last executing test programs: 15m12.133549707s ago: executing program 0 (id=1423): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000080)='%\x00', 0x3) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7fffffff}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = fanotify_init(0x200, 0x0) r4 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) r5 = dup(r4) fanotify_mark(r3, 0x1, 0x48000047, r5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYBLOB="00008000000000001800348005"], 0x38}, 0x1, 0x300}, 0x0) socket(0x10, 0x3, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000180)='system.posix_acl_default\x00', 0x0, 0x0, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x14cf, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600100004"], 0x50) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000000b00)={r7, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x1, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06973dd89d130e04d528539f3d3289737f0374c72a964a72447a75df8a69ea917deb7ba193b7e77f2fd29f35239d2", "24431a1e77a68e174f00000000000010e20000000000000000001300", [0xfffffffffffffffe, 0x7]}}) r9 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r9, &(0x7f0000000280)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'geneve0\x00', 0x3}, 0x18) 15m11.4612155s ago: executing program 0 (id=1425): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000680)={"1c7d6aaa", 0x7b, 0x5, 0x2, 0x3, 0x8, "a9fd21f2d6f85c3221c4427506aab2", "cf15f63e", "459ef732", "2089b5ac", ["574678baa489d37daa923a51", "040d88dd24932cb3a7f90f55", "3ac6a619f57d65579334169e", "9de2fa29af1b180655a86bcc"]}) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'geneve0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0x9}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x74, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x3, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_EMATCHES={0x40, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x1, 0x7, 0x4}, {{0x0, 0x1, 0x1, 0x1}, {0x2, 0x0, 0x1}}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x1fde, 0x3, 0x5}, {0x6, 0x2, 0x2}}}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x24000045}, 0x2008c014) r4 = gettid() r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETLINK(r5, 0x400454cd, 0x118) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1c00000e01000b00000014"], 0x36) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000140)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000340), 0xffffffffffffffff) r9 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x17, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000500000000000000e000000018110000cd104c0e5e7169befa", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000001866000003000000000000007cd80000850000001f0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000200000085000000060000009500000000000000"], &(0x7f0000000580)='syzkaller\x00', 0xffffff80, 0x2, &(0x7f0000000600)=""/2, 0x41000, 0xc, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000700)={0x5, 0x8, 0x0, 0x2000}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000007c0), &(0x7f0000000800)=[{0x0, 0x1, 0xe, 0x7}, {0x1, 0x3, 0xd, 0x8}, {0x5, 0x3, 0x1, 0xb}, {0x3, 0x3, 0x5, 0x4}, {0x0, 0x4, 0xb, 0x2}], 0x10, 0xce1}, 0x94) sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x20, r8, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000810}, 0x40800) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x60, r8, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'pimreg\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macvtap0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bond\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x200088d0}, 0x801) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) splice(r12, 0x0, r11, 0x0, 0xffff, 0x0) ioctl$sock_SIOCINQ(r10, 0x541b, &(0x7f0000000100)) 15m10.216901883s ago: executing program 0 (id=1431): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'wg2\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETMIFCNT_IN6(r2, 0x89e0, &(0x7f00000003c0)={0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x6, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) syz_open_procfs(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000000)={0x210a}, 0x0) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@o_path={&(0x7f0000000340)='./file0\x00', 0x0, 0x10, r3}, 0x18) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)={@map=r6, 0xffffffffffffffff, 0x28, 0x0, 0xffffffffffffffff, @void, @value=r7}, 0x20) 15m10.052115241s ago: executing program 0 (id=1433): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0/../file0/../file0/file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRES16=r0, @ANYRES32=0x0, @ANYRES32=r0], 0x6c}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) 15m9.859982138s ago: executing program 0 (id=1434): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x7, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x2c, 0x0, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x1000000, 0x0, 0x80025}, 0x18) ioctl$TIOCGSOFTCAR(r1, 0x5434, 0x0) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x8801, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000280), 0x160100, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000580)={{{@in6=@local, @in6=@remote}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000680)=0xe8) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x88000, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'ipvlan1\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffc0000, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x24040050) move_mount(0xffffffffffffffff, &(0x7f0000000200)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x202) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r9 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f0000000540)={0xffffeffe, 0x1, 0x2}) ioctl$vim2m_VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f0000000000)={0x1f, 0x1, 0x4}) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r10, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$sock_int(r10, 0x1, 0x22, &(0x7f0000000000)=0x4, 0x4) 15m9.467564545s ago: executing program 0 (id=1436): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000500)={0x3, 0x0, [{0x3000, 0xfd, &(0x7f0000000100)=""/253}, {0xffc, 0x82, &(0x7f0000000340)=""/130}, {0xa000, 0xe5, &(0x7f0000000400)=""/229}]}) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) (async) write$tun(r0, &(0x7f0000000080)={@val={0x8, 0x22f0}, @val={0x6, 0x0, 0x6, 0x8, 0x14}, @ipv4=@generic={{0x11, 0x4, 0x2, 0x2, 0x49, 0x66, 0x0, 0xb, 0x2f, 0x0, @rand_addr=0x64010101, @broadcast, {[@rr={0x7, 0x7, 0xa5, [@multicast2]}, @timestamp={0x44, 0x28, 0x20, 0x0, 0x9, [0x800, 0x9, 0x5, 0x2, 0x7fffffff, 0x8000, 0x7f, 0x0, 0x5]}]}}, "3297e3ba0f"}}, 0x57) 15m9.138765323s ago: executing program 32 (id=1436): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000500)={0x3, 0x0, [{0x3000, 0xfd, &(0x7f0000000100)=""/253}, {0xffc, 0x82, &(0x7f0000000340)=""/130}, {0xa000, 0xe5, &(0x7f0000000400)=""/229}]}) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) (async) write$tun(r0, &(0x7f0000000080)={@val={0x8, 0x22f0}, @val={0x6, 0x0, 0x6, 0x8, 0x14}, @ipv4=@generic={{0x11, 0x4, 0x2, 0x2, 0x49, 0x66, 0x0, 0xb, 0x2f, 0x0, @rand_addr=0x64010101, @broadcast, {[@rr={0x7, 0x7, 0xa5, [@multicast2]}, @timestamp={0x44, 0x28, 0x20, 0x0, 0x9, [0x800, 0x9, 0x5, 0x2, 0x7fffffff, 0x8000, 0x7f, 0x0, 0x5]}]}}, "3297e3ba0f"}}, 0x57) 11m57.240593629s ago: executing program 4 (id=2275): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x2200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000380)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, 0x0, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x42, &(0x7f0000000240)=0x468, 0x4) getsockopt$inet6_buf(r4, 0x29, 0x6, &(0x7f0000000140)=""/41, &(0x7f0000000080)=0x29) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4048aecb, &(0x7f0000000300)) ioctl$KVM_RUN(r5, 0xae80, 0x0) 11m56.720181699s ago: executing program 4 (id=2277): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, 0x0) mprotect(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x2000005) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xfffffffe, @vifc_lcl_ifindex, @empty}, 0x10) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@broadcast, @loopback}, 0x10) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080046080020006800008002907800000000e10003000703b2000800907800060001"], 0x0) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) prctl$PR_SET_VMA(0x4f, 0x0, &(0x7f0000122000/0x1000)=nil, 0x1000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r2, &(0x7f0000001f40)=[{{&(0x7f00000002c0)={0xa, 0x4e20, 0x539c14f, @loopback, 0x1}, 0x1c, &(0x7f0000000740)}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000780)="d6ba3e55781ea524e597d8318cdb11234ba55bf50b94bcbf055410f82d22ccd6a1cde07d53cddf21e8c79b284457901d742d34189fc0161f98343b501debc827d4e53bb1301e96c4d15f017777efe50f5a336414854a214600d715a106570c6756c91a2a92bf85e385c6e588416ff8a4b200d24b2e635b8ac5a658ef69d6ad56a2dddb85b297db80c72920d7b2323094", 0x90}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000880)="28e45309c0506dae233c7e909efe0765e85fa297ab50c39f8c685b19f6284cadfbdc3623305d06649ae125adbed7444d10398913dc7153c4f5a5dcaf3dca3e5f595fee4c", 0x44}], 0x1, &(0x7f00000021c0)=ANY=[@ANYBLOB="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"], 0x158}}, {{&(0x7f00000003c0)={0xa, 0x4e22, 0x7, @local, 0x6a}, 0x1c, &(0x7f0000001ec0)=[{&(0x7f0000000a00)="f3c572c07df945db5da2f1dac3677006b784d6a14e5f3c584aaa6fbbbea66423eef8ada9bfa6800922e2b52e059017cd684af374a59a09d3af865a3bf9ef6bd9f483fed869184e25ec51f32dad539390e4ec22eb25c91752b3d0864e33e59ab6ec851063a7858c3381c401508a8368015b574bdf718239b1caa696b970902ff49afd885f416abc3349f11470cceb5c6ea32e39d6aa6714e45dbef2ac3028ef087985634fb125b426b22e457bac8848fb08b154f0ce23de6e1c7653176c90e2d1d589a8751c385793e454cb1c354e5910053f2d144974f6fcbedc8e3792ea4c56", 0xe0}, {&(0x7f0000000b00)="7f5d5d51a2351cf8751fa0599d92c29df9192ea015c9c17fb4f4c9bebccb1c9cb42163c66605b667cfb25832c00c29dad81a23e4b6a51991c0f7edd734968d3f15f7c67ee27c2f4248ed4a8175", 0x4d}, {&(0x7f0000000b80)="089eca3b3cc92837c62633b2e3a30a17d4f1f967e9f5984ef5643d47fbf669b133f009d8654585862e7eca3e5bb8b8d25e9c56e8ae17842f87c6aad47fc647b875782cd0ad79829c16f291db7469b12066090342bf94506d7b42b20028984cfd5bab70cd18bd0f986d6035c109c5450c145b5cfff06425e81284e35a1f9c0c5a9cc22850f84f97824f3bfcf6f61f4530e58ecd2a43577c18eac3bd5481", 0x9d}, {&(0x7f0000000c40)="c16b4485048fc08aee4d9255beabe764dad220b8430cf865a113033d114be82bfdbc279cb1fc940a44d17ad1b5ac269aab315d93ed850d1ac7d93b916362e8be32a5f6bf8a9deebf20ee68dc698f56fb4aec3ba38b151a0e46cf741b6fea52c13192a26a33b901fa58f0a79b1b4f8aeb842fc240896a9636feee8bd8fdfceed3930607e82ef2c19af485101d3ac1692a2f2c36e53607365f4996eed1f6e08f5a20bed9ae32598640ed2d2acec37773f0781cf836f2902fb1a2a6095e43bf5d25c60013d6f145ee8c666aad8bf5ab97256774f995ba69b13c45c0f4c6a5f6e83032de73afb2", 0xe5}, {&(0x7f0000000d40)="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", 0x1000}, {&(0x7f0000001d40)="0a51a35a393f6cde8921baaf1d2f5694daa3b71d8c2e33483dfa9f8776a6424064958087af228786185450ffa994c35c3a03254e9653351b39bf9b10035ddceb5ee132a676782136d3a3193421e847cc3c1b4df4633ca7cdb4395c857bd8e5d26effb2603399efbdf235eac319b5984d4641948b1a404003bee00091b21298dedb8cec99c7f2c1", 0x87}, {&(0x7f0000001e00)="8d5b81321b89fa16530bfc136e4d00a708a95406351a05c61c862e96acbf218a3228ad6709ddef26427b358a4ccc7d134511f0bce2f7d23cf019a6054ff55cd1cbff040807c3358b69a93b9963d27986e220b12601f64e6550cd8ff8dc86f320f735285bbc23e735478cafaaa31aa5c6edc7ed6b67380742f3f4a1d3a5913d1ea794a28f49b16dd9a6a74bc860b933", 0x8f}], 0x7}}], 0x4, 0x200080d1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) r5 = socket$inet_sctp(0x2, 0x5, 0x84) close(r5) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="200000000000000084000000020000000a000416280000000b000002bfde96c0430211c4bc7c1b8dff692412e86a37a572311bf352d493f18bd7721b5ca2344d49cfe9887c3b310a3875b41bacb111747ea7fd1df0706d424963389db59492869c89dc6e290393d910", @ANYRES32=r7], 0x20, 0x2400e044}, 0x20001080) syz_ublk_setup_io_uring(0xacd, &(0x7f0000000340)={0x0, 0xdb33, 0x4, 0x3, 0x194}, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) syz_io_uring_submit(0x0, 0x0, r8, &(0x7f0000000500)=@IORING_OP_URING_CMD128=@generic_cmd_sqes={0x2e, 0x14, 0x0, 0x0, {0x2}, {0x5ec, 0x2}, 0x0, 0x2, 0x0, {0x7ff, 0x0, 0xc3, 0x8d400000000000}}) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000140)={r7, 0x4}, &(0x7f0000000180)=0x8) socket$inet6_sctp(0xa, 0x5, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) 11m55.413921673s ago: executing program 4 (id=2283): r0 = syz_open_dev$vbi(0x0, 0x3, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000440)={0xc, [0x36, 0x6aa6, 0xfb, 0x1, 0x0, 0x3, 0x4, 0x81, 0x8, 0xa33, 0x1, 0x4, 0x6, 0x6, 0xe2, 0xf, 0x3, 0x5, 0x11, 0x40, 0xf, 0x7ff, 0x3ff, 0xac9, 0x5, 0x7, 0x1, 0xc048, 0x3, 0x4, 0x4d8d, 0x9, 0x3, 0xfffa, 0x7, 0x8, 0x58, 0xa3, 0x5, 0x7fff, 0x7, 0xa2c1, 0x7, 0xfff7, 0x8, 0x6, 0xa8a, 0x1], 0x6}) 11m55.045037313s ago: executing program 4 (id=2285): mkdir(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xed2) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080), 0x8400, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000100)={0x0, 0xc}, 0x2) mkdir(&(0x7f0000000300)='./file0\x00', 0x2) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r2, &(0x7f0000004200)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) pivot_root(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='.\x00') r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80082, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae03, 0x94) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f0000000640)=ANY=[], 0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10022, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) umount2(0x0, 0x3) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x177) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) set_robust_list(0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x526, 0x8000008, 0xffffffffffffffff, 0x0) 11m54.714328804s ago: executing program 4 (id=2288): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x2200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x312000, 0x800, 0x0, 0x2}, 0x20) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r3, 0x29, 0x6, &(0x7f0000000140)=""/41, &(0x7f0000000080)=0x29) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4048aecb, &(0x7f0000000300)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 11m51.489252598s ago: executing program 4 (id=2303): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1000, 0x1, 0x400, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xc2, 0xe, &(0x7f0000000200)=@raw=[@generic={0x62, 0xa, 0x0, 0xfffc}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffffc}, @call={0x85, 0x0, 0x0, 0x1}, @generic={0x15, 0x0, 0x0, 0x6}, @generic={0x7, 0x0, 0x0, 0x0, 0xfcc}, @generic={0xbf, 0x1}, @generic={0xb7, 0x2, 0x0, 0x0, 0x4}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4}, @generic={0xb7}, @exit], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 11m51.108440921s ago: executing program 33 (id=2303): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1000, 0x1, 0x400, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xc2, 0xe, &(0x7f0000000200)=@raw=[@generic={0x62, 0xa, 0x0, 0xfffc}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffffc}, @call={0x85, 0x0, 0x0, 0x1}, @generic={0x15, 0x0, 0x0, 0x6}, @generic={0x7, 0x0, 0x0, 0x0, 0xfcc}, @generic={0xbf, 0x1}, @generic={0xb7, 0x2, 0x0, 0x0, 0x4}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4}, @generic={0xb7}, @exit], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8m13.579737084s ago: executing program 6 (id=3211): socket$nl_rdma(0x10, 0x3, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000003800), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000003a00)={0x0, 0x0, &(0x7f00000039c0)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x2000c040}, 0x20000000) write(0xffffffffffffffff, &(0x7f0000000200)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYRESHEX=0x0], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000300)=0x200, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) unshare(0x20020600) 8m13.115718763s ago: executing program 6 (id=3213): socket$tipc(0x1e, 0x5, 0x0) (async) r0 = gettid() tkill(r0, 0xb) (async) prlimit64(r0, 0x0, &(0x7f0000000080)={0x1ff, 0x1ff}, 0x0) (async) timer_create(0x6, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=r0}, &(0x7f0000000100)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r1, 0xd25f8e34d7c46251, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0) (async) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00') (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) sendto$inet(r2, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) (async) r3 = fcntl$dupfd(r2, 0x406, r2) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x7002}) (async) pread64(r4, 0x0, 0x0, 0xfffd) (async) sendmmsg$inet(r3, &(0x7f0000006ac0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)="907f293dd6", 0x5}], 0x1, &(0x7f0000000340)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @empty}}}], 0x38}}], 0x1, 0x20008004) 8m12.936165639s ago: executing program 6 (id=3214): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002000)=ANY=[@ANYBLOB="28000000130a01030000000000000000020000000900010073797a30000000000800034000000007"], 0x28}}, 0x0) 8m12.653160477s ago: executing program 6 (id=3217): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x3) write$binfmt_misc(r1, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 8m12.455427643s ago: executing program 6 (id=3219): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000240)={0xffffffffffffffff, 0x7fc, 0x7ffffffe}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="99050000000074640001000000210002000166fdcbe5c06417e436b7", 0x1c}], 0x1}}], 0x1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, 0x0}], 0x1, 0x7d, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) 8m11.959683276s ago: executing program 6 (id=3222): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_smc(0x2b, 0x1, 0x0) accept(r0, &(0x7f0000000240)=@sco={0x1f, @fixed}, 0x0) connect$inet(r1, &(0x7f0000000300)={0x2, 0x4e20, @loopback}, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x3, 0x0, 0x40) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) r6 = dup(r5) read(r6, &(0x7f0000000040), 0x0) read$FUSE(r6, 0x0, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r4, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x1) fsopen(0x0, 0x1) 8m11.647438375s ago: executing program 34 (id=3222): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_smc(0x2b, 0x1, 0x0) accept(r0, &(0x7f0000000240)=@sco={0x1f, @fixed}, 0x0) connect$inet(r1, &(0x7f0000000300)={0x2, 0x4e20, @loopback}, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x3, 0x0, 0x40) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) r6 = dup(r5) read(r6, &(0x7f0000000040), 0x0) read$FUSE(r6, 0x0, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r4, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x1) fsopen(0x0, 0x1) 18.798677627s ago: executing program 1 (id=5388): r0 = socket$inet6(0xa, 0x5, 0x8) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000080)="2e26f3aa0f20e035004000000f22e066baf80cb8b88b318bef66bafc0ced6436660fc603030f01c50f20e035200000000f22e0c4e1e55fda0fc7190f320f08", 0x3f}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="030000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r5, 0x4020aed2, &(0x7f00000001c0)={0x7000, 0x1f000}) r8 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x0, 0x0, @private0}}}, 0x88) getsockopt$inet6_buf(r8, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000002280)=0x90) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 18.294773309s ago: executing program 1 (id=5391): r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r0) socket$nl_generic(0x10, 0x3, 0x10) syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000bff000/0x400000)=nil) (fail_nth: 10) 18.001196895s ago: executing program 1 (id=5392): io_uring_setup(0x8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6(0x10, 0x3, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup(r2) socket$inet6(0xa, 0x800000000000002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$tipc(0x1e, 0x5, 0x0) epoll_create1(0x0) socket$kcm(0x21, 0x2, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x309102) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r4, @ANYRESDEC=r3], 0x20) 17.922578258s ago: executing program 1 (id=5394): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mmap$IORING_OFF_SQ_RING(0xa000000, 0x800000, 0x9, 0x4c032, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x202a02, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0c01031000"], 0xf) r2 = mq_open(&(0x7f00000013c0)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5\x00\x02\x00\x00\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x00\x00\x00\x00\x00\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00\xac8t\xc5\xd7Q?