last executing test programs: 1m46.194962743s ago: executing program 0 (id=177): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000300), 0x0, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000001}) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000440)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd2b, 0x2000, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@RTA_IIF={0x8}, @RTA_DST={0x8, 0x1, @local}]}, 0x2c}}, 0x20002000) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) io_setup(0x40, &(0x7f0000000140)) pipe2$watch_queue(0x0, 0x80) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.events\x00', 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x25, 0x1, @val=@tcx={@void, @value=r4}}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ipv6_route\x00') read$FUSE(r5, 0x0, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000540)=0x0) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000580)=r6) add_key(&(0x7f0000000300)='rxrpc\x00', 0x0, &(0x7f0000000340)="000000000000000463656c6c00000002000000440000000200bfffffffffffffff00000000000000000000000000000000000000000000000000000000000000020000000000000000000004000000000000000400000000000000140000000200"/112, 0x70, 0xffffffffffffffff) pread64(r5, &(0x7f0000000200)=""/195, 0xc3, 0x591f) read$FUSE(r5, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f00000003c0)="000000000000000463656c6c0000000200000044000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000040000000000000014a300000200"/112, 0x70, 0xffffffffffffffff) 1m45.035158482s ago: executing program 0 (id=182): sigaltstack(0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r0, r0, 0x0, 0x20000005) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x2c00, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, 0x0) r5 = dup(r1) syz_ublk_setup_queues(r5, 0x0, &(0x7f0000000180)={0x0, 0xfb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x6, 0x15e, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa348, 0x8, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x1, 0x3, 0x0, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x82, 0xba}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r5, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x1034, {0x2000, 0x0, 0x15, 0x3776, 0x5}}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r6 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) 1m44.567367219s ago: executing program 0 (id=184): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfdfffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x14, 0x3a, 0x505, 0x201, 0x0, {0x1, 0x1}}, 0x14}}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)={0x10, 0x11, 0x1}, 0x10}], 0x1, 0x0, 0x0, 0x24008800}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) r4 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) writev(r4, &(0x7f0000000b00)=[{0x0}, {&(0x7f00000001c0)="06000000", 0x4}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@getlink={0x28, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x3ff}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) setns(r6, 0x8000000) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1m43.552221195s ago: executing program 0 (id=187): socket(0x10, 0x803, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x70bd28, 0x25dfdbfe, {0x81, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0x1c}}, 0x884) socket$packet(0x11, 0x2, 0x300) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000001c0)={0x28, 0x1, r1, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xff}) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000d00)="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", 0x559, r2) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVid:De', 0x0) syz_emit_ethernet(0xe, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) unshare(0x22020600) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x3f) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000180)=0x19) ioctl$TIOCGSOFTCAR(r3, 0x5419, &(0x7f0000000040)) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x2) inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_init1(0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004479bb10b10e07700002010203010902120001fd0090020904b80200ff00ff00"], 0x0) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c460004000001000000000c6c00000003003e00ebffffff9402000002000000402849e7becb9492000000000000000000000004000000000000002d8f38000100feff0200070003000000970f000008000000000000000d000000000000000000000000000000e5000000000000000600000000000000040000000000000075c064fb248c82455f3d5f7a31b3a8beb0076f11bfb0ab9c186a5ca8c881ba65daba20c5a2aaa07207114753a1d2ea8fe4b520f6035bb8eda72ce8cb9b6afc8577c7d8527bf3ecf6cde00a60385ec741b83087ca0663a7e5264e311cb370c83efaa618147d1fbca68da956b7653d"], 0xed) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000080)) 1m40.227700351s ago: executing program 0 (id=195): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2b) r1 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0xb382, 0x2, 0x3, 0xfffffffe}, 0x0, &(0x7f0000000280), &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x2c, r3, 0x63d23b12adb89819, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x8004) io_uring_register$IORING_REGISTER_IOWQ_AFF(r1, 0x11, &(0x7f0000000500)='n', 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f000048c000/0x1000)=nil, 0x1000, 0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet(0x2, 0x1, 0x6) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f00000001c0)={{0x2, 0xfffb, @multicast1}, {0x1}, 0x1c, {0x2, 0x4e20, @multicast1}, 'veth1_to_batadv\x00'}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='stat\x00') connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "2defbd1ccdd59bac", "b0ad0cd933caf9dbdfc37796bc1019ba", "779d4176"}, 0x28) clock_gettime(0xfffffffffffffffb, 0x0) writev(r4, &(0x7f0000000300)=[{&(0x7f00000005c0)="6e2d3c94288948959426d1de787672fa8d3705a324cefea880e8c0bd80226c9eb3d90a4e08c79410f56616b3a74447ce08834e294e4f434f3e4aea8add09078987227848f2f3afb37adb6af1bad9389c927333df0d9b7fb8ca914cbfeb6ebb21e2495be7c3d2c697c0c0ac2266181511a87dddd889f912df0822095bfea15a483a65d0b80e1a3f81a8748a6900683b154513e649542d8ffec2c058b20b55688dd5f01933a90fb1dcb5c990028e2e9b17d234a5470fe03290ff9c6b7f4333654564be0b5f074feee291dc5daf806c811fe508b19319cccaf2b0236d0c941b20ae95e047af56935bd8fc5f5101287a12623cee4de00cf3af4942a2fbadfb76e4f2cdb1089af1d79ee99a61b8003112c2d43ba025c6e4631d2a186fdf9c64ab60b8064b051343c313a28355ba59bb6ea25d668899af0d5bc16c40ce7ee8", 0x13c}, {&(0x7f0000000340)="bf67a361000138944b854b78cc4e2237f68791bd7786513b715bf9ad6389844bc809b10b216304437e8d4b9e9cec7b31a34a02854029d58ba77b51b6479ef73e43d95fb478cc230a625897", 0x4b}, {&(0x7f0000000440)="9daf5194d6ff2fb71e455a389b8ead15aebc12ea8ead38a3b45cb2f2603e607dfe3f1228fb0b1cd1968a9bcd1badfa49059ce704fa1228343bfe3f3600c5000000140000d09c5c82111202b07c1c755457049ad0ebcd70cbaa678adaa17831266adfc9fa04f5093b8c9fd353b714b22e5454084aa316bd17dbadd5a49b0dd3b073051bb901212a764a56d76d2ff9747d5cad8712e20378bbbcca075b5564a0b50df37294931900f48618135effbb4f2392455f6451fd556b02e166b774d78b8f419eebd9998b8d428dc4b2fcb57503d0eeba1a3280f447ccf7812d1895b6479c7059fe50fff0e5c7dcf0768191e9bcb9c2b1e58427a93a7396d404a4116c8cd5e00456979d2dce4347f00189da68317adf15ea9e728f1fb93db495bd754b84cfc923a1428c97643f05cf00000000000000000000000000005e2cd2cd53a53fab4d50415b7fc9634782", 0x149}], 0x3) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x5000) 1m38.989706638s ago: executing program 0 (id=198): r0 = socket$inet_tcp(0x2, 0x1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f00000001c0)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0xa) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000240)='./file1\x00', r2) r3 = socket(0x400000000010, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x80241, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, 0x0) dup(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtfilter={0x48, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {}, {0xb, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @broadcast}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x806}]}}]}, 0x48}}, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r6, 0x114, 0x2, 0x0, 0x0) fcntl$setflags(r6, 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000280)={0x1, [0x0]}, &(0x7f00000002c0)=0x8) fsopen(&(0x7f0000000040)='udf\x00', 0x1) close_range(r0, 0xffffffffffffffff, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGFLAGS(r7, 0x8004745a, &(0x7f0000000140)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x439, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1010}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gre={{0x8}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x44}}, 0x0) 1m38.117579566s ago: executing program 32 (id=198): r0 = socket$inet_tcp(0x2, 0x1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f00000001c0)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0xa) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000240)='./file1\x00', r2) r3 = socket(0x400000000010, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x80241, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, 0x0) dup(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtfilter={0x48, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {}, {0xb, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @broadcast}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x806}]}}]}, 0x48}}, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r6, 0x114, 0x2, 0x0, 0x0) fcntl$setflags(r6, 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000280)={0x1, [0x0]}, &(0x7f00000002c0)=0x8) fsopen(&(0x7f0000000040)='udf\x00', 0x1) close_range(r0, 0xffffffffffffffff, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGFLAGS(r7, 0x8004745a, &(0x7f0000000140)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x439, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1010}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gre={{0x8}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x44}}, 0x0) 12.11490077s ago: executing program 2 (id=421): sigaltstack(0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r0, r0, 0x0, 0x20000005) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x2c00, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000480)=0x0) r6 = dup(r1) syz_ublk_setup_queues(r6, r5, &(0x7f0000000180)={0x0, 0xfb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x6, 0x15e, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa348, 0x8, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x1, 0x3, 0x0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x82, 0xba}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x1034, {0x2000, 0x0, 0x15, 0x3776, 0x5}}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r7 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) 11.639751555s ago: executing program 2 (id=423): rseq(0x0, 0x0, 0x0, 0x0) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0xc, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x101c42, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xfffffee2) r1 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000480)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000040)=0xe095, 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r3 = syz_io_uring_setup(0x32bf, &(0x7f00000000c0)={0x0, 0x39c4, 0x2, 0x3, 0xfffffffe}, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r3, 0x11, 0x0, 0x0) shmat(0x0, &(0x7f00006c2000/0x4000)=nil, 0x5000) sched_setattr(r1, &(0x7f0000000000)={0x38, 0x0, 0x10000079, 0x5, 0x3, 0x0, 0x7ff, 0x5, 0x9, 0xfc8}, 0x0) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0xffffffffffffcfff) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) 10.838814416s ago: executing program 5 (id=426): syz_usb_connect(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x76, 0xe9, 0xe4, 0x10, 0x45e, 0x445, 0x87ed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x10, 0x4, "", [{{0x9, 0x4, 0xed, 0x5d, 0x2, 0x7d, 0xd8, 0xce, 0x2, [], [{{0x9, 0x5, 0xe, 0x2, 0x200, 0x8, 0x1}}, {{0x9, 0x5, 0x83, 0x2, 0x200, 0x9, 0x1, 0x6}}]}}]}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)={0x20, 0x22, 0x28, {0x28, 0xa, "c2631385269c87a15ca2bd283cbdeacc918d0fb74237cc6e442a52973661d609005544380000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x2b, 0x1, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000280)=0x6, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) r4 = add_key$user(0x0, &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x1, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0x53, 0x0) r6 = add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde300a06082a8648ce3d040302303a3138303606035504030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793020170d3234303431333232313632365a180f32313234303332303232313632365a303a3138303606035504030c2f43657274696669636174652076657269666963617428a2e0861e1ae90d412073656c662d74657374696e67206b65793059301306072a8648ce3d020106082a8648ce3d0301070342000407e56b51affc19412c88926b775771039ee2fe6e6a714ec7299f90e177189fc2e70a82d08ae181a9717c5a73fb25b95b1e248c739ff838f848b4ad1619c022c6a35d305b301d0603551d0e041604142900bcea1deb7bc8479a84a23d758efdfdd2b2d3301f0603551d230418301680142900bcea1deb7bc8479a84a23d758efdfdd2b2d3300c0603551d130101ff04023000300b0603551d0f040403020780300a06082a8648ce3d040302034700304402201ad7ac07c89738f489437ec7666ea5007c121db409760c996b8c265de9705cb4022073b7c77a5adb670a964219cf4f674f356aee2925f24fc810149d79691c7ad75d", 0x1d8, 0xfffffffffffffffd) r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r8 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, r7) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r8, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@chain={'key_or_keyring:', r6}) keyctl$link(0x8, r6, r8) keyctl$instantiate_iov(0x14, r5, &(0x7f00000018c0)=[{&(0x7f0000000200)="c8ce2aee8fb41291a922f63fa2a4541c72f81503ba4ca63e78106008c76da46df5d379bcfbfae2de1ef47584adb45b79f0679e52979ae8cc0ed25d75abee4e94425c3ea0964e84bbc6810438f8ff6152cbafe6f95fb0c6ceef3ffe3239f4084406eef02305d5", 0x66}, {&(0x7f0000000740)="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", 0x800}, {&(0x7f0000001740)="870cbd7dbb84d8c662db9f4aaf406a6b5ac18fa84115491c6c1f2d", 0x1b}, {&(0x7f0000001780)="ea9a12a583922d6137f39e92b52b1ee479041b0d7b5dbb691cff9693fb0e666272f7aa1244c1a914737acd77e12f044466e3a2327784d72b0cf71896a6908812db3e441dcc4014d54308c0281da35619bacd0e5ceb1caaae5f021d837950514ec25b9a5d648f0cf962c0c1db6a7b8c79920aaf6c", 0x74}, {&(0x7f0000001800)="c6cf4095c83b2dfef372ca5e45a589cea554463daec4ec9c6fabd2f5553e3ebbc23856d2ee686a9a591289407e4e87eafd90365cdddd9af99fa15122fbe5efd9d095732c73b7ab75bd1ba6aa98b3d44487a1c3190c41d03ae2bad74b6ad6fe569bb8579d642f8d29f4538662112d0962a7a2b40a760d2e12a140c511158e1934620d7ebc544a03a8738676c3c055836d18783cca14ae73d052b58fd6a0ab26ec13b4c2eef67d051dc0004d459603fa9bdc08cd26c55b2bed112dc7", 0xbb}], 0x5, r6) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000500)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000004c0), r3, 0x0, 0x1, 0x4}}, 0x20) 9.3790318s ago: executing program 4 (id=430): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000240)={[{0x6, 0x5, 0x93, 0x1, 0x0, 0x5f, 0xb, 0x20, 0xa6, 0x2, 0x5, 0x9, 0xfffffffe}, {0xfffffffd, 0xfffa, 0x0, 0x4, 0xfa, 0xf6, 0xce, 0x8, 0x4, 0xff, 0x1, 0xa6, 0x800000000000000}, {0xffffff01, 0x35, 0x80, 0x0, 0x4, 0x1, 0x19, 0xe, 0x7, 0x8, 0xfe, 0x4, 0x1000000000000004}], 0x7f}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents(r3, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x60) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8946, &(0x7f0000000700)={'vlan0\x00', @random='\x00\x00\x00\x00\x00 '}) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x20004000) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x2e, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000140)="04518f0ab17033035b302c874a76f3c2a371549de07a00f12fb7250079b66282bdcf", 0x22) 8.838249349s ago: executing program 2 (id=431): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r4, 0x0) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f00000009c0)='asymmetric\x00', &(0x7f0000001d40)) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="020900000200"], 0x10}}, 0x0) unshare(0x22020600) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r10 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r10, 0xc0184800, &(0x7f0000000100)={0x20004, r9, 0x2}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) select(0x2a, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x1, 0x2, 0x300}, &(0x7f0000000440)={0x0, 0x2710}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x54, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc17}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x5}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x54}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) 8.228007139s ago: executing program 4 (id=434): ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) lseek(0xffffffffffffffff, 0x952e, 0x3) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f0000000040)="c681dd300030d92f65752e7fc7a8e605992500001000000000000000", 0x1c, 0x0, 0x0, 0x0) memfd_create(&(0x7f0000000080)='\xecO\xdd\xbd\xfc\xfa\xe1\xea\xea\x00\xb0\xd8Y\x03\x00\x00\x00\x00\x00\x00\x7f.\x14\x89|cW\x11\x0e$]7\x99\x11\xfd\xbe/6&\xe6\x97\x1e\xfbon\'\x0f<;\xbe\xa5`\"E]\xda]\xb9\xeb>\xe9\xf2\x99\xa8\xbeOA\xf8\\\xeb[\xd7:{\r\x91.\xdbxn\x1b\x17\xccMz\x1dc\x1d5\x9fe/\xb7k}\xd7\xa6\xd1\xcf\x1f\xf3\xae\x9e\xd6\x040\x19\x88\xa7:OYw\xfe\xaf\xdf\x16\x88\xfe\xd3\x13\x9f!\xd7\xcf\x86\x9f\xe8)\x01\x01\x00\x00\x06^\xb4', 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x44860) munlockall() r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req={0x4, 0x1000, 0x2, 0x8f}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000540)=0x79, 0x4) bind$inet(r1, &(0x7f0000000580)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000005c0)={0x1, &(0x7f0000000600)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000640)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000680)='bbr', 0x3) sendmmsg$inet(r1, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000740)="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", 0x17e}, {&(0x7f00000008c0)="44900001000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fffe4b81ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4c", 0xa4}], 0x2}}], 0x1, 0x2090) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000bc0)=0xdf8, 0x4) writev(r1, &(0x7f0000000c00)=[{&(0x7f0000000c40)="396cf87d08c5a180ab47bb5bf073f86e645bdcec1582ceaa94028bed754c6a0a9ee51723aba90ee33675431670f9548c745b3da48b83d07d7eccc4eb90a1e0e95fa8b02a190ec6899154b7410e1d84c95416f10bf24f7da37249ca1fa786f57c23ba93b389f5220c418523d836670706d8805eb8fb9df7231e2e643ecb223f032a1ae299327d715623", 0x89}], 0x1) write(r1, &(0x7f0000000d40)="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", 0x362) 7.819105249s ago: executing program 5 (id=435): sigaltstack(0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r0, r0, 0x0, 0x20000005) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x2c00, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, 0x0) r5 = dup(r1) syz_ublk_setup_queues(r5, 0x0, &(0x7f0000000180)={0x0, 0xfb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x6, 0x15e, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa348, 0x8, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x1, 0x3, 0x0, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x82, 0xba}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r5, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x1034, {0x2000, 0x0, 0x15, 0x3776, 0x5}}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r6 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) 7.553843362s ago: executing program 3 (id=437): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001000030428bd780000f8ff", @ANYRES32=0x0, @ANYBLOB="4606090000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x400000000000235, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 7.455661617s ago: executing program 5 (id=438): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000840)={0x1000, 0x7, 0x3, 0x0, 0x0, 0x2}, 0x30, 0x0) landlock_restrict_self(r0, 0x0) r1 = getpgid(0x0) r2 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000040)={{0x0, 0x1}, {0xf}}) r3 = landlock_create_ruleset(&(0x7f0000000940)={0x2832, 0x0, 0x2}, 0x18, 0x0) syz_pidfd_open(r1, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x9, 0x3, 0x238, 0xe8, 0xffffffff, 0xffffffff, 0xe8, 0xffffffff, 0x1a0, 0xffffffff, 0xffffffff, 0x1a0, 0xffffffff, 0x3, &(0x7f0000000100), {[{{@ip={@broadcast, @empty, 0x0, 0xff000000, 'netdevsim0\x00', 'ip6tnl0\x00', {}, {}, 0x16, 0x3, 0x25}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xf000}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x1, 0x4, 0x9b1, '\x00', {0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) ioctl$XFS_IOC_ERROR_CLEARALL(r2, 0x40085875) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000400), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) statx(0xffffffffffffffff, &(0x7f00000005c0)='./file0\x00', 0x6000, 0x100, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f0000000700)=[0xee00, 0xee00, 0xee01]) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000f40)=@broute={'broute\x00', 0x20, 0x3, 0x530, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000a00], 0x0, &(0x7f0000000580), &(0x7f0000000a00)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x40, 0x888e, 'veth1_to_bridge\x00', 'geneve0\x00', 'ip6gre0\x00', 'veth1_to_bridge\x00', @multicast, [0x0, 0xff, 0x0, 0x0, 0xff], @local, [0xf1d0eef947be836a, 0x0, 0xff, 0x0, 0xff], 0x0, 0xe8, 0x118, 0x160, [@mac={{'mac\x00', 0x0, 