last executing test programs: 45m23.191757182s ago: executing program 4 (id=52): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_clone(0x81000000, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0xc17a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="d800000000000000f9ffffffffffffff05000000000000000200000000000000030000000000000002000000000000000500000008000000060000000000000009000000000000000000000000000000ff0000000000000003000000000000000000000000000000ffffff7f570000000300000000800000ff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000400000000000000000000000000200037050000000000002b00bc3a2d285cc980000000c30000f3397dd86d4d928d24d3a461b60245898556c60000000000002b133b000000000000000000000000005057310a17d6e50c68b4e784b517ac51e265232504cf62d988d202c6d85b4616b4f59adf764b9ff5"], 0x0, 0x0, 0x0}) fchownat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x100) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="90000000051405012cbd7000fbdbdf25080001000000000008000300000000000800012ce379552fc285"], 0x90}, 0x1, 0x0, 0x0, 0x80}, 0x40010) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x25000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0x3001, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x3, 0x0, 0x8, 0x6}, {0xffff1000, 0x10000, 0x10, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0x2000, 0x8080000, 0xb, 0x4, 0x7, 0xc4, 0x0, 0x0, 0x8, 0x3, 0x0, 0xfc}, {0x0, 0xdddd0000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x0, 0x9, 0x0, 0x8, 0x0, 0x4, 0x2}, {0x80a0000, 0x6000, 0x8, 0x0, 0x8, 0x4, 0x0, 0x0, 0x0, 0x3c, 0x2}, {0x100000, 0xeeee0000, 0x0, 0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0xff, 0x1}, {0x0, 0xeeee0000, 0xa, 0x4, 0x1, 0x0, 0xa1, 0x20, 0x0, 0xff, 0x8}, {0x2, 0x6000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0xdddd1000}, 0xddf8ffdb, 0x4000000000000, 0x0, 0x110, 0xc, 0xf801, 0x0, [0x80000001, 0x0, 0x2, 0x1]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 45m21.008659196s ago: executing program 4 (id=76): r0 = socket(0x10, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = add_key(&(0x7f0000000140)='keyring\x00', &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000000)='s', 0x1, r3) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) sched_setattr(0x0, 0x0, 0x0) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000140)=0x2000) r5 = landlock_create_ruleset(&(0x7f0000000340)={0x7e64, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) r6 = mq_open(&(0x7f0000000180)=' \x01\x9c\x147\xb3\xcf\xfc\xc3\xa2W)\xebs\x93\xa7\xc7!Q\x8f\xf6\xec\xa5fs\xf5l{T\x87r\xd2)r\xa7\xd6\bO\x9a\x98\xf52:\"\xf4\x12\xc0T+\xcd\x9fv|\x8d\xd5\xb2Dvc\x8e\x93\xd8\xd6\xa0\xc56\xd2x\xe3c:\x00\x00\x00\x00\x00\x00\x00\x00\x97\x97\x9c \xdc\xaavt\x18\xcen\xe4\x03\x84;7\xfb\x84r\xf4\xe7\xc9\b\x987\xaa\x85\xfb\x05%\xa8\xe5b\x81\x8e}\xe1r\xf7s2\x82\xe57&b', 0x41, 0x80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) mmap(&(0x7f000074f000/0x1000)=nil, 0x1000, 0xb635773f04ebbeee, 0x80010, r6, 0x15b77000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r7) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) write$cgroup_type(r7, 0x0, 0x0) 45m19.565119s ago: executing program 4 (id=87): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0xb4, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xa, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x80, 0x2, [@TCA_MATCHALL_ACT={0x7c, 0x2, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x0, 0x5, 0x7fff, 0x7}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x41}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000040", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x8}], 0x2}, 0x5) 45m19.212864601s ago: executing program 4 (id=90): syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r0 = syz_open_dev$midi(&(0x7f0000000040), 0x3, 0x88c02) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0xfffffffb, 0x80, 0x8, 0x8, 0xa, "1ad98f776703b1235090a8b5c847990fefc888"}) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000002d80)={0xe, {"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", 0x1000}}, 0x1006) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000094c0)=ANY=[@ANYBLOB="8c45000043000701fefffffffcdbdf25017c"], 0x458c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x100010, r3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000014}, 0xc010) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r7 = open_tree(r5, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000000080)) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) (async) syz_open_dev$midi(&(0x7f0000000040), 0x3, 0x88c02) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0xfffffffb, 0x80, 0x8, 0x8, 0xa, "1ad98f776703b1235090a8b5c847990fefc888"}) (async) dup(r1) (async) write$UHID_INPUT(r2, &(0x7f0000002d80)={0xe, {"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", 0x1000}}, 0x1006) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000094c0)=ANY=[@ANYBLOB="8c45000043000701fefffffffcdbdf25017c"], 0x458c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) (async) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x100010, r3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000014}, 0xc010) (async) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) (async) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) (async) open_tree(r5, &(0x7f0000000640)='\x00', 0x89901) (async) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20) (async) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000000080)) (async) 45m18.112876538s ago: executing program 4 (id=92): bind$alg(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x7f, 0x800000, 0x7, 0xbf1, 0x4, 0xffff7ffffffffffc, 0x8}, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, 0x0, 0x0) r3 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) rename(0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x7}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={r5, @in6={{0xa, 0xce20, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) write$P9_RSETATTR(r7, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0086426, 0x0) splice(r6, 0x0, r1, 0x0, 0x317e, 0x4) write$tun(r3, 0x0, 0x11b0) 45m17.845802217s ago: executing program 4 (id=95): syz_io_uring_setup(0x5f85, &(0x7f0000000600)={0x0, 0x7d71, 0x20, 0x0, 0x368}, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3802000019000100000000000000000000000005000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008401050020010000000000000000000000000000000000002b0000000a000000fc0100000000000000000000000000000000000004000000000000000000000000000000ac1414aa000000000000000000000000000000006c0000000a"], 0x238}}, 0x20048884) 45m17.671986532s ago: executing program 32 (id=95): syz_io_uring_setup(0x5f85, &(0x7f0000000600)={0x0, 0x7d71, 0x20, 0x0, 0x368}, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3802000019000100000000000000000000000005000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008401050020010000000000000000000000000000000000002b0000000a000000fc0100000000000000000000000000000000000004000000000000000000000000000000ac1414aa000000000000000000000000000000006c0000000a"], 0x238}}, 0x20048884) 17m57.051837433s ago: executing program 2 (id=8555): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000340)={0x9, 0x80006, 0x1, 0x2, '\x00', '\x00', '\x00', 0x7, 0x9000000, 0x2000101, 0xfffffffd, "a900"}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r3, 0x400454c9, 0x1) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x0) syz_open_dev$usbfs(0x0, 0xd37, 0x10180) fstat(r0, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f0000000040), &(0x7f00000000c0)=0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r7, 0x1, 0x6, &(0x7f0000000740)=""/4096, &(0x7f0000000040)=0x1000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r8, 0x0, 0x40000000000080, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) fchdir(r3) syz_usb_connect(0x3, 0x1b, &(0x7f0000001740)={{0x12, 0x1, 0x250, 0xaa, 0xf8, 0xd2, 0x40, 0xbb4, 0xa44, 0xa45, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x56, 0x24, 0x0, 0x8}}]}}, &(0x7f0000001c00)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x300, 0x3, 0x5f, 0x4, 0x8, 0x5}, 0x1c, &(0x7f0000000480)={0x5, 0xf, 0x1c, 0x2, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x40, "83ef2434318aeab5934354fac20bd9fe"}]}, 0x5, [{0x45, &(0x7f0000000600)=@string={0x45, 0x3, "0c7b5ff78f2120bc62970934298d1f3ae829a31362b119934bd1ceaa78bd48fea0930ab80225b720919a79f1a439583ea9b3b22a8afe84a774977fa3183fbeb75cf2aa"}}, {0x0, 0x0}, {0x2, &(0x7f0000001b80)=@string={0x2}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x2401}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x81a}}]}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000001380)={0x2c, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="000306"], 0x0, 0x0, 0x0}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}]}]}], {0x14}}, 0x64}}, 0x30004844) 17m55.357769899s ago: executing program 2 (id=8562): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x4000000, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x8, 0x8, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x1, 0xffffffff, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x80002, 0x0, 0x1000, 0xfffffffc, 0x7000000, 0x0, 0x0, 0xfffffffe, 0x0, 0x4000, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x0, 0x9, 0xb, 0x9, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0xe, 0x0, 0x2, 0xfffffffd, 0x0, 0x80007, 0x4, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x5e, 0x6, 0x8, 0x0, 0x0, 0x1, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffffff, 0xffff8000, 0x0, 0xffffffff, 0x1, 0x0, 0x800009, 0x0, 0x0, 0x8, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x2000000, 0x100, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0xb6, 0x0, 0x1, 0x0, 0x7, 0x8, 0x0, 0xffffffff, 0xffff, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x800000, 0x0, 0xffffffff, 0x0, 0x9, 0x1, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x2, 0x13, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0xaa, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x26c, 0x4, 0x7, 0x102, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff, 0x2, 0x3, 0x0, 0x19, 0x40000000}, 0x0, 0x500007f, 0x2}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 17m55.210117319s ago: executing program 2 (id=8564): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWCHAIN={0x44, 0x3, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'team_slave_1\x00'}]}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x20040845}, 0x802) sendmsg$NFT_BATCH(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) (fail_nth: 23) 17m54.967301888s ago: executing program 2 (id=8567): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200) umount2(&(0x7f0000000100)='./file0\x00', 0xc) 17m54.112427991s ago: executing program 2 (id=8574): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000500850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r1, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, &(0x7f0000000000)=[{}], 0x22, 0x0, 0x0, 0x0, 0x0, 0x43, 0x8, 0x0, 0x0}}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001010030400006720c454df2500000400", @ANYRES32=0x0, @ANYBLOB="00030000000000002800128008000100677265001c000280080007000a01010106000e00020000000600030081000000", @ANYRESOCT=r1, @ANYRES64=r2, @ANYRES64=r1], 0x48}, 0x1, 0x0, 0x0, 0x40084}, 0x0) 17m53.677466918s ago: executing program 2 (id=8576): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000006c000100279d7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1a0000009c280000140045006e657464657673696d30000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)=ANY=[@ANYRES64=r6], 0x68}, 0x1, 0x0, 0x0, 0x20044884}, 0x24008040) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r7) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r8 = inotify_init1(0x800) inotify_add_watch(r8, &(0x7f0000000040)='./file0\x00', 0x80000401) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) openat$fuse(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@allocspi={0x114, 0x16, 0x1, 0x70bd2b, 0x25dfdbfd, {{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0x200, 0x4e20, 0x0, 0xcae7388a885de62c, 0xe0, 0x20, 0x29}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d3, 0x6c}, @in=@multicast1, {0x9, 0x100000001, 0x6, 0x4, 0x1, 0x7, 0xc0d, 0x9}, {0xffffffff7fffffff, 0x0, 0x7, 0x2}, {0x7, 0x5, 0x488}, 0x70bd26, 0x3505, 0x2, 0x86fa708a8da4f410, 0x6, 0x82}, 0x0, 0xe}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1, 0x6}}, @proto={0x5, 0x19, 0x6c}, @sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x7}}]}, 0x114}, 0x1, 0x0, 0x0, 0x4}, 0x4040888) 17m53.00981239s ago: executing program 33 (id=8576): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000006c000100279d7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1a0000009c280000140045006e657464657673696d30000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)=ANY=[@ANYRES64=r6], 0x68}, 0x1, 0x0, 0x0, 0x20044884}, 0x24008040) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r7) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r8 = inotify_init1(0x800) inotify_add_watch(r8, &(0x7f0000000040)='./file0\x00', 0x80000401) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) openat$fuse(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@allocspi={0x114, 0x16, 0x1, 0x70bd2b, 0x25dfdbfd, {{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0x200, 0x4e20, 0x0, 0xcae7388a885de62c, 0xe0, 0x20, 0x29}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d3, 0x6c}, @in=@multicast1, {0x9, 0x100000001, 0x6, 0x4, 0x1, 0x7, 0xc0d, 0x9}, {0xffffffff7fffffff, 0x0, 0x7, 0x2}, {0x7, 0x5, 0x488}, 0x70bd26, 0x3505, 0x2, 0x86fa708a8da4f410, 0x6, 0x82}, 0x0, 0xe}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1, 0x6}}, @proto={0x5, 0x19, 0x6c}, @sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x7}}]}, 0x114}, 0x1, 0x0, 0x0, 0x4}, 0x4040888) 46.515691922s ago: executing program 5 (id=12818): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x5000, 0x1, @remote, 0x5}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, 0x0, 0x0) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x24, r8, 0x1, 0x1000000, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_CQM={0x8, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0x24}}, 0x0) recvmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/245, 0xf5}, {&(0x7f00000001c0)=""/177, 0xb1}, {&(0x7f0000000900)=""/106, 0x6a}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x4}, 0x2000000}], 0x2, 0x101, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r10) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) 42.23899748s ago: executing program 5 (id=12828): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="050000000800000032490000c200000001"], 0x50) io_uring_enter(0xffffffffffffffff, 0x3ab1, 0xff3a, 0x1, &(0x7f0000000100)={[0x7f, 0x9]}, 0x8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0xca, r0}, 0x38) 41.976045498s ago: executing program 5 (id=12830): r0 = socket(0x1e, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f0000000600)=[{{&(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{&(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x1, {{0x2}}}, 0x80, 0x0}, 0x18000000}], 0x2, 0x0) 41.705833615s ago: executing program 5 (id=12832): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve1\x00'}) (async, rerun: 64) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (rerun: 64) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) (async) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) (async) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) (async, rerun: 32) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) (rerun: 32) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0xfffffffe) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400005}, 0x94) syz_open_procfs(0x0, &(0x7f0000000480)='maps\x00') (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x401, 0x4000, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x49108}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffff, 0x7}}]}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) r5 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r5, &(0x7f0000000140)={'full'}, 0xfffffdef) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) (async) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) (async) r6 = socket$tipc(0x1e, 0x2, 0x0) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) (async) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) 41.037538868s ago: executing program 5 (id=12836): openat$audio1(0xffffffffffffff9c, 0x0, 0x88002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x1, 0x4, &(0x7f00000000c0)=@framed={{}, [@jmp={0x7, 0x0, 0x9, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41100}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000001c0), 0x40400, 0x0) fchdir(r1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x1000000) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r4 = fspick(r3, &(0x7f00000000c0)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r5 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0xfff5, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000000a14000000110001"], 0x70}}, 0x0) ptrace$peeksig(0x4209, r5, &(0x7f0000000140)={0x2}, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='cdg', 0x3) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x8, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x3}, 0x50) socket$nl_route(0x10, 0x3, 0x0) io_setup(0x8, &(0x7f0000000280)=0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r7, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0}]) 39.032610352s ago: executing program 5 (id=12838): socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) read$rfkill(0xffffffffffffffff, &(0x7f00000000c0), 0x8) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) fanotify_init(0x4, 0x1800) ftruncate(r1, 0x6000000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x4000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000040)='./file1\x00', 0x420008c9) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x50) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x11, r3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[], 0x0) socket$netlink(0x10, 0x3, 0x33f40a7fece9e2ee) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1c, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0xffffffffffffffb9) unshare(0x8000000) 29.76729945s ago: executing program 3 (id=12875): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xfe}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) syz_usb_connect(0x5, 0x4c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201100335fe6510ca1a8eb232920102030109023a00010d019002090432a70201039e08090588061000060408082387ac33afe3410725010305f80409050702"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) 28.222263955s ago: executing program 3 (id=12881): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18006400fdffffff000000000200020118050000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008001800b7040000500d0000850000000500000095"], &(0x7f0000000180)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x4d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 28.065946759s ago: executing program 3 (id=12882): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x4, &(0x7f0000000140)=@framed={{}, [@ldst={0x3, 0x2, 0x6, 0x1, 0x9, 0x3e, 0xa1}]}, 0x0, 0xc, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 27.98955466s ago: executing program 3 (id=12883): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f000061f000/0x7000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000033000/0x1000)=nil, &(0x7f0000c9f000/0x3000)=nil, &(0x7f0000824000/0x2000)=nil, &(0x7f000059f000/0x2000)=nil, &(0x7f0000752000/0x1000)=nil, &(0x7f000046c000/0x1000)=nil, &(0x7f0000fad000/0x4000)=nil, &(0x7f000053b000/0x3000)=nil, &(0x7f0000378000/0x2000)=nil, &(0x7f00000000c0)="cab31c71369efd6ecaa489708e71ff91d751ec0f159c9c6692ea68c189afad8a48999ebacd73edd7b35e7eacd4d493d2b5e6659140af71725d2cef40a978553b50fce99a55b1f7941790c3277569d163e2e37d26acaf51dc4d96e7d13337b9f18159b12e85c25d077e9d2c1b076288666f009a7a11cc3991cf7d9f363a9a8ee14ced0e24a33c878d6aad14879997637358f8ebced7ab186880188c6d9ccbac6306a5643578b29537f51e1a7ed23d1c8c2c", 0xb1}, 0x64) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0xb409, 0xf07a, 0x0, 0x800, 0xffffffffffffffff, 0xd, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x3, 0xe}, 0x50) ioctl$XFS_IOC_ERROR_CLEARALL(r1, 0x40085875) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r2, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="d800000000000000f9ffffffffffffff00000000000000000200000000000000020000000000000000010000000000000200000008000000060000000000000009000000000000000000000000000000ff0000000000008003000000000000000000000000000000ffffff7f58000000030000000080000009000000", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="01000000040000000000000000008000000020a35ad28100000000002b"], 0x0, 0x0, 0x0}) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9c01"}, @main=@item_4={0x3, 0x0, 0x8, "4492796d"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc8) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') r10 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r10, 0xc048aeca, &(0x7f00000002c0)={0xa, 0x0, [{0x99f, 0x0, 0x77}, {0xb06, 0x0, 0x4}, {0x8cc, 0x0, 0x1}, {0xba4, 0x0, 0x5}, {0x0, 0x0, 0x9}, {0x24a, 0x0, 0x4}, {0x40000080, 0x0, 0xfffffffffffffffe}, {0x5b9c0c5af81ad2d5, 0x0, 0x3}, {0x987, 0x0, 0x6}, {0xaad, 0x0, 0x8}]}) read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) stat(&(0x7f0000002380)='./file0\x00', &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xa0c1e, &(0x7f00000083c0)=ANY=[@ANYBLOB="cd61003a31b5984fad6f2a8a476ac0878cde06a61566b6de3ea46dc1caefd7beed0ff7b537a65477270dfa825700e28a2a362ba3b977f7ea035d4bc78a7b364ae329cf1671ba5386e3e82eb0e887942903ddefeb8d86b5f6dc25c547856e9eaf37fa4169e3ff32f8b37c", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=r3, @ANYBLOB=',group_id=', @ANYRESDEC=r11, @ANYBLOB=',default_permissions,blksize=0x0000000000000c00,max_read=0x0000000000000001,max_read=0x000000000000c05c,allow_other,default_permissions,fscontext=sysadm_u,smackfshat=tunl0\x00,uid>', @ANYRESDEC=r12, @ANYBLOB=',\x00']) r13 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r13, 0x107, 0x5, &(0x7f0000000040)=@req3={0x801000, 0x1000003a, 0x1000, 0x39, 0x9, 0x5, 0xfff}, 0x1c) r14 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r14, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000140)=@ethtool_cmd={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x45, [0x0, 0x89ff]}}) 24.671311242s ago: executing program 3 (id=12891): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000006800000226bd7000fedbdf250a0004002000000000000880080001000f0000001800088014000500200100"/60], 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x40000) socket$qrtr(0x2a, 