\xb4\xeex@\xe4\xcc\xfe\x98\xf63\xde\xcd\x1841\x93\xe5\xb7D\xd49\"\f<\x8d\xa5m\x883\xcf\xc7\xe5Y\xb6H\xa4\xc4_Q|\v\x06:\xdap48T\xa6\xcb:+\x7f\x9771fK=\xc2)\xa60\x1d>\xd2\xe8\xc0\x03\xa7e\xbeo\x8d\xe3\x854\x11\xc5d\xcb\x82', 0x42, 0x48, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x5, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(0x3) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r5, 0x6b, 0x2, &(0x7f0000000040), &(0x7f0000000280)=0xffffffffffffff5f) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r6 = socket$inet(0x2, 0x5, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x2b8, 0x0, 0xb, 0xd0e0011, 0x148, 0xc6, 0x220, 0x1d8, 0x190, 0x220, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xe0, 0x148, 0x2000000, {}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x0, 0x8, 0x7, 0x3, {0x42}}}, @common=@unspec=@owner={{0x38}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x5}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0x6, 0xb67f, 0x0, 'snmp_trap\x00', 'syz0\x00', {0x1e}}}}, {{@ip={@remote, @private=0xa010100, 0x0, 0x0, 'xfrm0\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x20, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x1c) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r7, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r8, 0x3ba0, &(0x7f0000000140)={0xffffffffffffffbe}) close_range(r1, r4, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x5, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) 11.619648847s ago: executing program 2 (id=5411): syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b000100000000090408000103000000090557eb"], 0x0) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.kill\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800080000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x10]}}) r2 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/make-it-fail\x00', 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) 10.126254211s ago: executing program 2 (id=5417): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0x50d8}}, 0x30) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x121c02, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xcf0b, 0x0, 0x3, 0x11}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x4, 0x8, 0x0, 0x0, 0x4, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x101, 0x11, 0x5, 0x0, 0x0) r5 = syz_io_uring_setup(0xf03, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000340)=0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r9, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x0, 0x6, r10, 0x1}, 0xc) setsockopt$MRT6_ADD_MIF(r9, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x1, 0x43, r10, 0x2}, 0xc) r11 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r11, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) write$FUSE_LK(r11, &(0x7f0000003100)={0x28, 0x0, 0x0, {{0x4, 0x165c, 0x1}}}, 0x28) setsockopt$MRT6_FLUSH(r9, 0x29, 0xd4, &(0x7f0000000740)=0x8, 0x4) r12 = socket$unix(0x1, 0x1, 0x0) connect$unix(r12, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4110}}) socket$can_bcm(0x1d, 0x2, 0x2) io_uring_enter(r5, 0x12b7, 0xfffffffd, 0x9, 0x0, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x5400, 0x3f00) r13 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') ioctl$KDSETKEYCODE(r13, 0x4b4d, &(0x7f0000000000)={0x400, 0x6}) pread64(r13, &(0x7f0000000040)=""/33, 0x21, 0x73) lseek(r13, 0x4, 0x0) 6.63600444s ago: executing program 2 (id=5428): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x109000, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000240)={0x1f, 0x2003, 0x0, 0x7, 0x1000000002, 0x0, 0x0, 0x6}, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (fail_nth: 19) 6.584662962s ago: executing program 7 (id=5429): socket$vsock_stream(0x28, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r1 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x18, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000580)="d800000019008111e0020f060d8107040a60090000020000000455a1bc00090008000699e3ffffff140005000800000006000567b8b7b94002000009080016060000000000000074d67fffff6b26462f25a4d1c2e446b72af3e29400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930df", 0xa2}, {&(0x7f0000000300)="416d51e13bcf0ab139", 0x9}, {&(0x7f0000001680)="6465a1f70f9ee3e69cd52979ee0d6d248609bbb39a3742440ff7dc52bdb800dd48c5591cd25e418d4c2b5d0803", 0x2d}], 0x3}, 0x14) r8 = dup(r6) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="49a94d5576cb9364490c37dbe7b7efe613e75f578c928c4d9205c0aa2a37fc8e1ab7b90f58f5fdc21e7e3a5d17a820ea583a270340de256420538d2b9b098162f3be1e45218b", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$KVM_GET_DEBUGREGS(r0, 0x8080aea1, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r10, 0xc0045006, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe4000/0x18000)=nil, 0x0, 0x0, 0xd, 0x0, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f0000000240)={[0x10583a, 0x5, 0xa, 0x4000000000, 0x6, 0x2, 0x1041, 0x4, 0x9, 0x100000001, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x9, 0x6, 0x6a], 0xeeee8000, 0x300092}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) syz_ublk_setup_queues(r8, r5, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x107ffffe, 0x200, 0x1006, 0x200015a, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x0, 0x10001, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xba}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x5c0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) r12 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r12, r13, r14, r15, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0x6d1, 0x0, 0x0, 0x1000, 0x5}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r0, r16, &(0x7f0000000540)={0x0, 0x42a8, 0x80, 0x2, 0x20000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3104, 0x200, 0x0, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587d, 0x200, 0x1, 0x69, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x77a0, 0x0, 0x10000, 0xf1, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6253, 0x20, 0x3}}], 0x1, &(0x7f00000003c0)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x0, 0x0, '\x00', {0x0, 0xe30, 0x0, 0x0}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, &(0x7f0000000c00)={0xe9, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x3], [0xffffffff, 0xffffffff, 0x1, 0xffffbfff, 0x1, 0xffffdfff, 0x3, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x3fc, 0xffc, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(0xffffffffffffffff, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(0xffffffffffffffff, 0x40084146, &(0x7f0000000080)=0x7) 5.899715772s ago: executing program 5 (id=5431): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) fadvise64(r1, 0x0, 0x5, 0x2) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x5000) write$binfmt_aout(r2, 0x0, 0xffffffdb) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @empty, @initdev}, &(0x7f0000000200)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001800)={'syztnl1\x00', &(0x7f0000001740)={'syztnl0\x00', 0x0, 0x7800, 0x20, 0x7fff, 0x2, {{0x1d, 0x4, 0x2, 0x0, 0x74, 0x68, 0x0, 0xfa, 0x2d, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@timestamp={0x44, 0x10, 0xfe, 0x0, 0x2, [0x10001, 0x6, 0x2]}, @end, @cipso={0x86, 0x22, 0xffffffffffffffff, [{0x1, 0x3, "ed"}, {0x5, 0xa, "07440a52b4023678"}, {0x0, 0x7, "1b874ecbbe"}, {0x2, 0x3, 'R'}, {0x0, 0x5, "f165e4"}]}, @ssrr={0x89, 0xb, 0x6d, [@remote, @private=0xa010100]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x7, 0x1d, [@broadcast]}, @timestamp={0x44, 0x14, 0x47, 0x0, 0x5, [0xfffffff9, 0x1, 0x878, 0x8]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000030c0)={'ip6tnl0\x00', &(0x7f0000003040)={'syztnl2\x00', 0x0, 0x29, 0x7, 0xba, 0x4, 0x1, @remote, @mcast1, 0x20, 0x7, 0x7, 0x101}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000003100)={'team0\x00', 0x0}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000005b80)={@loopback={0xfec0ffffffffffff}, 0x32, r8}) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xc, r8}) sendmmsg$inet(r2, &(0x7f0000003800)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="d2cbdebebc0e40ddf21bbd77cb1535effb7395d41db5eea167a1aef22ba3c2024345653f521941a6f37860b67ebac2a4e17da82c2ad9e13b80f5550ce29686b1a440fe85ac0233770e42c9a9e7dc405801ed953d24b26143db6b6ab9e218404e3c6aa066c5e4bcb0a4beb3faa8b3f6dd812e3d94211e8deee3fb3d189a22225cb4ccd998a0c504e45f72a758eb0533b8ccf0e72b26", 0x95}, {&(0x7f0000000140)="f7d0d1de2fe2082a637652515e9579026e12aa45d5613b97bb62c7c381", 0x1d}], 0x2, &(0x7f0000000240)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0xa}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @multicast1, @multicast2}}}], 0x50}}, {{&(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000000340)="6011609a0a1da1ed55a297e98eb303bf9c76b6ce75f88ee8a4ef53c4bc5c4c7eed6ea2df1d146e1c3a562b54bb33e5ad6ce01ab092ef4f3e4f05eb0abc3808024eaa85015f2a01a92d8c4a7d7cd13dad8169f9797c060080b706bf0376f8e40b29eef9e2626c3493865fe87009ebee0a035d8ea1e4548ce8c99ba24128ce9b1acf8bd442d91f0d847b4c2f6783f35210f051535196ed56bcd17098e7c3dbddd30a98a2161e2b9a0390b165eb9f5f4700ab21e03b424a6166b4103138207b9d132b3a738fbfefd8", 0xc7}, {&(0x7f0000000440)="0bc98a5a7c791653a3928610faca0fe6780ca78fc87b", 0x16}, {&(0x7f0000000480)="bbddd40a2c44d6ff7f91224072a6631870d86de5cd78d2fc576e3fd1ed764a600d5b848cc4edaa71d2893ccbb7251f6ada621885f6b053cad6bedf", 0x3b}, {&(0x7f00000004c0)="6b04145601316b51b2c508b37f8c121ce5fe1513c07ffefa969cc6404e6b505f68f7896bdbcbc27160f824d98e6bea19d064225e53cf9d43af7091b3c7e4d4cb7e0c93982f9cf9593d74400ebeba5b678161a7f5ea55ca29592ac72fc6f92fe7f6794b18af6ac1d8c40e3715458489bb362d833504c3cf86be9194a6d60d94b7e3cab40714a81960b2ee4014eeb4bf0f8b8ef82200c221b535f164704b617b78ba63aae42a26a2bfb6fdc675442dfe5707a6dd48a108187aab80ab2f503e3829ba11568c2fc4f1a89014", 0xca}, {&(0x7f00000005c0)="ae566af0c478d478f62d89f9a2d91732e7455705d5c0c8c373188644c3e48294d07c0b6d1b31eb8b6795ee5121c423e8d145ba933214203779c08d6bb6929940966051249beb414c0f8c39603d05ed8a56c338efc34997b0649b7198cd0af40c5e49a967758a9a54f068d2423b26a76755ccfc7a6b6e3fff402440db98fe44b687804a814d828b261740e9ad02319d5a3da8c909617ebb6406902154ade5fa1573650f02a60b3b68eeb9c7c4ceca6f1d48d33441378cad36aef05cd03c0d66e4838ffeb05d47ba0895", 0xc9}, {&(0x7f00000006c0)="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", 0x1000}], 0x6, &(0x7f0000001840)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}], 0x50}}, {{&(0x7f00000018c0)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000002f80)=[{&(0x7f0000001900)="c60c031408b4fd96fae7fe00c8c44c9e91eb8888ad1b0ef8213c1842573279f70c68f9f13b7cf943db15e6f7ccaf8a3cb0d1b1cf1e28e7561628a09cfc1bedb5c60dda58da699da0b2d1d976b431626b5c8f92b519280ecfdbe661a995237683c6f032aff5984f278dcdb0561e5cc84498552d6cb1982b38227a97c8d662d77ff2f54a438498cc", 0x87}, {&(0x7f00000019c0)="88595cb4a6f34a4b367f7380f54fd74cd1653bbc2ab4a3ff1ad96107b8b9173e1c4467ddb4c41456d1bbb4da016f2d1085b2b98aac6fd9e137d50ce7ae425536c46d06eea8588c6f13d1c93b23a8dbc9f9332c6604", 0x55}, {&(0x7f0000001a40)="a43b75147d331d6793c9069ddb88df4361dc5fa37cfb3233dc7fe762caf5fcbbbc81ed100b2683e29fe53e6905075af8da182f911627e040842d51082bb2dec6f8ca3fe00ea36c8a534664005395d6b84ca7ac3429ff33da9c142879f1fecd0a44e5dd5635054053ae1334c411435d6a28e58e576da94dceb928d2fedd2d0ef292c6712484ec1a5879ef2e685bd8127b89f02b02f4cd7ad08fa8fee91d0b6e37e75de53cf482d6614744fd85ae9d534b03c94e3b915ad9404049b60c317b23370ea1400620a1b6070a6476ff5118e0d124728c7517bffd2291", 0xd9}, {&(0x7f0000001b40)="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", 0x1000}, {&(0x7f0000002b40)="bbb7dd450c6a66ea599024926f6c6b581b0996e86fc84151dfd053369acbd7c8752867ea98d97d35b5afd83e93ba97c5f4f0564028a48bae146c16a84464f0c3a9afbfd9a1d6c8de7d2ac271ac19809e70aa26883f13f7fe5e48a3b9a572276258cd40af03acdbbd44952be3310091e6791e9d158e195e494afb39d76eb9b90bdff49fd5faef199330afffa8172e16809f589385fa67e9ffede932c1e767c487668914815a675f81bcf1871147ce154bc8c534e41f5b8dd17a3c4c960b62960621bbf975a005e1f69ec2a09ba7fe77b725a28ce32c940de019925c345b58f77c7f1825c74266", 0xe6}, {&(0x7f0000002c40)="f331d93b63b03ea34ef8f2c546221467199758aa4b00ceb395cd04cc57333c66d97dca4774b9d5b5803cd6055ae376cd8c7d14b0dfee6bd223b5e8c9bcd421c18a4cab111e925a69d3477e58823adbe1c6fc45a215a639f19d03793f852f8eb708573b64df613db7d3d38216a9f4dfd6ceac20f556a4f82916a07de81db890a1d4be6833c4dc6872ca841c0f061935d6372e0203a11022b281f0beed6237b44333298c7a2a7844495d8f5c12990f55bdffee621da956f939", 0xb8}, {&(0x7f0000002d00)="1150cfafa4f3440e0c4e1b6a51263175f256d44342e7acc6731f7906d0a97687d3675288afe98b0fed005a462a65d1b2aecc8bf77eedfac41415b14d23f376a1f331c8e9cb1720eda1dde00b4892ced6b3e6703e211c7d1e1a7f0d9c95490fab4918beb3528a40d60b201acb95a0df4d68e9c9d66dc0d5007c485e28b1d69bb5a0f2f683795581a562aba2896dbdeefa200bcff07cc5f252efbaac09db943458fbf61e9c26dc1a63fbf12d0dfc50d3c854033405a0eceb11757ac51df59518dfec7d944e70fb611c8d61afc001c0fe1046296e9760f40a58340b8d5290da", 0xde}, {&(0x7f0000002e00)="8c3bcfe5ae76c2bd9b66041208c1186379104c2059dc6ef06bee22f309373132da788c7f80709b7b9d48c7a45ff1fbf1084e2df848acea8034b1733891d53421ce1419d96ecaddc60506f3246ebf04a032b19d83e8c1fac8a60c393bc93acba2c860bba67e9611f32b9550a5b6787008dc30b6d2fdd80854656446955d14293d13672d30a82ec4ec30cad662ca2e2f06d7ea38f09e204c38a2273c878e1680524adf68980d5b7cfef3ff84ca3db9c74aaed20f15d589ddfd5a2822a2938430606f1988e3ae9f2db59ff94f57d386fa9f1e0b86b6bd35c5aefcbfe0a3c9549f20873f9bdf1db732862f4f7b9d326b1e3ad0f462dbed0f", 0xf6}, {&(0x7f0000002f00)="cc81e3b6a9c8cc1a4a3022aca01b77c665f725d7580d9f30671d96e2f418d863d557a21682019e9207c8547895404d51a8a6f5c78b4ddb27ba4e5b2ca166f2209672dd45ddd919a998ef01b6b1e0ae5d9c233dbdade53a3a04ea500871ce7ed628b874142cac67d8e6f4d0ad743c2441ea5697ca254c65b11d1dbb", 0x7b}], 0x9, &(0x7f0000003140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @rand_addr=0x64010101, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @rand_addr=0x64010102, @rand_addr=0x64010102}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @rand_addr=0x64010101, @remote}}}, @ip_retopts={{0x8c, 0x0, 0x7, {[@lsrr={0x83, 0xb, 0xb9, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100]}, @cipso={0x86, 0x5a, 0x3, [{0x5, 0xf, "5a57ace55da74344ce7a2237c9"}, {0x6, 0x9, "7cce986f5716ac"}, {0x2, 0x11, "5a9628bc8cf423303a82ce8d6b7844"}, {0x0, 0x2}, {0x7, 0xf, "ef13b8520f7e4961388753cdb2"}, {0x2, 0x10, "44cdff4cd4c3a96c0128417a712d"}, {0x0, 0x7, "57c9b2617e"}, {0x2, 0x3, "e4"}]}, @timestamp={0x44, 0x14, 0x53, 0x0, 0x4, [0xd7c, 0x6, 0x58706649, 0x7ff]}]}}}, @ip_retopts={{0x40, 0x0, 0x7, {[@ssrr={0x89, 0x2b, 0xec, [@broadcast, @local, @multicast1, @multicast2, @loopback, @multicast2, @multicast1, @dev={0xac, 0x14, 0x14, 0x24}, @initdev={0xac, 0x1e, 0x6, 0x0}, @remote]}, @timestamp={0x44, 0x4, 0xcf, 0x0, 0x8}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}], 0x148}}, {{&(0x7f00000032c0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000035c0)=[{&(0x7f0000003300)="a3b3787e8a1613addf733d2d254fd2e1372d04c0fc74aff4faac88aff8eb7d260d95bc2317101e165f1100077cad97d64e7aa7a81db13b09734a1124202f1112b9d7a4f384311f9bff07a16865a2583d965640f20ad1ef20feac93f9afd53f74d0e894f6dd240fca1766caf9d2e725f6b62beb8b3979402688c85103fd62332d8e1b0adf651361eed9528c14fab86231ee25892585f989f7", 0x98}, {&(0x7f00000033c0)="b4f69e0e0f33b79f8904ccb915bc2740d9f7e282d37ba03b2ad6cfde21ec4f6e82fbd303f0b7564d0651f550259477704394b25e41c21cb26d344f1d9e5a5f72be222df5b372be9c62b956bd11d5fed4cec58c41a387bab81cca144871a29a4846099c91ed00116153f72095da1efbb8a57a9face36bc1cfaa2620079e591bb5f2045664fa773de08b703e38fdf0b4331feb4c3584d98abed64b326eeb56bd49bb60d1e6c446a93457aa77b9340eca14bf40eb75847779833ee75aaa0e32e960e56a4f8756f9c5dc4ca834e20d57651cb3bb1793f63d539d4bc6c87e6676fd", 0xdf}, {&(0x7f00000034c0)="16b6a018eef546b84414d280a3441f9c6db949da989423bb671038496f7b48a1efdc936c70f41690fe3e7383c364d1fba3c9b700e45029def3e07167", 0x3c}, {&(0x7f0000003500)="3b2f69d6a02d627fe038d323f1301d6ecfd097ad5cb97f8e80c223382202f44176ea0927f3239b047570be3d9024432da9a14d9c71baf85f82dcdf4846d75cbd4649ea04db5d3813d11b5f725629a7b8d4c799c26372642c4894fe4af40cdb5122593e2256e13d604ed15ba6b52e4fd21adf885903513f795d9bc15e0e6efc831a2883b57c780ef1f3af", 0x8a}], 0x4, &(0x7f0000003600)=[@ip_ttl={{0x14, 0x0, 0x2, 0x5}}], 0x18}}, {{&(0x7f0000003640)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f00000037c0)=[{&(0x7f0000003680)="f70e54fb088981701686343d31be83fe85d9c15729dcb9e014149e383da18bf976b45be5dedd787605401fd4ed041ac09712f7f34d871d92c8644fad7f73207e8b1954da03103fead7e0eaf92c72eaad63ffe8801e3c1f17bc13a73b189a9f95da2d4deebdf8d832c57772612520028cb99cf8205f5ceb42341bd002fe26c86798e5a1e2b1fc8baf16eff9d81cf84d7c4920fdff6799fa6fd93accb8b081531143fd2c3cf19c6f86b053a0c91c66a516870ee3b03d4cc1c5aca38cd7b75119b179b52299ba93c264507003819b013f094f72af6b6fb60527ec72001093fa17a0b3f9d01aac965ce33cc2105ccb0b6f35", 0xf0}, {&(0x7f0000003780)=';!BD]', 0x5}], 0x2}}], 0x5, 0x4) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r9, &(0x7f0000000080), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r9, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000000)={0x28, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.716054367s ago: executing program 7 (id=5432): r0 = socket$nl_route(0x10, 0x3, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x8, &(0x7f0000000480)={0x2b, 0x0, 0xfffffffb}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x8c, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x1}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x4}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_MODE={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}, @IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}, @IFLA_IPVLAN_MODE={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x8c}, 0x1, 0x0, 0x0, 0x240088d0}, 0x48000) 5.62034566s ago: executing program 7 (id=5433): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(r0, r1, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x49, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) 5.56966223s ago: executing program 2 (id=5434): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f00000003c0)=ANY=[], 0xe8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, &(0x7f0000000240)) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, r2, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) r7 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r7, &(0x7f0000000280)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp_addr={0x44, 0xc, 0xb, 0x1, 0x7, [{@rand_addr=0x64011101}]}]}}}], 0x20}, 0x200040c4) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x2, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x298, 0x0, 0xfffffffffffffff9, [{{0x1, 0x3, 0x1, 0x2, 0x100, 0x1, {0x80, 0x1, 0x108001, 0x1, 0xb29d, 0x1, 0x6, 0x5831, 0x1b0, 0x1000, 0x5f1, r3, r4, 0xff, 0x5}}, {0x1, 0x1, 0x1, 0xffffdff9, '.'}}, {{0x5, 0x3, 0x73ef, 0x6, 0x1, 0x0, {0x6, 0x5, 0x294, 0x8, 0x8000, 0x6, 0x2, 0x0, 0x9, 0xc000, 0x400, r3, r4, 0x0, 0xd}}, {0x4, 0x1, 0x1, 0x7ff, '.'}}, {{0x4, 0x1, 0x8000, 0x2, 0x0, 0xfffffffd, {0x5, 0x1, 0x26d, 0x9, 0x6819, 0x8, 0xffffdc2b, 0x0, 0x9, 0xa000, 0x6, r3, 0x0, 0xe351}}, {0x2, 0x5, 0xa, 0x0, '/dev/fuse\x00'}}, {{0x4, 0x2, 0x8002, 0x9, 0x81, 0x0, {0x6, 0x9a69, 0xa, 0x3, 0x9, 0xffffffffffff8000, 0x80000000, 0x5, 0x5, 0xa000, 0x3, r3, 0x0, 0x1, 0x6}}, {0x5, 0x5, 0x7, 0x8, '*\xaf}#+-6'}}]}, 0x0, 0x0, 0x0}) getdents64(r6, 0x0, 0x9700) sendto$inet6(r0, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="000a06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r8, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0) syz_usb_control_io$rtl8150(r8, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="000e1f0000004d5e"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r8, 0x0, 0x0) syz_usb_control_io$sierra_net(r8, &(0x7f0000000d00)={0x14, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_STATION(r9, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000d80)={0x20, r10, 0x3, 0x0, 0x0, {{0x12}, {@void, @val={0xc, 0x99, {0x1002, 0x6a}}}}}, 0x20}}, 0x0) syz_usb_control_io$uac3(r8, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000240)={0x20, 0x17, 0x3d, "3ce55b0aaf74692fdb7fb1ef5210ef3582a56b28070f8f32d1c0ce5f139ce1e0b0e6e1f715043ccf5f76db970b175334936efe259ae8e0441bc5f54b2a"}, &(0x7f00000002c0)={0x0, 0xa, 0x1}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x86}, &(0x7f0000000340)={0x20, 0x81, 0x1, '6'}, 0x0, &(0x7f0000000400)={0x20, 0x83, 0x1, '\x00'}, 0x0, 0x0}) 5.420765207s ago: executing program 5 (id=5435): socket$pppoe(0x18, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x800003}, 0x0) sched_getattr(0x0, &(0x7f0000000180)={0x38}, 0x38, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x24000085) keyctl$dh_compute(0x17, &(0x7f0000000000), 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = socket(0x11, 0x800000002, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000540)={'virt_wifi0\x00', {0x2, 0x0, @private=0xf30a4000}}) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x8000000000000006) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) write$UHID_INPUT(r6, &(0x7f0000000e00)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$KVM_SET_IRQCHIP(r5, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x12c, @ioapic={0x80a0000, 0x8fff, 0xfffff5a7, 0x7fffffff, 0x0, [{0x1, 0x9, 0xfd, '\x00', 0x4}, {0x7, 0x3, 0x8, '\x00', 0x6}, {0x7, 0x3, 0xe, '\x00', 0x3b}, {0x49, 0xe, 0xd7, '\x00', 0x86}, {0xc, 0x2, 0x2, '\x00', 0x2}, {0xd, 0x81, 0xf9, '\x00', 0x4}, {0x2, 0xa, 0x7, '\x00', 0x6}, {0x8, 0x9, 0x2a, '\x00', 0x8}, {0x9c, 0x1, 0xa, '\x00', 0xfe}, {0x8, 0xd6, 0x3, '\x00', 0x8}, {0x9e, 0x6, 0xb}, {0x2, 0x0, 0x1, '\x00', 0x7f}, {0x45, 0x51, 0x6, '\x00', 0x8}, {0xe, 0xfc, 0x0, '\x00', 0x1}, {0x8, 0x2, 0x3, '\x00', 0x7}, {0xd, 0x1b, 0xfe, '\x00', 0x3}, {0x2, 0xa, 0xd2, '\x00', 0x8}, {0xa, 0x0, 0xca, '\x00', 0x6}, {0x0, 0x7, 0x4, '\x00', 0x1a}, {0xb, 0x8, 0x8, '\x00', 0x1}, {0x3, 0x7, 0x6, '\x00', 0x7}, {0x9, 0x3, 0x0, '\x00', 0x2}, {0xf9, 0x61, 0x4, '\x00', 0x7}, {0x8, 0xf, 0x0, '\x00', 0x6}]}}) dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e19, 0x1, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x1}, 0x1c) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000c40)=ANY=[@ANYBLOB="c8000000420001000200000000000000030100004242000050000100aabbccddeee1aabbccddeee286dd600000000014064020010db800000000000000000000000120010db800000000000000000000000204d20050000000000000000050021000000000000000040002005c00030058000b005400080020010db8000000000000000000000099000000000000000000000000000000000000000000000000ffffffffffffffffffffffffffffffff"], 0xc8}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="550009feff00", @ANYRES16=r8, @ANYBLOB="000425bd7000fddbdf257b0000000c00990007000000070000001400020136ca896e1417f1b277"], 0x54}, 0x1, 0x0, 0x0, 0x24000000}, 0x10) 5.420493596s ago: executing program 7 (id=5436): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0xd, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e23, @remote}, {0x2, 0x10, @broadcast}, 0x140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x26, 0x7fb}) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000840)={0xfffffffd, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}, {0x2, 0x0, @broadcast}, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 3.756184212s ago: executing program 3 (id=5439): r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3) waitid(0x0, r0, &(0x7f00000000c0), 0x8, 0x0) fcntl$setsig(r1, 0xa, 0x12) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x4, @local, 0x9}]}, &(0x7f00000002c0)=0x10) poll(&(0x7f0000b2c000)=[{r2}], 0x2c, 0xffffffffffbffff8) r4 = dup2(r1, r2) fcntl$setown(r4, 0x8, r0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x88042, 0x0) write$P9_RSTATu(r5, &(0x7f0000000880)={0x2c2, 0x7d, 0x0, {{0x500, 0xfa, 0x0, 0x6a, {0x40}, 0x10000000, 0x2000000, 0x0, 0x0, 0x1f, '\x04nodev{cvfox%\xff\xff\xff\x81\x02\x00'/31, 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xfb\xe1a\xe9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x5e, '\xf8\xf6~\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x9d,;\x9e\x1dR\xc3\xd6\xda\x9b\xf1\x99V\x88\xda\xcel\xde{\xa4\xa4\x00\xb4\xb0\xb4\xdb\xe6Od\xb1\xd6?&ym\xcb\xecI\x86#\xd6\xa88\xc6\x9ai\xdf\xcc\x9c\xddY\x06\xf1t\xa6f\xa8R\x9aEw4\a\xdb\xda\xb2\x88[\xaf\x05\x00\x00\x00\x00\x00'}, 0x1b3, 'odev-n\xb1{#\x00\xf9\xda\xa1\xee#&n\xcf\x85\xfe\xa6^\xb2\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\xbd\x7f=\x7f)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x01\x00\x00\x00\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\xcf>\xe3\x88@\x02\xa9\x1cTR\x8b\x80z\x89\xca\x18M\x16d_\x06\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f)\x9f\x06\x1fu\xb7y|\xe1\xe4\x11\xea\x91\x8e\xbd\x88\x8c\x1e\x15k\x84V\x93\x1d.