0x10}, {{@remote}}}, @owner={{'owner\x00', 0x0, 0x18}, {{r7, 0xffffffffffffffff, 0xee00, r8, 0x6, 0x7}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffc}}}], @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x1, 0x9, {0x7}}}}}, {0x9, 0x8, 0x5, 'veth1_macvtap\x00', 'vxcan1\x00', 'team_slave_1\x00', 'dvmrp0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @empty, [0xff, 0x0, 0xff, 0x0, 0xff], 0x0, 0xf0, 0xf0, 0x140, [@statistic={{'statistic\x00', 0x0, 0x18}, {{0x1, 0x1, 0xfffffeff, 0xc, 0x9, {0xfffffffffffff0cf}}}}, @mark_m={{'mark_m\x00', 0x0, 0x18}, {{0x5, 0x83b7, 0x1}}}], [], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0xff, {0x8}}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{0x5, 0x20, 0x88e7, 'wlan0\x00', 'veth1_to_bridge\x00', 'ip6_vti0\x00', 'veth1_to_batadv\x00', @remote, [0x0, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff], 0x0, 0x130, 0x1b8, 0x200, [@physdev={{'physdev\x00', 0x0, 0x48}, {{'ipvlan1\x00', {0xff}, 'pim6reg\x00', {}, 0x8, 0x10}}}, @helper={{'helper\x00', 0x0, 0x28}, {{0x0, 'sip-20000\x00'}}}], [@common=@log={'log\x00', 0x28, {{0x0, "2cd5b5ae622d491d5d9b01e8605aba466660058e22332ab11b81e5248d22", 0x2}}}, @common=@mark={'mark\x00', 0x10, {{0xffffffd0, 0xfffffffffffffffc}}}], @common=@ERROR={'ERROR\x00', 0x20, {"e7da9a1be14d3f8f21b3129613946828372edcd60949c89275683a4f381e"}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffe}]}, 0x5a8) sendmsg$FOU_CMD_GET(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x28, r5, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IFINDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000) r9 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000500), 0x20c42, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r9, 0x8004500b, &(0x7f0000000540)=0x638) r10 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x438100, 0x0) syz_clone3(&(0x7f0000000980)={0x36942500, 0x0, 0x0, 0x0, {0x36}, 0x0, 0x0, 0x0, 0x0, 0x0, {r10}}, 0x58) landlock_restrict_self(r3, 0x0) r11 = syz_pidfd_open(r1, 0x0) pidfd_send_signal(r11, 0x21, 0x0, 0x4) 7.352151964s ago: executing program 4 (id=439): r0 = socket(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000140)="01154e000100001122334455892f", 0xe, 0x44011, &(0x7f0000000040)={0x11, 0xd, r1, 0x0, 0x0, 0x0}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'geneve0\x00'}) setitimer(0x0, &(0x7f0000000140)={{0x77359400}, {0x77359400}}, &(0x7f0000000000)) r3 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xc4, 0x4e, 0x5a, 0x10, 0xc45, 0x800a, 0xdd3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0x4, 0x80, 0xae, "", [{{0x9, 0x4, 0x72, 0xa, 0x0, 0x74, 0x9f, 0xfa, 0x4}}]}}]}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)={0x44, r4, 0x200, 0x70bd2c, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_virt_wifi\x00'}, @L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}]}, 0x44}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e21, 0x1, @loopback, 0x400014}, 0x1c) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3, 0x28, 0x0, 0xa00, 0x0, 0x5, 0x0, @dev, @remote}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r6 = syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000080)=ANY=[@ANYRES16=r5], 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000240)={0x24, &(0x7f0000000340)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0}, 0x0) r7 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r7, 0xc2604111, &(0x7f0000000400)={0x0, [[0xff7fffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r7, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r7, 0x40084146, &(0x7f0000000b00)=0x7300) syz_usb_control_io$rtl8150(r6, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000680)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0}) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000180)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000200)={0x2, 0x9, 0x0, 0x2, 0x2, 0x0, 0x0, 0x7}, 0x10}, 0x1, 0x400000000000000}, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc895d8eb00066c2", "c5998c867c22b401046a89606ffcf92e", "2c5be7ad", "a0ca05c0707e52f4"}, 0x28) lseek(0xffffffffffffffff, 0x3, 0x4) 7.053239924s ago: executing program 2 (id=440): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = memfd_create(&(0x7f0000000380)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) syz_usb_connect(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8=r1, @ANYBLOB="b23d"], 0x0) r2 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(0xffffffffffffffff) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) read$FUSE(r3, 0x0, 0x0) syz_clone(0x810011, 0x0, 0x0, 0x0, 0x0, 0x0) gettid() mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) readv(r0, 0x0, 0x0) write$P9_RVERSION(r2, &(0x7f0000002200)=ANY=[], 0xfffffcd9) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0xe, 0x0, 0x7fffffff}]}) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xd98df26cf76010eb, 0x28012, r4, 0xddf46000) r5 = socket(0xa, 0x3, 0x3a) ioctl$SIOCGETMIFCNT_IN6(r5, 0x89e0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mount$fuseblk(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x0, 0x1151400, 0x0) 6.849196003s ago: executing program 3 (id=441): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x6) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x5) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x7) landlock_restrict_self(r1, 0xf) landlock_restrict_self(r1, 0x6) landlock_restrict_self(r1, 0xc) landlock_restrict_self(r1, 0xe) landlock_restrict_self(r1, 0xa) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x7) landlock_restrict_self(r0, 0x4) landlock_restrict_self(r0, 0x5) landlock_restrict_self(r0, 0x1) landlock_restrict_self(r0, 0x0) r3 = landlock_create_ruleset(&(0x7f00000001c0)={0x2fbd, 0x1}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) 6.825522087s ago: executing program 1 (id=442): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) semtimedop(0x0, 0x0, 0x0, 0xfffffffffffffffe) fsopen(0x0, 0x0) epoll_create(0x80) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x109980, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f00000003c0)={0x20b, 0x0, [{0x6e89, 0x0, 0x1}, {0x3, 0x0, 0x907f}, {0x2}, {0x9, 0x0, 0x80}, {0x1, 0x0, 0x2c}, {0x4b2e, 0x0, 0x2}, {0xfffffffb, 0x0, 0xb0}, {0x80, 0x0, 0x6}, {0xa, 0x0, 0x3d}, {0x40, 0x0, 0x4}, {0x0, 0x0, 0x7}, {0x3, 0x0, 0x100}, {0x7, 0x0, 0x8000000000000001}, {0xfffffff9, 0x0, 0xffffffffffdff801}, {0x4, 0x0, 0x3}, {0x40, 0x0, 0x10f4}]}) syz_open_dev$vim2m(0x0, 0x7fff, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000200)=0x800001, 0x4) bind$inet6(r4, &(0x7f0000000240)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) listen(r4, 0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000280)=0x800001, 0x4) bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) listen(r5, 0x2) close_range(r3, 0xffffffffffffffff, 0x0) 6.727847474s ago: executing program 5 (id=443): syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x40000100, 0x0, 0x400000000001}]}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x12}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x6}]}, 0x2c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@deltaction={0x48, 0x18, 0x1, 0x70bd2a, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x34, 0x1, [{0x10, 0x8f, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb8a}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x44801}, 0x20040844) r6 = add_key$user(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x0}, &(0x7f00000002c0)="7e9b69e96551fe222f75b49035185ea820ba0a157c14fd46358d17b50f48e7d7e79098a58ce0b9d091eab87299a63c76e187fd681cc924ed7254f3d34a8f0b37293553", 0x43, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, &(0x7f0000000080)=0x9c) r7 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r8 = add_key$user(&(0x7f0000000400), 0x0, &(0x7f0000000d00)="3e12d23d346cfdeb1716f738374bc1c03bee4423fa20837e6e86b86592e9be83d8ebbbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b1a03dc55ea62d43c809e0ed6e56163fdab317afd5c34d614367e4425bb9a97e39fea3859296659bf4c2467159227ee717f4e959ac989e03926c4e20c2cda4efd37be90f502fd03e4748564d9", 0xac, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r6, r7, r8}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={'sha256\x00'}}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, 0x0, 0x0) unshare(0x28000600) socket$can_raw(0x1d, 0x3, 0x1) mq_open(&(0x7f0000000080)='!selin\xdb\xa1\x02\xbf\xd9l\xd7\xcd\xc0uxse\xee\x0e\xcd\xce6\xbf\xfa;\xb9-a\xb8\xef\x8de\x14\xbc\x9ej\xa1q\xa2\xa5\t\x98\x8a\x8f>\xba', 0x6e93ebbbcc088cf2, 0x0, 0x0) unshare(0x8000280) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) 6.297560725s ago: executing program 3 (id=444): r0 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f00000001c0)=0xa, 0x4) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r3 = add_key$user(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffb) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8100) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f0000003300)={0x9, 0x0, 0x0, &(0x7f0000003200)=[{&(0x7f00000002c0)=""/199, 0xc7}, {&(0x7f00000003c0)=""/5, 0x5}, {&(0x7f0000000400)=""/35, 0x23}, {&(0x7f0000000440)=""/231, 0xe7}, {&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000001dc0)=""/203, 0xcb}, {&(0x7f0000001ec0)=""/190, 0xbe}, {&(0x7f0000002100)=""/4096, 0x1000}, {&(0x7f0000003100)=""/204, 0xcc}], &(0x7f00000032c0)=[0xfffffffffffffeff, 0x6, 0x7]}, 0x20) pipe2$watch_queue(0x0, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x1f) keyctl$revoke(0x3, r3) open(0x0, 0x60840, 0x100) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x20004000) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0), 0x4) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000d80)) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000080)=0x200000000) 6.083084646s ago: executing program 5 (id=445): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[{0x10, 0x110, 0xd}], 0x10}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) io_setup(0x8, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xd8}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, 0x0, 0x0, 0x8, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x401, 0xfffffe0800000001, 0xfa11, 0xf7ffffff}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000332000/0x4000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f00001c0000/0x4000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000691000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1197, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0x1cb}) openat$nullb(0xffffffffffffff9c, 0x0, 0x161a02, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = msgget(0x2, 0x10) msgsnd(r2, &(0x7f00000002c0), 0x8, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mount$fuse(0x0, 0x0, 0x0, 0x80b2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, '\x00', 0x16}}, 0x18) 5.750857984s ago: executing program 1 (id=446): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="4606090000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x400000000000235, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 4.946137576s ago: executing program 1 (id=447): fsopen(&(0x7f0000000140)='pipefs\x00', 0x0) close(0xffffffffffffffff) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000480)=""/74, 0x4a) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48800}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd27, 0x8000, {0x0, 0x0, 0x0, r5, {0x8, 0xffff}, {}, {0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x21, 0x2}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) write$char_usb(r1, &(0x7f00000003c0)="90", 0x1) ioctl$TUNSETLINK(r2, 0x400454cd, 0x206) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) syz_clone3(&(0x7f0000000540)={0x200103000, &(0x7f0000000140), 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0}, 0x58) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000040)=0xff, 0x4) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r7, 0x4008ae6a, &(0x7f0000000280)={0x1, 0x0, [{0x80, 0x5, 0x1444f686f78a2d42, 0x0, @adapter={0x5, 0x7ffbffffffffffff, 0x8000000000000001, 0x80, 0x6}}]}) 3.746289657s ago: executing program 4 (id=448): sigaltstack(0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r0, r0, 0x0, 0x20000005) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x2c00, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, 0x0) r5 = dup(r1) syz_ublk_setup_queues(r5, 0x0, &(0x7f0000000180)={0x0, 0xfb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x6, 0x15e, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa348, 0x8, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x1, 0x3, 0x0, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x82, 0xba}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r5, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x1034, {0x2000, 0x0, 0x15, 0x3776, 0x5}}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r6 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) 3.290620894s ago: executing program 2 (id=449): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000080)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000002100), 0x50400, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x2d) r1 = socket(0x2b, 0x1, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000002140)=@raw={'raw\x00', 0x9, 0x3, 0x1c8, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x130, 0xffffffff, 0xffffffff, 0x130, 0xffffffff, 0x8000000, 0x0, {[{{@ip={@broadcast, @multicast2, 0xffffff00, 0x0, 'vcan0\x00', 'vlan0\x00', {}, {0xff}, 0x8, 0x2bbe86e5b28b8fc5, 0x30}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x4081}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x15, 0xa1, 0xfff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x228) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) getrandom(&(0x7f0000002380)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x16) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000006000/0x3000)=nil, 0x3000, 0xa) syz_clone(0x14004000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.954782022s ago: executing program 4 (id=450): pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0xff09) openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x203a2, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf4a, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4043, 0x8a, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, 0x1}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x3, 0x10d}, &(0x7f0000000d00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x617d, 0x10, 0x2000, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x4000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1, 0x40170, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4e48, 0x400, 0x2, 0x367}}], 0x1, &(0x7f0000000840)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xffb9, 0x4, 0x0, 0x0}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000500)={0x0, 0x30b5, 0x0, 0x2, 0x377}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r9, r10, r11, r12, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x6, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) r15 = dup(r14) syz_ublk_setup_queues(r15, r13, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0xfffffffd, 0x32d}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffb, 0x200, 0x1006, 0x80015a, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ac7, 0x4000, 0x10000000, 0x546}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x1, 0xfffffffc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r15, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x43, 0x826, 0x0, 0x0}}, 0x0) r16 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_ZERO(r16, 0x0, 0x48f, &(0x7f00000000c0)={0x11, @rand_addr=0x64010102, 0x4e23, 0x0, 'rr\x00', 0x36, 0xfffffff3, 0xf}, 0x2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r18, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmmsg(r17, &(0x7f0000001900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/71, 0x47}, 0x4}, {{0x0, 0x0, 0x0}, 0x7d}], 0x2, 0x40000002, 0x0) 2.733038012s ago: executing program 1 (id=451): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001000030428bd780000f8ff", @ANYRES32=0x0, @ANYBLOB="4606090000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x400000000000235, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 1.880317737s ago: executing program 3 (id=452): r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) r1 = syz_clone(0x40000080, &(0x7f0000000000), 0x0, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, r1, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r0, r0, 0x0, 0x20000005) userfaultfd(0x801) timer_create(0x0, 0x0, &(0x7f0000000300)) mmap(&(0x7f00006d2000/0x2000)=nil, 0x2000, 0xf, 0x4068032, r0, 0x1c5f1000) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) madvise(&(0x7f0000060000/0x1000)=nil, 0x1000, 0x19) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x38, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) listen(r2, 0xc) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f00000003c0)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1401aa0800060003"], 0x30}}, 0x4000090) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x14, r9, 0x1, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x20000000) 1.678223199s ago: executing program 5 (id=453): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x3938700}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x24, 0x26, 0x301, 0x670bd28, 0x25dfdbfc, {0x15}, [@typed={0xd, 0x15e, 0x0, 0x0, @binary="378d39000000000245"}]}, 0x24}, 0x1, 0x0, 0x0, 0x40008840}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='1000000\x00', 0x7) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$NILFS_IOCTL_GET_SUSTAT(r1, 0x80306e85, 0x0) write(r3, &(0x7f0000000280)='0\x00', 0x1) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x1) ioctl$OCFS2_IOC_UNRESVSP64(r6, 0x4030582b, &(0x7f0000000480)={0x2, 0x2, 0x6e, 0x3, 0x101, 0x401}) r7 = ioctl$KVM_CREATE_GUEST_MEMFD(r6, 0xc040aed4, &(0x7f0000000300)={0x200000, 0x1}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001440)={0xffffffffffffffff}) getsockopt$TIPC_CONN_TIMEOUT(r8, 0x10f, 0x82, &(0x7f0000001480), &(0x7f00000014c0)=0x4) ioctl$KVM_SET_USER_MEMORY_REGION2(r6, 0x40a0ae49, &(0x7f0000000340)={0x0, 0x4, 0x0, 0x200000, &(0x7f0000001000/0x1000)=nil, 0x0, r7}) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r9, 0xc040aed5, &(0x7f0000000400)={0x0, 0x200000}) inotify_init() 1.658436846s ago: executing program 1 (id=454): r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) sendmmsg$sock(r0, &(0x7f0000000480)=[{{&(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x0, 0x4, {0xa, 0x4e24, 0x7ff, @private1, 0x7ff}}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)="7e87aebfe4ffbe6eb3a532e4f90908e3aab34a1ba82ef1810fb58c3bd2017a4b9018ef17592b0636a8afc6b70b6673880f7b0aee82a65219f7895c89726f4bcf147396de9177591cd96fb8f9163afe6538c6c4b3f983aa4ae1e05e2449a9abaf9c1a4a2a5d3fd3ee1bc575d5b485f3e9905c12feae0675a133716f551114ed035a043f", 0x83}], 0x1}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000240)="8d858274887363d39d68725e4bfe9a0693a4e24cd1d0fc16d923a3e45295000e", 0x20}], 0x1, &(0x7f0000000340)=[@mark={{0x14, 0x1, 0x24, 0xa}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x8000}}, @txtime={{0x18, 0x1, 0x3d, 0x10001}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}], 0x78}}], 0x2, 0x4000080) socket$kcm(0x29, 0x7, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x840, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0x4c80, &(0x7f0000000600)={0x0, 0x0, "ac06f105d310541258e0a2a0b883eb29e46b4bfb57461914278705b6a55ba904cefb1f00536dfdc9ce9c12d1207f8a3ad1dad7ed0fc16b2ccd00000000000000080000000c0996d78e489e96651d35ca509de7cf52e7578e9ce37700000000000032936e283ae72a84cc5a72f07fef2fec1463729b336e892b5aadc70f51cb4582b7757f779254377a6a42493fb7023b15fb899a2072631f76cd0a59b17031b431163758724ac0df2d95b9c3fbccef0111f1fc6db466c73268e04c38df1f6bf2cc88aa6126229c332b887eb8e67102000631988ad55f281047000000000000000003000000000100", "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"}) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) open(0x0, 0x14927e, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffeff, 0x0, 0x0, 0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)={0x20, 0x1, 0x2, 0x3, 0x0, 0x0, {0x3, 0x0, 0x9}, [@CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x80c0}, 0x800) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0xfd, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x2f4}]}, 0x34}}, 0x0) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) openat$cgroup_devices(r10, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) 677.921087ms ago: executing program 3 (id=455): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94ce3377526beb5ab2c7b9ca5fa07558139ed03dc06270ee042", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0x40103e05, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r2}, 0x8) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000280)={0x28, 0x2, r4, 0x0, &(0x7f00001f2000/0x2000)=nil, 0x2000, 0x2}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000480)={0x48, 0x7, r5, 0x0, 0x10001, 0x0, 0x0, 0x1000, 0x26}) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f0000000200)={0x48, 0xb, r5, 0x0, r6}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1, 0x10, &(0x7f0000000000)=ANY=[], &(0x7f0000005d80)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101901, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r9 = syz_open_dev$dvb_demux(&(0x7f0000000000), 0x0, 0x60000) ioctl$DVB_DEMUX_DMX_STOP(r9, 