682ad2b834d8878860bff8383ee4d201320102d30ec1dbc0bafad3da6c73a64e3da220e5d8920c29c639089e29b3d2e7b57578a8170b7b913f69ead0a73221d38e217546b19cec085f9452cd6db16b8f48951ec146ed2c823b89776a4456cb60a5f790cffddddc27eb8de3b24762b185eb95a5d43", 0xcd}, {&(0x7f00000006c0)="ac53b38a8a1fd24e11514ab6c3763e124ec1c2a01012fd30deb60102857cd874e861911aeae7b408ae090c635b55ebf561e73167b55f6f70df563e02f67d6e4d9d73df069da111ae8317b2a767edd3469b2261df64fc16f00c6dc7846791c8756ebbaaf868b601a0b61d45d5381181a243ef06cf773a122fa5527b982e530022b7f95cbfc0489226e76d5045b723fc354dde98208880f8b4326fda3a1b74a5185209000000ee345302f9211eff17b1f5dc46deb2e47832e15ea24a15872f7a637fa40f500726a78400511b2162881ca85c2ca159e46df43d9a28f11d", 0xdc}, {&(0x7f0000000200)="6c4cc85cd82e1273062af2369b4e318737b21fb3a20d0cce4b9fc4695759067865089ef39f97dc8941d8598715040011f70e0865746f2f63e2adc213f7676eaa90250263f6697852dc9338b5ed75394484df706742055c80aac7173232895371ff554bb01bee682a9f6bec0c18beea7b9ca46808cbc758851607627ddf68e6fb9595e00febb7fa8a667d445666d5a27e75a2538fd57d93e24044066ee9f00803d5fbe24804467d0d4944b195a4092cd0f971e66f728a", 0xb6}, {&(0x7f0000000940)="a9e82b8c9d7f89b91ff89da58fb869cfc714be3d20b628d3fe0d84b2cefcaa564d12413bf66589762cf1c9bcd76b4330a5d0b1427e12ca92560d9fdda9791511ebf7914aff0a4b6d868e710b758d5fa04ffa23b3ed01e9b10383b2bb0f1fdd0865e9e88b6573414d30987fc67a5bc04854746ad8861e785c4cfdc67c3287273a1f67876ced92e7605c59694870b125c1d3c7e179c914c78b28d63ad50a05982fe409866fe124edacb66fe7914d9cc4c4177e10362e2f8a6a2f3ad17f304766e525ca5c4702673d76e60c8772128b09412332106715f0b73386d59219808858c54a4f59ecc627f057f392eb9aa697", 0xee}], 0x4, &(0x7f0000000640)}}], 0x2, 0x24008040) setsockopt$inet_tcp_TLS_TX(r5, 0x6, 0x1, 0x0, 0x0) 2m7.47964004s ago: executing program 5 (id=8100): r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000080)={0x270, 0x9, 0x3, 0x28, 0x8, 0x4}, 0x30, 0x2) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ioctl$UI_SET_SWBIT(r4, 0x4004556d, 0x8) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x81901) read$FUSE(r4, &(0x7f0000000680)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f00000026c0)={0x10, 0x0, r6}, 0x10) move_mount(r4, &(0x7f0000000140)='.\x00', r5, &(0x7f0000000180)='./file0\x00', 0x0) r7 = syz_open_dev$evdev(&(0x7f00000001c0), 0x2, 0x8000) ioctl$EVIOCSMASK(r7, 0x40104593, &(0x7f0000000080)={0x0, 0x0, 0x0}) ioctl$EVIOCSKEYCODE_V2(r7, 0x80104592, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x6a03, "0f9d0000002000000000b82100"}) landlock_restrict_self(r1, 0x0) pipe2$9p(&(0x7f00000000c0), 0x80) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r7, 0x4002f516, &(0x7f0000000100)={0x2d, 0xda}) listen(r0, 0x7f) 2m6.597877696s ago: executing program 5 (id=8104): r0 = timerfd_create(0x7, 0x80000) r1 = dup(r0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000000080)={0x5, {"5ed36be38b8a98e7e186df923198e177", "d3e61ebc9cbf9a36b3f8023cce5041df", "c818c54472e54b994cb70d7a74d01e2c"}, 0x9, 0x1}) (async) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000005c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)=@in6={0xa, 0x4e23, 0x40, @mcast2, 0xfff}, 0x80, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x1b8}, 0x4000c010) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd0900008400000005010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000f6"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r4}, 0x38) (async) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000380)={0x0, &(0x7f00000004c0)=""/106, &(0x7f0000000380), &(0x7f00000004c0), 0x4, r4}, 0x38) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r1) (async) sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f0000000640)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000040)={0x5, 0x0, 0xd000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000000)={0x1fe, 0x1, 0x6000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xb, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4001) (async) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r11 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) setsockopt$sock_int(r9, 0x1, 0x6, &(0x7f0000000340)=0x1000, 0x4) syz_usb_control_io$cdc_ecm(r11, &(0x7f00000000c0)={0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341e9"], 0x0}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="2400000040000700000000017c00000400fc800c00038008000600ee82d27c17d9f7a68a0ee7642eff68002335982feb0fd83ad88d04adbf1531df4c80e5c80c29c77e9d80cfcfc0723324da40b036d5faa2c656fdac8aefdf9e03cdfeba1f343b429c1892cebc9439f1cf98975793ba75bafb75199cb957b9e16cfa4fd76ee95f337862a2069ac9915e9f1fc7010c43405585083bd8472b2bf408", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 2m6.28547626s ago: executing program 5 (id=8106): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = syz_io_uring_setup(0xefe, &(0x7f0000000400)={0x0, 0x0, 0x2414, 0x1, 0x80000ff}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, &(0x7f0000000000)) write$FUSE_NOTIFY_RESEND(r0, &(0x7f0000000200)={0x14}, 0x14) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) syz_io_uring_setup(0xefe, &(0x7f0000000400)={0x0, 0x0, 0x2414, 0x1, 0x80000ff}, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000080)) (async) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) (async) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) (async) ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, &(0x7f0000000000)) (async) write$FUSE_NOTIFY_RESEND(r0, &(0x7f0000000200)={0x14}, 0x14) (async) 2m5.91810453s ago: executing program 35 (id=8106): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = syz_io_uring_setup(0xefe, &(0x7f0000000400)={0x0, 0x0, 0x2414, 0x1, 0x80000ff}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, &(0x7f0000000000)) write$FUSE_NOTIFY_RESEND(r0, &(0x7f0000000200)={0x14}, 0x14) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) syz_io_uring_setup(0xefe, &(0x7f0000000400)={0x0, 0x0, 0x2414, 0x1, 0x80000ff}, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000080)) (async) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) (async) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) (async) ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, &(0x7f0000000000)) (async) write$FUSE_NOTIFY_RESEND(r0, &(0x7f0000000200)={0x14}, 0x14) (async) 7.19384778s ago: executing program 7 (id=8583): unshare(0x22020600) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r0, 0x0, 0x0) 7.033547077s ago: executing program 7 (id=8584): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x24, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x12}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_SREG={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 6.835629717s ago: executing program 7 (id=8586): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) pipe2(&(0x7f0000000140)={0x0, 0x0}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e22, @loopback}, 0x10) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYRES64=r3, @ANYRES64, @ANYRESOCT, @ANYRES64=r3, @ANYRES32], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1f, {[@global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9401"}, @global=@item_4={0x3, 0x1, 0x0, '\a\x00'}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000003c0)={0x24, &(0x7f0000000000)={0x20, 0x30, 0x1e, {0x1e, 0x31, "ff3876dbe24a47c53cb32690edfafe5d20915e8f8733314210f90278"}}, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x61c43bd071c67828}}, &(0x7f0000000340)={0x0, 0x22, 0x15, {[@local=@item_4={0x3, 0x2, 0x417ddcd338e5bfa8, "72b68515"}, @global=@item_4={0x3, 0x1, 0x9, "d132af43"}, @main=@item_012={0x1, 0x0, 0xc, "8d"}, @global=@item_012={0x1, 0x1, 0x2, "fc"}, @local=@item_012={0x0, 0x2, 0x3}, @local=@item_4={0x3, 0x2, 0x4, "1fa38d21"}, @local=@item_012={0x0, 0x2, 0x5}]}}, &(0x7f0000000380)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x2, 0x1, {0x22, 0x15c}}}}, &(0x7f0000000680)={0x2c, &(0x7f0000000400)={0x0, 0x19, 0x81, "5e19c338fa789b7c96aa62fcbd85437f62d54d47e30c94bce63cc4efde44a6ae3f4dd725138685d84ee1b329e5ea55ca76bd751dd2bc8fee4585123e674df5a5424cf2aae853cc8440960d87b7777bb0b78758db3cb40a83a4f8d9542bb88628f825e3b70f8ab677239ea5c0f8d7e8ce8364d37b9910921c12fc4e054e984eeb14"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000580)={0x20, 0x1, 0x7e, "8d6580a91559a556316fcfa7be7ba59d69d1248f1feadeecf957b05a42abcd548a5b12e525c196e1e659b5d8c93768391bf3d357b28eeca57dcd55208bd7b1c6061ac6468f022e028fbf3edf74fdc6d9749b4f68a416619ba1c1e8e587d0c2c5b815275254857a94f065adf195919531f260d1d9104b57834331de5d2b71"}, &(0x7f0000000640)={0x20, 0x3, 0x1, 0xfb}}) r5 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r5, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) sendmsg(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) recvfrom$inet(r2, &(0x7f0000000180)=""/144, 0x90, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000500)="000000020104", 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0xa, 0x7accdc06) read(r0, &(0x7f0000000310), 0x6) r6 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/blkio.throttle.write_iops_device\x00', 0x1, 0x0) write(r6, &(0x7f0000000480)='252:0 1', 0x7) sendto$inet(r2, &(0x7f0000000300), 0x22, 0x0, &(0x7f00000000c0)={0x2, 0x1234, @loopback}, 0x10) recvfrom$rxrpc(r5, 0x0, 0xfff5, 0x10142, 0x0, 0x0) 5.46989476s ago: executing program 3 (id=8598): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x72f, 0x100, 0x8, 0x3b5}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000004c0)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xbbd, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x9}}}, &(0x7f0000000300)=0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) unshare(0x22020600) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x389a00, 0x0) signalfd4(r6, &(0x7f00000001c0)={[0x8]}, 0x8, 0x800) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) syz_ublk_setup_queues(r7, r5, &(0x7f0000000340)={0x0, 0x0, 0x10, 0x1, 0x2e3}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x20, 0x1000000, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdd52, 0x40000, 0x2, 0x2b1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f6d, 0x40, 0x5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb4ac, 0x4020, 0x8, 0x9d7c}}], 0x1, &(0x7f00000014c0)={0x2e, 0x12, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) r8 = syz_open_dev$sndpcmc(&(0x7f0000000d00), 0x0, 0x0) r9 = syz_usb_connect(0x0, 0x2e, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x644, 0x8047, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1c, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x100, 0xa}}]}}]}}]}}, 0x0) r10 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="500100001a0013070000000000000000fe80000000000000000000ff03000000000000002a6f000000000000000000aa000000004e2200000000202000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001000004d43300000064010100000000000000000000000000000000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000800000000040000005fd400000100000001020000000000000a00000000000000000000005d001400636d61632861657329000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008800000000000000a356f3222e417b7e7f2f277cd86927b206000000"], 0x150}, 0x1, 0x0, 0x0, 0x4000}, 0x4008804) syz_usb_control_io$hid(r9, 0x0, 0x0) ioctl(r10, 0xc4c85513, &(0x7f0000000200)) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @broadcast}, @redirect={0x8, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @remote}}}}}}, 0x0) mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x5ffffffff000, 0x1, 0x13, r8, 0x81000000) 5.126305185s ago: executing program 2 (id=8599): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = syz_usb_connect(0x3, 0x50, &(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_ep_read(r1, 0x4, 0x0, 0x0) 4.543781636s ago: executing program 3 (id=8600): bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_usb_connect(0x5, 0x24, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0xa6, 0x45, 0x49, 0x10, 0x57c, 0x2200, 0x6508, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0xa, 0x20, 0x9, "", [{{0x9, 0x4, 0xc8, 0xfd, 0x0, 0xf4, 0xe6, 0x88, 0x8}}]}}]}}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) capset(&(0x7f0000000040)={0x20080522}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000001000)={@rand_addr, @dev}, &(0x7f0000000040)=0xc) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='limits\x00') ioctl$SNDCTL_TMR_SOURCE(r1, 0xc0045406) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x10, r1}, 0x18) 3.752520745s ago: executing program 7 (id=8603): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000000858041950000000000001090224000100008808090400fe010300030009218100030122280009058103"], 0x0) r1 = getpgrp(0x0) r2 = syz_pidfd_open(r1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000580)={'filter\x00', 0x7, 0x4, 0x418, 0x110, 0x0, 0x220, 0x330, 0x330, 0x330, 0x4, &(0x7f0000000040), {[{{@arp={@dev={0xac, 0x14, 0x14, 0x1c}, @loopback, 0xffffff00, 0xffffff00, 0xd, 0x1, {@empty, {[0xff, 0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x7387, 0x2c, 0x3, 0x91d5, 0x0, 'xfrm0\x00', 'geneve1\x00', {}, {0xff}, 0x0, 0x100}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @empty, @rand_addr=0x64010100, @broadcast, 0xf, 0xffffffff}}}, {{@arp={@private=0xa010100, @empty, 0xff000000, 0x0, 0x9, 0x9, {@empty, {[0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x7, 0x8001, 0x3, 0x7ff, 0x0, 0x1560, 'ip6gre0\x00', 'erspan0\x00', {}, {}, 0x0, 0x40}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @empty, @broadcast, 0x1}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, 0xffffff00, 0xffffffff, 0x10, 0x8, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}}, 0x3, 0x0, 0x0, 0x200, 0xfff7, 0x3, 'vcan0\x00', 'ip6gretap0\x00', {}, {0xff}, 0x0, 0x12}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x8, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r4, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x3ef, 0x0) flistxattr(r2, 0x0, 0x28) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000540)=ANY=[@ANYBLOB="0f0828"], 0x0, 0x0, 0x0, 0x0}, 0x0) 3.367653774s ago: executing program 3 (id=8604): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000c, 0x32, 0xffffffffffffffff, 0x41e90000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010000000000000008000000180500002020702500000000002020207b1af8ff00001800bfa10000000000000701000000feffffb702000008000000b703000001000000850000000c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000}, 0x94) 3.261715814s ago: executing program 3 (id=8605): unshare(0x22020600) (async, rerun: 32) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) (async, rerun: 32) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async, rerun: 32) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0xa, 0x0, 0x3d, 0x10000, 'syz1\x00', 0x5}) (async, rerun: 32) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00', @ANYBLOB="010000000000000000001400000008000200fc00000018", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) r5 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf", 0x6, 0xfffffffffffffffe) (async) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) (async, rerun: 32) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) (rerun: 32) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) (async) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r8, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r10, 0xae80, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) (async) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r11, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) (async, rerun: 64) getsockopt$SO_TIMESTAMP(r11, 0x1, 0x1d, 0x0, &(0x7f0000000080)=0x40) (async, rerun: 64) r12 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x8fb5, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r13, r14, r15, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4110}, 0x1}) io_uring_enter(r12, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) write$FUSE_ATTR(r1, &(0x7f0000005080)={0x78, 0x0, r2, {0x7, 0x7, 0x0, {0x5, 0x5, 0x3, 0x7, 0x1, 0x2, 0x10000, 0xffffff92, 0x6, 0x1000, 0x7, r3, r4, 0xffff, 0x1}}}, 0x78) (async) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, &(0x7f0000000240)={"cfc2c188da308f0c3c729f58761ca5a16382c9632b59127f39dc2562e54f", 0x4, 0x0, 0x401, 0xd, 0x3ff, 0x8, 0x101, 0x2, [0x3, 0x3, 0xbd5, 0x2, 0x9, 0x0, 0x7, 0xffff, 0x0, 0x1, 0x0, 0x3, 0x8001, 0xeae9, 0x8, 0x6, 0x6, 0x4, 0x2]}) 3.093280072s ago: executing program 3 (id=8606): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x20, 0x26, 0x301, 0x270bd1a, 0x25dfdbfa, {0x1}, [@nested={0xc, 0xae}]}, 0x67}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r9, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) sendto$packet(r10, &(0x7f0000000480)="c1858aec1d0a21756f66b4805f3a", 0x3a, 0x40800, &(0x7f0000000240)={0x11, 0x2, r9, 0x1, 0x5, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002980)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r13, {0x10}, {0x0, 0xfff1}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x3, 0x6, 0x5, 0xa8e, 0x5, 0x407c, 0x80, 0x1009, 0x3, 0x8000, 0x8, 0x3, 0x8, 0x5, 0xbc0, 0x7, 0x9c09, 0xffff, 0x3, 0x0, 0xc, 0xcfa, 0x5, 0xa, 0x6407, 0x80, 0x849, 0x8b, 0xffffffff, 0x4, 0x2, 0xa4c, 0x0, 0x9, 0x5, 0x200, 0x1ff, 0x4d76, 0x4, 0xb32, 0x3ff, 0x8, 0x0, 0x71, 0x5, 0x1, 0x8, 0x0, 0x7, 0xeb, 0x6, 0x87, 0x8, 0x0, 0x9, 0x3ff, 0xb, 0xfffffff8, 0xb6d, 0x81, 0x1, 0x8, 0x8, 0x0, 0x9, 0x81, 0x8, 0x26b, 0x8, 0x85b4, 0x9, 0x7, 0xfffffffe, 0x6, 0x8, 0xffffffc0, 0x3, 0x3, 0x4, 0x4, 0x80000001, 0xc8ee, 0xbacb161, 0x3ff, 0xffff12d0, 0x2, 0xffff8000, 0x10, 0x1ff, 0x2, 0x5, 0x2, 0x8, 0x7, 0x4, 0x2, 0x0, 0x1, 0x5, 0xfffffffd, 0x6, 0x0, 0x9, 0x8, 0x5, 0x6, 0xfffffffe, 0x2, 0x834f, 0x9, 0x1ff, 0x2, 0x62cd, 0xf98, 0xd8, 0x6, 0x6, 0x9, 0x3, 0xfffff000, 0x40000000, 0x7, 0x81, 0x0, 0xae4, 0x10, 0x100, 0x40, 0xc, 0x400, 0x9151, 0x6, 0x7, 0x2, 0xb, 0x7, 0x4, 0x4, 0x64, 0x200, 0x400, 0x2, 0x6, 0x7, 0x971, 0x0, 0x6, 0x3, 0xa46a, 0x8, 0x23, 0x2, 0x8, 0x7fff, 0x8, 0x1, 0x557, 0x2, 0x3ff, 0x3ff, 0x2, 0x0, 0x1, 0x5c, 0x6, 0x1ff, 0x9, 0xb, 0x6, 0x0, 0x7ff, 0x868f, 0x9, 0xffffffff, 0x0, 0xfffffffe, 0x100, 0x40, 0x6c8, 0x8, 0x4, 0x4, 0x4, 0x81, 0xdf, 0x8, 0x4, 0x6, 0x4, 0xc59e, 0x9, 0x891a, 0x4, 0x1, 0x67a, 0x5, 0xaa, 0x2, 0x8000, 0x4, 0x5, 0x2, 0xfff, 0x9, 0x4533afbb, 0xd, 0x0, 0x593c, 0x1, 0xd99b, 0x55aa77c9, 0x56a, 0x9, 0x8, 0x200, 0x10001, 0x5, 0x6, 0x1000, 0xa, 0x5, 0x6, 0x4, 0x1ff, 0x40, 0x2, 0x5dff, 0xfffffffe, 0x8, 0x1, 0x0, 0x4, 0x1ff, 0x101, 0xffff, 0x12, 0x5, 0xfffffffc, 0x7e94, 0x6, 0xca55, 0x2, 0x5, 0x401, 0x8, 0x4, 0x7fffffff, 0x3, 0x1, 0x7, 0x4, 0x2, 0x8, 0x16, 0x1]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0xb3538085985bb3d6}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 2.913662024s ago: executing program 3 (id=8607): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000900)=@newtaction={0xf34, 0x30, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [{0xf20, 0x1, [@m_ife={0x9c, 0x7, 0x0, 0x0, {{0x8}, {0x5c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x2, 0x4, 0xffffffffffffffff, 0xffff, 0xffffffff}, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xc, 0x0, 0x4, 0x9, 0x6}}}, @TCA_IFE_TYPE={0x6, 0x5, 0x6}, @TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}, {0x19, 0x6, "76ff287c67e88c71302e02a9353c6e266c4f095199"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ct={0x11c, 0x14, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @multicast2}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}, @TCA_CT_MARK={0x8}, @TCA_CT_LABELS={0x14, 0x7, "d0a23d0ccf64c0503dee9f0d261d9f61"}]}, {0xc5, 0x6, "24698220994c7f81b89dfb4858270affb20c2f303aa77206e2ada0f4d0abc74eef3014f936afff0cd0b7f4b243a2c9d9fa8ca0da005c12821147665fd43a34645d072d99fcdadf4278889bd2ecb3ac97aa3ffaa1ac97d5f1933db9e52aeaca2a2f0bab5311864c83606868b49eea38d631a97bcc8963bce64cbc19a70f4b76cbd5264d4c006303c20154f434d96f0427d4e87a7bf379bc053512d873c2985adf5c8f88faf0ac3435c661570d7b1514862407000245f0a335f546dc90269a91d43f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_police={0xd64, 0x10, 0x0, 0x0, {{0xb}, {0xc4c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x39fc, 0x4, 0x889, 0x5, 0xf, {0x1, 0x1, 0x8, 0x1, 0x3, 0x800}, {0x4, 0x0, 0x1, 0x5, 0xff80}, 0x1, 0xfffff28f, 0x2d1f}}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x7, 0xfffffc01, 0x1, 0x7, 0x2, 0x5, 0x7ffb, 0x8, 0x903, 0xff, 0x6, 0x7, 0x9, 0xf912, 0xd, 0x8, 0x2, 0x4, 0x80000001, 0x5, 0xc3bd, 0x0, 0x80000001, 0xffffff01, 0xffffe7ff, 0x6, 0x2, 0x3ff, 0x7394, 0x40, 0xe139, 0x3, 0x4, 0x6, 0x3, 0x1, 0x3, 0x80, 0xd, 0x9, 0x3, 0x9, 0x8, 0x80000000, 0x7fff, 0x1, 0x40, 0xdab, 0x2, 0x4, 0x401, 0x3, 0x0, 0x400, 0x1, 0x2, 0x8, 0x2, 0x9, 0x884, 0x8, 0x48, 0x5, 0x8000, 0x59d, 0x8, 0x9, 0x8, 0x3, 0x3, 0x80, 0x7fffffff, 0x40, 0x3ff, 0x3, 0x9, 0xda1c, 0xfff, 0xffffffff, 0x8001, 0x2, 0x2, 0x3ff, 0x0, 0x56b, 0xe2, 0x2f10, 0x5, 0xd, 0x70, 0x4, 0xee, 0x2, 0x5, 0x4, 0x9, 0x5, 0x5, 0x80000000, 0xfffff801, 0x9, 0x8, 0x60, 0x1c09, 0x9, 0xbd, 0x7, 0x8, 0x8, 0xff59, 0x624, 0xf190, 0x2, 0x8000, 0x40, 0x0, 0x6, 0x3, 0xb44e, 0x8, 0x80000000, 0x9, 0x10, 0x4, 0xe, 0xffff, 0x80000000, 0x8, 0xff, 0x1, 0x3, 0x2, 0x7, 0x5, 0xceee, 0x400, 0x7, 0x7, 0x80000000, 0x5, 0x81, 0x8055, 0x3, 0x756, 0x401, 0x0, 0x1, 0x6, 0x7, 0x8, 0x80, 0x40, 0x3, 0x7, 0xe85, 0x8, 0x40, 0xff, 0x9, 0x4, 0x0, 0x0, 0x2f, 0x3, 0x10000, 0x2, 0x7, 0x81, 0x1, 0x5, 0x2, 0x9, 0x4, 0x3, 0x8001, 0x81, 0x8, 0x7, 0x3, 0xa39, 0x200, 0x1, 0x9, 0x8, 0xfffffffd, 0x7, 0x2, 0x3, 0x0, 0x7b03, 0x7, 0x7, 0xa, 0x7, 0xb6, 0xd, 0x80000001, 0x6, 0xc1, 0x3, 0x1, 0x7, 0xfffffff9, 0x7f, 0x5, 0x3, 0x933f, 0xffffffff, 0x0, 0x9, 0x1, 0x4, 0x1000, 0x7fffffff, 0x7, 0x18be, 0x41, 0xf, 0x60, 0x3, 0xfc000000, 0x10000, 0xffffe68a, 0xfffffff9, 0x9, 0x8, 0x9, 0x0, 0xcb7, 0x1, 0x6, 0x3, 0x1db, 0x6, 0x2, 0x10, 0xe, 0x1, 0x0, 0x6, 0x3, 0xbab, 0xffff, 0xba08, 0x7f, 0x1, 0x3, 0x7fffffff, 0x7f, 0x7f, 0x401, 0x8d62, 0xbdfc, 0x9, 0xb]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0xb, 0xff, 0x6d, 0x8, 0x10000, 0x7, 0x337, 0x3ff, 0x5c1, 0x2, 0x9, 0x0, 0x8, 0x4, 0x42, 0x3, 0xff, 0x4, 0x2, 0x3, 0x4, 0x8, 0x3, 0x7, 0x6, 0x1, 0x100, 0x2, 0xaf, 0x9, 0x40, 0x8c9, 0x0, 0x3, 0x0, 0x6, 0x4, 0x9, 0x8, 0x24ed39de, 0x8, 0x2, 0x9, 0x135, 0x6, 0x80000000, 0x4f0a, 0x2f4, 0x9, 0x8, 0x38, 0x3, 0x2, 0xc, 0x1, 0xc, 0x4, 0x943c, 0x6315b094, 0x0, 0x9455, 0x2, 0xd0a, 0xc, 0x0, 0x8, 0xfffffffa, 0x9, 0x1, 0x2, 0x2, 0x8001, 0x101, 0x80000001, 0x5, 0x7, 0x2, 0x1, 0x1, 0x8, 0xecba, 0x8, 0x9, 0x6, 0xb8, 0xfffffffd, 0x180, 0xa, 0x1, 0x247, 0x2, 0xe1, 0x9, 0x5, 0x0, 0x9, 0x0, 0xa, 0x3, 0xcc, 0x5, 0x0, 0x4, 0xfff, 0x9, 0xfffffffd, 0xffff8000, 0x9, 0x8, 0x805, 0x401, 0xfffffffe, 0xfffeffff, 0x8, 0x40f6, 0x5, 0x8001, 0x80000001, 0x7f, 0x9, 0x9, 0xd12, 0x2, 0x5, 0x4, 0x8001, 0x2, 0x5, 0x7, 0x4, 0xa00, 0x8, 0x1, 0xffff, 0x7, 0xff, 0x2, 0x0, 0x1, 0x40, 0x6, 0xd8, 0xeeb2f5d, 0x7, 0x7, 0x2, 0x0, 0x2, 0x7, 0x4e3a1aa2, 0xa9b9677f, 0x36, 0x2, 0x0, 0x6c0, 0xda, 0x8, 0xffff, 0x800, 0x9, 0x9, 0x1200, 0xffff8000, 0x7, 0xfffffffb, 0x8ccc, 0x7, 0xc41, 0x9, 0x3ff, 0x5, 0x80000001, 0x4, 0x0, 0x7, 0x6, 0x4, 0x3, 0x2, 0x805, 0x7, 0xfffffff8, 0x7, 0x8, 0x8000, 0x9, 0x3, 0x3, 0xb4f, 0x5, 0x3, 0x4b2b5221, 0x7, 0xfffffffc, 0x4d5f, 0x8, 0x0, 0x0, 0x5, 0x1, 0xf, 0xa, 0x4, 0x101, 0x5, 0xfffffffd, 0x10, 0x6, 0x1, 0x9, 0x0, 0x10001, 0x32, 0x80000000, 0x1ff, 0x2000, 0x5, 0x7f, 0x3ff, 0x9, 0x0, 0x5, 0x9897, 0x401, 0x4, 0xffff, 0x4, 0x0, 0xe340, 0xca, 0xc35, 0x8, 0x8, 0x2, 0x9, 0x8000, 0x101, 0x10000, 0x6, 0x200, 0x5072, 0x7fff, 0xfffffffb, 0x9fd, 0x2, 0x7, 0x791, 0x5, 0x0, 0x20ba, 0x0, 0x30000, 0x3ff, 0x5, 0x2]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10, 0x3ff, 0x3, 0x6, 0x7, 0xfffffffe, 0x1, 0xfa, 0xca, 0x5, 0x8003, 0x40, 0x7, 0x0, 0x1ba, 0x1000, 