\xa7&\xba\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9G\x8f}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00\x00\x00\x00\x00\x00\x00ta\xb0\xcc\xaa\xa1\x93:\x0e\x8a\x82k\x14\xd4\xfc\xb2\x98\x9f\xfa\xaa\x1a\xcf\xfa\x80T\xe9U\x9d\xfa\xe4iz\xa0\v\x03\xb3\xd8\x0eU$\xf8I_\xee~\x8d\x88\xcbZ\x04\x03\x02\xac\xb0\xd1&\x0f%\x84\xdbH\xe8\xd9\x06N\x8c\xe1x\xce9n\x85\xb9~H\x86D@I\x81\x0f%\xf1\xce\xca\x97]\xebI\x1a\x12[\xf0\xd7/\x87\xcc\x10\xb0\x15N\b\x93m\xaa\xdd\x8b\x1e\x97'}}, 0x2c2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) capset(0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r4) sendmsg$TIPC_NL_NODE_GET(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4000000) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) r6 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0xd0, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x7, 0x5a0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x40, @private1, @mcast2, {[], {{0x4e22, 0x4e22, 0x1000, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x3, 0x0, 0x0, {[@generic={0x3, 0x2}]}}}}}}}}, 0x0) tkill(r0, 0x13) 3.490017126s ago: executing program 7 (id=5440): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e24, @empty}}, 0xfffffffc, 0xea, 0x2, 0x1f4, 0x30, 0x8}, 0x9c) 3.356644174s ago: executing program 5 (id=5441): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000003080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x1000000, {0x5}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x23f, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3.288793518s ago: executing program 7 (id=5442): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xb, 0x204031, 0xffffffffffffffff, 0xec773000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) listns(&(0x7f0000000000)={0x20, 0x0, 0x2, 0x0, 0x0, 0x3}, &(0x7f0000000040)=[0x0, 0x0], 0x2, 0x0) getsockopt$sock_buf(r1, 0x1, 0x3b, &(0x7f0000001680)=""/193, &(0x7f0000000180)=0xc1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r3 = syz_io_uring_setup(0x1f97, &(0x7f0000000080)={0x0, 0x7f97, 0x13581, 0x0, 0x1ff}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000000)) mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x1, 0x0, 0x12, r3, 0xffffffff80000000) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000240)={0x1, 0x0, [{0x3, 0x4, 0x0, 0x0, @adapter={0x208, 0x7, 0x5, 0x1ff, 0x2}}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0xfffffffffffffffc) r6 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.log\x00', 0x321100, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0x8000f28, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_RMFB(r6, 0xc00464af, &(0x7f0000000340)=r9) accept4$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14, 0x800) 3.128719469s ago: executing program 5 (id=5443): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000080)=@name={0x1e, 0x2, 0x8a889efe575e09e7, {{0x2, 0x4}, 0x4}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc004) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) listen(r4, 0xc) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x91, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.418929491s ago: executing program 2 (id=5444): syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x81, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a00)="54000000100001040000000000000000000000000000000000000000000000000f00030073797a6b616c6c6572300000240012000a00010076786c616e00000014000200080007007b000000080002007f000001", 0x54}], 0x1}, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f00000000c0)={0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341"], 0x0}, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x0, 0x1, 0xfffffffc, 0x6, 0x101, 0x0, "5debca561a5fbf61048955f6f876b2ff"}) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) syz_usb_control_io$hid(r2, 0x0, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) flistxattr(r4, &(0x7f00000001c0)=""/3, 0x3) r5 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x38) fcntl$setsig(r5, 0xa, 0x21) fcntl$setlease(r4, 0x400, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) open$dir(0x0, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r6, 0x8982, &(0x7f00000002c0)={0x0, 'veth1_to_team\x00', {0x3}, 0x4}) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r7, 0x4068aea3, &(0x7f0000000480)={0x79, 0x0, 0xc}) r8 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x8700) ioctl$CEC_G_MODE(r8, 0x80046108, &(0x7f0000000080)) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xaece, 0x0) preadv(r11, &(0x7f0000000440)=[{&(0x7f0000000080)=""/35, 0x23}, {&(0x7f00000020c0)=""/4116, 0x1014}], 0x2, 0xa, 0x9) ioctl$KVM_SET_GSI_ROUTING(r7, 0x4008ae6a, &(0x7f0000000380)={0x2, 0x0, [{0x0, 0x4, 0x0, 0x0, @msi={0x5, 0x800, 0x4}}, {0x0, 0x3, 0x0, 0x0, @sint={0x5, 0x1a1}}]}) 2.327764314s ago: executing program 3 (id=5445): madvise(&(0x7f000031d000/0x1000)=nil, 0x1600, 0x11) 2.220972783s ago: executing program 3 (id=5446): r0 = syz_open_dev$dmmidi(&(0x7f0000000000), 0x2, 0x200) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) ioctl$XFS_IOC_FSCOUNTS(r0, 0x80205871, &(0x7f0000000040)) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000100)={0xffffff80, 0x7, 0x0, 'queue1\x00', 0x1}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@private, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@remote}}, &(0x7f00000002c0)=0xe8) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000701, r3, &(0x7f0000000300)) r4 = syz_open_dev$midi(&(0x7f0000000380), 0x7fffffff, 0x279ccc30804bf4a6) fstat(r4, &(0x7f00000003c0)) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, 0xfffffffffffffffc, 0x4040800) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, &(0x7f0000000480)={0x0, @in6={{0xa, 0x4e20, 0xa1e2, @dev={0xfe, 0x80, '\x00', 0x36}, 0xffffffff}}, 0xffff, 0x2, 0x9, 0x373, 0x80000000}, &(0x7f0000000540)=0x98) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r6, 0x84, 0x78, &(0x7f0000000580)=r7, 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000840)={'ip_vti0\x00', &(0x7f00000007c0)={'sit0\x00', r2, 0x10, 0x80, 0x400, 0xb57c, {{0x16, 0x4, 0x2, 0x1, 0x58, 0x67, 0x0, 0x5, 0x0, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0xe}, {[@timestamp={0x44, 0x1c, 0x32, 0x0, 0xb, [0x9, 0x8000, 0xf, 0x9, 0x0, 0x1]}, @ssrr={0x89, 0x13, 0x49, [@rand_addr=0x64010102, @local, @private=0xa010100, @multicast2]}, @end, @ssrr={0x89, 0x7, 0x65, [@remote]}, @end, @generic={0x86, 0x5, "f9face"}, @ra={0x94, 0x4, 0x1}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x7, 0x1f, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x10}, @exit, @call={0x85, 0x0, 0x0, 0x84}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000006c0)='syzkaller\x00', 0x14e9, 0x9e, &(0x7f0000000700)=""/158, 0x41000, 0x55, '\x00', r8, @fallback=0x6, r6, 0x8, &(0x7f0000000880)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x4, 0x9, 0xd22, 0x1ff}, 0x10, 0x0, r6, 0x7, &(0x7f0000000900)=[r6], &(0x7f0000000940)=[{0x3, 0x3, 0xd, 0x2}, {0x4, 0x2, 0x8, 0x4}, {0x0, 0x4, 0xa, 0x3}, {0x0, 0x3, 0xc, 0xa}, {0x0, 0x3, 0xc, 0x6}, {0x4, 0x3, 0xd, 0x3}, {0x0, 0x5, 0xf, 0x2}], 0x10, 0x7ff}, 0x94) sendmsg$nl_route_sched(r5, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)=@getchain={0x44, 0x66, 0x400, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfff1, 0x10}, {0x2, 0x5}, {0xd, 0x10}}, [{0x8, 0xb, 0x4}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0xff}]}, 0x44}, 0x1, 0x0, 0x0, 0x200088d1}, 0x10) r9 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x22) ioctl$sock_TIOCINQ(r5, 0x541b, &(0x7f0000000bc0)) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x20040000) ioctl$TUNGETIFF(r5, 0x800454d2, &(0x7f0000000d00)={'netpci0\x00'}) ioctl$HIDIOCGRDESC(r6, 0x90044802, &(0x7f0000000d40)={0xa5d, "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"}) sendmsg$NFQNL_MSG_VERDICT(r5, &(0x7f0000001a40)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001800)={0x1e4, 0x1, 0x3, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0xffff}}, @NFQA_CT={0xa4, 0xb, 0x0, 0x1, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_TUPLE_ORIG={0xc, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_NAT_SRC={0x84, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast1}, @CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x38}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010101}]}]}, @NFQA_VLAN={0x3c, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x7}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x3}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x4}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x7}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}]}, @NFQA_CT={0xd0, 0xb, 0x0, 0x1, [@CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x400}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x400}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xff}, @CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x401}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xd0}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x8}]}, @CTA_TUPLE_REPLY={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}]}, @CTA_PROTOINFO={0x28, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x24, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_STATE={0x5}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x8}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x2, 0x9}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x5}]}}]}, @NFQA_CT={0x14, 0xb, 0x0, 0x1, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xfffff0f3}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x4048841}, 0x20000080) r10 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000001a80), 0x40, 0x0) quotactl_fd$Q_GETFMT(r10, 0xffffffff80000400, r3, &(0x7f0000001ac0)) close(r1) bpf$TOKEN_CREATE(0x24, &(0x7f0000001b00)={0x0, r9}, 0x8) fcntl$dupfd(r4, 0x406, r10) landlock_restrict_self(r6, 0x2) 2.137719149s ago: executing program 5 (id=5447): io_uring_setup(0x8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6(0x10, 0x3, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup(r2) socket$inet6(0xa, 0x800000000000002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$tipc(0x1e, 0x5, 0x0) epoll_create1(0x0) socket$kcm(0x21, 0x2, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x309102) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r4, @ANYRESDEC=r3], 0x20) 1.949077785s ago: executing program 3 (id=5448): membarrier(0x40, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) io_setup(0x8, &(0x7f0000000240)=0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) io_submit(r1, 0x1, &(0x7f0000000380)=[0x0]) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0xa, r2, 0x0, 0xa00}, 0x38) r3 = syz_usb_connect(0x5, 0x36, &(0x7f0000001500)=ANY=[@ANYBLOB="12010002000000407b0603230001010203010902240001010080000904000002ff00000009050102000200000009058202000b000000530ea0bb7688dfa2a35e323a29c6ee31547818dfd88a3efe5f9c525c074c0181e3a1306f1f9fef9e4abe93913393f54697f993fb"], 0x0) r4 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x40, 0x0) r5 = socket$inet6(0xa, 0x80003, 0x6) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) preadv(r6, 0x0, 0x0, 0x0, 0x0) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x40000}, 0x1c) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x3}, 0x10) r8 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000040)={0x80042, 0x1}, 0x10) bind$tipc(r7, 0x0, 0x0) sendmsg$tipc(r7, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x43, 0x2}, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x48040) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) sendmsg$nl_generic(r6, &(0x7f00000014c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001480)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"/4164, @ANYRES32=r3, @ANYBLOB='\b\x00B\x00', @ANYRES32=r6, @ANYBLOB="b98d0262e8d2463a6801695639fe4400"], 0x1060}, 0x1, 0x0, 0x0, 0x80}, 0x100000c0) setresuid(0x0, 0xee00, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) r10 = syz_io_uring_setup(0x116, &(0x7f0000000340)={0x0, 0x800, 0x1, 0x0, 0x2fd}, &(0x7f00000003c0), &(0x7f0000000200), &(0x7f0000000180)) io_uring_enter(r10, 0xf3, 0x80ffff, 0x49, 0x0, 0x40) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000001600)=@gettfilter={0x24, 0x2e, 0x0, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0xc, 0x7}, {0xffe0, 0x7}, {0x10, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x57e75e83ccdb8e79) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 1.539566585s ago: executing program 5 (id=5449): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYRES8], 0x0) 1.423783279s ago: executing program 1 (id=5395): io_uring_setup(0x8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6(0x10, 0x3, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$tipc(0x1e, 0x5, 0x0) epoll_create1(0x0) socket$kcm(0x21, 0x2, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x309102) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r2, @ANYRES64=0x0, @ANYRESDEC=r1], 0x20) 1.211516302s ago: executing program 1 (id=5450): socket$pppoe(0x18, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x800003}, 0x0) sched_getattr(0x0, &(0x7f0000000180)={0x38}, 0x38, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x24000085) keyctl$dh_compute(0x17, &(0x7f0000000000), 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = socket(0x11, 0x800000002, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000540)={'virt_wifi0\x00', {0x2, 0x0, @private=0xf30a4000}}) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x8000000000000006) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) write$UHID_INPUT(r6, &(0x7f0000000e00)={0xfc, {"a2e3ad09ed0d09f91b5e071887f70e09d038e7ff7fc6e5539b0d450a8b089b3f383163030890e0879b0a71c6e70a9b336c959b669a242f0a0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d074d090acd3b78130daa61d8e8040000065802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae13f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea77b5602984e4de7c6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6932fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cff7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f2157322c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f19880f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060085ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e606000000e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999b596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f203903dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efe5496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5ca00000000000000008734dd73583df292892448039ef799cf0630becdcce04579f5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebd078ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9dec58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6b331b4603b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0006087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c2769310123cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f4647b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1de51f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d4db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72932b99b380000000000000006859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec8982b6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f900000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000002601e87b162dadc600", 0x1000}}, 0x1006) ioctl$KVM_SET_IRQCHIP(r5, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x12c, @ioapic={0x80a0000, 0x8fff, 0xfffff5a7, 0x7fffffff, 0x0, [{0x1, 0x9, 0xfd, '\x00', 0x4}, {0x7, 0x3, 0x8, '\x00', 0x6}, {0x7, 0x3, 0xe, '\x00', 0x3b}, {0x49, 0xe, 0xd7, '\x00', 0x86}, {0xc, 0x2, 0x2, '\x00', 0x2}, {0xd, 0x81, 0xf9, '\x00', 0x4}, {0x2, 0xa, 0x7, '\x00', 0x6}, {0x8, 0x9, 0x2a, '\x00', 0x8}, {0x9c, 0x1, 0xa, '\x00', 0xfe}, {0x8, 0xd6, 0x3, '\x00', 0x8}, {0x9e, 0x6, 0xb}, {0x2, 0x0, 0x1, '\x00', 0x7f}, {0x45, 0x51, 0x6, '\x00', 0x8}, {0xe, 0xfc, 0x0, '\x00', 0x1}, {0x8, 0x2, 0x3, '\x00', 0x7}, {0xd, 0x1b, 0xfe, '\x00', 0x3}, {0x2, 0xa, 0xd2, '\x00', 0x8}, {0xa, 0x0, 0xca, '\x00', 0x6}, {0x0, 0x7, 0x4, '\x00', 0x1a}, {0xb, 0x8, 0x8, '\x00', 0x1}, {0x3, 0x7, 0x6, '\x00', 0x7}, {0x9, 0x3, 0x0, '\x00', 0x2}, {0xf9, 0x61, 0x4, '\x00', 0x7}, {0x8, 0xf, 0x0, '\x00', 0x6}]}}) dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e19, 0x1, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x1}, 0x1c) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000c40)=ANY=[@ANYBLOB="c8000000420001000200000000000000030100004242000050000100aabbccddeee1aabbccddeee286dd600000000014064020010db800000000000000000000000120010db800000000000000000000000204d20050000000000000000050021000000000000000040002005c00030058000b005400080020010db8000000000000000000000099000000000000000000000000000000000000000000000000ffffffffffffffffffffffffffffffff"], 0xc8}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="550009feff00", @ANYRES16=r8, @ANYBLOB="000425bd7000fddbdf257b0000000c00990007000000070000001400020136ca896e1417f1b277"], 0x54}, 0x1, 0x0, 0x0, 0x24000000}, 0x10) 868.531702ms ago: executing program 3 (id=5451): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)={0x1}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3d, &(0x7f0000000140), 0x8) syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) sendmmsg$sock(r5, &(0x7f0000000200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@txtime={{0x18, 0x1, 0x3d, 0x800000000}}], 0x18}}], 0x1, 0x800) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90}, {0xeda7, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x3, 0x3f8, 0x0, 0x0, 0x2004cb, 0x3, 0x100000008, 0xfffffffffffffff8, 0x0, 0x9, 0x2000000000003ff, 0x2], 0x2000, 0x200282}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000180)={0x28, 0x19, 0x7, 0xd1, 0x30, 0x10, 0xaa, 0x6, 0xfd, 0x8, 0x6, 0x40, 0x0, 0x79}, 0xe) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000440)=[@in={0x2, 0x4e23, @loopback}]}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f00000001c0)={r7, 0x9, 0x101}, &(0x7f0000000200)=0x8) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f00000001c0)=0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000840)=@newtfilter={0x54, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x1}, {0x0, 0xffff}, {0x300, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x2}, @TCA_U32_CLASSID={0x8, 0x1, {0x0, 0x4}}, @TCA_U32_SEL={0x14, 0x5, {0x2, 0x7, 0x4, 0x6, 0x9, 0x8000, 0x80, 0x7}}]}}]}, 0x54}}, 0x10000845) close_range(r1, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) 236.931305ms ago: executing program 2 (id=5452): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_udp(0x2, 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x9b, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8417f, 0x3f00) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x542) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x10248ba, 0x0) open_tree(r2, &(0x7f0000000140)='./file0/file0\x00', 0x9901) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x189903) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80000, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r3, r3, &(0x7f0000000000)=0x2eb4, 0x2000007ff) io_uring_setup(0x705b, &(0x7f0000000380)={0x0, 0xd400, 0x10, 0x5, 0x357}) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r5, 0x40383d0c, 0x0) close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) r6 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r6, 0x40106f52, &(0x7f0000000000)={0x18, &(0x7f00000000c0)=[{0x11, '\x00', @data=0xb, 0x9}]}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)) 0s ago: executing program 3 (id=5453): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1002}]}) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregs(0x4212, r0, 0x58, &(0x7f0000000180)=""/96) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_open_dev$loop(&(0x7f0000000100), 0x6, 0x214040) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setns(0xc9, 0x0) r1 = socket(0x11, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'geneve1\x00', &(0x7f0000000040)=@ethtool_gfeatures}) socket$tipc(0x1e, 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r3) getsockname$packet(r3, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x255128220095d69c) syz_usb_connect(0x5, 0x2d, &(0x7f0000000540)={{0x12, 0x1, 0x310, 0xc8, 0x53, 0x29, 0x20, 0xcf3, 0x9271, 0x169b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0xe2, 0xd8, 0x1, 0x6b, 0xff, 0x5d, 0x8, [], [{{0x9, 0x5, 0xb, 0x1, 0x8, 0x4, 0x1, 0x9}}]}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="0203e7b9c9daba1eea54dd10da51a465cc"]}, {0x64, &(0x7f00000002c0)=@string={0x64, 0x3, "ae6afed86336d2a8852a9366c3da4b88666c45fbf8ff1932c45cf402dd672254f335f9f637f7c792214da657622180500c197cf92e34e59193708e1a5c4c444e4fd62fe3f8cc4e393e068396b80538fad4d53a84cbd3a4d1b67aa4f7b85ebb4bb1d8"}}]}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x3e, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x437, 0xfffffffe, 0x25dfdbff, {0x0, 0x0, 0x0, r4, 0x704c3, 0xc4a48b7f26bf140b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x17}}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xb}]}, 0x40}, 0x1, 0x0, 0x0, 0x20a7d52d1a3e1087}, 0x30000010) sendmmsg$inet(r2, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VIDIOC_G_EDID(r5, 0xc0285628, &(0x7f00000002c0)={0x0, 0x9, 0x800, '\x00', &(0x7f0000000280)=0x8}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x2, &(0x7f0000000340)=[{0x2, 0x46, 0x5, 0x3}, {0xa, 0x3, 0x2, 0x8}]}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000380)={'wg2\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000240)={0x0, 0x7, 0x70b9}) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) readahead(r6, 0x6, 0x4) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) kernel console output (not intermixed with test programs): 0 [ 1235.770957][T14459] cp2112 0003:10C4:EA90.003E: error reading lock byte: -71 [ 1235.800105][T14459] usb 3-1: USB disconnect, device number 80 [ 1235.948812][T26253] FAULT_INJECTION: forcing a failure. [ 1235.948812][T26253] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1235.948854][T26253] CPU: 0 UID: 0 PID: 26253 Comm: syz.5.4994 Tainted: G L syzkaller #0 PREEMPT(full) [ 1235.948886][T26253] Tainted: [L]=SOFTLOCKUP [ 1235.948895][T26253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1235.948909][T26253] Call Trace: [ 1235.948918][T26253] [ 1235.948929][T26253] dump_stack_lvl+0xe8/0x150 [ 1235.948968][T26253] should_fail_ex+0x410/0x560 [ 1235.949002][T26253] _copy_from_user+0x2d/0xb0 [ 1235.949036][T26253] ___sys_sendmsg+0x1c6/0x360 [ 1235.949071][T26253] ? __lock_acquire+0x747/0x2de0 [ 1235.949103][T26253] ? __pfx____sys_sendmsg+0x10/0x10 [ 1235.949135][T26253] ? __lock_acquire+0x747/0x2de0 [ 1235.949171][T26253] ? kstrtouint+0x6e/0xe0 [ 1235.949238][T26253] __sys_sendmmsg+0x273/0x4d0 [ 