0x6f2a) sendmsg$NFT_BATCH(r8, &(0x7f000000ba80)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f000000ba40)={&(0x7f000000bac0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xb52a73b4f5b34d37}}, [@NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}}, @NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x0, 0x0, 0x0, {0x3, 0x0, 0x6}}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x602, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}]}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x1405, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}]}, @NFT_MSG_DELSETELEM={0xaf4, 0xe, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x70c, 0x3, 0x0, 0x1, [{0x2f0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x2ec, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x67, 0x1, "5be8b1a6b4249fe9a23fcfcd2d6236a01f8236e8a5d9c9005c38e125d311154fa77580e6a58c96cb8bc29e3d695cf0d5b96e5682d021915eec964a6e3c6d0d1988e4a26d1161070bf50d5dcf484b22ac251790f1affb1feb05f139694a6ca18fd313a1"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xac, 0x1, "04d26a0cd53cf472d539e4b4e8c46295a123a2937e40850cdb120370e135f852cea7f99afe37509f115695990f9a884c1707a15722177103697fd6ea1a62a0bbf59a1bda32890d4cb11f30999dc36548e3b8652bf030050aa7f68da07090cf444a2be48a2de97c85a4721ce8e3e67aa5e6d415085982feb00bd89208e9b8937cad570ffddd15d6e366cd9d136e1a9528507bd0224b2f4dd05cd34c2d24c60d4a5b3875fd21457f64"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x6c, 0x1, "e7adfbeabaebaa7311ff11b191d29c98f479b2c38383c67cedae6676efcb1356033a5b4901c00f8a26eb46e0de07d146100630546018aa18a51c7a7865cbcfe537fe86e8740af97f5cbd6adca83935d49ea9fd3b43b988de6c091e82fd182de104f483f16023e0e6"}, @NFTA_DATA_VALUE={0xd6, 0x1, "c1824e39c8bb94ff46b6c70334ceca97da7a1e2f65cb053ea4a896fffa6c3fc3e661063735f8ff987e4edaf3de9f5fc5039de266c217cf92b44115530a0b96c73d35d5239e1f45f2bdb3524b27b1915d6f1cad9bd982d0bd609317a08d1013e576cf64a7ff733dae70957379696cd62a406337c949094383fb3c4187ec0223d0f7ecc58a2ad5e763c9f796100f76f4a1cad56335e559e3cf58bd7f903097787c57b84f54c6adb71e479325b7b435517a75db68c1a715f924a349b3d653403fef274b38280e6c5f5067850b0c91d277aa9293"}]}]}, {0x2e4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x2d4, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x4c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_META_DREG={0x8}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x17}]}}}, {0x4c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_DIR={0x5}]}}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x1a8, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x198, 0x2, 0x0, 0x1, [@NFTA_INNER_EXPR={0x194, 0x5, 0x0, 0x1, @immediate={{0xe}, @val={0x180, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_IMMEDIATE_DATA={0x50, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x20, 0x1, "e0cef750671ddb285df0dbba5a2702d3ac9a2a1ea7a28239e5d64398"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_IMMEDIATE_DATA={0x114, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x9d, 0x1, "da2d51daf48daca299831604e4a2a973b99ff1325338156262f7b5382a339859262dbb23e467cecd9f73481d08ff36e993685f628cfbdd862045840cb9aa383f5fc3b12203f3df457a20ddee21589b29d2ec273c46b6838fff0fd460ef2068e82659f16e9ee5dc2fa22faf2e5be3791f636b8906d04620cc641bc1943a7edb5538877cf3d9d848142732275b9268cbda135bb3e463fa2b9971"}, @NFTA_DATA_VALUE={0x18, 0x1, "970c01784a68e3178f1728862971a16ffafab1c0"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x2a}]}}}]}}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}]}, {0x134, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY={0x10c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x11, 0x1, "b0c53773e2bbe7b0505c19c41e"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xcb, 0x1, "865861256ffdfe2d4a713ee8b94581c4f075884034bd4fa93575f2aeee3b0421ca9cadb3cb897e33304a575d72170310fe1bdd6f15abd827195612c346659a0a1c434fa38cf5055ea84a363c594cea12891378ea10c0408398df64505b6d05797898d21ae3bc4c15a10c366d8287fad5b54dcd37346e3eac0748251667859ae10279eb1a9732bdae488100b9d85dac97f6ea5a14023a6c48cb49ef011eba3b587989a651e226bf0f29f34481bf662708fb556a9aba160866fa14a2a7592a7932dbdc78d57bb0a7"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xffffffffffffff97}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38c, 0x3, 0x0, 0x1, [{0x2f8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xb0, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x7f, 0x1, "8f2079f6be01a749cf2666737e4cec4d50f158eb8bd37b5c02a0d86809c15006bf5667b63aef654f3bd5e88e869ca66da166e60287946d99705ae4b68c502eec30257e204b749013fa880db90eb03368edabc5669a28bb6ab20ab66cde2354f5e8bc09763ab8b20777f5f51faa6c5823d912e28fffeff1f73ea89e"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xfffffffffffff4fb}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_SET_ELEM_EXPRESSIONS={0x21c, 0xb, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x15}]}}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x1b4, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1a4, 0x2, 0x0, 0x1, [@NFTA_BITWISE_MASK={0x1a0, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0xbd, 0x1, "89d4905736b8dcecdeca8eace507fba6d1bee1507e1a3d086b0115888765998ba96ff563947a75e5ebff4f1f261747cd53b0e4bc35a693d2b548611313af1951490edefb6f3e41c4773253e8a330d9ba0818d8ddfa1884a476e51e640483444882fd0c9f147452ca309a649b181c08ffe6b50345ec8cb4d8bd4e791313cb2bf28d4f4b4373af63ed36810f0cd396c4c40b972ce1d9dbaad3e797dccd2626657c54a682b5efd8e398e42c482b8e0be0f4e837b14a77587d4128"}, @NFTA_DATA_VALUE={0xc5, 0x1, "4f1dcec0674c4f96c18c1673b984e52f516908a095ec5a6bcb7330cb4e61527335258f5631c448bc1d283aa48e721f4ba521cf7925c2a31b44951d3a91b9de2e421314fc972d0abd963ff9dcfe911ed499c9f766a9544089761a0d5738aad72723bd8e9be25670ed049cbfd6a378fd1bf67f06f900d050354228ddc2ee36d01644db555b451b8648ffae6ca77481301479d0a271afd1974ce0342104c1dc77c9c753fddd5eb333e0d32e02d7131abcad1753d272f51ba495cbc1ee9c0be4e7436e"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x1c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x80, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x7c, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x64, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xc8f5cf9bd37be295}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x17}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xf}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x402, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_EXPRESSIONS={0x60, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x20, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xe51e}]}}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x1c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xc0c}, 0x1, 0x0, 0x0, 0x20042064}, 0x8000) r10 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1000000}}) r11 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r11, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x971}) ioctl$KVM_SET_GSI_ROUTING(r11, 0x4008ae6a, &(0x7f0000000540)={0x2, 0x0, [{0x0, 0x4, 0x0, 0x0, @adapter={0xfffffffffffffffe, 0x62e98893, 0x9, 0xfffffbff, 0x5}}, {0xd, 0x1, 0x1, 0x0, @irqchip={0x8, 0x6}}]}) 449.103794ms ago: executing program 2 (id=456): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = getpgrp(0x0) r3 = syz_pidfd_open(r2, 0x0) process_madvise(r3, 0x0, 0x0, 0xd, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x0, &(0x7f0000000140)}) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x80040, 0x54) clock_gettime(0xa, 0x0) ioctl(r1, 0x4048aec9, &(0x7f0000000200)="01000000000000000100"/72) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x11, r4, 0x0) ioctl(r4, 0x4048aecb, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'/54) ioctl(r4, 0x4048aecb, &(0x7f0000000100)="0100000000000000003000"/72) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x5, 0x9, 0xff, 0x1, 0x0, 0x5be, 0x101, 0x3ff, 0x7}, 0x0) ioctl(r4, 0x4048aecb, &(0x7f0000000100)="0200000000000000004000"/72) ioctl(r4, 0x4048aecb, &(0x7f0000000100)="070000000000000001000000ffffffff0100"/72) ioctl$KVM_RUN(r4, 0xae80, 0x0) 438.926367ms ago: executing program 4 (id=457): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) openat$adsp1(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x1c00000, 0x200000f, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='ceph\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000400)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\xd8\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000500)='test_dummy_encryption', &(0x7f0000000540)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x8985, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r8 = dup(r2) syz_ublk_setup_queues(r8, r7, &(0x7f0000000180)={0x0, 0x3e80, 0x800, 0x1, 0x32c, 0x0, r3}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x40, 0x10001, 0x2a5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x10000, 0x7, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbe, 0x0, r3}}], 0x1, &(0x7f0000000340)={0x2e, 0x3e, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x1, {}, 0x1f, 0x0, '\x00', {0x4, 0x5c0, 0x0, 0x0}}, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x40001, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x800) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r9, 0x40047438, &(0x7f0000000040)=0x1) 162.178142ms ago: executing program 1 (id=458): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0x40000}, 0x1c) syz_open_dev$I2C(0x0, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r6, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r6, 0x5b) read$watch_queue(r5, &(0x7f0000000000)=""/1, 0x1) keyctl$revoke(0x3, r4) ioctl$KVM_GET_CPUID2(r1, 0xc008ae91, &(0x7f0000000340)={0x6, 0x0, [{}, {}, {}, {}, {}, {}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) syz_io_uring_setup(0x1fc7, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x3b1}, 0x0, 0x0, &(0x7f0000000000)) mmap(&(0x7f000079d000/0x1000)=nil, 0x1000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 0s ago: executing program 3 (id=459): ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x9c}]}) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010c001ddf8208c007121522300000000109021b0001000000010904010001faf48d00090582"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000001300)="92", 0x2) ioctl$HIDIOCGRDESC(r0, 0x4008c002, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000002c0)) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x20040080) r2 = io_uring_setup(0x1a8, &(0x7f00000000c0)={0x0, 0xb1e1, 0x2, 0x2000003, 0x22c}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000048882, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r4, 0x5dba6000) io_uring_register$IORING_REGISTER_RING_FDS(r2, 0x13, &(0x7f0000001bc0), 0x2) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) openat$sequencer(0xffffffffffffff9c, 0x0, 0x8300, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) listns(&(0x7f0000000080)={0x20, 0x0, 0x6, 0x40000000, 0x0, 0x3}, 0x0, 0x0, 0x0) msync(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x6) kernel console output (not intermixed with test programs): 498][ T6177] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.530798][ T6177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.630776][ T6177] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.630912][ T6177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.821794][ T6177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.878309][ T6177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.994775][ T6177] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 128.146072][ T5728] usb 5-1: USB disconnect, device number 6 [ 128.196386][ T50] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.197395][ T50] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.198448][ T50] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.232784][ T50] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.455728][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 128.455748][ T30] audit: type=1326 audit(1792937465.208:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.1.82" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bb739f559 code=0x7ffc0000 [ 128.489896][ T30] audit: type=1326 audit(1792937465.208:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.1.82" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f4bb739f559 code=0x7ffc0000 [ 128.489948][ T30] audit: type=1326 audit(1792937465.238:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.1.82" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bb739f559 code=0x7ffc0000 [ 128.489991][ T30] audit: type=1326 audit(1792937465.238:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.1.82" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bb739f559 code=0x7ffc0000 [ 128.576947][ T30] audit: type=1326 audit(1792937465.328:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.1.82" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4bb739f559 code=0x7ffc0000 [ 128.577000][ T30] audit: type=1326 audit(1792937465.328:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.1.82" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bb739f559 code=0x7ffc0000 [ 128.578376][ T30] audit: type=1326 audit(1792937465.328:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.1.82" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bb739f559 code=0x7ffc0000 [ 128.578720][ T30] audit: type=1326 audit(1792937465.328:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.1.82" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4bb73a0dc7 code=0x7ffc0000 [ 128.581113][ T30] audit: type=1326 audit(1792937465.328:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.1.82" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f4bb735fd8e code=0x7ffc0000 [ 128.581439][ T30] audit: type=1326 audit(1792937465.328:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.1.82" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f4bb735fd8e code=0x7ffc0000 [ 128.842128][ T6195] Zero length message leads to an empty skb [ 129.173833][ T6204] netlink: 76 bytes leftover after parsing attributes in process `syz.1.84'. [ 130.394938][ T5755] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 130.544908][ T5755] usb 2-1: Using ep0 maxpacket: 16 [ 130.551439][ T5755] usb 2-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 130.569666][ T5755] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.569718][ T5755] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 130.569765][ T5755] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.640795][ T5755] usb 2-1: config 0 descriptor?? [ 130.662730][ T5755] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 131.744803][ T5702] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 131.916812][ T5702] usb 5-1: New USB device found: idVendor=0e8d, idProduct=0608, bcdDevice=1.00 [ 131.918020][ T5702] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 131.918063][ T5702] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 131.918118][ T5702] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.964858][ T6224] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 131.964960][ T6224] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 132.058699][ T5632] Bluetooth: hci5: Can't claim NULL iso interface [ 132.892650][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.892902][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.986011][ T6245] syzkaller0: entered promiscuous mode [ 132.986036][ T6245] syzkaller0: entered allmulticast mode [ 133.251039][ T29] usb 2-1: USB disconnect, device number 6 [ 133.529560][ T5632] Bluetooth: hci5: Failed to get device id (-71) [ 133.529703][ T5632] Bluetooth: hci5: HCI Enhanced Setup Synchronous Connection command is advertised, but not supported. [ 133.531822][ T29] usb 5-1: USB disconnect, device number 7 [ 134.489883][ T5633] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 134.669448][ T5633] usb 4-1: Using ep0 maxpacket: 8 [ 134.694274][ T5633] usb 4-1: unable to get BOS descriptor or descriptor too short [ 134.694328][ T5633] usb 4-1: New USB device found: idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 134.719017][ T5633] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 134.719047][ T5633] usb 4-1: config 0 has no interface number 0 [ 134.719088][ T5633] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 134.719117][ T5633] usb 4-1: config 0 interface 88 has no altsetting 0 [ 134.786447][ T5633] usb 4-1: string descriptor 0 read error: -22 [ 134.786550][ T5633] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 134.789157][ T5633] usb 4-1: config 0 descriptor?? [ 134.836884][ T5633] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.88/input/input5 [ 135.844040][ T6292] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer. [ 137.023815][ T6252] syz.2.97 (6252): drop_caches: 2 [ 137.056719][ T5702] usb 4-1: USB disconnect, device number 4 [ 137.214905][ T6302] netlink: 'syz.4.105': attribute type 1 has an invalid length. [ 137.313248][ T6254] syz.2.97 (6254): drop_caches: 2 [ 137.538497][ T6302] bond0: entered promiscuous mode [ 137.543393][ T6302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.703142][ T6308] bond0: (slave bridge1): making interface the new active one [ 137.703167][ T6308] bridge1: entered promiscuous mode [ 137.717697][ T6308] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 137.777615][ T6311] syzkaller0: entered promiscuous mode [ 137.777638][ T6311] syzkaller0: entered allmulticast mode [ 137.809352][ T6311] tipc: Started in network mode [ 137.809386][ T6311] tipc: Node identity be2381ac51b2, cluster identity 4711 [ 137.809611][ T6311] tipc: Enabled bearer , priority 0 [ 137.853221][ T6310] tipc: Resetting bearer [ 137.864596][ T6313] capability: warning: `syz.3.106' uses deprecated v2 capabilities in a way that may be insecure [ 137.949710][ T6310] tipc: Disabling bearer [ 137.981109][ T6315] netlink: 530 bytes leftover after parsing attributes in process `syz.4.109'. [ 138.648048][ T30] kauditd_printk_skb: 81 callbacks suppressed [ 138.648067][ T30] audit: type=1326 audit(1792937475.398:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6316 comm="syz.1.108" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bb739f559 code=0x7ffc0000 [ 138.648317][ T30] audit: type=1326 audit(1792937475.398:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6316 comm="syz.1.108" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bb739f559 code=0x7ffc0000 [ 138.651539][ T30] audit: type=1326 audit(1792937475.398:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6316 comm="syz.1.108" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f4bb739f559 code=0x7ffc0000 [ 138.883245][ T30] audit: type=1326 audit(1792937475.628:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6316 comm="syz.1.108" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bb739f559 code=0x7ffc0000 [ 138.883408][ T30] audit: type=1326 audit(1792937475.628:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6316 comm="syz.1.108" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bb739f559 code=0x7ffc0000 [ 139.821350][ T6345] batman_adv: batadv0: Adding interface: dummy0 [ 139.821370][ T6345] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 139.821400][ T6345] batman_adv: batadv0: Interface activated: dummy0 [ 139.868118][ T6346] team0: entered allmulticast mode [ 139.868143][ T6346] team_slave_0: entered allmulticast mode [ 139.868162][ T6346] team_slave_1: entered allmulticast mode [ 139.868742][ T6346] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 140.019718][ T6345] batadv0: mtu less than device minimum [ 140.021316][ T6345] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 140.022872][ T6345] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 140.024395][ T6345] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 140.028085][ T6345] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 140.031574][ T6345] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 140.035538][ T6345] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 140.039348][ T6345] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 140.042345][ T6345] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 140.316552][ T6352] netlink: 'syz.3.119': attribute type 1 has an invalid length. [ 140.366076][ T6355] netlink: 'syz.0.120': attribute type 1 has an invalid length. [ 140.413885][ T6360] netlink: 4 bytes leftover after parsing attributes in process `syz.1.122'. [ 140.433271][ T6361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.120'. [ 140.433293][ T6361] netlink: 4 bytes leftover after parsing attributes in process `syz.0.120'. [ 140.468576][ T6352] bond1: entered promiscuous mode [ 140.480010][ T6352] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.523403][ T6365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.120'. [ 140.523427][ T6365] netlink: 4 bytes leftover after parsing attributes in process `syz.0.120'. [ 140.630565][ T6355] bond1: entered promiscuous mode [ 140.643054][ T6355] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.968589][ T6352] bond1: (slave bridge1): making interface the new active one [ 140.968624][ T6352] bridge1: entered promiscuous mode [ 140.972478][ T6352] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 141.071079][ T6368] bond1: (slave bridge1): making interface the new active one [ 141.071109][ T6368] bridge1: entered promiscuous mode [ 141.091311][ T6368] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 141.270762][ T6375] loop4: detected capacity change from 0 to 524287964 [ 141.814225][ T146] IPVS: starting estimator thread 0... [ 141.930426][ T6394] IPVS: using max 38 ests per chain, 91200 per kthread [ 142.555558][ T5728] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 142.707660][ T5728] usb 2-1: unable to get BOS descriptor or descriptor too short [ 142.708447][ T5728] usb 2-1: not running at top