0x2, 0x0) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r3 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r3, &(0x7f0000000040)={'#! ', './control/file0'}, 0x13) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000340)={0x7, 0x0, 0x4, 0x0, 0x3}) unshare(0x400) bind$unix(0xffffffffffffffff, 0x0, 0x0) timer_create(0x1, &(0x7f0000000280)={0x0, 0x61, 0x2, @thr={&(0x7f00000002c0)="3b206ce37448c3e3a619112c9a48021c3a650044ff9b34f5ac4ece56608e42542d80c8f0ed93ef24b9123cb33779faa11f330fd3eaec8f9e1569d032083110fa9a27c75483e979fa44b91217e6c22b51b922f2779d6d08", &(0x7f00000003c0)="a3260bf5b2cad5bced55c0ff1c5d6276e6bd97cdb2770a1abb66c648ec35dc5ec164e1caeed180884777390b7388ec126217098030c708ec27f85b5a9c6ab9a6d88848547aaac24969d4034f2d10f010a5495b3f88"}}, &(0x7f0000000180)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x1, 0x0, 0x10001, 0x100}) ioctl$USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f0000000240)=0x1) connect$inet6(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000), 0xf01c, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0xcdafecc05749ebda, r5, 0xe65d6000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) 23.83366764s ago: executing program 3 (id=12892): r0 = socket(0x2, 0x80805, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000080)=[{0x6, 0x4, 0x7, 0x50000}]}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) syz_clone(0x22b2bab63e88c7d3, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000068a000000000000040000001801000020696c2500000000002020207b1ad8ff00000000bfa1000000000000070100000400ffffb702000008000000b703000002000000850000000c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0xfef, &(0x7f0000002840)=""/4079, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe979}, 0x94) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) r3 = socket$inet6(0xa, 0x5, 0x0) socket(0x9, 0x5, 0x5eff497c) setsockopt$sock_int(r2, 0x1, 0x27, &(0x7f0000000040)=0xff2, 0x4) r4 = openat$tcp_congestion(0xffffff9c, &(0x7f0000000400), 0x1, 0x0) io_submit(0x0, 0x2, &(0x7f0000000580)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x8, 0x2, r1, &(0x7f0000000240)="3a35f547c463fbeb84f9df6fe25fc48f84476ded069f8a34d443f5cdf33b1c85e1287b9804431c48b9b55559cc76f85095abdd8a5ea144538f18f7038e263101c6ef4933e88d5a06f4f0dd0779362724f7eebe40832c58d41d606d9059eb631434fabc14862948112dfb7adefe13c3fccdcf2ba96ba79410d5f98be5704013e788e1e252da8179426b6e3d9cc9dcb798cbe956a447597a46d7d8563bdf706f35fa27ae6a2854d3f3164630b430c84aadad71d455bcbe53d3ba7ef93c6f7ec45646b5186cdfd3e0797f4fe025f98eae1e84a38549db3c3dc434e1847b14", 0xdd, 0x3, 0x0, 0x1}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000440)="1e1118810f0999076d986b9a95dcdb73772445356216f92622bc33536386cdf5d5986fae07be8bc226ef8880c2fc54d0fd13239799f275e1d1cab65cb6a3b9b3f117b9d7f5829d0ed7396a2d70f62f79b422a7841128e1dc5a439e0d3a0ecea815aee7bfda86662c21732da8b212aeff15d129ed055ac89f999a97e536fe509677f7f4a0e1e8c97a639b7d4be44ed57a8aa97c2b99cceb9095d5d2347f9e86df3325643f55ed5c672ebf654dd8faa70bf197a4ded4f345e3b37da49bb2453cf7d695c41f8bfda2", 0xc7, 0x5, 0x0, 0x2}]) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}}, 0x1c) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r5) sendmsg$DEVLINK_CMD_RATE_SET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x34, r6, 0x6ff, 0x0, 0x25dfdbfc, {0x52}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x48004}, 0x0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000040)=0x1) 23.764830186s ago: executing program 34 (id=12838): socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) read$rfkill(0xffffffffffffffff, &(0x7f00000000c0), 0x8) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) fanotify_init(0x4, 0x1800) ftruncate(r1, 0x6000000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x4000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000040)='./file1\x00', 0x420008c9) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x50) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x11, r3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[], 0x0) socket$netlink(0x10, 0x3, 0x33f40a7fece9e2ee) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1c, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0xffffffffffffffb9) unshare(0x8000000) 22.815767097s ago: executing program 35 (id=12892): r0 = socket(0x2, 0x80805, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000080)=[{0x6, 0x4, 0x7, 0x50000}]}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) syz_clone(0x22b2bab63e88c7d3, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000068a000000000000040000001801000020696c2500000000002020207b1ad8ff00000000bfa1000000000000070100000400ffffb702000008000000b703000002000000850000000c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0xfef, &(0x7f0000002840)=""/4079, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe979}, 0x94) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) r3 = socket$inet6(0xa, 0x5, 0x0) socket(0x9, 0x5, 0x5eff497c) setsockopt$sock_int(r2, 0x1, 0x27, &(0x7f0000000040)=0xff2, 0x4) r4 = openat$tcp_congestion(0xffffff9c, &(0x7f0000000400), 0x1, 0x0) io_submit(0x0, 0x2, &(0x7f0000000580)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x8, 0x2, r1, &(0x7f0000000240)="3a35f547c463fbeb84f9df6fe25fc48f84476ded069f8a34d443f5cdf33b1c85e1287b9804431c48b9b55559cc76f85095abdd8a5ea144538f18f7038e263101c6ef4933e88d5a06f4f0dd0779362724f7eebe40832c58d41d606d9059eb631434fabc14862948112dfb7adefe13c3fccdcf2ba96ba79410d5f98be5704013e788e1e252da8179426b6e3d9cc9dcb798cbe956a447597a46d7d8563bdf706f35fa27ae6a2854d3f3164630b430c84aadad71d455bcbe53d3ba7ef93c6f7ec45646b5186cdfd3e0797f4fe025f98eae1e84a38549db3c3dc434e1847b14", 0xdd, 0x3, 0x0, 0x1}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000440)="1e1118810f0999076d986b9a95dcdb73772445356216f92622bc33536386cdf5d5986fae07be8bc226ef8880c2fc54d0fd13239799f275e1d1cab65cb6a3b9b3f117b9d7f5829d0ed7396a2d70f62f79b422a7841128e1dc5a439e0d3a0ecea815aee7bfda86662c21732da8b212aeff15d129ed055ac89f999a97e536fe509677f7f4a0e1e8c97a639b7d4be44ed57a8aa97c2b99cceb9095d5d2347f9e86df3325643f55ed5c672ebf654dd8faa70bf197a4ded4f345e3b37da49bb2453cf7d695c41f8bfda2", 0xc7, 0x5, 0x0, 0x2}]) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}}, 0x1c) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r5) sendmsg$DEVLINK_CMD_RATE_SET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x34, r6, 0x6ff, 0x0, 0x25dfdbfc, {0x52}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x48004}, 0x0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000040)=0x1) 12.130425711s ago: executing program 0 (id=12932): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWCHAIN={0x44, 0x3, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'team_slave_1\x00'}]}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x20040845}, 0x802) sendmsg$NFT_BATCH(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f5000000000000f5ff0100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) 11.650161364s ago: executing program 0 (id=12937): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r1, &(0x7f0000001040)={0xc, {"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", 0xfffffffffffffe7c}}, 0x1006) r2 = epoll_create1(0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4]}, 0x8, 0x800) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xc000000b}) r4 = gettid() rt_sigtimedwait(&(0x7f0000000040)={[0xffffffff]}, 0x0, 0x0, 0x8) timer_create(0x2, &(0x7f0000000180)={0x0, 0x4, 0x4, @tid=r4}, &(0x7f0000000140)=0x0) timer_settime(r5, 0xe54aef35e9c2845d, &(0x7f000006b000)={{0x77359400}, {0x0, 0x9}}, 0x0) io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2}) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0x4, 0x4, 0x47c, 0xffffffff, 0x194, 0xcc, 0xcc, 0xfeffffff, 0xffffffff, 0x3b4, 0x3b4, 0x3b4, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@local, @private0, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xffffff00, 0xff000000], 'geneve1\x00', 'ip6gretap0\x00', {0xff}, {}, 0x62, 0xc, 0x1}, 0x2f2, 0xa4, 0xcc}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x2}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @mcast1, [0x0, 0x0, 0xff, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0xff000000], 'gretap0\x00', 'wg1\x00', {0xff}, {0xff}, 0x88, 0x7, 0x6, 0x1b}, 0x0, 0x1fc, 0x220, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'ipvlan0\x00', {0xfffffffffffffffd, 0x9, 0x4c, 0x3, 0x10, 0x0, 0x800, 0x4, 0x78, 0x8}, {0x2}}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d8) syz_usb_connect$cdc_ecm(0x5, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x8, 0x20, 0x72, "", [{{0x9, 0x4, 0x0, 0x53, 0x3, 0x2, 0x6, 0x0, 0x9, {{0x5}, {0x5, 0x24, 0x0, 0xd855}, {0xd, 0x24, 0xf, 0x1, 0xa8f, 0x0, 0x4}, [@acm={0x4, 0x24, 0x2, 0xc}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x28, 0x4, 0x7}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x7f, 0x66, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x89, 0xf0, 0x5}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x9, 0x2, 0x4, 0x60, 0x24}, 0x2a, &(0x7f0000000a00)=ANY=[@ANYBLOB="050f2a008d3663aaf905071002042201010a100302040003c107000a1003000800060cfaff0710020e04040003100b60f17c596f8e1d0c6d49a448254bcb50edf98e22a5d16a267f02348e54600323ee4c8638c8f74e8201835075eb7734d094a73ca524"], 0x5, [{0xe2, &(0x7f0000000200)=@string={0xe2, 0x3, "0060f0848a31ef2d856498439e7730b8639e4a89c96e53364dae120b815ab172bfdb5a9ac639ffc51e6499c86c8f7b46f47b3518559ec3ed47747a9bb9a0bcf6a3e8ecffd902fa849c8bb0f154d39e620b5ce53b629b631511bee28fe3dcbfa6714abca41be743f06e26f7e62ba62aec06b50ea0a87939ddce31161f5270a68e46652913ec67986c4e4173fc2d95e86cbd21ba044c24913cfadd62901182000945aa80a7fee08e9e6dd0a15407ec761ac237e8a22d1fb3172ddec89a9c25c1c627adb81613c9dfe19663677440f1bfefd5867aa032d5e24cc10ea2844a879a9d"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x3401}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x100a}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x140c}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x441}}]}) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) rename(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file0\x00') ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000140)={0xffffffff, "030000000000000023000000debd12ffff00000000000000000020000400", 0xffffffffffffffff}) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000040)={0x10000001}) r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r12 = dup3(r7, r11, 0x80000) write$tun(r12, &(0x7f0000000140)=ANY=[], 0x15) close_range(r0, 0xffffffffffffffff, 0x0) 8.396833741s ago: executing program 0 (id=12944): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000001c0)={0x400, 0x300, 0x550, 0x40, 0x17f, 0x0, 0x4, 0x2, {0x0, 0x9}, {0x350, 0x101, 0xffffffff}, {0x10, 0x5}, {0x7ffffffe, 0x4080000, 0x7fe}, 0x1, 0x100, 0x0, 0xd614, 0x1, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x2, 0x0, 0x4}) 7.765933424s ago: executing program 0 (id=12947): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000001900)=[{{&(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10, 0x0}}, {{&(0x7f00000000c0)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x18}}], 0x2, 0x4) syz_open_dev$cec(&(0x7f0000000080), 0x0, 0xe8c00) io_submit(0x0, 0x0, &(0x7f0000000800)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001200), 0x8a400, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6) close(r2) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000001c0)={0x40000008}) poll(&(0x7f0000000000)=[{r4, 0x9000}], 0x1, 0x9) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0xffffffffffffffa9, r6, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {0x0, 0x410c}}}, 0x1c}, 0x1, 0x0, 0x0, 0x400c015}, 0x8000) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000600)={0xc, &(0x7f0000000500)={0x0, 0xa, 0xac, {0xac, 0x6, "abc22720873de8afd3877f7656aa7df34f2d98afcb1785e3bb4ebacd9cca45b1edaa8bffdf75e425b38a4305e80823b4027d748d12e4b73ce49e50aba093f5d1084addcbbe3593d93556ce569cb431588ed20a415f659964a28614e135b6c81051ecdc32fff6eddff997cb67049000610e25b3345a2d2e1424a755aeba10f830de7edf308318fd11b7a782ab63e2172a2ad680918fd92cbbf07d536863a0fce89a94bba770447065c0ed"}}, &(0x7f00000005c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000940)={0x24, &(0x7f0000000640)={0x40, 0x13, 0xeb, "5ece12141aa1bb1d2d677eb7101f8f443737a01f51e39d18fc92f4fd27436238bd365af83529c0d5b5c29ea0ee2fb3df2ccea8a3ae9e7417d8497071fbe39a523c732033b4cff0403e480e27b010e2528da09c5fec8cb28f61072cbeed7e1f9b3840d7e1f3361aa842cf543c542225bc45af1bc69f8447e61d52fa3dd4d0a030b835fc88e3c8614fe81a75aa3530eb20e80b4dc9ca326236f8ad105010930b3d0431b28a015d78a732ff857a128eae54c23087728d769753f771fadef1faa7ba1dd2306bf3075b96db040703358a5721676cf8205d8287def9b7d240aa401d52dfab0d635ec44dc5c711ef"}, 0x0, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000800)={0x20, 0x80, 0x1c, {0x6, 0x1000, 0x6, 0x74, 0xe, 0x4, 0x3b8, 0x76c, 0x5, 0x3, 0x2, 0x6}}, &(0x7f0000000840)={0x20, 0x85, 0x4, 0x3}, &(0x7f0000000880)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000008c0)={0x20, 0x87, 0x2, 0x3}, &(0x7f0000000900)={0x20, 0x89, 0x2, 0x1}}) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r7, 0xc0105b08, &(0x7f0000000040)) (fail_nth: 1) 7.501948288s ago: executing program 1 (id=12949): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6(0xa, 0x400000000001, 0x100) close(0x3) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') r2 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x1, &(0x7f0000000140)=@raw=[@exit], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="c00000001900674c0000000000000000fc000000000000000000000000000002e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000080000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff00000000000000000000000000000000000000f1ffffff000000000000000000000a00100001000000000000000000000000000000000000a4"], 0xc0}, 0x1, 0x0, 0x0, 0x24080}, 0x4c050) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000007d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) bind$alg(r2, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000008900), 0x0, 0x40015) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@rand_addr=0x64010101, 0x0, 0x32}, 0x0, @in=@private=0xa0100fe, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x1c) 7.279288459s ago: executing program 8 (id=12950): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001435010026bd0c333c84df250a4022"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0xefff, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 7.15207842s ago: executing program 8 (id=12951): syz_usb_connect$uac2(0x2, 0xa3, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x3263, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x91, 0x3, 0x1, 0x3, 0x80, 0xbe, {0x8, 0xb, 0x0, 0x1, 0x1, 0x1, 0x20, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x40, 0x6, 0x31, 0x40}, [@output_terminal={0xc, 0x24, 0x3, 0x5, 0x305, 0xe9, 0x5, 0xa, 0x2, 0x1}, @source_unit={0x8, 0x24, 0xa, 0xa, 0x2, 0x5, 0xb, 0x4}, @output_terminal={0xc, 0x24, 0x3, 0x4, 0x100, 0xda, 0x3, 0x0, 0x800, 0x3}, @source_unit={0x8, 0x24, 0xa, 0x3, 0x3, 0x7, 0x9, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0xf9, 0x7, 0x3, {0x8, 0x25, 0x1, 0x82, 0x0, 0x4, 0x7fff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x22, 0x8, 0x7, {0x8, 0x25, 0x1, 0x0, 0xf, 0x24, 0x280}}}}}}}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0}) r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc0046209, &(0x7f0000000000)) bind$alg(r0, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r0, 0x0, 0x0, 0x80800) mknod(&(0x7f0000000000)='./file0\x00', 0x400, 0x1) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[], 0x128}, 0x1, 0x0, 0x0, 0x20000040}, 0x8011) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r2) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000080)=@name={0x1e, 0x2, 0x3, {{0x42, 0x4}, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5, 0x1}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2}, 0x10) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x200004}}, 0x10) close(0x3) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x80000000, 0x1}}, './file0\x00'}) ioctl$PPPIOCATTACH(r7, 0x4004743d, &(0x7f0000000100)=0x3) 6.642192601s ago: executing program 7 (id=12952): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x42081, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000440)) r1 = syz_ublk_setup_io_uring(0x1022, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1db}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0, &(0x7f00000004c0)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000980)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x6}) r5 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40080d4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@rand_addr=0x64010102, 0x0, 0x5, 0x0, 0x3, 0x2, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xac, 0xfff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x7fffffff, 0x10000}, {0x2, 0xa04, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d2, 0x3c}, 0xa, @in=@broadcast, 0x0, 0x0, 0x3, 0x8, 0x49}]}]}, 0xfc}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = syz_open_procfs(0x0, &(0x7f0000000200)='net/mcfilter\x00') lseek(r7, 0xcb6, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) sendmmsg$inet6(r5, &(0x7f00000064c0)=[{{&(0x7f0000000280)={0xa, 0x4e22, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c, 0x0}}], 0x1, 0x888) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd70, 0x0, 0x0, 0x1000, 0x68bb, 0x0, 0x0, 0x76}}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r9 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0) syz_usb_control_io$uac2(r9, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r5, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000180)=0x4) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r10, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x24, r11, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r12}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) syz_usb_control_io$uac1(r9, 0x0, &(0x7f0000000080)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="221004000000fb5b1ff5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.45753265s ago: executing program 1 (id=12953): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001435010026bd0c333c84df250a"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x42, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 4.402185101s ago: executing program 6 (id=12954): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = openat$fuse(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000340)={0x2020}, 0x2020) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x123e00, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x202, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x80000) ioctl$int_in(r6, 0x5452, &(0x7f0000000580)=0xff) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="ad00"/16, 0x10) readv(r6, &(0x7f0000000900)=[{&(0x7f0000000200)=""/144, 0x90}], 0x1) r7 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r7, 0xa) 4.31893652s ago: executing program 0 (id=12955): socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r1, 0x40106e8c, &(0x7f0000000200)=[0x1, 0xfffffffffffffff9]) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xc, 0xe}, {0xfff3, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x20040000) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000140), 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000540), 0x400, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x40000014}) socket$packet(0x11, 0x3, 0x300) r7 = socket$kcm(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}, 0xff000000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') open_by_handle_at(r8, &(0x7f0000000280)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0xf1, {0x6, 0x0, 0x106, 0xfffffff8, 0x3d}}, 0x46200) r9 = openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x4c4901, 0x8d) ioctl$HIDIOCAPPLICATION(r9, 0x4802, 0x6) r10 = syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201610117592920570509201ec70102030109022400010200100009045807028ab538000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r10, 0x0, 0x0) syz_usb_control_io$sierra_net(r10, 0x0, 0x0) 4.286655537s ago: executing program 1 (id=12956): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) socket$nl_route(0x10, 0x3, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) statfs(0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000000c0)={0x806, 0x0, 0x4, 0x7}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16], 0x20}}, 0x0) 4.13819958s ago: executing program 7 (id=12957): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="050000000800000032490000c200000001"], 0x50) io_uring_enter(0xffffffffffffffff, 0x3ab1, 0xff3a, 0x1, &(0x7f0000000100)={[0x7f, 0x9]}, 0x8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000006c0), 0xca, r0}, 0x38) 3.870342367s ago: executing program 8 (id=12958): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'tunl0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, "25beb819521eb41d", "cae5e9937ba539347092dd17d39ed975", 'LP3F', "50f641306280c4e9"}, 0x28) setsockopt$inet6_tcp_int(r2, 0x11a, 0x5, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_blackhole={0xe}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x10, 0x0, 0x8, 0x0, 0x73f, 0x3}}, {0x4}}]}]}, 0x58}}, 0x4800) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'tunl0\x00'}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async) connect$inet6(r2, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x3c) (async) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, "25beb819521eb41d", "cae5e9937ba539347092dd17d39ed975", 'LP3F', "50f641306280c4e9"}, 0x28) (async) setsockopt$inet6_tcp_int(r2, 0x11a, 0x5, 0x0, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_blackhole={0xe}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x10, 0x0, 0x8, 0x0, 0x73f, 0x3}}, {0x4}}]}]}, 0x58}}, 0x4800) (async) 3.795043674s ago: executing program 7 (id=12959): r0 = memfd_create(&(0x7f0000000000)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\xe4\xda\xf9\xcd7el\xb7\xe6\b\x00\xd8\x8f\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x92\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xd9\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7\xf2\xa0D-N\xf9\xba!L]h;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00\x00\xeaq\xbb\x03&\xb4mi\xc7\xff\xca\xd8\x9f\xae\xa3\x04\xaa\x10\xe7\x98\xe48\x8d', 0x3) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0400", 0x18, 0x3a, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x67, '\x00', @loopback}}}}}}, 0x0) fcntl$setstatus(r0, 0x4, 0x42400) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r5, @ANYBLOB="01000000000000002400128009000100626f6e64000000"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r9 = socket$inet(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x404, 