0x9000000, 0x9, 0x10001, 0x8, 0x4, 0xfffffff7, 0xfffff3e1, 0x48, 0x0, 0x81, 0x9, 0x2, 0x5, 0x401, 0x9, 0x5, 0x8000, 0x61, 0xa5, 0x662f, 0x0, 0xffffffff, 0x9, 0xfffffff7, 0x5, 0x6, 0x7, 0x0, 0xe5a, 0x81, 0x8, 0x3, 0x9, 0x0, 0x0, 0x3, 0x8000, 0xeada, 0xfffffffb, 0xef6, 0x2, 0x2, 0xfffffffd, 0x101, 0x80000001, 0x0, 0x8, 0x7, 0x5, 0x80, 0xe0, 0x4, 0x10, 0x7, 0xbbc, 0xe8, 0xfff, 0x9, 0x5, 0x80000000, 0x6, 0x0, 0x8, 0x6, 0x355, 0x1, 0xfffffe01, 0x80, 0x2, 0x8, 0x3, 0x3, 0x9, 0x4, 0x1, 0x400, 0x4, 0x400, 0x3, 0xc, 0x635, 0x1, 0x7fffffff, 0x3, 0x9, 0xccf2, 0x0, 0x8, 0x8, 0xc7cd, 0x7ff, 0x2f, 0xfffff56e, 0x10000, 0x0, 0x4, 0xdf93896, 0x8000, 0x3, 0x8, 0x6097, 0x0, 0x8, 0x0, 0x4, 0xde72, 0x4, 0x87, 0x8, 0x8, 0x1ff, 0x3ff, 0x6, 0x8, 0x7, 0xfffffffe, 0x1, 0xc074, 0x100, 0x0, 0xffff, 0x4, 0x8, 0x8, 0x0, 0x9, 0x2, 0x8, 0x3b, 0x2, 0x4, 0x9, 0x4, 0x55e9, 0x2, 0xe658, 0x8, 0x101, 0x3, 0x2, 0x2dd, 0xff, 0x7ff, 0x2000007, 0x2, 0x401, 0x4a7, 0x80000001, 0xcff3, 0x3, 0x80, 0x7, 0x4, 0x6, 0x8001, 0x3, 0x51, 0xc, 0xfffffe00, 0x3, 0xffffffff, 0x4, 0x7, 0xfffffff8, 0x5, 0x6, 0x5, 0x3, 0x100, 0x3, 0xfffff821, 0x5, 0x4, 0x3, 0x3, 0x9, 0x2, 0x900000, 0x5, 0xe46, 0x0, 0x9956, 0x4, 0x1, 0x10, 0x10001, 0x4, 0x7fffffff, 0x6c1fbe91, 0x1, 0x1, 0xf, 0x9, 0x8, 0x5, 0x2, 0x31c, 0x2, 0x4, 0x14, 0xf0, 0x0, 0x10000, 0x5, 0x40, 0x3, 0x1005, 0x5, 0x9, 0x3, 0xd7, 0x7, 0x4, 0x0, 0xd, 0xa9, 0x81, 0x7, 0x0, 0xe, 0xffffffff, 0x2, 0x200, 0x7, 0xf75, 0xfffffffd, 0x4, 0x6, 0xbec7, 0x4467, 0x8, 0xb, 0x214e, 0xa, 0x2, 0x7, 0x10001, 0xfffffff7, 0x4, 0x5]}]]}, {0xed, 0x6, "41ff2fc9723dc205f1cc63f833b899de2e9a6901f2ab091fa92466d96644d04070e6a3f23949b062d4d0217483979f4b203fe63be863ca2f14ad964268e2317f9c688468b7b782636b779e9fa84461dbea3d64939a7127318a19bb47b79e1639e101f110b954c1e9d5d55d778b8b4276263e4aa3d79d925f7a1a5538c1cb523ceb2081aa75bae967f6ad65c3034e0e2477d71e4626a11bceb3552f2308a74312bd20795ec58322b0a0deefdbc0b1b98d7bfedc9bcef6e1110009a29fb353d8efe04217cfc77eb27261c8327ea1855560587e68c79a74a7be19649fa4815208bb51e8cdccd412e17db5"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0xf34}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) (async, rerun: 32) r1 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0) (rerun: 32) syz_usb_ep_read(r1, 0x1, 0x0, 0x0) (async) syz_usb_ep_read(r1, 0x1, 0x0, 0x0) syz_usb_ep_read(r1, 0x1, 0x0, 0x0) (async) syz_usb_ep_write(r1, 0x82, 0x0, 0x0) (async) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r2) (async) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000200)=@chain) (async, rerun: 32) add_key(&(0x7f0000000d00)='asymmetric\x00', 0x0, &(0x7f00000012c0)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0d10bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe380301f0603551dff041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc7fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c6ee3a5ad39fcfc3a7f58816109ea7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b1500", 0x559, r2) (rerun: 32) unshare(0x22020600) (async, rerun: 64) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async, rerun: 64) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000240), 0x200042, 0x0) setsockopt$inet_int(r3, 0x0, 0x8, 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000180), 0x44d, 0x802) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) r4 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xbd}) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_usb_ep_read(r1, 0x1, 0x0, 0x0) (async) syz_usb_ep_write(r1, 0x82, 0x0, 0x0) syz_usb_ep_read(r1, 0x1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x44, &(0x7f0000000500)=ANY=[]) (async, rerun: 32) syz_usb_ep_read(r1, 0x1, 0x0, 0x0) (async, rerun: 32) syz_usb_connect$uac1(0x5, 0x72, &(0x7f0000000400)=ANY=[@ANYBLOB="120110010000002082057d004000010203010902600003010048f30904000000010100000a240106000a0002010209040080000002000009040101010102000009050109080000037f0725010c000200090402"], 0x0) syz_usb_ep_read(r1, 0x1, 0x0, 0x0) (async) syz_usb_ep_read(r1, 0x1, 0x0, 0x0) 2.777236959s ago: executing program 8 (id=8609): io_uring_register$IORING_REGISTER_QUERY(0xffffffffffffffff, 0x23, &(0x7f0000001300)=[{&(0x7f0000000140)={&(0x7f0000000080)={0x0, &(0x7f0000000040)="8c", 0x1, 0x1}, 0x0, 0x1}, 0x0}], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xe9, 0x79, 0x56, 0x40, 0x781, 0x5, 0x5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x2, 0x95, 0x10, 0x99, "", [{{0x9, 0x4, 0x2b, 0xd, 0x2, 0x39, 0xb3, 0x92, 0x9, [], [{{0x9, 0x5, 0x1, 0x2, 0x40, 0x9, 0xb9, 0x1}}, {{0x9, 0x5, 0x82, 0x12, 0x8, 0x4, 0x4, 0x3f}}]}}]}}]}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) shmat(r2, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmctl$IPC_RMID(r2, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25fc010000000000000000000000000000ff0200000000000000000000000000010004fffe4e21000200000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r5, @ANYRES16=r1], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f00000004c0)={@remote, @empty}, &(0x7f0000000500)=0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000010000100000300000a28000000000a03000000000008000000030000030800024000000004093640cbebc5b9a8874200010073797ac6a7321b0028000000000a110400000000000000"], 0x78}, 0x1, 0x0, 0x0, 0x24040010}, 0x200040d0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) r9 = socket$kcm(0x29, 0x2, 0x0) r10 = openat$sequencer2(0xffffff9c, &(0x7f0000000540), 0x40402, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r10, 0x40085112, &(0x7f0000000240)=@t={0x81, 0x6, 0x9, 0xd, @generic}) sendmsg$kcm(r9, &(0x7f0000000f00)={&(0x7f0000000340)=@hci={0x1f, 0x1}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000700)="cb89f7094a6ea18c1f033172e4e8e437334c56478e75f6ebdf6af310523f88fa18cbecb8c6f8fcda6ebbc46bf29dc98ef7825d1e8e2b7890403a7ff11853877ec4258aab576d77f9db49defda42154c7533ad739589e90d4908d4f248a1678e78f024652a21c76dd5ebd83635c67417a9a4026591981c451b09d32fb5f834e606a4023a8dc5e2a5f522b8efb710a13117e2f6234f734229bd8d0363b62bdb209a82e67a42a7a9756907043719a887588fa651721278575190a30a94a04768c51e99914c9f5b3cf4fa93fcaebd400287192aaced9faf04443017ec84796f5aa7e86604ccdb5", 0xe5}, {&(0x7f0000000800)="426b7b44607ad08f32e2d1917c704128558e83efaf96217a7e5b18eb8b1765b399ee215c93adc613022ca3f226f48c62632da63a5feaf75abf80ff37e0b43432bfe07b8b1d3a06d43e15f51815cbc4de10bcb063c2294f560df10762b2576a4a87347c02171e14572a4328c612970443317e5488e85534", 0x77}, {&(0x7f0000000880)="19a38ba0ed560e822933be980f4a6c4d2171e63090fe79f2495d6b08bf86722fa41a48989ce088fe34af986877660faeb507e2963ef3b6176bbc3ab17ae8ddd95ff2748febb04b5c5373a814dae355d388547e721e3deeb09de9f47ccd04a184251ad2dc6fcb806fa3f2346844d7890056a5e4f5604514b92818a16d6c463f58e9fe1cda34063ca7ff04e47ed18e61cda5014872e1824ade35a42b9402eb52bbf3c2224a752c41f7cfa1d7e7268c627b2a62a30fff807ce76b068a5f44bd7153395a48129e7c9785ad6ec068b5fd48bd7030e3c1e696b29192492bdf359a01a59472e0afa3ca34801875beb06c5556f056ededd00741", 0xf6}, {&(0x7f0000000980)="b3984b04e0e0214c7334b324234663f13871cd8d6707ae3da718818bcdc002927b73469327155905e86ae20bfeb93e5d3bfb3597b709cf4e3246c028dd1b08ef4d0320e63c8c99590d745a901a3d94150fde8e78ce22b412b79004637c3d9a80de8a20fb6ae59c262a71f44f7dfa7214f95136f66744c7dd3e9c962d2069b26a037683c8ae17ada83303", 0x8a}, {&(0x7f0000000a40)="71a3b59a23b57feb75a18ce1333e760dd773e362c197877abdc971cf7cdfc971f28d4fcf2ca11cfc506add1a4898647f5dea41d31863380f2676441f15735ea9c047d34007b2d0d7673f2d344b8d559ffa60cd44646be73c5d948b269f8f3828022dd6f2c4fc6e677cd23711e322d8f958b86fc80bdf2aeab16edce2055384a130e9781d605f5e060c83137367c1168751ec9d512369274ce806e51d5c4db34bad3b8eafb6791bd23d0b711ab32fc11cba6a", 0xb2}, {&(0x7f0000000b00)="4e8ba4a81131018ab10ab011980a076c1877107fb55f6ba4789dc199921dfe65124ad0c43b589d587e5a72fe66ce3e779a6b68b7070d0c5b01e5c96f44d0800211bd6897e9e225d73877b61e9e62026beee9d85dcdb48bca42020bcadc60f04c9d9d5cc4d4", 0x65}], 0x6, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], 0x300}, 0x40000) socket$inet6_udp(0xa, 0x2, 0x0) r11 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r11, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}, 0x321}}}, 0x108) r12 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') read$FUSE(r12, &(0x7f00000027c0)={0x2020}, 0x2020) setsockopt$inet_tcp_int(r8, 0x6, 0x7, 0x0, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffd}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x40, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "c87e"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x850}, 0x40) 2.280764848s ago: executing program 6 (id=8611): mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100010, 0xffffffffffffffff, 0x1f000) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) syz_open_pts(0xffffffffffffffff, 0x200) connect$tipc(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r1, 0xc2b) r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/packet\x00') read$FUSE(r2, &(0x7f000001ba00)={0x2020}, 0x2020) pread64(r2, &(0x7f0000001240)=""/102400, 0x19000, 0x80000000000000) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$dvb_dvr(0x0, 0x0, 0x13f) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="5000000010000104000100008000000000000000", @ANYRES32=r5, @ANYBLOB="3f00000000000000300012800b00010062726964676500002000028005000700080000000c002e000300000003"], 0x50}}, 0x0) r6 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x3c}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xa}, {0xc, 0xfff0}, {0xb, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.977593007s ago: executing program 2 (id=8612): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @multicast2}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c1122334400008000000500050000000514070008"], 0x4a) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x40, r5, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x4, 0xa8, @random}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x418ccb57f107b7b8) ioctl$OTPGETREGIONCOUNT(0xffffffffffffffff, 0x40044d0e, &(0x7f0000000340)) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4080}, 0x840) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x24, 0x0, {0x3}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x28}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 1.887400257s ago: executing program 6 (id=8613): r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f000082f000/0x2000)=nil, 0x2000, 0xe) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x1, 0x0, 0x3e, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0xc00, 0x0) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r5 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r5, 0x110, 0x1, &(0x7f0000000040)='\x04]{!\x00', 0x5) setsockopt$inet_tcp_int(r4, 0x6, 0x1b, &(0x7f0000000380)=0x3, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r4) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000100)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x1, 0x1007, &(0x7f00000005c0)=""/4103, 0x40f00, 0x58, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2) r7 = syz_open_dev$radio(&(0x7f0000000240), 0x2, 0x2) ptrace$getregset(0x4204, 0x0, 0x201, &(0x7f0000000740)={0x0, 0xffffffffffffff08}) sched_getattr(0x0, 0x0, 0x0, 0x0) read(r7, &(0x7f0000001600)=""/108, 0x6c) r8 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000080)={0xf0f000, 0x1}) listns(&(0x7f0000000040)={0x20, 0x0, 0x5, 0x80}, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001bc0)=ANY=[@ANYRESHEX, @ANYRES16=r7, @ANYRES8=r3, @ANYRES16=r6], 0x54}, 0x1, 0x0, 0x0, 0x20040810}, 0x0) 1.704975484s ago: executing program 2 (id=8614): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000300)=@filter={'filter\x00', 0x42, 0x4, 0x260, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x1c8, 0x1c8, 0x1c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@private, @empty, 0x0, 0xff, 'bridge_slave_0\x00', 'batadv_slave_1\x00', {}, {0xff}, 0x6, 0x0, 0x2c}, 0xa00, 0x70, 0x98, 0x0, {0x100000000000000}}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x12, 0x0, 0xcc7}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0xff, 'gre0\x00', 'veth0_virt_wifi\x00', {0xff}, {0xff}, 0xe2, 0x69a8611d62cd5477, 0x16}, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r2, &(0x7f00000008c0)={&(0x7f0000000600)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) r3 = dup3(r1, r2, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1fb69, 0x47a1945c8b5fe3d3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0xff00, 0x10d}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008801}, 0x20040040) syz_clone(0x812c0000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 1.413510509s ago: executing program 2 (id=8615): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000c, 0x32, 0xffffffffffffffff, 0x41e90000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010000000000000008000000180500002020702500000000002020207b1af8ff00001f00bfa10000000000000701000000feffffb702000008000000b703000001000000850000000c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000}, 0x94) 1.335549725s ago: executing program 2 (id=8616): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000400, 0x0, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r2, 0x8000000000000003}, 0x18) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x10, 0x70bd2c, 0x25dfdbff}, 0x206c}, 0x1, 0x0, 0x0, 0x40000}, 0x400c801) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000500)={0x14, 0x3, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20000880) add_key$fscrypt_provisioning(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x0}, &(0x7f00000005c0)={0x1, 0x0, @a}, 0x48, 0xfffffffffffffffb) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008004, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4001, 0x0, @empty}, 0x1c) sendmsg$nl_route_sched_retired(r3, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000100)=@deltclass={0x434, 0x29, 0x400, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5e291e8239e04253, 0xffe0}, {0x0, 0xf}, {0xfff3, 0x6}}, [@c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xfffffffc, 0xc14, 0x6, 0xfffffff8, 0x101, 0x7, 0x2, 0xf, 0x2, 0x10001, 0x9, 0xfffffff9, 0x8001, 0x7fff, 0x5, 0xf, 0x6, 0x4, 0xe78, 0x1, 0xfffffff7, 0x4, 0xf9bb, 0x7d, 0x5, 0x8, 0xfa, 0xa, 0x8, 0x0, 0x1ff, 0x1, 0x400, 0x0, 0x9, 0x5, 0x8, 0xffffffff, 0x9, 0x8, 0xb0bd, 0x9f8d, 0x8, 0x7ff, 0x7, 0x4, 0x3, 0x0, 0x5, 0x5, 0xfffffff7, 0x9, 0x4, 0xfffffffe, 0x80, 0xa6f, 0x76a9, 0x9, 0x3, 0x9, 0x7, 0x7, 0xae, 0x9, 0x5, 0xfffff0f3, 0x7, 0x8, 0x5, 0x10, 0x2, 0x4, 0x4, 0x10001, 0x9, 0x4, 0x8, 0x5, 0x7, 0x5, 0x7fffffff, 0x0, 0x6, 0xf, 0x6, 0x2, 0xa, 0x0, 0x0, 0x5, 0x9000000, 0xfffffff7, 0x3, 0x9, 0xcb, 0x1aed, 0x9b62, 0x4, 0x3, 0x9, 0xc2e, 0x0, 0x14000000, 0xc866, 0x4, 0x8, 0x0, 0x5, 0x3, 0x7, 0x7, 0x6, 0xb32c, 0x3, 0xfff, 0xcb, 0x10, 0xffff, 0xfffffffd, 0x100, 0x9, 0x1, 0xf, 0x3d, 0x6, 0x6, 0x4, 0x40, 0x0, 0x9, 0x0, 0x4, 0x10, 0x72e3cc1, 0x6, 0x5, 0x1, 0x6, 0x7, 0x81, 0x9, 0x3, 0x80000001, 0x8, 0x6, 0x7, 0x7, 0x1, 0xffffff6a, 0xffff3c8b, 0x5913, 0x7, 0x10001, 0x7, 0x9, 0xe, 0xfffffffd, 0xc, 0x0, 0x400, 0x8, 0x8, 0x8, 0x100, 0x9, 0x8, 0xc043, 0x62da, 0x1, 0x4, 0xee4, 0x5, 0xaaa6, 0x3d66, 0x0, 0x4, 0x2, 0xabe, 0x80, 0x5, 0x8001, 0x1, 0x7fffffff, 0xfffffffe, 0x1000, 0x9, 0x5, 0x8001, 0x7, 0xffff, 0x6, 0xffff, 0x2, 0x777, 0xfffffff1, 0x40, 0xc, 0x3, 0xe, 0x1, 0x0, 0x9, 0x0, 0x3, 0x401, 0x6, 0x6, 0x221, 0x404, 0x2, 0x4, 0x0, 0x8, 0x5, 0xffffffff, 0x401, 0x6, 0xffffffff, 0x7, 0xab, 0x0, 0x4e7, 0x6db2, 0x280, 0x10000, 0x8, 0x0, 0xc5e, 0x89b7, 0x1, 0x2, 0x0, 0x9, 0x9, 0xc, 0x1000, 0x4, 0xd60, 0x9, 0x9, 0x4, 0x2, 0x7, 0x80000001, 0xff, 0x2, 0x6, 0x4, 0x6, 0x3, 0x8, 0xc00, 0x9, 0x80000000, 0x2c]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x14, 0x17, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x800) 1.301871184s ago: executing program 8 (id=8617): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0xb, &(0x7f0000001580)=ANY=[@ANYBLOB="18000000010000000000000008000000180500002020702500000000002020207b1af8ff0000000079a1f8ff0000000004010000f8ffffffb702000008000020b703000001000000850000000c00000095"], &(0x7f0000001500)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7f}, 0x94) r1 = signalfd(r0, &(0x7f0000000000)={[0x8]}, 0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0x2}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newtfilter={0x48, 0x2c, 0xd2f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "f2c47d4007080fe0974c91f29a972c4d"}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8400000004080102000071a34e38747c4541027dafe093a298000000000000020000030600024000030000050003003a0000000600024088be000006000240001b000005000300110000002c000480500001407fffffff0800014000000005080002400000009e080002b8e8400000000708000240fffffffb050003002f00000006000240000100000900010073797a300000"], 0x84}, 0x1, 0x0, 0x0, 0x20008811}, 0x8091) 777.622202ms ago: executing program 8 (id=8618): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) listen(r1, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000000)={{0x5, 0x7, 0xfff, 0x4}, 'syz1\x00', 0x6}) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000140)={0x0, 0xffff, 0x0, 0x0, 0x0}) ptrace$peeksig(0x4209, r2, &(0x7f00000001c0)={0xdb6, 0x1, 0x2}, &(0x7f0000000200)=[{}, {}]) ioctl$TCXONC(r1, 0x540a, 0x2) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @local, 0x2}, 0x1c) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) connect$netlink(r0, &(0x7f00000000c0)=@unspec, 0xc) 710.762383ms ago: executing program 2 (id=8619): socket(0x10, 0x803, 0x0) (async) r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) (async) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="f7790066baa00066b86b42460f22c7d466ba420000b8e20066ef0f29902cbb0000c4e2b1ba8c88d90000006666f6440f386b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4b}], 0x0, 0x58, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r7, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x21, 0x0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000100001000000000000000000000020020000000a010200000000000000000100000009f25c00010073797a300000000040000000160a01000000002000000000010000000900010073797a30000000000900020073797a300000000014000380080001400000000008000140000000001400000010000100000c0000000000000200"], 0x88}, 0x1, 0x0, 0x0, 0x20040841}, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) r10 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x2012, r10, 0x0) (async) ioctl$SG_SET_RESERVED_SIZE(r10, 0x2275, &(0x7f0000000340)=0xc291) (async) futex(&(0x7f0000000000)=0x1, 0xa, 0x2, 0x0, 0x0, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000140)=@x86={0x49, 0x3, 0x7, 0x0, 0xf84, 0x9a, 0x0, 0xe3, 0x5, 0x7, 0x5, 0x3, 0x0, 0x0, 0x4, 0x8, 0xfc, 0x0, 0x0, '\x00', 0xd, 0x200}) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)) (async) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x70bd28, 0x0, {0x0, 0x0, 0x4c}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x4}]}, 0x30}, 0x1, 0xffffa888, 0x0, 0x40000}, 0x0) r14 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), r13) ioctl$SIOCGSTAMPNS(r11, 0x8907, &(0x7f00000002c0)) (async) sendmsg$IPVS_CMD_SET_INFO(r13, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="000125bd7000fedbdf250e00000000000500080000000800050091d7000008000600976dffff"], 0x2c}, 0x1, 0x0, 0x0, 0x20040014}, 0x1) (async) sendmsg$IPVS_CMD_SET_DEST(r12, &(0x7f0000000640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x004', @ANYRES16=r14, @ANYBLOB="040028bd7000fcdbdf250600000050000180060002000000000008000b0073697000060002008700000006000200160000000600010002000000080005000400000008000b0073697000060001000a0000000c0007000100000002000000080005000800000014000280060002004e230000080005000100010008000500090000000800060002000000080006004100000030000180060002002f00000008000800060000000c00070001000000170000000800050004000000060004004e2200001800038014000200626f6e645f736c6176655f310000000008000600ff000000"], 0xe8}, 0x1, 0x0, 0x0, 0x8004}, 0x4) 672.953441ms ago: executing program 7 (id=8620): r0 = socket(0x10, 0x3, 0x9) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') lseek(r1, 0x4, 0x2) r2 = accept$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000100)=@req={0x9, 0x640, 0x9, 0xb3e}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x28}, 0x1, 0x0, 0x0, 0xe938a4af42647592}, 0x90) 533.720308ms ago: executing program 8 (id=8621): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f0000000080)={0x1, 0x0, {0x280, 0x1e0, 0x2001, 0x1}}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) write$cgroup_int(r3, &(0x7f00000001c0)=0x800, 0xffffff30) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, &(0x7f0000000080)={0x1, 0x0, {0x280, 0x1e0, 0x2001, 0x1}}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc0000001900010000000000000000000000000000000000000000000000000000000000000000000000ffffe000000100000000000000000200000000000000433eda5f4042ccd92525e5f72e1996bed152fee753c9e17207adcd2e4546340431b90e375c78b96ed11ac364debd5c16b2dcc6adef9e14bb8ab90b7cac50886ba170510b9b700e3af2d2428c314b85bfcf628a4ca13813f90e6bbf17c7a5d6eca677abb60f50983e52063ad71deb80c8f985e310a0b7747eef43", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000ffffff7f000000000000000000000000020000000000000000000000000000000000000000000000feffffffffffffffffffffffffffffff00000000000000000000000000000000000000000000000001000103000000004400050020010000000000000000000000000000000000022b0000000a000000ac1e01010000000000000000000000000000000004020000000000000000000000400000"], 0xfc}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r6, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x810) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0xfffffffffffffffe, 0xffffffffffffffed, 0xfffffffffffffffd, 0x4, 0x5, 0xfff, 0x4002004c4, 0x1000, 0x0, 0x1, 0x10, 0x0, 0x3, 0x3, 0x6, 0xffffffffffffffff], 0x1, 0x2011c0}) syz_open_dev$loop(&(0x7f0000000000), 0xffff, 0x14f600) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000100)={0x1, 0x0, {0x20280, 0x800001e0, 0x1001, 0x3, 0x7, 0x0, 0x0, 0x7}}) r7 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x2) ioctl$VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1}) ioctl$VIDIOC_STREAMON(r7, 0x40045612, &(0x7f0000000200)=0x1) openat$cgroup_freezer_state(r0, &(0x7f0000000240), 0x2, 0x0) 491.91339ms ago: executing program 7 (id=8622): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000), 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x2, 0x2}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_ECN_SUPPORTED(r0, 0x84, 0x82, &(0x7f00000000c0)={r1, 0x8}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000140)={r2, 0xffffffffffffffff, 0x80000}, &(0x7f0000000180)=0xc) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000001c0)={r1, 0x3}, &(0x7f0000000200)=0x8) ioctl$sock_inet_sctp_SIOCINQ(r3, 0x541b, &(0x7f0000000240)) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x8240, 0x22) getdents(r4, &(0x7f00000002c0)=""/15, 0xf) r5 = syz_open_dev$swradio(&(0x7f0000000300), 0x1, 0x2) ioctl$VIDIOC_G_ENC_INDEX(r5, 0x8818564c, &(0x7f0000000340)) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b80)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, r4, 0x2, 0x4, 0x3}, 0x50) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c80)={&(0x7f0000000c00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@restrict={0x2, 0x0, 0x0, 0xb, 0x4}, @typedef={0x4, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x5f, 0x0, 0x2e, 0x0, 0x0]}}, &(0x7f0000000c40)=""/36, 0x37, 0x24, 0x1, 0x1, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=@bloom_filter={0x1e, 0x4, 0x8, 0x2, 0x800, r6, 0xd, '\x00', 0x0, r7, 0x0, 0x3, 0x0, 0x6}, 0x50) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r8, 0x0, 0xd4, &(0x7f0000000d40)=0xc, 