speed; connect to a high speed hub [ 142.708471][ T5728] usb 2-1: New USB device found: idVendor=200c, idProduct=1018, bcdDevice=0.40 [ 142.709699][ T5728] usb 2-1: config 1 has an invalid descriptor of length 72, skipping remainder of the config [ 142.709723][ T5728] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 142.712277][ T5728] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.712297][ T5728] usb 2-1: Product: syz [ 142.712308][ T5728] usb 2-1: Manufacturer: syz [ 142.712319][ T5728] usb 2-1: SerialNumber: syz [ 143.653610][ T5728] usb 2-1: 3:0: cannot get RANGE values for control 4 (id 3) [ 143.674792][ T5728] usb 2-1: 3:0: cannot get RANGE values for control 5 (id 3) [ 143.703932][ T5728] usb 2-1: 3:0: cannot get RANGE values for control 8 (id 3) [ 143.722692][ T5728] usb 2-1: 3:0: failed to get current value for ch 0 (-71) [ 143.735640][ T5728] usb 2-1: 3:0: cannot get RANGE values for control 12 (id 3) [ 143.773745][ T5728] usb 2-1: 3:0: cannot get RANGE values for control 5 (id 3) [ 143.838646][ T5728] usb 2-1: USB disconnect, device number 7 [ 143.910006][ T5643] udevd[5643]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 144.290312][ T6413] syzkaller0: entered promiscuous mode [ 144.290339][ T6413] syzkaller0: entered allmulticast mode [ 144.309765][ T6413] tipc: Started in network mode [ 144.309790][ T6413] tipc: Node identity 6a1a4d8d12f3, cluster identity 4711 [ 144.310180][ T6413] tipc: Enabled bearer , priority 0 [ 144.342161][ T6413] tipc: Resetting bearer [ 144.352902][ T6411] tipc: Resetting bearer [ 144.370430][ T6411] tipc: Disabling bearer [ 144.946457][ T6423] netlink: 'syz.1.138': attribute type 1 has an invalid length. [ 145.015410][ T6423] bond1: entered promiscuous mode [ 145.020607][ T6423] 8021q: adding VLAN 0 to HW filter on device bond1 [ 145.080047][ T6423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.138'. [ 145.080067][ T6423] netlink: 4 bytes leftover after parsing attributes in process `syz.1.138'. [ 145.146015][ T6427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.138'. [ 145.146032][ T6427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.138'. [ 145.306369][ T6430] bond1: (slave bridge1): making interface the new active one [ 145.306400][ T6430] bridge1: entered promiscuous mode [ 145.331490][ T6430] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 148.737089][ T5709] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 148.896584][ T5709] usb 3-1: New USB device found: idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 148.903230][ T5709] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.933103][ T5709] usb 3-1: config 0 descriptor?? [ 148.959120][ T5709] cp210x 3-1:0.0: cp210x converter detected [ 149.348357][ T6468] nftables ruleset with unbound set [ 149.415258][ T6469] netlink: 'syz.0.150': attribute type 1 has an invalid length. [ 149.505897][ T6472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.150'. [ 149.505930][ T6472] netlink: 4 bytes leftover after parsing attributes in process `syz.0.150'. [ 149.569107][ T6475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.150'. [ 149.569134][ T6475] netlink: 4 bytes leftover after parsing attributes in process `syz.0.150'. [ 150.515872][ T5709] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 150.515910][ T5709] cp210x 3-1:0.0: querying part number failed [ 150.539926][ T5709] usb 3-1: cp210x converter now attached to ttyUSB0 [ 150.555826][ T5709] usb 3-1: USB disconnect, device number 4 [ 150.666435][ T5709] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 150.697110][ T5709] cp210x 3-1:0.0: device disconnected [ 153.476833][ T6435] syzkaller1: entered promiscuous mode [ 153.476852][ T6435] syzkaller1: entered allmulticast mode [ 153.529156][ T6469] bond2: entered promiscuous mode [ 153.529589][ T6469] 8021q: adding VLAN 0 to HW filter on device bond2 [ 153.564029][ T6478] bond2: (slave bridge2): making interface the new active one [ 153.564054][ T6478] bridge2: entered promiscuous mode [ 153.584921][ T6478] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 153.681015][ T6488] tipc: Enabling of bearer rejected, failed to enable media [ 153.950235][ T6499] input: syz0 as /devices/virtual/input/input6 [ 154.060456][ T30] audit: type=1326 audit(1792937490.808:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6490 comm="syz.3.154" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcf599f559 code=0x7ffc0000 [ 154.063977][ T30] audit: type=1326 audit(1792937490.808:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6490 comm="syz.3.154" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcf599f559 code=0x7ffc0000 [ 154.116205][ T30] audit: type=1326 audit(1792937490.868:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6490 comm="syz.3.154" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7fdcf599f559 code=0x7ffc0000 [ 154.142777][ T30] audit: type=1326 audit(1792937490.868:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6490 comm="syz.3.154" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcf599f559 code=0x7ffc0000 [ 154.172328][ T30] audit: type=1326 audit(1792937490.918:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6490 comm="syz.3.154" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcf599f559 code=0x7ffc0000 [ 154.488747][ T5755] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 154.635180][ T5755] usb 3-1: Using ep0 maxpacket: 8 [ 154.641196][ T5755] usb 3-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 154.663602][ T5755] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 154.663669][ T5755] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 154.663686][ T5755] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 154.663704][ T5755] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 154.663721][ T5755] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 154.663752][ T5755] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.959684][ T5755] usb 3-1: GET_CAPABILITIES returned 0 [ 154.959724][ T5755] usbtmc 3-1:16.0: can't read capabilities [ 155.227917][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 155.250573][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 155.250645][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 155.250700][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 155.250749][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 155.300603][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 155.300680][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 155.303688][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 155.342643][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 155.357297][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 155.376431][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 155.376974][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 155.377025][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 155.377584][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 155.377680][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 155.377768][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 157.300261][ T5728] usb 3-1: USB disconnect, device number 5 [ 157.653740][ T6520] netlink: 'syz.1.162': attribute type 1 has an invalid length. [ 157.807095][ T6520] 8021q: adding VLAN 0 to HW filter on device bond2 [ 158.010168][ T6522] 8021q: adding VLAN 0 to HW filter on device bond2 [ 158.025708][ T6522] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 158.049420][ T6522] bond2: (slave gre1): Error -95 calling set_mac_address [ 158.282278][ T6527] gretap1: entered promiscuous mode [ 158.302887][ T6527] bond2: (slave gretap1): making interface the new active one [ 158.303387][ T6527] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 158.413502][ T6520] 8021q: adding VLAN 0 to HW filter on device bond3 [ 158.442609][ T6520] bond2: (slave bond3): Enslaving as an active interface with a down link [ 158.496232][ T6530] bond2 (unregistering): (slave gretap1): Releasing active interface [ 158.537832][ T6530] bond2 (unregistering): (slave bond3): Releasing active interface [ 158.565629][ T6530] bond2 (unregistering): Released all slaves [ 159.616886][ T5723] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 159.659660][ T6547] netlink: 16 bytes leftover after parsing attributes in process `syz.0.169'. [ 159.791786][ T5723] usb 3-1: unable to get BOS descriptor or descriptor too short [ 159.791835][ T5723] usb 3-1: New USB device found: idVendor=1235, idProduct=8010, bcdDevice=0.40 [ 159.817431][ T5723] usb 3-1: config 1 has an invalid descriptor of length 103, skipping remainder of the config [ 159.817457][ T5723] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 159.847919][ T5723] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.847941][ T5723] usb 3-1: Product: syz [ 159.847953][ T5723] usb 3-1: Manufacturer: syz [ 159.847963][ T5723] usb 3-1: SerialNumber: syz [ 160.049063][ T6536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.166'. [ 160.131157][ T30] audit: type=1326 audit(1792937496.878:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6535 comm="syz.4.166" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09a39f559 code=0x7ffc0000 [ 160.133500][ T30] audit: type=1326 audit(1792937496.878:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6535 comm="syz.4.166" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09a39f559 code=0x7ffc0000 [ 160.159078][ T30] audit: type=1326 audit(1792937496.888:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6535 comm="syz.4.166" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fe09a39f559 code=0x7ffc0000 [ 160.159133][ T30] audit: type=1326 audit(1792937496.888:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6535 comm="syz.4.166" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09a39f559 code=0x7ffc0000 [ 160.239117][ T30] audit: type=1326 audit(1792937496.988:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6535 comm="syz.4.166" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe09a39f559 code=0x7ffc0000 [ 160.275469][ T30] audit: type=1326 audit(1792937496.988:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6535 comm="syz.4.166" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09a39f559 code=0x7ffc0000 [ 160.275635][ T30] audit: type=1326 audit(1792937497.028:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6535 comm="syz.4.166" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fe09a39f559 code=0x7ffc0000 [ 160.276208][ T30] audit: type=1326 audit(1792937497.028:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6535 comm="syz.4.166" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09a39f559 code=0x7ffc0000 [ 160.276265][ T30] audit: type=1326 audit(1792937497.028:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6535 comm="syz.4.166" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09a39f559 code=0x7ffc0000 [ 160.277970][ T30] audit: type=1326 audit(1792937497.028:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6535 comm="syz.4.166" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe09a39f559 code=0x7ffc0000 [ 160.280551][ T6536] netlink: 24 bytes leftover after parsing attributes in process `syz.4.166'. [ 160.280906][ T6536] netlink: 4 bytes leftover after parsing attributes in process `syz.4.166'. [ 160.843029][ T5723] usb 3-1: unit 3 not found! [ 160.885439][ T6558] syzkaller1: entered promiscuous mode [ 160.885462][ T6558] syzkaller1: entered allmulticast mode [ 161.136869][ T5723] usb 3-1: USB disconnect, device number 6 [ 161.338262][ T5643] udevd[5643]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 161.481719][ T6564] mmap: syz.1.175 (6564) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 162.178916][ T6579] netlink: 8 bytes leftover after parsing attributes in process `syz.3.179'. [ 163.985116][ T5633] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 164.140192][ T5633] usb 4-1: Using ep0 maxpacket: 8 [ 164.142459][ T5633] usb 4-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 164.159803][ T5633] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 164.159838][ T5633] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.165265][ T5633] usb 4-1: config 0 descriptor?? [ 164.565968][ T5633] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 164.858445][ T6620] trusted_key: encrypted_key: insufficient parameters specified [ 165.073788][ T5709] usb 4-1: USB disconnect, device number 5 [ 165.241973][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 165.241993][ T30] audit: type=1800 audit(1792937501.988:219): pid=6622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.189" name="/" dev="fuse" ino=1 res=0 errno=-22 [ 165.925590][ T5709] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 166.076839][ T5709] usb 2-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 166.116389][ T5709] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.116410][ T5709] usb 2-1: Product: syz [ 166.116421][ T5709] usb 2-1: Manufacturer: syz [ 166.116431][ T5709] usb 2-1: SerialNumber: syz [ 166.149917][ T5709] usb 2-1: config 0 descriptor?? [ 166.356001][ T5755] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 166.402511][ T5709] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 166.513235][ T5755] usb 4-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 166.524699][ T5755] usb 4-1: config 0 has no interfaces? [ 166.538831][ T5755] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.538851][ T5755] usb 4-1: Product: syz [ 166.538862][ T5755] usb 4-1: Manufacturer: syz [ 166.538873][ T5755] usb 4-1: SerialNumber: syz [ 166.575655][ T5755] usb 4-1: config 0 descriptor?? [ 167.312699][ T5633] usb 4-1: USB disconnect, device number 6 [ 168.311031][ T5709] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 168.353764][ T5709] usb 2-1: USB disconnect, device number 8 [ 168.754691][ T5723] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 168.917044][ T5723] usb 3-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 168.918146][ T5723] usb 3-1: config 0 has no interfaces? [ 168.939567][ T5723] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 168.939595][ T5723] usb 3-1: Product: syz [ 168.939611][ T5723] usb 3-1: Manufacturer: syz [ 168.967981][ T5723] usb 3-1: config 0 descriptor?? [ 169.306784][ T5723] usb 3-1: USB disconnect, device number 7 [ 169.960998][ T6663] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 170.281304][ T5646] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 170.286884][ T5646] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 170.303619][ T5646] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 170.315176][ T5646] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 170.316679][ T5646] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 171.366596][ T5632] Bluetooth: hci3: command 0x0406 tx timeout [ 171.951586][ T6695] netlink: 'syz.3.207': attribute type 29 has an invalid length. [ 172.404790][ T5640] Bluetooth: hci1: command tx timeout [ 172.427127][ T6676] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.427387][ T6676] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.427511][ T6676] bridge_slave_0: entered allmulticast mode [ 172.459409][ T6676] bridge_slave_0: entered promiscuous mode [ 172.469964][ T5640] Bluetooth: hci0: unexpected event 0x01 length: 4 > 1 [ 172.472752][ T6676] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.490527][ T6676] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.490672][ T6676] bridge_slave_1: entered allmulticast mode [ 172.510745][ T6676] bridge_slave_1: entered promiscuous mode [ 172.613127][ T6707] netlink: 'syz.4.209': attribute type 1 has an invalid length. [ 172.706098][ T6709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.209'. [ 172.706117][ T6709] netlink: 4 bytes leftover after parsing attributes in process `syz.4.209'. [ 172.782440][ T6710] netlink: 8 bytes leftover after parsing attributes in process `syz.4.209'. [ 172.782458][ T6710] netlink: 4 bytes leftover after parsing attributes in process `syz.4.209'. [ 172.827177][ T6703] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 172.827275][ T6703] block device autoloading is deprecated and will be removed. [ 172.872098][ T6707] bond1: entered promiscuous mode [ 172.881560][ T6707] 8021q: adding VLAN 0 to HW filter on device bond1 [ 172.910218][ T6676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.961769][ T6676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.069941][ T6711] bond1: (slave bridge2): making interface the new active one [ 173.069971][ T6711] bridge2: entered promiscuous mode [ 173.100611][ T6711] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 173.344501][ T6676] team0: Port device team_slave_0 added [ 173.437947][ T6676] team0: Port device team_slave_1 added [ 173.603653][ T6676] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.603701][ T6676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.603721][ T6676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.666321][ T6676] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.666335][ T6676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.666370][ T6676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.826135][ T30] audit: type=1326 audit(1792937510.578:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6720 comm="syz.4.213" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09a39f559 code=0x7ffc0000 [ 173.826177][ T30] audit: type=1326 audit(1792937510.578:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6720 comm="syz.4.213" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09a39f559 code=0x7ffc0000 [ 173.886124][ T30] audit: type=1326 audit(1792937510.638:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6720 comm="syz.4.213" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09a39f559 code=0x7ffc0000 [ 173.886982][ T30] audit: type=1326 audit(1792937510.638:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6720 comm="syz.4.213" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09a39f559 code=0x7ffc0000 [ 173.892133][ T30] audit: type=1326 audit(1792937510.638:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6720 comm="syz.4.213" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fe09a39f559 code=0x7ffc0000 [ 173.978856][ T30] audit: type=1326 audit(1792937510.728:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6720 comm="syz.4.213" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09a39f559 code=0x7ffc0000 [ 173.978915][ T30] audit: type=1326 audit(1792937510.728:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6720 comm="syz.4.213" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe09a39f2c2 code=0x7ffc0000 [ 173.978964][ T30] audit: type=1326 audit(1792937510.728:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6720 comm="syz.4.213" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fe09a39f357 code=0x7ffc0000 [ 173.978994][ T30] audit: type=1326 audit(1792937510.728:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6720 comm="syz.4.213" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fe09a35c251 code=0x7ffc0000 [ 173.979025][ T30] audit: type=1326 audit(1792937510.728:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6720 comm="syz.4.213" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fe09a3a0349 code=0x7ffc0000 [ 174.259529][ T6676] hsr_slave_0: entered promiscuous mode [ 174.278526][ T6676] hsr_slave_1: entered promiscuous mode [ 174.484922][ T5640] Bluetooth: hci1: command tx timeout [ 174.977814][ T5709] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 175.124723][ T5709] usb 2-1: Using ep0 maxpacket: 8 [ 175.135052][ T5709] usb 2-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 175.136887][ T5709] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 175.136939][ T5709] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 175.136965][ T5709] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 175.136991][ T5709] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 175.137017][ T5709] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 175.137060][ T5709] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.490464][ T5709] usb 2-1: GET_CAPABILITIES returned 0 [ 175.490500][ T5709] usbtmc 2-1:16.0: can't read capabilities [ 175.535763][ T5755] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 175.699468][ T5755] usb 4-1: New USB device found: idVendor=1532, idProduct=010d, bcdDevice=0.00 [ 175.717631][ T5755] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 175.717658][ T5755] usb 4-1: config 0 interface 0 has no altsetting 0 [ 175.717685][ T5755] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.738585][ T5755] usb 4-1: config 0 descriptor?? [ 175.765435][ T6735] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 175.860453][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 175.860513][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 175.860561][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 175.860603][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 175.860784][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 175.860840][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 175.860885][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 175.860923][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 175.861158][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 175.861209][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 175.861242][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 175.861288][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 175.861547][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 175.861592][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 