0x330, 0x0, 0x98, 0x0, 0x1a0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1, 0xff000000, 0xff000000, 'veth0_macvtap\x00', 'veth1\x00', {0xff}, {0xff}, 0x73, 0x2, 0x3f}, 0x7a00, 0x70, 0x94}, @ECN={0x24, 'ECN\x00', 0x0, {0x20, 0x1, 0x1}}}, {{@ip={@local, @local, 0x0, 0xff, 'veth0_to_batadv\x00', 'nicvf0\x00', {}, {}, 0x8}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local, 0x4e22}}}, {{@uncond, 0x0, 0xb4, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}, @inet=@rpfilter={{0x24}, {0x8}}]}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x7ff, 0x6, @ipv4=@empty, 0x4e21}}}, {{@ip={@remote, @local, 0x0, 0x0, 'syzkaller0\x00', 'wg0\x00', {}, {}, 0x89, 0x0, 0x35}, 0x0, 0x70, 0x94}, @ECN={0x24, 'ECN\x00', 0x0, {0x11, 0xb3, 0x1}}}, {{@ip={@local, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x18}, 0x0, 0x94, 0xb8, 0x0, {}, [@common=@icmp={{0x24}, {0xf, "cc00", 0x1}}]}, @TTL={0x24, 'TTL\x00', 0x0, {0xa5, 0x57}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x460) r10 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000014000000000000000000030018150000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000008807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000001500000018110000", @ANYRES32=r10, @ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r11, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000040)="76ea0900000000", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) r12 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00ffef02800000121f", 0x2e}], 0x1}, 0x404c080) 3.70776871s ago: executing program 8 (id=12960): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0xc8, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc15}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8}, @IFLA_BROADCAST={0xa, 0x2, @broadcast}, @IFLA_LINKINFO={0x78, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x68, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0x5}, {0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xfedbea18db4508ad}}]}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0xc}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x1}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x9}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}]}}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(r2, 0xc02054a5, &(0x7f0000000040)={0x7fb, r0, 'id1\x00'}) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000480)={'gre0\x00', 0x0}) r4 = syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00') fchdir(r4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={r3, 0x20, &(0x7f00000006c0)={&(0x7f0000000540)=""/219, 0xdb, 0x0, &(0x7f0000000640)=""/69, 0x45}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x2, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000002c0)='GPL\x00', 0x8, 0x91, &(0x7f0000000300)=""/145, 0x41000, 0x4, '\x00', 0x0, @fallback=0x1c, r4, 0x8, &(0x7f00000004c0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0x4, 0x3ff, 0x100}, 0x10, r5, r3, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) r6 = syz_usb_connect(0x5, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000003c0)={0x10003, 0x5, 0xb000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) syz_usb_control_io$uac1(r6, 0x0, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x103a, 0x1000, 0x103a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) r8 = syz_open_dev$I2C(&(0x7f0000000180), 0x1, 0x402) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$I2C_SMBUS(r8, 0x720, &(0x7f0000000100)={0x1, 0x7f, 0x2, &(0x7f00000000c0)={0xf, "18096693297e294e3d70684d3e1dc807ac8faa28791336fdca13baf089d08d42d0"}}) r9 = socket(0x1e, 0x1, 0x0) connect$tipc(r9, &(0x7f0000000040)=@id, 0x10) recvmsg(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/15, 0xf}], 0x1, &(0x7f0000000200)=""/97, 0x61}, 0x40010000) shutdown(r9, 0x2) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@ipv6_delrule={0x28, 0x21, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@FIB_RULE_POLICY=@FRA_UID_RANGE={0xc}]}, 0x28}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="44010000100001000000000800000000fc01000000000000000000000000000100"/48, @ANYRES32=0x0, @ANYRES32, @ANYRESHEX=r9], 0x144}}, 0x20000000) 3.386447341s ago: executing program 6 (id=12961): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f00000016c0)={0x10, 0x0, 0x25dfdbfb, 0x40000044}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x20000000, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11c}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x90}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) 3.27051025s ago: executing program 6 (id=12962): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x5, 0x3, 0x3d) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[], 0x33fe0}}, 0x40010) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2, 0x1fffc, 0x0, 0xfffffffd}}, 0x2e) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f00000001c0)=0xc) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x2a, 0x107, 0xfffffffc, 0x0, {0x5, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0xc000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000180)=0x62b8, 0x4) sendmsg$rds(r7, &(0x7f00000001c0)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000880)=""/4092, 0xffc}], 0x1, 0x0, 0x0, 0x20000800}, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x8000002, 0xfffffffa, @rand_addr, 0x5}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r8, 0xc0d05640, &(0x7f00000000c0)={0xa, @pix={0x0, 0x0, 0x34565348, 0x0, 0x0, 0x0, 0x25}}) 3.15897818s ago: executing program 7 (id=12963): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000340)=[{}], 0x1, &(0x7f0000000280), &(0x7f00000003c0)={[0x800, 0x10000000]}, 0xffffffffffffffa4) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x16) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0x6}]}, 0x8) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000801}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, r6, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x41, 0x60}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x39a}]]}, 0x30}}, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000200)=0x2, 0x4) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffdc2, 0x81, 0x0, 0x0) shutdown(r1, 0x1) recvmmsg(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001540)=""/4097, 0x1001}], 0x1}, 0x6}], 0x1, 0x40000020, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x800, r7}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r7}, 0x38) 2.959746084s ago: executing program 1 (id=12964): socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) clock_gettime(0x6, &(0x7f0000000180)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f00000001c0)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0xa, 0x0}}, {0x6, @remote}, 0x4, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}, 'netpci0\x00'}) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="b40000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200a08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xb4}, 0x1, 0x0, 0x0, 0x20008010}, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000480)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0684113, &(0x7f0000000080)={0x1, 0xfffff800, 0x1, 0xa, 0x8, 0x3, 0x500, 0xe, 0x9, 0x40, 0xffffffff, 0x2}) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r8, 0x4010ae67, &(0x7f0000000000)={0x8080000, 0x1d000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r8, 0x4010ae67, &(0x7f0000000080)={0x8000000, 0x3000, 0x1}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r8, 0x4010ae68, &(0x7f0000000600)={0xdddd0000, 0x10000}) syz_open_dev$video(&(0x7f0000000000), 0x1, 0x40) syz_emit_ethernet(0x4a, &(0x7f0000000700)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4f9309", 0x14, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) process_madvise(r6, &(0x7f00000015c0)=[{0x0, 0xb3c9de750fa141ee}, {&(0x7f0000001600)="7fe370522d6af6625215f1793293827ec1fbafd2669ec71d6ec4f18aaa71edae948611d70900e80e4116a3c114041430f19bd4f37e3c7238ed6e6d46979c2220bde96ffe55c88d2e697fd133e5733e1bbb159ba81a1e8e2fb2e51596", 0x1}, {&(0x7f0000001300)="0454c96113b0da138a30557b0c026d7c7ba28c5cf82e468ed91537d279936ddcf06ef737e0943554457a28db61aea38a154bf19b456388daf4df61c9febcd9b8a2b14929c6f097f4ff11e686a8a37381b9321ae19dd77be474863e35633dec7003568e91eab8e870a93a73b6dea475547a826b25021aecd727c201c9cea0bfba0122b00573c286b821d43d0b4e38ec90b7d08565bf81862bdf5115e75886e742c51e058d0752982da309d53a7c0d320fdbd38bfaa998ff981d15928f783b2728ecc210898685dfc72398e665b7892024c0ab0dcfe9d3fc", 0xd7}, {&(0x7f0000001400)="3e519bc4eb7b0a55b33bdb22cc7ca76aba33506ebcf89e67b16583e68404bbca008b995a73322a4cc7a3c436e94da49121c4f225ccd342612b46beb2f569a7a0423c0cf79f2d94c015b7b47bc11d5fe599214dbe7f92c8a14b6d254a8daa074ece2708f10e912eb72cb22efc14a0d0cc7cea79311ead3200c7aca0e920d83c8d7b92db", 0x83}, {&(0x7f00000017c0)="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", 0x1000}, {&(0x7f00000014c0)="6b553f4de4ed875c9fadc16852f54981bcd646a5262fc3900592194638585e3d2e79f074f796720749ddc1a2661dcb2471a47d963fb4d817dfdb5f52dc8ab642030c2c771646051d08609527b36368b80794b8cb63fe817c3379951a047c5026c2e99eae6dc05c6845529fb603666d78c0e1e5f7bca8f1d8584b7409ccaf0da598af64d7bdd2ae21ac4fb4e07dee96a92a8dddecee7ccbede2d0a7d4f2da90dc3eb4ae8895091f05db58a786519f6fc924a465cc46ae6a9b8705de0705b8bab4f10cddc7756c53eadf4aa6e2379fd85e9c5e7bfc", 0xd4}], 0x6, 0x9, 0x0) 2.306644637s ago: executing program 6 (id=12965): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0xf01f7400000000, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 1.118506574s ago: executing program 7 (id=12966): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) process_madvise(r2, &(0x7f00000015c0)=[{0x0}, {&(0x7f0000001000)="7f", 0x1}, {&(0x7f0000000700)="d7176ef9", 0x4}], 0x3, 0xb, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = socket(0x400000000010, 0x3, 0x0) (async) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x35e, 0x862b01) ioctl$EVIOCSREP(r4, 0x40084503, &(0x7f0000000100)=[0xc, 0x36]) (async) r5 = socket$unix(0x1, 0x1, 0x0) (async) uname(&(0x7f0000000280)=""/101) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002ebd7000000000001400000018000180140002006e657464657673696d3000000000000005000b000100000008000d000d000000080009000900000008000a"], 0x4c}}, 0x0) (async, rerun: 64) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x54, r8, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @multicast2}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x20008880) (async, rerun: 64) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x148, r8, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}, 0x317bf02b}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x247, @local, 0x4}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fff}]}, @TIPC_NLA_LINK={0x9c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xcc6}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf65}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xad}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5000}]}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x401}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x40}, 0x4001) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x2}, {}, {0xfff1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x10, 0x2, [@TCA_MATCHALL_ACT={0x4}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) 822.407001ms ago: executing program 0 (id=12967): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000080), 0x15000000) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = openat$vcs(0xffffff9c, &(0x7f0000000000), 0x141200, 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000095, 0x0, 0xfffffffffffffffd}]}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000000c0)={0xffffffffffffffff, 0xc8, 0x3}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x67c, 0x6, 0xf3b8, 0xfffffffffffffffe, 0x1000, 0x5, 0x4002004c4, 0x8, 0x0, 0x2000000097, 0xe, 0x0, 0x5, 0x4, 0x0, 0x8], 0xeeee8000, 0x402}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) ioctl$KVM_RUN(r2, 0xae80, 0x0) r7 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000180)={0x40, 0x7fffffff, 0x6, "ce2d60d3e7c436b0b068d83f288c360c7668c19cb47e833171a57a8f12691350e55b991d6f60b556e64d4149a140883b6574221593af3e517d45a70178277ce7"}) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r7, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000200)=ANY=[], 0x0, 0x0}) r8 = getpgrp(0x0) r9 = gettid() kcmp$KCMP_EPOLL_TFD(r8, r9, 0x7, 0xffffffffffffffff, &(0x7f0000000040)) syz_usb_control_io$uac1(r7, 0x0, 0x0) 489.516466ms ago: executing program 7 (id=12968): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000010040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="fa82", 0xfdef}], 0x1}, 0x20000000) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000001580)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x252, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x0, 0x3, "", [{{0x9, 0x4, 0x0, 0xd, 0x2, 0x3, 0x1, 0x2, 0x1, {0x9, 0x21, 0xfeff, 0x9, 0x1, {0x22, 0x492}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x9, 0xd2}}}}}]}}]}}, 0x0) 441.699304ms ago: executing program 8 (id=12969): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fanotify_init(0x200, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = openat$sequencer2(0xffffff9c, &(0x7f0000000040), 0x183081, 0x0) ioctl$SNDCTL_TMR_SOURCE(r0, 0xc0045406) close(0x3) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000)=""/21, 0xfffffe0d) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 334.465328ms ago: executing program 6 (id=12970): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd120003000000140000006000000000082f00fe88a43de1a400000000000000027d01ff0200000012000000000000000000010000883e"], 0xfdef) 296.460358ms ago: executing program 1 (id=12971): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x5, 0x3, 0x3d) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[], 0x33fe0}}, 0x40010) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2, 0x1fffc, 0x0, 0xfffffffd}}, 0x2e) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f00000001c0)=0xc) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x2a, 0x107, 0xfffffffc, 0x0, {0x5, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0xc000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000180)=0x62b8, 0x4) sendmsg$rds(r7, &(0x7f00000001c0)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000880)=""/4092, 0xffc}], 0x1, 0x0, 0x0, 0x20000800}, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x8000002, 0xfffffffa, @rand_addr, 0x5}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r8, 0xc0d05640, &(0x7f00000000c0)={0xa, @pix={0x0, 0x0, 0x34565348, 0x0, 0x0, 0x0, 0x25}}) 45.576959ms ago: executing program 6 (id=12972): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) (async) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r0 = socket(0x15, 0x5, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000, 0xa, &(0x7f0000ffb000/0x3000)=nil) (async, rerun: 64) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) sendmsg$nl_xfrm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000008c0)=@updsa={0x144, 0x10, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in=@empty}, {@in6=@private1, 0x0, 0x6c}, @in=@broadcast, {}, {}, {0x40000000, 0x0, 0x6}, 0x70bd2d, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @offload={0xc, 0x1c, {0x0, 0xb6e5e9ec8343b1e9}}]}, 0x144}}, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mmap(&(0x7f00007fc000/0x3000)=nil, 0x3000, 0x1000002, 0x12, r1, 0x0) (async, rerun: 64) openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) (rerun: 64) r4 = openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r4, 0xc02c563a, &(0x7f00000001c0)={0x5, {0xbffffffd}}) (async) add_key(&(0x7f0000000040)='pkcs7_test\x00', 0x0, &(0x7f0000000080)="100c0608630002560e2be2c64c", 0xd, 0xfffffffffffffffd) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002640)={0x14, r6, 0x311, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x20000880) (async) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r7) (async, rerun: 32) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) (async, rerun: 32) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000000106010100000000000000040a0000090500010007020000050001fccf2fb98b5e9d4e24720be68b6c0900070000000500010007000000050001000700000005000100070000000500010007000000050001000700000005000100160000000500010100000000000080000700000005000100070800000500010007000000"], 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x20000801) (async, rerun: 32) syz_clone3(&(0x7f0000000100)={0x104060b00, 0x0, 0x0, 0x0, {0x14}, 0x0, 0xffffffffffffff4e, 0x0, 0x0}, 0x58) (rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 28.913397ms ago: executing program 8 (id=12973): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000100)='i', 0x1}], 0x1}}], 0x1, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') io_submit(r1, 0x2, &(0x7f0000000880)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x8, 0x6, r2, &(0x7f0000000780)="dad3249963716593891b7f0707f1d3d026796180fde5c1e83bd1feaaafa8447ade79cbdb520f1b60f53c87e07c5a8a1776069c61c1450b022f5b4423e13757412c3f4d6df91eb1e955b4d87faceb278736de7805324090c9690e12cb57cbe0ed571997906235819afe7066cd", 0x6c, 0x48000000000000, 0x0, 0x0, r2}]) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mbind(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x4002, &(0x7f0000000000)=0x2, 0x3, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000080)=0x7, 0x83, 0x0) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000cc0)=@raw={'raw\x00', 0x8, 0x3, 0x2cc, 0x0, 0x25, 0x148, 0x120, 0x60, 0x238, 0x2a8, 0x2a8, 0x238, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xb8, 0x120, 0x0, {0x200003ae, 0x7f00}, [@inet=@rpfilter={{0x24}, {0xc}}, @inet=@rpfilter={{0x24}, {0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x2, 0x9, 0xbc1, 0x8, '\x00', 'syz1\x00', {0x3cf2}}}}, {{@ip={@broadcast, @multicast1, 0x120, 0xffffffff, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4, 0x1000000}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x3}}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x328) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000325bd7000fddbdf250c00000064000100000007800800020000200300080003000100000008000200060000004400078008000400c5ea757bf995466e90254b9c6dafbaffff0000080001000f000000080001001e00000008000400f70900000800040000000000080002000500000008000200030000000800030000000080"], 0x78}, 0x1, 0x0, 0x0, 0x200440d0}, 0x101) sendmmsg$inet6(r0, &(0x7f00000071c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000080)='H', 0x1}], 0x1}}], 0x1, 0x0) 0s ago: executing program 1 (id=12974): fsopen(&(0x7f0000000040)='virtiofs\x00', 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x66, &(0x7f0000000100)=0xc6, 0x4) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r2, &(0x7f0000000200)={0xa, 0xe22, 0x0, @empty, 0x1}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffbfff00000000000086dd600489f1009c1100fc010000000000000025030000000000ff02000000000000000000000000000100000e22"], 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) r3 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000004c0)='j\x95\'\x8aC\x16\xca\\', &(0x7f0000000c40)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?^\xc9\xef\xe0Q\x01\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\x80\x1a\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf?\xc1\rv\xd3j\r6\x7f\x00'/141, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f0000000d00)='(!\xef(.(\\-]\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000200)='^](*\r\\!