1235.949280][T26253] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1235.949325][T26253] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1235.949375][T26253] ? ksys_write+0x242/0x270 [ 1235.949401][T26253] ? __pfx_ksys_write+0x10/0x10 [ 1235.949431][T26253] __x64_sys_sendmmsg+0xa0/0xc0 [ 1235.949468][T26253] do_syscall_64+0x166/0x520 [ 1235.949500][T26253] ? trace_irq_disable+0x3b/0x140 [ 1235.949526][T26253] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1235.949550][T26253] ? clear_bhb_loop+0x70/0xc0 [ 1235.949588][T26253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1235.949612][T26253] RIP: 0033:0x7fb09979e159 [ 1235.949635][T26253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1235.949655][T26253] RSP: 002b:00007fb09a5b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1235.949680][T26253] RAX: ffffffffffffffda RBX: 00007fb099a25fa0 RCX: 00007fb09979e159 [ 1235.949698][T26253] RDX: 00000000040000ca RSI: 0000200000000200 RDI: 0000000000000003 [ 1235.949714][T26253] RBP: 00007fb09a5b9090 R08: 0000000000000000 R09: 0000000000000000 [ 1235.949730][T26253] R10: 00000000200040c4 R11: 0000000000000246 R12: 0000000000000002 [ 1235.949745][T26253] R13: 00007fb099a26038 R14: 00007fb099a25fa0 R15: 00007fb099b4fa48 [ 1235.949781][T26253] [ 1236.556924][T25019] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 1236.733195][T17059] IPVS: starting estimator thread 0... [ 1236.780076][T26289] FAULT_INJECTION: forcing a failure. [ 1236.780076][T26289] name failslab, interval 1, probability 0, space 0, times 0 [ 1236.780117][T26289] CPU: 0 UID: 0 PID: 26289 Comm: syz.2.5004 Tainted: G L syzkaller #0 PREEMPT(full) [ 1236.780149][T26289] Tainted: [L]=SOFTLOCKUP [ 1236.780158][T26289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1236.780174][T26289] Call Trace: [ 1236.780183][T26289] [ 1236.780195][T26289] dump_stack_lvl+0xe8/0x150 [ 1236.780240][T26289] should_fail_ex+0x410/0x560 [ 1236.780276][T26289] should_failslab+0xa8/0x100 [ 1236.780307][T26289] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 1236.780345][T26289] kmem_cache_alloc_noprof+0xa1/0x600 [ 1236.780368][T26289] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 1236.780404][T26289] ? kmem_cache_alloc_noprof+0x156/0x600 [ 1236.780427][T26289] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 1236.780470][T26289] __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 1236.780519][T26289] mmu_topup_memory_caches+0x21/0x170 [ 1236.780549][T26289] kvm_mmu_load+0x9d/0x21e0 [ 1236.780577][T26289] ? kvm_msr_allowed+0x9a/0x490 [ 1236.780602][T26289] ? kvm_msr_allowed+0x9a/0x490 [ 1236.780627][T26289] ? kvm_msr_allowed+0x9a/0x490 [ 1236.780656][T26289] ? kvm_msr_allowed+0x3f4/0x490 [ 1236.780680][T26289] ? kvm_msr_allowed+0x9a/0x490 [ 1236.780703][T26289] ? kvm_apic_has_interrupt+0x740/0x770 [ 1236.780749][T26289] vcpu_run+0x4f7e/0x7aa0 [ 1236.780807][T26289] ? update_se+0x90/0x1080 [ 1236.780884][T26289] ? __pfx_vcpu_run+0x10/0x10 [ 1236.780908][T26289] ? lock_acquire+0x115/0x350 [ 1236.780951][T26289] kvm_arch_vcpu_ioctl_run+0xe87/0x19c0 [ 1236.780994][T26289] ? kvm_arch_vcpu_ioctl_run+0x1f8/0x19c0 [ 1236.781041][T26289] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 1236.781073][T26289] kvm_vcpu_ioctl+0xa61/0xfd0 [ 1236.781106][T26289] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1236.781130][T26289] ? hook_file_ioctl+0x1f2/0x600 [ 1236.781182][T26289] ? __fget_files+0x2a/0x420 [ 1236.781220][T26289] ? __fget_files+0x2a/0x420 [ 1236.781252][T26289] ? __fget_files+0x3a2/0x420 [ 1236.781284][T26289] ? __fget_files+0x2a/0x420 [ 1236.781320][T26289] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1236.781355][T26289] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1236.781380][T26289] __se_sys_ioctl+0xfc/0x170 [ 1236.781410][T26289] do_syscall_64+0x166/0x520 [ 1236.781442][T26289] ? trace_irq_disable+0x3b/0x140 [ 1236.781467][T26289] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1236.781491][T26289] ? clear_bhb_loop+0x70/0xc0 [ 1236.781520][T26289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1236.781541][T26289] RIP: 0033:0x7f7e5cf9e159 [ 1236.781579][T26289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1236.781599][T26289] RSP: 002b:00007f7e5dde6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1236.781624][T26289] RAX: ffffffffffffffda RBX: 00007f7e5d225fa0 RCX: 00007f7e5cf9e159 [ 1236.781641][T26289] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 1236.781655][T26289] RBP: 00007f7e5dde6090 R08: 0000000000000000 R09: 0000000000000000 [ 1236.781669][T26289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1236.781683][T26289] R13: 00007f7e5d226038 R14: 00007f7e5d225fa0 R15: 00007f7e5d34fa48 [ 1236.781727][T26289] [ 1236.826190][T26306] IPVS: using max 27 ests per chain, 64800 per kthread [ 1237.653367][T14442] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1237.803604][T14442] usb 3-1: Using ep0 maxpacket: 16 [ 1237.805612][T14442] usb 3-1: New USB device found, idVendor=0cad, idProduct=9011, bcdDevice=a6.4a [ 1237.807575][T14442] usb 3-1: config 8 has an invalid interface number: 166 but max is 2 [ 1237.807607][T14442] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1237.807629][T14442] usb 3-1: config 8 has 1 interface, different from the descriptor's value: 3 [ 1237.807653][T14442] usb 3-1: config 8 has no interface number 0 [ 1237.807703][T14442] usb 3-1: config 8 interface 166 altsetting 127 has an invalid descriptor for endpoint zero, skipping [ 1237.807728][T14442] usb 3-1: config 8 interface 166 altsetting 127 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 1237.807767][T14442] usb 3-1: config 8 interface 166 altsetting 127 has 5 endpoint descriptors, different from the interface descriptor's value: 12 [ 1237.807797][T14442] usb 3-1: config 8 interface 166 has no altsetting 0 [ 1237.811534][T14442] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1237.811592][T14442] usb 3-1: Product: 㢼뭩堌ﲣ㤬ퟦꁹ鐩⩳柑晉ꁱ⓬銨쭑畨偠젖蔧냗芫귬㜏꫌쏸㔨齵斸톱㻅⮎稺Ს⛫橼쾁賷㹋碎绹쁠峎詌蚧㢒헣舗㛆㯛뀷᭮㵑ᖈﰾ࿀鱫괼섶㨆ሿཀྵ粯웓敃鏖㘥拺龶V统ꐨᚾ뷘㭺鷤鷽宏ਮ硩崪篭䶓냴᪌媉䄁ཆסけㄘ쁩簁傜奠મࣵ [ 1237.811631][T14442] usb 3-1: Manufacturer: ⠊ [ 1237.811649][T14442] usb 3-1: SerialNumber: 웮ﯹᒴ㠭‷쒁鴉哆졯볩땕倡鍠躥냏䋋줐⇴剝⎃鴍Ƃ䜉뀸⃜듣鐫剷皊六᜘턹飍擦䯫퓣㨯綖ჺ঳녃玄귈ᔇ쩁⯧ᓑ瑥⟔䔢흑暈ᰰ綩ⰛⰓ켻忩몸֤啡⦑蘽ᖄ鍘亪㴰झ真褤−恂悻犈卅捘㮶屣厐◪⒛铅넞堉풃歄畚聲ﺟ堮ᕗ媑첥킝 [ 1238.375429][T26338] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5013'. [ 1238.438046][T26339] netlink: 'syz.5.5013': attribute type 10 has an invalid length. [ 1238.653971][T26336] fuse: fd is not a fuse device [ 1238.808311][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.808376][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.951188][T26339] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1238.963692][T26339] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1240.344306][T14442] usb_serial_simple 3-1:8.166: motorola_tetra converter detected [ 1240.358863][T14442] usb 3-1: motorola_tetra converter now attached to ttyUSB0 [ 1240.386823][T14442] usb 3-1: USB disconnect, device number 81 [ 1240.422608][T14442] motorola_tetra ttyUSB0: motorola_tetra converter now disconnected from ttyUSB0 [ 1240.435354][T14442] usb_serial_simple 3-1:8.166: device disconnected [ 1240.472948][T26416] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5022'. [ 1240.647928][T26416] veth5: entered promiscuous mode [ 1241.511958][T25019] wacom 0003:056A:003F.003F: hidraw1: USB HID v0.00 Gamepad [syz0] on syz0 [ 1241.714807][T26494] tipc: Enabling of bearer rejected, already enabled [ 1243.262919][T26512] program syz.2.5035 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1243.272961][T26512] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1243.743402][T14452] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1243.903097][T14452] usb 6-1: Using ep0 maxpacket: 16 [ 1243.903825][T14452] usb 6-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00 [ 1243.905072][T14452] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1243.905135][T14452] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1243.905168][T14452] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1243.905205][T14452] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1243.910640][T14452] usb 6-1: config 0 descriptor?? [ 1244.365510][T14452] input: HID 04b4:bca1 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:04B4:BCA1.0040/input/input101 [ 1244.384995][T14442] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1244.498164][T14452] cypress 0003:04B4:BCA1.0040: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 04b4:bca1] on usb-dummy_hcd.5-1/input0 [ 1244.544499][T14442] usb 3-1: Using ep0 maxpacket: 32 [ 1244.548770][T14442] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1244.567932][T14442] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 1244.567965][T14442] usb 3-1: config 0 has no interface number 0 [ 1244.568009][T14442] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1244.568040][T14442] usb 3-1: config 0 interface 85 has no altsetting 0 [ 1244.606783][T14442] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1244.606817][T14442] usb 3-1: Product: syz [ 1244.606834][T14442] usb 3-1: Manufacturer: syz [ 1244.606852][T14442] usb 3-1: SerialNumber: syz [ 1244.632336][T14442] usb 3-1: config 0 descriptor?? [ 1244.870670][T26549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1244.884082][T26549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1244.891132][T26549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1244.891773][T26549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1244.929531][T26577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1244.930975][T26577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1245.015719][T14442] appletouch 3-1:0.85: Failed to read mode from device. [ 1245.015932][T14442] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 1245.054137][T26549] ovs-dp0: entered promiscuous mode [ 1245.493501][T14442] usb 3-1: USB disconnect, device number 82 [ 1245.658278][T26613] xt_hashlimit: size too large, truncated to 1048576 [ 1246.136399][T26629] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5053'. [ 1246.519772][T14442] usb 6-1: USB disconnect, device number 35 [ 1247.287038][T26671] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5060'. [ 1247.343234][T26675] Option 'dnserror' to dns_resolver key: bad/missing value [ 1248.126590][T26690] syzkaller0: entered promiscuous mode [ 1248.126616][T26690] syzkaller0: entered allmulticast mode [ 1249.245935][T26748] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5076'. [ 1249.245985][T26748] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5076'. [ 1249.265982][T24300] cxacru 4-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 1250.416883][T26786] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5085'. [ 1250.416902][T26786] netlink: 39 bytes leftover after parsing attributes in process `syz.7.5085'. [ 1251.104086][T13452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1251.104111][T13452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1251.233212][T13571] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1251.233230][T13571] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1251.655154][T26803] syz.7.5089 (26803): drop_caches: 2 [ 1251.657672][T26802] syz.7.5089 (26802): drop_caches: 2 [ 1251.658094][T26802] syz.7.5089 (26802): drop_caches: 2 [ 1251.743441][ T31] kauditd_printk_skb: 26 callbacks suppressed [ 1251.743458][ T31] audit: type=1326 audit(1790551696.262:5269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26808 comm="syz.2.5091" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e5cf9e159 code=0x7ffc0000 [ 1251.745384][ T31] audit: type=1326 audit(1790551696.272:5270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26808 comm="syz.2.5091" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e5cf9e159 code=0x7ffc0000 [ 1251.821178][ T31] audit: type=1326 audit(1790551696.342:5271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26808 comm="syz.2.5091" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f7e5cf9e159 code=0x7ffc0000 [ 1251.821238][ T31] audit: type=1326 audit(1790551696.342:5272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26808 comm="syz.2.5091" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e5cf9e159 code=0x7ffc0000 [ 1251.821295][ T31] audit: type=1326 audit(1790551696.342:5273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26808 comm="syz.2.5091" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e5cf9e159 code=0x7ffc0000 [ 1251.882961][ T31] audit: type=1326 audit(1790551696.362:5274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26808 comm="syz.2.5091" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7f7e5cf9e159 code=0x7ffc0000 [ 1251.883255][ T31] audit: type=1326 audit(1790551696.362:5275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26808 comm="syz.2.5091" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e5cf9e159 code=0x7ffc0000 [ 1252.349486][T26819] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1252.391883][T26819] nvme_fabrics: unknown parameter or missing value '#! 1R?&n%~[6=p͊yz\Uj@5NfWrs)q' in ctrl creation request [ 1252.746625][T26822] FAULT_INJECTION: forcing a failure. [ 1252.746625][T26822] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1252.746656][T26822] CPU: 0 UID: 0 PID: 26822 Comm: syz.2.5095 Tainted: G L syzkaller #0 PREEMPT(full) [ 1252.746678][T26822] Tainted: [L]=SOFTLOCKUP [ 1252.746684][T26822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1252.746695][T26822] Call Trace: [ 1252.746701][T26822] [ 1252.746709][T26822] dump_stack_lvl+0xe8/0x150 [ 1252.746738][T26822] should_fail_ex+0x410/0x560 [ 1252.746762][T26822] _copy_from_user+0x2d/0xb0 [ 1252.746786][T26822] copy_from_bpfptr+0x5c/0x90 [ 1252.746808][T26822] bpf_prog_load+0xcdb/0x1c20 [ 1252.746841][T26822] ? __pfx_bpf_prog_load+0x10/0x10 [ 1252.746879][T26822] __sys_bpf+0xd0d/0xd90 [ 1252.746904][T26822] ? __pfx___sys_bpf+0x10/0x10 [ 1252.746932][T26822] ? __fget_files+0x2a/0x420 [ 1252.746969][T26822] ? ksys_write+0x242/0x270 [ 1252.746987][T26822] ? __pfx_ksys_write+0x10/0x10 [ 1252.747016][T26822] __x64_sys_bpf+0xba/0xd0 [ 1252.747036][T26822] do_syscall_64+0x166/0x520 [ 1252.747060][T26822] ? trace_irq_disable+0x3b/0x140 [ 1252.747077][T26822] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1252.747094][T26822] ? clear_bhb_loop+0x70/0xc0 [ 1252.747114][T26822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1252.747130][T26822] RIP: 0033:0x7f7e5cf9e159 [ 1252.747145][T26822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1252.747159][T26822] RSP: 002b:00007f7e5dde6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1252.747176][T26822] RAX: ffffffffffffffda RBX: 00007f7e5d225fa0 RCX: 00007f7e5cf9e159 [ 1252.747188][T26822] RDX: 0000000000000094 RSI: 00002000000013c0 RDI: 0000000000000005 [ 1252.747199][T26822] RBP: 00007f7e5dde6090 R08: 0000000000000000 R09: 0000000000000000 [ 1252.747209][T26822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1252.747219][T26822] R13: 00007f7e5d226038 R14: 00007f7e5d225fa0 R15: 00007f7e5d34fa48 [ 1252.747243][T26822] [ 1253.331822][T26835] FAULT_INJECTION: forcing a failure. [ 1253.331822][T26835] name failslab, interval 1, probability 0, space 0, times 0 [ 1253.331862][T26835] CPU: 0 UID: 0 PID: 26835 Comm: syz.5.5098 Tainted: G L syzkaller #0 PREEMPT(full) [ 1253.331893][T26835] Tainted: [L]=SOFTLOCKUP [ 1253.331903][T26835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1253.331918][T26835] Call Trace: [ 1253.331927][T26835] [ 1253.331937][T26835] dump_stack_lvl+0xe8/0x150 [ 1253.331977][T26835] should_fail_ex+0x410/0x560 [ 1253.332011][T26835] should_failslab+0xa8/0x100 [ 1253.332044][T26835] __kmalloc_cache_noprof+0xa3/0x600 [ 1253.332071][T26835] ? __kmalloc_cache_noprof+0x14d/0x600 [ 1253.332096][T26835] ? sctp_add_bind_addr+0x8c/0x370 [ 1253.332116][T26835] ? sctp_add_bind_addr+0x8c/0x370 [ 1253.332140][T26835] sctp_add_bind_addr+0x8c/0x370 [ 1253.332163][T26835] sctp_copy_local_addr_list+0x31a/0x4e0 [ 1253.332186][T26835] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 1253.332206][T26835] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1253.332228][T26835] ? sctp_v6_is_any+0x64/0x80 [ 1253.332256][T26835] ? sctp_copy_one_addr+0x93/0x360 [ 1253.332278][T26835] sctp_bind_addr_copy+0xb3/0x3c0 [ 1253.332299][T26835] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1253.332330][T26835] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1253.332358][T26835] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1253.332389][T26835] ? __local_bh_enable_ip+0xd6/0x140 [ 1253.332414][T26835] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1253.332449][T26835] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1253.332474][T26835] sctp_sendmsg+0x159b/0x2d00 [ 1253.332511][T26835] ? kstrtouint+0x6e/0xe0 [ 1253.332532][T26835] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1253.332560][T26835] ? irqentry_exit+0x218/0x910 [ 1253.332588][T26835] ? irqentry_exit+0x218/0x910 [ 1253.332622][T26835] ? aa_sock_msg_perm+0xf5/0x210 [ 1253.332646][T26835] ? sock_rps_record_flow+0x19/0x350 [ 1253.332672][T26835] ? inet_sendmsg+0x298/0x320 [ 1253.332695][T26835] ? __pfx_inet_sendmsg+0x10/0x10 [ 1253.332715][T26835] sock_sendmsg_nosec+0x10e/0x180 [ 1253.332740][T26835] __sys_sendto+0x408/0x5a0 [ 1253.332765][T26835] ? ksys_write+0x1e6/0x270 [ 1253.332786][T26835] ? __pfx___sys_sendto+0x10/0x10 [ 1253.332810][T26835] ? __mutex_unlock_slowpath+0x731/0x900 [ 1253.332860][T26835] ? __pfx_ksys_write+0x10/0x10 [ 1253.332883][T26835] __x64_sys_sendto+0xde/0x100 [ 1253.332911][T26835] do_syscall_64+0x166/0x520 [ 1253.332939][T26835] ? trace_irq_disable+0x3b/0x140 [ 1253.332959][T26835] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1253.332979][T26835] ? clear_bhb_loop+0x70/0xc0 [ 1253.333005][T26835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1253.333029][T26835] RIP: 0033:0x7fb09979e159 [ 1253.333050][T26835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1253.333069][T26835] RSP: 002b:00007fb09a5b9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1253.333093][T26835] RAX: ffffffffffffffda RBX: 00007fb099a25fa0 RCX: 00007fb09979e159 [ 1253.333111][T26835] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 1253.333127][T26835] RBP: 00007fb09a5b9090 R08: 0000200000000080 R09: 000000000000001c [ 1253.333143][T26835] R10: 0000000000000051 R11: 0000000000000246 R12: 0000000000000002 [ 1253.333158][T26835] R13: 00007fb099a26038 R14: 00007fb099a25fa0 R15: 00007fb099b4fa48 [ 1253.333195][T26835] [ 1255.343420][T26873] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5107'. [ 1256.070793][ T31] audit: type=1800 audit(1790551700.592:5276): pid=26872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5107" name="bus" dev="ramfs" ino=150916 res=0 errno=0 [ 1256.850765][ T31] audit: type=1326 audit(1790551701.372:5277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26884 comm="syz.5.5111" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09979e159 code=0x7ffc0000 [ 1256.851217][ T31] audit: type=1326 audit(1790551701.372:5278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26884 comm="syz.5.5111" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09979e159 code=0x7ffc0000 [ 1256.852284][ T31] audit: type=1326 audit(1790551701.372:5279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26884 comm="syz.5.5111" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fb09979e159 code=0x7ffc0000 [ 1256.852398][ T31] audit: type=1326 audit(1790551701.372:5280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26884 comm="syz.5.5111" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09979e159 code=0x7ffc0000 [ 1256.852611][ T31] audit: type=1326 audit(1790551701.372:5281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26884 comm="syz.5.5111" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09979e159 code=0x7ffc0000 [ 1256.885637][ T31] audit: type=1326 audit(1790551701.412:5282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26884 comm="syz.5.5111" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fb09979e159 code=0x7ffc0000 [ 1256.885802][ T31] audit: type=1326 audit(1790551701.412:5283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26884 comm="syz.5.5111" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09979e159 code=0x7ffc0000 [ 1256.896583][ T31] audit: type=1326 audit(1790551701.412:5284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26884 comm="syz.5.5111" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fb09979e159 code=0x7ffc0000 [ 1256.896766][ T31] audit: type=1326 audit(1790551701.412:5285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26884 comm="syz.5.5111" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09979e159 code=0x7ffc0000 [ 1256.909225][ T31] audit: type=1326 audit(1790551701.422:5286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26884 comm="syz.5.5111" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09979e159 code=0x7ffc0000 [ 1257.271014][T14436] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1257.437409][T14436] usb 6-1: Using ep0 maxpacket: 16 [ 1257.450474][T14436] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1257.461067][T14436] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1257.479692][T14436] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1257.479713][T14436] usb 6-1: Product: syz [ 1257.479726][T14436] usb 6-1: Manufacturer: syz [ 1257.479737][T14436] usb 6-1: SerialNumber: syz [ 1257.537854][T14436] usb 6-1: config 0 descriptor?? [ 1257.580077][T14436] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 1257.595459][T14436] usb 6-1: Detected FT232R [ 1257.789227][T14436] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1257.847276][T26885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1257.847875][T26885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1257.964078][T26909] input: syz0 as /devices/virtual/input/input103 [ 1257.964190][T26909] input: failed to attach handler leds to device input103, error: -6 [ 1258.012603][T26912] trusted_key: encrypted_key: insufficient parameters specified [ 1258.390239][T26911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1258.403454][T26911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1258.452203][ T4933] Bluetooth: hci4: unexpected event for opcode 0x0035 [ 1258.513206][T25019] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1258.673226][T25019] usb 3-1: Using ep0 maxpacket: 32 [ 1258.674101][T25019] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1258.675430][T25019] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1258.675453][T25019] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1258.675507][T25019] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1258.678520][T25019] usb 3-1: config 0 descriptor?? [ 1258.682716][T25019] hub 3-1:0.0: USB hub found [ 1258.904440][T25019] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1259.182865][T26953] fuse: fd is not a fuse device [ 