175.861639][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 175.861682][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 175.912458][ T5709] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 176.154675][ T5709] usb 3-1: Using ep0 maxpacket: 32 [ 176.155446][ T5709] usb 3-1: New USB device found: idVendor=05ac, idProduct=120a, bcdDevice=7b.2d [ 176.163960][ T5709] usb 3-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 176.163987][ T5709] usb 3-1: config 5 has 0 interfaces, different from the descriptor's value: 1 [ 176.205991][ T5709] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.206019][ T5709] usb 3-1: Product: syz [ 176.206034][ T5709] usb 3-1: Manufacturer: syz [ 176.206048][ T5709] usb 3-1: SerialNumber: syz [ 176.486463][ T6735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.216'. [ 176.564929][ T5640] Bluetooth: hci1: command tx timeout [ 176.573366][ T5702] usb 2-1: USB disconnect, device number 9 [ 176.681371][ T6676] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 176.733649][ T6676] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 176.747118][ T6676] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 176.755383][ T5755] razer 0003:1532:010D.0001: unknown main item tag 0x0 [ 176.755413][ T5755] razer 0003:1532:010D.0001: unknown main item tag 0x0 [ 176.755432][ T5755] razer 0003:1532:010D.0001: unknown main item tag 0x0 [ 176.755450][ T5755] razer 0003:1532:010D.0001: unknown main item tag 0x0 [ 176.755469][ T5755] razer 0003:1532:010D.0001: unknown main item tag 0x0 [ 176.755487][ T5755] razer 0003:1532:010D.0001: unknown main item tag 0x0 [ 176.755523][ T5755] razer 0003:1532:010D.0001: unknown main item tag 0x0 [ 176.755542][ T5755] razer 0003:1532:010D.0001: unknown main item tag 0x0 [ 176.755560][ T5755] razer 0003:1532:010D.0001: unknown main item tag 0x0 [ 176.755578][ T5755] razer 0003:1532:010D.0001: unknown main item tag 0x0 [ 176.866811][ T6676] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 176.885596][ T6676] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 176.922658][ T6676] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 176.940747][ T6676] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 176.996272][ T6676] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 177.006531][ T5755] razer 0003:1532:010D.0001: failed to enable macro keys: -71 [ 177.092989][ T5755] razer 0003:1532:010D.0001: hidraw0: USB HID v7f.fd Device [HID 1532:010d] on usb-dummy_hcd.3-1/input0 [ 177.114782][ T5755] usb 4-1: USB disconnect, device number 7 [ 177.662340][ T6747] fido_id[6747]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 177.839259][ T6676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.930638][ T6750] vivid-003: ================= START STATUS ================= [ 177.930726][ T6750] vivid-003: RDS Tx I/O Mode: Controls [ 177.930770][ T6750] vivid-003: RDS Program ID: 32904 [ 177.930793][ T6750] vivid-003: RDS Program Type: 3 [ 177.930815][ T6750] vivid-003: RDS PS Name: VIVID-TX [ 177.930836][ T6750] vivid-003: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 177.930888][ T6750] vivid-003: RDS Stereo: true [ 177.930908][ T6750] vivid-003: RDS Artificial Head: false [ 177.930928][ T6750] vivid-003: RDS Compressed: false [ 177.930948][ T6750] vivid-003: RDS Dynamic PTY: false [ 177.930968][ T6750] vivid-003: RDS Traffic Announcement: false [ 177.933848][ T6750] vivid-003: RDS Traffic Program: true [ 177.933873][ T6750] vivid-003: RDS Music: true [ 177.933895][ T6750] vivid-003: ================== END STATUS ================== [ 178.068481][ T6676] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.124940][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.125051][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.213167][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.213281][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.645591][ T5640] Bluetooth: hci1: command tx timeout [ 178.832850][ T6676] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.898932][ T30] kauditd_printk_skb: 548 callbacks suppressed [ 178.898952][ T30] audit: type=1326 audit(1792937515.648:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6752 comm="syz.1.219" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bb739f559 code=0x7ffc0000 [ 178.938608][ T30] audit: type=1326 audit(1792937515.648:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6752 comm="syz.1.219" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bb739f559 code=0x7ffc0000 [ 178.943632][ T30] audit: type=1326 audit(1792937515.688:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6752 comm="syz.1.219" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f4bb739f559 code=0x7ffc0000 [ 179.004840][ T30] audit: type=1326 audit(1792937515.748:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6752 comm="syz.1.219" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bb739f559 code=0x7ffc0000 [ 179.005444][ T30] audit: type=1326 audit(1792937515.758:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6752 comm="syz.1.219" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bb739f559 code=0x7ffc0000 [ 179.074719][ T30] audit: type=1326 audit(1792937515.748:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6752 comm="syz.1.219" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bb739f559 code=0x7ffc0000 [ 179.074770][ T30] audit: type=1326 audit(1792937515.798:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6752 comm="syz.1.219" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bb739f559 code=0x7ffc0000 [ 179.074823][ T30] audit: type=1326 audit(1792937515.798:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6752 comm="syz.1.219" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4bb735fd8e code=0x7ffc0000 [ 179.074866][ T30] audit: type=1326 audit(1792937515.808:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6752 comm="syz.1.219" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4bb739f1eb code=0x7ffc0000 [ 179.074909][ T30] audit: type=1326 audit(1792937515.808:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6752 comm="syz.1.219" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4bb739f1eb code=0x7ffc0000 [ 179.345350][ T5728] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 179.398908][ T6676] veth0_vlan: entered promiscuous mode [ 179.476806][ T6676] veth1_vlan: entered promiscuous mode [ 179.495889][ T5728] usb 2-1: Using ep0 maxpacket: 16 [ 179.498476][ T5728] usb 2-1: New USB device found: idVendor=0763, idProduct=2001, bcdDevice=0.40 [ 179.594344][ T5728] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.594374][ T5728] usb 2-1: Product: syz [ 179.594391][ T5728] usb 2-1: Manufacturer: syz [ 179.594408][ T5728] usb 2-1: SerialNumber: syz [ 179.890827][ T6676] veth0_macvtap: entered promiscuous mode [ 179.960900][ T6676] veth1_macvtap: entered promiscuous mode [ 180.171699][ T6676] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.234318][ T6676] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.319059][ T6754] warning: `syz.1.219' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 180.335843][ T146] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.426903][ T62] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.451009][ T146] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.451410][ T146] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.485916][ T5709] apple-mfi-fastcharge 3-1: USB disconnect, device number 8 [ 180.941802][ T1274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.941826][ T1274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.080939][ T5728] usb 2-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 181.080975][ T5728] usb 2-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 181.121969][ T5728] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 181.221602][ T1274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.221619][ T1274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.404371][ T5728] usb 2-1: USB disconnect, device number 10 [ 181.548373][ T5643] udevd[5643]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 182.725874][ T5709] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 182.882134][ T5709] usb 3-1: Using ep0 maxpacket: 16 [ 182.901052][ T5709] usb 3-1: New USB device found: idVendor=0763, idProduct=2001, bcdDevice=0.40 [ 182.988771][ T5709] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.988801][ T5709] usb 3-1: Product: syz [ 182.988816][ T5709] usb 3-1: Manufacturer: syz [ 182.988835][ T5709] usb 3-1: SerialNumber: syz [ 183.074817][ T5724] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 183.249381][ T5724] usb 2-1: Using ep0 maxpacket: 8 [ 183.325427][ T5724] usb 2-1: unable to get BOS descriptor or descriptor too short [ 183.325476][ T5724] usb 2-1: New USB device found: idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 183.367188][ T5724] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 183.367252][ T5724] usb 2-1: config 0 has no interface number 0 [ 183.383267][ T5724] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 183.383293][ T5724] usb 2-1: config 0 interface 88 has no altsetting 0 [ 183.524077][ T5724] usb 2-1: string descriptor 0 read error: -22 [ 183.524218][ T5724] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 183.548085][ T5724] usb 2-1: config 0 descriptor?? [ 183.574161][ T5724] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.88/input/input8 [ 183.932135][ T30] kauditd_printk_skb: 231 callbacks suppressed [ 183.932157][ T30] audit: type=1326 audit(1792937520.678:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6760 comm="syz.2.230" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd255f5fd8e code=0x7ffc0000 [ 184.039474][ T30] audit: type=1326 audit(1792937520.788:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6760 comm="syz.2.230" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd255f5fd8e code=0x7ffc0000 [ 184.139912][ T30] audit: type=1326 audit(1792937520.888:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6760 comm="syz.2.230" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd255f5fd8e code=0x7ffc0000 [ 184.240343][ T30] audit: type=1326 audit(1792937520.988:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6760 comm="syz.2.230" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd255f9f559 code=0x7ffc0000 [ 184.258000][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 184.388622][ T5709] usb 3-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 184.388653][ T5709] usb 3-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 184.392402][ T5709] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 184.707245][ T5709] usb 3-1: USB disconnect, device number 9 [ 184.894346][ T5643] udevd[5643]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: Permission denied [ 184.941896][ T6792] syzkaller0: entered promiscuous mode [ 184.941915][ T6792] syzkaller0: entered allmulticast mode [ 185.028096][ T6795] xt_limit: Overflow, try lower: 268435456/134217728 [ 185.862649][ T5709] usb 2-1: USB disconnect, device number 11 [ 185.920680][ T30] audit: type=1326 audit(1792937522.668:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6802 comm="syz.2.228" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd255f9f559 code=0x0 [ 186.515902][ T5709] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 186.688413][ T5709] usb 2-1: New USB device found: idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 186.693652][ T5709] usb 2-1: config 127 has an invalid interface number: 1 but max is 0 [ 186.693673][ T5709] usb 2-1: config 127 has no interface number 0 [ 186.693702][ T5709] usb 2-1: config 127 interface 1 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 186.763651][ T5709] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.763672][ T5709] usb 2-1: Product: syz [ 186.763683][ T5709] usb 2-1: Manufacturer: syz [ 186.763693][ T5709] usb 2-1: SerialNumber: syz [ 186.805105][ T6811] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 186.824576][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 187.273861][ T6811] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 187.498634][ T6811] vivid-002: disconnect [ 188.356695][ T5709] asix 2-1:127.1 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 188.357079][ T5709] asix 2-1:127.1: probe with driver asix failed with error -71 [ 188.396760][ T5709] usb 2-1: USB disconnect, device number 12 [ 188.403451][ T6811] vivid-002: reconnect [ 188.799740][ T1274] IPVS: starting estimator thread 0... [ 188.895019][ T6825] IPVS: using max 37 ests per chain, 88800 per kthread [ 188.948905][ T6823] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[5652] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ      rr @  @       rr s     & %½p ûÛß% \x07 gF- [ 189.247476][ T5723] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 189.446069][ T5723] usb 2-1: New USB device found: idVendor=0cf3, idProduct=9271, bcdDevice=1.08 [ 189.494069][ T5723] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.494099][ T5723] usb 2-1: Product: syz [ 189.494115][ T5723] usb 2-1: Manufacturer: syz [ 189.494132][ T5723] usb 2-1: SerialNumber: syz [ 189.929261][ T1232] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 190.481381][ T6823] netlink: 'syz.1.235': attribute type 12 has an invalid length. [ 190.556742][ T6823] program syz.1.235 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 190.640186][ T5709] usb 2-1: USB disconnect, device number 13 [ 191.045849][ T1232] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 191.068266][ T1232] ath9k_htc: Failed to initialize the device [ 191.088734][ T5709] usb 2-1: ath9k_htc: USB layer deinitialized [ 191.288374][ T6842] netlink: 8 bytes leftover after parsing attributes in process `syz.5.240'. [ 191.562725][ T6845] syz.1.241 (6845): /proc/6844/oom_adj is deprecated, please use /proc/6844/oom_score_adj instead. [ 191.639275][ T6849] syz.1.241 uses obsolete (PF_INET,SOCK_PACKET) [ 192.412138][ T30] audit: type=1326 audit(1792937529.158:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6853 comm="syz.3.244" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcf599f559 code=0x7ffc0000 [ 192.413724][ T30] audit: type=1326 audit(1792937529.158:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6853 comm="syz.3.244" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcf599f559 code=0x7ffc0000 [ 192.515456][ T30] audit: type=1326 audit(1792937529.268:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6853 comm="syz.3.244" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fdcf599f559 code=0x7ffc0000 [ 192.515522][ T30] audit: type=1326 audit(1792937529.268:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6853 comm="syz.3.244" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcf599f559 code=0x7ffc0000 [ 192.516489][ T30] audit: type=1326 audit(1792937529.268:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6853 comm="syz.3.244" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcf599f559 code=0x7ffc0000 [ 192.600317][ T30] audit: type=1326 audit(1792937529.358:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6853 comm="syz.3.244" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdcf599f559 code=0x7ffc0000 [ 192.601387][ T30] audit: type=1326 audit(1792937529.358:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6853 comm="syz.3.244" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcf599f559 code=0x7ffc0000 [ 192.601575][ T30] audit: type=1326 audit(1792937529.358:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6853 comm="syz.3.244" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcf599f559 code=0x7ffc0000 [ 192.718239][ T30] audit: type=1326 audit(1792937529.468:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6853 comm="syz.3.244" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdcf599f559 code=0x7ffc0000 [ 192.718578][ T30] audit: type=1326 audit(1792937529.468:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6853 comm="syz.3.244" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcf599f559 code=0x7ffc0000 [ 192.949725][ T6864] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 193.031609][ T6862] pimreg: entered allmulticast mode [ 193.566863][ T5709] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 193.654710][ T1232] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 193.718887][ T5709] usb 4-1: New USB device found: idVendor=1235, idProduct=8012, bcdDevice=0.40 [ 193.727417][ T5709] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 193.773183][ T5709] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.773205][ T5709] usb 4-1: Product: syz [ 193.773215][ T5709] usb 4-1: Manufacturer: syz [ 193.773226][ T5709] usb 4-1: SerialNumber: syz [ 193.824713][ T1232] usb 2-1: Using ep0 maxpacket: 8 [ 193.825468][ T1232] usb 2-1: New USB device found: idVendor=0413, idProduct=6a04, bcdDevice=27.2b [ 193.826990][ T1232] usb 2-1: config 135 interface 0 has no altsetting 0 [ 193.858540][ T1232] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.858568][ T1232] usb 2-1: Product: syz [ 193.858585][ T1232] usb 2-1: Manufacturer: syz [ 193.858600][ T1232] usb 2-1: SerialNumber: syz [ 194.339006][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.339100][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.441582][ T6870] lo: entered promiscuous mode [ 194.536571][ T6870] tunl0: entered promiscuous mode [ 194.583321][ T6870] gre0: entered promiscuous mode [ 194.702747][ T6870] gretap0: entered promiscuous mode [ 194.759992][ T6870] erspan0: entered promiscuous mode [ 194.789352][ T6870] ip_vti0: entered promiscuous mode [ 194.830241][ T6870] ip6_vti0: entered promiscuous mode [ 194.870995][ T6870] sit0: entered promiscuous mode [ 194.910095][ T6870] ip6tnl0: entered promiscuous mode [ 194.942597][ T6870] ip6gre0: entered promiscuous mode [ 194.973618][ T6870] syz_tun: entered promiscuous mode [ 195.015035][ T5724] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 195.092549][ T6870] ip6gretap0: entered promiscuous mode [ 195.132619][ T6870] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.133340][ T6870] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.162326][ T6870] bridge0: entered promiscuous mode [ 195.171302][ T5724] usb 6-1: Using ep0 maxpacket: 32 [ 195.185103][ T5724] usb 6-1: New USB device found: idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 195.215120][ T5724] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.215177][ T5724] usb 6-1: Product: syz [ 195.215193][ T5724] usb 6-1: Manufacturer: syz [ 195.215208][ T5724] usb 6-1: SerialNumber: syz [ 195.261514][ T6870] vcan0: entered promiscuous mode [ 195.276289][ T5724] usb 6-1: config 0 descriptor?? [ 195.312322][ T6870] bond0: entered promiscuous mode [ 195.312347][ T6870] bond_slave_0: entered promiscuous mode [ 195.312627][ T6870] bond_slave_1: entered promiscuous mode [ 195.378639][ T6870] team0: entered promiscuous mode [ 195.378666][ T6870] team_slave_0: entered promiscuous mode [ 195.378976][ T6870] team_slave_1: entered promiscuous mode [ 195.431676][ T6870] dummy0: entered promiscuous mode [ 195.461795][ T6870] nlmon0: entered promiscuous mode [ 195.511226][ T6870] batadv0: entered promiscuous mode [ 195.543534][ T6870] vxcan0: entered promiscuous mode [ 195.560977][ T6870] vxcan1: entered promiscuous mode [ 195.577056][ T6870] veth0: entered promiscuous mode [ 195.613329][ T6870] veth1: entered promiscuous mode [ 195.657039][ T6870] wg0: entered promiscuous mode [ 195.682436][ T6870] wg1: entered promiscuous mode [ 195.711076][ T5724] airspy 6-1:0.0: Board ID: 00 [ 195.711125][ T5724] airspy 6-1:0.0: Firmware version: [ 195.737730][ T6870] wg2: entered promiscuous mode [ 195.762951][ T6870] veth0_to_bridge: entered promiscuous mode [ 195.808168][ T6870] veth1_to_bridge: entered promiscuous mode [ 195.849803][ T6870] veth0_to_bond: entered promiscuous mode [ 195.888523][ T6870] veth1_to_bond: entered promiscuous mode [ 195.937375][ T6870] veth0_to_team: entered promiscuous mode [ 195.985191][ T6870] veth1_to_team: entered promiscuous mode [ 196.070941][ T6870] veth0_to_batadv: entered promiscuous mode [ 196.122749][ T6870] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.122842][ T6870] batadv_slave_0: entered promiscuous mode [ 196.158728][ T6870] veth1_to_batadv: entered promiscuous mode [ 196.219480][ T6870] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.219543][ T6870] batadv_slave_1: entered promiscuous mode [ 196.257388][ T6870] xfrm0: entered promiscuous mode [ 196.280565][ T6870] veth0_to_hsr: entered promiscuous mode [ 196.326921][ T6870] veth1_to_hsr: entered promiscuous mode [ 196.370375][ T6870] hsr0: entered promiscuous mode [ 196.407075][ T6870] veth1_virt_wifi: entered promiscuous mode [ 196.433918][ T6870] veth0_virt_wifi: entered promiscuous mode [ 196.469747][ T6870] virt_wifi0: entered promiscuous mode [ 196.536096][ T6870] vlan0: entered promiscuous mode [ 196.540844][ T6870] vlan1: entered promiscuous mode [ 196.560071][ T6870] macvlan0: entered promiscuous mode [ 196.572945][ T6870] macvlan1: entered promiscuous mode [ 196.584428][ T6870] ipvlan0: entered promiscuous mode [ 196.590547][ T6870] ipvlan1: entered promiscuous mode [ 196.607814][ T6870] macvtap0: entered promiscuous mode [ 196.612941][ T6870] macsec0: entered promiscuous mode [ 196.630622][ T6870] geneve0: entered promiscuous mode [ 196.643161][ T6870] geneve1: entered promiscuous mode [ 196.660847][ T6870] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 196.676787][ T6870] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 196.681233][ T1232] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 196.683786][ T1232] dvb_usb_af9015 2-1:135.0: probe with driver dvb_usb_af9015 failed