\x00', &(0x7f0000000500)='{:\'@-\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000001c0)='\xe6\xd2=(L\x9f\x1c&\xda\xfa\xf3}\x18\xdckL<\xa5-#\xc8\xb7\x98\f\x87\xcf', &(0x7f0000000540)="82", 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b80)='\xe0\"\xef\xb1\xea\xe6\x9c\xe6\xc8M\xdb\x86\xb3\x8b\xbe\xd5\xbdB\x92\xa0\x19-+a\x13qQ\xd5f39hSr\xafbB\xe2\xe8\xcd\x1bf\x18\x7f\xf27E#\"\xab\x99\xec\x88\x8d\xd8C\x0f\x95\xff\xfeG\xf9t\xb1 \xcc\xc5\xbb\x88\xb6\xd2\xf2Jwq\xf8oG [ 2707.126642][T15820] dump_stack_lvl+0xe8/0x150 [ 2707.126667][T15820] should_fail_ex+0x412/0x560 [ 2707.126691][T15820] _copy_from_user+0x2d/0xb0 [ 2707.126710][T15820] sk_setsockopt+0x2b3/0x2d60 [ 2707.126733][T15820] ? get_pid_task+0x20/0x1f0 [ 2707.126751][T15820] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 2707.126775][T15820] ? __pfx_sk_setsockopt+0x10/0x10 [ 2707.126794][T15820] ? get_pid_task+0x20/0x1f0 [ 2707.126811][T15820] ? get_pid_task+0x20/0x1f0 [ 2707.126852][T15820] udp_lib_setsockopt+0xbc/0x6b0 [ 2707.126879][T15820] ? __pfx_udp_lib_setsockopt+0x10/0x10 [ 2707.126898][T15820] ? __pfx_aa_sk_perm+0x10/0x10 [ 2707.126920][T15820] ? aa_sock_opt_perm+0xff/0x1a0 [ 2707.126942][T15820] udp_setsockopt+0x67/0xb0 [ 2707.126958][T15820] ? __pfx_udp_push_pending_frames+0x10/0x10 [ 2707.126971][T15820] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 2707.126989][T15820] do_sock_setsockopt+0x17c/0x1b0 [ 2707.127011][T15820] __ia32_sys_setsockopt+0x13d/0x1b0 [ 2707.127033][T15820] __do_fast_syscall_32+0x23e/0x6f0 [ 2707.127049][T15820] ? do_fast_syscall_32+0x33/0x70 [ 2707.127070][T15820] ? lockdep_hardirqs_on+0x7a/0x110 [ 2707.127083][T15820] ? asm_int80_emulation+0x1a/0x20 [ 2707.127095][T15820] ? do_int80_emulation+0x29f/0x550 [ 2707.127111][T15820] do_fast_syscall_32+0x33/0x70 [ 2707.127125][T15820] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2707.127139][T15820] RIP: 0023:0xf7f8601c [ 2707.127152][T15820] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2707.127163][T15820] RSP: 002b:00000000f544650c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 2707.127178][T15820] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000000000001 [ 2707.127187][T15820] RDX: 0000000000000034 RSI: 00000000800000c0 RDI: 0000000000000004 [ 2707.127195][T15820] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2707.127203][T15820] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2707.127211][T15820] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2707.127230][T15820] [ 2707.384683][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2707.766540][ T300] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 2707.836541][T32753] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 2707.935438][ T300] usb 2-1: config 0 has no interfaces? [ 2707.945856][ T300] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2707.955643][ T300] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2707.979108][ T300] usb 2-1: config 0 descriptor?? [ 2707.996545][T32753] usb 1-1: Using ep0 maxpacket: 16 [ 2708.004048][T32753] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2708.025349][T32753] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2708.055111][T32753] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2708.078313][T32753] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2708.141326][T32753] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2708.237698][ T300] usb 2-1: USB disconnect, device number 108 [ 2708.274789][T32753] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2708.316504][T32753] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2708.333666][T32753] usb 1-1: Manufacturer: syz [ 2708.349964][T32753] usb 1-1: config 0 descriptor?? [ 2708.406791][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2708.565484][ C1] sd 0:0:1:0: [sda] tag#1877 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2708.576681][ C1] sd 0:0:1:0: [sda] tag#1877 CDB: Write(6) 0a 00 00 00 00 00 00 01 fe 80 00 00 [ 2708.702974][T15840] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12554'. [ 2708.754487][ T312] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 2708.805654][ T312] usb 6-1: Warning! Unlikely big volume step count (=4549), linear volume or wrong cval->res? [ 2708.829566][ T312] usb 6-1: [5] FU [Mic Capture Volume] ch = 1, val = -16640/-12091/1 [ 2708.872602][ T312] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 2708.883697][T15841] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12555'. [ 2708.966056][T15845] kAFS: unparsable volume name [ 2709.006370][T32753] rc_core: IR keymap rc-hauppauge not found [ 2709.012321][T32753] Registered IR keymap rc-empty [ 2709.017235][T32753] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2709.118440][T32753] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2709.237054][T32753] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 2709.256805][ T312] usb 6-1: 5:0: failed to get current value for ch 1 (-22) [ 2709.288238][T32753] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input157 [ 2709.321581][T32753] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2709.411401][T32753] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2709.513314][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2709.543417][T32753] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2709.557490][ T312] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 2709.596559][T32753] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2709.639873][T32753] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2709.688606][T11718] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 2709.706959][T32753] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2709.737863][T11718] usb 4-1: unit 2 not found! [ 2709.756665][T32753] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2709.792480][ T312] usb 6-1: USB disconnect, device number 44 [ 2709.830211][T32753] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2709.866547][T32753] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2709.906549][T32753] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2709.932791][T11718] usb 4-1: USB disconnect, device number 64 [ 2710.056904][T32753] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2710.084855][T32753] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2710.237184][T15859] ip6_tunnel: non-ECT from fc04:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 2710.301091][T15859] fuse: Bad value for 'rootmode' [ 2710.531595][ T300] usb 6-1: new full-speed USB device number 45 using dummy_hcd [ 2710.566454][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2710.704926][ T300] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2710.726141][ T300] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2710.764410][ T300] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2710.787145][ T300] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2711.043202][ T300] usb 6-1: usb_control_msg returned -32 [ 2711.103846][ T300] usbtmc 6-1:16.0: can't read capabilities [ 2711.234876][ T300] usb 1-1: USB disconnect, device number 80 [ 2711.257311][ T312] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 2711.518161][ T312] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 2711.572719][ T312] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2711.606448][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2711.632040][ T312] usb 2-1: config 0 has no interface number 0 [ 2711.702693][ T312] usb 2-1: config 0 interface 50 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2711.756377][ T300] usb 6-1: USB disconnect, device number 45 [ 2711.806963][ T312] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 2711.854467][T15884] netlink: 'syz.0.12566': attribute type 4 has an invalid length. [ 2711.862408][ T312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2711.862466][ T312] usb 2-1: Product: syz [ 2711.862479][ T312] usb 2-1: Manufacturer: syz [ 2711.862508][ T312] usb 2-1: SerialNumber: syz [ 2711.872463][ T312] usb 2-1: config 0 descriptor?? [ 2711.981621][T15885] netlink: 'syz.0.12566': attribute type 4 has an invalid length. [ 2711.999956][ T312] yurex 2-1:0.50: Could not find endpoints [ 2712.476036][T15868] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12564'. [ 2712.646498][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2712.836319][ T300] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 2713.086330][ T300] usb 6-1: Using ep0 maxpacket: 16 [ 2713.122701][ T300] usb 6-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 2713.159672][ T300] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2713.216865][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 2713.223485][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 2713.245103][ T300] usb 6-1: Product: syz [ 2713.297381][ T300] usb 6-1: Manufacturer: syz [ 2713.338430][ T300] usb 6-1: SerialNumber: syz [ 2713.425339][ T300] usb 6-1: config 0 descriptor?? [ 2713.497250][ T300] usb 6-1: selecting invalid altsetting 1 [ 2713.535950][ T300] technisat-usb2: could not set alternate setting to 0 [ 2713.677243][ T300] technisat-usb2: firmware version: 0.0 [ 2713.686459][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2713.725859][ T300] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 2713.904337][ T300] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2713.961544][ T300] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 2714.007631][ T300] usb 6-1: media controller created [ 2714.030100][ T300] technisat-usb2: i2c-error: out failed 53 = -22 [ 2714.099599][ T300] dvb-usb: MAC address reading failed. [ 2714.252764][ T300] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2714.569679][ T321] usb 2-1: USB disconnect, device number 109 [ 2714.713746][ T300] DVB: Unable to find symbol stv090x_attach() [ 2714.726502][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2714.755318][T15913] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12571'. [ 2714.784833][ T300] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 2715.017768][ T300] rc_core: IR keymap rc-technisat-usb2 not found [ 2715.068225][ T300] Registered IR keymap rc-empty [ 2715.125571][ T300] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 2715.146027][ T300] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input158 [ 2715.167876][T15923] netlink: 56 bytes leftover after parsing attributes in process `syz.6.12574'. [ 2715.180108][ T300] dvb-usb: schedule remote query interval to 100 msecs. [ 2715.212353][ T300] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 2715.269459][ T300] usb 6-1: USB disconnect, device number 46 [ 2715.366627][T32753] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 2715.624917][T15936] loop6: detected capacity change from 0 to 2640 [ 2715.633763][T15935] Cannot find del_set index 3 as target [ 2715.639824][ T300] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 2715.653611][T15936] buffer_io_error: 11 callbacks suppressed [ 2715.653627][T15936] Buffer I/O error on dev loop6, logical block 0, async page read [ 2715.669046][T15936] Buffer I/O error on dev loop6, logical block 0, async page read [ 2715.676993][T15936] Buffer I/O error on dev loop6, logical block 0, async page read [ 2715.684929][T15936] Buffer I/O error on dev loop6, logical block 0, async page read [ 2715.744111][T15936] Buffer I/O error on dev loop6, logical block 0, async page read [ 2715.760772][T15936] Buffer I/O error on dev loop6, logical block 0, async page read [ 2715.780139][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2715.815677][T15936] Buffer I/O error on dev loop6, logical block 0, async page read [ 2715.823630][T15936] Buffer I/O error on dev loop6, logical block 0, async page read [ 2715.831517][T15936] ldm_validate_partition_table(): Disk read failed. [ 2715.854265][T15936] Buffer I/O error on dev loop6, logical block 0, async page read [ 2715.862241][T15936] Buffer I/O error on dev loop6, logical block 0, async page read [ 2715.961061][T32753] usb 1-1: Using ep0 maxpacket: 16 [ 2715.970868][T15936] Dev loop6: unable to read RDB block 0 [ 2715.976905][T15936] loop6: unable to read partition table [ 2715.982774][T15936] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 2716.189744][T15946] syzkaller0: entered promiscuous mode [ 2716.200742][T15946] syzkaller0: entered allmulticast mode [ 2716.278905][T15946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12582'. [ 2716.646010][T32753] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2716.659328][T32753] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2716.666155][T32753] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 2716.703761][T15950] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12583'. [ 2716.713052][T32753] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2716.724991][T32753] usb 1-1: config 0 descriptor?? [ 2716.777284][T15950] : left promiscuous mode [ 2716.806461][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2717.045917][T15959] netlink: 276 bytes leftover after parsing attributes in process `syz.6.12587'. [ 2717.191811][T15963] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12590'. [ 2717.289020][T15968] netlink: 24 bytes leftover after parsing attributes in process `syz.6.12589'. [ 2717.346164][T15968] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12589'. [ 2717.385948][T32753] nzxt-smart2 0003:1E71:2009.0078: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 2717.466322][T11718] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 2717.666543][T15973] syzkaller1: entered promiscuous mode [ 2717.675023][T15973] syzkaller1: entered allmulticast mode [ 2717.776819][T15975] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12593'. [ 2717.921918][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2717.946756][T15919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2717.956285][T15919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2718.070289][T11718] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2718.092999][T11718] usb 6-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 2718.123701][T11718] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2718.145689][T11718] usb 6-1: config 0 descriptor?? [ 2718.209532][T11718] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 2718.495247][ T321] usb 6-1: USB disconnect, device number 47 [ 2718.966521][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2719.282087][ T321] usb 1-1: USB disconnect, device number 81 [ 2719.620824][T32753] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 2719.786383][T12451] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 2719.876647][T32753] usb 2-1: Using ep0 maxpacket: 16 [ 2719.918529][T32753] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2719.936038][T32753] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2719.942805][T32753] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 2719.951845][T32753] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2719.981139][T32753] usb 2-1: config 0 descriptor?? [ 2720.036296][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2720.037767][T12451] usb 4-1: Using ep0 maxpacket: 16 [ 2720.080940][T16017] netlink: 'syz.6.12609': attribute type 12 has an invalid length. [ 2720.089448][T16017] netlink: 'syz.6.12609': attribute type 29 has an invalid length. [ 2720.097743][T16017] netlink: 148 bytes leftover after parsing attributes in process `syz.6.12609'. [ 2720.097743][T12451] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2720.097769][T12451] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 2720.106866][T16017] netlink: 'syz.6.12609': attribute type 1 has an invalid length. [ 2720.106887][T16017] netlink: 'syz.6.12609': attribute type 2 has an invalid length. [ 2720.106897][T16017] netlink: 11 bytes leftover after parsing attributes in process `syz.6.12609'. [ 2720.275717][T12451] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x24, changing to 0x4 [ 2720.352433][T12451] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 60930, setting to 1024 [ 2720.432393][T12451] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 2720.566087][T12451] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 2720.634711][T12451] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2720.672897][T12451] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2720.697354][T12451] usb 4-1: SerialNumber: syz [ 2720.730546][T16004] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2720.774526][T16004] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2720.905492][T32753] nzxt-smart2 0003:1E71:2009.0079: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 2721.046499][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2721.053651][T12451] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 2721.129877][T12451] usb 4-1: USB disconnect, device number 65 [ 2721.683945][T16002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2721.757118][T16002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2722.086366][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2722.396353][T12451] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 2722.549933][T12451] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2722.584460][T12451] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2722.616452][T12451] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 2722.657833][T12451] usb 4-1: New USB device found, idVendor=0499, idProduct=1507, bcdDevice= 0.40 [ 2722.683665][T12451] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2722.703188][T12451] usb 4-1: Product: syz [ 2722.712377][T12451] usb 4-1: Manufacturer: syz [ 2722.723960][T12451] usb 4-1: SerialNumber: syz [ 2722.960181][T12451] usb 4-1: USB disconnect, device number 66 [ 2723.088957][T16045] xt_hashlimit: size too large, truncated to 1048576 [ 2723.126515][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2723.194683][T16045] x_tables: ip6_tables: CT target: only valid in raw table, not [ 2724.019515][ T321] usb 2-1: USB disconnect, device number 110 [ 2724.166370][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2724.382940][T16070] netlink: 'syz.0.12628': attribute type 5 has an invalid length. [ 2724.639479][T16075] netlink: 44 bytes leftover after parsing attributes in process `syz.0.12630'. [ 2724.664101][T16075] netlink: 44 bytes leftover after parsing attributes in process `syz.0.12630'. [ 2724.701792][T16075] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12630'. [ 2724.946987][T32760] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 2725.095794][T16084] syzkaller1: entered promiscuous mode [ 2725.116514][T16084] syzkaller1: entered allmulticast mode [ 2725.277953][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2725.366954][T32760] usb 2-1: Using ep0 maxpacket: 32 [ 2725.376995][T32760] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2725.404253][T32760] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2725.441804][T32760] usb 2-1: config 0 descriptor?? [ 2725.670493][T32760] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 2725.739485][T32760] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2725.784300][T32760] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 2725.849950][T32760] usb 2-1: media controller created [ 2725.898254][T32760] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2725.942568][T16099] bridge0: port 3(dummy0) entered blocking state [ 2725.949036][T16099] bridge0: port 3(dummy0) entered forwarding state [ 2725.955728][T16099] bridge0: port 2(bridge_slave_1) entered blocking state [ 2725.962911][T16099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2725.970402][T16099] bridge0: port 1(bridge_slave_0) entered blocking state [ 2725.977577][T16099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2726.044119][T11718] IPVS: starting estimator thread 0... [ 2726.183527][T32760] az6027: usb out operation failed. (-71) [ 2726.192151][T32760] az6027: usb out operation failed. (-71) [ 2726.200599][T32760] stb0899_attach: Driver disabled by Kconfig [ 2726.206371][T16102] IPVS: using max 55 ests per chain, 132000 per kthread [ 2726.230392][T32760] az6027: no front-end attached [ 2726.230392][T32760] [ 2726.269020][T32760] az6027: usb out operation failed. (-71) [ 2726.294583][T32760] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 2726.317972][T12452] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 2726.326499][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2726.457228][T32760] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input159 [ 2726.556475][T12452] usb 4-1: Using ep0 maxpacket: 16 [ 2726.573479][T32760] dvb-usb: schedule remote query interval to 400 msecs. [ 2726.626928][T32760] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 2726.692819][T32760] usb 2-1: USB disconnect, device number 111 [ 2726.747544][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2726.759791][ C1] IPv6: bridge0: IPv6 duplicate address fe80::a8aa:aaff:feaa:aa1b used by aa:aa:aa:aa:aa:1b detected! [ 2726.786685][T16111] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12644'. [ 2726.840530][T12452] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2726.865437][T32760] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 2726.952523][T12452] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2727.003415][T12452] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 2727.039696][T12452] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2727.124094][T12452] usb 4-1: config 0 descriptor?? [ 2727.366532][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2727.414238][T16121] syzkaller1: entered promiscuous mode [ 2727.468573][T16121] syzkaller1: entered allmulticast mode [ 2727.722608][T12452] nzxt-smart2 0003:1E71:2009.007A: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 2728.287229][T16103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2728.338909][T16103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2728.461086][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2729.536961][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2729.601529][T16142] fuse: Unknown parameter '' [ 2729.736345][T12452] usb 4-1: USB disconnect, device number 67 [ 2730.143891][T16152] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12657'. [ 2730.327394][T16165] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 2730.615750][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2730.628770][ T312] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 2730.659494][T16171] syzkaller1: entered promiscuous mode [ 2730.664958][T16171] syzkaller1: entered allmulticast mode [ 2730.673453][T12451] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 2730.907567][ T312] usb 4-1: Using ep0 maxpacket: 16 [ 2730.917541][T12451] usb 2-1: Using ep0 maxpacket: 32 [ 2730.927332][ T312] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 2730.944860][ T312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2730.988023][ T312] usb 4-1: Product: syz [ 2730.995761][ T312] usb 4-1: Manufacturer: syz [ 2731.004735][ T312] usb 4-1: SerialNumber: syz [ 2731.015984][T12451] usb 2-1: config 2 has an invalid interface number: 88 but max is 0 [ 2731.061704][T12451] usb 2-1: config 2 has no interface number 0 [ 2731.063582][ T312] r8152-cfgselector 4-1: Unknown version 0x0000 [ 2731.097673][ T312] r8152-cfgselector 4-1: config 0 descriptor?? [ 2731.121713][T12451] usb 2-1: config 2 interface 88 has no altsetting 0 [ 2731.229116][T12451] usb 2-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 2731.282920][T12451] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2731.324815][ T312] r8152-cfgselector 4-1: Needed 1 retries to read version [ 2731.376835][T12451] usb 2-1: Product: syz [ 2731.400281][T12451] usb 2-1: Manufacturer: syz [ 2731.436273][T12451] usb 2-1: SerialNumber: syz [ 2731.686454][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2731.936490][ T312] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 2732.815718][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2733.090954][T32753] r8152-cfgselector 4-1: USB disconnect, device number 68 [ 2733.355796][ T312] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2733.365925][ T312] usb 6-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 2733.375662][ T312] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2733.437838][ T312] usb 6-1: config 0 descriptor?? [ 2733.685222][ T312] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 2733.818650][T16201] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12665'. [ 2733.894007][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2734.165324][T12451] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2734.213157][T12451] asix 2-1:2.88: probe with driver asix failed with error -71 [ 2734.264948][T12451] usb 2-1: USB disconnect, device number 112 [ 2734.737256][T16218] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12671'. [ 2734.766309][T12451] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 2734.946402][T12451] usb 4-1: Using ep0 maxpacket: 16 [ 2734.966640][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2735.025267][T12451] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2735.061052][T12451] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2735.091829][T12451] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 2735.136191][T12451] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2735.183763][T12451] usb 4-1: config 0 descriptor?? [ 2735.293389][T32753] usb 6-1: USB disconnect, device number 48 [ 2735.304943][T16223] netdevsim netdevsim0: Direct firmware load for .. @ failed with error -2 [ 2735.336308][T16223] netdevsim netdevsim0: Falling back to sysfs fallback for: .. @ [ 2735.682250][T12451] nzxt-smart2 0003:1E71:2009.007B: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 2736.103148][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2736.397331][T16213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2736.481736][T16213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2737.231319][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2737.517237][T16255] syzkaller1: entered promiscuous mode [ 2737.534343][T16255] syzkaller1: entered