0x4) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000fc0)={0x0, @initdev, @initdev}, &(0x7f0000001000)=0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000010c0)={r6, 0x58, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001180)={'ip6tnl0\x00', &(0x7f0000001100)={'ip6gre0\x00', 0x0, 0x2f, 0x2, 0x6, 0x2, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @private1, 0x1, 0x40, 0xa, 0xb}}) sendmsg$inet6(r0, &(0x7f00000014c0)={&(0x7f0000000d80)={0xa, 0x4e22, 0x4, @rand_addr=' \x01\x00', 0x4}, 0x1c, &(0x7f0000000f80)=[{&(0x7f0000000dc0)="569f492ba19028f1a80efd5a38f1e95f86085d4f2afefbb435ee1066f6b74ce956f396d3f19f90f4d92c3ee6f15b77fd9f335526f522f3fd47ff4c18dcbf0e4f7f3d27648ac1904f56eda6614d8caef1d651da38da98806430c3b4859960ff574c6a1d09f2b65161e2eab456", 0x6c}, {&(0x7f0000000e40)="13ae1416e5d0919e5b52b941f34a20911c2adfbd452f912ccd3e53113b11b4ca70bc3c7532f70afd15902a944d5c1c8b30140f1e279a062a6797fd68ddc32cbec6c726c6a77552f95e1554fb82cc43d318e55b8c37497e9e131aef1aaff491e06e44f99e06", 0x65}, {&(0x7f0000000ec0)="df482caffe1a810e44eafa5c4fe0278d8daaa031c254b9f19d0babf1604d6c8c96fca32e862f468bfd9acc9c7300859fc9ffd510f88510dc191906b91500b8824d379e2f6a0d05c9ce15323981f92aeb4f0a90beb8a5ffb74d50ff2f94ef6f77e0dfb4b2a5c4d7ecbd9ab4e66619c60c7bf9ecffc9fce4387a522bf061e7bfa47d1ad72a7ac0a8241354ed65e4ad38967f30be73c6c4433fb9b075934a8bf7dac26deeda3a44f9f2f89189", 0xab}], 0x3, &(0x7f00000011c0)=[@pktinfo={{0x24, 0x29, 0x32, {@empty, r9}}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback}}}, @pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r10}}}, @hopopts={{0x138, 0x29, 0x36, {0x87, 0x24, '\x00', [@hao={0xc9, 0x10, @loopback}, @enc_lim={0x4, 0x1, 0x6}, @calipso={0x7, 0x20, {0x3, 0x6, 0x9, 0xfffa, [0xfffffffffffffffb, 0x80, 0x63]}}, @pad1, @generic={0x7, 0xd8, "b022cb74a6f5509c2fa93fc48455d6de905321299a30f6b7f908afd0945275125b502855f24f29a60e32a6b60c5e1c53e8758c7fa64ad95602c246f084a7be5498937172bc6ec3faef8fe2619970594d508f199c5692f210b14d8b1831636caa07ab1cb13d90e2a8edcc6e41256a7e112c95ad464985ea1cebb4eeacd5cb96bbf6912ce6afef2807f9f825f5a6659b35f6e0d33c0952c5e1aa664506b60159203a81c87e49cc7fd23b1f1506c41bf8d408ce4c26f39b07cc1143730173f234c6af60d8ffc08bd0e7944dad8455c48ec24dca6efc117c241c"}, @pad1, @generic={0x5}, @pad1, @ra={0x5, 0x2, 0x663}]}}}, @dstopts_2292={{0xf8, 0x29, 0x4, {0x67, 0x1b, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0x0, 0x1cd5, [0xfff, 0x7f]}}, @enc_lim={0x4, 0x1, 0x2}, @generic={0x4, 0x5a, "7378e7b64cd54cbf30fbe1a29641345fcfaed48457464b84a4d276b734b8d3d77861180df1f4207ee0f3b765edff657476b4ed4a52325f0ee6bdf463c4ef64f25a1e8035676a96d3b1574b745de8ecba823f6935781cdd563336"}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0xd, 0x5e, "7d94dddb39f462fcca68a0519aa282789146134cc8b63483f2e525bea249d3b0490bc39df0126a5ec53d708177a97e338e6e2e63f60415516bdd89cc895f378eb844e0717e92e18e7f324e3bb7ec27bf40e9d204d586810e3ddb35607c6c"}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private2={0xfc, 0x2, '\x00', 0x1}, r11}}}], 0x2d0}, 0x40005) socket$inet_sctp(0x2, 0x1, 0x84) r12 = syz_open_dev$ptys(0xc, 0x3, 0x0) fsetxattr$security_evm(r12, &(0x7f0000001500), &(0x7f0000001540)=@sha1={0x1, "4830fc118988943104a80e447d0db9800df751c5"}, 0x15, 0x3) r13 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r13, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x20, 0x140c, 0x100, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x90}, 0x20000004) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000001680)={{0x1, 0x1, 0x18, r5, {0x8, 0x8}}, './file0\x00'}) pwritev(r14, &(0x7f0000002bc0)=[{&(0x7f00000016c0)="62397a1c5e28c208f937ca0282329f294784ce73d79823730547fa753f52a5a58c5fe980211e6c30ef8b6919940f227d34ea7652f77725096ea55e286130e649e6d647c42ce54aa585b16c882fe17ca80bd22617a21c131281d3", 0x5a}, {&(0x7f0000001740)="a3241046cc69dd2edf1a7df789b731a2355a416e76f9eac0777487952858ae9c164d5705f99e97baa1045eaca3a460ad3d239ace06a673e2791498e93eeda6ce5d81f9096118dac75abe9748fe1e7ea2bd54eb73fefe7460786161725f59f124e4cf62acdbee3d699a30a246d62ae22b5a9eaf2b8e2faf6ba3cd328225b936e1dcabbf460e3c761f5f058255641f0eda3fc9b4a3ce63f18f086fd9c51d99f65be7a818df49732cd51d422c6e833e563d1c2d65278e0bb32b3a51dc6c8d99465e082daf07f5b5ea9a9a8780", 0xcb}, {&(0x7f0000001840)="68a3f2d75d92855608641512224278429418c31ff1ad96b560ed1254bba06847f99392774072463036bf248ba28b015e26f9836578acd4953166928f147529fbf5d76b11481a2d328d8790a7682b412057142fd3c75f157cfd211a9b808c4a11a1de9928d6e09a2aa240c9e6826b6524b258ff03aa3b40d64cd0c042153797a878bdedaf2ce4069c408e5752e3da04ec668e91f86bd677028184241e25c6c6deef09147f322d92", 0xa7}, {&(0x7f0000001900)="695ee88c2445fed04c0cc7ff6b3aeef50a95aff32f28ac817c6877fb459ca2d2bade9bff816c39e04d2181a0cb66251e6d87e90df79f34f10e4a77437ec2fcf3189edce6cf37ef76b9b94e677203aa6b0c51980bd6e616ba8f97f60b0c96810e8d70b95118d7fa0a9955bdef7f3fd7f62f9d5485d857bd4cd940fa2fd909fc70a528da4b304a0187bfecd97aed628e5e812d85d95503e15899acacfc7b486dca8906945b709e3a487c109da804ae54abf3c197f4945bb56736ad07b2d568737546230a26eb7272d1c5e30eac28", 0xcd}, {&(0x7f0000001a00)="8a6e6c34d7ed5493d4a80f7c61587869e3d2c4e9adbf741be1fdf6f84de4ca20a8d4496d92358e9be9d367e1d062c2f8f8acb44e1f757b05566c842ccb29f7e7d2c70a8c3184f33cf4e7dbcea5df1d680aa27feee0d6f70a037671d8141f63fd9151279a1eff0ef6353995809e3fc79d80cefa4966e8c318c171f75232bb2b9724bbe5b311b16349", 0x88}, {&(0x7f0000001ac0)="dc96226f4d383fd3bec40dc7f2654fde054883b6e11410c51e7126b13ad34df98b5371cfdf660963721eceb3a5f5f21f44a306df19b2d2965e8a87881eb525136785a18ec9af5d9912729c62ea8648b3a2b165e20852094b4803d8422d1fdaa323fe0c126abe1504103629747986285a9e67365686c902c4726de4050448065654dd5e1d7b132cfa6d93fee7d7f84c54e31293be0bf8f848eee4a396df2d2a18242bdb6b5bc811ff8b8de94abe6fb0337d5dce83dc937938fe5fc054142d2d4d1f566d69c0cd54336fb0e3dcf33f9f221ca5f2afddaa1fda16965993e5b9305b787555aeba", 0xe5}, {&(0x7f0000001bc0)="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", 0x1000}], 0x7, 0x8000, 0xffffffff) r15 = syz_genetlink_get_family_id$batadv(&(0x7f0000002c80), r14) sendmsg$BATADV_CMD_TP_METER(r14, &(0x7f0000002d40)={&(0x7f0000002c40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002d00)={&(0x7f0000002cc0)={0x34, r15, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x40}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x44880}, 0x4000) ioctl$SG_EMULATED_HOST(r14, 0x2203, &(0x7f0000002d80)) 350.787228ms ago: executing program 6 (id=8623): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000640)={0x401, 0x4, 0x3, {0x1, @win={{0x4, 0x8, 0xcfe, 0x7}, 0x7, 0x9, 0x0, 0x263, 0x0, 0x5}}, 0x4}) 253.536313ms ago: executing program 6 (id=8624): ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) ioctl$FE_ENABLE_HIGH_LNB_VOLTAGE(r0, 0x6f44, 0xfa) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000040)={0xc}) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000080)={0xc, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000010c0)={0x28, 0x0, r1, 0x0, &(0x7f00000000c0)="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", 0x1000, 0x10}) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000001100)) getsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000001140), &(0x7f0000001180)=0x4) preadv(r0, &(0x7f0000001280)=[{&(0x7f00000011c0)=""/136, 0x88}], 0x1, 0xf4, 0x3) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) write$usbip_server(r0, &(0x7f00000012c0)=@ret_unlink={{0x4, 0x0, 0x0, 0x1, 0x38}, {0x3}}, 0x30) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x17, 0x14, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xf}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x1}, @alu={0x4, 0x1, 0x1, 0x9, 0x9, 0x1}, @generic={0x3, 0x1, 0x2, 0xad05, 0x11}]}, &(0x7f00000013c0)='GPL\x00', 0x0, 0xc3, &(0x7f0000001400)=""/195, 0x41000, 0x29, '\x00', 0x0, @cgroup_sysctl, r0, 0x8, &(0x7f0000001500)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000001540)={0x0, 0x6, 0x9, 0x50452a3b}, 0x10, 0x0, r0, 0xa, 0x0, &(0x7f0000001580)=[{0x4, 0x2, 0x5, 0xa}, {0x1, 0x3, 0x3, 0x5}, {0x3, 0x5, 0x5, 0x3}, {0x3, 0x3, 0x0, 0x7}, {0x2, 0x2, 0xe, 0x7}, {0x4, 0x5, 0x4, 0x7}, {0x1, 0x2, 0x4, 0x5}, {0x2, 0x4, 0xb, 0xc}, {0x2, 0x2, 0x6, 0x8}, {0x2, 0x5, 0x9, 0xf202857bc7fd5456}], 0x10, 0xf}, 0x94) ioctl$F2FS_IOC_COMPRESS_FILE(r3, 0xf518, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f0000001700)={0x0, 0x1d7, 0x8}) r4 = fsopen(&(0x7f0000001740)='9p\x00', 0x1) fsconfig$FSCONFIG_SET_FLAG(r4, 0x0, &(0x7f0000001780)='lazytime\x00', 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001800)=@generic={&(0x7f00000017c0)='./file0\x00', r3}, 0x18) mmap$IORING_MAP_OFF_ZCRX_REGION(0x0, 0x9, 0x0, 0x13, r0, 0x37a70530) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000001880)={'ip6tnl0\x00', &(0x7f0000001840)=@ethtool_ringparam={0x10, 0x7, 0x6c7, 0x6, 0x9, 0x2, 0x3, 0x8, 0x8}}) r5 = memfd_secret(0x80000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000018c0)='scalable', 0x8) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a40)={&(0x7f0000001900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@volatile={0x7, 0x0, 0x0, 0x9, 0x4}]}, {0x0, [0x5f, 0x30, 0x30, 0x61, 0x0, 0x0, 0x2e]}}, &(0x7f0000001940)=""/253, 0x2d, 0xfd, 0x0, 0xffff7fff, 0x10000, @value=r5}, 0x28) ioctl$BTRFS_IOC_ENCODED_READ(r6, 0x80809440, &(0x7f0000001bc0)={&(0x7f0000001b80)=[{&(0x7f0000001a80)="95924f1cac4b32ce032e2947219d377cde48950fdc2e02bbe3c24d87238f9d8d5a89a40691980f5f95bde2a41dbee043a6ba733b01a66f505ec2d12e00e541e2bd41ec36be058b49cad375551411f5b8c89364dc0c7278e03525d0b100c1895da66a16a15a7a998077faaf52afcbb8b926e9a8669f3f8bfa48074d022df30b14d05749d5c2241df6afb444ab1007e914cc74486d86034b0b31ccac4c2799b4a5013b8ed3e5dbd5af665e8426ec34341b06d150c467ab639ee363ec73fe539ef416cb36132447f9d56efd9e73effe5810de1be49ad46a89b685044ab3fbb2e8575141973d4651b7c621ea", 0xea}], 0x1, 0x9d, 0x0, 0x1, 0x7fff, 0xfffffffffffffff9, 0x4, 0x6}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001dc0)={'gre0\x00', &(0x7f0000001c80)={'ip_vti0\x00', 0x0, 0x40, 0x700, 0x118, 0x6, {{0x44, 0x4, 0x2, 0x3, 0x110, 0x65, 0x0, 0x0, 0x4, 0x0, @private=0xa010101, @rand_addr=0x64010101, {[@timestamp={0x44, 0xc, 0x4f, 0x0, 0x5, [0x5, 0x8001]}, @timestamp_prespec={0x44, 0x4c, 0xda, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xff}, {@rand_addr=0x64010101, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@empty, 0x313}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@empty, 0x7}, {@local, 0x2}, {@broadcast, 0x9}, {@multicast1, 0x4d44f150}]}, @timestamp_addr={0x44, 0x4c, 0x2f, 0x1, 0x2, [{@rand_addr=0x64010101, 0x5}, {@rand_addr=0x64010100, 0xc0000000}, {@broadcast, 0x5}, {@broadcast, 0x5}, {@dev={0xac, 0x14, 0x14, 0x21}, 0x3}, {@remote, 0xffff0001}, {@rand_addr=0x64010102, 0x5}, {@rand_addr=0x64010101, 0xffffffff}, {@private=0xa010100, 0x4}]}, @cipso={0x86, 0x2f, 0x3, [{0x6, 0x7, "a5cb163a0a"}, {0x2, 0xc, "0316936c82560dc1b8d7"}, {0x1, 0x10, "8d749c23a34575cca67d98b09fcd"}, {0x6, 0x6, "bddb4cde"}]}, @lsrr={0x83, 0x23, 0xdf, [@multicast1, @dev={0xac, 0x14, 0x14, 0x1f}, @multicast1, @rand_addr=0x64010102, @rand_addr=0x64010102, @private=0xa010102, @local, @remote]}, @ra={0x94, 0x4}]}}}}}) sendmsg$nl_route(r5, &(0x7f0000001ec0)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e00)=@ipv4_deladdr={0x78, 0x15, 0x400, 0x70bd27, 0x25dfdbff, {0x2, 0x1, 0xed, 0xff, r7}, [@IFA_FLAGS={0x8, 0x8, 0x2}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_CACHEINFO={0x14, 0x6, {0xffffff2b, 0x25, 0x8, 0x10}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_RT_PRIORITY={0x8}, @IFA_FLAGS={0x8, 0x8, 0x108}, @IFA_FLAGS={0x8, 0x8, 0x80}, @IFA_LABEL={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x20040080}, 0x4001) r8 = dup3(r0, r2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001f40)=@filter={'filter\x00', 0xe, 0x4, 0x4e8, 0xffffffff, 0x210, 0x140, 0x140, 0xffffffff, 0xffffffff, 0x418, 0x418, 0x418, 0xffffffff, 0x4, &(0x7f0000001f00), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x30}, @loopback, [0xffffff00, 0x1fe0000ff], [0xffffffff, 0xffffff00, 0xffffff00], 'bond_slave_0\x00', 'syzkaller1\x00', {0xff}, {0xff}, 0x1, 0x1, 0x6, 0x4}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@icmp6={{0x28}, {0xc, "defe", 0x1}}, @common=@hbh={{0x48}, {0x3, 0x0, 0x0, [0x8, 0x3, 0x80, 0x1, 0x0, 0x20, 0x5, 0x8, 0x4, 0x3, 0x401, 0x1, 0xeb6, 0x5, 0x1, 0x80], 0xa}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x9, [0x1, 0x8], 0x2, 0x10, 0x2, [@dev={0xfe, 0x80, '\x00', 0x13}, @private1, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @local}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x9}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r8, &(0x7f00000025c0)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002580)={&(0x7f0000002500)={0x48, 0x1412, 0x300, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000045}, 0x40000) accept4(r2, 0x0, &(0x7f0000002600), 0x800) getsockopt$inet6_int(r3, 0x29, 0x4b, &(0x7f0000002640), &(0x7f0000002680)=0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000002940)={'syztnl1\x00', &(0x7f0000002840)={'gre0\x00', 0x0, 0x8000, 0x40, 0x80000001, 0x9, {{0x34, 0x4, 0x0, 0x2, 0xd0, 0x65, 0x0, 0x80, 0x2f, 0x0, @broadcast, @remote, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x24, 0x72, 0x1, 0x3, [{@broadcast, 0x8001}, {@dev={0xac, 0x14, 0x14, 0x42}, 0x4}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x7fffffff}]}, @timestamp_prespec={0x44, 0x1c, 0x74, 0x3, 0x1, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80}, {@loopback, 0x1}, {@local, 0x3}]}, @lsrr={0x83, 0xf, 0x56, [@multicast2, @dev={0xac, 0x14, 0x14, 0x40}, @broadcast]}, @timestamp_addr={0x44, 0x44, 0xff, 0x1, 0xc, [{@multicast1, 0x400}, {@multicast2, 0x9}, {@broadcast, 0xc}, {@rand_addr=0x64010100, 0xda}, {@rand_addr=0x64010101, 0x40}, {@remote}, {@rand_addr=0x64010100, 0x4}, {@broadcast, 0x7}]}, @timestamp={0x44, 0x20, 0x58, 0x0, 0xb, [0x2, 0x3, 0xd, 0x4000, 0x3, 0x300, 0x3c00000]}, @end]}}}}}) 186.183487ms ago: executing program 6 (id=8625): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0, r0}, 0x68) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x4) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, 0x0, 0x4011) r2 = semget$private(0x0, 0x20000000102, 0x0) r3 = syz_open_dev$dri(0x0, 0x8, 0x2080) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, 0x0) semctl$GETALL(r2, 0x0, 0xd, 0x0) semctl$SETVAL(r2, 0x0, 0x10, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r4 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r4, 0x2219, 0xcf74, 0x15, 0x0, 0x3c) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000200)='foo#dnserror=1\x00', 0xf, 0xfffffffffffffffe) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000002980)={0x2020}, 0x15be) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x64, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x6, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xd, 0x6, 0x1, 0x7, 0x1, 0x6ea, 0xf}}, {0x4}}]}, @qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r8 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x0, 0x2, 0x100}, 0x30, 0x0) landlock_restrict_self(r8, 0xf) 145.174037ms ago: executing program 6 (id=8626): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040b72040150000000000010902120001010080320904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000691000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x20040810) (async) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x2}, 0x51) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x0, 0x4}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x81}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0208000004"], 0x48) (async, rerun: 64) syz_usb_control_io$uac1(r0, &(0x7f0000000440)={0x14, &(0x7f0000000200)={0x0, 0x6, 0x5c, {0x5c, 0x4, "6ff7ce1b8339cf16c38eb3e5dbed74d5ab6be0951d76cc03e42b1be36870decdd990cd290c2bdacac9da2f295a527abc5556c0a07056438ef24f9d0545f0c62655ed28705208dd04e7ef098cf7a99ecbc4983b2f3c3f01a79e85"}}, &(0x7f00000003c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180a}}}, &(0x7f0000000980)={0x44, &(0x7f0000000500)={0x0, 0x9, 0xa1, "0e21f56c570b5fb73c560376d31cacf882c5b89e0c1523e83d67150749ea9435cf581f855bd63af6089bae15f5b1f67894acbcb5a87eb3f785458051aac9735fe5ee33b6258da11291786ec0568f1a4e88c9f108ec9bc3f41906b232dc1f8e057732500f5abd82c8a443d7edb6f6232d0fbc27dd068e8829f009b3bc5f8ca0ab495bd12f0643357845690813d2ecee350ffe659539e05e629054a5abd83402ebce"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0xf8}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000680)={0x20, 0x81, 0x1, "b0"}, &(0x7f0000000780)={0x20, 0x82, 0x3, "7c78dc"}, &(0x7f00000007c0)={0x20, 0x83, 0x3, "6e71db"}, &(0x7f0000000900)={0x20, 0x84, 0x3, "a73b0d"}, &(0x7f0000000940)={0x20, 0x85, 0x3, "95a6be"}}) (async, rerun: 64) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newtfilter={0xdc, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0xa8, 0x2, [@TCA_MATCHALL_ACT={0xa4, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1000008, 0x0, 0x10000000, 0x8, 0x7}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_simple={0x50, 0x2, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x3ccf, 0x6, 0x8, 0x37, 0x9}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) (async) sendmmsg$inet6(r2, &(0x7f0000000e80)=[{{&(0x7f0000000280)={0xa, 0x4e20, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000380)='^', 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e24, 0x38f0, @dev={0xfe, 0x80, '\x00', 0x10}, 0x8}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000400)='!', 0x1}], 0x1}}], 0x2, 0x20040055) (async) shutdown(r2, 0x1) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000002c0)={0x0, 0x6}, &(0x7f0000000340)=0x8) (rerun: 32) 40.543309ms ago: executing program 8 (id=8627): socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b2, 0x10, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4b}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x3000, 0x3, 0x2a4}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x28, 0x1ffa, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x10000, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1000000, 0x2e4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4c2e, 0x80020, 0x0, 0x312}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="f0000000100030060000000000002000ac14224c0000000080000003000000000000000000000000000000000000298000"/64, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffe0000001000004d432"], 0xf0}}, 0x24000800) 0s ago: executing program 8 (id=8628): r0 = syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000400605014600010000000109022700010100a0320904000003ffffff00070581024000000705020240000007058303"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x101082, 0x0) readv(r1, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000000080)=""/29, 0x1d}, {&(0x7f00000000c0)=""/165, 0xa5}], 0x3) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="0008020000001770a22b5d6960263242b54fd57860fedddb7e472bdc9707e35d003b5d31be66adf4fdd6774026748ed4740728b3442795fedd1bf7c9a2ff897623b570dab57f0785e884f5c1aed8171881dbdd4bb6544f7297f3ed0bd6fabd95267ee08b1a07523c2431aa9dc616b542e716d55a85f55378d2195dab2cac06a2ee5ed8771f5c9570efc99f409635c5cccb03e741c4281e641dc964b8e7dc4559f368744f2fdffd2cc35b90d8d8e8ad879f15c1548ad070365a51f6169852506f32538d44"], 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='maps\x00') ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r3, 0x7a4, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r5, 0x84, 0x81, &(0x7f0000001140)=""/4062, &(0x7f00000010c0)=0xfde) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(r6, 0xffffffffffffffff, 0x2) syz_open_dev$mtd(&(0x7f0000000000), 0x0, 0x2) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0xa, 0x4e21, 0xfffffffc, @loopback, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x4f, 0x103}}], 0x18}, 0x40044) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0x8000}, 0x1c) write(r2, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0xfdef) kernel console output (not intermixed with test programs): ] usb 4-1: Using ep0 maxpacket: 16 [ 1689.564150][ T4378] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1689.565144][ T4378] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1689.565162][ T4378] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1689.565182][ T4378] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1689.565245][ T4378] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1689.580868][ T4378] usb 4-1: config 0 descriptor?? [ 1689.855648][ T1906] IPVS: starting estimator thread 0... [ 1689.962215][T12273] IPVS: using max 29 ests per chain, 69600 per kthread [ 1690.026939][T12279] ovs-dp0: entered promiscuous mode [ 1690.223276][ T4378] hid_parser_main: 5 callbacks suppressed [ 1690.223296][ T4378] microsoft 0003:045E:07DA.0056: unknown main item tag 0x0 [ 1690.223336][ T4378] microsoft 0003:045E:07DA.0056: unknown main item tag 0x0 [ 1690.223352][ T4378] microsoft 0003:045E:07DA.0056: unknown main item tag 0x0 [ 1690.223368][ T4378] microsoft 0003:045E:07DA.0056: unknown main item tag 0x0 [ 1690.223383][ T4378] microsoft 0003:045E:07DA.0056: unknown main item tag 0x0 [ 1690.223398][ T4378] microsoft 0003:045E:07DA.0056: unknown main item tag 0x0 [ 1690.223413][ T4378] microsoft 0003:045E:07DA.0056: unknown main item tag 0x0 [ 1690.223428][ T4378] microsoft 0003:045E:07DA.0056: unknown main item tag 0x0 [ 1690.223443][ T4378] microsoft 0003:045E:07DA.0056: unknown main item tag 0x0 [ 1690.223472][ T4378] microsoft 0003:045E:07DA.0056: unknown main item tag 0x0 [ 1690.289651][ T4378] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0056/input/input189 [ 1690.375941][ T4378] microsoft 0003:045E:07DA.0056: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 1690.445165][ T4378] usb 4-1: USB disconnect, device number 54 [ 1690.650241][T12312] fido_id[12312]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1690.669438][T12327] netlink: 'syz.6.8261': attribute type 10 has an invalid length. [ 1690.669538][T12327] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8261'. [ 1690.669591][T12327] batadv0: entered promiscuous mode [ 1690.669607][T12327] batadv0: entered allmulticast mode [ 1690.670541][T12327] bridge0: port 2(batadv0) entered blocking state [ 1690.670810][T12327] bridge0: port 2(batadv0) entered disabled state [ 1690.698596][T12327] bridge0: port 2(batadv0) entered blocking state [ 1690.698710][T12327] bridge0: port 2(batadv0) entered forwarding state [ 1690.731675][T12327] binder: 12326:12327 ioctl c018620b 200000000180 returned -14 [ 1690.893926][ T1906] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1690.893945][ T1906] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1691.223545][T12342] netlink: 96 bytes leftover after parsing attributes in process `syz.6.8264'. [ 1691.347485][T11745] f81534 9-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1691.347539][T11745] f81534 9-1:0.12: f81534_find_config_idx: read failed: -71 [ 1691.347554][T11745] f81534 9-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1691.347624][T11745] f81534 9-1:0.12: probe with driver f81534 failed with error -71 [ 1691.360508][T11745] usb 9-1: USB disconnect, device number 12 [ 1691.788140][T12369] bond8: Removing last arp target with arp_interval on [ 1691.789404][T12369] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1692.202058][ T1687] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1692.383809][ T1687] usb 3-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 1692.417738][ T1687] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 1692.417764][ T1687] usb 3-1: config 1 has no interface number 0 [ 1692.482118][ T1687] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1692.482147][ T1687] usb 3-1: Product: syz [ 1692.482160][ T1687] usb 3-1: Manufacturer: syz [ 