1259.223447][T14459] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1259.316136][T25019] hid-generic 0003:046D:C31C.0041: unknown main item tag 0x0 [ 1259.383114][T14459] usb 4-1: Using ep0 maxpacket: 8 [ 1259.384338][T14459] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1259.386015][T14459] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1259.386068][T14459] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1259.386097][T14459] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1259.386117][T14459] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1259.386178][T14459] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1259.386225][T14459] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1259.483135][T26957] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5124'. [ 1259.508104][T26957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5124'. [ 1259.617104][T14459] usb 4-1: GET_CAPABILITIES returned 0 [ 1259.617185][T14459] usbtmc 4-1:16.0: can't read capabilities [ 1259.816504][T25019] hid-generic 0003:046D:C31C.0041: hidraw1: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.2-1/input0 [ 1259.857488][T25019] usb 3-1: USB disconnect, device number 83 [ 1259.912277][T14459] usb 4-1: USB disconnect, device number 82 [ 1259.991485][T14436] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71 [ 1260.039674][T14436] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1260.070467][T26976] fido_id[26976]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1260.106050][T14436] usb 6-1: USB disconnect, device number 36 [ 1260.150313][T14436] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1260.174411][T14436] ftdi_sio 6-1:0.0: device disconnected [ 1260.451974][T27016] IPVS: Unknown mcast interface: macvtap0 [ 1261.364683][ T8635] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 1261.515627][ T8635] usb 6-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 1261.535899][ T8635] usb 6-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1261.535928][ T8635] usb 6-1: Product: syz [ 1261.535944][ T8635] usb 6-1: Manufacturer: syz [ 1261.535962][ T8635] usb 6-1: SerialNumber: syz [ 1261.564235][ T8635] usb 6-1: config 0 descriptor?? [ 1262.140721][T27048] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5135'. [ 1262.159230][T27048] fuse: Unknown parameter 'mounts' [ 1263.194571][T25019] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1263.355896][T25019] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1263.356833][T25019] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1263.356903][T25019] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1263.356956][T25019] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1263.359403][T25019] usb 4-1: config 0 descriptor?? [ 1263.413923][T25019] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1263.564869][T19614] usb 4-1: USB disconnect, device number 83 [ 1264.407548][T27101] netlink: 84 bytes leftover after parsing attributes in process `syz.5.5143'. [ 1264.455450][T27109] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5144'. [ 1264.461641][T27103] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5143'. [ 1264.659669][T27114] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5145'. [ 1269.829613][ T8635] peak_usb 6-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 1269.829661][ T8635] peak_usb 6-1:0.0: unable to read PCAN-Chip USB firmware info (err -71) [ 1269.913777][ T8635] peak_usb 6-1:0.0: probe with driver peak_usb failed with error -71 [ 1269.952636][ T8635] usb 6-1: USB disconnect, device number 37 [ 1270.305652][ T8635] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1270.404733][T27173] syz.3.5150 (27173): drop_caches: 2 [ 1270.457662][T27173] input: syz1 as /devices/virtual/input/input104 [ 1270.505603][ T31] kauditd_printk_skb: 55 callbacks suppressed [ 1270.505625][ T31] audit: type=1326 audit(1790551715.032:5342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27160 comm="syz.3.5150" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74d19e159 code=0x7ffc0000 [ 1270.511614][ T31] audit: type=1326 audit(1790551715.032:5343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27160 comm="syz.3.5150" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74d19e159 code=0x7ffc0000 [ 1270.993117][T14442] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1270.999369][T27222] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5155'. [ 1271.155086][T14442] usb 4-1: New USB device found, idVendor=041e, idProduct=30df, bcdDevice= 0.40 [ 1271.160463][T14442] usb 4-1: config 1 has an invalid descriptor of length 209, skipping remainder of the config [ 1271.160494][T14442] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1271.195897][T14442] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1271.195928][T14442] usb 4-1: Product: syz [ 1271.195945][T14442] usb 4-1: Manufacturer: syz [ 1271.195961][T14442] usb 4-1: SerialNumber: syz [ 1271.333244][ T8635] usb 6-1: device descriptor read/64, error -71 [ 1271.583308][ T8635] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1271.771827][ T8635] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1271.789096][ T8635] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1271.789135][ T8635] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1271.789170][ T8635] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1271.843608][ T8635] usb 6-1: config 0 descriptor?? [ 1271.871961][ T8635] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1271.927505][T27239] fuse: fd is not a fuse device [ 1272.048785][ T8635] usb 6-1: USB disconnect, device number 39 [ 1272.236414][T14442] usb 4-1: cannot find UAC_HEADER [ 1272.352498][T14442] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1272.367711][T14442] usb 4-1: USB disconnect, device number 84 [ 1272.398207][T23213] udevd[23213]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1273.293634][T27297] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5167'. [ 1273.700028][T14442] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1273.873168][T14442] usb 4-1: Using ep0 maxpacket: 8 [ 1273.876300][T14442] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1273.879194][T14442] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 1273.879224][T14442] usb 4-1: config 179 has no interface number 0 [ 1273.879268][T14442] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1273.879297][T14442] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1273.879328][T14442] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1273.879356][T14442] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1273.879384][T14442] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1273.879428][T14442] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1273.883458][T27303] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1274.099383][T27327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1274.099912][T27327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1274.129185][T14442] usb 4-1: USB disconnect, device number 85 [ 1274.129251][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1274.129300][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1274.519394][T14441] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1274.674529][T14441] usb 6-1: Using ep0 maxpacket: 32 [ 1274.676269][T14441] usb 6-1: New USB device found, idVendor=0853, idProduct=0313, bcdDevice= 0.00 [ 1274.679316][T14441] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1274.679359][T14441] usb 6-1: can't read configurations, error -61 [ 1274.814764][T14441] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1274.983917][T14441] usb 6-1: Using ep0 maxpacket: 32 [ 1274.987407][T14441] usb 6-1: New USB device found, idVendor=0853, idProduct=0313, bcdDevice= 0.00 [ 1275.019248][T14441] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1275.019297][T14441] usb 6-1: can't read configurations, error -61 [ 1275.019656][T14441] usb usb6-port1: attempt power cycle [ 1275.094751][T27362] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5179'. [ 1275.161599][T27357] ALSA: mixer_oss: invalid OSS volume 'tunl0' [ 1275.353158][T14441] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1275.376182][T27369] bridge0: port 2(bridge_slave_1) entered disabled state [ 1275.376450][T27369] bridge0: port 1(bridge_slave_0) entered disabled state [ 1275.386780][T14441] usb 6-1: Using ep0 maxpacket: 32 [ 1275.390303][T14441] usb 6-1: New USB device found, idVendor=0853, idProduct=0313, bcdDevice= 0.00 [ 1275.426609][T14441] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1275.426654][T14441] usb 6-1: can't read configurations, error -61 [ 1275.467804][T27376] fuse: fd is not a fuse device [ 1275.556880][T14441] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1275.579258][T14441] usb 6-1: Using ep0 maxpacket: 32 [ 1275.580729][T14441] usb 6-1: New USB device found, idVendor=0853, idProduct=0313, bcdDevice= 0.00 [ 1275.586813][T14441] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1275.586914][T14441] usb 6-1: can't read configurations, error -61 [ 1275.589692][T14441] usb usb6-port1: unable to enumerate USB device [ 1275.859374][T27369] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1275.903424][T27369] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1276.903565][T20120] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1276.910031][T13455] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1276.910098][T13455] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1276.910139][T13455] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1277.107256][T27407] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5185'. [ 1277.198548][T27416] netlink: del zone limit has 4 unknown bytes [ 1277.318780][T27409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1277.319252][T27409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1277.403562][ T3640] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1277.929044][T27444] binder: BINDER_SET_CONTEXT_MGR already set [ 1277.929071][T27444] binder: 27442:27444 ioctl 4018620d 200000000040 returned -16 [ 1277.951900][T27444] syz.2.5192 (27444): drop_caches: 2 [ 1278.053285][T27391] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1278.064691][ T8635] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1278.204672][T27391] usb 6-1: Using ep0 maxpacket: 16 [ 1278.205706][T27391] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1278.207174][T27391] usb 6-1: config index 0 descriptor too short (expected 51443, got 18) [ 1278.209723][T27391] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1278.209752][T27391] usb 6-1: Product: syz [ 1278.209769][T27391] usb 6-1: Manufacturer: syz [ 1278.209786][T27391] usb 6-1: SerialNumber: syz [ 1278.241141][ T8635] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 1278.266785][ T8635] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1278.266851][ T8635] usb 4-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1278.266883][ T8635] usb 4-1: config 2 interface 0 has no altsetting 0 [ 1278.317727][ T8635] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1278.317759][ T8635] usb 4-1: Product: syz [ 1278.317775][ T8635] usb 4-1: Manufacturer: syz [ 1278.317792][ T8635] usb 4-1: SerialNumber: syz [ 1278.319947][T27391] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1278.319974][T27391] r8152-cfgselector 6-1: config 0 descriptor?? [ 1278.532081][T27391] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1278.547534][T27391] r8152-cfgselector 6-1: No union descriptors [ 1278.576395][T27448] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5194'. [ 1278.625668][ T8635] usb 4-1: USB disconnect, device number 86 [ 1278.808367][T27496] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5195'. [ 1278.832143][T27496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1278.843493][T27496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1278.844049][T27497] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:256 [ 1278.844893][T27497] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1278.878254][T27496] ip_tables: iptables: counters copy to user failed while replacing table [ 1278.931940][T27453] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 1278.944256][ T8635] r8152-cfgselector 6-1: USB disconnect, device number 44 [ 1279.036002][ T4933] Bluetooth: hci4: unexpected event for opcode 0x2039 [ 1279.549601][T27521] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5205'. [ 1279.770302][T27537] fuse: fd is not a fuse device [ 1280.034782][ T31] audit: type=1326 audit(1790551724.562:5344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27547 comm="syz.1.5210" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dce99e159 code=0x7ffc0000 [ 1280.035382][ T31] audit: type=1326 audit(1790551724.562:5345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27547 comm="syz.1.5210" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dce99e159 code=0x7ffc0000 [ 1280.038740][ T31] audit: type=1326 audit(1790551724.562:5346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27547 comm="syz.1.5210" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f5dce99e159 code=0x7ffc0000 [ 1280.038880][ T31] audit: type=1326 audit(1790551724.562:5347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27547 comm="syz.1.5210" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dce99e159 code=0x7ffc0000 [ 1280.039032][ T31] audit: type=1326 audit(1790551724.562:5348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27547 comm="syz.1.5210" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dce99e159 code=0x7ffc0000 [ 1280.041068][ T31] audit: type=1326 audit(1790551724.562:5349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27547 comm="syz.1.5210" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5dce99e159 code=0x7ffc0000 [ 1280.069651][ T31] audit: type=1326 audit(1790551724.592:5350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27547 comm="syz.1.5210" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dce99e159 code=0x7ffc0000 [ 1280.136049][ T31] audit: type=1326 audit(1790551724.652:5351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27547 comm="syz.1.5210" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5dce99e159 code=0x7ffc0000 [ 1280.149114][ T31] audit: type=1326 audit(1790551724.652:5352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27547 comm="syz.1.5210" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dce99e159 code=0x7ffc0000 [ 1280.149282][ T31] audit: type=1326 audit(1790551724.652:5353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27547 comm="syz.1.5210" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f5dce99e159 code=0x7ffc0000 [ 1282.104138][T14436] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1282.253075][T14436] usb 4-1: Using ep0 maxpacket: 16 [ 1282.254938][T14436] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 1282.261907][T14436] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1282.262087][T14436] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1282.316282][T14436] usb 4-1: config 0 descriptor?? [ 1283.923633][T27391] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1284.073386][T27391] usb 3-1: Using ep0 maxpacket: 8 [ 1284.074505][T27391] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1284.076199][T27391] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1284.076252][T27391] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1284.076276][T27391] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1284.076302][T27391] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1284.076320][T27391] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1284.076373][T27391] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1284.283771][T27603] No such timeout policy "syz1" [ 1284.306769][T27605] fuse: fd is not a fuse device [ 1284.306850][T27391] usb 3-1: GET_CAPABILITIES returned 0 [ 1284.306897][T27391] usbtmc 3-1:16.0: can't read capabilities [ 1284.513503][ T8635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1284.523304][T13455] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1284.523358][T13455] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1284.523427][T13455] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1284.523467][T13455] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1284.785084][ T8635] usb 3-1: USB disconnect, device number 85 [ 1284.932746][T14436] usbhid 4-1:0.0: can't add hid device: -71 [ 1284.932861][T14436] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1284.965286][T14436] usb 4-1: USB disconnect, device number 87 [ 1285.043510][ T8635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1285.453446][T13567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1285.551618][T27677] FAULT_INJECTION: forcing a failure. [ 1285.551618][T27677] name failslab, interval 1, probability 0, space 0, times 0 [ 1285.551648][T27677] CPU: 0 UID: 0 PID: 27677 Comm: syz.7.5228 Tainted: G L syzkaller #0 PREEMPT(full) [ 1285.551670][T27677] Tainted: [L]=SOFTLOCKUP [ 1285.551677][T27677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1285.551687][T27677] Call Trace: [ 1285.551693][T27677] [ 1285.551701][T27677] dump_stack_lvl+0xe8/0x150 [ 1285.551730][T27677] should_fail_ex+0x410/0x560 [ 1285.551755][T27677] should_failslab+0xa8/0x100 [ 1285.551779][T27677] __kvmalloc_node_noprof+0x176/0x820 [ 1285.551801][T27677] ? __kvmalloc_node_noprof+0x345/0x820 [ 1285.551820][T27677] ? io_alloc_cache_init+0x42/0x140 [ 1285.551837][T27677] ? io_alloc_cache_init+0x42/0x140 [ 1285.551861][T27677] io_alloc_cache_init+0x42/0x140 [ 1285.551881][T27677] io_ring_ctx_alloc+0x57d/0xb80 [ 1285.551920][T27677] io_uring_create+0x50/0x990 [ 1285.551949][T27677] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 1285.551969][T27677] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1285.551996][T27677] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 1285.552028][T27677] ? __pfx_ksys_write+0x10/0x10 [ 1285.552052][T27677] do_syscall_64+0x166/0x520 [ 1285.552074][T27677] ? trace_irq_disable+0x3b/0x140 [ 1285.552115][T27677] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1285.552140][T27677] ? clear_bhb_loop+0x70/0xc0 [ 1285.552169][T27677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1285.552192][T27677] RIP: 0033:0x7f36acd9e159 [ 1285.552217][T27677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1285.552238][T27677] RSP: 002b:00007f36adc57ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1285.552264][T27677] RAX: ffffffffffffffda RBX: 0000200000000808 RCX: 00007f36acd9e159 [ 1285.552283][T27677] RDX: 0000200000000888 RSI: 0000200000000808 RDI: 0000000000000a22 [ 1285.552299][T27677] RBP: 0000200000000800 R08: 0000200000000340 R09: 0000000000000000 [ 1285.552314][T27677] R10: 0000200000000890 R11: 0000000000000206 R12: 0000200000000888 [ 1285.552337][T27677] R13: 0000200000000890 R14: 00007f36adc57fd8 R15: 0000000000000000 [ 1285.552370][T27677] [ 1285.870023][ T31] kauditd_printk_skb: 56 callbacks suppressed [ 1285.870047][ T31] audit: type=1326 audit(1790551730.392:5410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27680 comm="syz.7.5229" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36acd9e159 code=0x7ffc0000 [ 1285.870721][ T31] audit: type=1326 audit(1790551730.392:5411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27680 comm="syz.7.5229" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36acd9e159 code=0x7ffc0000 [ 1285.871596][ T31] audit: type=1326 audit(1790551730.392:5412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27680 comm="syz.7.5229" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f36acd9e159 code=0x7ffc0000 [ 1285.871757][ T31] audit: type=1326 audit(1790551730.392:5413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27680 comm="syz.7.5229" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36acd9e159 code=0x7ffc0000 [ 1285.872457][ T31] audit: type=1326 audit(1790551730.392:5414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27680 comm="syz.7.5229" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f36acd9e159 code=0x7ffc0000 [ 1285.872797][ T31] audit: type=1326 audit(1790551730.392:5415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27680 comm="syz.7.5229" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36acd9e159 code=0x7ffc0000 [ 1285.904178][ T31] audit: type=1326 audit(1790551730.422:5416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27680 comm="syz.7.5229" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36acd9e159 code=0x7ffc0000 [ 1285.955693][ T31] audit: type=1326 audit(1790551730.422:5417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27680 comm="syz.7.5229" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f36acd9e159 code=0x7ffc0000 [ 1285.955847][ T31] audit: type=1326 audit(1790551730.452:5418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27680 comm="syz.7.5229" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36acd9e159 code=0x7ffc0000 [ 1285.970671][ T31] audit: type=1326 audit(1790551730.462:5419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27680 comm="syz.7.5229" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36acd9e159 code=0x7ffc0000 [ 1286.484667][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1286.485630][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1286.533101][T27393] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1286.648775][T27692] netlink: 7 bytes leftover after parsing attributes in process `syz.5.5231'. [ 1286.713869][T27393] usb 4-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=ca.78 [ 1286.725532][T27393] usb 4-1: config 2 has an invalid interface number: 184 but max is 0 [ 1286.725609][T27393] usb 4-1: config 2 has no interface number 0 [ 1286.725755][T27393] usb 4-1: config 2 interface 184 altsetting 13 endpoint 0x82 has an invalid bInterval 165, changing to 11 [ 1286.725845][T27393] usb 4-1: config 2 interface 184 altsetting 13 endpoint 0x82 has invalid maxpacket 33614, setting to 1024 [ 1286.725922][T27393] usb 4-1: config 2 interface 184 has no altsetting 0 [ 1286.741357][T27393] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1286.741433][T27393] usb 4-1: Product: syz [ 1286.741477][T27393] usb 4-1: Manufacturer: syz [ 1286.741522][T27393] usb 4-1: SerialNumber: syz [ 1286.844305][T27702] FAULT_INJECTION: forcing a failure. [ 1286.844305][T27702] name failslab, interval 1, probability 0, space 0, times 0 [ 1286.844346][T27702] CPU: 1 UID: 0 PID: 27702 Comm: syz.5.5232 Tainted: G L syzkaller #0 PREEMPT(full) [ 1286.844377][T27702] Tainted: [L]=SOFTLOCKUP [ 1286.844387][T27702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1286.844402][T27702] Call Trace: [ 1286.844411][T27702] [ 1286.844422][T27702] dump_stack_lvl+0xe8/0x150 [ 1286.844463][T27702] should_fail_ex+0x410/0x560 [ 1286.844498][T27702] should_failslab+0xa8/0x100 [ 1286.844531][T27702] __kmalloc_noprof+0xfe/0x720 [ 