allmulticast mode [ 2738.308280][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2738.676443][T11718] usb 4-1: USB disconnect, device number 69 [ 2739.298925][T16276] netlink: 52 bytes leftover after parsing attributes in process `syz.6.12690'. [ 2739.337640][T16276] netlink: 52 bytes leftover after parsing attributes in process `syz.6.12690'. [ 2739.348653][T16276] netlink: 52 bytes leftover after parsing attributes in process `syz.6.12690'. [ 2739.366726][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2739.632118][T16285] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 2740.114423][T16291] FAULT_INJECTION: forcing a failure. [ 2740.114423][T16291] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2740.127763][T16291] CPU: 0 UID: 0 PID: 16291 Comm: syz.1.12695 Tainted: G L syzkaller #0 PREEMPT(full) [ 2740.127789][T16291] Tainted: [L]=SOFTLOCKUP [ 2740.127795][T16291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2740.127804][T16291] Call Trace: [ 2740.127812][T16291] [ 2740.127819][T16291] dump_stack_lvl+0xe8/0x150 [ 2740.127844][T16291] should_fail_ex+0x412/0x560 [ 2740.127870][T16291] _copy_from_iter+0x1d3/0x1670 [ 2740.127891][T16291] ? rcu_is_watching+0x15/0xb0 [ 2740.127915][T16291] ? __pfx__copy_from_iter+0x10/0x10 [ 2740.127940][T16291] ? netlink_sendmsg+0x650/0xb40 [ 2740.127955][T16291] ? skb_put+0x11b/0x210 [ 2740.127981][T16291] netlink_sendmsg+0x6c0/0xb40 [ 2740.128005][T16291] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2740.128023][T16291] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2740.128047][T16291] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2740.128071][T16291] ____sys_sendmsg+0x972/0x9f0 [ 2740.128093][T16291] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2740.128112][T16291] ? kstrtoull+0x12f/0x1d0 [ 2740.128149][T16291] ___sys_sendmsg+0x2a5/0x360 [ 2740.128165][T16291] ? __lock_acquire+0x6b5/0x2cf0 [ 2740.128186][T16291] ? __pfx____sys_sendmsg+0x10/0x10 [ 2740.128205][T16291] ? get_pid_task+0x20/0x1f0 [ 2740.128224][T16291] ? get_pid_task+0x20/0x1f0 [ 2740.128241][T16291] ? get_pid_task+0x20/0x1f0 [ 2740.128277][T16291] ? __fget_files+0x2a/0x420 [ 2740.128297][T16291] ? __fget_files+0x3a0/0x420 [ 2740.128322][T16291] __sys_sendmsg+0x183/0x260 [ 2740.128339][T16291] ? __pfx___sys_sendmsg+0x10/0x10 [ 2740.128373][T16291] __do_fast_syscall_32+0x23e/0x6f0 [ 2740.128393][T16291] ? do_fast_syscall_32+0x33/0x70 [ 2740.128408][T16291] ? lockdep_hardirqs_on+0x7a/0x110 [ 2740.128423][T16291] ? asm_int80_emulation+0x1a/0x20 [ 2740.128439][T16291] ? do_int80_emulation+0x29f/0x550 [ 2740.128454][T16291] ? trace_irq_disable+0x3b/0x140 [ 2740.128479][T16291] do_fast_syscall_32+0x33/0x70 [ 2740.128496][T16291] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2740.128515][T16291] RIP: 0023:0xf700f01c [ 2740.128531][T16291] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2740.128544][T16291] RSP: 002b:00000000f53fd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2740.128562][T16291] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 2740.128572][T16291] RDX: 0000000004040080 RSI: 0000000000000000 RDI: 0000000000000000 [ 2740.128582][T16291] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2740.128592][T16291] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2740.128600][T16291] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2740.128625][T16291] [ 2740.406916][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2740.929920][T16293] syz_tun: entered allmulticast mode [ 2740.985128][T16296] syzkaller1: entered promiscuous mode [ 2740.990776][T16296] syzkaller1: entered allmulticast mode [ 2741.066534][T11718] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 2741.346434][T11718] usb 4-1: Using ep0 maxpacket: 32 [ 2741.375477][T16300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2741.422976][T11718] usb 4-1: config 2 has an invalid interface number: 88 but max is 0 [ 2741.430720][T16300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2741.446330][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2741.486214][T11718] usb 4-1: config 2 has no interface number 0 [ 2741.503076][T11718] usb 4-1: config 2 interface 88 has no altsetting 0 [ 2741.567301][T16305] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12701'. [ 2741.666738][T12452] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 2741.703773][T11718] usb 4-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 2741.736024][T11718] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2741.837383][T12452] usb 2-1: Using ep0 maxpacket: 16 [ 2741.851732][T11718] usb 4-1: Product: syz [ 2741.854429][T12452] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2741.877749][T12452] usb 2-1: config index 0 descriptor too short (expected 56448, got 18) [ 2741.886873][T12452] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 2741.909600][T11718] usb 4-1: Manufacturer: syz [ 2741.936341][T11718] usb 4-1: SerialNumber: syz [ 2741.954447][T12452] usb 2-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 2741.991064][T12452] usb 2-1: New USB device found, idVendor=07d1, idProduct=0303, bcdDevice= 9.01 [ 2742.014272][T12452] usb 2-1: New USB device strings: Mfr=2, Product=18, SerialNumber=0 [ 2742.049569][T12452] usb 2-1: Product: syz [ 2742.063528][T12452] usb 2-1: Manufacturer: syz [ 2742.145790][T16310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12703'. [ 2742.216480][T16310] : entered promiscuous mode [ 2742.486494][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2742.547967][T12452] usb 2-1: USB disconnect, device number 113 [ 2742.794605][T16320] netlink: 'syz.0.12704': attribute type 10 has an invalid length. [ 2742.857500][T16320] 8021q: adding VLAN 0 to HW filter on device team0 [ 2742.873856][T16320] bond0: (slave team0): Enslaving as an active interface with an up link [ 2743.054869][T16324] binder: 16323:16324 ioctl c0306201 80000080 returned -14 [ 2743.066714][T16324] binder: 16323:16324 ioctl c0306201 800004c0 returned -14 [ 2743.085043][T16324] binder: 16323:16324 ioctl c0306201 80000240 returned -14 [ 2743.085890][T16324] binder: 16323:16324 ioctl c008551b 80000040 returned -22 [ 2743.244952][T16319] fuse: Unknown parameter '' [ 2743.326327][ T300] usb 2-1: new full-speed USB device number 114 using dummy_hcd [ 2743.507205][T16331] syzkaller1: entered promiscuous mode [ 2743.517191][T16331] syzkaller1: entered allmulticast mode [ 2743.536744][ T300] usb 2-1: device descriptor read/64, error -71 [ 2743.588235][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2743.776311][ T300] usb 2-1: new full-speed USB device number 115 using dummy_hcd [ 2743.917074][ T300] usb 2-1: device descriptor read/64, error -71 [ 2743.938820][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2743.987019][T11718] asix 4-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2744.011917][T11718] asix 4-1:2.88: probe with driver asix failed with error -71 [ 2744.037793][T11718] usb 4-1: USB disconnect, device number 70 [ 2744.106789][ T300] usb usb2-port1: attempt power cycle [ 2744.506572][ T300] usb 2-1: new full-speed USB device number 116 using dummy_hcd [ 2744.526433][T11718] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 2744.556913][ T300] usb 2-1: device descriptor read/8, error -71 [ 2744.646497][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2744.716360][T11718] usb 4-1: Using ep0 maxpacket: 8 [ 2744.730271][T11718] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 2744.760328][T11718] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2744.788847][T11718] usb 4-1: Product: syz [ 2744.803580][T11718] usb 4-1: Manufacturer: syz [ 2744.827786][ T300] usb 2-1: new full-speed USB device number 117 using dummy_hcd [ 2744.834426][T11718] usb 4-1: SerialNumber: syz [ 2744.868282][T11718] usb 4-1: config 0 descriptor?? [ 2744.877920][ T300] usb 2-1: device descriptor read/8, error -71 [ 2744.882995][T11718] gspca_main: se401-2.14.0 probing 047d:5003 [ 2745.006997][ T300] usb usb2-port1: unable to enumerate USB device [ 2745.097323][T16338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2745.146092][T16338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2745.204841][T16338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2745.230202][T16343] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12712'. [ 2745.254408][T16338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2745.275434][T16343] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12712'. [ 2745.314695][T16343] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12712'. [ 2745.494095][T16355] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12716'. [ 2745.686347][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2746.079256][T11718] gspca_se401: read req failed req 0x06 error -19 [ 2746.092372][T11718] usb 4-1: USB disconnect, device number 71 [ 2746.131478][T16365] syzkaller1: entered promiscuous mode [ 2746.137377][T16365] syzkaller1: entered allmulticast mode [ 2746.216403][ T312] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 2746.578769][ T312] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2746.600997][ T312] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2746.615804][ T312] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 2746.633736][ T312] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2746.661273][ T312] usb 1-1: config 0 descriptor?? [ 2746.826780][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2747.246905][ T312] cm6533_jd 0003:0D8C:0022.007C: unknown main item tag 0x0 [ 2747.287485][ T312] cm6533_jd 0003:0D8C:0022.007C: unknown main item tag 0x0 [ 2747.371139][ T312] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.007C/input/input160 [ 2747.428483][ T312] cm6533_jd 0003:0D8C:0022.007C: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 2747.444175][T16358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2747.511925][T16358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2747.633374][ T312] usb 1-1: USB disconnect, device number 82 [ 2747.801394][T16383] fido_id[16383]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 2747.846328][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2748.087167][T12452] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 2748.278103][T12452] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2748.288529][T12452] usb 6-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 2748.298631][T12452] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2748.316660][T12452] usb 6-1: config 0 descriptor?? [ 2748.337678][T12452] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 2748.655907][T12451] usb 6-1: USB disconnect, device number 49 [ 2748.780451][T16399] netlink: 'syz.0.12732': attribute type 12 has an invalid length. [ 2748.802626][T16399] netlink: 'syz.0.12732': attribute type 29 has an invalid length. [ 2748.822234][T16399] netlink: 148 bytes leftover after parsing attributes in process `syz.0.12732'. [ 2748.847394][T16399] netlink: 'syz.0.12732': attribute type 1 has an invalid length. [ 2748.868037][T16399] netlink: 'syz.0.12732': attribute type 2 has an invalid length. [ 2748.886528][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2748.911101][T16399] netlink: 11 bytes leftover after parsing attributes in process `syz.0.12732'. [ 2749.139938][T16406] loop9: detected capacity change from 0 to 7 [ 2749.225237][T16409] netlink: 'syz.0.12735': attribute type 1 has an invalid length. [ 2749.257347][T16406] Dev loop9: unable to read RDB block 7 [ 2749.289949][T16410] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12735'. [ 2749.290379][T16406] loop9: AHDI p1 p2 p3 [ 2749.436529][T16406] loop9: partition table partially beyond EOD, truncated [ 2749.655652][T16406] loop9: p1 start 1920169572 is beyond EOD, truncated [ 2749.711137][T16406] loop9: p2 start 1851744889 is beyond EOD, truncated [ 2749.853702][T16409] bond2: entered promiscuous mode [ 2749.864756][T16409] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2749.878418][T16410] bond2: entered allmulticast mode [ 2749.952318][T16416] bond2: (slave bridge1): making interface the new active one [ 2749.959806][T16416] bridge1: entered promiscuous mode [ 2750.011749][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2750.074191][T16416] bridge1: entered allmulticast mode [ 2750.137979][T16416] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 2751.007109][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 2751.007126][ T29] audit: type=1326 audit(1780854597.301:9353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16435 comm="syz.5.12740" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f01c code=0x7ffc0000 [ 2751.046576][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2751.268380][ T29] audit: type=1326 audit(1780854597.301:9354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16435 comm="syz.5.12740" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f01c code=0x7ffc0000 [ 2751.431180][T12452] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 2751.506447][ T29] audit: type=1326 audit(1780854597.301:9355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16435 comm="syz.5.12740" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf707f01c code=0x7ffc0000 [ 2751.638149][T12452] usb 6-1: Using ep0 maxpacket: 8 [ 2751.677094][T12452] usb 6-1: config 2 has an invalid interface number: 31 but max is 0 [ 2751.716278][T12452] usb 6-1: config 2 has no interface number 0 [ 2751.749488][T12452] usb 6-1: config 2 interface 31 has no altsetting 0 [ 2751.777651][T12452] usb 6-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 2751.796346][T12452] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2751.831207][T12452] usb 6-1: Product: syz [ 2751.854173][T12452] usb 6-1: Manufacturer: syz [ 2751.889471][T12452] usb 6-1: SerialNumber: syz [ 2751.896010][ T29] audit: type=1326 audit(1780854597.301:9356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16435 comm="syz.5.12740" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f01c code=0x7ffc0000 [ 2752.086364][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2752.112316][ T29] audit: type=1326 audit(1780854597.301:9357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16435 comm="syz.5.12740" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f01c code=0x7ffc0000 [ 2752.205183][ T29] audit: type=1326 audit(1780854597.421:9358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16435 comm="syz.5.12740" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=310 compat=1 ip=0xf707f01c code=0x7ffc0000 [ 2752.229699][ T29] audit: type=1326 audit(1780854597.421:9359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16435 comm="syz.5.12740" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f01c code=0x7ffc0000 [ 2752.330133][T16446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2752.351393][T16446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2752.366699][ T29] audit: type=1326 audit(1780854597.421:9360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16435 comm="syz.5.12740" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f01c code=0x7ffc0000 [ 2752.391151][ T29] audit: type=1326 audit(1780854597.421:9361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16435 comm="syz.5.12740" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71b61ab code=0x7ffc0000 [ 2752.452321][ T29] audit: type=1326 audit(1780854597.431:9362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16435 comm="syz.5.12740" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71b61ab code=0x7ffc0000 [ 2752.993541][T12452] ch9200 6-1:2.31: probe with driver ch9200 failed with error -71 [ 2753.102498][T12452] usb 6-1: USB disconnect, device number 50 [ 2753.185683][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2753.303669][T32753] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 2753.428290][T16476] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12748'. [ 2753.558578][T32753] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 2753.586070][T32753] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 2753.613750][T32753] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2753.674309][T32753] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 2753.868214][T11718] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 2754.147072][T12452] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 2754.313853][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2754.421581][T12452] usb 2-1: Using ep0 maxpacket: 8 [ 2754.441381][T12452] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2754.469463][T12452] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2754.478543][T12452] usb 2-1: Product: syz [ 2754.482800][T12452] usb 2-1: Manufacturer: syz [ 2754.487795][T12452] usb 2-1: SerialNumber: syz [ 2754.495297][T12452] usb 2-1: config 0 descriptor?? [ 2754.532860][T11718] usb 4-1: Using ep0 maxpacket: 16 [ 2754.717806][T12452] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2754.973340][T32753] stv0680 1-1:4.0: STV(e): camera ping failed!! [ 2755.003781][T16534] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12760'. [ 2755.403922][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2755.620612][T32753] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -110 [ 2755.628900][T32753] stv0680 1-1:4.0: last error: 28, command = 0x81 [ 2756.057940][T11718] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 2756.067023][T11718] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2756.075018][T11718] usb 4-1: Product: syz [ 2756.079306][T11718] usb 4-1: Manufacturer: syz [ 2756.083905][T11718] usb 4-1: SerialNumber: syz [ 2756.226888][ T300] usb 1-1: USB disconnect, device number 83 [ 2756.329479][T16564] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12761'. [ 2756.372173][T12452] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2756.407954][T12452] usb 2-1: USB disconnect, device number 118 [ 2756.491098][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2756.505590][T11718] r8152-cfgselector 4-1: Unknown version 0x0000 [ 2756.511897][T11718] r8152-cfgselector 4-1: config 0 descriptor?? [ 2756.581041][T16576] netlink: 20 bytes leftover after parsing attributes in process `syz.5.12765'. [ 2756.609776][T11718] r8152-cfgselector 4-1: can't set config #0, error -71 [ 2756.618397][T11718] r8152-cfgselector 4-1: USB disconnect, device number 72 [ 2756.645952][T16576] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12765'. [ 2756.654942][T16576] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12765'. [ 2756.671333][T16576] netlink: 'syz.5.12765': attribute type 10 has an invalid length. [ 2756.679508][T16576] bridge0: port 3(dummy0) entered disabled state [ 2756.685954][T16576] bridge0: port 2(bridge_slave_1) entered disabled state [ 2756.693086][T16576] bridge0: port 1(bridge_slave_0) entered disabled state [ 2756.767830][ T300] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 2756.966672][ T300] usb 1-1: Using ep0 maxpacket: 16 [ 2756.989871][ T300] usb 1-1: config 6 has an invalid interface number: 144 but max is 2 [ 2757.012108][ T300] usb 1-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 2757.033456][ T300] usb 1-1: config 6 has an invalid interface number: 245 but max is 2 [ 2757.058987][ T300] usb 1-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 2757.076966][ T300] usb 1-1: config 6 has an invalid interface number: 99 but max is 2 [ 2757.093114][ T300] usb 1-1: config 6 has an invalid descriptor of length 1, skipping remainder of the config [ 2757.104031][ T300] usb 1-1: config 6 has no interface number 0 [ 2757.110723][ T300] usb 1-1: config 6 has no interface number 1 [ 2757.117355][ T300] usb 1-1: config 6 has no interface number 2 [ 2757.123526][ T300] usb 1-1: config 6 interface 144 altsetting 136 endpoint 0x5 has invalid maxpacket 576, setting to 64 [ 2757.136364][ T300] usb 1-1: config 6 interface 144 altsetting 136 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 2757.161083][ T300] usb 1-1: config 6 interface 144 altsetting 136 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 2757.189369][ T300] usb 1-1: config 6 interface 144 altsetting 136 has a duplicate endpoint with address 0xE, skipping [ 2757.219950][ T300] usb 1-1: config 6 interface 144 altsetting 136 has a duplicate endpoint with address 0xE, skipping [ 2757.244636][ T300] usb 1-1: config 6 interface 144 altsetting 136 has an endpoint descriptor with address 0xEC, changing to 0x8C [ 2757.272526][ T300] usb 1-1: config 6 interface 144 altsetting 136 endpoint 0x8C has invalid maxpacket 2060, setting to 1024 [ 2757.319325][ T300] usb 1-1: config 6 interface 144 altsetting 136 bulk endpoint 0x8C has invalid maxpacket 1024 [ 2757.372283][ T300] usb 1-1: config 6 interface 144 altsetting 136 has an invalid descriptor for endpoint zero, skipping [ 2757.414072][ T300] usb 1-1: config 6 interface 144 altsetting 136 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 2757.453141][ T300] usb 1-1: config 6 interface 144 altsetting 136 has a duplicate endpoint with address 0x3, skipping [ 2757.478585][ T300] usb 1-1: config 6 interface 144 altsetting 136 has a duplicate endpoint with address 0xF, skipping [ 2757.508916][ T300] usb 1-1: config 6 interface 144 altsetting 136 has a duplicate endpoint with address 0xE, skipping [ 2757.526542][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2757.562919][ T300] usb 1-1: config 6 interface 144 altsetting 136 has a duplicate endpoint with address 0xF, skipping [ 2757.621760][ T300] usb 1-1: config 6 interface 144 altsetting 136 has 17 endpoint descriptors, different from the interface descriptor's value: 16 [ 2757.676275][ T300] usb 1-1: config 6 interface 245 altsetting 3 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 2757.719696][ T300] usb 1-1: config 6 interface 245 altsetting 3 has a duplicate endpoint with address 0x7, skipping [ 2757.762966][ T300] usb 1-1: config 6 interface 245 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 2757.807569][ T300] usb 1-1: config 6 interface 245 altsetting 3 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 2757.854212][ T300] usb 1-1: config 6 interface 245 altsetting 3 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 2757.899954][ T300] usb 1-1: config 6 interface 245 altsetting 3 has a duplicate endpoint with address 0x85, skipping [ 2757.933189][ T300] usb 1-1: config 6 interface 245 altsetting 3 endpoint 0x4 has invalid maxpacket 1640, setting to 64 [ 2757.964288][ T300] usb 1-1: config 6 interface 245 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 2758.010502][ T300] usb 1-1: config 6 interface 245 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 2758.054402][ T300] usb 1-1: config 6 interface 245 altsetting 3 has a duplicate endpoint with address 0x1, skipping [ 2758.131023][ T300] usb 1-1: config 6 interface 245 altsetting 3 has a duplicate endpoint with address 0x7, skipping [ 