1692.482172][ T1687] usb 3-1: SerialNumber: syz [ 1692.509903][ T4378] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1692.527808][ T1687] usb 3-1: 3:0 : does not exist [ 1692.527831][ T1687] usb 3-1: 3:0 : does not exist [ 1692.687634][ T4378] usb 4-1: Using ep0 maxpacket: 16 [ 1692.688984][ T4378] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1692.693814][ T4378] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1692.698521][ T4378] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1692.698544][ T4378] usb 4-1: Product: syz [ 1692.698557][ T4378] usb 4-1: Manufacturer: syz [ 1692.698571][ T4378] usb 4-1: SerialNumber: syz [ 1692.712466][ T4378] usb 4-1: config 0 descriptor?? [ 1692.715670][ T4378] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 1692.717116][ T4378] usb 4-1: Detected FT232R [ 1692.771549][T12411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1692.785865][T12411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1692.901053][T11745] usb 3-1: USB disconnect, device number 104 [ 1692.944697][ T4378] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1692.946393][T12421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1692.946913][T12421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1693.060773][ T4378] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1693.065497][ T4378] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 1693.069337][ T4378] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1693.078608][ T4378] usb 4-1: USB disconnect, device number 55 [ 1693.086542][ T4378] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1693.087081][ T4378] ftdi_sio 4-1:0.0: device disconnected [ 1694.289894][T12491] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8276'. [ 1694.645739][ T4378] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1694.807680][ T4378] usb 4-1: Using ep0 maxpacket: 8 [ 1694.838527][ T4378] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 1694.841497][ T4378] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1694.841523][ T4378] usb 4-1: Product: syz [ 1694.841536][ T4378] usb 4-1: Manufacturer: syz [ 1694.841550][ T4378] usb 4-1: SerialNumber: syz [ 1694.864230][ T4378] usb 4-1: config 0 descriptor?? [ 1694.868353][ T4378] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 1694.953569][ T31] kauditd_printk_skb: 50 callbacks suppressed [ 1694.953589][ T31] audit: type=1326 audit(1791354967.874:18215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12500 comm="syz.2.8279" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f100739e199 code=0x0 [ 1695.730508][T12513] usb usb8: usbfs: process 12513 (syz.2.8281) did not claim interface 0 before use [ 1696.101227][T12521] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1696.101245][T12521] block device autoloading is deprecated and will be removed. [ 1696.131512][T12492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1696.141675][T12492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1696.445369][ T4378] gspca_sonixj: reg_w1 err -110 [ 1696.500937][ T4378] sonixj 4-1:0.0: probe with driver sonixj failed with error -110 [ 1699.756911][ T4378] usb 4-1: USB disconnect, device number 56 [ 1699.928837][T12567] netlink: 'syz.2.8285': attribute type 2 has an invalid length. [ 1699.957302][T12579] loop7: detected capacity change from 0 to 16384 [ 1700.056749][T12574] netlink: 48 bytes leftover after parsing attributes in process `syz.6.8287'. [ 1700.087673][T12567] loop7: detected capacity change from 16384 to 16383 [ 1700.372184][ T4378] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 1700.525368][ T4378] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1700.529045][ T4378] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1700.529095][ T4378] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1700.529130][ T4378] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 1700.529154][ T4378] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1700.531615][ T4378] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1700.531640][ T4378] usb 4-1: Manufacturer: syz [ 1700.539322][ T4378] usb 4-1: config 0 descriptor?? [ 1700.841999][ T4378] rc_core: IR keymap rc-hauppauge not found [ 1700.842019][ T4378] Registered IR keymap rc-empty [ 1700.843522][ T4378] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1700.868816][ T4378] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1700.878588][T12618] PKCS7: Unsupported SignerInfo version [ 1700.884358][ T4378] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1700.900007][ T4378] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input190 [ 1700.910209][ T4378] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1700.924366][ T4378] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1700.943651][ T4378] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1700.964699][ T4378] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1700.983703][ T4378] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1701.004512][ T4378] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1701.024434][ T4378] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1701.042473][ T4378] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1701.047188][T12633] FAULT_INJECTION: forcing a failure. [ 1701.047188][T12633] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1701.047215][T12633] CPU: 0 UID: 0 PID: 12633 Comm: syz.8.8292 Tainted: G L syzkaller #0 PREEMPT(full) [ 1701.047241][T12633] Tainted: [L]=SOFTLOCKUP [ 1701.047248][T12633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1701.047259][T12633] Call Trace: [ 1701.047266][T12633] [ 1701.047275][T12633] dump_stack_lvl+0xe8/0x150 [ 1701.047302][T12633] should_fail_ex+0x410/0x560 [ 1701.047318][T12633] _copy_from_user+0x2d/0xb0 [ 1701.047335][T12633] __copy_msghdr+0x390/0x590 [ 1701.047356][T12633] ___sys_sendmsg+0x213/0x360 [ 1701.047383][T12633] ? __lock_acquire+0x747/0x2de0 [ 1701.047408][T12633] ? __pfx____sys_sendmsg+0x10/0x10 [ 1701.047456][T12633] ? __fget_files+0x2a/0x420 [ 1701.047472][T12633] ? __fget_files+0x3a2/0x420 [ 1701.047491][T12633] __x64_sys_sendmsg+0x1b1/0x290 [ 1701.047513][T12633] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1701.047572][T12633] do_syscall_64+0x166/0x520 [ 1701.047597][T12633] ? trace_irq_disable+0x3b/0x140 [ 1701.047611][T12633] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1701.047621][T12633] ? clear_bhb_loop+0x70/0xc0 [ 1701.047634][T12633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1701.047644][T12633] RIP: 0033:0x7ff6ec79e199 [ 1701.047655][T12633] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1701.047670][T12633] RSP: 002b:00007ff6ed74d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1701.047690][T12633] RAX: ffffffffffffffda RBX: 00007ff6eca25fa0 RCX: 00007ff6ec79e199 [ 1701.047704][T12633] RDX: 0000000000000090 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1701.047714][T12633] RBP: 00007ff6ed74d090 R08: 0000000000000000 R09: 0000000000000000 [ 1701.047726][T12633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1701.047737][T12633] R13: 00007ff6eca26038 R14: 00007ff6eca25fa0 R15: 00007ff6ecb4fa48 [ 1701.047766][T12633] [ 1701.073530][ T4378] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1701.134085][ T4378] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1701.267138][ T4378] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1701.267162][ T4378] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1701.313312][ T4378] usb 4-1: USB disconnect, device number 57 [ 1702.991922][T18475] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1703.144477][T18475] usb 3-1: Using ep0 maxpacket: 16 [ 1703.145179][T18475] usb 3-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 1703.146207][T18475] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 1703.146230][T18475] usb 3-1: config 0 has no interface number 0 [ 1703.146257][T18475] usb 3-1: config 0 interface 255 has no altsetting 0 [ 1703.206891][T18475] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1703.206919][T18475] usb 3-1: Product: syz [ 1703.206933][T18475] usb 3-1: Manufacturer: syz [ 1703.206955][T18475] usb 3-1: SerialNumber: syz [ 1703.210445][T18475] usb 3-1: config 0 descriptor?? [ 1703.246727][T18475] ums-onetouch 3-1:0.255: USB Mass Storage device detected [ 1703.445485][T12704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1703.447854][T12704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1703.449701][T11745] usb 3-1: USB disconnect, device number 105 [ 1703.531585][T12779] FAULT_INJECTION: forcing a failure. [ 1703.531585][T12779] name failslab, interval 1, probability 0, space 0, times 0 [ 1703.531608][T12779] CPU: 1 UID: 0 PID: 12779 Comm: syz.7.8303 Tainted: G L syzkaller #0 PREEMPT(full) [ 1703.531623][T12779] Tainted: [L]=SOFTLOCKUP [ 1703.531627][T12779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1703.531634][T12779] Call Trace: [ 1703.531638][T12779] [ 1703.531644][T12779] dump_stack_lvl+0xe8/0x150 [ 1703.531664][T12779] should_fail_ex+0x410/0x560 [ 1703.531680][T12779] ? __alloc_skb+0x1db/0x7a0 [ 1703.531695][T12779] should_failslab+0xa8/0x100 [ 1703.531710][T12779] ? __alloc_skb+0x1db/0x7a0 [ 1703.531723][T12779] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1703.531735][T12779] ? __alloc_skb+0x18d/0x7a0 [ 1703.531749][T12779] ? __alloc_skb+0x1db/0x7a0 [ 1703.531765][T12779] __alloc_skb+0x1db/0x7a0 [ 1703.531794][T12779] netlink_sendmsg+0x5d4/0xb40 [ 1703.531819][T12779] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1703.531849][T12779] ? apparmor_socket_sendmsg+0x98/0x360 [ 1703.531873][T12779] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1703.531892][T12779] sock_sendmsg_nosec+0x13a/0x180 [ 1703.531915][T12779] ____sys_sendmsg+0x54e/0x850 [ 1703.531947][T12779] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1703.531981][T12779] ? import_iovec+0x73/0xa0 [ 1703.532008][T12779] ___sys_sendmsg+0x2a5/0x360 [ 1703.532033][T12779] ? __lock_acquire+0x747/0x2de0 [ 1703.532056][T12779] ? __pfx____sys_sendmsg+0x10/0x10 [ 1703.532112][T12779] ? __fget_files+0x2a/0x420 [ 1703.532137][T12779] ? __fget_files+0x3a2/0x420 [ 1703.532171][T12779] __x64_sys_sendmsg+0x1b1/0x290 [ 1703.532201][T12779] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1703.532248][T12779] do_syscall_64+0x166/0x520 [ 1703.532282][T12779] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1703.532302][T12779] ? clear_bhb_loop+0x70/0xc0 [ 1703.532324][T12779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1703.532342][T12779] RIP: 0033:0x7f86a5b9e199 [ 1703.532360][T12779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1703.532375][T12779] RSP: 002b:00007f86a6ad9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1703.532395][T12779] RAX: ffffffffffffffda RBX: 00007f86a5e25fa0 RCX: 00007f86a5b9e199 [ 1703.532409][T12779] RDX: 0000000000000090 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1703.532421][T12779] RBP: 00007f86a6ad9090 R08: 0000000000000000 R09: 0000000000000000 [ 1703.532433][T12779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1703.532444][T12779] R13: 00007f86a5e26038 R14: 00007f86a5e25fa0 R15: 00007f86a5f4fa48 [ 1703.532473][T12779] [ 1703.583595][ T1687] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1703.779349][ T1687] usb 9-1: Using ep0 maxpacket: 8 [ 1703.796122][ T1687] usb 9-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 1703.833186][ T1687] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1703.833203][ T1687] usb 9-1: Product: syz [ 1703.833212][ T1687] usb 9-1: Manufacturer: syz [ 1703.833219][ T1687] usb 9-1: SerialNumber: syz [ 1703.835211][ T1687] usb 9-1: config 0 descriptor?? [ 1703.839337][ T1687] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 1704.350562][T21612] Bluetooth: hci5: unexpected event for opcode 0x1003 [ 1704.441466][T12807] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8308'. [ 1704.441910][T12813] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8308'. [ 1704.523676][T12807] bond0: (slave bond_slave_1): Releasing backup interface [ 1705.022143][ T5687] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1705.184099][ T5687] usb 4-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 0.00 [ 1705.185390][ T5687] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1705.187511][ T5687] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1705.187527][ T5687] usb 4-1: Product: syz [ 1705.187535][ T5687] usb 4-1: Manufacturer: syz [ 1705.187542][ T5687] usb 4-1: SerialNumber: syz [ 1705.236704][ T5687] kobil_sct 4-1:1.0: required endpoints missing [ 1705.360494][T12860] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8317'. [ 1705.464438][T12866] bridge3: entered promiscuous mode [ 1705.858767][T12756] netlink: 48 bytes leftover after parsing attributes in process `syz.8.8301'. [ 1705.876724][ T1687] gspca_sonixj: reg_w1 err -71 [ 1705.876806][ T1687] sonixj 9-1:0.0: probe with driver sonixj failed with error -71 [ 1705.881286][ T1687] usb 9-1: USB disconnect, device number 13 [ 1706.600258][T12903] nvme_fabrics: found same hostid f683b692-f7fb-4e1c-94f6-81e8dd74b730 but different hostnqn nq [ 1706.601661][T12903] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8327'. [ 1706.654282][ T4378] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1706.802232][ T4378] usb 9-1: Using ep0 maxpacket: 16 [ 1706.809611][ T4378] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1706.809660][ T4378] usb 9-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=65.08 [ 1706.810588][ T4378] usb 9-1: config 6 has an invalid interface number: 200 but max is 0 [ 1706.810639][ T4378] usb 9-1: config 6 has no interface number 0 [ 1706.810662][ T4378] usb 9-1: config 6 interface 200 has no altsetting 0 [ 1706.815692][ T4378] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1706.815718][ T4378] usb 9-1: Product: syz [ 1706.815731][ T4378] usb 9-1: Manufacturer: syz [ 1706.815744][ T4378] usb 9-1: SerialNumber: syz [ 1707.031499][ T31] audit: type=1326 audit(1791354979.944:18216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12889 comm="syz.8.8324" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ec79e199 code=0x7ffc0000 [ 1707.033138][ T31] audit: type=1326 audit(1791354979.954:18217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12889 comm="syz.8.8324" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7ff6ec79e199 code=0x7ffc0000 [ 1707.033399][ T31] audit: type=1326 audit(1791354979.954:18218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12889 comm="syz.8.8324" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ec79e199 code=0x7ffc0000 [ 1707.033721][ T31] audit: type=1326 audit(1791354979.954:18219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12889 comm="syz.8.8324" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff6ec79e199 code=0x7ffc0000 [ 1707.033937][ T31] audit: type=1326 audit(1791354979.954:18220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12889 comm="syz.8.8324" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ec79e199 code=0x7ffc0000 [ 1707.034260][ T31] audit: type=1326 audit(1791354979.954:18221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12889 comm="syz.8.8324" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7ff6ec79e199 code=0x7ffc0000 [ 1707.034478][ T31] audit: type=1326 audit(1791354979.954:18222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12889 comm="syz.8.8324" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ec79e199 code=0x7ffc0000 [ 1707.034723][ T31] audit: type=1326 audit(1791354979.954:18223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12889 comm="syz.8.8324" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ec79e199 code=0x7ffc0000 [ 1707.035005][ T31] audit: type=1326 audit(1791354979.954:18224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12889 comm="syz.8.8324" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff6ec79e199 code=0x7ffc0000 [ 1707.035423][ T31] audit: type=1326 audit(1791354979.954:18225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12889 comm="syz.8.8324" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ec79e199 code=0x7ffc0000 [ 1707.349348][ T4378] bfusb 9-1:6.200: probe with driver bfusb failed with error -5 [ 1707.362904][ T4378] usb 9-1: USB disconnect, device number 14 [ 1707.557981][T14371] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1707.584978][T14371] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1707.587145][T14371] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1707.591290][T14371] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1707.606718][T14371] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1707.828370][T18475] usb 4-1: USB disconnect, device number 58 [ 1708.098016][T13020] nvme_fabrics: found same hostid f683b692-f7fb-4e1c-94f6-81e8dd74b730 but different hostnqn nq [ 1708.225804][ T1687] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1708.292517][ T5687] usb 9-1: new full-speed USB device number 15 using dummy_hcd [ 1708.441919][ T5687] usb 9-1: device descriptor read/64, error -71 [ 1708.635973][T18475] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1708.687182][ T5687] usb 9-1: new full-speed USB device number 16 using dummy_hcd [ 1708.762250][T18475] usb 4-1: device descriptor read/64, error -71 [ 1708.779573][ T1883] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1708.779604][ T1883] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1708.812818][T11296] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1708.829560][ T1907] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1708.842665][ T5687] usb 9-1: device descriptor read/64, error -71 [ 1708.881126][T12950] bridge0: port 1(bridge_slave_0) entered blocking state [ 1708.881264][T12950] bridge0: port 1(bridge_slave_0) entered disabled state [ 1708.881427][T12950] bridge_slave_0: entered allmulticast mode [ 1708.896316][T12950] bridge_slave_0: entered promiscuous mode [ 1708.918772][T12950] bridge0: port 2(bridge_slave_1) entered blocking state [ 1708.918866][T12950] bridge0: port 2(bridge_slave_1) entered disabled state [ 1708.919252][T12950] bridge_slave_1: entered allmulticast mode [ 1708.929603][T12950] bridge_slave_1: entered promiscuous mode [ 1708.953376][ T5687] usb usb9-port1: attempt power cycle [ 1709.003161][T18475] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1709.037073][ T1883] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1709.037108][ T1883] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1709.089601][T12950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1709.126838][T12950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1709.141926][T18475] usb 4-1: device descriptor read/64, error -71 [ 1709.202109][ T1883] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1709.202144][ T1883] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1709.248911][T12950] team0: Port device team_slave_0 added [ 1709.259691][T18475] usb usb4-port1: attempt power cycle [ 1709.274458][T12950] team0: Port device team_slave_1 added [ 1709.312539][ T5687] usb 9-1: new full-speed USB device number 17 using dummy_hcd [ 1709.335282][ T5687] usb 9-1: device descriptor read/8, error -71 [ 1709.389737][ T1883] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1709.389763][ T1883] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1709.436143][T12950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1709.436162][T12950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1709.436184][T12950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1709.437745][T12950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1709.437759][T12950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1709.437782][T12950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1709.483062][T12950] hsr_slave_0: entered promiscuous mode [ 1709.484214][T12950] hsr_slave_1: entered promiscuous mode [ 1709.484904][T12950] debugfs: 'hsr0' already exists in 'hsr' [ 1709.484921][T12950] Cannot create hsr debugfs directory [ 1709.582409][ T5687] usb 9-1: new full-speed USB device number 18 using dummy_hcd [ 1709.592547][T18475] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1709.610606][ T5687] usb 9-1: device descriptor read/8, error -71 [ 1709.613071][T18475] usb 4-1: device descriptor read/8, error -71 [ 1709.723244][ T5687] usb usb9-port1: unable to enumerate USB device [ 1709.735593][T21612] Bluetooth: hci1: command tx timeout [ 1709.852209][T18475] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1709.875145][T18475] usb 4-1: device descriptor read/8, error -71 [ 1709.929424][ T1890] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1709.929654][ T1890] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1709.978512][ T1883] bridge_slave_1: left allmulticast mode [ 1709.978539][ T1883] bridge_slave_1: left promiscuous mode [ 1709.978748][ T1883] bridge0: port 2(bridge_slave_1) entered disabled state [ 1709.983896][T18475] usb usb4-port1: unable to enumerate USB device [ 1710.016280][ T1883] ¾x9ÿ: left allmulticast mode [ 1710.016309][ T1883] ¾x9ÿ: left promiscuous mode [ 1710.016520][ T1883] bridge0: port 1(1¾x9ÿ) entered disabled state [ 1710.048871][ T1883] lo: left allmulticast mode [ 1710.234066][T18475] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1710.376210][ T1883] gretap0 (unregistering): left allmulticast mode [ 1710.526431][ T1883] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1710.528426][ T1883] bond0 (unregistering): Released all slaves [ 1710.556194][ T1883] bond1 (unregistering): Released all slaves [ 1710.577100][ T1883] bond2 (unregistering): Released all slaves [ 1710.606839][ T1883] bond3 (unregistering): Released all slaves [ 1710.635073][ T1883] bond4 (unregistering): Released all slaves [ 1710.659643][ T1883] bond5 (unregistering): Released all slaves [ 1710.678644][ T1883] bond6 (unregistering): (slave veth3): Releasing active interface [ 1710.680537][ T1883] bond6 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1710.681704][ T1883] bond6 (unregistering): Released all slaves [ 1710.717581][ T1883] bond7 (unregistering): Released all slaves [ 1710.732862][ T1883] bond8 (unregistering): Released all slaves [ 1710.770751][ T5278] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1711.029251][ T1883] tipc: Disabling bearer [ 1711.031123][ T1883] tipc: Left network mode [ 1711.811875][T11745] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1711.819269][T21612] Bluetooth: hci1: command tx timeout [ 1711.975601][T11745] usb 4-1: Using ep0 maxpacket: 16 [ 1711.985564][T11745] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 1712.026047][T11745] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1712.026065][T11745] usb 4-1: Product: syz [ 1712.026074][T11745] usb 4-1: Manufacturer: syz [ 1712.026083][T11745] usb 4-1: SerialNumber: syz [ 1712.160687][T13359] netlink: 'syz.6.8347': attribute type 62 has an invalid length. [ 1712.235697][T11745] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 1712.237699][T11745] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1712.237890][T11745] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 1712.237916][T11745] usb 4-1: media controller created [ 1712.335808][T11745] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1712.565688][T11745] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1712.812963][T11745] dvb_usb_gl861 4-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 1712.834482][T11745] usb 4-1: USB disconnect, device number 63 [ 1712.837416][T13394] nvme_fabrics: found same hostid f683b692-f7fb-4e1c-94f6-81e8dd74b730 but different hostnqn nq [ 