1286.844561][T27702] ? aa_label_asxprint+0x70/0x130 [ 1286.844587][T27702] ? aa_label_asxprint+0x70/0x130 [ 1286.844620][T27702] aa_label_asxprint+0x70/0x130 [ 1286.844649][T27702] apparmor_lsmprop_to_secctx+0x9d/0x170 [ 1286.844687][T27702] audit_log_subj_ctx+0x11b/0x530 [ 1286.844728][T27702] ? __pfx_audit_log_subj_ctx+0x10/0x10 [ 1286.844771][T27702] ? apparmor_current_getlsmprop_subj+0xce/0x150 [ 1286.844807][T27702] audit_log_task_context+0x94/0xe0 [ 1286.844844][T27702] ? __pfx_audit_log_task_context+0x10/0x10 [ 1286.844881][T27702] ? audit_log_start+0x7fe/0xa10 [ 1286.844929][T27702] audit_log_task+0x19b/0x3d0 [ 1286.844963][T27702] ? __pfx_audit_log_task+0x10/0x10 [ 1286.845000][T27702] ? __raw_spin_lock_init+0x45/0x100 [ 1286.845040][T27702] audit_seccomp+0x85/0x190 [ 1286.845077][T27702] __seccomp_filter+0xd14/0x1de0 [ 1286.845120][T27702] ? __pfx___seccomp_filter+0x10/0x10 [ 1286.845155][T27702] ? fd_install+0x94/0x3d0 [ 1286.845186][T27702] ? fd_install+0x309/0x3d0 [ 1286.845223][T27702] ? anon_inode_getfd+0x135/0x1f0 [ 1286.845258][T27702] ? __se_sys_landlock_create_ruleset+0x500/0x5e0 [ 1286.845294][T27702] ? __pfx_ksys_write+0x10/0x10 [ 1286.845322][T27702] ? __seccomp_permit_syscall+0xe7/0x2b0 [ 1286.845354][T27702] do_syscall_64+0x11f/0x520 [ 1286.845385][T27702] ? trace_irq_disable+0x3b/0x140 [ 1286.845408][T27702] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1286.845431][T27702] ? clear_bhb_loop+0x70/0xc0 [ 1286.845459][T27702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1286.845483][T27702] RIP: 0033:0x7fb09975e98e [ 1286.845505][T27702] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1286.845525][T27702] RSP: 002b:00007fb09a5b8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1286.845549][T27702] RAX: ffffffffffffffda RBX: 00007fb09a5b96c0 RCX: 00007fb09975e98e [ 1286.845567][T27702] RDX: 000000000000000f RSI: 00007fb09a5b90a0 RDI: 0000000000000003 [ 1286.845582][T27702] RBP: 00007fb09a5b9090 R08: 0000000000000000 R09: 0000000000000000 [ 1286.845598][T27702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1286.845613][T27702] R13: 00007fb099a26038 R14: 00007fb099a25fa0 R15: 00007fb099b4fa48 [ 1286.845647][T27702] [ 1287.054985][ T8635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1287.107075][T14436] usb 3-1: new full-speed USB device number 86 using dummy_hcd [ 1287.296041][T14436] usb 3-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00 [ 1287.297068][T14436] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1287.297098][T14436] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1287.297134][T14436] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1287.335346][T14436] usb 3-1: config 0 descriptor?? [ 1287.350482][T27697] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1287.473586][ T8635] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1287.623833][ T8635] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1287.625211][ T8635] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1287.625264][ T8635] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1287.625342][ T8635] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1287.680040][ T8635] usb 6-1: config 0 descriptor?? [ 1287.697446][ T8635] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1287.765370][T27724] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5233'. [ 1287.768700][T14436] cypress 0003:04B4:BCA1.0042: unknown main item tag 0x0 [ 1287.768747][T14436] cypress 0003:04B4:BCA1.0042: unknown main item tag 0x0 [ 1287.768777][T14436] cypress 0003:04B4:BCA1.0042: unknown main item tag 0x0 [ 1287.768805][T14436] cypress 0003:04B4:BCA1.0042: unknown main item tag 0x0 [ 1287.768834][T14436] cypress 0003:04B4:BCA1.0042: unknown main item tag 0x0 [ 1287.768862][T14436] cypress 0003:04B4:BCA1.0042: unknown main item tag 0x0 [ 1287.768891][T14436] cypress 0003:04B4:BCA1.0042: unknown main item tag 0x0 [ 1287.768921][T14436] cypress 0003:04B4:BCA1.0042: unknown main item tag 0x0 [ 1287.768950][T14436] cypress 0003:04B4:BCA1.0042: unknown main item tag 0x0 [ 1287.768979][T14436] cypress 0003:04B4:BCA1.0042: unknown main item tag 0x0 [ 1287.876784][T14436] cypress 0003:04B4:BCA1.0042: hidraw1: USB HID v7f.fd Device [HID 04b4:bca1] on usb-dummy_hcd.2-1/input0 [ 1287.908518][T27391] usb 6-1: USB disconnect, device number 45 [ 1287.981770][ T3640] usb 3-1: USB disconnect, device number 86 [ 1288.151621][T27740] fido_id[27740]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1288.652295][ T4933] Bluetooth: hci0: unexpected event for opcode 0x0c24 [ 1289.856156][T27783] fuse: fd is not a fuse device [ 1290.043501][T27786] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1290.240689][T27393] usbtouchscreen 4-1:2.184: probe with driver usbtouchscreen failed with error -71 [ 1290.272559][T27393] usb 4-1: USB disconnect, device number 88 [ 1290.570077][T27810] fuse: fd is not a fuse device [ 1290.643901][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1291.033148][ T8635] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1291.184382][ T8635] usb 4-1: Using ep0 maxpacket: 8 [ 1291.190249][ T8635] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1291.190305][ T8635] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1291.191714][ T8635] usb 4-1: config 4 interface 0 has no altsetting 0 [ 1291.230464][ T8635] usb 4-1: string descriptor 0 read error: -22 [ 1291.230572][ T8635] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1291.259309][ T8635] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1291.272448][ T8635] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1291.307281][ T8635] dvb_usb_au6610 4-1:4.0: probe with driver dvb_usb_au6610 failed with error -23 [ 1291.332273][T14436] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1291.494769][T14436] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1291.496469][T14436] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1291.496526][T14436] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1291.496580][T14436] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1291.500371][T14436] usb 3-1: config 0 descriptor?? [ 1291.560234][T14436] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1291.705821][T14436] usb 3-1: USB disconnect, device number 87 [ 1292.040086][T27866] fuse: fd is not a fuse device [ 1292.457403][T27871] loop4: detected capacity change from 0 to 7 [ 1292.482089][T27871] Dev loop4: unable to read RDB block 7 [ 1292.482122][T27871] loop4: AHDI p1 p2 p3 [ 1292.482143][T27871] loop4: partition table partially beyond EOD, truncated [ 1292.482479][T27871] loop4: p1 start 1601398130 is beyond EOD, truncated [ 1292.482503][T27871] loop4: p2 start 1702059890 is beyond EOD, truncated [ 1292.690366][T27884] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5260'. [ 1292.767496][T27886] bond2: entered allmulticast mode [ 1292.767528][T27886] ip6gre1: entered allmulticast mode [ 1292.873188][T14436] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1293.024371][T14436] usb 3-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 1293.025472][T14436] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 1293.025500][T14436] usb 3-1: config 1 has no interface number 0 [ 1293.027764][T14436] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1293.027793][T14436] usb 3-1: Product: syz [ 1293.027809][T14436] usb 3-1: Manufacturer: syz [ 1293.027825][T14436] usb 3-1: SerialNumber: syz [ 1293.056901][T14436] usb 3-1: 3:0 : does not exist [ 1293.056978][T14436] usb 3-1: 3:0 : does not exist [ 1293.304333][T27901] sctp: [Deprecated]: syz.2.5259 (pid 27901) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1293.304333][T27901] Use struct sctp_sack_info instead [ 1293.377869][T14436] usb 3-1: USB disconnect, device number 88 [ 1293.763560][T14436] usb 4-1: USB disconnect, device number 89 [ 1293.787015][T27391] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1293.933165][T27391] usb 6-1: Using ep0 maxpacket: 32 [ 1293.934075][T27391] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1293.935193][T27391] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1293.935224][T27391] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1293.935263][T27391] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1293.939211][T27391] usb 6-1: config 0 descriptor?? [ 1293.998309][T27391] hub 6-1:0.0: USB hub found [ 1294.010391][T27933] FAULT_INJECTION: forcing a failure. [ 1294.010391][T27933] name failslab, interval 1, probability 0, space 0, times 0 [ 1294.010430][T27933] CPU: 0 UID: 0 PID: 27933 Comm: syz.3.5265 Tainted: G L syzkaller #0 PREEMPT(full) [ 1294.010462][T27933] Tainted: [L]=SOFTLOCKUP [ 1294.010471][T27933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1294.010485][T27933] Call Trace: [ 1294.010497][T27933] [ 1294.010508][T27933] dump_stack_lvl+0xe8/0x150 [ 1294.010548][T27933] should_fail_ex+0x410/0x560 [ 1294.010583][T27933] should_failslab+0xa8/0x100 [ 1294.010625][T27933] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 1294.010672][T27933] kmem_cache_alloc_noprof+0xa1/0x600 [ 1294.010696][T27933] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 1294.010730][T27933] ? kmem_cache_alloc_noprof+0x156/0x600 [ 1294.010754][T27933] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 1294.010797][T27933] __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 1294.010852][T27933] mmu_topup_memory_caches+0x21/0x170 [ 1294.010879][T27933] kvm_mmu_load+0x9d/0x21e0 [ 1294.010906][T27933] ? kvm_msr_allowed+0x9a/0x490 [ 1294.010929][T27933] ? kvm_msr_allowed+0x9a/0x490 [ 1294.010953][T27933] ? kvm_msr_allowed+0x9a/0x490 [ 1294.010975][T27933] ? kvm_msr_allowed+0x3f4/0x490 [ 1294.010998][T27933] ? kvm_msr_allowed+0x9a/0x490 [ 1294.011022][T27933] ? kvm_apic_has_interrupt+0x740/0x770 [ 1294.011067][T27933] vcpu_run+0x4f7e/0x7aa0 [ 1294.011124][T27933] ? update_se+0x90/0x1080 [ 1294.011200][T27933] ? __pfx_vcpu_run+0x10/0x10 [ 1294.011223][T27933] ? lock_acquire+0x115/0x350 [ 1294.011267][T27933] kvm_arch_vcpu_ioctl_run+0xe87/0x19c0 [ 1294.011310][T27933] ? kvm_arch_vcpu_ioctl_run+0x1f8/0x19c0 [ 1294.011349][T27933] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 1294.011382][T27933] kvm_vcpu_ioctl+0xa61/0xfd0 [ 1294.011414][T27933] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1294.011436][T27933] ? hook_file_ioctl+0x1f2/0x600 [ 1294.011489][T27933] ? __fget_files+0x2a/0x420 [ 1294.011528][T27933] ? __fget_files+0x2a/0x420 [ 1294.011560][T27933] ? __fget_files+0x3a2/0x420 [ 1294.011593][T27933] ? __fget_files+0x2a/0x420 [ 1294.011641][T27933] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1294.011676][T27933] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1294.011702][T27933] __se_sys_ioctl+0xfc/0x170 [ 1294.011732][T27933] do_syscall_64+0x166/0x520 [ 1294.011766][T27933] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1294.011791][T27933] ? clear_bhb_loop+0x70/0xc0 [ 1294.011829][T27933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1294.011854][T27933] RIP: 0033:0x7fb74d19e159 [ 1294.011875][T27933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1294.011896][T27933] RSP: 002b:00007fb74b3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1294.011920][T27933] RAX: ffffffffffffffda RBX: 00007fb74d425fa0 RCX: 00007fb74d19e159 [ 1294.011937][T27933] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 1294.011951][T27933] RBP: 00007fb74b3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1294.011967][T27933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1294.011980][T27933] R13: 00007fb74d426038 R14: 00007fb74d425fa0 R15: 00007fb74d54fa48 [ 1294.012017][T27933] [ 1294.317364][T27942] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5264'. [ 1294.471379][T27919] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5264'. [ 1294.502400][T27986] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5266'. [ 1294.502440][T27986] netlink: 'syz.2.5266': attribute type 30 has an invalid length. [ 1294.567018][T27946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5266'. [ 1294.567066][T27946] netlink: 'syz.2.5266': attribute type 30 has an invalid length. [ 1294.701603][T27973] syzkaller1: entered promiscuous mode [ 1294.701632][T27973] syzkaller1: entered allmulticast mode [ 1294.760169][T27986] vxlan0: entered promiscuous mode [ 1294.760195][T27986] vxlan0: entered allmulticast mode [ 1294.797005][T27946] vxlan1: entered promiscuous mode [ 1294.797037][T27946] vxlan1: entered allmulticast mode [ 1294.850097][T27996] syzkaller1: entered promiscuous mode [ 1294.850135][T27996] syzkaller1: entered allmulticast mode [ 1295.342029][ T5919] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1295.342118][ T5919] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1295.343270][ T5919] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1295.343393][ T5919] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1295.436550][T27391] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 1295.487795][T27391] usbhid 6-1:0.0: can't add hid device: -71 [ 1295.487875][T27391] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1295.544006][T27391] usb 6-1: USB disconnect, device number 46 [ 1295.896861][ T31] kauditd_printk_skb: 21 callbacks suppressed [ 1295.896884][ T31] audit: type=1326 audit(1790551740.412:5440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28052 comm="syz.5.5277" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09979e159 code=0x7ffc0000 [ 1295.896937][ T31] audit: type=1326 audit(1790551740.412:5441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28052 comm="syz.5.5277" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09979e159 code=0x7ffc0000 [ 1295.899056][ T31] audit: type=1326 audit(1790551740.422:5442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28052 comm="syz.5.5277" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fb09979e159 code=0x7ffc0000 [ 1295.899111][ T31] audit: type=1326 audit(1790551740.422:5443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28052 comm="syz.5.5277" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09979e159 code=0x7ffc0000 [ 1295.899159][ T31] audit: type=1326 audit(1790551740.422:5444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28052 comm="syz.5.5277" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09979e159 code=0x7ffc0000 [ 1295.909970][ T31] audit: type=1326 audit(1790551740.422:5445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28052 comm="syz.5.5277" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb09979e159 code=0x7ffc0000 [ 1296.023294][ T31] audit: type=1326 audit(1790551740.522:5446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28052 comm="syz.5.5277" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09979e159 code=0x7ffc0000 [ 1296.023503][ T31] audit: type=1326 audit(1790551740.522:5447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28052 comm="syz.5.5277" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09979e159 code=0x7ffc0000 [ 1296.109651][ T31] audit: type=1326 audit(1790551740.622:5448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28052 comm="syz.5.5277" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb09979e159 code=0x7ffc0000 [ 1296.109812][ T31] audit: type=1326 audit(1790551740.622:5449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28052 comm="syz.5.5277" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09979e159 code=0x7ffc0000 [ 1296.523277][T19614] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1296.674572][T19614] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1296.675829][T19614] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1296.675866][T19614] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1296.678553][T19614] usb 3-1: config 0 descriptor?? [ 1296.692451][T19614] pwc: Askey VC010 type 2 USB webcam detected. [ 1296.803186][T27384] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1296.964625][T27384] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1296.965968][T27384] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1296.966022][T27384] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1296.966054][T27384] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1296.969204][T27384] usb 6-1: config 0 descriptor?? [ 1296.989601][T27384] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1297.082172][T19614] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1297.082922][T19614] pwc: recv_control_msg error -32 req 02 val 2700 [ 1297.093181][T28062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1297.099024][T28062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1297.105517][T19614] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1297.123604][T19614] pwc: recv_control_msg error -32 req 04 val 1000 [ 1297.124183][T19614] pwc: recv_control_msg error -32 req 04 val 1300 [ 1297.124703][T19614] pwc: recv_control_msg error -32 req 04 val 1400 [ 1297.125222][T19614] pwc: recv_control_msg error -32 req 02 val 2000 [ 1297.125715][T19614] pwc: recv_control_msg error -32 req 02 val 2100 [ 1297.126208][T19614] pwc: recv_control_msg error -32 req 04 val 1500 [ 1297.126719][T19614] pwc: recv_control_msg error -32 req 02 val 2500 [ 1297.127215][T19614] pwc: recv_control_msg error -32 req 02 val 2400 [ 1297.127837][T19614] pwc: recv_control_msg error -32 req 02 val 2600 [ 1297.128327][T19614] pwc: recv_control_msg error -32 req 02 val 2900 [ 1297.202777][T27393] usb 6-1: USB disconnect, device number 47 [ 1297.330408][T28062] loop8: detected capacity change from 0 to 7 [ 1297.340988][T28062] Dev loop8: unable to read RDB block 7 [ 1297.341037][T28062] loop8: unable to read partition table [ 1297.353501][T28062] loop8: partition table beyond EOD, truncated [ 1297.353548][T28062] loop_reread_partitions: partition scan of loop8 () failed (rc=-5) [ 1297.354801][T19614] pwc: recv_control_msg error -71 req 04 val 1100 [ 1297.355248][T19614] pwc: recv_control_msg error -71 req 04 val 1200 [ 1297.361855][T19614] pwc: Registered as video103. [ 1297.409218][T19614] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input106 [ 1297.429974][T19614] usb 3-1: USB disconnect, device number 89 [ 1298.128447][T28136] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5290'. [ 1298.188193][T28142] loop4: detected capacity change from 0 to 7 [ 1298.200864][T28142] Dev loop4: unable to read RDB block 7 [ 1298.200910][T28142] loop4: unable to read partition table [ 1298.201189][T28142] loop4: partition table beyond EOD, truncated [ 1298.201210][T28142] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 1298.353140][T27384] usb 6-1: new full-speed USB device number 48 using dummy_hcd [ 1298.373081][T19614] usb 3-1: new low-speed USB device number 90 using dummy_hcd [ 1298.505160][T19614] usb 3-1: device descriptor read/64, error -71 [ 1298.507328][T27384] usb 6-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 1298.510514][T27384] usb 6-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 1298.510541][T27384] usb 6-1: Product: syz [ 1298.510557][T27384] usb 6-1: Manufacturer: syz [ 1298.510574][T27384] usb 6-1: SerialNumber: syz [ 1298.559317][T27384] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 1298.753111][T19614] usb 3-1: new low-speed USB device number 91 using dummy_hcd [ 1298.883248][T19614] usb 3-1: device descriptor read/64, error -71 [ 1298.960091][T28131] netlink: 'syz.5.5289': attribute type 89 has an invalid length. [ 1299.003895][T19614] usb usb3-port1: attempt power cycle [ 1299.353163][T19614] usb 3-1: new low-speed USB device number 92 using dummy_hcd [ 1299.374069][T19614] usb 3-1: device descriptor read/8, error -71 [ 1299.613235][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1299.634472][T19614] usb 3-1: new low-speed USB device number 93 using dummy_hcd [ 1299.667608][T19614] usb 3-1: device descriptor read/8, error -71 [ 1299.774974][T19614] usb usb3-port1: unable to enumerate USB device [ 1299.820464][T28181] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1300.163241][T27393] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1300.245976][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.246049][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.314006][T27393] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1300.315037][T27393] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1300.315086][T27393] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1300.315132][T27393] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1300.318358][T27393] usb 4-1: config 0 descriptor?? [ 1300.375502][T27393] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1300.527630][T27393] usb 4-1: USB disconnect, device number 90 [ 1300.976739][T27384] vp7045: USB control message 'in' went wrong. [ 1300.976754][T27384] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1300.976781][T27384] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 1301.020067][T28219] hub 1-0:1.0: USB hub found [ 1301.029099][T28219] hub 1-0:1.0: 1 port detected [ 1301.278718][T14436] usb 6-1: USB disconnect, device number 48 [ 1301.623101][T27384] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1301.723122][T14436] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1301.784937][T27384] usb 3-1: Using ep0 maxpacket: 8 [ 1301.793770][T27384] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1301.807966][T27393] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1301.817542][T27384] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1301.817597][T27384] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1301.817621][T27384] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1301.817648][T27384] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1301.817674][T27384] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1301.817721][T27384] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1301.894626][T14436] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1301.900899][T14436] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1301.900977][T14436] usb 6-1: Product: syz [ 1301.901023][T14436] usb 6-1: Manufacturer: syz [ 1301.901067][T14436] usb 6-1: SerialNumber: syz [ 1301.954083][T27393] usb 4-1: Using ep0 maxpacket: 32 [ 1301.955979][T27393] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1301.958402][T27393] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1301.960633][T27393] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1301.960662][T27393] usb 4-1: Product: syz [ 1301.960680][T27393] usb 4-1: Manufacturer: syz [ 1301.960698][T27393] usb 4-1: SerialNumber: syz [ 1302.067901][T27384] usb 3-1: GET_CAPABILITIES returned 0 [ 1302.067976][T27384] usbtmc 3-1:16.0: can't read capabilities [ 1302.239654][T28290] netlink: 'syz.7.5309': attribute type 2 has an invalid length. [ 1302.239686][T28290] netlink: 'syz.7.5309': attribute type 2 has an invalid length. [ 1302.362151][T14436] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1302.362220][T14436] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1302.412687][T27393] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1302.480313][T27393] usb 