2758.205558][ T300] usb 1-1: config 6 interface 245 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 2758.238497][ T300] usb 1-1: config 6 interface 245 altsetting 3 has a duplicate endpoint with address 0x1, skipping [ 2758.249446][ T300] usb 1-1: config 6 interface 245 altsetting 3 has a duplicate endpoint with address 0xF, skipping [ 2758.261704][ T300] usb 1-1: config 6 interface 245 altsetting 3 has a duplicate endpoint with address 0x6, skipping [ 2758.272616][ T300] usb 1-1: config 6 interface 245 altsetting 3 bulk endpoint 0x9 has invalid maxpacket 32 [ 2758.304595][ T300] usb 1-1: config 6 interface 245 altsetting 3 has a duplicate endpoint with address 0x2, skipping [ 2758.325073][ T300] usb 1-1: config 6 interface 245 altsetting 3 has a duplicate endpoint with address 0x7, skipping [ 2758.340038][ T300] usb 1-1: config 6 interface 245 altsetting 3 has 17 endpoint descriptors, different from the interface descriptor's value: 16 [ 2758.364988][ T300] usb 1-1: config 6 interface 99 altsetting 218 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 2758.402563][ T300] usb 1-1: config 6 interface 144 has no altsetting 0 [ 2758.409892][ T300] usb 1-1: config 6 interface 245 has no altsetting 0 [ 2758.417109][ T300] usb 1-1: config 6 interface 99 has no altsetting 0 [ 2758.426746][ T300] usb 1-1: New USB device found, idVendor=10b9, idProduct=5000, bcdDevice=17.bb [ 2758.439357][T16598] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12773'. [ 2758.448939][ T300] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2758.463165][ T300] usb 1-1: Product: æ‘௧ê†êž§á‘˜ê£ë“ºï”™å®ã€ºä¥ƒë«¦ã®’㇋虛ꎚꦶè¾ìª§ê±¡ä„—澦놻蒲㴗á«é‚唰Ⓣᱥꑦ볠꥓䗫扊졢Ò죗ꃲä”턅켳䆪ꦹꮉ켆㗪ç›í”œâ¶…⮨熥婷ë…銊鱗践網凶҄슻觳讕Ã랱ퟪ蘽ê«ë„«î©‘胈âªã®“Ô­ã†é´¯åŒ‘é [ 2758.501834][ T300] usb 1-1: Manufacturer: ૱뫉攉镕Ả璵å°é­° [ 2758.516735][ T300] usb 1-1: SerialNumber: 釿ར髺鋾ሽ諱äŽï»ªì©³è–‰ë §á„¡ï¼¾áŸŠë³¶à®í™½ï©¼äœ´ï‡¾ë«‹âµ·î­žê©¨ìšá¶¢î†å£´ì¾Œì–걚棨蠰㦢갢㡹머堵뀇࢜ᒚ휊ê®ê³¹ê°©æŒ’ä©á½—븞빹㘊å½è‹‡ë³ã†¿í­ã²²îº–ﺀ⛿䬢鲞摦栲ꊔ廰঻࣭諲懡щ砩岶뉗笅乛᧕눜⤈᰺팾⃎枯㗱怶çˆäº‹à¡‘ꔦ꒱隟佺텄ï²ç…— [ 2758.548084][T12452] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 2758.566356][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2758.650007][T16568] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2758.707156][T12452] usb 6-1: Using ep0 maxpacket: 32 [ 2758.714958][T12452] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2758.756337][T12452] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2758.808928][T12452] usb 6-1: config 0 descriptor?? [ 2758.883965][T16568] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12762'. [ 2758.894652][ T312] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 2758.920373][T16568] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12762'. [ 2758.949863][T16568] netlink: 'syz.0.12762': attribute type 7 has an invalid length. [ 2758.993609][T16613] netlink: 48 bytes leftover after parsing attributes in process `syz.0.12762'. [ 2759.041416][T12452] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 2759.076390][ T312] usb 2-1: Using ep0 maxpacket: 16 [ 2759.099630][T12452] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2759.118877][ T312] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 2759.147687][ T312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2759.153907][T12452] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 2759.171705][ T312] usb 2-1: Product: syz [ 2759.182338][ T312] usb 2-1: Manufacturer: syz [ 2759.188008][ T312] usb 2-1: SerialNumber: syz [ 2759.193525][T12452] usb 6-1: media controller created [ 2759.221315][ T300] dvb-usb: found a 'Humax/Coex DVB-T USB Stick 2.0 High Speed' in cold state, will try to load a firmware [ 2759.249503][T16619] syzkaller1: entered promiscuous mode [ 2759.254991][T16619] syzkaller1: entered allmulticast mode [ 2759.296495][ T300] usb 1-1: Direct firmware load for dvb-usb-dibusb-6.0.0.8.fw failed with error -2 [ 2759.409511][ T312] r8152-cfgselector 2-1: Unknown version 0x0000 [ 2759.441324][ T312] r8152-cfgselector 2-1: config 0 descriptor?? [ 2759.468765][T12452] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2759.533248][ T300] usb 1-1: Falling back to sysfs fallback for: dvb-usb-dibusb-6.0.0.8.fw [ 2759.606591][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2759.647038][T12452] az6027: usb out operation failed. (-71) [ 2759.700216][T12452] az6027: usb out operation failed. (-71) [ 2759.729953][T12452] stb0899_attach: Driver disabled by Kconfig [ 2759.765888][T12452] az6027: no front-end attached [ 2759.765888][T12452] [ 2759.799498][T12452] az6027: usb out operation failed. (-71) [ 2759.831306][T12452] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 2759.888092][T12452] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input161 [ 2759.907387][T16640] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12779'. [ 2759.933453][T12452] dvb-usb: schedule remote query interval to 400 msecs. [ 2759.961542][T12452] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 2759.989141][T12452] usb 6-1: USB disconnect, device number 51 [ 2760.072216][T16645] netlink: 'syz.6.12782': attribute type 12 has an invalid length. [ 2760.079727][ T312] r8152-cfgselector 2-1: Needed 1 retries to read version [ 2760.109445][T16645] netlink: 248 bytes leftover after parsing attributes in process `syz.6.12782'. [ 2760.145040][T12452] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 2760.158433][T16645] netlink: 'syz.6.12782': attribute type 12 has an invalid length. [ 2760.182959][T16645] netlink: 248 bytes leftover after parsing attributes in process `syz.6.12782'. [ 2760.393487][ T321] r8152-cfgselector 2-1: USB disconnect, device number 119 [ 2760.645115][T16664] loop6: detected capacity change from 0 to 2640 [ 2760.664117][T16664] buffer_io_error: 11 callbacks suppressed [ 2760.664128][T16664] Buffer I/O error on dev loop6, logical block 0, async page read [ 2760.675546][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2760.716865][T16664] Buffer I/O error on dev loop6, logical block 0, async page read [ 2760.728591][T15005] Buffer I/O error on dev loop6, logical block 0, async page read [ 2760.736958][T15005] Buffer I/O error on dev loop6, logical block 0, async page read [ 2760.746372][T16664] Buffer I/O error on dev loop6, logical block 0, async page read [ 2760.767085][T16664] Buffer I/O error on dev loop6, logical block 0, async page read [ 2760.780864][T15005] Buffer I/O error on dev loop6, logical block 0, async page read [ 2760.791238][T15005] Buffer I/O error on dev loop6, logical block 0, async page read [ 2760.820199][T16664] Buffer I/O error on dev loop6, logical block 0, async page read [ 2760.839237][T16664] Buffer I/O error on dev loop6, logical block 0, async page read [ 2760.862971][T16664] ldm_validate_partition_table(): Disk read failed. [ 2760.876869][T16664] Dev loop6: unable to read RDB block 0 [ 2760.892281][T16664] loop6: unable to read partition table [ 2760.938781][T16664] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 2761.140050][T16669] netlink: 'syz.5.12787': attribute type 10 has an invalid length. [ 2761.165583][T16669] netlink: 40 bytes leftover after parsing attributes in process `syz.5.12787'. [ 2761.558016][T16676] fuse: Unknown parameter '0x0000000000000009' [ 2761.686502][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2761.888863][ T321] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 2762.367606][T16688] loop5: detected capacity change from 0 to 6 [ 2762.407140][T16688] Dev loop5: unable to read RDB block 6 [ 2762.440767][T16688] loop5: unable to read partition table [ 2762.548326][ T321] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 2762.564833][T16688] loop5: partition table beyond EOD, truncated [ 2762.593218][ T321] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2762.630228][T16688] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2762.659038][ T321] usb 4-1: Product: syz [ 2762.676285][ T321] usb 4-1: Manufacturer: syz [ 2762.697414][ T321] usb 4-1: SerialNumber: syz [ 2762.726411][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2762.727553][ T321] usb 4-1: config 0 descriptor?? [ 2762.803660][ T321] hub 4-1:0.0: bad descriptor, ignoring hub [ 2762.854170][ T321] hub 4-1:0.0: probe with driver hub failed with error -5 [ 2763.099777][T16695] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12794'. [ 2763.213358][T16695] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12794'. [ 2763.766675][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2763.826872][T11718] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 2764.082038][T11718] usb 2-1: config 0 has no interfaces? [ 2764.155083][T11718] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2764.295322][T11718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2764.391775][T11718] usb 2-1: config 0 descriptor?? [ 2764.806374][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2765.075174][T32753] usb 2-1: USB disconnect, device number 120 [ 2765.314746][ T321] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 2765.327512][T16712] __nla_validate_parse: 1 callbacks suppressed [ 2765.327529][T16712] netlink: 276 bytes leftover after parsing attributes in process `syz.5.12798'. [ 2765.443701][ T321] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 2765.509525][ T321] dib0700: firmware download failed at 7 with -22 [ 2765.648537][ T321] usb 4-1: USB disconnect, device number 73 [ 2765.846486][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2766.014992][T16732] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12801'. [ 2766.746313][ T321] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 2766.886320][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2766.945461][ T321] usb 2-1: Using ep0 maxpacket: 8 [ 2766.987458][ T321] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2767.045930][ T321] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 2767.105002][ T321] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 2767.142582][ T321] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 2767.215685][ T321] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2767.238659][T16753] Cannot find del_set index 3 as target [ 2767.313473][ T321] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2767.385569][ T321] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2767.474563][ T321] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2767.538175][ T321] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 2767.568069][ T321] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2767.642722][ T321] usb 2-1: Product: syz [ 2767.679235][ T321] usb 2-1: Manufacturer: syz [ 2767.711837][ T321] usb 2-1: SerialNumber: syz [ 2767.753941][ T321] usb 2-1: config 0 descriptor?? [ 2767.784724][T16747] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2767.873173][ T321] ati_remote 2-1:0.0: ati_remote_probe: Unexpected endpoint_out [ 2767.926476][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2768.088275][ T312] usb 6-1: new full-speed USB device number 52 using dummy_hcd [ 2768.351083][ T312] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2768.367592][T16747] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2768.386765][ T312] usb 6-1: not running at top speed; connect to a high speed hub [ 2768.436456][ T312] usb 6-1: config 12 has an invalid interface number: 188 but max is 1 [ 2768.488511][ T312] usb 6-1: config 12 has no interface number 0 [ 2768.528924][ T312] usb 6-1: config 12 interface 1 has no altsetting 0 [ 2768.571458][ T312] usb 6-1: config 12 interface 188 has no altsetting 0 [ 2768.694463][ T312] usb 6-1: New USB device found, idVendor=1164, idProduct=0602, bcdDevice=47.06 [ 2768.722971][ T312] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2768.755718][ T312] usb 6-1: Product: syz [ 2768.812082][ T312] usb 6-1: Manufacturer: syz [ 2768.826503][ T312] usb 6-1: SerialNumber: syz [ 2768.921765][T16771] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.12811'. [ 2768.966346][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2769.148788][ T312] pvrusb2: Hardware description: Gotview USB 2.0 DVD Deluxe [ 2769.173294][ T312] usb 6-1: selecting invalid altsetting 0 [ 2769.194285][ T2365] pvrusb2: control-write URB failure, status=-71 [ 2769.224860][ T2365] pvrusb2: Device being rendered inoperable [ 2769.234478][ T312] pvrusb2: Hardware description: Gotview USB 2.0 DVD Deluxe [ 2769.274691][ T2365] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 2769.279827][ T312] usb 6-1: selecting invalid altsetting 0 [ 2769.292396][ T2365] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 2769.378679][ T2365] pvrusb2: control-write URB failure, status=-71 [ 2769.407725][ T312] usb 6-1: USB disconnect, device number 52 [ 2769.424182][ T2365] pvrusb2: Device being rendered inoperable [ 2769.485374][ T2365] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 2769.555591][ T2365] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 2770.091417][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2770.495938][T16784] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12816'. [ 2770.528719][T16784] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12816'. [ 2771.126551][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2771.143118][ T321] usb 2-1: USB disconnect, device number 121 [ 2772.167427][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2773.206397][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2774.246493][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2774.650315][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 2774.675556][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 2775.287330][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2775.621011][T16850] vlan0: entered promiscuous mode [ 2776.000714][T16865] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12835'. [ 2776.326492][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2776.400107][T16874] netlink: 'syz.5.12836': attribute type 10 has an invalid length. [ 2776.459223][T16874] netlink: 40 bytes leftover after parsing attributes in process `syz.5.12836'. [ 2777.366395][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2778.406536][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2778.946733][T16908] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12841'. [ 2779.221632][T16911] netlink: 212328 bytes leftover after parsing attributes in process `syz.0.12842'. [ 2779.248929][T16911] netlink: Unknown conntrack attr (type=2304, max=9) [ 2779.446337][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2779.469620][T16917] FAULT_INJECTION: forcing a failure. [ 2779.469620][T16917] name failslab, interval 1, probability 0, space 0, times 0 [ 2779.549327][T16917] CPU: 1 UID: 0 PID: 16917 Comm: syz.0.12844 Tainted: G L syzkaller #0 PREEMPT(full) [ 2779.549347][T16917] Tainted: [L]=SOFTLOCKUP [ 2779.549351][T16917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2779.549358][T16917] Call Trace: [ 2779.549362][T16917] [ 2779.549368][T16917] dump_stack_lvl+0xe8/0x150 [ 2779.549384][T16917] should_fail_ex+0x412/0x560 [ 2779.549398][T16917] should_failslab+0xa8/0x100 [ 2779.549409][T16917] ? vm_area_alloc+0x24/0x140 [ 2779.549423][T16917] kmem_cache_alloc_noprof+0x87/0x650 [ 2779.549436][T16917] ? __pfx_vma_merge_new_range+0x10/0x10 [ 2779.549450][T16917] vm_area_alloc+0x24/0x140 [ 2779.549465][T16917] mmap_region+0x11c6/0x22a0 [ 2779.549480][T16917] ? __lock_acquire+0x6b5/0x2cf0 [ 2779.549494][T16917] ? __pfx_mmap_region+0x10/0x10 [ 2779.549506][T16917] ? mas_ascend+0x304/0x890 [ 2779.549524][T16917] ? mas_prev_node+0xbe2/0xe50 [ 2779.549541][T16917] ? mas_prev_slot+0xb7b/0xbf0 [ 2779.549572][T16917] ? __lock_acquire+0x6b5/0x2cf0 [ 2779.549598][T16917] ? mm_get_unmapped_area_vmflags+0xd9/0x110 [ 2779.549610][T16917] ? cap_mmap_addr+0xaf/0x100 [ 2779.549624][T16917] ? bpf_lsm_mmap_addr+0x9/0x50 [ 2779.549644][T16917] do_mmap+0xc39/0x10c0 [ 2779.549663][T16917] ? __pfx_do_mmap+0x10/0x10 [ 2779.549673][T16917] ? down_write_killable+0x180/0x240 [ 2779.549687][T16917] ? __pfx_down_write_killable+0x10/0x10 [ 2779.549698][T16917] ? apparmor_mmap_file+0x197/0x3e0 [ 2779.549710][T16917] ? security_mmap_file+0x4df/0xa20 [ 2779.549724][T16917] vm_mmap_pgoff+0x2c9/0x4f0 [ 2779.549740][T16917] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 2779.549751][T16917] ? exc_page_fault+0x6a/0xc0 [ 2779.549763][T16917] ? ksys_mmap_pgoff+0xf3/0x760 [ 2779.549774][T16917] ? __ia32_sys_mmap_pgoff+0x21/0xf0 [ 2779.549787][T16917] __do_fast_syscall_32+0x23e/0x6f0 [ 2779.549799][T16917] ? do_fast_syscall_32+0x33/0x70 [ 2779.549809][T16917] ? lockdep_hardirqs_on+0x7a/0x110 [ 2779.549818][T16917] ? irqentry_exit+0x10f/0x8b0 [ 2779.549826][T16917] ? trace_irq_disable+0x3b/0x140 [ 2779.549842][T16917] do_fast_syscall_32+0x33/0x70 [ 2779.549853][T16917] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2779.549865][T16917] RIP: 0023:0xf6fef01c [ 2779.549875][T16917] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2779.549883][T16917] RSP: 002b:00000000f53dc210 EFLAGS: 00000206 ORIG_RAX: 00000000000000c0 [ 2779.549895][T16917] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000200000 [ 2779.549901][T16917] RDX: 0000000000000000 RSI: 0000000000000022 RDI: 00000000ffffffff [ 2779.549908][T16917] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2779.549913][T16917] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2779.549919][T16917] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2779.549933][T16917] [ 2780.477875][T16930] fuse: Bad value for 'user_id' [ 2780.486482][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2780.537998][T16930] fuse: Bad value for 'user_id' [ 2780.872989][T16946] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2781.526314][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2782.566490][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2782.796064][T16966] sch_tbf: burst 25 is lower than device ip6gre0 mtu (1448) ! [ 2782.970691][T16968] loop4: detected capacity change from 0 to 1 [ 2783.035983][T16968] Dev loop4: unable to read RDB block 1 [ 2783.066779][T16968] loop4: unable to read partition table [ 2783.089877][T16968] loop4: partition table beyond EOD, truncated [ 2783.115956][T16968] loop_reread_partitions: partition scan of loop4 (þ被xü^>Ñà– ) failed (rc=-5) [ 2783.161790][T16972] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12853'. [ 2783.317101][ T321] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 2783.493044][ T321] usb 2-1: Using ep0 maxpacket: 8 [ 2783.525228][ T321] usb 2-1: config 1 has an invalid descriptor of length 120, skipping remainder of the config [ 2783.525254][ T321] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2783.525308][ T321] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 48057, setting to 64 [ 2783.531038][ T321] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 2783.531066][ T321] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2783.531084][ T321] usb 2-1: Product: syz [ 2783.531098][ T321] usb 2-1: Manufacturer: syz [ 2783.531112][ T321] usb 2-1: SerialNumber: syz [ 2783.702022][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2783.833683][ T321] usb 2-1: USB disconnect, device number 122 [ 2783.864675][T15006] udevd[15006]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2784.066438][T12450] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 2784.234253][T12450] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2784.266540][T12450] usb 4-1: config 7 has an invalid interface number: 122 but max is 0 [ 2784.295155][T12450] usb 4-1: config 7 has no interface number 0 [ 2784.302153][T12450] usb 4-1: config 7 interface 122 has no altsetting 0 [ 2784.332254][T12450] usb 4-1: New USB device found, idVendor=53b2, idProduct=8c88, bcdDevice=f1.fb [ 2784.372215][T12450] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2784.396672][T12450] usb 4-1: Product: syz [ 2784.418374][T12450] usb 4-1: Manufacturer: syz [ 2784.442663][T12450] usb 4-1: SerialNumber: syz [ 2784.525572][T16991] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12859'. [ 2784.781976][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2785.191784][T17003] syzkaller1: entered promiscuous mode [ 2785.206244][T17003] syzkaller1: entered allmulticast mode [ 2785.868972][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2786.155148][T17016] netlink: 'syz.1.12868': attribute type 10 has an invalid length. [ 2786.163078][T17016] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12868'. [ 2786.654559][T17021] syzkaller1: entered promiscuous mode [ 2786.660222][T17021] syzkaller1: entered allmulticast mode [ 2786.767672][T12450] usb-storage 4-1:7.122: USB Mass Storage device detected [ 2786.942471][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2787.020625][T12450] usb 4-1: USB disconnect, device number 74 [ 2787.288542][T17028] loop9: detected capacity change from 0 to 7 [ 2787.313987][T17028] Dev loop9: unable to read RDB block 7 [ 2787.325146][T17028] loop9: AHDI p1 p2 p3 [ 2787.334594][T17028] loop9: partition table partially beyond EOD, truncated [ 2787.350614][T17028] loop9: p1 start 1920169572 is beyond EOD, truncated [ 2787.384020][T17028] loop9: p2 start 1851744889 is beyond EOD, truncated [ 2787.556376][T11718] usb 2-1: new full-speed USB device number 123 using dummy_hcd [ 2787.736851][T12450] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 2787.754488][T11718] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2787.767332][T11718] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2787.789886][T11718] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2787.798953][T11718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2787.976418][T12450] usb 4-1: Using ep0 maxpacket: 16 [ 2787.994571][T12450] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2788.010283][T12450] usb 4-1: config 13 has an invalid interface number: 50 but max is 0 [ 2788.023941][T12450] usb 4-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 2788.046291][T12450] usb 4-1: config 13 has no interface number 0 [ 2788.053203][T12450] usb 4-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 16 [ 2788.069586][T12450] usb 4-1: config 13 interface 50 altsetting 167 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2788.079711][T12450] usb 4-1: config 13 interface 50 altsetting 167 bulk endpoint 0x7 has invalid maxpacket 0 [ 2788.093857][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2788.103564][T12450] usb 4-1: config 13 interface 50 has no altsetting 0 [ 2788.112883][T12450] usb 4-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 2788.127138][T12450] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2788.146614][T12450] usb 4-1: Product: syz [ 2788.150844][T12450] usb 4-1: Manufacturer: syz [ 2788.155453][T12450] usb 4-1: SerialNumber: syz [ 2788.178049][T17036] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2788.333006][T11718] usb 2-1: usb_control_msg