1713.121515][T13410] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1713.121543][T13410] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1713.219572][T13410] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1713.220043][T13410] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1713.251352][T13410] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1713.251460][T13410] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1713.282690][T13410] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1713.282707][T13410] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1713.390413][T13410] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1713.391129][T13410] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1713.513122][T12950] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1713.586112][T12950] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1713.588288][T12950] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1713.633612][T12950] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1713.634185][T12950] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1713.649179][T12950] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1713.669108][T12950] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1713.682823][T11745] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1713.690488][T12950] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1713.766443][T13453] fuse: Unknown parameter 'rootmodµ' [ 1713.836355][T11745] usb 4-1: Using ep0 maxpacket: 8 [ 1713.837242][T11745] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1713.838235][T11745] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1713.838276][T11745] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1713.838300][T11745] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 1713.838325][T11745] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1713.838345][T11745] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1713.840277][T11745] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1713.840300][T11745] usb 4-1: Product: syz [ 1713.840314][T11745] usb 4-1: Manufacturer: syz [ 1713.840327][T11745] usb 4-1: SerialNumber: syz [ 1713.848383][T11745] usb 4-1: config 0 descriptor?? [ 1713.892334][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1714.082346][T11745] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1714.082372][T11745] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1714.130957][T13470] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8354'. [ 1714.131152][T13470] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8354'. [ 1714.131337][T13470] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8354'. [ 1714.160900][T13470] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8354'. [ 1714.161098][T13470] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8354'. [ 1714.161299][T13470] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8354'. [ 1714.161497][T13470] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8354'. [ 1714.161692][T13470] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8354'. [ 1714.188938][T13470] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8354'. [ 1714.189136][T13470] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8354'. [ 1714.302620][T12950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1714.516497][T12950] 8021q: adding VLAN 0 to HW filter on device team0 [ 1714.549435][ T1890] bridge0: port 1(bridge_slave_0) entered blocking state [ 1714.549548][ T1890] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1714.598387][T11745] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 1714.598414][T11745] radio-si470x 4-1:0.0: si470x_get_scratch: si470x_get_report returned -110 [ 1714.598692][T11745] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 1714.673737][ T1883] hsr_slave_0: left promiscuous mode [ 1714.685264][ T1883] hsr_slave_1: left promiscuous mode [ 1714.686139][ T1883] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1714.686159][ T1883] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1714.694065][ T1883] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1714.694088][ T1883] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1714.735484][ T1883] veth1_macvtap: left promiscuous mode [ 1714.735672][ T1883] veth0_macvtap: left promiscuous mode [ 1714.735786][ T1883] veth1_vlan: left promiscuous mode [ 1714.737646][ T1883] veth0_vlan: left promiscuous mode [ 1714.946370][T18478] usb 4-1: USB disconnect, device number 64 [ 1715.091207][T13508] netlink: 'syz.7.8356': attribute type 2 has an invalid length. [ 1715.142491][T13510] vivid-000: ================= START STATUS ================= [ 1715.142510][T13510] vivid-000: Generate PTS: true [ 1715.142532][T13510] vivid-000: Generate SCR: true [ 1715.142549][T13510] tpg source WxH: 1280x720 (Y'CbCr) [ 1715.142561][T13510] tpg field: 1 [ 1715.142568][T13510] tpg crop: (0,0)/1280x720 [ 1715.142580][T13510] tpg compose: (0,0)/1280x720 [ 1715.142591][T13510] tpg colorspace: 3 [ 1715.142598][T13510] tpg transfer function: 0/2 [ 1715.142607][T13510] tpg Y'CbCr encoding: 0/1 [ 1715.142616][T13510] tpg quantization: 0/2 [ 1715.142625][T13510] tpg RGB range: 1/1 [ 1715.142634][T13510] vivid-000: ================== END STATUS ================== [ 1715.749121][ T1892] bridge0: port 2(bridge_slave_1) entered blocking state [ 1715.749223][ T1892] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1716.168589][T12950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1716.286337][T13548] nvme_fabrics: found same hostid f683b692-f7fb-4e1c-94f6-81e8dd74b730 but different hostnqn nq [ 1716.377635][T12950] veth0_vlan: entered promiscuous mode [ 1716.416958][T12950] veth1_vlan: entered promiscuous mode [ 1716.455080][ T1883] IPVS: stop unused estimator thread 0... [ 1716.641055][T12950] veth0_macvtap: entered promiscuous mode [ 1716.643152][T18475] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1716.646847][T12950] veth1_macvtap: entered promiscuous mode [ 1716.703737][T12950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1716.845477][T18475] usb 9-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1716.847920][T18475] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1716.847938][T12950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1716.847949][T18475] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1716.847970][T18475] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1716.850643][T18475] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1716.850667][T18475] usb 9-1: Product: syz [ 1716.850681][T18475] usb 9-1: Manufacturer: syz [ 1716.850695][T18475] usb 9-1: SerialNumber: syz [ 1716.860411][T18475] usb 9-1: config 0 descriptor?? [ 1716.878830][T13551] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1716.878961][T13551] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1716.881543][T18475] usb 9-1: ucan: probing device on interface #0 [ 1716.998168][T28199] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1717.117165][ T1890] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1717.117269][ T1890] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1717.190866][ T1890] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1717.190914][ T1890] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1717.259918][T28199] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1717.366079][T28201] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1717.366101][T28201] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1717.817217][T13637] macsec1: entered promiscuous mode [ 1717.817252][T13637] macsec1: entered allmulticast mode [ 1717.899032][T18475] usb 9-1: ucan: could not read protocol version, ret=-110 [ 1717.899058][T18475] usb 9-1: ucan: probe failed; try to update the device firmware [ 1718.073344][T11296] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1718.232338][T11296] usb 4-1: Using ep0 maxpacket: 32 [ 1718.237404][T11296] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1718.241243][T11296] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1718.241292][T11296] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1718.241317][T11296] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1718.241337][T11296] usb 4-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1718.241360][T11296] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1718.241392][T11296] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1718.321995][T11296] usb 4-1: config 0 descriptor?? [ 1718.754056][T11296] usbhid 4-1:0.0: can't add hid device: -71 [ 1718.754139][T11296] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1718.758930][T11296] usb 4-1: USB disconnect, device number 65 [ 1719.311600][T13736] nvme_fabrics: found same hostid f683b692-f7fb-4e1c-94f6-81e8dd74b730 but different hostnqn nq [ 1719.406027][T11296] usb 9-1: USB disconnect, device number 19 [ 1719.775238][T13766] netlink: 'syz.6.8373': attribute type 21 has an invalid length. [ 1719.775298][T13766] __nla_validate_parse: 54 callbacks suppressed [ 1719.775310][T13766] netlink: 132 bytes leftover after parsing attributes in process `syz.6.8373'. [ 1720.428648][T13789] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8374'. [ 1720.527171][ T31] kauditd_printk_skb: 34 callbacks suppressed [ 1720.527189][ T31] audit: type=1326 audit(1791354993.444:18260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13792 comm="syz.3.8375" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803d39e199 code=0x7ffc0000 [ 1720.527422][ T31] audit: type=1326 audit(1791354993.444:18261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13792 comm="syz.3.8375" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803d39e199 code=0x7ffc0000 [ 1720.527575][ T31] audit: type=1326 audit(1791354993.444:18262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13792 comm="syz.3.8375" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7f803d39e199 code=0x7ffc0000 [ 1720.529249][ T31] audit: type=1326 audit(1791354993.444:18263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13792 comm="syz.3.8375" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803d39e199 code=0x7ffc0000 [ 1720.529297][ T31] audit: type=1326 audit(1791354993.444:18264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13792 comm="syz.3.8375" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803d39e199 code=0x7ffc0000 [ 1720.529334][ T31] audit: type=1326 audit(1791354993.444:18265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13792 comm="syz.3.8375" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f803d39e199 code=0x7ffc0000 [ 1720.529965][ T31] audit: type=1326 audit(1791354993.444:18266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13792 comm="syz.3.8375" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803d39e199 code=0x7ffc0000 [ 1720.530769][ T31] audit: type=1326 audit(1791354993.444:18267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13792 comm="syz.3.8375" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803d39e199 code=0x7ffc0000 [ 1720.534857][T13794] netlink: 'syz.3.8375': attribute type 1 has an invalid length. [ 1720.535172][T13794] netlink: 'syz.3.8375': attribute type 1 has an invalid length. [ 1720.535441][T13794] netlink: 'syz.3.8375': attribute type 1 has an invalid length. [ 1720.535708][T13794] netlink: 'syz.3.8375': attribute type 1 has an invalid length. [ 1720.546491][ T31] audit: type=1326 audit(1791354993.454:18268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13792 comm="syz.3.8375" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f803d35e9ce code=0x7ffc0000 [ 1720.546539][ T31] audit: type=1326 audit(1791354993.454:18269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13792 comm="syz.3.8375" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f803d39de2b code=0x7ffc0000 [ 1720.553856][T13794] netlink: 'syz.3.8375': attribute type 1 has an invalid length. [ 1720.554243][T13794] netlink: 'syz.3.8375': attribute type 1 has an invalid length. [ 1720.554520][T13794] netlink: 'syz.3.8375': attribute type 1 has an invalid length. [ 1720.560199][T13794] netlink: 'syz.3.8375': attribute type 1 has an invalid length. [ 1720.571120][T13794] netlink: 'syz.3.8375': attribute type 1 has an invalid length. [ 1720.881881][T18475] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1721.032006][T18475] usb 4-1: Using ep0 maxpacket: 8 [ 1721.033097][T18475] usb 4-1: New USB device found, idVendor=1199, idProduct=0018, bcdDevice=9a.00 [ 1721.035187][T18475] usb 4-1: config 255 has an invalid interface number: 106 but max is 0 [ 1721.035210][T18475] usb 4-1: config 255 has an invalid descriptor of length 68, skipping remainder of the config [ 1721.035228][T18475] usb 4-1: config 255 has no interface number 0 [ 1721.035259][T18475] usb 4-1: config 255 interface 106 altsetting 15 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 1721.035273][T18475] usb 4-1: config 255 interface 106 altsetting 15 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 1721.035286][T18475] usb 4-1: config 255 interface 106 altsetting 15 has 3 endpoint descriptors, different from the interface descriptor's value: 7 [ 1721.035300][T18475] usb 4-1: config 255 interface 106 has no altsetting 0 [ 1721.039458][T18475] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1721.039479][T18475] usb 4-1: Product: syz [ 1721.039487][T18475] usb 4-1: Manufacturer: syz [ 1721.039494][T18475] usb 4-1: SerialNumber: syz [ 1721.431730][T18475] sierra 4-1:255.106: Sierra USB modem converter detected [ 1721.469245][T18475] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 1721.491254][T13823] netlink: 68 bytes leftover after parsing attributes in process `syz.8.8376'. [ 1721.501631][T18475] usb 4-1: USB disconnect, device number 66 [ 1721.526752][T18475] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1721.529783][T18475] sierra 4-1:255.106: device disconnected [ 1721.892003][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1721.899717][T13854] sctp: [Deprecated]: syz.2.8378 (pid 13854) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1721.899717][T13854] Use struct sctp_sack_info instead [ 1721.998942][T13860] nvme_fabrics: found same hostid f683b692-f7fb-4e1c-94f6-81e8dd74b730 but different hostnqn nq [ 1722.303304][T18475] usb 4-1: new full-speed USB device number 67 using dummy_hcd [ 1722.453593][T18475] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 1722.454692][T18475] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1722.454723][T18475] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1722.454761][T18475] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1722.462532][T18475] usb 4-1: config 0 descriptor?? [ 1722.464939][T13864] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1722.888489][T18475] steelseries 0003:1038:1410.0057: unknown main item tag 0x1 [ 1722.888526][T18475] steelseries 0003:1038:1410.0057: unknown main item tag 0x0 [ 1722.888600][T18475] steelseries 0003:1038:1410.0057: unknown main item tag 0x0 [ 1722.888627][T18475] steelseries 0003:1038:1410.0057: unknown main item tag 0x0 [ 1722.888652][T18475] steelseries 0003:1038:1410.0057: unknown main item tag 0x0 [ 1722.888678][T18475] steelseries 0003:1038:1410.0057: unknown main item tag 0x0 [ 1722.888703][T18475] steelseries 0003:1038:1410.0057: unknown main item tag 0x0 [ 1722.888728][T18475] steelseries 0003:1038:1410.0057: unknown main item tag 0x0 [ 1722.888752][T18475] steelseries 0003:1038:1410.0057: unknown main item tag 0x0 [ 1722.888778][T18475] steelseries 0003:1038:1410.0057: unknown main item tag 0x0 [ 1722.892323][T18475] steelseries 0003:1038:1410.0057: not enough fields in HID_OUTPUT_REPORT 0 [ 1723.088227][ T4378] usb 4-1: USB disconnect, device number 67 [ 1723.241983][T18475] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1723.394420][T18475] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1723.394517][T18475] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1723.396069][T18475] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1723.396092][T18475] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1723.398018][T18475] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1723.398042][T18475] usb 3-1: Product: syz [ 1723.398056][T18475] usb 3-1: Manufacturer: syz [ 1723.398069][T18475] usb 3-1: SerialNumber: syz [ 1723.470961][T18475] usb 3-1: selecting invalid altsetting 1 [ 1723.471366][T18475] usb 3-1: unit 6 not found! [ 1723.527840][T18475] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1723.583495][T12560] udevd[12560]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1724.027673][T13952] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8387'. [ 1724.322258][ T1687] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1724.366068][T13964] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1724.484321][ T1687] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1724.485292][ T1687] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1724.485327][ T1687] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1724.487308][ T1687] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1724.487331][ T1687] usb 4-1: Product: syz [ 1724.487348][ T1687] usb 4-1: Manufacturer: syz [ 1724.487361][ T1687] usb 4-1: SerialNumber: syz [ 1724.490061][T13952] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1724.579967][T13971] nvme_fabrics: found same hostid f683b692-f7fb-4e1c-94f6-81e8dd74b730 but different hostnqn nq [ 1724.693584][T13952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1724.695427][T13952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1724.720352][ T1687] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 1724.735488][ T1687] usb 4-1: USB disconnect, device number 68 [ 1725.142136][ T1687] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1725.301889][ T1687] usb 4-1: Using ep0 maxpacket: 8 [ 1725.302835][ T1687] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1725.303991][ T1687] usb 4-1: config index 0 descriptor too short (expected 301, got 72) [ 1725.304013][ T1687] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1725.304117][ T1687] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1725.304137][ T1687] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1725.304160][ T1687] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1725.304181][ T1687] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25616, setting to 1024 [ 1725.304220][ T1687] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1725.316648][T13952] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1725.531119][ T1687] usb 4-1: usb_control_msg returned -71 [ 1725.531165][ T1687] usbtmc 4-1:16.0: can't read capabilities [ 1725.560358][ T1687] usb 4-1: USB disconnect, device number 69 [ 1725.911979][ T4378] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1726.008694][T18475] usb 3-1: USB disconnect, device number 106 [ 1726.043800][ T4378] usb 9-1: device descriptor read/64, error -71 [ 1726.281972][ T4378] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1726.362038][T18475] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1726.411977][ T4378] usb 9-1: device descriptor read/64, error -71 [ 1726.502040][ T923] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1726.519696][T18475] usb 3-1: Using ep0 maxpacket: 8 [ 1726.520259][T18475] usb 3-1: New USB device found, idVendor=0497, idProduct=c001, bcdDevice=6c.24 [ 1726.521167][T18475] usb 3-1: config 0 has an invalid interface number: 125 but max is 0 [ 1726.521190][T18475] usb 3-1: config 0 has no interface number 0 [ 1726.521231][T18475] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1726.522776][ T4378] usb usb9-port1: attempt power cycle [ 1726.526868][T18475] usb 3-1: config 0 descriptor?? [ 1726.558785][T18475] gspca_main: spca501-2.14.0 probing 0497:c001 [ 1726.652650][ T923] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1726.653635][ T923] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1726.653667][ T923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1726.653681][ T923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1726.653714][ T923] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1726.653756][ T923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1726.656543][ T923] usb 4-1: config 0 descriptor?? [ 1726.657392][T14040] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1726.751697][T14027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1726.752316][T14027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1726.861952][ T4378] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1726.883146][ T4378] usb 9-1: device descriptor read/8, error -71 [ 1727.081351][ T923] plantronics 0003:047F:FFFF.0058: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1727.121993][ T4378] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 1727.148144][ T4378] usb 9-1: device descriptor read/8, error -71 [ 1727.253244][ T4378] usb usb9-port1: unable to enumerate USB device [ 1727.302122][T18475] gspca_spca501: reg write: error -110 [ 1727.302137][T18475] spca501 3-1:0.125: Reg write failed for 0x02,0xa048,0x00 [ 1727.302187][T18475] spca501 3-1:0.125: probe with driver spca501 failed with error -22 [ 1727.637836][ T5687] usb 3-1: USB disconnect, device number 107 [ 1727.710120][ T1883] IPVS: starting estimator thread 0... [ 1727.792076][T14076] IPVS: using max 40 ests per chain, 96000 per kthread [ 1727.918552][T18475] usb 4-1: USB disconnect, device number 70 [ 1728.062594][ T1687] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1728.171100][T14107] nvme_fabrics: found same hostid f683b692-f7fb-4e1c-94f6-81e8dd74b730 but different hostnqn nq [ 1728.212949][ T1687] usb 3-1: Using ep0 maxpacket: 16 [ 1728.213607][ T1687] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1728.245587][ T1687] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1728.245606][ T1687] usb 3-1: Product: syz [ 1728.245614][ T1687] usb 3-1: Manufacturer: syz [ 1728.245622][ T1687] usb 3-1: SerialNumber: syz [ 1728.250191][ T1687] usb 3-1: config 0 descriptor?? [ 1728.257842][ T1687] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1728.328628][T14114] loop7: detected capacity change from 0 to 7 [ 1728.329577][T14114] loop7: [ 1728.329598][T14114] loop7: partition table partially beyond EOD, truncated [ 1728.517391][T14121] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8405'. [ 1728.589018][T14128] fuse: Unknown parameter '#¨0x0000000000000003' [ 1729.173771][ T1687] ssu100 3-1:0.0: probe with driver ssu100 failed with error -110 [ 1729.621399][T14143] binder: transaction release 238 bad handle 1, ret = -22 [ 1729.997696][T14161] nvme_fabrics: found same hostid f683b692-f7fb-4e1c-94f6-81e8dd74b730 but different hostnqn nq [ 1730.216075][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.216134][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.342005][ T1687] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1730.472983][ T1687] usb 4-1: device descriptor read/64, error -71 [ 1730.502637][T11296] usb 9-1: new full-speed USB device number 24 using dummy_hcd [ 1730.652609][T11296] usb 9-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1730.653718][T11296] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1730.653737][T11296] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1730.653751][T11296] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1730.655692][T11296] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1730.655715][T11296] usb 9-1: Product: syz [ 1730.655729][T11296] usb 9-1: Manufacturer: syz [ 1730.655738][T11296] usb 9-1: SerialNumber: syz [ 1730.657878][T11296] usb 9-1: config 0 descriptor?? [ 1730.658557][T14169] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22 [ 1730.734460][ T1687] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1730.779818][ T923] usb 3-1: USB disconnect, device number 108 [ 1730.800461][T11296] rc_core: IR keymap rc-streamzap not found [ 1730.800474][T11296] Registered IR keymap rc-empty [ 1730.801199][T11296] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 1730.812529][T11296] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input192 [ 1730.874518][T14169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1730.874957][T14169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1730.892765][ T1687] usb 4-1: device descriptor read/64, error -71 [ 1730.907603][ T4944] usb 9-1: USB disconnect, device number 24 [ 1730.992393][ T1687] usb usb4-port1: attempt power cycle [ 1731.222018][ T923] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1731.332182][ T1687] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1731.363268][ T1687] usb 4-1: device descriptor read/8, error -71 [ 1731.374595][ T923] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1731.374645][ T923] usb 3-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 1731.375781][ T923] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1731.375802][ T923] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1731.375821][ T923] usb 3-1: config 1 has no interface number 0 [ 1731.375855][ T923] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1731.378723][ T923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1731.378746][ T923] usb 3-1: Product: syz [ 1731.378759][ T923] usb 3-1: Manufacturer: syz [ 1731.378773][ T923] usb 3-1: SerialNumber: syz [ 1731.544641][ T31] kauditd_printk_skb: 100 callbacks suppressed [ 1731.544661][ T31] audit: type=1326 audit(1791355004.464:18370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14221 comm="syz.8.8419" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ec79e199 code=0x7ffc0000 [ 1731.544766][ T31] audit: type=1326 audit(1791355004.464:18371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14221 comm="syz.8.8419" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ec79e199 code=0x7ffc0000 [ 1731.545188][ T31] audit: type=1326 audit(1791355004.464:18372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14221 comm="syz.8.8419" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff6ec79e199 code=0x7ffc0000 [ 1731.545438][ T31] audit: type=1326 audit(1791355004.464:18373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14221 comm="syz.8.8419" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ec79e199 code=0x7ffc0000 [ 1731.545594][ T31] audit: type=1326 audit(1791355004.464:18374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14221 comm="syz.8.8419" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ec79e199 code=0x7ffc0000 [ 1731.545931][ T31] audit: type=1326 audit(1791355004.464:18375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14221 comm="syz.8.8419" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff6ec79e199 code=0x7ffc0000 [ 1731.546151][ T31] audit: type=1326 audit(1791355004.464:18376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14221 comm="syz.8.8419" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ec79e199 code=0x7ffc0000 [ 1731.546313][ T31] audit: type=1326 audit(1791355004.464:18377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14221 comm="syz.8.8419" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ec79e199 code=0x7ffc0000 [ 1731.546739][ T31] audit: type=1326 audit(1791355004.464:18378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14221 comm="syz.8.8419" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7ff6ec79e199 code=0x7ffc0000 [ 1731.547185][ T31] audit: type=1326 audit(1791355004.464:18379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14221 comm="syz.8.8419" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ec79e199 code=0x7ffc0000 [ 1731.632739][ T1687] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1731.708201][ T1687] usb 4-1: device descriptor read/8, error -71 [ 1731.822818][ T1687] usb usb4-port1: unable to enumerate USB device [ 1732.116015][ T923] snd-usb-us122l 3-1:1.1: usb_set_interface error [ 1732.116240][ T923] snd-usb-us122l 3-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 1732.127568][ T923] usb 3-1: USB disconnect, device number 109 [ 1732.532810][ T923] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1732.581916][ T1687] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 1732.661981][ T923] usb 3-1: device descriptor read/64, error -71 [ 1732.752170][ T1687] usb 9-1: Using ep0 maxpacket: 32 [ 1732.755343][ T1687] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1732.755394][ T1687] usb 9-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice= 0.40 [ 1732.756544][ T1687] usb 9-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1732.760079][ T1687] usb 9-1: language id specifier not provided by device, defaulting to English [ 1732.790325][T14254] nvme_fabrics: found same hostid f683b692-f7fb-4e1c-94f6-81e8dd74b730 but different hostnqn nq [ 1732.821754][ T1687] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1732.821977][ T1687] usb 9-1: Product: syz [ 1732.821993][ T1687] usb 9-1: Manufacturer: syz [ 1732.822008][ T1687] usb 9-1: SerialNumber: syz [ 1732.896153][T14258] sch_fq: defrate 16 ignored. [ 1732.902727][ T923] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1733.032060][ T923] usb 3-1: device descriptor read/64, error -71 [ 1733.165807][ T923] usb usb3-port1: attempt power cycle [ 1733.213888][ T1687] usb 9-1: 1:1 : bogus bTerminalLink 5 [ 1733.277113][ T1687] usb 9-1: USB disconnect, device number 25 [ 1733.349911][T12560] udevd[12560]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1733.502577][ T923] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1733.524925][ T923] usb 3-1: device descriptor read/8, error -71 [ 1733.616809][T14324] validate_nla: 10 callbacks suppressed [ 1733.616828][T14324] netlink: 'syz.3.8430': attribute type 21 has an invalid length. [ 1733.616881][T14324] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8430'. [ 1733.762058][ T923] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1733.783515][ T923] usb 3-1: device descriptor read/8, error -71 [ 1733.892030][T11296] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1733.892538][ T923] usb usb3-port1: unable to enumerate USB device [ 1734.042405][T11296] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1734.043418][T11296] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1734.043440][T11296] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1734.045347][T11296] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1734.045371][T11296] usb 4-1: Product: syz [ 1734.045385][T11296] usb 4-1: Manufacturer: syz [ 1734.045395][T11296] usb 4-1: SerialNumber: syz [ 1734.048010][T14324] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1734.253259][T14324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1734.254684][T14324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1734.261182][T11296] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 1734.271688][T11296] usb 4-1: USB disconnect, device number 75 [ 1734.701988][ T4378] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1734.852695][ T4378] usb 4-1: Using ep0 maxpacket: 8 [ 1734.853255][ T4378] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1734.854256][ T4378] usb 4-1: config index 0 descriptor too short (expected 301, got 72) [ 1734.854280][ T4378] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1734.854320][ T4378] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1734.854341][ T4378] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1734.854369][ T4378] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1734.854382][ T4378] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25616, setting to 1024 [ 1734.854405][ T4378] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1734.857725][T14324] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1735.075503][ T4378] usb 4-1: usb_control_msg returned -71 [ 1735.075550][ T4378] usbtmc 4-1:16.0: can't read capabilities [ 1735.108935][ T4378] usb 4-1: USB disconnect, device number 76 [ 1735.256117][T14378] nvme_fabrics: found same hostid f683b692-f7fb-4e1c-94f6-81e8dd74b730 but different hostnqn nq [ 1737.139992][T14407] openvswitch: netlink: IPv4 tun info is not correct [ 1737.221544][T14409] dummy0: entered promiscuous mode [ 1737.237751][T14409] dummy0: left promiscuous mode [ 1737.312515][ T4378] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 1737.397010][T14418] bridge0: port 2(bridge_slave_1) entered disabled state [ 1737.397574][T14418] bridge0: port 1(bridge_slave_0) entered disabled state [ 1737.398984][T14418] bridge0: entered allmulticast mode [ 1737.472049][ T4378] usb 9-1: Using ep0 maxpacket: 16 [ 1737.478150][ T4378] usb 9-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1737.481541][ T4378] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1737.481562][ T4378] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1737.481574][ T4378] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1737.481593][ T4378] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1737.521119][ T4378] usb 9-1: config 0 descriptor?? [ 1737.586620][T14424] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8445'. [ 1737.590408][T14424] Cannot find set identified by id 0 to match [ 1737.817053][T14452] ip6tnl0: entered allmulticast mode [ 1737.835145][T14452] netlink: 'syz.6.8447': attribute type 1 has an invalid length. [ 1737.892075][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1737.894962][T14452] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1738.075134][T14498] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8448'. [ 1738.204787][T14401] netlink: 20 bytes leftover after parsing attributes in process `syz.8.8441'. [ 1738.205951][T14401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1738.206306][T14401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1738.206814][T14401] netlink: 232 bytes leftover after parsing attributes in process `syz.8.8441'. [ 1738.212325][ T1687] usb 9-1: USB disconnect, device number 26 [ 1738.363783][T24694] IPVS: starting estimator thread 0... [ 1738.364090][T14501] IPVS: ip_vs_add_dest(): server weight less than zero [ 1738.452562][T14527] IPVS: using max 56 ests per chain, 134400 per kthread [ 1739.341015][ T31] kauditd_printk_skb: 16 callbacks suppressed [ 1739.341033][ T31] audit: type=1326 audit(1791355012.254:18396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14556 comm="syz.8.8455" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ec79e199 code=0x7ffc0000 [ 1739.341076][ T31] audit: type=1326 audit(1791355012.254:18397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14556 comm="syz.8.8455" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ec79e199 code=0x7ffc0000 [ 1739.405576][ T31] audit: type=1326 audit(1791355012.324:18398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14556 comm="syz.8.8455" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff6ec79e199 code=0x7ffc0000 [ 1739.405796][ T31] audit: type=1326 audit(1791355012.324:18399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14556 comm="syz.8.8455" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ec79e199 code=0x7ffc0000 [ 1739.406870][ T31] audit: type=1326 audit(1791355012.324:18400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14556 comm="syz.8.8455" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff6ec79e199 code=0x7ffc0000 [ 1739.406981][ T31] audit: type=1326 audit(1791355012.324:18401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14556 comm="syz.8.8455" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff6ec79e199 code=0x7ffc0000 [ 1739.407112][ T31] audit: type=1326 audit(1791355012.324:18402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14556 comm="syz.8.8455" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff6ec79e199 code=0x7ffc0000 [ 1739.407233][ T31] audit: type=1326 audit(1791355012.324:18403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14556 comm="syz.8.8455" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff6ec79e199 code=0x7ffc0000 [ 1739.407355][ T31] audit: type=1326 audit(1791355012.324:18404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14556 comm="syz.8.8455" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff6ec79e199 code=0x7ffc0000 [ 1739.407537][ T31] audit: type=1326 audit(1791355012.324:18405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14556 comm="syz.8.8455" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff6ec79e199 code=0x7ffc0000 [ 1739.408326][T14560] binder: 14556:14560 ioctl c0306201 0 returned -14 [ 1739.632929][T14563] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 1739.959659][T14572] fuse: Unknown parameter 'fdßv8õåÀãÁ¾ˆñèC�n9\ý—¶…÷5�êêôÕ õYa~Sp0ŸMæ¸êôç©@VH' Õ]²Rw—–8ìïÕ+�4øú7a·ž½­ŽöÈ0x0000000000000008' [ 1740.028847][T14575] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1740.059693][T14575] netlink: 'syz.3.8459': attribute type 17 has an invalid length. [ 1740.696095][T14611] input: syz1 as /devices/virtual/input/input193 [ 1740.749361][T14609] syz_tun: entered allmulticast mode [ 1741.041918][T11296] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1741.195430][T11296] usb 4-1: Using ep0 maxpacket: 32 [ 1741.201487][T11296] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1741.228939][T11296] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1741.228960][T11296] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1741.228981][T11296] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1741.228993][T11296] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1741.229006][T11296] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1741.323295][T11296] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1741.323324][T11296] usb 4-1: Product: syz [ 1741.323337][T11296] usb 4-1: Manufacturer: syz [ 1741.323350][T11296] usb 4-1: SerialNumber: syz [ 1741.410170][T11296] usb 4-1: config 0 descriptor?? [ 1741.562518][T18475] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 1741.712665][T18475] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1741.713826][T18475] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1741.713856][T18475] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1741.713877][T18475] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1741.713915][T18475] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1741.721218][T18475] usb 9-1: config 0 descriptor?? [ 1741.844975][T14604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1741.876913][T14604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1741.938274][T14604] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 1742.002413][T11296] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 1742.002492][T11296] input input194: Device does not respond to id packet M [ 1742.007389][T11296] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 1742.007451][T11296] input input194: Device does not respond to id packet P [ 1742.011739][T11296] input input194: Device does not respond to id packet B [ 1742.179987][T18475] usbhid 9-1:0.0: can't add hid device: -71 [ 1742.180080][T18475] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1742.219390][T18475] usb 9-1: USB disconnect, device number 27 [ 1742.283486][T11296] input input194: Device does not respond to id packet N [ 1742.303572][ T4378] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1742.482626][ T4378] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1742.483729][ T4378] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1742.483759][ T4378] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1742.483803][ T4378] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1742.558398][ T4378] usb 3-1: config 0 descriptor?? [ 1742.619858][T14688] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3696184877 (59138958032 ns) > initial count (23075282992 ns). Using initial count to start timer. [ 1742.932525][T14705] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8473'. [ 1742.972592][ T4378] hid_parser_main: 27 callbacks suppressed [ 1742.972617][ T4378] cp2112 0003:10C4:EA90.005A: unknown main item tag 0x0 [ 1742.972650][ T4378] cp2112 0003:10C4:EA90.005A: unknown main item tag 0x0 [ 1742.972674][ T4378] cp2112 0003:10C4:EA90.005A: unknown main item tag 0x0 [ 1742.972696][ T4378] cp2112 0003:10C4:EA90.005A: unknown main item tag 0x0 [ 1742.972711][ T4378] cp2112 0003:10C4:EA90.005A: unknown main item tag 0x0 [ 1742.972725][ T4378] cp2112 0003:10C4:EA90.005A: unknown main item tag 0x0 [ 1742.972740][ T4378] cp2112 0003:10C4:EA90.005A: unknown main item tag 0x0 [ 1742.980962][ T4378] cp2112 0003:10C4:EA90.005A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 1743.025087][T14705] erspan0: entered promiscuous mode [ 1743.026933][T14705] macvtap1: entered promiscuous mode [ 1743.027059][T14705] macvtap1: entered allmulticast mode [ 1743.027067][T14705] erspan0: entered allmulticast mode [ 1743.169818][ T4378] cp2112 0003:10C4:EA90.005A: Part Number: 0x00 Device Version: 0x00 [ 1743.184470][ T4378] cp2112 0003:10C4:EA90.005A: error requesting SMBus config [ 1743.188928][ T4378] cp2112 0003:10C4:EA90.005A: probe with driver cp2112 failed with error -5 [ 1743.335779][T11296] iforce 4-1:0.0: usb_submit_urb failed: -110 [ 1743.336161][T11296] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 1743.336536][T11296] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 1743.336915][T11296] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 1743.385504][T14718] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1743.389113][T11296] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input194 [ 1743.468924][T14717] xt_connbytes: Forcing CT accounting to be enabled [ 1743.506070][T14717] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8474'. [ 1743.673761][T14726] netlink: 'syz.8.8475': attribute type 4 has an invalid length. [ 1743.673776][T14726] netlink: 'syz.8.8475': attribute type 17 has an invalid length. [ 1743.856526][ T4378] usb 4-1: USB disconnect, device number 77 [ 1743.875956][T14602] syz_tun: left allmulticast mode [ 1743.911883][ T923] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 1743.982996][T14742] 8021q: VLANs not supported on wg1 [ 1744.064987][ T923] usb 9-1: Using ep0 maxpacket: 32 [ 1744.079765][ T923] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1744.079797][ T923] usb 9-1: New USB device found, idVendor=1415, idProduct=2000, bcdDevice=2b.98 [ 1744.104349][ T923] usb 9-1: config 12 has an invalid interface number: 183 but max is 3 [ 1744.104378][ T923] usb 9-1: config 12 has an invalid interface number: 229 but max is 3 [ 1744.104398][ T923] usb 9-1: config 12 has 2 interfaces, different from the descriptor's value: 4 [ 1744.104418][ T923] usb 9-1: config 12 has no interface number 0 [ 1744.104434][ T923] usb 9-1: config 12 has no interface number 1 [ 1744.104471][ T923] usb 9-1: config 12 interface 183 has no altsetting 0 [ 1744.107773][ T923] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1744.107789][ T923] usb 9-1: Product: syz [ 1744.107797][ T923] usb 9-1: Manufacturer: syz [ 1744.107804][ T923] usb 9-1: SerialNumber: syz [ 1744.423948][T14757] netlink: 'syz.3.8479': attribute type 21 has an invalid length. [ 1744.424008][T14757] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8479'. [ 1744.461656][T14761] vlan2: entered allmulticast mode [ 1744.461680][T14761] bond0: entered allmulticast mode [ 1744.461693][T14761] bond_slave_0: entered allmulticast mode [ 1744.461708][T14761] bond_slave_1: entered allmulticast mode [ 1744.671949][T11296] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1744.822676][T11296] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1744.826735][T11296] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1744.827090][T11296] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1744.829345][T11296] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1744.829368][T11296] usb 4-1: Product: syz [ 1744.829383][T11296] usb 4-1: Manufacturer: syz [ 1744.829396][T11296] usb 4-1: SerialNumber: syz [ 1744.837430][T14757] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1745.013553][ T923] usb 9-1: USB disconnect, device number 28 [ 1745.038601][T31007] usb 3-1: USB disconnect, device number 114 [ 1745.065224][T14757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1745.065674][T14757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1745.089224][T11296] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 1745.118236][T11296] usb 4-1: USB disconnect, device number 78 [ 1745.592455][T11296] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1745.742088][T11296] usb 4-1: Using ep0 maxpacket: 8 [ 1745.743007][T11296] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1745.744541][T11296] usb 4-1: config index 0 descriptor too short (expected 301, got 72) [ 1745.744566][T11296] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1745.744615][T11296] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1745.744635][T11296] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1745.744678][T11296] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1745.744700][T11296] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25616, setting to 1024 [ 1745.744740][T11296] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1745.753919][T14757] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1745.794655][T14806] netlink: 48 bytes leftover after parsing attributes in process `syz.7.8481'. [ 1746.041360][T11296] usb 4-1: usb_control_msg returned -71 [ 1746.041409][T11296] usbtmc 4-1:16.0: can't read capabilities [ 1746.091092][T11296] usb 4-1: USB disconnect, device number 79 [ 1746.141050][T14808] netlink: 48 bytes leftover after parsing attributes in process `syz.8.8482'. [ 1746.230499][T14843] nvme_fabrics: found same hostid f683b692-f7fb-4e1c-94f6-81e8dd74b730 but different hostnqn nq [ 1746.397797][ T31] kauditd_printk_skb: 29 callbacks suppressed [ 1746.397815][ T31] audit: type=1326 audit(1791355019.314:18435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14853 comm="syz.7.8490" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f86a5b9e199 code=0x0 [ 1746.454459][T14856] bridge0: port 3(syz_tun) entered blocking state [ 1746.454723][T14856] bridge0: port 3(syz_tun) entered disabled state [ 1746.454886][T14856] syz_tun: entered allmulticast mode [ 1746.460177][T14856] syz_tun: entered promiscuous mode [ 1746.461339][T14856] bridge0: port 3(syz_tun) entered blocking state [ 1746.461441][T14856] bridge0: port 3(syz_tun) entered forwarding state [ 1746.523213][ T923] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 1746.683498][ T923] usb 9-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 1746.684465][ T923] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1747.052098][T18475] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1747.099046][T14845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1747.099535][T14845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1747.215042][T18475] usb 4-1: Using ep0 maxpacket: 16 [ 1747.217178][T18475] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1747.218454][T18475] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1747.218484][T18475] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1747.218504][T18475] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1747.218565][T18475] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1747.253036][T18475] usb 4-1: config 0 descriptor?? [ 1747.508373][ T923] usb 9-1: Firmware