with error -22 [ 196.714612][ T1232] usb 2-1: USB disconnect, device number 14 [ 196.720444][ T6870] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 196.767333][ T6870] netdevsim netdevsim3 netdevsim3: entered promiscuous mode [ 196.770484][ T5724] airspy 6-1:0.0: usb_control_msg() failed -71 request 0f [ 196.771329][ T6870] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 196.771500][ T6870] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 196.772299][ T6870] pimreg: entered promiscuous mode [ 196.852735][ T5724] airspy 6-1:0.0: Registered as swradio24 [ 196.852762][ T5724] airspy 6-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 196.863755][ T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.864916][ T1274] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.869488][ T62] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.869661][ T62] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.943740][ T5724] usb 6-1: USB disconnect, device number 3 [ 197.074114][ T5709] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 197.076726][ T5709] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 197.247505][ T5709] usb 4-1: USB disconnect, device number 8 [ 197.316822][ T5643] udevd[5643]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 197.594731][ T5709] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 197.745250][ T5709] usb 4-1: Using ep0 maxpacket: 32 [ 197.752923][ T5709] usb 4-1: New USB device found: idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 197.778075][ T5709] usb 4-1: config index 0 descriptor too short (expected 19, got 18) [ 197.778103][ T5709] usb 4-1: config 224 has too many interfaces: 101, using maximum allowed: 32 [ 197.778125][ T5709] usb 4-1: config 224 has an invalid descriptor of length 0, skipping remainder of the config [ 197.778145][ T5709] usb 4-1: config 224 has 0 interfaces, different from the descriptor's value: 101 [ 197.783169][ T5709] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.783197][ T5709] usb 4-1: Product: syz [ 197.783214][ T5709] usb 4-1: Manufacturer: syz [ 197.783230][ T5709] usb 4-1: SerialNumber: syz [ 198.346233][ T29] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 198.510886][ T29] usb 2-1: unable to get BOS descriptor or descriptor too short [ 198.510940][ T29] usb 2-1: New USB device found: idVendor=1235, idProduct=8010, bcdDevice=0.40 [ 198.539301][ T29] usb 2-1: config 1 has an invalid descriptor of length 103, skipping remainder of the config [ 198.539330][ T29] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 198.542078][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.542095][ T29] usb 2-1: Product: syz [ 198.542106][ T29] usb 2-1: Manufacturer: syz [ 198.542116][ T29] usb 2-1: SerialNumber: syz [ 198.684890][ T1232] usb 4-1: USB disconnect, device number 9 [ 198.821435][ T29] usb 2-1: unit 3 not found! [ 199.010471][ T29] usb 2-1: USB disconnect, device number 15 [ 199.194933][ T5643] udevd[5643]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 199.697683][ T29] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 199.846149][ T29] usb 4-1: Using ep0 maxpacket: 32 [ 199.850112][ T29] usb 4-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 199.850771][ T29] usb 4-1: config 0 has no interfaces? [ 199.883585][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.883605][ T29] usb 4-1: Product: syz [ 199.883616][ T29] usb 4-1: Manufacturer: syz [ 199.883627][ T29] usb 4-1: SerialNumber: syz [ 199.915309][ T29] usb 4-1: config 0 descriptor?? [ 200.312899][ T6931] netlink: 4 bytes leftover after parsing attributes in process `syz.3.261'. [ 200.473677][ T5709] usb 4-1: USB disconnect, device number 10 [ 200.524991][ T29] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 200.676095][ T29] usb 6-1: Using ep0 maxpacket: 32 [ 200.676880][ T29] usb 6-1: New USB device found: idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 200.682606][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.682625][ T29] usb 6-1: Product: syz [ 200.682635][ T29] usb 6-1: Manufacturer: syz [ 200.682646][ T29] usb 6-1: SerialNumber: syz [ 200.726071][ T29] usb 6-1: config 0 descriptor?? [ 200.743359][ T29] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 200.827459][ T6949] syzkaller1: entered promiscuous mode [ 200.827484][ T6949] syzkaller1: entered allmulticast mode [ 200.847184][ T6949] ======================================================= [ 200.847184][ T6949] WARNING: The mand mount option has been deprecated and [ 200.847184][ T6949] and is ignored by this kernel. Remove the mand [ 200.847184][ T6949] option from the mount to silence this warning. [ 200.847184][ T6949] ======================================================= [ 201.270835][ T6952] overlayfs: failed to resolve 'ô$½ÒãW¿­»=ê¥&©(°úU6ÛËmR aM¿]d`Ä­®€ÉùÝÕ­<0&…ˆÉÇŽ°è45h1YáˆYF8¥XŠnÌ È¿7лÿ?i­@Å€à|ÌÖfêS—Åù!üúq¦NÑœ§g°MelhÅìScY~çÏÛñiäRV»;,ÉœÌ:‡‹´½€0fWúü·L3噦°ïLL;†Œw/á¨ïž¯i­þcnjïÞƒ¥,Œ¹}e¥,—¸Ë¿•+­Ñ5ûÜÃOƒê+ƒàâ”x†(—c#ŠìúÁô÷Ó˜M®„‘†ûo': -2 [ 201.634748][ T29] gspca_ov534_9: reg_w failed -71 [ 201.924969][ T29] gspca_ov534_9: Unknown sensor 0000 [ 201.925062][ T29] ov534_9 6-1:0.0: probe with driver ov534_9 failed with error -22 [ 201.954214][ T29] usb 6-1: USB disconnect, device number 4 [ 201.996195][ T5643] udevd[5643]: setting owner of /dev/bus/usb/006/004 to uid=0, gid=0 failed: No such file or directory [ 202.056827][ T6965] netlink: 16 bytes leftover after parsing attributes in process `syz.2.273'. [ 202.906795][ T5723] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 203.034682][ T5723] usb 6-1: device descriptor read/64, error -71 [ 203.284996][ T5723] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 203.415656][ T5723] usb 6-1: device descriptor read/64, error -71 [ 203.526153][ T5723] usb usb6-port1: attempt power cycle [ 203.875478][ T5723] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 203.898605][ T5723] usb 6-1: device descriptor read/8, error -71 [ 204.144783][ T5723] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 204.182887][ T5723] usb 6-1: device descriptor read/8, error -71 [ 204.284917][ T5723] usb usb6-port1: unable to enumerate USB device [ 204.728386][ T6986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.280'. [ 204.941579][ T6990] input: syz1 as /devices/virtual/input/input9 [ 205.094692][ T5723] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 205.275619][ T5723] usb 4-1: New USB device found: idVendor=04e6, idProduct=0005, bcdDevice=1.00 [ 205.279110][ T5723] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 205.279130][ T5723] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 205.283721][ T5723] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.283739][ T5723] usb 4-1: Product: syz [ 205.283750][ T5723] usb 4-1: Manufacturer: syz [ 205.283761][ T5723] usb 4-1: SerialNumber: syz [ 205.359115][ T5723] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 205.403760][ T5723] ums-sddr09 4-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 205.403760][ T5723] Please send a copy of this message to and [ 205.596419][ T5728] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 205.744656][ T5728] usb 3-1: Using ep0 maxpacket: 8 [ 205.774386][ T5728] usb 3-1: unable to get BOS descriptor or descriptor too short [ 205.774435][ T5728] usb 3-1: New USB device found: idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 205.821674][ T1151] nvmet: connect request for invalid subsystem t! [ 205.824098][ T6990] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "t" [ 205.863457][ T5728] usb 3-1: config 0 has an invalid interface number: 88 but max is 0 [ 205.863489][ T5728] usb 3-1: config 0 has no interface number 0 [ 205.863519][ T5728] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 205.863540][ T5728] usb 3-1: config 0 interface 88 has no altsetting 0 [ 205.922968][ T5728] usb 3-1: string descriptor 0 read error: -22 [ 205.923279][ T5728] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 205.955079][ T5728] usb 3-1: config 0 descriptor?? [ 205.986230][ T5728] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.88/input/input10 [ 206.518041][ T5723] ums-sddr09 4-1:1.0: probe with driver ums-sddr09 failed with error -5 [ 206.547670][ T5723] usb 4-1: USB disconnect, device number 11 [ 206.651318][ T5640] Bluetooth: hci4: command 0x0406 tx timeout [ 206.651342][ T5641] Bluetooth: hci2: command 0x0406 tx timeout [ 206.651397][ T5640] Bluetooth: hci0: command 0x0406 tx timeout [ 206.854673][ T5724] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 207.008972][ T5724] usb 2-1: Using ep0 maxpacket: 16 [ 207.012309][ T5724] usb 2-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 207.031543][ T5724] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.031578][ T5724] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.031602][ T5724] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 207.031645][ T5724] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.088332][ T5724] usb 2-1: config 0 descriptor?? [ 207.535454][ T5724] hid_parser_main: 832 callbacks suppressed [ 207.535480][ T5724] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 207.535503][ T5724] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 207.535522][ T5724] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 207.535540][ T5724] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 207.535559][ T5724] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 207.535578][ T5724] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 207.535597][ T5724] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 207.535615][ T5724] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 207.535633][ T5724] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 207.540440][ T5724] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 207.662325][ T5724] microsoft 0003:045E:07DA.0002: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 207.740026][ T5723] usb 2-1: USB disconnect, device number 16 [ 207.979164][ T7032] fido_id[7032]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 208.238311][ T5724] usb 3-1: USB disconnect, device number 10 [ 209.990294][ T7050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.293'. [ 211.456659][ T7070] netlink: 'syz.1.299': attribute type 1 has an invalid length. [ 211.532850][ T7070] bond2: entered promiscuous mode [ 211.535336][ T7072] netlink: 4 bytes leftover after parsing attributes in process `syz.1.299'. [ 211.536106][ T7070] 8021q: adding VLAN 0 to HW filter on device bond2 [ 211.575358][ T7070] netlink: 4 bytes leftover after parsing attributes in process `syz.1.299'. [ 211.675340][ T7070] bond2: (slave bridge2): making interface the new active one [ 211.675397][ T7070] bridge2: entered promiscuous mode [ 211.702546][ T7070] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 212.107887][ T7082] netlink: 76 bytes leftover after parsing attributes in process `syz.3.305'. [ 212.275064][ T29] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 212.494752][ T29] usb 3-1: Using ep0 maxpacket: 8 [ 212.495519][ T29] usb 3-1: New USB device found: idVendor=0763, idProduct=2003, bcdDevice=0.40 [ 212.496720][ T29] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 212.496744][ T29] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 212.550350][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.550380][ T29] usb 3-1: Product: syz [ 212.550397][ T29] usb 3-1: Manufacturer: syz [ 212.550414][ T29] usb 3-1: SerialNumber: syz [ 212.723972][ T5702] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 212.894880][ T5702] usb 6-1: Using ep0 maxpacket: 8 [ 212.930635][ T5702] usb 6-1: unable to get BOS descriptor or descriptor too short [ 212.930689][ T5702] usb 6-1: New USB device found: idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 212.961285][ T5702] usb 6-1: config 0 has an invalid interface number: 88 but max is 0 [ 212.961319][ T5702] usb 6-1: config 0 has no interface number 0 [ 212.961349][ T5702] usb 6-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 212.963124][ T5702] usb 6-1: config 0 interface 88 has no altsetting 0 [ 213.031384][ T5702] usb 6-1: string descriptor 0 read error: -22 [ 213.031529][ T5702] usb 6-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 213.108508][ T5702] usb 6-1: config 0 descriptor?? [ 213.158838][ T7094] netlink: 4 bytes leftover after parsing attributes in process `syz.2.304'. [ 213.162868][ T5702] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.88/input/input11 [ 214.906582][ T5723] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 215.062474][ T29] usb 3-1: USB disconnect, device number 11 [ 215.070787][ T5723] usb 2-1: Using ep0 maxpacket: 32 [ 215.081657][ T5723] usb 2-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 215.082168][ T5723] usb 2-1: config 0 has no interfaces? [ 215.107054][ T5723] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.107099][ T5723] usb 2-1: Product: syz [ 215.107115][ T5723] usb 2-1: Manufacturer: syz [ 215.107131][ T5723] usb 2-1: SerialNumber: syz [ 215.139298][ T5723] usb 2-1: config 0 descriptor?? [ 215.199961][ T5709] usb 6-1: USB disconnect, device number 9 [ 215.505837][ T7105] netlink: 4 bytes leftover after parsing attributes in process `syz.1.308'. [ 215.710987][ T5709] usb 2-1: USB disconnect, device number 17 [ 216.103152][ T7121] netlink: 'syz.5.312': attribute type 1 has an invalid length. [ 216.307059][ T7121] bond1: entered promiscuous mode [ 216.321802][ T7121] 8021q: adding VLAN 0 to HW filter on device bond1 [ 216.417452][ T7123] bond1: (slave bridge1): making interface the new active one [ 216.417489][ T7123] bridge1: entered promiscuous mode [ 216.444004][ T7123] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 217.986717][ T5729] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 218.139580][ T5729] usb 3-1: unable to get BOS descriptor or descriptor too short [ 218.143728][ T5729] usb 3-1: not running at top speed; connect to a high speed hub [ 218.143769][ T5729] usb 3-1: New USB device found: idVendor=04e2, idProduct=1410, bcdDevice=78.22 [ 218.153953][ T5729] usb 3-1: config 5 has an invalid interface number: 29 but max is 0 [ 218.153978][ T5729] usb 3-1: config 5 has no interface number 0 [ 218.154024][ T5729] usb 3-1: config 5 interface 29 has no altsetting 0 [ 218.196148][ T5729] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.196178][ T5729] usb 3-1: Product: syz [ 218.196194][ T5729] usb 3-1: Manufacturer: syz [ 218.196209][ T5729] usb 3-1: SerialNumber: syz [ 218.359758][ T7147] netlink: 'syz.4.319': attribute type 1 has an invalid length. [ 218.452167][ T7141] fuse: Bad value for 'fd' [ 218.466653][ T7141] netlink: 4 bytes leftover after parsing attributes in process `syz.2.316'. [ 218.502371][ T7147] bond2: entered promiscuous mode [ 218.502906][ T7147] 8021q: adding VLAN 0 to HW filter on device bond2 [ 218.546360][ T7141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.573275][ T7141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.726887][ T7147] bond2: (slave bridge3): making interface the new active one [ 218.726914][ T7147] bridge3: entered promiscuous mode [ 218.732652][ T7147] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 218.789953][ T5702] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 218.858820][ T5709] usb 3-1: USB disconnect, device number 12 [ 218.948143][ T5702] usb 6-1: Using ep0 maxpacket: 16 [ 218.960800][ T5702] usb 6-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 218.964414][ T5702] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.964448][ T5702] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.964474][ T5702] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 218.967632][ T5702] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.025265][ T5702] usb 6-1: config 0 descriptor?? [ 219.531085][ T5702] hid_parser_main: 10 callbacks suppressed [ 219.531113][ T5702] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 219.531146][ T5702] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 219.531175][ T5702] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 219.531202][ T5702] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 219.531230][ T5702] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 219.531258][ T5702] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 219.531286][ T5702] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 219.531314][ T5702] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 219.531342][ T5702] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 219.531371][ T5702] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 219.638047][ T5702] microsoft 0003:045E:07DA.0003: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 219.744783][ T5723] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 219.778951][ T5702] usb 6-1: USB disconnect, device number 10 [ 219.826577][ T7163] fido_id[7163]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 219.894666][ T5723] usb 2-1: Using ep0 maxpacket: 32 [ 219.895349][ T5723] usb 2-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 219.896047][ T5723] usb 2-1: config 0 has no interfaces? [ 219.900065][ T5723] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.900091][ T5723] usb 2-1: Product: syz [ 219.900108][ T5723] usb 2-1: Manufacturer: syz [ 219.900124][ T5723] usb 2-1: SerialNumber: syz [ 219.904440][ T5723] usb 2-1: config 0 descriptor?? [ 220.108107][ T7165] netlink: 'syz.2.324': attribute type 1 has an invalid length. [ 220.158724][ T7165] bond1: entered promiscuous mode [ 220.159511][ T7165] 8021q: adding VLAN 0 to HW filter on device bond1 [ 220.276561][ T7165] bond1: (slave bridge1): making interface the new active one [ 220.276590][ T7165] bridge1: entered promiscuous mode [ 220.295233][ T7165] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 220.345078][ T7161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.323'. [ 220.731414][ T7177] netlink: 16 bytes leftover after parsing attributes in process `syz.2.327'. [ 220.953800][ T7179] lo: left promiscuous mode [ 220.975389][ T7179] tunl0: left promiscuous mode [ 220.991324][ T7179] gre0: left promiscuous mode [ 221.020328][ T7179] gretap0: left promiscuous mode [ 221.043543][ T7179] erspan0: left promiscuous mode [ 221.061257][ T7179] ip_vti0: left promiscuous mode [ 221.080837][ T7179] ip6_vti0: left promiscuous mode [ 221.092474][ T7179] sit0: left promiscuous mode [ 221.153749][ T7179] ip6tnl0: left promiscuous mode [ 221.163222][ T7179] ip6gre0: left promiscuous mode [ 221.181886][ T7179] syz_tun: left promiscuous mode [ 221.198594][ T7179] ip6gretap0: left promiscuous mode [ 221.217294][ T7179] bridge0: left promiscuous mode [ 221.219865][ T7179] vcan0: left promiscuous mode [ 221.239733][ T7179] bond0: left promiscuous mode [ 221.255883][ T7179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.256548][ T7179] team0: left promiscuous mode [ 221.276918][ T7179] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.280940][ T7179] dummy0: left promiscuous mode [ 221.300395][ T7179] nlmon0: left promiscuous mode [ 221.309407][ T7179] batadv0: left promiscuous mode [ 221.326861][ T7179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.329783][ T7179] vxcan0: left promiscuous mode [ 221.361438][ T7179] vxcan1: left promiscuous mode [ 221.381073][ T7179] veth0: left promiscuous mode [ 221.395442][ T7179] veth1: left promiscuous mode [ 221.432682][ T7179] wg0: left promiscuous mode [ 221.457725][ T7179] wg1: left promiscuous mode [ 221.486807][ T7179] wg2: left promiscuous mode [ 221.499450][ T7179] veth0_to_bridge: left promiscuous mode [ 221.520324][ T7179] veth1_to_bridge: left promiscuous mode [ 221.550751][ T7179] veth0_to_bond: left promiscuous mode [ 221.551780][ T7179] bond_slave_0: left promiscuous mode [ 221.568948][ T7179] veth1_to_bond: left promiscuous mode [ 221.582170][ T7179] bond_slave_1: left promiscuous mode [ 221.601131][ T7179] veth0_to_team: left promiscuous mode [ 221.615993][ T7179] team_slave_0: left promiscuous mode [ 221.621365][ T7179] veth1_to_team: left promiscuous mode [ 221.622607][ T7179] team_slave_1: left promiscuous mode [ 221.646160][ T7179] veth0_to_batadv: left promiscuous mode [ 221.653546][ T7179] batadv_slave_0: left promiscuous mode [ 221.669811][ T7179] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.672061][ T7179] veth1_to_batadv: left promiscuous mode [ 221.701332][ T7179] batadv_slave_1: left promiscuous mode [ 221.714389][ T7179] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.725750][ T7179] xfrm0: left promiscuous mode [ 221.746107][ T7179] veth0_to_hsr: left promiscuous mode [ 221.765282][ T7179] veth1_to_hsr: left promiscuous mode [ 221.801061][ T7179] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 221.801088][ T7179] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 221.801147][ T7179] hsr0: left promiscuous mode [ 221.839795][ T7179] veth1_virt_wifi: left promiscuous mode [ 221.860979][ T7179] veth0_virt_wifi: left promiscuous mode [ 221.861912][ T7179] virt_wifi0: left promiscuous mode [ 221.861926][ T7179] net_ratelimit: 11 callbacks suppressed [ 221.861935][ T7179] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 221.955299][ T7191] bond0: entered allmulticast mode [ 221.955317][ T7191] bond_slave_0: entered allmulticast mode [ 221.955330][ T7191] bond_slave_1: entered allmulticast mode [ 221.992721][ T1274] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.992833][ T1274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.020175][ T1274] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.020287][ T1274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.289291][ T7216] netlink: 'syz.3.337': attribute type 1 has an invalid length. [ 223.452920][ T7216] bond2: entered promiscuous mode [ 223.453654][ T7216] 8021q: adding VLAN 0 to HW filter on device bond2 [ 223.593675][ T7219] bond2: (slave bridge2): making interface the new active one [ 223.593703][ T7219] bridge2: entered promiscuous mode [ 223.618466][ T7219] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 224.243757][ T7227] netlink: 48 bytes leftover after parsing attributes in process `syz.1.338'. [ 224.925205][ T5709] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 225.081801][ T5709] usb 4-1: Using ep0 maxpacket: 32 [ 225.091291][ T5709] usb 4-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 225.091838][ T5709] usb 4-1: config 0 has no interfaces? [ 225.111610][ T5709] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.111629][ T5709] usb 4-1: Product: syz [ 225.111641][ T5709] usb 4-1: Manufacturer: syz [ 225.111651][ T5709] usb 4-1: SerialNumber: syz [ 225.151828][ T5709] usb 4-1: config 0 descriptor?? [ 225.973058][ T7237] netlink: 4 bytes leftover after parsing attributes in process `syz.3.341'. [ 226.020131][ T7255] kAFS: unable to lookup cell '(G' [ 226.046459][ T7255] netlink: 148 bytes leftover after parsing attributes in process `syz.4.345'. [ 226.051476][ T7255] kAFS: unable to lookup cell '(G' [ 226.135268][ T29] usb 4-1: USB disconnect, device number 12 [ 226.307233][ T7261] bridge0: port 3(vlan2) entered blocking state [ 226.312474][ T7261] bridge0: port 3(vlan2) entered disabled state [ 226.312612][ T7261] vlan2: entered allmulticast mode [ 226.312625][ T7261] syz_tun: entered allmulticast mode [ 226.355305][ T7261] vlan2: entered promiscuous mode [ 226.355330][ T7261] syz_tun: entered promiscuous mode [ 226.382900][ T7261] bridge0: port 3(vlan2) entered blocking state [ 226.382989][ T7261] bridge0: port 3(vlan2) entered forwarding state [ 226.715532][ T7269] netlink: 'syz.3.349': attribute type 1 has an invalid length. [ 226.775833][ T7269] bond3: entered promiscuous mode [ 226.776301][ T7269] 8021q: adding VLAN 0 to HW filter on device bond3 [ 226.927513][ T7269] bond3: (slave bridge3): making interface the new active one [ 226.927538][ T7269] bridge3: entered promiscuous mode [ 226.944382][ T7269] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 227.015426][ T5724] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 227.164981][ T5724] usb 3-1: Using ep0 maxpacket: 32 [ 227.166160][ T5724] usb 3-1: New USB device found: idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 227.167507][ T5724] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.167534][ T5724] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 227.167574][ T5724] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.231401][ T5724] usb 3-1: config 0 descriptor?? [ 227.758864][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 227.758886][ T30] audit: type=1326 audit(1792937564.508:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7291 comm="syz.1.355" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bb739f559 code=0x7ffc0000 [ 227.765864][ T30] audit: type=1326 audit(1792937564.508:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7291 comm="syz.1.355" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bb739f559 code=0x7ffc0000 [ 227.825896][ T30] audit: type=1326 audit(1792937564.578:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7291 comm="syz.1.355" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f4bb739f559 code=0x7ffc0000 [ 227.831849][ T30] audit: type=1326 audit(1792937564.578:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7291 comm="syz.1.355" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bb739f559 code=0x7ffc0000 [ 227.832303][ T30] audit: type=1326 audit(1792937564.578:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7291 comm="syz.1.355" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bb739f559 code=0x7ffc0000 [ 227.942382][ T30] audit: type=1326 audit(1792937564.688:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7291 comm="syz.1.355" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f4bb739f559 code=0x7ffc0000 [ 227.942557][ T30] audit: type=1326 audit(1792937564.688:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7291 comm="syz.1.355" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bb739f559 code=0x7ffc0000 [ 227.942708][ T30] audit: type=1326 audit(1792937564.688:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7291 comm="syz.1.355" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bb739f559 code=0x7ffc0000 [ 228.023326][ T30] audit: type=1326 audit(1792937564.768:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7291 comm="syz.1.355" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f4bb739f559 code=0x7ffc0000 [ 228.024032][ T30] audit: type=1326 audit(1792937564.768:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7291 comm="syz.1.355" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bb739f559 code=0x7ffc0000 [ 228.360731][ T7292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.363874][ T7292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.420006][ T7299] netlink: 20 bytes leftover after parsing attributes in process `syz.5.356'. [ 229.218215][ T7308] PKCS7: Unknown OID: [4] 2.19.16263.96.12508(bad) [ 229.218245][ T7308] PKCS7: Only support pkcs7_signedData type [ 229.658861][ T5702] usb 3-1: USB disconnect, device number 13 [ 230.209361][ T5723] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 230.284989][ T29] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 230.364675][ T5723] usb 3-1: Using ep0 maxpacket: 16 [ 230.366125][ T5723] usb 3-1: New USB device found: idVendor=04d8, idProduct=00dd, bcdDevice=0.00 [ 230.367603][ T5723] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.367636][ T5723] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.367666][ T5723] usb 3-1: config 0 interface 0 has no altsetting 0 [ 230.367691][ T5723] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.430921][ T5723] usb 3-1: config 0 descriptor?? [ 230.454225][ T7321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.454736][ T29] usb 4-1: Using ep0 maxpacket: 32 [ 230.471094][ T29] usb 4-1: New USB device found: idVendor=046d, idProduct=c314, bcdDevice=0.40 [ 230.472326][ T29] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.472349][ T29] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.473179][ T7321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.484902][ T29] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 230.484958][ T29] usb 4-1: Product: syz [ 230.484975][ T29] usb 4-1: Manufacturer: syz [ 230.541880][ T29] hub 4-1:4.0: USB hub found [ 230.779021][ T29] hub 4-1:4.0: config failed, can't read hub descriptor (err -22) [ 230.843297][ T29] usb 4-1: USB disconnect, device number 13 [ 230.899978][ T5723] hid_parser_main: 10 callbacks suppressed [ 230.900006][ T5723] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 230.900047][ T5723] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 230.900076][ T5723] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 230.900104][ T5723] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 230.900133][ T5723] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 230.940167][ T5723] mcp2221 0003:04D8:00DD.0004: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 231.080759][ T5723] usb 3-1: USB disconnect, device number 14 [ 231.221669][ T7325] netlink: 'syz.5.363': attribute type 1 has an invalid length. [ 231.272280][ T7325] bond2: entered promiscuous mode [ 231.272670][ T7325] 8021q: adding VLAN 0 to HW filter on device bond2 [ 231.332801][ T7325] bond2: (slave bridge2): making interface the new active one [ 231.332833][ T7325] bridge2: entered promiscuous mode [ 231.348826][ T29] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 231.358607][ T7325] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 231.528355][ T29] usb 4-1: New USB device found: idVendor=046d, idProduct=c314, bcdDevice=0.40 [ 231.547623][ T29] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 231.547723][ T29] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.584595][ T29] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 231.584626][ T29] usb 4-1: Product: syz [ 231.584642][ T29] usb 4-1: Manufacturer: syz [ 231.794221][ T29] hub 4-1:4.0: USB hub found [ 231.905214][ T1232] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 231.983820][ T29] hub 4-1:4.0: 1 port detected [ 232.065481][ T1232] usb 6-1: Using ep0 maxpacket: 32 [ 232.066271][ T1232] usb 6-1: New USB device found: idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 232.070956][ T1232] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.070983][ T1232] usb 6-1: Product: syz [ 232.070999][ T1232] usb 6-1: Manufacturer: syz [ 232.071042][ T1232] usb 6-1: SerialNumber: syz [ 232.115300][ T1232] usb 6-1: config 0 descriptor?? [ 232.122046][ T1232] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 232.122417][ T1232] dvb-usb: bulk message failed: -22 (4/0) [ 232.122431][ T1232] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 232.122517][ T1232] dvb-usb: bulk message failed: -22 (5/0) [ 232.122527][ T1232] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 232.186856][ T1232] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 232.188071][ T1232] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 232.188134][ T1232] usb 6-1: media controller created [ 232.237637][ T1232] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 232.288258][ T1232] usb 6-1: selecting invalid altsetting 3 [ 232.288281][ T1232] ttusb2: set interface to alts=3 failed [ 232.312613][ T7338] input: syz1 as /devices/virtual/input/input12 [ 232.339488][ T7331] ttusb2: i2c rd len=194 too high [ 232.341797][ T7331] netlink: 4 bytes leftover after parsing attributes in process `syz.5.365'. [ 232.436828][ T1232] DVB: Unable to find symbol tda10086_attach() [ 232.436852][ T1232] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 232.437728][ T1232] dvb-usb: bulk message failed: -22 (4/0) [ 232.437747][ T1232] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 232.437897][ T1232] dvb-usb: bulk message failed: -22 (5/0) [ 232.437912][ T1232] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 232.437981][ T1232] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 232.563140][ T7331] netlink: 4 bytes leftover after parsing attributes in process `syz.5.365'. [ 232.751185][ T1232] usb 6-1: USB disconnect, device number 11 [ 232.804292][ T29] hub 4-1:4.0: activate --> -90 [ 232.847166][ T1232] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 233.811694][ T7358] netlink: 20 bytes leftover after parsing attributes in process `syz.5.370'. [ 234.065079][ T5709] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 234.226879][ T5709] usb 6-1: Using ep0 maxpacket: 32 [ 234.233272][ T5709] usb 6-1: New USB device found: idVendor=2c42, idProduct=16f8, bcdDevice=1e.fa [ 234.253424][ T5709] usb 6-1: config 245 has an invalid interface number: 214 but max is 0 [ 234.253445][ T5709] usb 6-1: config 245 has no interface number 0 [ 234.253467][ T5709] usb 6-1: config 245 interface 214 has no altsetting 0 [ 234.278922][ T5709] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.279035][ T5709] usb 6-1: Product: syz [ 234.279054][ T5709] usb 6-1: Manufacturer: syz [ 234.279070][ T5709] usb 6-1: SerialNumber: syz [ 234.832172][ T7358] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 234.848402][ T1232] usb 4-1: USB disconnect, device number 14 [ 234.903347][ T7368] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 234.903368][ T7368] IPv6: NLM_F_CREATE should be set when creating new route [ 235.309813][ T5702] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 235.341838][ T7368] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.342291][ T7368] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.479740][ T5702] usb 4-1: Using ep0 maxpacket: 32 [ 235.482868][ T5702] usb 4-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 235.486006][ T5702] usb 4-1: config 0 has no interfaces? [ 235.508098][ T5702] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.508155][ T5702] usb 4-1: Product: syz [ 235.508171][ T5702] usb 4-1: Manufacturer: syz [ 235.508186][ T5702] usb 4-1: SerialNumber: syz [ 235.544662][ T5702] usb 4-1: config 0 descriptor?? [ 235.732266][ T7373] netlink: 'syz.1.375': attribute type 1 has an invalid length. [ 235.825493][ T7368] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.887517][ T7368] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.951341][ T7376] netlink: 4 bytes leftover after parsing attributes in process `syz.4.373'. [ 236.227352][ T146] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.227415][ T146] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.227454][ T146] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.227531][ T146] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.282007][ T5709] f81534a_ctrl 6-1:245.214: failed to enable ports: -71 [ 236.282041][ T5709] f81534a_ctrl 6-1:245.214: probe with driver f81534a_ctrl failed with error -71 [ 236.309260][ T5709] usb 6-1: USB disconnect, device number 12 [ 236.401296][ T7373] bond4: entered promiscuous mode [ 236.404496][ T7373] 8021q: adding VLAN 0 to HW filter on device bond4 [ 236.489969][ T7374] bond4: (slave bridge3): making interface the new active one [ 236.489994][ T7374] bridge3: entered promiscuous mode [ 236.513372][ T7374] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 236.602951][ T1274] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.691170][ T7386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.691479][ T7386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.758208][ T29] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 236.774286][ T1274] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.879755][ T1274] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.920378][ T29] usb 3-1: New USB device found: idVendor=0ab4, idProduct=0011, bcdDevice=ca.fb [ 236.924336][ T29] usb 3-1: config 2 has an invalid interface number: 79 but max is 0 [ 236.924366][ T29] usb 3-1: config 2 has no interface number 0 [ 236.924398][ T29] usb 3-1: config 2 interface 79 has no altsetting 0 [ 236.977841][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.977863][ T29] usb 3-1: Product: syz [ 236.977874][ T29] usb 3-1: Manufacturer: syz [ 236.977885][ T29] usb 3-1: SerialNumber: syz [ 237.116113][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 237.116135][ T30] audit: type=1326 audit(1792937573.868:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7383 comm="syz.3.377" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcf599f559 code=0x7ffc0000 [ 237.121993][ T30] audit: type=1326 audit(1792937573.868:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7383 comm="syz.3.377" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcf599f559 code=0x7ffc0000 [ 237.130314][ T1274] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.159588][ T30] audit: type=1326 audit(1792937573.888:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7383 comm="syz.3.377" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7fdcf599f559 code=0x7ffc0000 [ 237.159651][ T30] audit: type=1326 audit(1792937573.888:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7383 comm="syz.3.377" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcf599f559 code=0x7ffc0000 [ 237.218024][ T30] audit: type=1326 audit(1792937573.888:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7383 comm="syz.3.377" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcf599f559 code=0x7ffc0000 [ 237.218180][ T30] audit: type=1326 audit(1792937573.918:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7383 comm="syz.3.377" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdcf599f559 code=0x7ffc0000 [ 237.357614][ T29] usb 3-1: USB disconnect, device number 15 [ 237.376415][ T7393] syz_tun: entered allmulticast mode [ 237.412624][ T30] audit: type=1326 audit(1792937574.158:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7383 comm="syz.3.377" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcf599f559 code=0x7ffc0000 [ 237.412769][ T30] audit: type=1326 audit(1792937574.158:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7383 comm="syz.3.377" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcf599f559 code=0x7ffc0000 [ 237.917902][ T7396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.923378][ T7396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.132385][ T1274] bridge_slave_1: left allmulticast mode [ 238.132434][ T1274] bridge_slave_1: left promiscuous mode [ 238.133623][ T1274] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.213648][ T1274] bridge_slave_0: left allmulticast mode [ 238.213676][ T1274] bridge_slave_0: left promiscuous mode [ 238.229087][ T1274] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.159674][ T31] nvmet: connect request for invalid subsystem t! [ 239.159826][ T7411] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "t" [ 239.438473][ T1274] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 239.438515][ T1274] bridge1 (unregistering): left promiscuous mode [ 239.509766][ T1274] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 239.509789][ T1274] bridge2 (unregistering): left promiscuous mode [ 239.558642][ T1274] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.575572][ T1274] bond0 (unregistering): Released all slaves [ 239.593971][ T1274] bond1 (unregistering): Released all slaves [ 239.636736][ T1274] bond2 (unregistering): Released all slaves [ 239.901970][ T7392] syz_tun: left allmulticast mode [ 239.963923][ T1274] tipc: Left network mode [ 240.358701][ T5295] 8021q: adding VLAN 0 to HW filter on device eth1 [ 240.435469][ T7429] bond0: entered allmulticast mode [ 240.435493][ T7429] bond_slave_0: entered allmulticast mode [ 240.435511][ T7429] bond_slave_1: entered allmulticast mode [ 240.529384][ T1274] hsr_slave_0: left promiscuous mode [ 240.543865][ T1274] hsr_slave_1: left promiscuous mode [ 240.552271][ T1274] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.552325][ T1274] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.577457][ T1274] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.577480][ T1274] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.641313][ T1274] veth1_macvtap: left promiscuous mode [ 240.641377][ T1274] veth0_macvtap: left promiscuous mode [ 240.643214][ T1274] veth1_vlan: left promiscuous mode [ 240.643539][ T1274] veth0_vlan: left promiscuous mode [ 241.119764][ T7435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.138813][ T7435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.638205][ T1274] team0 (unregistering): Port device team_slave_1 removed [ 241.687623][ T1274] team0 (unregistering): Port device team_slave_0 removed [ 241.973410][ T7445] netlink: 'syz.5.390': attribute type 1 has an invalid length. [ 243.250564][ T7462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.274044][ T7462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.288398][ T7489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.289857][ T7489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.506887][ T7490] netlink: 12 bytes leftover after parsing attributes in process `syz.3.397'. [ 244.897918][ T5295] 8021q: adding VLAN 0 to HW filter on device eth2 [ 245.593584][ T7512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.608160][ T7512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.861095][ T7512] netlink: 4 bytes leftover after parsing attributes in process `syz.3.401'. [ 246.568342][ T7509] syz.1.402 (7509): drop_caches: 2 [ 247.483353][ T5295] 8021q: adding VLAN 0 to HW filter on device eth3 [ 247.939283][ T7543] pimreg: entered allmulticast mode [ 248.058923][ T7568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.115848][ T7568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.453432][ T30] audit: type=1326 audit(1792937585.198:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7571 comm="syz.5.407" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519db9f559 code=0x7ffc0000 [ 248.453476][ T30] audit: type=1326 audit(1792937585.198:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7571 comm="syz.5.407" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519db9f559 code=0x7ffc0000 [ 248.511600][ T30] audit: type=1326 audit(1792937585.258:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7571 comm="syz.5.407" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519db9f559 code=0x7ffc0000 [ 248.511657][ T30] audit: type=1326 audit(1792937585.258:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7571 comm="syz.5.407" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519db9f559 code=0x7ffc0000 [ 248.570404][ T30] audit: type=1326 audit(1792937585.318:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7571 comm="syz.5.407" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f519db9f559 code=0x7ffc0000 [ 248.570445][ T30] audit: type=1326 audit(1792937585.318:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7571 comm="syz.5.407" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519db9f559 code=0x7ffc0000 [ 248.570477][ T30] audit: type=1326 audit(1792937585.318:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7571 comm="syz.5.407" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519db9f559 code=0x7ffc0000 [ 248.665148][ T30] audit: type=1326 audit(1792937585.418:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7571 comm="syz.5.407" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519db9f559 code=0x7ffc0000 [ 248.665312][ T30] audit: type=1326 audit(1792937585.418:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7571 