returned -32 [ 2788.338631][T11718] usbtmc 2-1:16.0: can't read capabilities [ 2788.390780][T12450] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 2788.406407][T12450] usb 4-1: MIDIStreaming interface descriptor not found [ 2788.518362][T12450] usb 4-1: USB disconnect, device number 75 [ 2788.706091][T17056] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.12880'. [ 2789.126494][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2789.696529][T11718] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 2789.868635][T11718] usb 4-1: Using ep0 maxpacket: 16 [ 2789.891554][T11718] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2789.910878][T11718] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2789.922187][T11718] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2789.942585][T11718] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2789.953676][T11718] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2789.964954][T11718] usb 4-1: config 0 descriptor?? [ 2790.222223][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2790.335832][ T312] usb 2-1: USB disconnect, device number 123 [ 2790.566103][T11718] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.007D/input/input162 [ 2790.704265][T11718] microsoft 0003:045E:07DA.007D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 2790.727090][T17074] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12886'. [ 2790.915537][T11718] IPVS: starting estimator thread 0... [ 2791.016665][T17077] IPVS: using max 36 ests per chain, 86400 per kthread [ 2791.374429][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2791.652076][T17088] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12888'. [ 2791.726369][T32753] usb 4-1: reset high-speed USB device number 76 using dummy_hcd [ 2792.406335][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2793.239336][T11718] usb 4-1: USB disconnect, device number 76 [ 2793.515259][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2793.737823][T20256] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2793.755761][T20256] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2793.776615][T20256] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2793.788387][T20256] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2793.812688][T20256] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2794.052091][ T5632] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2794.064374][ T5632] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2794.072571][ T5632] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2794.081489][ T5632] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2794.167227][ T5632] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2794.450009][T27925] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2794.489199][T17117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12895'. [ 2794.634040][ T5632] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2794.652297][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2794.706847][ T5632] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2794.719737][ T5632] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2794.733308][ T5632] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2794.743272][ T5632] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2795.035300][T27925] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2795.163869][T17133] FAULT_INJECTION: forcing a failure. [ 2795.163869][T17133] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2795.197128][T17133] CPU: 0 UID: 0 PID: 17133 Comm: syz.6.12901 Tainted: G L syzkaller #0 PREEMPT(full) [ 2795.197155][T17133] Tainted: [L]=SOFTLOCKUP [ 2795.197161][T17133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2795.197171][T17133] Call Trace: [ 2795.197179][T17133] [ 2795.197187][T17133] dump_stack_lvl+0xe8/0x150 [ 2795.197214][T17133] should_fail_ex+0x412/0x560 [ 2795.197239][T17133] _copy_from_user+0x2d/0xb0 [ 2795.197260][T17133] __sys_bpf+0x229/0x950 [ 2795.197284][T17133] ? __pfx_vfs_write+0x10/0x10 [ 2795.197309][T17133] ? __pfx___sys_bpf+0x10/0x10 [ 2795.197344][T17133] ? fput+0xa0/0xd0 [ 2795.197362][T17133] ? ksys_write+0x242/0x270 [ 2795.197391][T17133] __ia32_sys_bpf+0x7c/0x90 [ 2795.197413][T17133] __do_fast_syscall_32+0x23e/0x6f0 [ 2795.197432][T17133] ? do_fast_syscall_32+0x33/0x70 [ 2795.197448][T17133] ? lockdep_hardirqs_on+0x7a/0x110 [ 2795.197464][T17133] ? asm_int80_emulation+0x1a/0x20 [ 2795.197480][T17133] ? do_int80_emulation+0x29f/0x550 [ 2795.197497][T17133] ? trace_irq_disable+0x3b/0x140 [ 2795.197521][T17133] do_fast_syscall_32+0x33/0x70 [ 2795.197540][T17133] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2795.197558][T17133] RIP: 0023:0xf7f8601c [ 2795.197574][T17133] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2795.197588][T17133] RSP: 002b:00000000f544650c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 2795.197605][T17133] RAX: ffffffffffffffda RBX: 000000000000001a RCX: 0000000080000240 [ 2795.197617][T17133] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 0000000000000000 [ 2795.197627][T17133] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2795.197637][T17133] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2795.197648][T17133] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2795.197674][T17133] [ 2795.406667][ T321] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 2795.605812][T27925] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2795.645137][ T321] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2795.656898][ T321] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2795.667794][ T321] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2795.677562][ T321] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2795.686808][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2795.714816][T17131] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2795.744450][ T321] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2796.050111][T27925] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2796.101354][T11718] usb 2-1: USB disconnect, device number 124 [ 2796.230542][T17114] bridge0: port 1(bridge_slave_0) entered blocking state [ 2796.242676][T17114] bridge0: port 1(bridge_slave_0) entered disabled state [ 2796.250310][T17114] bridge_slave_0: entered allmulticast mode [ 2796.258605][T17114] bridge_slave_0: entered promiscuous mode [ 2796.278841][T17114] bridge0: port 2(bridge_slave_1) entered blocking state [ 2796.287672][T17114] bridge0: port 2(bridge_slave_1) entered disabled state [ 2796.295154][T17114] bridge_slave_1: entered allmulticast mode [ 2796.303058][T17154] binder: 17150:17154 ioctl c0306201 0 returned -14 [ 2796.311333][T17114] bridge_slave_1: entered promiscuous mode [ 2796.369608][T20256] Bluetooth: hci5: command tx timeout [ 2796.532247][T17114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2796.581804][T17114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2796.640815][T17124] bridge0: port 1(bridge_slave_0) entered blocking state [ 2796.648866][T17124] bridge0: port 1(bridge_slave_0) entered disabled state [ 2796.656165][T17124] bridge_slave_0: entered allmulticast mode [ 2796.665866][T17124] bridge_slave_0: entered promiscuous mode [ 2796.673772][T17124] bridge0: port 2(bridge_slave_1) entered blocking state [ 2796.680981][T17124] bridge0: port 2(bridge_slave_1) entered disabled state [ 2796.688301][T17124] bridge_slave_1: entered allmulticast mode [ 2796.695323][T17124] bridge_slave_1: entered promiscuous mode [ 2796.716402][T17114] team0: Port device team_slave_0 added [ 2796.736955][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2796.798342][T17114] team0: Port device team_slave_1 added [ 2796.888593][T20256] Bluetooth: hci2: command tx timeout [ 2796.962825][T17114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2796.972110][T17114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2797.045319][T17114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2797.104968][T17124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2797.144006][T17124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2797.215249][T17114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2797.236215][T17114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2797.294947][T17114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2797.387313][T17159] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2797.394028][T17159] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 2797.418140][T17159] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2797.424236][T17159] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 2797.518864][T17124] team0: Port device team_slave_0 added [ 2797.541459][T17124] team0: Port device team_slave_1 added [ 2797.587278][T27925] bridge_slave_1: left allmulticast mode [ 2797.593059][T27925] bridge_slave_1: left promiscuous mode [ 2797.598876][T27925] bridge0: port 2(bridge_slave_1) entered disabled state [ 2797.626017][T27925] bridge_slave_0: left allmulticast mode [ 2797.631699][T27925] bridge_slave_0: left promiscuous mode [ 2797.637399][T27925] bridge0: port 1(bridge_slave_0) entered disabled state [ 2797.766840][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2797.869990][T27925] erspan0 (unregistering): left allmulticast mode [ 2798.039713][T27925] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2798.052716][T27925] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2798.064584][T27925] bond0 (unregistering): Released all slaves [ 2798.087735][T17114] hsr_slave_0: entered promiscuous mode [ 2798.094874][T17114] hsr_slave_1: entered promiscuous mode [ 2798.101791][T17114] debugfs: 'hsr0' already exists in 'hsr' [ 2798.108660][T17114] Cannot create hsr debugfs directory [ 2798.174599][T17124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2798.183675][T17124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2798.227202][T17124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2798.244530][T17124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2798.254062][T17124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2798.284014][T17124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2798.364974][T27925] tipc: Left network mode [ 2798.417185][T27925] IPVS: stopping backup sync thread 15620 ... [ 2798.613991][T17124] hsr_slave_0: entered promiscuous mode [ 2798.621961][T17179] netlink: 212328 bytes leftover after parsing attributes in process `syz.1.12912'. [ 2798.623444][T17124] hsr_slave_1: entered promiscuous mode [ 2798.632334][T17179] netlink: Unknown conntrack attr (type=2304, max=9) [ 2798.668096][T17124] debugfs: 'hsr0' already exists in 'hsr' [ 2798.675740][T17124] Cannot create hsr debugfs directory [ 2798.806912][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2799.014632][T17188] loop5: detected capacity change from 0 to 6 [ 2799.022107][T17188] Dev loop5: unable to read RDB block 6 [ 2799.077328][T17188] loop5: unable to read partition table [ 2799.108071][T17188] loop5: partition table beyond EOD, truncated [ 2799.116917][T27925] hsr_slave_0: left promiscuous mode [ 2799.129471][T17188] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2799.158560][T27925] hsr_slave_1: left promiscuous mode [ 2799.206023][T27925] veth1_macvtap: left promiscuous mode [ 2799.224267][T27925] veth0_macvtap: left promiscuous mode [ 2799.238549][T27925] veth1_vlan: left promiscuous mode [ 2799.245120][T27925] veth0_vlan: left promiscuous mode [ 2799.300297][T17195] netlink: 'syz.1.12915': attribute type 1 has an invalid length. [ 2799.628630][T27925] team0 (unregistering): Port device team_slave_1 removed [ 2799.649437][T27925] team0 (unregistering): Port device team_slave_0 removed [ 2799.778919][ T5292] 8021q: adding VLAN 0 to HW filter on device eth5 [ 2799.907485][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2800.073788][T17114] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2800.085103][T17114] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2800.093458][T17114] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2800.104290][T17114] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2800.123466][T17114] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2800.162082][T17114] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2800.179650][T17114] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2800.221302][T17114] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2800.516789][T17220] netlink: 'syz.1.12916': attribute type 1 has an invalid length. [ 2800.553517][T17220] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2800.759125][T17220] macvlan2: entered promiscuous mode [ 2800.766617][T17220] macvlan2: entered allmulticast mode [ 2800.904788][T17220] bond2: (slave ip6gretap1): making interface the new active one [ 2800.966647][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2801.004068][T17220] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 2801.174064][ T5292] 8021q: adding VLAN 0 to HW filter on device eth6 [ 2801.197716][T17124] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2801.281744][T17124] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2801.312046][T17124] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2801.410913][T17124] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2801.454964][T17124] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2801.511318][T17248] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20000 [ 2801.532021][T17124] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2801.621812][T17124] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2801.653423][T17124] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2801.752990][T17114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2801.794064][T17259] sch_tbf: burst 25 is lower than device ip6gre0 mtu (1448) ! [ 2801.999876][T17114] 8021q: adding VLAN 0 to HW filter on device team0 [ 2802.006736][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2802.173060][T16829] bridge0: port 1(bridge_slave_0) entered blocking state [ 2802.180298][T16829] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2802.556232][T27925] bridge0: port 2(bridge_slave_1) entered blocking state [ 2802.563358][T27925] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2802.748014][T17124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2802.780204][T17124] 8021q: adding VLAN 0 to HW filter on device team0 [ 2802.808554][T17114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2802.828710][T15544] bridge0: port 1(bridge_slave_0) entered blocking state [ 2802.835989][T15544] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2802.849015][T17280] IPVS: set_ctl: invalid protocol: 189 172.20.20.17:19998 [ 2802.957622][T15544] bridge0: port 2(bridge_slave_1) entered blocking state [ 2802.964795][T15544] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2803.145658][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2803.189608][T17114] veth0_vlan: entered promiscuous mode [ 2803.263004][T17114] veth1_vlan: entered promiscuous mode [ 2803.297075][T17124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2803.445160][T17114] veth0_macvtap: entered promiscuous mode [ 2803.465828][T17124] veth0_vlan: entered promiscuous mode [ 2803.500591][T17114] veth1_macvtap: entered promiscuous mode [ 2803.536278][T17124] veth1_vlan: entered promiscuous mode [ 2803.616107][T17114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2803.660970][T17114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2803.846946][ T1821] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2803.856383][ T1821] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2803.877975][T17124] veth0_macvtap: entered promiscuous mode [ 2803.898981][ T1821] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2803.918957][T27925] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2803.962955][ T5292] 8021q: adding VLAN 0 to HW filter on device eth7 [ 2803.983629][T17124] veth1_macvtap: entered promiscuous mode [ 2804.132951][T17124] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2804.144101][T17124] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2804.224072][ T9685] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2804.230826][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2804.263478][ T9685] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2804.272607][ T9685] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2804.381594][ T9685] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2804.547914][ T1816] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2804.588072][ T1816] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2804.611977][T17312] netlink: 'syz.1.12929': attribute type 10 has an invalid length. [ 2804.639577][T27925] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2804.653674][T27925] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2804.769652][ T1816] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2804.801864][ T1816] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2804.809219][T14297] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2804.809249][T14297] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2804.970937][T17318] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12930'. [ 2805.050540][T17321] Cannot find del_set index 0 as target [ 2805.326197][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2805.358414][T17335] netlink: 'syz.8.12894': attribute type 10 has an invalid length. [ 2805.382850][T17335] netlink: 40 bytes leftover after parsing attributes in process `syz.8.12894'. [ 2805.406405][T17335] dummy0: entered promiscuous mode [ 2805.414086][T17335] bridge0: port 3(dummy0) entered blocking state [ 2805.432434][T17335] bridge0: port 3(dummy0) entered disabled state [ 2805.494146][T17335] dummy0: entered allmulticast mode [ 2805.535681][T17335] bridge0: port 3(dummy0) entered blocking state [ 2805.542231][T17335] bridge0: port 3(dummy0) entered forwarding state [ 2805.889323][ T9232] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 2806.043958][ T9232] usb 2-1: Using ep0 maxpacket: 16 [ 2806.125843][ T9232] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2806.125877][ T9232] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2806.125913][ T9232] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 2806.125934][ T9232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2806.161467][ T9232] usb 2-1: config 0 descriptor?? [ 2806.204996][T17304] IPVS: starting estimator thread 0... [ 2806.396321][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2806.475409][ T5292] 8021q: adding VLAN 0 to HW filter on device eth8 [ 2806.514178][T17364] IPVS: using max 31 ests per chain, 74400 per kthread [ 2806.687676][ T9232] nzxt-smart2 0003:1E71:2009.007E: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 2807.075622][T17374] netlink: 212408 bytes leftover after parsing attributes in process `syz.8.12940'. [ 2807.250123][T17344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2807.326049][T17344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2807.483144][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2808.486792][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2809.526656][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2809.608075][ T9232] usb 2-1: USB disconnect, device number 125 [ 2810.566779][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2810.686241][T17411] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12952'. [ 2811.127176][ T9232] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 2811.306321][ T9232] usb 8-1: Using ep0 maxpacket: 16 [ 2811.332168][ T9232] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 2811.361763][ T9232] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2811.393651][ T9232] usb 8-1: Product: syz [ 2811.413748][ T9232] usb 8-1: Manufacturer: syz [ 2811.433718][ T9232] usb 8-1: SerialNumber: syz [ 2811.472490][ T9232] r8152-cfgselector 8-1: Unknown version 0x0000 [ 2811.490804][ T9232] r8152-cfgselector 8-1: config 0 descriptor?? [ 2811.606571][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2811.740940][ T9232] r8152-cfgselector 8-1: Needed 1 retries to read version [ 2812.401544][ T9232] r8152-cfgselector 8-1: USB disconnect, device number 2 [ 2812.646724][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2813.293546][T17457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12955'. [ 2813.451289][T17465] netlink: 20 bytes leftover after parsing attributes in process `syz.7.12959'. [ 2813.565050][T17465] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2813.624023][T17465] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12959'. [ 2813.633008][T17465] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12959'. [ 2813.669864][T17465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2813.687123][T17465] bond1: (slave bond0): Enslaving as an active interface with an up link [ 2813.706929][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2813.756025][T17471] netlink: 'syz.7.12959': attribute type 10 has an invalid length. [ 2813.845888][T17471] bridge0: port 2(bridge_slave_1) entered disabled state [ 2813.853447][T17471] bridge0: port 1(bridge_slave_0) entered disabled state [ 2814.726636][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2815.766563][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2815.994868][T17487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2816.068389][T17487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2816.806714][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2817.096749][T32758] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 2817.195582][T17507] syzkaller1: entered promiscuous mode [ 2817.201100][T17507] syzkaller1: entered allmulticast mode [ 2817.240685][T17509] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12972'. [ 2817.710756][T17530] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12975'. [ 2817.775523][T32758] usb 8-1: Using ep0 maxpacket: 8 [ 2817.874155][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2817.960773][T17543] FAULT_INJECTION: forcing a failure. [ 2817.960773][T17543] name failslab, interval 1, probability 0, space 0, times 0 [ 2817.991443][T32758] usb 8-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2818.006630][T32758] usb 8-1: config 1 interface 0 has no altsetting 0 [ 2818.035689][T17543] CPU: 0 UID: 0 PID: 17543 Comm: syz.6.12978 Tainted: G L syzkaller #0 PREEMPT(full) [ 2818.035707][T17543] Tainted: [L]=SOFTLOCKUP [ 2818.035711][T17543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2818.035717][T17543] Call Trace: [ 2818.035722][T17543] [ 2818.035727][T17543] dump_stack_lvl+0xe8/0x150 [ 2818.035744][T17543] should_fail_ex+0x412/0x560 [ 2818.035763][T17543] should_failslab+0xa8/0x100 [ 2818.035780][T17543] ? vm_area_dup+0x2b/0x680 [ 2818.035795][T17543] kmem_cache_alloc_noprof+0x87/0x650 [ 2818.035812][T17543] vm_area_dup+0x2b/0x680 [ 2818.035828][T17543] __split_vma+0x1dc/0xa50 [ 2818.035841][T17543] ? mas_next_slot+0xc3b/0xd10 [ 2818.035856][T17543] ? __pfx___split_vma+0x10/0x10 [ 2818.035872][T17543] ? mas_find+0xb0e/0xd30 [ 2818.035884][T17543] vms_gather_munmap_vmas+0x4fa/0x1380 [ 2818.035903][T17543] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 2818.035914][T17543] ? __lock_acquire+0x6b5/0x2cf0 [ 2818.035933][T17543] do_vmi_align_munmap+0x2b4/0x4b0 [ 2818.035952][T17543] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 2818.035977][T17543] do_vmi_munmap+0x252/0x2d0 [ 2818.035989][T17543] __vm_munmap+0x22c/0x3d0 [ 2818.036002][T17543] ? __pfx___vm_munmap+0x10/0x10 [ 2818.036011][T17543] ? vm_mmap_pgoff+0x3b1/0x4f0 [ 2818.036027][T17543] ? exc_page_fault+0x6a/0xc0 [ 2818.036042][T17543] __ia32_sys_munmap+0x5f/0x70 [ 2818.036055][T17543] __do_fast_syscall_32+0x23e/0x6f0 [ 2818.036066][T17543] ? do_fast_syscall_32+0x33/0x70 [ 2818.036076][T17543] ? lockdep_hardirqs_on+0x7a/0x110 [ 2818.036085][T17543] ? irqentry_exit+0x10f/0x8b0 [ 2818.036094][T17543] ? trace_irq_disable+0x3b/0x140 [ 2818.036109][T17543] do_fast_syscall_32+0x33/0x70 [ 2818.036120][T17543] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2818.036132][T17543] RIP: 0023:0xf7f8601c [ 2818.036142][T17543] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2818.036150][T17543] RSP: 002b:00000000f544524c EFLAGS: 00000206 ORIG_RAX: 000000000000005b [ 2818.036164][T17543] RAX: ffffffffffffffda RBX: 00000000f5226000 RCX: 00000000000da000 [ 2818.036171][T17543] RDX: 00000000f7414ff4 RSI: 0000000000021000 RDI: 0000000000100000 [ 2818.036177][T17543] RBP: 00000000f5300000 R08: 0000000000000000 R09: 0000000000000000 [ 2818.036183][T17543] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2818.036189][T17543] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2818.036203][T17543] [ 2818.654656][T32760] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 2818.677440][T32758] usb 8-1: New USB device found, idVendor=05ac, idProduct=0252, bcdDevice= 0.40 [ 2818.687722][T32758] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2818.736084][T32758] usb 8-1: Product: syz [ 2818.766010][T32758] usb 8-1: Manufacturer: syz [ 2818.775442][T32758] usb 8-1: SerialNumber: syz [ 2818.849269][T32760] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 2818.858353][T32760] usb 2-1: config 220 has an invalid descriptor of length 251, skipping remainder of the config [ 2818.883148][T32760] usb 2-1: config 220 has no interface number 2 [ 2818.890762][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2818.899993][T32760] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 2818.927502][T32760] usb 2-1: config 220 interface 0 has no altsetting 0 [ 2818.934402][T32760] usb 2-1: config 220 interface 76 has no altsetting 0 [ 2818.942903][T32760] usb 2-1: config 220 interface 1 has no altsetting 0 [ 2819.152904][T32758] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/input/input163 [ 2819.164002][T32760] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2819.204617][T32760] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2819.217906][ T4982] bcm5974 8-1:1.0: could not read from device [ 2819.256035][T32760] usb 2-1: Product: syz [ 2819.260302][T32760] usb 2-1: Manufacturer: syz [ 2819.264910][T32760] usb 2-1: SerialNumber: syz [ 2819.273755][T32758] usb 8-1: USB disconnect, device number 3 [ 2819.325489][ T4982] bcm5974 8-1:1.0: could not read from device [ 2819.382848][T15760] udevd[15760]: Error opening device "/dev/input/event4": No such file or directory [ 2819.404640][T15760] udevd[15760]: Unable to EVIOCGABS device "/dev/input/event4" [ 2819.421608][T15760] udevd[15760]: Unable to EVIOCGABS device "/dev/input/event4" [ 2819.453205][T15760] udevd[15760]: Unable to EVIOCGABS device "/dev/input/event4" [ 2819.453295][T15760] udevd[15760]: Unable to EVIOCGABS device "/dev/input/event4" [ 2819.705363][T17534] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12976'. [ 2819.913280][T17565] Cannot find add_set index 3 as target [ 2819.926604][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2820.835464][ T300] dvb-usb: did not find the firmware file 'dvb-usb-dibusb-6.0.0.8.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 2821.006414][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2821.094300][T32760] usb 2-1: selecting invalid altsetting 0 [ 2821.163455][T32760] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 2821.208338][T32760] uvcvideo 2-1:220.0: No valid video chain found. [ 2821.211908][ T300] dvb_usb_dibusb_mc 1-1:6.144: probe with driver dvb_usb_dibusb_mc failed with error -110 [ 2821.330346][T32760] usb 2-1: selecting invalid altsetting 0 [ 2821.336100][T32760] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 2821.405674][ T300] dvb-usb: found a 'Humax/Coex DVB-T USB Stick 2.0 High Speed' in cold state, will try to load a firmware [ 2821.449734][ T300] usb 1-1: Direct firmware load for dvb-usb-dibusb-6.0.0.8.fw failed with error -2 [ 2821.496519][T32760] usb 2-1: USB disconnect, device number 126 [ 2821.505739][ T300] usb 1-1: Falling back to sysfs fallback for: dvb-usb-dibusb-6.0.0.8.fw [ 2822.086645][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2823.126599][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2824.166529][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2824.711407][ T4997] udevd[4997]: worker [15031] /devices/platform/dummy_hcd.0/usb1/1-1 is taking a long time [ 2825.206649][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2826.246473][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2827.286570][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2828.336383][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2829.366631][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2830.406458][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2831.446616][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2832.486483][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2833.531185][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2834.566425][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2835.606571][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2836.088237][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 2836.094775][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 2836.679736][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2837.686298][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2838.726352][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2839.766339][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2840.806291][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2841.846380][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2842.886301][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2843.926285][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2844.966337][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2846.006311][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2847.046361][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2848.086321][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2849.126341][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2850.166365][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2851.206320][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2852.246310][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2853.286348][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2854.326348][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2855.366331][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2856.406317][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2857.446317][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2858.496340][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2859.536347][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2860.566404][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2861.616273][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2862.646399][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2863.696343][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2864.726440][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2865.766455][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2866.817102][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2867.846403][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2868.886321][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2869.926340][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2870.966338][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2872.006301][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2873.046340][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2874.086311][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2875.126686][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2876.166281][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2877.206273][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2878.246302][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2879.286325][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2880.326277][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2881.366291][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2882.174290][ T300] dvb-usb: did not find the firmware file 'dvb-usb-dibusb-6.0.0.8.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 2882.191706][ T300] dvb_usb_dibusb_mc 1-1:6.245: probe with driver dvb_usb_dibusb_mc failed with error -110 [ 2882.209234][ T300] dvb-usb: found a 'Humax/Coex DVB-T USB Stick 2.0 High Speed' in cold state, will try to load a firmware [ 2882.221749][ T300] usb 1-1: Direct firmware load for dvb-usb-dibusb-6.0.0.8.fw failed with error -2 [ 2882.232159][ T300] usb 1-1: Falling back to sysfs fallback for: dvb-usb-dibusb-6.0.0.8.fw [ 2882.406261][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2883.446475][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2884.496288][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2885.526309][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2886.576269][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2887.616300][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2888.681562][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2889.686281][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2890.726390][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2891.766491][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2892.806271][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2893.846355][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2894.886288][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2895.926274][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2896.966331][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2897.529408][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 2897.536178][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 2898.006280][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2899.046304][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2900.086369][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2901.126287][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2902.166276][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2903.206300][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2904.246346][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2905.286272][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2906.326325][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2907.366260][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2908.406277][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2909.446326][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2910.486331][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2911.526282][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2912.566374][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2913.606295][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2914.646256][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2915.686334][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2916.726424][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2917.766286][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2918.806298][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2919.846285][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2920.886343][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2921.926278][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2922.966266][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2924.016283][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2925.046307][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2926.086432][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2927.126453][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2928.176322][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2929.206352][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2930.246472][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2931.296256][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2932.336254][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2933.372769][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2934.406309][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2935.446263][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2936.486310][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2937.536278][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2938.566255][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2939.297884][ T4997] udevd[4997]: worker [15031] /devices/platform/dummy_hcd.0/usb1/1-1 timeout; kill it [ 2939.307678][ T4997] udevd[4997]: seq 79891 '/devices/platform/dummy_hcd.0/usb1/1-1' killed [ 2939.338422][ T4997] udevd[4997]: worker [15031] terminated by signal 9 (Killed) [ 2939.345941][ T4997] udevd[4997]: worker [15031] failed while handling '/devices/platform/dummy_hcd.0/usb1/1-1' [ 2939.606381][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2939.766683][ T30] INFO: task syz.5.12838:16899 blocked for more than 143 seconds. [ 2939.780872][ T30] Tainted: G L syzkaller #0 [ 2939.787583][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2939.797886][ T30] task:syz.5.12838 state:D stack:28120 pid:16899 tgid:16898 ppid:11692 task_flags:0x400040 flags:0x08080002 [ 2939.811626][ T30] Call Trace: [ 2939.814991][ T30] [ 2939.820126][ T30] __schedule+0x1821/0x5740 [ 2939.824736][ T30] ? __pfx___schedule+0x10/0x10 [ 2939.830235][ T30] ? schedule+0x90/0x360 [ 2939.835297][ T30] schedule+0x164/0x360 [ 2939.840742][ T30] schedule_preempt_disabled+0x13/0x30 [ 2939.858293][ T30] __mutex_lock+0x7f7/0x1550 [ 2939.865207][ T30] ? __mutex_lock+0x608/0x1550 [ 2939.870035][ T30] ? usbdev_open+0x182/0x770 [ 2939.874753][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 2939.886171][ T30] ? bus_find_device+0x27d/0x2d0 [ 2939.896514][ T30] ? __pfx_bus_find_device+0x10/0x10 [ 2939.904648][ T30] ? usbdev_open+0xa7/0x770 [ 2939.910204][ T30] ? __kmalloc_cache_noprof+0x15b/0x660 [ 2939.915809][ T30] usbdev_open+0x182/0x770 [ 2939.921699][ T30] ? kobject_get_unless_zero+0x167/0x1f0 [ 2939.927574][ T30] ? __pfx_usbdev_open+0x10/0x10 [ 2939.932531][ T30] ? do_raw_spin_unlock+0xf5/0x210 [ 2939.939269][ T30] chrdev_open+0x4cd/0x5e0 [ 2939.943760][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 2939.950476][ T30] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 2939.970860][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 2939.975851][ T30] do_dentry_open+0x822/0x13a0 [ 2939.980705][ T30] vfs_open+0x3b/0x340 [ 2939.984787][ T30] ? path_openat+0x2df0/0x3860 [ 2939.990045][ T30] path_openat+0x2e08/0x3860 [ 2939.994700][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 2940.000158][ T30] ? stack_depot_save_flags+0x33/0x810 [ 2940.005666][ T30] ? __pfx_path_openat+0x10/0x10 [ 2940.011300][ T30] ? __ia32_compat_sys_openat+0x131/0x160 [ 2940.018037][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 2940.023047][ T30] do_file_open+0x23e/0x4a0 [ 2940.027982][ T30] ? __pfx_do_file_open+0x10/0x10 [ 2940.033072][ T30] ? _raw_spin_unlock+0x28/0x50 [ 2940.038870][ T30] ? alloc_fd+0x64b/0x6c0 [ 2940.043257][ T30] do_sys_openat2+0x113/0x200 [ 2940.048585][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 2940.053831][ T30] ? rcu_is_watching+0x15/0xb0 [ 2940.058795][ T30] __ia32_compat_sys_openat+0x131/0x160 [ 2940.064361][ T30] do_int80_emulation+0x19a/0x550 [ 2940.069775][ T30] ? trace_irq_disable+0x3b/0x140 [ 2940.074858][ T30] ? asm_int80_emulation+0x1a/0x20 [ 2940.080042][ T30] ? clear_bhb_loop+0x40/0x90 [ 2940.084724][ T30] ? clear_bhb_loop+0x40/0x90 [ 2940.089823][ T30] asm_int80_emulation+0x1a/0x20 [ 2940.094806][ T30] RIP: 0023:0xf71b61ab [ 2940.098986][ T30] RSP: 002b:00000000f546d03c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 2940.107796][ T30] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f546d100 [ 2940.115795][ T30] RDX: 000000000000a401 RSI: 0000000000000000 RDI: 0000000000000000 [ 2940.123859][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2940.132274][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2940.141085][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2940.149446][ T30] [ 2940.152549][ T30] [ 2940.152549][ T30] Showing all locks held in the system: [ 2940.160606][ T30] 1 lock held by khungtaskd/30: [ 2940.165480][ T30] #0: ffffffff8e95cc20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2940.176892][ T30] 2 locks held by kworker/0:2/994: [ 2940.182169][ T30] #0: ffff88813fe43140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 2940.193379][ T30] #1: ffffc90005397c40 ((work_completion)(&m->mpeg_thread)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 2940.205910][ T30] 2 locks held by getty/5391: [ 2940.210686][ T30] #0: ffff888031dfa0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2940.220614][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 2940.231189][ T30] 5 locks held by kworker/u8:11/27925: [ 2940.236739][ T30] 6 locks held by kworker/0:8/300: [ 2940.242913][ T30] #0: ffff88801e6c9d40 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 2940.255605][ T30] #1: ffffc9000d487c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 2940.268635][ T30] #2: ffff88802aadb1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 2940.293452][ T30] #3: ffff88807adb31d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 2940.302815][ T30] #4: ffff88809a5a01a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 2940.312535][ T30] #5: ffffffff8e7f9968 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xfc/0x2c0 [ 2940.323027][ T30] 1 lock held by syz.5.12838/16899: [ 2940.329085][ T30] #0: ffff88802aadb1d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x182/0x770 [ 2940.338362][ T30] [ 2940.340708][ T30] ============================================= [ 2940.340708][ T30] [ 2940.350384][ T30] NMI backtrace for cpu 0 [ 2940.350402][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2940.350424][ T30] Tainted: [L]=SOFTLOCKUP [ 2940.350430][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2940.350440][ T30] Call Trace: [ 2940.350448][ T30] [ 2940.350456][ T30] dump_stack_lvl+0xe8/0x150 [ 2940.350479][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 2940.350501][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2940.350521][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2940.350545][ T30] sys_info+0x135/0x170 [ 2940.350563][ T30] watchdog+0xfd3/0x1030 [ 2940.350591][ T30] ? watchdog+0x1c9/0x1030 [ 2940.350616][ T30] kthread+0x389/0x470 [ 2940.350637][ T30] ? __pfx_watchdog+0x10/0x10 [ 2940.350656][ T30] ? __pfx_kthread+0x10/0x10 [ 2940.350676][ T30] ret_from_fork+0x514/0xb70 [ 2940.350697][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 2940.350713][ T30] ? __switch_to+0xc79/0x1410 [ 2940.350738][ T30] ? __pfx_kthread+0x10/0x10 [ 2940.350764][ T30] ret_from_fork_asm+0x1a/0x30 [ 2940.350797][ T30] [ 2940.350813][ T30] Sending NMI from CPU 0 to CPUs 1: [ 2940.469257][ C1] NMI backtrace for cpu 1 [ 2940.469279][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 2940.469301][ C1] Tainted: [L]=SOFTLOCKUP [ 2940.469307][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2940.469317][ C1] RIP: 0010:check_preemption_disabled+0x1/0xe0 [ 2940.469341][ C1] Code: 80 b9 28 8c 48 c7 c6 c0 b9 28 8c eb 1c 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 <41> 57 41 56 53 65 8b 05 27 6e 90 07 65 8b 0d 1c 6e 90 07 f7 c1 ff [ 2940.469361][ C1] RSP: 0018:ffffc90000197e08 EFLAGS: 00000293 [ 2940.469376][ C1] RAX: ffffffff81b6c6ef RBX: ffff88801dad8000 RCX: ffff88801dad8000 [ 2940.469389][ C1] RDX: 0000000000000000 RSI: ffffffff8c28b9c0 RDI: ffffffff8c28b980 [ 2940.469400][ C1] RBP: ffffc90000197f10 R08: ffffffff903036f7 R09: 1ffffffff20606de [ 2940.469412][ C1] R10: dffffc0000000000 R11: fffffbfff20606df R12: 0000000000000001 [ 2940.469423][ C1] R13: 1ffff11003b5b000 R14: 0000000000000001 R15: 1ffff11003b5b000 [ 2940.469435][ C1] FS: 0000000000000000(0000) GS:ffff8881253a0000(0000) knlGS:0000000000000000 [ 2940.469448][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2940.469459][ C1] CR2: 000055ccfb321168 CR3: 0000000030c16000 CR4: 00000000003526f0 [ 2940.469473][ C1] Call Trace: [ 2940.469480][ C1] [ 2940.469488][ C1] tick_nohz_idle_got_tick+0x14/0x100 [ 2940.469508][ C1] do_idle+0x14a/0x5f0 [ 2940.469529][ C1] ? __pfx_do_idle+0x10/0x10 [ 2940.469551][ C1] cpu_startup_entry+0x43/0x60 [ 2940.469569][ C1] start_secondary+0x101/0x110 [ 2940.469585][ C1] common_startup_64+0x13e/0x147 [ 2940.469614][ C1] [ 2940.637909][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 2940.644806][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2940.655584][ T30] Tainted: [L]=SOFTLOCKUP [ 2940.659914][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2940.669978][ T30] Call Trace: [ 2940.673264][ T30] [ 2940.676194][ T30] vpanic+0x56c/0xa60 [ 2940.680186][ T30] ? __pfx___schedule+0x10/0x10 [ 2940.685061][ T30] ? __pfx_vpanic+0x10/0x10 [ 2940.689580][ T30] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 2940.695747][ T30] panic+0xc5/0xd0 [ 2940.699475][ T30] ? __pfx_panic+0x10/0x10 [ 2940.703902][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 2940.709302][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 2940.715474][ T30] watchdog+0x102c/0x1030 [ 2940.719824][ T30] ? watchdog+0x1c9/0x1030 [ 2940.724252][ T30] kthread+0x389/0x470 [ 2940.728328][ T30] ? __pfx_watchdog+0x10/0x10 [ 2940.733004][ T30] ? __pfx_kthread+0x10/0x10 [ 2940.737599][ T30] ret_from_fork+0x514/0xb70 [ 2940.742195][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 2940.747303][ T30] ? __switch_to+0xc79/0x1410 [ 2940.751990][ T30] ? __pfx_kthread+0x10/0x10 [ 2940.756582][ T30] ret_from_fork_asm+0x1a/0x30 [ 2940.761357][ T30] [ 2940.764644][ T30] Kernel Offset: disabled [ 2940.768956][ T30] Rebooting in 86400 seconds..