version (0.0) predates our first public release. [ 1747.508398][ T923] usb 9-1: Please update to version 0.2 or newer [ 1747.554789][T14875] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1747.678163][ T923] usb 9-1: USB disconnect, device number 29 [ 1747.720431][T18475] microsoft 0003:045E:07DA.005B: unknown main item tag 0x0 [ 1747.720456][T18475] microsoft 0003:045E:07DA.005B: unknown main item tag 0x0 [ 1747.720472][T18475] microsoft 0003:045E:07DA.005B: unknown main item tag 0x0 [ 1747.756865][T18475] microsoft 0003:045E:07DA.005B: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 1747.802130][T11296] usb 3-1: new full-speed USB device number 115 using dummy_hcd [ 1747.986212][T11296] usb 3-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 1747.987233][T11296] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1747.987269][T11296] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 1747.987283][T11296] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 1747.987296][T11296] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64 [ 1747.987310][T11296] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1748.013307][T11296] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1748.013335][T11296] usb 3-1: Product: syz [ 1748.013349][T11296] usb 3-1: Manufacturer: syz [ 1748.013360][T11296] usb 3-1: SerialNumber: syz [ 1748.087676][T11296] usb 3-1: config 0 descriptor?? [ 1748.089423][T14875] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1748.109372][T11296] ati_remote 3-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 1748.420972][T11296] usb 4-1: USB disconnect, device number 80 [ 1748.557877][T14951] netlink: 'syz.8.8497': attribute type 8 has an invalid length. [ 1748.690437][T14960] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8498'. [ 1749.571323][ T31] audit: type=1326 audit(1791355022.484:18436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14976 comm="syz.3.8501" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803d39e199 code=0x7ffc0000 [ 1749.599164][ T31] audit: type=1326 audit(1791355022.494:18437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14976 comm="syz.3.8501" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803d39e199 code=0x7ffc0000 [ 1749.611270][T14978] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8501'. [ 1749.632109][ T31] audit: type=1326 audit(1791355022.524:18438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14976 comm="syz.3.8501" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f803d39e199 code=0x7ffc0000 [ 1749.632171][ T31] audit: type=1326 audit(1791355022.524:18439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14976 comm="syz.3.8501" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803d39e199 code=0x7ffc0000 [ 1749.632209][ T31] audit: type=1326 audit(1791355022.524:18440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14976 comm="syz.3.8501" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803d39e199 code=0x7ffc0000 [ 1749.632246][ T31] audit: type=1326 audit(1791355022.524:18441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14976 comm="syz.3.8501" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f803d39e199 code=0x7ffc0000 [ 1749.632284][ T31] audit: type=1326 audit(1791355022.524:18442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14976 comm="syz.3.8501" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803d39e199 code=0x7ffc0000 [ 1749.632323][ T31] audit: type=1326 audit(1791355022.524:18443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14976 comm="syz.3.8501" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803d39e199 code=0x7ffc0000 [ 1750.131326][T14991] SET target dimension over the limit! [ 1750.142623][T14996] netlink: 9 bytes leftover after parsing attributes in process `syz.6.8505'. [ 1750.142752][T14996] 1·: renamed from c0· (while UP) [ 1750.153309][T14996] A link change request failed with some changes committed already. Interface c1· may have been left with an inconsistent configuration, please check. [ 1750.221944][T31007] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 1750.373019][T31007] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1750.374157][T31007] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1750.374188][T31007] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1750.374210][T31007] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1750.374250][T31007] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1750.438071][T31007] usb 9-1: config 0 descriptor?? [ 1750.453578][T14991] bond8: Unable to set down delay as MII monitoring is disabled [ 1750.493347][T14991] bond8 (unregistering): Released all slaves [ 1750.714044][T18475] usb 3-1: USB disconnect, device number 115 [ 1750.935948][T31007] plantronics 0003:047F:FFFF.005C: reserved main item tag 0xd [ 1751.034679][T31007] plantronics 0003:047F:FFFF.005C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1751.072601][ T31] audit: type=1326 audit(1791355023.994:18444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15069 comm="syz.2.8507" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006f19e199 code=0x7ffc0000 [ 1751.420892][T15088] syzkaller1: entered promiscuous mode [ 1751.420914][T15088] syzkaller1: entered allmulticast mode [ 1751.547616][T15096] loop8: detected capacity change from 0 to 16384 [ 1751.757627][T15088] batman_adv: batadv0: Adding interface: gretap1 [ 1751.757648][T15088] batman_adv: batadv0: Interface activated: gretap1 [ 1752.062894][T15096] loop8: detected capacity change from 16384 to 16383 [ 1752.124035][T15114] bridge0: port 3(syz_tun) entered blocking state [ 1752.124161][T15114] bridge0: port 3(syz_tun) entered disabled state [ 1752.124325][T15114] syz_tun: entered allmulticast mode [ 1752.138625][T15114] syz_tun: entered promiscuous mode [ 1752.146620][T15114] bridge0: port 3(syz_tun) entered blocking state [ 1752.146724][T15114] bridge0: port 3(syz_tun) entered forwarding state [ 1752.155822][T11296] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1752.316418][T31007] usb 9-1: reset high-speed USB device number 30 using dummy_hcd [ 1752.316686][T11296] usb 4-1: Using ep0 maxpacket: 16 [ 1752.318183][T11296] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 1752.319554][T11296] usb 4-1: config 0 has an invalid interface number: 107 but max is 0 [ 1752.319577][T11296] usb 4-1: config 0 has no interface number 0 [ 1752.319653][T11296] usb 4-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 14129, setting to 64 [ 1752.353469][T11296] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1752.353520][T11296] usb 4-1: Product: syz [ 1752.353536][T11296] usb 4-1: Manufacturer: syz [ 1752.353549][T11296] usb 4-1: SerialNumber: syz [ 1752.399713][T11296] usb 4-1: config 0 descriptor?? [ 1752.415803][T11296] keyspan 4-1:0.107: Keyspan 4 port adapter converter detected [ 1752.416264][T11296] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 81 [ 1752.416360][T11296] keyspan 4-1:0.107: unsupported endpoint type 0 [ 1752.446543][T11296] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 1 [ 1752.450946][T11296] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1752.478531][T11296] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 2 [ 1752.490250][T11296] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1752.503134][T11296] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 4 [ 1752.520540][T11296] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1752.532294][T11296] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 6 [ 1752.536683][T11296] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1753.143492][ T31] kauditd_printk_skb: 9 callbacks suppressed [ 1753.143506][ T31] audit: type=1326 audit(1791355026.064:18454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15175 comm="syz.8.8517" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff6ec79e199 code=0x0 [ 1753.440968][T15198] netlink: 'syz.2.8520': attribute type 8 has an invalid length. [ 1753.440987][T15198] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8520'. [ 1753.513943][T15198] veth1_to_team: entered promiscuous mode [ 1753.514766][T15198] gretap0: entered promiscuous mode [ 1753.564475][T15198] veth1_to_team: left promiscuous mode [ 1753.565865][T15198] gretap0: left promiscuous mode [ 1753.760641][ T5687] usb 9-1: USB disconnect, device number 30 [ 1754.523220][ T923] usb 4-1: USB disconnect, device number 81 [ 1754.544172][ T923] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1754.572701][T18475] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 1754.580147][ T923] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1754.591575][ T923] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1754.625430][ T923] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1754.626267][ T923] keyspan 4-1:0.107: device disconnected [ 1754.723367][T18475] usb 9-1: Using ep0 maxpacket: 16 [ 1754.725780][T18475] usb 9-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1754.737715][T18475] usb 9-1: config 0 has an invalid interface number: 34 but max is 0 [ 1754.737742][T18475] usb 9-1: config 0 has no interface number 0 [ 1754.737794][T18475] usb 9-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1754.737817][T18475] usb 9-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1754.748542][T18475] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1754.748568][T18475] usb 9-1: Product: syz [ 1754.748581][T18475] usb 9-1: Manufacturer: syz [ 1754.748595][T18475] usb 9-1: SerialNumber: syz [ 1754.767344][T18475] usb 9-1: config 0 descriptor?? [ 1754.769267][T15233] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22 [ 1754.769384][T15233] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22 [ 1754.980087][T15231] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22 [ 1754.980186][T15231] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22 [ 1755.192785][T18475] asix 9-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1755.410470][T15302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1755.414661][T15302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1755.631872][ T5687] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1755.777367][ T5687] usb 4-1: device descriptor read/64, error -71 [ 1756.012260][ T5687] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1756.151886][ T5687] usb 4-1: device descriptor read/64, error -71 [ 1756.153500][T15355] fuse: Bad value for 'fd' [ 1756.262359][ T5687] usb usb4-port1: attempt power cycle [ 1756.381028][T18475] asix 9-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1756.381290][T18475] asix 9-1:0.34: probe with driver asix failed with error -71 [ 1756.414717][T18475] usb 9-1: USB disconnect, device number 31 [ 1756.604715][ T5687] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1756.623296][ T5687] usb 4-1: device descriptor read/8, error -71 [ 1756.649713][T15393] syzkaller0: entered promiscuous mode [ 1756.649736][T15393] syzkaller0: entered allmulticast mode [ 1756.861913][ T5687] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1756.882852][ T5687] usb 4-1: device descriptor read/8, error -71 [ 1756.929709][T15408] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8538'. [ 1756.994359][ T5687] usb usb4-port1: unable to enumerate USB device [ 1757.102048][T18475] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 1757.182005][T11296] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1757.251866][T18475] usb 9-1: Using ep0 maxpacket: 32 [ 1757.253728][T18475] usb 9-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 1757.255960][T18475] usb 9-1: config 0 interface 0 altsetting 14 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1757.255990][T18475] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1757.256011][T18475] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1757.259201][T18475] usb 9-1: config 0 descriptor?? [ 1757.332315][T11296] usb 3-1: Using ep0 maxpacket: 32 [ 1757.333061][T11296] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1757.334206][T11296] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1757.334234][T11296] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1757.334271][T11296] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1757.342998][T11296] usb 3-1: config 0 descriptor?? [ 1757.350095][T11296] hub 3-1:0.0: USB hub found [ 1757.475275][T18475] logitech 0003:046D:C20E.005D: rdesc size test failed for formula gp [ 1757.481246][T18475] logitech 0003:046D:C20E.005D: hidraw0: USB HID v0.03 Device [HID 046d:c20e] on usb-dummy_hcd.8-1/input0 [ 1757.649727][T11296] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 1757.663825][T11296] usbhid 3-1:0.0: can't add hid device: -71 [ 1757.664011][T11296] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1757.679438][T15404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1757.679845][T15404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1757.692558][T11296] usb 3-1: USB disconnect, device number 116 [ 1758.471913][ T923] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1758.624530][ T923] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1758.625884][ T923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1758.628805][ T923] usb 3-1: config 0 descriptor?? [ 1758.801895][T18475] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1758.836106][ T923] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1758.951996][T18475] usb 4-1: Using ep0 maxpacket: 16 [ 1758.958983][T18475] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 1758.972803][T18475] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1758.972828][T18475] usb 4-1: Product: syz [ 1758.972842][T18475] usb 4-1: Manufacturer: syz [ 1758.972879][T18475] usb 4-1: SerialNumber: syz [ 1759.052530][ T923] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 1 [ 1759.052578][ T923] [drm] Initialized udl on minor 1 [ 1759.189613][T18475] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 1759.204852][T18475] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1759.205228][T18475] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 1759.205296][T18475] usb 4-1: media controller created [ 1759.240252][T18475] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1759.493264][T18475] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1759.544811][T18475] dvb_usb_gl861 4-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 1759.563436][T18475] usb 4-1: USB disconnect, device number 86 [ 1759.874804][T11296] usb 9-1: USB disconnect, device number 32 [ 1760.088588][T15513] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1760.133924][T15513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1760.361900][ T4378] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1760.513592][ T4378] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 1760.514966][ T4378] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1760.514985][ T4378] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 59136, setting to 1024 [ 1760.515002][ T4378] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1760.515037][ T4378] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1760.515056][ T4378] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1760.519031][ T4378] usb 4-1: config 0 descriptor?? [ 1760.520708][T15518] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1760.936498][T15518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1760.936811][T15518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1762.701271][ T31] audit: type=1326 audit(1791355035.614:18455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15629 comm="syz.6.8557" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8cbb9e199 code=0x7ffc0000 [ 1762.702622][ T31] audit: type=1326 audit(1791355035.624:18456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15629 comm="syz.6.8557" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8cbb9e199 code=0x7ffc0000 [ 1762.754709][ T31] audit: type=1326 audit(1791355035.674:18457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15629 comm="syz.6.8557" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7ff8cbb9e199 code=0x7ffc0000 [ 1762.754744][ T31] audit: type=1326 audit(1791355035.674:18458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15629 comm="syz.6.8557" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8cbb9e199 code=0x7ffc0000 [ 1762.755014][ T31] audit: type=1326 audit(1791355035.674:18459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15629 comm="syz.6.8557" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8cbb9e199 code=0x7ffc0000 [ 1762.755777][ T31] audit: type=1326 audit(1791355035.674:18460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15629 comm="syz.6.8557" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff8cbb9e199 code=0x7ffc0000 [ 1762.760859][ T31] audit: type=1326 audit(1791355035.674:18461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15629 comm="syz.6.8557" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8cbb9e199 code=0x7ffc0000 [ 1762.760913][ T31] audit: type=1326 audit(1791355035.674:18462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15629 comm="syz.6.8557" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8cbb9e199 code=0x7ffc0000 [ 1762.765923][ T31] audit: type=1326 audit(1791355035.684:18463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15629 comm="syz.6.8557" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff8cbb9e199 code=0x7ffc0000 [ 1762.766570][ T31] audit: type=1326 audit(1791355035.684:18464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15629 comm="syz.6.8557" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8cbb9e199 code=0x7ffc0000 [ 1763.179010][ T4378] usbhid 4-1:0.0: can't add hid device: -71 [ 1763.179094][ T4378] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1763.213321][ T4378] usb 4-1: USB disconnect, device number 87 [ 1763.671894][ T4378] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1763.822702][ T4378] usb 4-1: Using ep0 maxpacket: 8 [ 1763.824110][ T4378] usb 4-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 1763.825265][ T4378] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1763.825300][ T4378] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1763.825321][ T4378] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1763.891654][ T4378] kobil_sct 4-1:1.0: KOBIL USB smart card terminal converter detected [ 1763.920830][ T4378] usb 4-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 1764.056391][T18475] usb 4-1: USB disconnect, device number 88 [ 1764.081135][T18475] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 1764.088172][T18475] kobil_sct 4-1:1.0: device disconnected [ 1764.140885][ T923] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 1764.141174][ T923] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1764.159927][ C1] raw-gadget.6 gadget.2: ignoring, device is not running [ 1764.160008][ T4378] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 1764.160439][ C1] raw-gadget.6 gadget.2: ignoring, device is not running [ 1764.160596][ T4378] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 1764.160707][ T4378] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1764.215785][ T923] usb 3-1: USB disconnect, device number 117 [ 1764.899388][T15720] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1765.162049][ T923] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1765.212034][T18475] usb 9-1: new full-speed USB device number 33 using dummy_hcd [ 1765.326573][ T923] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1765.327811][ T923] usb 4-1: config 0 has an invalid descriptor of length 64, skipping remainder of the config [ 1765.327826][ T923] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1765.327853][ T923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1765.329546][ T923] usb 4-1: config 0 descriptor?? [ 1765.380277][T18475] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1765.392118][T18475] usb 9-1: not running at top speed; connect to a high speed hub [ 1765.392153][T18475] usb 9-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 1765.395641][T18475] usb 9-1: config 1 has an invalid descriptor of length 124, skipping remainder of the config [ 1765.395658][T18475] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1765.395682][T18475] usb 9-1: too many endpoints for config 1 interface 1 altsetting 142: 108, using maximum allowed: 30 [ 1765.395704][T18475] usb 9-1: config 1 interface 1 altsetting 142 has 0 endpoint descriptors, different from the interface descriptor's value: 108 [ 1765.395718][T18475] usb 9-1: config 1 interface 1 has no altsetting 0 [ 1765.401473][T18475] usb 9-1: New USB device strings: Mfr=1, Product=96, SerialNumber=3 [ 1765.401496][T18475] usb 9-1: Product: syz [ 1765.401510][T18475] usb 9-1: Manufacturer: syz [ 1765.401524][T18475] usb 9-1: SerialNumber: syz [ 1765.517458][T15734] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8564'. [ 1765.517473][T15734] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8564'. [ 1765.609944][ T923] Bluetooth: Can't get state to change to load ram patch err [ 1765.609988][ T923] Bluetooth: Loading patch file failed [ 1765.610016][ T923] ath3k 4-1:0.0: probe with driver ath3k failed with error -71 [ 1765.656053][ T923] usb 4-1: USB disconnect, device number 89 [ 1765.757490][T18475] usb 9-1: Audio class v2/v3 interfaces need an interface association [ 1766.017774][T18475] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1766.047675][T18475] usb 9-1: selecting invalid altsetting 1 [ 1766.047690][T18475] snd-usb-us122l 9-1:1.1: usb_set_interface error [ 1766.047907][T18475] snd-usb-us122l 9-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 1766.110366][T18475] usb 9-1: USB disconnect, device number 33 [ 1766.197160][T12560] udevd[12560]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1766.675926][T15781] FAULT_INJECTION: forcing a failure. [ 1766.675926][T15781] name failslab, interval 1, probability 0, space 0, times 0 [ 1766.675950][T15781] CPU: 1 UID: 0 PID: 15781 Comm: syz.3.8569 Tainted: G L syzkaller #0 PREEMPT(full) [ 1766.675965][T15781] Tainted: [L]=SOFTLOCKUP [ 1766.675969][T15781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1766.675976][T15781] Call Trace: [ 1766.675981][T15781] [ 1766.675986][T15781] dump_stack_lvl+0xe8/0x150 [ 1766.676006][T15781] should_fail_ex+0x410/0x560 [ 1766.676022][T15781] should_failslab+0xa8/0x100 [ 1766.676037][T15781] ? skb_clone+0x212/0x3a0 [ 1766.676048][T15781] kmem_cache_alloc_noprof+0xa1/0x600 [ 1766.676060][T15781] ? skb_clone+0x212/0x3a0 [ 1766.676073][T15781] skb_clone+0x212/0x3a0 [ 1766.676082][T15781] ? nfnetlink_rcv+0x4b0/0x28c0 [ 1766.676094][T15781] nfnetlink_rcv+0x4de/0x28c0 [ 1766.676105][T15781] ? __dev_queue_xmit+0x29b/0x3920 [ 1766.676118][T15781] ? __local_bh_enable_ip+0xd6/0x140 [ 1766.676132][T15781] ? lockdep_hardirqs_on+0x7b/0x110 [ 1766.676148][T15781] ? __dev_queue_xmit+0x29b/0x3920 [ 1766.676158][T15781] ? __local_bh_enable_ip+0xd6/0x140 [ 1766.676171][T15781] ? __dev_queue_xmit+0x29b/0x3920 [ 1766.676181][T15781] ? __dev_queue_xmit+0x1efb/0x3920 [ 1766.676190][T15781] ? do_syscall_64+0x166/0x520 [ 1766.676207][T15781] ? __dev_queue_xmit+0x29b/0x3920 [ 1766.676222][T15781] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1766.676239][T15781] ? ref_tracker_free+0x689/0x830 [ 1766.676255][T15781] ? __pfx_ref_tracker_free+0x10/0x10 [ 1766.676268][T15781] ? __asan_memcpy+0x40/0x70 [ 1766.676279][T15781] ? __skb_clone+0x5c/0x6c0 [ 1766.676290][T15781] ? __skb_clone+0x449/0x6c0 [ 1766.676312][T15781] ? skb_clone+0x246/0x3a0 [ 1766.676323][T15781] ? __netlink_deliver_tap+0x811/0x860 [ 1766.676335][T15781] ? netlink_deliver_tap+0x2e/0x1b0 [ 1766.676350][T15781] ? netlink_deliver_tap+0x2e/0x1b0 [ 1766.676360][T15781] ? netlink_deliver_tap+0x2e/0x1b0 [ 1766.676376][T15781] netlink_unicast+0x7bd/0x940 [ 1766.676392][T15781] netlink_sendmsg+0x813/0xb40 [ 1766.676407][T15781] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1766.676423][T15781] ? apparmor_socket_sendmsg+0x18b/0x360 [ 1766.676438][T15781] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1766.676449][T15781] sock_sendmsg_nosec+0x13a/0x180 [ 1766.676463][T15781] ____sys_sendmsg+0x54e/0x850 [ 1766.676482][T15781] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1766.676502][T15781] ? import_iovec+0x73/0xa0 [ 1766.676518][T15781] ___sys_sendmsg+0x2a5/0x360 [ 1766.676534][T15781] ? __lock_acquire+0x747/0x2de0 [ 1766.676547][T15781] ? __pfx____sys_sendmsg+0x10/0x10 [ 1766.676579][T15781] ? __fget_files+0x2a/0x420 [ 1766.676594][T15781] ? __fget_files+0x3a2/0x420 [ 1766.676614][T15781] __x64_sys_sendmsg+0x1b1/0x290 [ 1766.676631][T15781] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1766.676656][T15781] do_syscall_64+0x166/0x520 [ 1766.676676][T15781] ? trace_irq_disable+0x3b/0x140 [ 1766.676693][T15781] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1766.676712][T15781] ? clear_bhb_loop+0x70/0xc0 [ 1766.676735][T15781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1766.676749][T15781] RIP: 0033:0x7f803d39e199 [ 1766.676760][T15781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1766.676769][T15781] RSP: 002b:00007f803e265028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1766.676781][T15781] RAX: ffffffffffffffda RBX: 00007f803d625fa0 RCX: 00007f803d39e199 [ 1766.676789][T15781] RDX: 0000000024000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1766.676796][T15781] RBP: 00007f803e265090 R08: 0000000000000000 R09: 0000000000000000 [ 1766.676803][T15781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1766.676809][T15781] R13: 00007f803d626038 R14: 00007f803d625fa0 R15: 00007f803d74fa48 [ 1766.676824][T15781] [ 1767.158940][T15788] netlink: 'syz.8.8570': attribute type 6 has an invalid length. [ 1767.158956][T15788] netlink: 'syz.8.8570': attribute type 7 has an invalid length. [ 1767.158963][T15788] netlink: 'syz.8.8570': attribute type 8 has an invalid length. [ 1767.214549][T15788] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8570'. [ 1767.357753][T15795] netlink: 40 bytes leftover after parsing attributes in process `syz.8.8570'. [ 1767.421409][T15795] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8570'. [ 1768.102077][T11296] hid_parser_main: 7 callbacks suppressed [ 1768.102100][T11296] hid-generic 0000:0000:0000.005E: unknown main item tag 0x0 [ 1768.166815][T15819] netlink: 'syz.8.8572': attribute type 25 has an invalid length. [ 1768.187055][T11296] hid-generic 0000:0000:0000.005E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1768.416206][T15828] fido_id[15828]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1768.562036][T15817] netlink: 'syz.7.8565': attribute type 8 has an invalid length. [ 1768.709831][T15804] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8571'. [ 1769.136898][T15854] nvme_fabrics: found same hostid f683b692-f7fb-4e1c-94f6-81e8dd74b730 but different hostnqn nq [ 1769.252184][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1769.258401][ T4944] usb 3-1: new full-speed USB device number 118 using dummy_hcd [ 1769.294525][T15862] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8579'. [ 1769.414045][ T4944] usb 3-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 1769.416502][ T4944] usb 3-1: config 127 has an invalid interface number: 1 but max is 0 [ 1769.416526][ T4944] usb 3-1: config 127 has no interface number 0 [ 1769.416566][ T4944] usb 3-1: config 127 interface 1 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 1769.418495][ T4944] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1769.418520][ T4944] usb 3-1: Product: syz [ 1769.418534][ T4944] usb 3-1: Manufacturer: syz [ 1769.418549][ T4944] usb 3-1: SerialNumber: syz [ 1769.429435][T15843] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1769.673468][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 1769.673499][ T31] audit: type=1326 audit(1791355042.594:18469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15882 comm="syz.8.8582" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ec79e199 code=0x7ffc0000 [ 1769.674685][ T31] audit: type=1326 audit(1791355042.594:18470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15882 comm="syz.8.8582" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ec79e199 code=0x7ffc0000 [ 1769.675113][ T31] audit: type=1326 audit(1791355042.594:18471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15882 comm="syz.8.8582" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff6ec79e199 code=0x7ffc0000 [ 1769.676950][ T31] audit: type=1326 audit(1791355042.594:18472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15882 comm="syz.8.8582" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ec79e199 code=0x7ffc0000 [ 1769.677231][ T31] audit: type=1326 audit(1791355042.594:18473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15882 comm="syz.8.8582" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ec79e199 code=0x7ffc0000 [ 1769.735089][ T31] audit: type=1326 audit(1791355042.654:18474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15882 comm="syz.8.8582" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff6ec75e9ce code=0x7ffc0000 [ 1769.735140][ T31] audit: type=1326 audit(1791355042.654:18475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15882 comm="syz.8.8582" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff6ec79de2b code=0x7ffc0000 [ 1769.735205][ T31] audit: type=1326 audit(1791355042.654:18476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15882 comm="syz.8.8582" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff6ec79de2b code=0x7ffc0000 [ 1769.756242][ T31] audit: type=1326 audit(1791355042.674:18477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15882 comm="syz.8.8582" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff6ec79de2b code=0x7ffc0000 [ 1769.763899][ T31] audit: type=1326 audit(1791355042.684:18478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15882 comm="syz.8.8582" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff6ec79de2b code=0x7ffc0000 [ 1769.835481][T15843] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1770.012451][ T923] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 1770.049127][T15843] vivid-004: disconnect [ 1770.079510][ T4944] asix 3-1:127.1 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1770.079655][ T4944] asix 3-1:127.1: probe with driver asix failed with error -32 [ 1770.081287][T15890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1770.119617][T15890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1770.182572][ T923] usb 9-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1770.185744][ T923] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1770.185761][ T923] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1770.185772][ T923] usb 9-1: config 0 has no interface number 0 [ 1770.200689][ T923] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1770.200715][ T923] usb 9-1: Product: syz [ 1770.200728][ T923] usb 9-1: Manufacturer: syz [ 1770.200742][ T923] usb 9-1: SerialNumber: syz [ 1770.206383][ T923] usb 9-1: config 0 descriptor?? [ 1770.448230][ T923] usb-storage 9-1:0.1: USB Mass Storage device detected [ 1770.451298][ T923] usb-storage 9-1:0.1: Quirks match for vid 1908 pid 1315: 20000 [ 1770.584840][T15920] netlink: 17 bytes leftover after parsing attributes in process `syz.6.8587'. [ 1770.608216][T15920] netlink: 17 bytes leftover after parsing attributes in process `syz.6.8587'. [ 1770.686561][ T923] usb 9-1: USB disconnect, device number 34 [ 1771.771948][ T4944] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 1771.922569][ T4944] usb 9-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1771.925478][ T4944] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1771.925504][ T4944] usb 9-1: Product: syz [ 1771.925519][ T4944] usb 9-1: Manufacturer: syz [ 1771.925532][ T4944] usb 9-1: SerialNumber: syz [ 1771.928856][ T4944] usb 9-1: config 0 descriptor?? [ 1771.932450][ T4944] ch341 9-1:0.0: ch341-uart converter detected [ 1772.007183][ T1687] usb 3-1: USB disconnect, device number 118 [ 1772.010833][T15897] vivid-004: reconnect [ 1772.130518][ T4944] usb 9-1: failed to receive control message: -121 [ 1772.130556][ T4944] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 1772.346899][T11296] usb 9-1: USB disconnect, device number 35 [ 1772.347988][T11296] ch341 9-1:0.0: device disconnected [ 1772.372718][ T1687] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1772.502018][ T1687] usb 3-1: device descriptor read/64, error -71 [ 1772.751968][ T1687] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1772.862099][ T4944] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1772.894203][ T1687] usb 3-1: device descriptor read/64, error -71 [ 1773.004257][ T1687] usb usb3-port1: attempt power cycle [ 1773.017571][ T4944] usb 4-1: Using ep0 maxpacket: 16 [ 1773.025031][ T4944] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1773.025062][ T4944] usb 4-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=65.08 [ 1773.025835][ T4944] usb 4-1: config 6 has an invalid interface number: 200 but max is 0 [ 1773.025849][ T4944] usb 4-1: config 6 has no interface number 0 [ 1773.025864][ T4944] usb 4-1: config 6 interface 200 has no altsetting 0 [ 1773.027593][ T4944] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1773.027607][ T4944] usb 4-1: Product: syz [ 1773.027615][ T4944] usb 4-1: Manufacturer: syz [ 1773.027622][ T4944] usb 4-1: SerialNumber: syz [ 1773.161948][T11296] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 1773.251001][ T4944] bfusb 4-1:6.200: probe with driver bfusb failed with error -5 [ 1773.260828][ T4944] usb 4-1: USB disconnect, device number 90 [ 1773.321970][T11296] usb 9-1: Using ep0 maxpacket: 16 [ 1773.323505][T11296] usb 9-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 1773.326373][T11296] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1773.326388][T11296] usb 9-1: Product: syz [ 1773.326396][T11296] usb 9-1: Manufacturer: syz [ 1773.326403][T11296] usb 9-1: SerialNumber: syz [ 1773.361924][ T1687] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1773.383033][ T1687] usb 3-1: device descriptor read/8, error -71 [ 1773.537011][T11296] usb 9-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 1773.541475][T11296] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1773.542689][T11296] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 1773.542736][T11296] usb 9-1: media controller created [ 1773.553967][T11296] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1773.632210][ T1687] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1773.652637][ T1687] usb 3-1: device descriptor read/8, error -71 [ 1773.762529][ T1687] usb usb3-port1: unable to enumerate USB device [ 1773.802308][T11296] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1773.854806][T11296] dvb_usb_gl861 9-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 1773.859685][T11296] usb 9-1: USB disconnect, device number 36 [ 1774.082410][T16060] syzkaller0: entered promiscuous mode [ 1774.082439][T16060] syzkaller0: entered allmulticast mode [ 1774.127223][T16060] tipc: Started in network mode [ 1774.127243][T16060] tipc: Node identity da35749de82a, cluster identity 4711 [ 1774.127546][T16060] tipc: Enabled bearer , priority 0 [ 1774.129387][T16059] tipc: Resetting bearer [ 1774.179921][T16059] tipc: Disabling bearer [ 1774.503095][T11296] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1774.631985][ T1687] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 1774.662995][T11296] usb 4-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00 [ 1774.664199][T11296] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1774.664231][T11296] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1774.664254][T11296] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1774.814506][ T1687] usb 9-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 1774.817042][ T1687] usb 9-1: config 2 has an invalid interface number: 43 but max is 0 [ 1774.817067][ T1687] usb 9-1: config 2 has no interface number 0 [ 1774.817103][ T1687] usb 9-1: config 2 interface 43 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 1774.817151][ T1687] usb 9-1: config 2 interface 43 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 8 [ 1774.817172][ T1687] usb 9-1: config 2 interface 43 has no altsetting 0 [ 1774.819744][ T1687] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1774.819767][ T1687] usb 9-1: Product: syz [ 1774.819777][ T1687] usb 9-1: Manufacturer: syz [ 1774.819785][ T1687] usb 9-1: SerialNumber: syz [ 1774.858806][T16074] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22 [ 1774.858915][T16074] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22 [ 1774.873201][T16067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1774.876255][T16067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1774.877514][T16067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1774.886734][T16067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1774.888074][T16067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1774.891109][T16067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1774.898033][T16067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1774.898554][T16067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1774.903353][T16067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1774.903901][T16067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1775.111488][T16074] netlink: 108 bytes leftover after parsing attributes in process `syz.8.8609'. [ 1775.122201][T16074] netlink: 20 bytes leftover after parsing attributes in process `syz.8.8609'. [ 1775.216317][T16107] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8611'. [ 1775.223137][ T1687] ums-usbat 9-1:2.43: USB Mass Storage device detected [ 1775.259459][ T1687] ums-usbat 9-1:2.43: Quirks match for vid 0781 pid 0005: 1 [ 1775.319369][ T1687] ums-usbat 9-1:2.43: probe with driver ums-usbat failed with error -5 [ 1775.336952][ T1687] usb 9-1: USB disconnect, device number 37 [ 1775.578413][T16136] ip6gre1: entered promiscuous mode [ 1775.580107][T16136] ip6gre1: entered allmulticast mode [ 1776.595695][T16166] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1776.974480][T16179] netlink: 68 bytes leftover after parsing attributes in process `syz.8.8621'. [ 1777.233408][ T4378] ================================================================== [ 1777.233426][ T4378] BUG: KASAN: slab-use-after-free in rtsx_usb_ms_handle_req+0x1095/0x1900 [ 1777.233460][ T4378] Write of size 4 at addr ffff888053435074 by task kworker/1:4/4378 [ 1777.233475][ T4378] [ 1777.233487][ T4378] CPU: 1 UID: 0 PID: 4378 Comm: kworker/1:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 1777.233503][ T4378] Tainted: [L]=SOFTLOCKUP [ 1777.233507][ T4378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1777.233514][ T4378] Workqueue: events rtsx_usb_ms_handle_req [ 1777.233530][ T4378] Call Trace: [ 1777.233535][ T4378] [ 1777.233543][ T4378] dump_stack_lvl+0xe8/0x150 [ 1777.233559][ T4378] print_address_description+0x55/0x1e0 [ 1777.233573][ T4378] ? rtsx_usb_ms_handle_req+0x1095/0x1900 [ 1777.233587][ T4378] print_report+0x58/0x70 [ 1777.233599][ T4378] kasan_report+0x117/0x150 [ 1777.233614][ T4378] ? rtsx_usb_ms_handle_req+0x1095/0x1900 [ 1777.233629][ T4378] rtsx_usb_ms_handle_req+0x1095/0x1900 [ 1777.233642][ T4378] ? lockdep_hardirqs_on+0x7b/0x110 [ 1777.233662][ T4378] ? __pfx_rtsx_usb_ms_handle_req+0x10/0x10 [ 1777.233676][ T4378] ? rcu_is_watching+0x16/0xb0 [ 1777.233690][ T4378] ? process_scheduled_works+0x97a/0x1630 [ 1777.233703][ T4378] process_scheduled_works+0xc3d/0x1630 [ 1777.233721][ T4378] ? __pfx_process_scheduled_works+0x10/0x10 [ 1777.233735][ T4378] ? assign_work+0x3cf/0x5d0 [ 1777.233748][ T4378] worker_thread+0xa47/0xfb0 [ 1777.233763][ T4378] ? __kthread_parkme+0x71/0x1f0 [ 1777.233779][ T4378] kthread+0x38b/0x480 [ 1777.233788][ T4378] ? __pfx_worker_thread+0x10/0x10 [ 1777.233801][ T4378] ? __pfx_kthread+0x10/0x10 [ 1777.233811][ T4378] ret_from_fork+0x514/0xb70 [ 1777.233820][ T4378] ? __pfx_ret_from_fork+0x10/0x10 [ 1777.233829][ T4378] ? __switch_to+0xc89/0x1420 [ 1777.233844][ T4378] ? __pfx_kthread+0x10/0x10 [ 1777.233853][ T4378] ret_from_fork_asm+0x1a/0x30 [ 1777.233871][ T4378] [ 1777.233875][ T4378] [ 1777.233877][ T4378] Allocated by task 1906: [ 1777.233883][ T4378] kasan_save_track+0x3e/0x80 [ 1777.233893][ T4378] __kasan_kmalloc+0x93/0xb0 [ 1777.233904][ T4378] __kmalloc_cache_noprof+0x321/0x600 [ 1777.233914][ T4378] memstick_check+0x1a7/0x1250 [ 1777.233925][ T4378] process_scheduled_works+0xc3d/0x1630 [ 1777.233936][ T4378] worker_thread+0xa47/0xfb0 [ 1777.233948][ T4378] kthread+0x38b/0x480 [ 1777.233955][ T4378] ret_from_fork+0x514/0xb70 [ 1777.233963][ T4378] ret_from_fork_asm+0x1a/0x30 [ 1777.233977][ T4378] [ 1777.233979][ T4378] Freed by task 1906: [ 1777.233983][ T4378] kasan_save_track+0x3e/0x80 [ 1777.233993][ T4378] kasan_save_free_info+0x40/0x50 [ 1777.234001][ T4378] __kasan_slab_free+0x5c/0x80 [ 1777.234012][ T4378] kfree+0x1c5/0x650 [ 1777.234019][ T4378] memstick_check+0x7b6/0x1250 [ 1777.234030][ T4378] process_scheduled_works+0xc3d/0x1630 [ 1777.234047][ T4378] worker_thread+0xa47/0xfb0 [ 1777.234059][ T4378] kthread+0x38b/0x480 [ 1777.234067][ T4378] ret_from_fork+0x514/0xb70 [ 1777.234074][ T4378] ret_from_fork_asm+0x1a/0x30 [ 1777.234088][ T4378] [ 1777.234090][ T4378] The buggy address belongs to the object at ffff888053435000 [ 1777.234090][ T4378] which belongs to the cache kmalloc-2k of size 2048 [ 1777.234099][ T4378] The buggy address is located 116 bytes inside of [ 1777.234099][ T4378] freed 2048-byte region [ffff888053435000, ffff888053435800) [ 1777.234109][ T4378] [ 1777.234112][ T4378] The buggy address belongs to the physical page: [ 1777.234119][ T4378] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x53430 [ 1777.234129][ T4378] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1777.234138][ T4378] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1777.234148][ T4378] page_type: f5(slab) [ 1777.234158][ T4378] raw: 00fff00000000040 ffff88801b042000 dead000000000100 dead000000000122 [ 1777.234166][ T4378] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 1777.234175][ T4378] head: 00fff00000000040 ffff88801b042000 dead000000000100 dead000000000122 [ 1777.234183][ T4378] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 1777.234191][ T4378] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 1777.234199][ T4378] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1777.234204][ T4378] page dumped because: kasan: bad access detected [ 1777.234210][ T4378] page_owner tracks the page as allocated [ 1777.234214][ T4378] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7634, tgid 7630 (syz.3.488), ts 189246452963 [ 1777.234231][ T4378] post_alloc_hook+0x1f9/0x250 [ 1777.234240][ T4378] get_page_from_freelist+0x2209/0x2280 [ 1777.234250][ T4378] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 1777.234261][ T4378] allocate_slab+0x7d/0x620 [ 1777.234276][ T4378] refill_objects+0x2d5/0x350 [ 1777.234297][ T4378] __pcs_replace_empty_main+0x2c8/0x6c0 [ 1777.234318][ T4378] __kmalloc_cache_noprof+0x39b/0x600 [ 1777.234334][ T4378] nbp_vlan_add+0x22a/0xb20 [ 1777.234356][ T4378] br_vlan_info+0x100/0x470 [ 1777.234372][ T4378] br_process_vlan_info+0x61f/0x8b0 [ 1777.234384][ T4378] br_afspec+0x3a5/0x600 [ 1777.234403][ T4378] br_setlink+0x34f/0x830 [ 1777.234422][ T4378] rtnl_bridge_setlink+0x5b6/0x7e0 [ 1777.234446][ T4378] rtnetlink_rcv_msg+0x7b9/0xc00 [ 1777.234468][ T4378] netlink_rcv_skb+0x226/0x4a0 [ 1777.234484][ T4378] netlink_unicast+0x7bd/0x940 [ 1777.234507][ T4378] page last free pid 6541 tgid 6541 ts 178279799216 stack trace: [ 1777.234520][ T4378] __free_frozen_pages+0xc93/0xd90 [ 1777.234536][ T4378] __folio_put+0x4b3/0x590 [ 1777.234559][ T4378] skb_release_data+0x55f/0xa80 [ 1777.234579][ T4378] __kfree_skb+0x5d/0x210 [ 1777.234592][ T4378] skb_queue_purge_reason+0x2e5/0x3a0 [ 1777.234603][ T4378] rds_tcp_inc_free+0x1e/0x30 [ 1777.234612][ T4378] rds_tcp_conn_path_shutdown+0x9c9/0xac0 [ 1777.234620][ T4378] rds_conn_shutdown+0x477/0xb20 [ 1777.234634][ T4378] process_scheduled_works+0xc3d/0x1630 [ 1777.234646][ T4378] worker_thread+0xa47/0xfb0 [ 1777.234658][ T4378] kthread+0x38b/0x480 [ 1777.234665][ T4378] ret_from_fork+0x514/0xb70 [ 1777.234673][ T4378] ret_from_fork_asm+0x1a/0x30 [ 1777.234687][ T4378] [ 1777.234689][ T4378] Memory state around the buggy address: [ 1777.234694][ T4378] ffff888053434f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1777.234701][ T4378] ffff888053434f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1777.234707][ T4378] >ffff888053435000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1777.234712][ T4378] ^ [ 1777.234718][ T4378] ffff888053435080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1777.234724][ T4378] ffff888053435100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1777.234728][ T4378] ================================================================== [ 1777.234743][ T4378] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1777.894099][ T4378] CPU: 1 UID: 0 PID: 4378 Comm: kworker/1:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 1777.905024][ T4378] Tainted: [L]=SOFTLOCKUP [ 1777.909333][ T4378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1777.919375][ T4378] Workqueue: events rtsx_usb_ms_handle_req [ 1777.925186][ T4378] Call Trace: [ 1777.928453][ T4378] [ 1777.931371][ T4378] vpanic+0x56d/0xa60 [ 1777.935356][ T4378] ? __pfx_vpanic+0x10/0x10 [ 1777.939853][ T4378] panic+0xc5/0xd0 [ 1777.943565][ T4378] ? __pfx_panic+0x10/0x10 [ 1777.947974][ T4378] ? rtsx_usb_ms_handle_req+0x1095/0x1900 [ 1777.953695][ T4378] ? rtsx_usb_ms_handle_req+0x1095/0x1900 [ 1777.959410][ T4378] check_panic_on_warn+0x89/0xb0 [ 1777.964334][ T4378] ? rtsx_usb_ms_handle_req+0x1095/0x1900 [ 1777.970046][ T4378] end_report+0x73/0x170 [ 1777.974279][ T4378] ? rtsx_usb_ms_handle_req+0x1095/0x1900 [ 1777.979998][ T4378] kasan_report+0x128/0x150 [ 1777.984492][ T4378] ? rtsx_usb_ms_handle_req+0x1095/0x1900 [ 1777.990208][ T4378] rtsx_usb_ms_handle_req+0x1095/0x1900 [ 1777.995746][ T4378] ? lockdep_hardirqs_on+0x7b/0x110 [ 1778.000947][ T4378] ? __pfx_rtsx_usb_ms_handle_req+0x10/0x10 [ 1778.006839][ T4378] ? rcu_is_watching+0x16/0xb0 [ 1778.011593][ T4378] ? process_scheduled_works+0x97a/0x1630 [ 1778.017393][ T4378] process_scheduled_works+0xc3d/0x1630 [ 1778.022938][ T4378] ? __pfx_process_scheduled_works+0x10/0x10 [ 1778.028920][ T4378] ? assign_work+0x3cf/0x5d0 [ 1778.033500][ T4378] worker_thread+0xa47/0xfb0 [ 1778.038088][ T4378] ? __kthread_parkme+0x71/0x1f0 [ 1778.043022][ T4378] kthread+0x38b/0x480 [ 1778.047080][ T4378] ? __pfx_worker_thread+0x10/0x10 [ 1778.052185][ T4378] ? __pfx_kthread+0x10/0x10 [ 1778.056763][ T4378] ret_from_fork+0x514/0xb70 [ 1778.061340][ T4378] ? __pfx_ret_from_fork+0x10/0x10 [ 1778.066435][ T4378] ? __switch_to+0xc89/0x1420 [ 1778.071105][ T4378] ? __pfx_kthread+0x10/0x10 [ 1778.075682][ T4378] ret_from_fork_asm+0x1a/0x30 [ 1778.080447][ T4378] [ 1778.083723][ T4378] Kernel Offset: disabled [ 1778.088034][ T4378] Rebooting in 86400 seconds..