comm="syz.5.407" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519db9f559 code=0x7ffc0000 [ 248.728106][ T30] audit: type=1326 audit(1792937585.478:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7571 comm="syz.5.407" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f519db5fd8e code=0x7ffc0000 [ 248.987276][ T1232] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 249.168793][ T1232] usb 6-1: New USB device found: idVendor=200c, idProduct=100b, bcdDevice=0.40 [ 249.193952][ T1232] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 249.270527][ T1232] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.270560][ T1232] usb 6-1: Product: syz [ 249.270578][ T1232] usb 6-1: Manufacturer: syz [ 249.270594][ T1232] usb 6-1: SerialNumber: syz [ 249.592139][ T7590] netlink: 36 bytes leftover after parsing attributes in process `syz.3.409'. [ 249.626720][ T7590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.633449][ T7590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.731241][ T7590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.731628][ T7590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.038585][ T1232] usb 6-1: unit 8 not found! [ 252.038603][ T1232] usb 6-1: unit 6 not found! [ 252.324941][ T1232] usb 6-1: USB disconnect, device number 13 [ 252.524930][ T5643] udevd[5643]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 252.702315][ T5295] 8021q: adding VLAN 0 to HW filter on device eth4 [ 252.978930][ T7634] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 253.050694][ T7634] syzkaller0: entered promiscuous mode [ 253.050712][ T7634] syzkaller0: entered allmulticast mode [ 253.184794][ T1232] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 253.354730][ T1232] usb 6-1: Using ep0 maxpacket: 16 [ 253.373360][ T1232] usb 6-1: New USB device found: idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 253.387979][ T1232] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 253.388004][ T1232] usb 6-1: config 0 interface 0 has no altsetting 0 [ 253.391694][ T1232] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.391713][ T1232] usb 6-1: Product: syz [ 253.391724][ T1232] usb 6-1: Manufacturer: syz [ 253.391735][ T1232] usb 6-1: SerialNumber: syz [ 253.447038][ T1232] usb 6-1: config 0 descriptor?? [ 253.831474][ T1232] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input13 [ 254.506658][ T1232] rc_core: IR keymap rc-imon-pad not found [ 254.506679][ T1232] Registered IR keymap rc-empty [ 254.507134][ T1232] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 254.507156][ T1232] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 254.817539][ T7629] netlink: 132 bytes leftover after parsing attributes in process `syz.5.424'. [ 254.970191][ T7658] netlink: 'syz.1.418': attribute type 1 has an invalid length. [ 255.120671][ C1] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 255.123870][ T1232] imon:send_packet: packet tx failed (-71) [ 255.136855][ T1232] imon 6-1:0.0: remote input dev register failed [ 255.138223][ T1232] imon 6-1:0.0: imon_init_intf0: rc device setup failed [ 255.204477][ T7658] bond5: entered promiscuous mode [ 255.226635][ T7658] 8021q: adding VLAN 0 to HW filter on device bond5 [ 255.351990][ T7665] netlink: 16 bytes leftover after parsing attributes in process `syz.3.428'. [ 255.403841][ T7662] bond5: (slave bridge4): making interface the new active one [ 255.403873][ T7662] bridge4: entered promiscuous mode [ 255.451922][ T7662] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 255.568527][ T1232] imon 6-1:0.0: unable to initialize intf0, err 0 [ 255.593566][ T1232] usb 6-1: USB disconnect, device number 14 [ 255.767537][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.767598][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.067695][ T7673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.068985][ T7673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.369437][ T7679] netlink: 'syz.5.422': attribute type 1 has an invalid length. [ 256.486700][ T7682] netlink: 28 bytes leftover after parsing attributes in process `syz.5.422'. [ 256.550120][ T7683] netlink: 28 bytes leftover after parsing attributes in process `syz.5.422'. [ 256.567767][ T7679] bond3: entered promiscuous mode [ 256.571456][ T7679] 8021q: adding VLAN 0 to HW filter on device bond3 [ 256.707059][ T7679] bond3: (slave bridge3): making interface the new active one [ 256.707089][ T7679] bridge3: entered promiscuous mode [ 256.783992][ T7679] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 257.667866][ T29] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 257.826243][ T29] usb 6-1: Using ep0 maxpacket: 16 [ 257.829340][ T29] usb 6-1: unable to get BOS descriptor or descriptor too short [ 257.829393][ T29] usb 6-1: New USB device found: idVendor=045e, idProduct=0445, bcdDevice=87.ed [ 257.830591][ T29] usb 6-1: config 1 has an invalid interface number: 237 but max is 0 [ 257.830618][ T29] usb 6-1: config 1 has no interface number 0 [ 257.830657][ T29] usb 6-1: config 1 interface 237 has no altsetting 0 [ 257.888784][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.888805][ T29] usb 6-1: Product: syz [ 257.888816][ T29] usb 6-1: Manufacturer: syz [ 257.888827][ T29] usb 6-1: SerialNumber: syz [ 258.973843][ T7704] kvm: requested 5028 ns i8254 timer period limited to 200000 ns [ 259.029958][ T7704] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 259.030696][ T7704] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 259.030756][ T7704] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 259.032011][ T7704] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 259.032057][ T7704] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 259.032119][ T7704] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 259.032189][ T7704] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 259.092551][ T7704] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 259.092591][ T7704] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 259.399622][ T29] ipaq 6-1:1.237: PocketPC PDA converter detected [ 259.413437][ T29] ipaq 6-1:1.237: probe with driver ipaq failed with error -71 [ 259.431695][ T29] usb 6-1: USB disconnect, device number 15 [ 259.646136][ T7713] netlink: 'syz.1.432': attribute type 1 has an invalid length. [ 259.803836][ T7713] bond6: entered promiscuous mode [ 259.811933][ T7713] 8021q: adding VLAN 0 to HW filter on device bond6 [ 259.975486][ T7716] bond6: (slave bridge5): making interface the new active one [ 259.975512][ T7716] bridge5: entered promiscuous mode [ 260.014980][ T7716] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 260.494268][ T7739] netlink: 'syz.3.437': attribute type 1 has an invalid length. [ 260.552410][ T7740] x_tables: duplicate underflow at hook 3 [ 260.593145][ T7743] netlink: 28 bytes leftover after parsing attributes in process `syz.3.437'. [ 260.660245][ T7739] bond4: entered promiscuous mode [ 260.665358][ T7746] netlink: 28 bytes leftover after parsing attributes in process `syz.3.437'. [ 260.679986][ T7739] 8021q: adding VLAN 0 to HW filter on device bond4 [ 260.804286][ T7739] bond4: (slave bridge4): making interface the new active one [ 260.804314][ T7739] bridge4: entered promiscuous mode [ 260.831940][ T7739] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 261.165005][ T5709] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 261.252678][ T7756] netlink: 'syz.5.443': attribute type 16 has an invalid length. [ 261.252703][ T7756] IPv6: NLM_F_CREATE should be specified when creating new route [ 261.319099][ T5709] usb 3-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 261.322301][ T5709] usb 3-1: config 0 interface 0 altsetting 255 bulk endpoint 0x4 has invalid maxpacket 61 [ 261.322331][ T5709] usb 3-1: config 0 interface 0 has no altsetting 0 [ 261.377751][ T5709] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 261.377773][ T5709] usb 3-1: Product: syz [ 261.377784][ T5709] usb 3-1: Manufacturer: syz [ 261.377794][ T5709] usb 3-1: SerialNumber: syz [ 261.411461][ T5709] usb 3-1: config 0 descriptor?? [ 261.412094][ T7750] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 261.450670][ T5709] usb 3-1: selecting invalid altsetting 0 [ 261.823642][ T7750] usb 3-1: BOGUS urb xfer, pipe 0 != type 3 [ 262.357706][ T7770] netlink: 'syz.1.446': attribute type 1 has an invalid length. [ 262.513610][ T7770] bond7: entered promiscuous mode [ 262.513964][ T7770] 8021q: adding VLAN 0 to HW filter on device bond7 [ 262.613621][ T7772] bond7: (slave bridge6): making interface the new active one [ 262.613650][ T7772] bridge6: entered promiscuous mode [ 262.633079][ T7772] bond7: (slave bridge6): Enslaving as an active interface with an up link [ 263.224827][ T7776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.225251][ T7776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.674429][ T7749] snd-usb-audio 3-1:0.0: Runtime PM usage count underflow! [ 263.683366][ T29] usb 3-1: USB disconnect, device number 16 [ 265.034552][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 265.477833][ T7796] netlink: 'syz.1.451': attribute type 1 has an invalid length. [ 265.575202][ T7800] netlink: 28 bytes leftover after parsing attributes in process `syz.1.451'. [ 265.630847][ T7802] netlink: 28 bytes leftover after parsing attributes in process `syz.1.451'. [ 265.710281][ T7796] bond8: entered promiscuous mode [ 265.714075][ T7796] 8021q: adding VLAN 0 to HW filter on device bond8 [ 265.886816][ T7806] bond8: (slave bridge7): making interface the new active one [ 265.886846][ T7806] bridge7: entered promiscuous mode [ 265.913927][ T7806] bond8: (slave bridge7): Enslaving as an active interface with an up link [ 266.806701][ T7816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.842923][ T7816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.074753][ T7843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.097780][ T7843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.236004][ T7813] syz.5.453 invoked oom-killer: gfp_mask=0x100cc2(GFP_HIGHUSER), order=0, oom_score_adj=1000 [ 268.236065][ T7813] CPU: 1 UID: 0 PID: 7813 Comm: syz.5.453 Tainted: G L syzkaller #0 PREEMPT(full) [ 268.236097][ T7813] Tainted: [L]=SOFTLOCKUP [ 268.236105][ T7813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 268.236127][ T7813] Call Trace: [ 268.236136][ T7813] [ 268.236146][ T7813] dump_stack_lvl+0xe8/0x150 [ 268.236211][ T7813] dump_header+0xd3/0x4b0 [ 268.236247][ T7813] oom_kill_process+0x3ab/0x9e0 [ 268.236284][ T7813] out_of_memory+0xfb1/0x13b0 [ 268.236310][ T7813] ? try_charge_memcg+0xc16/0x15f0 [ 268.236365][ T7813] ? __pfx_out_of_memory+0x10/0x10 [ 268.236392][ T7813] ? do_raw_spin_unlock+0xf5/0x200 [ 268.236429][ T7813] try_charge_memcg+0xccc/0x15f0 [ 268.236483][ T7813] ? __pfx_try_charge_memcg+0x10/0x10 [ 268.236513][ T7813] ? lock_acquire+0x115/0x350 [ 268.236562][ T7813] ? charge_memcg+0x47/0x310 [ 268.236596][ T7813] charge_memcg+0x1dd/0x310 [ 268.236630][ T7813] __mem_cgroup_charge+0x25/0x80 [ 268.236661][ T7813] filemap_add_folio+0x140/0x4e0 [ 268.236696][ T7813] __filemap_get_folio_mpol+0x4fa/0xff0 [ 268.236737][ T7813] kvm_gmem_get_folio+0xb3/0x260 [ 268.236767][ T7813] kvm_gmem_get_pfn+0x1b1/0x650 [ 268.236800][ T7813] kvm_mmu_faultin_pfn+0x95d/0x1600 [ 268.236844][ T7813] ? __pfx_kvm_mmu_faultin_pfn+0x10/0x10 [ 268.236876][ T7813] ? __kvm_memslots+0x127/0x210 [ 268.236915][ T7813] kvm_tdp_page_fault+0x292/0x3a0 [ 268.236943][ T7813] kvm_mmu_do_page_fault+0x31d/0x640 [ 268.236974][ T7813] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 268.237015][ T7813] ? kvm_gmem_is_private_gfn+0xef/0x180 [ 268.237039][ T7813] kvm_arch_vcpu_pre_fault_memory+0x445/0x6c0 [ 268.237076][ T7813] kvm_vcpu_pre_fault_memory+0x26f/0x4e0 [ 268.237105][ T7813] ? kvm_vcpu_pre_fault_memory+0x184/0x4e0 [ 268.237135][ T7813] kvm_vcpu_ioctl+0x8a6/0xfd0 [ 268.237165][ T7813] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 268.237187][ T7813] ? do_futex+0x3e7/0x4e0 [ 268.237226][ T7813] ? __fget_files+0x2a/0x420 [ 268.237262][ T7813] ? bpf_lsm_file_ioctl+0x9/0x20 [ 268.237294][ T7813] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 268.237319][ T7813] __se_sys_ioctl+0xfc/0x170 [ 268.237364][ T7813] do_syscall_64+0x166/0x520 [ 268.237390][ T7813] ? trace_irq_disable+0x3b/0x140 [ 268.237422][ T7813] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.237447][ T7813] ? clear_bhb_loop+0x70/0xc0 [ 268.237475][ T7813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.237492][ T7813] RIP: 0033:0x7f519db9f559 [ 268.237515][ T7813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.237529][ T7813] RSP: 002b:00007f519e9af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 268.237547][ T7813] RAX: ffffffffffffffda RBX: 00007f519de25fa0 RCX: 00007f519db9f559 [ 268.237560][ T7813] RDX: 0000200000000400 RSI: 00000000c040aed5 RDI: 000000000000000d [ 268.237571][ T7813] RBP: 00007f519dc36b20 R08: 0000000000000000 R09: 0000000000000000 [ 268.237581][ T7813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.237591][ T7813] R13: 00007f519de26038 R14: 00007f519de25fa0 R15: 00007f519df4fa48 [ 268.237629][ T7813] [ 268.614855][ C0] [ 268.617228][ C0] ============================= [ 268.622073][ C0] [ BUG: Invalid wait context ] [ 268.626930][ C0] syzkaller #0 Tainted: G L [ 268.632999][ C0] ----------------------------- [ 268.637871][ C0] syz.2.456/7832 is trying to lock: [ 268.643076][ C0] ffff88805491dbc8 (&gpc->lock){....}-{3:3}, at: kvm_xen_set_evtchn_fast+0x208/0x8d0 [ 268.652571][ C0] other info that might help us debug this: [ 268.658500][ C0] context-{2:2} [ 268.662010][ C0] locks held by syz.2.456/7832: 4, last CPU#0: [ 268.668179][ C0] #0: ffff888053a451a8 (&vcpu->mutex){+.+.}-{4:4}, at: kvm_vcpu_ioctl+0x27f/0xfd0 [ 268.677501][ C0] #1: ffff88805491db48 (&kvm->arch.xen.xen_lock){+.+.}-{4:4}, at: kvm_xen_vcpu_set_attr+0x4d/0x1230 [ 268.688389][ C0] #2: ffff88805491e118 (&kvm->srcu){.?.+}-{0:0}, at: kvm_xen_vcpu_set_attr+0x8e/0x1230 [ 268.698165][ C0] #3: ffff88805491e118 (&kvm->srcu){.?.+}-{0:0}, at: kvm_xen_set_evtchn_fast+0x1d2/0x8d0 [ 268.708095][ C0] stack backtrace: [ 268.711830][ C0] CPU: 0 UID: 0 PID: 7832 Comm: syz.2.456 Tainted: G L syzkaller #0 PREEMPT(full) [ 268.722711][ C0] Tainted: [L]=SOFTLOCKUP [ 268.727034][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 268.737110][ C0] Call Trace: [ 268.740397][ C0] [ 268.743248][ C0] dump_stack_lvl+0xe8/0x150 [ 268.747881][ C0] __lock_acquire+0xf5b/0x2de0 [ 268.752666][ C0] lock_acquire+0x115/0x350 [ 268.757189][ C0] ? kvm_xen_set_evtchn_fast+0x208/0x8d0 [ 268.762850][ C0] ? xa_load+0x1db/0x210 [ 268.767131][ C0] _raw_read_lock_irqsave+0x48/0x60 [ 268.772385][ C0] ? kvm_xen_set_evtchn_fast+0x208/0x8d0 [ 268.778057][ C0] kvm_xen_set_evtchn_fast+0x208/0x8d0 [ 268.783550][ C0] ? kvm_xen_set_evtchn_fast+0x1d2/0x8d0 [ 268.789215][ C0] xen_timer_callback+0x109/0x220 [ 268.794273][ C0] ? __pfx_xen_timer_callback+0x10/0x10 [ 268.799844][ C0] __hrtimer_run_queues+0x371/0xa10 [ 268.805075][ C0] hrtimer_interrupt+0x4cd/0xaa0 [ 268.810049][ C0] __sysvec_apic_timer_interrupt+0x102/0x430 [ 268.816061][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 268.821734][ C0] [ 268.824681][ C0] [ 268.827631][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 268.833635][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 268.840090][ C0] Code: f7 e8 5d a0 a4 f5 f7 c3 00 02 00 00 74 05 e8 30 37 d1 f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 e4 99 95 f5 65 48 8b 05 dc 20 be 08 48 85 c0 74 18 5b 41 5e c3 [ 268.859718][ C0] RSP: 0018:ffffc90004f473e8 EFLAGS: 00000206 [ 268.865810][ C0] RAX: 0000000000000006 RBX: 0000000000000246 RCX: 8000000000000001 [ 268.873796][ C0] RDX: 0000000000000007 RSI: ffffffff8e69bde9 RDI: 0000000000000001 [ 268.881787][ C0] RBP: ffffc90004f47528 R08: ffffffff919cf4bf R09: 1ffffffff2339e97 [ 268.889779][ C0] R10: dffffc0000000000 R11: fffffbfff2339e98 R12: 0000003e87fa2f6b [ 268.897767][ C0] R13: ffff888053a46638 R14: ffff8880b8228600 R15: dffffc0000000000 [ 268.905769][ C0] kvm_xen_start_timer+0x37f/0x5f0 [ 268.910916][ C0] ? __pfx_kvm_xen_start_timer+0x10/0x10 [ 268.916586][ C0] ? lock_acquire+0x115/0x350 [ 268.921336][ C0] ? hrtimer_try_to_cancel+0x1f7/0x680 [ 268.926814][ C0] kvm_xen_vcpu_set_attr+0xb29/0x1230 [ 268.932218][ C0] ? kvm_xen_vcpu_set_attr+0x8e/0x1230 [ 268.937721][ C0] kvm_arch_vcpu_ioctl+0x148b/0x23a0 [ 268.943030][ C0] ? lock_acquire+0x115/0x350 [ 268.947722][ C0] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 268.953378][ C0] ? lock_acquire+0x115/0x350 [ 268.958081][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 268.963300][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 268.968606][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 268.973823][ C0] ? kernel_text_address+0xa5/0xe0 [ 268.978962][ C0] ? __kernel_text_address+0xd/0x30 [ 268.984178][ C0] ? unwind_get_return_address+0x4d/0x90 [ 268.989833][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 268.996022][ C0] ? arch_stack_walk+0xfb/0x150 [ 269.000903][ C0] ? stack_trace_save+0xa9/0x100 [ 269.005860][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 269.011252][ C0] ? kasan_save_track+0x4f/0x80 [ 269.016118][ C0] ? stack_depot_save_flags+0x33/0x7f0 [ 269.021619][ C0] ? __lock_acquire+0x747/0x2de0 [ 269.026598][ C0] ? kfree+0x1c5/0x650 [ 269.030686][ C0] ? __se_sys_ioctl+0x47/0x170 [ 269.035475][ C0] ? do_syscall_64+0x166/0x520 [ 269.040274][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.046362][ C0] ? __mutex_trylock_common+0x15f/0x270 [ 269.051930][ C0] ? __pfx___mutex_trylock_common+0x10/0x10 [ 269.057846][ C0] ? rcu_is_watching+0x16/0xb0 [ 269.062628][ C0] ? trace_contention_end+0x3d/0x140 [ 269.067935][ C0] ? __mutex_lock+0x305/0x15a0 [ 269.072726][ C0] ? kasan_quarantine_put+0xbb/0x1f0 [ 269.078025][ C0] ? kvm_vcpu_ioctl+0x27f/0xfd0 [ 269.082910][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 269.087954][ C0] ? do_vfs_ioctl+0x116f/0x1530 [ 269.092824][ C0] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 269.097882][ C0] kvm_vcpu_ioctl+0x7e3/0xfd0 [ 269.102582][ C0] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 269.107818][ C0] ? do_futex+0x3e7/0x4e0 [ 269.112196][ C0] ? __fget_files+0x2a/0x420 [ 269.116803][ C0] ? __fget_files+0x2a/0x420 [ 269.121431][ C0] ? __fget_files+0x2a/0x420 [ 269.126055][ C0] ? bpf_lsm_file_ioctl+0x9/0x20 [ 269.131011][ C0] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 269.136234][ C0] __se_sys_ioctl+0xfc/0x170 [ 269.140865][ C0] do_syscall_64+0x166/0x520 [ 269.145487][ C0] ? trace_irq_disable+0x3b/0x140 [ 269.150553][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.156636][ C0] ? clear_bhb_loop+0x70/0xc0 [ 269.161351][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.167263][ C0] RIP: 0033:0x7fd255f9f559 [ 269.171698][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.191331][ C0] RSP: 002b:00007fd256e5c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 269.199758][ C0] RAX: ffffffffffffffda RBX: 00007fd256226090 RCX: 00007fd255f9f559 [ 269.207761][ C0] RDX: 0000200000000100 RSI: 000000004048aecb RDI: 0000000000000006 [ 269.215758][ C0] RBP: 00007fd256036b20 R08: 0000000000000000 R09: 0000000000000000 [ 269.223767][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 269.231754][ C0] R13: 00007fd256226128 R14: 00007fd256226090 R15: 00007fd25634fa48 [ 269.239746][ C0] [ 269.938043][ T7813] memory: usage 976kB, limit 976kB, failcnt 107 [ 269.938068][ T7813] memory+swap: usage 976kB, limit 9007199254740988kB, failcnt 0 [ 269.938087][ T7813] kmem: usage 376kB, limit 9007199254740988kB, failcnt 0 [ 269.938097][ T7813] Memory cgroup stats for /syz5/test: [ 269.938195][ T7813] cache 614400 [ 269.938201][ T7813] rss 0 [ 269.938206][ T7813] rss_huge 0 [ 269.938211][ T7813] shmem 0 [ 269.938216][ T7813] mapped_file 0 [ 269.938221][ T7813] dirty 0 [ 269.938225][ T7813] writeback 0 [ 269.938230][ T7813] workingset_refault_anon 0 [ 269.938236][ T7813] workingset_refault_file 0 [ 269.938241][ T7813] swap 0 [ 269.938246][ T7813] swapcached 0 [ 269.938251][ T7813] pgpgin 150 [ 269.938256][ T7813] pgpgout 0 [ 269.938262][ T7813] pgfault 21 [ 269.938267][ T7813] pgmajfault 0 [ 269.938272][ T7813] inactive_anon 0 [ 269.938277][ T7813] active_anon 0 [ 269.938282][ T7813] inactive_file 0 [ 269.938287][ T7813] active_file 0 [ 269.938292][ T7813] unevictable 614400 [ 269.938297][ T7813] hierarchical_memory_limit 999424 [ 269.938303][ T7813] hierarchical_memsw_limit 9223372036854771712 [ 269.938310][ T7813] total_cache 614400 [ 269.938315][ T7813] total_rss 0 [ 269.938320][ T7813] total_rss_huge 0 [ 269.938325][ T7813] total_shmem 0 [ 269.938330][ T7813] total_mapped_file 0 [ 269.938335][ T7813] total_dirty 0 [ 269.938341][ T7813] total_writeback 0 [ 269.938346][ T7813] total_workingset_refault_anon 0 [ 269.938351][ T7813] total_workingset_refault_file 0 [ 269.938357][ T7813] total_swap 0 [ 269.938362][ T7813] total_swapcached 0 [ 269.938368][ T7813] total_pgpgin 150 [ 269.938372][ T7813] total_pgpgout 0 [ 269.938378][ T7813] total_pgfault 21 [ 269.938383][ T7813] total_pgmajfault 0 [ 269.938388][ T7813] total_inactive_anon 0 [ 269.938393][ T7813] total_active_anon 0 [ 269.938398][ T7813] total_inactive_file 0 [ 269.938404][ T7813] total_active_file 0 [ 269.938409][ T7813] total_unevictable 614400 [ 269.938414][ T7813] anon_cost 0 [ 269.938419][ T7813] file_cost 0 [ 269.938429][ T7813] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz5/test,task_memcg=/syz5/test,task=syz.5.453,pid=7812,uid=0 [ 269.938493][ T7813] Memory cgroup out of memory: Killed process 7813 (syz.5.453) total-vm:104460kB, anon-rss:1456kB, file-rss:23416kB, shmem-rss:11480kB, UID:0 pgtables:152kB oom_score_adj:1000