4-1: USB disconnect, device number 91 [ 1302.514519][T27384] usb 3-1: USB disconnect, device number 94 [ 1302.699596][T23201] udevd[23201]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1303.576236][T14436] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1303.867932][T28367] IPVS: set_ctl: invalid protocol: 50 255.255.255.255:20001 [ 1304.009005][T27384] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1304.174228][T27384] usb 4-1: Using ep0 maxpacket: 16 [ 1304.174918][T27384] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1304.175965][T27384] usb 4-1: config 133 has an invalid interface number: 1 but max is 0 [ 1304.175985][T27384] usb 4-1: config 133 has no interface number 0 [ 1304.176007][T27384] usb 4-1: too many endpoints for config 133 interface 1 altsetting 147: 37, using maximum allowed: 30 [ 1304.176033][T27384] usb 4-1: config 133 interface 1 altsetting 147 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 1304.176054][T27384] usb 4-1: config 133 interface 1 has no altsetting 0 [ 1304.178345][T27384] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1304.178365][T27384] usb 4-1: Product: syz [ 1304.178376][T27384] usb 4-1: Manufacturer: syz [ 1304.178408][T27384] usb 4-1: SerialNumber: syz [ 1304.198610][T14436] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -EPROTO [ 1304.241110][T14436] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1304.241171][T14436] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1304.241947][T14436] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1304.318693][T14436] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 1304.348839][T14436] usb 6-1: USB disconnect, device number 49 [ 1304.453628][ C1] raw-gadget.2 gadget.3: ignoring, device is not running [ 1304.473934][T27384] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1304.474280][T27384] gspca_spca1528: reg_w err -71 [ 1304.494971][T27384] spca1528 4-1:133.1: probe with driver spca1528 failed with error -71 [ 1304.507439][T27384] usb 4-1: USB disconnect, device number 92 [ 1304.888259][T28407] tipc: Started in network mode [ 1304.888297][T28407] tipc: Node identity 729041c2b0d4, cluster identity 4711 [ 1304.888469][T28407] tipc: Enabled bearer , priority 0 [ 1304.889205][T28407] syzkaller0: entered promiscuous mode [ 1304.889228][T28407] syzkaller0: entered allmulticast mode [ 1304.929926][T28407] tipc: Resetting bearer [ 1305.163279][T27393] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1305.315446][T27393] usb 6-1: Using ep0 maxpacket: 8 [ 1305.319975][T27393] usb 6-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice= 0.09 [ 1305.321351][T27393] usb 6-1: config 2 has an invalid interface number: 31 but max is 0 [ 1305.321379][T27393] usb 6-1: config 2 has no interface number 0 [ 1305.321426][T27393] usb 6-1: config 2 interface 31 has no altsetting 0 [ 1305.322599][T27393] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1305.322623][T27393] usb 6-1: SerialNumber: syz [ 1305.616669][T27393] ch9200 6-1:2.31: probe with driver ch9200 failed with error -71 [ 1305.652239][T27393] usb 6-1: USB disconnect, device number 50 [ 1305.663431][T28406] tipc: Resetting bearer [ 1305.824463][T28406] tipc: Disabling bearer [ 1306.086224][T14436] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1306.244711][T14436] usb 3-1: Using ep0 maxpacket: 32 [ 1306.245933][T14436] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1306.247307][T14436] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1306.249678][T14436] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1306.249710][T14436] usb 3-1: Product: syz [ 1306.249721][T14436] usb 3-1: Manufacturer: syz [ 1306.249733][T14436] usb 3-1: SerialNumber: syz [ 1306.271419][T14436] usb 3-1: config 0 descriptor?? [ 1306.313878][T14436] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1306.314237][T14436] dvb-usb: bulk message failed: -22 (4/0) [ 1306.314256][T14436] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1306.314384][T14436] dvb-usb: bulk message failed: -22 (5/0) [ 1306.314399][T14436] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1306.380727][T14436] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1306.402331][T14436] dvb-usb: Pinnacle 450e DVB-S USB2.0 error while loading driver (-23) [ 1306.513832][T28452] netlink: 'syz.2.5330': attribute type 2 has an invalid length. [ 1306.516804][T28430] Bluetooth: hci5: unexpected event for opcode 0x1001 [ 1306.518260][ T3640] usb 3-1: USB disconnect, device number 95 [ 1306.900937][T28478] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1306.964088][T28482] bond2: (slave ip6erspan0): making interface the new active one [ 1306.985969][T28482] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 1306.989738][T28518] syz_tun: left promiscuous mode [ 1307.000383][T28518] bridge0: port 3(syz_tun) entered disabled state [ 1307.187330][T28518] bridge_slave_1: left allmulticast mode [ 1307.187373][T28518] bridge_slave_1: left promiscuous mode [ 1307.187570][T28518] bridge0: port 2(bridge_slave_1) entered disabled state [ 1307.273535][T28518] bridge_slave_0: left allmulticast mode [ 1307.273567][T28518] bridge_slave_0: left promiscuous mode [ 1307.273765][T28518] bridge0: port 1(bridge_slave_0) entered disabled state [ 1307.443330][T28430] Bluetooth: hci2: command 0x0406 tx timeout [ 1307.476254][T28478] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 1308.773102][T27384] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1308.924923][T27384] usb 3-1: Using ep0 maxpacket: 8 [ 1308.925944][T27384] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1308.932143][T27384] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1308.932214][T27384] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1308.932242][T27384] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1308.932273][T27384] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1308.932300][T27384] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1308.932348][T27384] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1309.144245][ T3640] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1309.161568][ T31] kauditd_printk_skb: 50 callbacks suppressed [ 1309.161590][ T31] audit: type=1326 audit(1790551753.682:5500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28588 comm="syz.3.5344" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb74d19e159 code=0x0 [ 1309.237863][T27384] usb 3-1: GET_CAPABILITIES returned 0 [ 1309.237941][T27384] usbtmc 3-1:16.0: can't read capabilities [ 1309.293883][ T3640] usb 6-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 1309.294874][ T3640] usb 6-1: config 1 has an invalid interface number: 3 but max is 0 [ 1309.294901][ T3640] usb 6-1: config 1 has no interface number 0 [ 1309.297031][ T3640] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1309.297058][ T3640] usb 6-1: Product: syz [ 1309.297075][ T3640] usb 6-1: Manufacturer: syz [ 1309.297099][ T3640] usb 6-1: SerialNumber: syz [ 1309.360295][ T3640] usb 6-1: 3:0 : does not exist [ 1309.360315][ T3640] usb 6-1: 3:0 : does not exist [ 1309.464138][T27391] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1309.613826][T27391] usb 4-1: Using ep0 maxpacket: 8 [ 1309.614564][T27391] usb 4-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 1309.616566][T27391] usb 4-1: config 1 interface 0 altsetting 21 bulk endpoint 0x1 has invalid maxpacket 8 [ 1309.616608][T27391] usb 4-1: config 1 interface 0 altsetting 21 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1309.616640][T27391] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1309.621095][T27391] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1309.621124][T27391] usb 4-1: Product: 䐊 [ 1309.621141][T27391] usb 4-1: Manufacturer: Э [ 1309.621158][T27391] usb 4-1: SerialNumber: 嶰딋ृ쭛졭ꥲ꤈垽ᝤ㝝ሖ∊랆ꩥꁧ鰧잫㻅司寧ᬸ꣮ꁌ屹ᵇ꽚欭ေ䚓喚끾ꑕ鬰欱᪤闳㎿帡痖⊖䱀ﶝ [ 1309.710814][T28610] sctp: [Deprecated]: syz.5.5342 (pid 28610) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1309.710814][T28610] Use struct sctp_sack_info instead [ 1309.748879][T28591] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1309.749025][T28591] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1309.791016][T14436] usb 3-1: USB disconnect, device number 96 [ 1309.953888][T27391] usblp0: Disabling reads from problematic bidirectional printer [ 1311.489511][T28641] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5350'. [ 1312.328277][T27391] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 93 if 0 alt 21 proto 1 vid 0x03F0 pid 0x0004 [ 1312.360011][T27391] usb 4-1: USB disconnect, device number 93 [ 1312.389732][T27391] usblp0: removed [ 1312.620119][T28674] batman_adv: batadv0: Adding interface: gretap1 [ 1312.620141][T28674] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1312.620206][T28674] batman_adv: batadv0: Interface activated: gretap1 [ 1313.103802][T28695] netlink: 'syz.2.5358': attribute type 1 has an invalid length. [ 1313.200360][T28695] bond9: entered promiscuous mode [ 1313.202796][T28695] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1313.493257][T27390] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1313.643139][T27390] usb 3-1: Using ep0 maxpacket: 16 [ 1313.645056][T27390] usb 3-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00 [ 1313.647672][T27390] usb 3-1: config index 0 descriptor too short (expected 8228, got 36) [ 1313.647728][T27390] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1313.647749][T27390] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1313.647766][T27390] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1313.647807][T27390] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1313.647845][T27390] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1313.737260][T27390] usb 3-1: config 0 descriptor?? [ 1314.758123][ T3640] usb 6-1: USB disconnect, device number 51 [ 1314.889279][T28775] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5365'. [ 1314.889306][T28775] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5365'. [ 1315.187396][T28785] netlink: 'syz.1.5367': attribute type 21 has an invalid length. [ 1315.187662][T28785] netlink: 'syz.1.5367': attribute type 21 has an invalid length. [ 1315.187914][T28785] netlink: 'syz.1.5367': attribute type 21 has an invalid length. [ 1315.188099][T28785] netlink: 'syz.1.5367': attribute type 21 has an invalid length. [ 1315.188366][T28785] netlink: 'syz.1.5367': attribute type 21 has an invalid length. [ 1315.188553][T28785] netlink: 'syz.1.5367': attribute type 21 has an invalid length. [ 1315.188773][T28785] netlink: 'syz.1.5367': attribute type 21 has an invalid length. [ 1315.189568][T28785] netlink: 'syz.1.5367': attribute type 21 has an invalid length. [ 1315.189891][T28785] netlink: 'syz.1.5367': attribute type 21 has an invalid length. [ 1315.527558][T28797] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5371'. [ 1315.778478][T28810] fuse: fd is not a fuse device [ 1315.782762][T28810] sctp: [Deprecated]: syz.1.5375 (pid 28810) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1315.782762][T28810] Use struct sctp_sack_info instead [ 1315.813737][T14436] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1315.973416][T14436] usb 6-1: Using ep0 maxpacket: 32 [ 1315.974280][T14436] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1315.975453][T14436] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1315.975480][T14436] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1315.975521][T14436] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1315.980083][T14436] usb 6-1: config 0 descriptor?? [ 1316.167333][T27390] usbhid 3-1:0.0: can't add hid device: -71 [ 1316.167448][T27390] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1316.171830][T27390] usb 3-1: USB disconnect, device number 97 [ 1316.187882][T14436] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1316.220133][T28800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1316.220727][T28800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1316.243343][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1316.316260][T28829] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1316.381160][T14436] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 1316.382673][T14436] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1316.440426][T28835] netlink: 116 bytes leftover after parsing attributes in process `syz.1.5379'. [ 1316.548827][T28839] fuse: fd is not a fuse device [ 1317.028329][T28837] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1317.037568][T28837] .`: (slave netdevsim1): Enslaving as an active interface with an up link [ 1317.109652][T28878] logitech-hidpp-device 0003:046D:C082.0033: pid 28878 passed too short report [ 1317.844075][T14436] usb 4-1: Firmware version (0.0) predates our first public release. [ 1317.844106][T14436] usb 4-1: Please update to version 0.2 or newer [ 1317.848773][T28907] tipc: Enabling of bearer rejected, failed to enable media [ 1318.059222][T28920] FAULT_INJECTION: forcing a failure. [ 1318.059222][T28920] name failslab, interval 1, probability 0, space 0, times 0 [ 1318.059264][T28920] CPU: 1 UID: 0 PID: 28920 Comm: syz.1.5391 Tainted: G L syzkaller #0 PREEMPT(full) [ 1318.059297][T28920] Tainted: [L]=SOFTLOCKUP [ 1318.059306][T28920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1318.059321][T28920] Call Trace: [ 1318.059332][T28920] [ 1318.059343][T28920] dump_stack_lvl+0xe8/0x150 [ 1318.059385][T28920] should_fail_ex+0x410/0x560 [ 1318.059421][T28920] should_failslab+0xa8/0x100 [ 1318.059454][T28920] ? ptlock_alloc+0x20/0x70 [ 1318.059489][T28920] kmem_cache_alloc_noprof+0xa1/0x600 [ 1318.059516][T28920] ? ptlock_alloc+0x20/0x70 [ 1318.059558][T28920] ptlock_alloc+0x20/0x70 [ 1318.059597][T28920] pte_alloc_one+0x7a/0x370 [ 1318.059630][T28920] __pte_alloc+0x25/0x1a0 [ 1318.059660][T28920] do_pte_missing+0x2db7/0x34b0 [ 1318.059685][T28920] ? __lock_acquire+0x747/0x2de0 [ 1318.059729][T28920] handle_mm_fault+0x1a53/0x3750 [ 1318.059776][T28920] ? handle_mm_fault+0xf1/0x3750 [ 1318.059822][T28920] ? __pfx_handle_mm_fault+0x10/0x10 [ 1318.059854][T28920] ? lock_vma_under_rcu+0x45a/0x500 [ 1318.059915][T28920] do_user_addr_fault+0xa4f/0x1340 [ 1318.059952][T28920] ? trace_page_fault_user+0x84/0x1e0 [ 1318.059981][T28920] exc_page_fault+0x6a/0xc0 [ 1318.060015][T28920] asm_exc_page_fault+0x26/0x30 [ 1318.060038][T28920] RIP: 0033:0x7f5dce8573d5 [ 1318.060059][T28920] Code: 0f 1f 44 00 00 49 89 4c 24 28 e9 a5 fe ff ff 66 0f 1f 44 00 00 48 81 fe 00 f0 02 00 0f 85 92 fe ff ff 66 0f 6f 0d 1b de 1f 00 01 0f 00 00 00 48 89 4c 24 38 0f 11 49 08 66 0f 6f 0d 14 de 1f [ 1318.060080][T28920] RSP: 002b:00007f5dcf928f60 EFLAGS: 00010246 [ 1318.060102][T28920] RAX: 0000000000000000 RBX: 0000000000000002 RCX: 0000200000c0f000 [ 1318.060119][T28920] RDX: 0000000000001000 RSI: 000000000002f000 RDI: 0000000000000001 [ 1318.060134][T28920] RBP: 00007f5dcea54780 R08: 0000000000000000 R09: 0000000000000003 [ 1318.060150][T28920] R10: 0000000000000000 R11: 0000000000000002 R12: 0000200000bff000 [ 1318.060166][T28920] R13: 0000000000000002 R14: 0000000000000000 R15: 00000000003ef000 [ 1318.060200][T28920] [ 1318.060802][T28920] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1318.413472][ T4933] Bluetooth: hci4: unexpected event for opcode 0x1003 [ 1318.982861][T14436] usb 6-1: USB disconnect, device number 52 [ 1319.040940][T27390] usb 4-1: USB disconnect, device number 94 [ 1319.370396][T28430] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1319.409794][T28430] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1319.417770][T28430] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1319.432558][T28430] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1319.453431][T28430] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1319.690830][T24493] bridge0: port 1(syz_tun) entered disabled state [ 1319.775823][T24493] syz_tun (unregistering): left allmulticast mode [ 1319.775855][T24493] syz_tun (unregistering): left promiscuous mode [ 1319.775955][T24493] bridge0: port 1(syz_tun) entered disabled state [ 1319.833229][T27390] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1319.902009][T28974] validate_nla: 26 callbacks suppressed [ 1319.902038][T28974] netlink: 'syz.5.5398': attribute type 1 has an invalid length. [ 1319.902277][T28974] netlink: 'syz.5.5398': attribute type 1 has an invalid length. [ 1319.902422][T28974] netlink: 'syz.5.5398': attribute type 1 has an invalid length. [ 1319.902522][T28974] netlink: 'syz.5.5398': attribute type 1 has an invalid length. [ 1319.902615][T28974] netlink: 'syz.5.5398': attribute type 1 has an invalid length. [ 1319.902696][T28974] netlink: 'syz.5.5398': attribute type 1 has an invalid length. [ 1319.902802][T28974] netlink: 'syz.5.5398': attribute type 1 has an invalid length. [ 1319.902882][T28974] netlink: 'syz.5.5398': attribute type 1 has an invalid length. [ 1319.946396][T28974] netlink: 'syz.5.5398': attribute type 1 has an invalid length. [ 1319.946910][T28974] netlink: 'syz.5.5398': attribute type 1 has an invalid length. [ 1320.007378][T27390] usb 4-1: New USB device found, idVendor=0e41, idProduct=3020, bcdDevice= 0.40 [ 1320.025485][T27390] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1320.025506][T27390] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1320.025522][T27390] usb 4-1: config 1 has no interface number 0 [ 1320.025544][T27390] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1320.039498][T27390] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1320.039575][T27390] usb 4-1: Product: syz [ 1320.039611][T27390] usb 4-1: Manufacturer: syz [ 1320.039656][T27390] usb 4-1: SerialNumber: syz [ 1320.491785][T29038] FAULT_INJECTION: forcing a failure. [ 1320.491785][T29038] name failslab, interval 1, probability 0, space 0, times 0 [ 1320.491825][T29038] CPU: 1 UID: 0 PID: 29038 Comm: syz.5.5400 Tainted: G L syzkaller #0 PREEMPT(full) [ 1320.491858][T29038] Tainted: [L]=SOFTLOCKUP [ 1320.491868][T29038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1320.491883][T29038] Call Trace: [ 1320.491892][T29038] [ 1320.491903][T29038] dump_stack_lvl+0xe8/0x150 [ 1320.491943][T29038] should_fail_ex+0x410/0x560 [ 1320.491979][T29038] should_failslab+0xa8/0x100 [ 1320.492012][T29038] __kvmalloc_node_noprof+0x176/0x820 [ 1320.492044][T29038] ? bpf_check_cfg+0x13f/0x3840 [ 1320.492069][T29038] ? bpf_check_cfg+0x13f/0x3840 [ 1320.492101][T29038] bpf_check_cfg+0x13f/0x3840 [ 1320.492136][T29038] ? lock_acquire+0x115/0x350 [ 1320.492172][T29038] ? __fget_files+0x2a/0x420 [ 1320.492218][T29038] ? __pfx_bpf_check_cfg+0x10/0x10 [ 1320.492248][T29038] ? fput+0xa0/0xd0 [ 1320.492278][T29038] ? add_used_map+0xff/0x110 [ 1320.492312][T29038] ? check_and_resolve_insns+0x1d54/0x21d0 [ 1320.492352][T29038] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 1320.492384][T29038] ? add_kfuncs+0x251/0x2e0 [ 1320.492417][T29038] bpf_check+0x25fd/0x2ef0 [ 1320.492463][T29038] ? __pfx_bpf_check+0x10/0x10 [ 1320.492495][T29038] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1320.492535][T29038] bpf_prog_load+0x14d6/0x1c20 [ 1320.492585][T29038] ? __pfx_bpf_prog_load+0x10/0x10 [ 1320.492643][T29038] __sys_bpf+0xd0d/0xd90 [ 1320.492681][T29038] ? __pfx___sys_bpf+0x10/0x10 [ 1320.492722][T29038] ? __fget_files+0x2a/0x420 [ 1320.492775][T29038] ? ksys_write+0x242/0x270 [ 1320.492801][T29038] ? __pfx_ksys_write+0x10/0x10 [ 1320.492831][T29038] __x64_sys_bpf+0xba/0xd0 [ 1320.492860][T29038] do_syscall_64+0x166/0x520 [ 1320.492893][T29038] ? trace_irq_disable+0x3b/0x140 [ 1320.492919][T29038] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1320.492944][T29038] ? clear_bhb_loop+0x70/0xc0 [ 1320.492974][T29038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1320.492996][T29038] RIP: 0033:0x7fb09979e159 [ 1320.493016][T29038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1320.493036][T29038] RSP: 002b:00007fb09a5b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1320.493061][T29038] RAX: ffffffffffffffda RBX: 00007fb099a25fa0 RCX: 00007fb09979e159 [ 1320.493078][T29038] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 1320.493092][T29038] RBP: 00007fb09a5b9090 R08: 0000000000000000 R09: 0000000000000000 [ 1320.493108][T29038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1320.493128][T29038] R13: 00007fb099a26038 R14: 00007fb099a25fa0 R15: 00007fb099b4fa48 [ 1320.493166][T29038] [ 1321.241271][T13571] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1321.523657][ T4933] Bluetooth: hci3: command tx timeout [ 1321.643181][T27393] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1321.672635][T13571] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1321.794875][T27393] usb 6-1: Using ep0 maxpacket: 32 [ 1321.795632][T27393] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1321.811040][ T3640] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1321.822380][T27393] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1321.822435][T27393] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1321.846650][T27393] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1321.846710][T27393] usb 6-1: Product: syz [ 1321.846727][T27393] usb 6-1: Manufacturer: syz [ 1321.846746][T27393] usb 6-1: SerialNumber: syz [ 1321.852897][T27393] usb 6-1: config 0 descriptor?? [ 1321.943452][ T3640] usb 3-1: device descriptor read/64, error -71 [ 1322.089671][T29057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1322.090225][T29057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1322.102607][T29057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1322.124371][T29057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1322.138253][T13571] .`: (slave netdevsim1): Releasing backup interface [ 1322.172854][T13571] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1322.183731][ T3640] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1322.214652][T28953] bridge0: port 1(bridge_slave_0) entered blocking state [ 1322.214783][T28953] bridge0: port 1(bridge_slave_0) entered disabled state [ 1322.215006][T28953] bridge_slave_0: entered allmulticast mode [ 1322.217399][T28953] bridge_slave_0: entered promiscuous mode [ 1322.228420][T28953] bridge0: port 2(bridge_slave_1) entered blocking state [ 1322.228833][T28953] bridge0: port 2(bridge_slave_1) entered disabled state [ 1322.229341][T28953] bridge_slave_1: entered allmulticast mode [ 1322.236409][T28953] bridge_slave_1: entered promiscuous mode [ 1322.333679][ T3640] usb 3-1: device descriptor read/64, error -71 [ 1322.337230][T27390] usb 4-1: 1:0 : does not exist [ 1322.337309][T27390] usb 4-1: BAAD HEADSET c_chmask mismatch [ 1322.406832][T27390] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 1322.411087][T27390] usb 4-1: USB disconnect, device number 95 [ 1322.446435][ T3640] usb usb3-port1: attempt power cycle [ 1322.468309][T23213] udevd[23213]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1322.568918][T29174] loop8: detected capacity change from 0 to 7 [ 1322.581255][T13571] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1322.591392][T29174] Dev loop8: unable to read RDB block 7 [ 1322.591440][T29174] loop8: unable to read partition table [ 1322.591658][T29174] loop8: partition table beyond EOD, truncated [ 1322.591680][T29174] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1322.650518][T28953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1322.665227][T28953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1322.732771][T28953] team0: Port device team_slave_0 added [ 1322.764057][T28953] team0: Port device team_slave_1 added [ 1322.783205][ T3640] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1322.805191][ T3640] usb 3-1: device descriptor read/8, error -71 [ 1322.876410][T28953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1322.876428][T28953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1322.876450][T28953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1322.880541][T28953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1322.880558][T28953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1322.880585][T28953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1323.085641][T29208] FAULT_INJECTION: forcing a failure. [ 1323.085641][T29208] name failslab, interval 1, probability 0, space 0, times 0 [ 1323.085684][T29208] CPU: 1 UID: 0 PID: 29208 Comm: syz.3.5408 Tainted: G L syzkaller #0 PREEMPT(full) [ 1323.085716][T29208] Tainted: [L]=SOFTLOCKUP [ 1323.085725][T29208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1323.085741][T29208] Call Trace: [ 1323.085750][T29208] [ 1323.085761][T29208] dump_stack_lvl+0xe8/0x150 [ 1323.085799][T29208] should_fail_ex+0x410/0x560 [ 1323.085835][T29208] should_failslab+0xa8/0x100 [ 1323.085867][T29208] __kmalloc_noprof+0xfe/0x720 [ 1323.085891][T29208] ? rcu_is_watching+0x16/0xb0 [ 1323.085919][T29208] ? tomoyo_realpath_from_path+0xef/0x640 [ 1323.085954][T29208] ? tomoyo_realpath_from_path+0xef/0x640 [ 1323.085995][T29208] tomoyo_realpath_from_path+0xef/0x640 [ 1323.086039][T29208] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1323.086068][T29208] tomoyo_path_number_perm+0x246/0x5f0 [ 1323.086098][T29208] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1323.086126][T29208] ? __lock_acquire+0x747/0x2de0 [ 1323.086166][T29208] ? hook_file_ioctl+0x1f2/0x600 [ 1323.086215][T29208] ? __fget_files+0x2a/0x420 [ 1323.086253][T29208] ? __fget_files+0x2a/0x420 [ 1323.086286][T29208] ? __fget_files+0x3a2/0x420 [ 1323.086318][T29208] ? __fget_files+0x2a/0x420 [ 1323.086355][T29208] security_file_ioctl+0xc3/0x2a0 [ 1323.086395][T29208] __se_sys_ioctl+0x47/0x170 [ 1323.086425][T29208] do_syscall_64+0x166/0x520 [ 1323.086456][T29208] ? trace_irq_disable+0x3b/0x140 [ 1323.086482][T29208] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1323.086507][T29208] ? clear_bhb_loop+0x70/0xc0 [ 1323.086536][T29208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1323.086560][T29208] RIP: 0033:0x7fb74d19e159 [ 1323.086582][T29208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1323.086602][T29208] RSP: 002b:00007fb74b3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1323.086636][T29208] RAX: ffffffffffffffda RBX: 00007fb74d425fa0 RCX: 00007fb74d19e159 [ 1323.086654][T29208] RDX: 0000000000000000 RSI: 000000000000ae60 RDI: 0000000000000004 [ 1323.086669][T29208] RBP: 00007fb74b3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1323.086684][T29208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1323.086698][T29208] R13: 00007fb74d426038 R14: 00007fb74d425fa0 R15: 00007fb74d54fa48 [ 1323.086735][T29208] [ 1323.087315][T29208] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1323.104452][ T3640] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1323.143476][ T3640] usb 3-1: device descriptor read/8, error -71 [ 1323.258432][ T3640] usb usb3-port1: unable to enumerate USB device [ 1323.298941][T29208] kvm: failed to shrink bus, removing it completely [ 1323.410404][T28953] hsr_slave_0: entered promiscuous mode [ 1323.411690][T28953] hsr_slave_1: entered promiscuous mode [ 1323.412342][T28953] debugfs: 'hsr0' already exists in 'hsr' [ 1323.412363][T28953] Cannot create hsr debugfs directory [ 1323.604501][ T4933] Bluetooth: hci3: command tx timeout [ 1323.776630][T13571] pim6reg: left allmulticast mode [ 1323.776771][T13571] bond2: left allmulticast mode [ 1323.776783][T13571] ip6gre1: left allmulticast mode [ 1323.780552][T13571] pimreg: left allmulticast mode [ 1324.173526][T13571] bond2 (unregistering): (slave ip6gre1): Releasing backup interface [ 1324.173550][T13571] ip6gre1 (unregistering): left promiscuous mode [ 1324.324097][T13571] team0: Port device xfrm0 removed [ 1324.463532][T19614] usb 6-1: USB disconnect, device number 53 [ 1324.518668][T13571] .` (unregistering): Released all slaves [ 1324.530332][T13571] bond1 (unregistering): Released all slaves [ 1324.555976][T13571] bond2 (unregistering): Released all slaves [ 1324.640622][T20120] tipc: Resetting bearer [ 1324.905412][T13571] tipc: Disabling bearer [ 1324.953785][T19614] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1324.954567][T13571] tipc: Disabling bearer [ 1325.024565][T13571] tipc: Left network mode [ 1325.093483][T14436] usb 3-1: new full-speed USB device number 102 using dummy_hcd [ 1325.116215][T19614] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1325.117015][T19614] usb 6-1: config 0 has no interfaces? [ 1325.117050][T19614] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1325.137999][T19614] usb 6-1: config 0 descriptor?? [ 1325.255197][T14436] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1325.258999][T14436] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 1325.259028][T14436] usb 3-1: config 0 has no interface number 0 [ 1325.259070][T14436] usb 3-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x57, changing to 0x7 [ 1325.259108][T14436] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 1325.259138][T14436] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1325.265360][T14436] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1325.265437][T14436] usb 3-1: Product: syz [ 1325.265481][T14436] usb 3-1: SerialNumber: syz [ 1325.301274][T14436] usb 3-1: config 0 descriptor?? [ 1325.361770][T14436] usbhid 3-1:0.8: couldn't find an input interrupt endpoint [ 1325.540174][T29314] loop5: detected capacity change from 0 to 7 [ 1325.560085][T29314] Dev loop5: unable to read RDB block 7 [ 1325.560133][T29314] loop5: unable to read partition table [ 1325.560341][T29314] loop5: partition table beyond EOD, truncated [ 1325.560363][T29314] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1325.613415][T27390] usb 3-1: USB disconnect, device number 102 [ 1325.683648][ T4933] Bluetooth: hci3: command tx timeout [ 1325.724366][ T3640] usb 6-1: USB disconnect, device number 54 [ 1325.834087][T29390] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1326.148761][T29402] ip_tables: iptables: counters copy to user failed while replacing table [ 1326.435771][T29411] pim6reg: entered allmulticast mode [ 1326.768572][T29434] fuse: Invalid rootmode [ 1327.395838][ T5281] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1327.763957][ T4933] Bluetooth: hci3: command tx timeout [ 1328.092265][T29478] tipc: Enabled bearer , priority 0 [ 1328.093663][T29476] tipc: Resetting bearer [ 1328.214987][T29481] syzkaller0: entered promiscuous mode [ 1328.215009][T29481] syzkaller0: entered allmulticast mode [ 1328.628104][T29502] syzkaller0: entered promiscuous mode [ 1328.628132][T29502] syzkaller0: entered allmulticast mode [ 1328.688209][T29470] tipc: Resetting bearer [ 1328.844889][T29470] tipc: Disabling bearer [ 1329.238860][T29517] ip6tnl1: entered promiscuous mode [ 1329.265634][T29531] FAULT_INJECTION: forcing a failure. [ 1329.265634][T29531] name failslab, interval 1, probability 0, space 0, times 0 [ 1329.265679][T29531] CPU: 0 UID: 0 PID: 29531 Comm: syz.5.5427 Tainted: G L syzkaller #0 PREEMPT(full) [ 1329.265716][T29531] Tainted: [L]=SOFTLOCKUP [ 1329.265734][T29531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1329.265751][T29531] Call Trace: [ 1329.265763][T29531] [ 1329.265774][T29531] dump_stack_lvl+0xe8/0x150 [ 1329.265820][T29531] should_fail_ex+0x410/0x560 [ 1329.265858][T29531] should_failslab+0xa8/0x100 [ 1329.265895][T29531] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 1329.265937][T29531] kmem_cache_alloc_noprof+0xa1/0x600 [ 1329.265963][T29531] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 1329.266007][T29531] ? kmem_cache_alloc_noprof+0x156/0x600 [ 1329.266034][T29531] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 1329.266084][T29531] __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 1329.266141][T29531] mmu_topup_memory_caches+0x21/0x170 [ 1329.266173][T29531] kvm_mmu_load+0x9d/0x21e0 [ 1329.266203][T29531] ? kvm_msr_allowed+0x9a/0x490 [ 1329.266231][T29531] ? kvm_msr_allowed+0x9a/0x490 [ 1329.266259][T29531] ? kvm_msr_allowed+0x9a/0x490 [ 1329.266284][T29531] ? kvm_msr_allowed+0x3f4/0x490 [ 1329.266310][T29531] ? kvm_msr_allowed+0x9a/0x490 [ 1329.266336][T29531] ? kvm_apic_has_interrupt+0x740/0x770 [ 1329.266387][T29531] vcpu_run+0x4f7e/0x7aa0 [ 1329.266452][T29531] ? update_se+0x90/0x1080 [ 1329.266537][T29531] ? __pfx_vcpu_run+0x10/0x10 [ 1329.266562][T29531] ? lock_acquire+0x115/0x350 [ 1329.266612][T29531] kvm_arch_vcpu_ioctl_run+0xe87/0x19c0 [ 1329.266660][T29531] ? kvm_arch_vcpu_ioctl_run+0x1f8/0x19c0 [ 1329.266705][T29531] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 1329.266750][T29531] kvm_vcpu_ioctl+0xa61/0xfd0 [ 1329.266788][T29531] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1329.266814][T29531] ? hook_file_ioctl+0x1f2/0x600 [ 1329.266872][T29531] ? __fget_files+0x2a/0x420 [ 1329.266915][T29531] ? __fget_files+0x2a/0x420 [ 1329.266951][T29531] ? __fget_files+0x3a2/0x420 [ 1329.266987][T29531] ? __fget_files+0x2a/0x420 [ 1329.267030][T29531] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1329.267069][T29531] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1329.267099][T29531] __se_sys_ioctl+0xfc/0x170 [ 1329.267132][T29531] do_syscall_64+0x166/0x520 [ 1329.267168][T29531] ? trace_irq_disable+0x3b/0x140 [ 1329.267197][T29531] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1329.267224][T29531] ? clear_bhb_loop+0x70/0xc0 [ 1329.267259][T29531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1329.267285][T29531] RIP: 0033:0x7fb09979e159 [ 1329.267310][T29531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1329.267333][T29531] RSP: 002b:00007fb09a598028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1329.267361][T29531] RAX: ffffffffffffffda RBX: 00007fb099a26090 RCX: 00007fb09979e159 [ 1329.267380][T29531] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 1329.267397][T29531] RBP: 00007fb09a598090 R08: 0000000000000000 R09: 0000000000000000 [ 1329.267414][T29531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1329.267429][T29531] R13: 00007fb099a26128 R14: 00007fb099a26090 R15: 00007fb099b4fa48 [ 1329.267471][T29531] [ 1329.915633][T29554] FAULT_INJECTION: forcing a failure. [ 1329.915633][T29554] name failslab, interval 1, probability 0, space 0, times 0 [ 1329.915672][T29554] CPU: 1 UID: 0 PID: 29554 Comm: syz.2.5428 Tainted: G L syzkaller #0 PREEMPT(full) [ 1329.915704][T29554] Tainted: [L]=SOFTLOCKUP [ 1329.915713][T29554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1329.915728][T29554] Call Trace: [ 1329.915737][T29554] [ 1329.915748][T29554] dump_stack_lvl+0xe8/0x150 [ 1329.915789][T29554] should_fail_ex+0x410/0x560 [ 1329.915822][T29554] ? alloc_pwq+0xaa6/0xe00 [ 1329.915852][T29554] should_failslab+0xa8/0x100 [ 1329.916054][T29554] ? alloc_pwq+0xaa6/0xe00 [ 1329.916086][T29554] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1329.916116][T29554] ? alloc_pwq+0xaa6/0xe00 [ 1329.916154][T29554] alloc_pwq+0xaa6/0xe00 [ 1329.916198][T29554] apply_wqattrs_prepare+0x389/0xdc0 [ 1329.916233][T29554] ? pcpu_alloc_noprof+0x100f/0x1900 [ 1329.916319][T29554] __alloc_workqueue+0x11be/0x1fe0 [ 1329.916364][T29554] alloc_workqueue_noprof+0xe3/0x210 [ 1329.916406][T29554] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 1329.916444][T29554] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1329.916486][T29554] nci_register_device+0x22c/0xa00 [ 1329.916671][T29554] ? __pfx_nci_register_device+0x10/0x10 [ 1329.916706][T29554] ? __raw_spin_lock_init+0x45/0x100 [ 1329.916745][T29554] ? __raw_spin_lock_init+0x45/0x100 [ 1329.916781][T29554] ? __init_waitqueue_head+0xa8/0x150 [ 1329.916818][T29554] virtual_ncidev_open+0x129/0x1a0 [ 1329.916895][T29554] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 1329.916926][T29554] misc_open+0x2d5/0x350 [ 1329.916998][T29554] chrdev_open+0x4d9/0x600 [ 1329.917031][T29554] ? __pfx_chrdev_open+0x10/0x10 [ 1329.917067][T29554] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 1329.917103][T29554] ? __pfx_chrdev_open+0x10/0x10 [ 1329.917131][T29554] do_dentry_open+0x816/0x1380 [ 1329.917176][T29554] vfs_open+0x3b/0x340 [ 1329.917202][T29554] ? path_openat+0x1428/0x1d60 [ 1329.917231][T29554] path_openat+0x1443/0x1d60 [ 1329.917279][T29554] do_file_open+0x23e/0x4a0 [ 1329.917344][T29554] ? __pfx_do_file_open+0x10/0x10 [ 1329.917397][T29554] ? _raw_spin_unlock+0x28/0x50 [ 1329.917425][T29554] ? alloc_fd+0x651/0x6c0 [ 1329.917471][T29554] do_sys_openat2+0x115/0x200 [ 1329.917505][T29554] ? __pfx_do_sys_openat2+0x10/0x10 [ 1329.917536][T29554] ? ksys_write+0x242/0x270 [ 1329.917561][T29554] ? __pfx_ksys_write+0x10/0x10 [ 1329.917587][T29554] __x64_sys_openat+0x138/0x170 [ 1329.917623][T29554] do_syscall_64+0x166/0x520 [ 1329.917655][T29554] ? trace_irq_disable+0x3b/0x140 [ 1329.917680][T29554] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1329.917703][T29554] ? clear_bhb_loop+0x70/0xc0 [ 1329.917733][T29554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1329.917756][T29554] RIP: 0033:0x7f7e5cf9e159 [ 1329.917779][T29554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1329.917799][T29554] RSP: 002b:00007f7e5ddc5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1329.917826][T29554] RAX: ffffffffffffffda RBX: 00007f7e5d226090 RCX: 00007f7e5cf9e159 [ 1329.917843][T29554] RDX: 0000000000000002 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 1329.917860][T29554] RBP: 00007f7e5ddc5090 R08: 0000000000000000 R09: 0000000000000000 [ 1329.917875][T29554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1329.917889][T29554] R13: 00007f7e5d226128 R14: 00007f7e5d226090 R15: 00007f7e5d34fa48 [ 1329.917926][T29554] [ 1330.973288][T13571] hsr_slave_0: left promiscuous mode [ 1331.005440][T13571] hsr_slave_1: left promiscuous mode [ 1331.024880][T13571] veth1_vlan: left promiscuous mode [ 1331.025008][T13571] veth0_vlan: left promiscuous mode [ 1331.193134][T27392] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1331.343905][T27392] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1331.345143][T27392] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1331.351202][T27392] usb 3-1: config 0 descriptor?? [ 1331.682152][T29618] FAULT_INJECTION: forcing a failure. [ 1331.682152][T29618] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1331.683372][T29618] CPU: 1 UID: 0 PID: 29618 Comm: syz.3.5438 Tainted: G L syzkaller #0 PREEMPT(full) [ 1331.683406][T29618] Tainted: [L]=SOFTLOCKUP [ 1331.683415][T29618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1331.683429][T29618] Call Trace: [ 1331.683438][T29618] [ 1331.683449][T29618] dump_stack_lvl+0xe8/0x150 [ 1331.683489][T29618] should_fail_ex+0x410/0x560 [ 1331.683523][T29618] _copy_to_user+0x31/0xb0 [ 1331.683560][T29618] sctp_getsockopt_reconfig_supported+0x3c7/0x510 [ 1331.683678][T29618] ? __pfx_sctp_getsockopt_reconfig_supported+0x10/0x10 [ 1331.683708][T29618] ? sctp_getsockopt+0x12f/0xb90 [ 1331.683740][T29618] ? __local_bh_enable_ip+0xd6/0x140 [ 1331.683778][T29618] sctp_getsockopt+0x585/0xb90 [ 1331.683807][T29618] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1331.683849][T29618] do_sock_getsockopt+0x51d/0x7e0 [ 1331.683891][T29618] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1331.683942][T29618] ? __fget_files+0x3a2/0x420 [ 1331.683977][T29618] ? __fget_files+0x2a/0x420 [ 1331.684019][T29618] __x64_sys_getsockopt+0x1a4/0x240 [ 1331.684081][T29618] do_syscall_64+0x166/0x520 [ 1331.684113][T29618] ? trace_irq_disable+0x3b/0x140 [ 1331.684140][T29618] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1331.684168][T29618] ? clear_bhb_loop+0x70/0xc0 [ 1331.684211][T29618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1331.684235][T29618] RIP: 0033:0x7fb74d19e159 [ 1331.684257][T29618] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1331.684278][T29618] RSP: 002b:00007fb74b3d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1331.684301][T29618] RAX: ffffffffffffffda RBX: 00007fb74d426090 RCX: 00007fb74d19e159 [ 1331.684320][T29618] RDX: 0000000000000075 RSI: 0000000000000084 RDI: 0000000000000003 [ 1331.684334][T29618] RBP: 00007fb74b3d5090 R08: 0000200000000180 R09: 0000000000000000 [ 1331.684351][T29618] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 1331.684376][T29618] R13: 00007fb74d426128 R14: 00007fb74d426090 R15: 00007fb74d54fa48 [ 1331.684413][T29618] [ 1332.949617][T29635] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1333.088140][T28953] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1333.140315][T28953] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1333.142310][T28953] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1333.176477][T28953] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1333.275515][T28953] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1333.281965][T27392] usb 3-1: Cannot set autoneg [ 1333.282381][T27392] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1333.337762][T27392] usb 3-1: USB disconnect, device number 103 [ 1333.351791][T28953] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1333.361472][T28953] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1333.394107][T28953] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1333.666378][T28953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1333.695619][T28953] 8021q: adding VLAN 0 to HW filter on device team0 [ 1333.722763][T13455] bridge0: port 1(bridge_slave_0) entered blocking state [ 1333.722884][T13455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1333.749368][T13455] bridge0: port 2(bridge_slave_1) entered blocking state [ 1333.749451][T13455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1333.795668][T28953] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1333.795694][T28953] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1333.890531][T28953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1334.068149][T28953] veth0_vlan: entered promiscuous mode [ 1334.073193][T29701] validate_nla: 23 callbacks suppressed [ 1334.073213][T29701] netlink: 'syz.2.5444': attribute type 7 has an invalid length. [ 1334.108114][T28953] veth1_vlan: entered promiscuous mode [ 1334.153910][T28953] veth0_macvtap: entered promiscuous mode [ 1334.158941][T28953] veth1_macvtap: entered promiscuous mode [ 1334.205787][T28953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1334.212634][T28953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1334.343733][T27392] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1334.434570][T17059] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1334.516315][T27392] usb 3-1: Using ep0 maxpacket: 8 [ 1334.517359][T27392] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1334.521332][T27392] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1334.521360][T27392] usb 3-1: Product: syz [ 1334.521378][T27392] usb 3-1: Manufacturer: syz [ 1334.521395][T27392] usb 3-1: SerialNumber: syz [ 1334.576620][T27392] usb 3-1: config 0 descriptor?? [ 1334.596569][T27392] gspca_main: se401-2.14.0 probing 047d:5003 [ 1334.615625][T20120] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1334.615683][T20120] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1334.644261][T23735] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1334.655595][T23732] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1334.655618][T23732] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1334.739343][T23735] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1334.739368][T23735] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1335.013099][T19614] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1335.049415][T27392] gspca_se401: Bayer format not supported! [ 1335.143178][T19614] usb 6-1: device descriptor read/64, error -71 [ 1335.394171][T19614] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1335.506672][ T3640] usb 3-1: USB disconnect, device number 104 [ 1335.523201][T19614] usb 6-1: device descriptor read/64, error -71 [ 1335.633800][T19614] usb usb6-port1: attempt power cycle [ 1335.662432][T29792] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1335.973350][T19614] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1336.008207][T19614] usb 6-1: device descriptor read/8, error -71 [ 1336.243385][T19614] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1336.265508][T19614] usb 6-1: device descriptor read/8, error -71 [ 1336.366711][T29799] ================================================================== [ 1336.366731][T29799] BUG: KASAN: slab-use-after-free in dvb_device_open+0xc4/0x340 [ 1336.366891][T29799] Read of size 8 at addr ffff88802c3b2c18 by task syz.2.5452/29799 [ 1336.366911][T29799] [ 1336.366926][T29799] CPU: 0 UID: 0 PID: 29799 Comm: syz.2.5452 Tainted: G L syzkaller #0 PREEMPT(full) [ 1336.366959][T29799] Tainted: [L]=SOFTLOCKUP [ 1336.366968][T29799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1336.366984][T29799] Call Trace: [ 1336.366993][T29799] [ 1336.367005][T29799] dump_stack_lvl+0xe8/0x150 [ 1336.367040][T29799] print_address_description+0x55/0x1e0 [ 1336.367081][T29799] ? dvb_device_open+0xc4/0x340 [ 1336.367116][T29799] print_report+0x58/0x70 [ 1336.367145][T29799] kasan_report+0x117/0x150 [ 1336.367177][T29799] ? dvb_device_open+0xc4/0x340 [ 1336.367216][T29799] dvb_device_open+0xc4/0x340 [ 1336.367251][T29799] ? do_raw_spin_unlock+0xf5/0x200 [ 1336.367288][T29799] chrdev_open+0x4d9/0x600 [ 1336.367317][T29799] ? __pfx_chrdev_open+0x10/0x10 [ 1336.367345][T29799] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 1336.367377][T29799] ? __pfx_chrdev_open+0x10/0x10 [ 1336.367404][T29799] do_dentry_open+0x816/0x1380 [ 1336.367440][T29799] vfs_open+0x3b/0x340 [ 1336.367467][T29799] ? path_openat+0x1428/0x1d60 [ 1336.367493][T29799] path_openat+0x1443/0x1d60 [ 1336.367527][T29799] do_file_open+0x23e/0x4a0 [ 1336.367554][T29799] ? __pfx_do_file_open+0x10/0x10 [ 1336.367589][T29799] ? _raw_spin_unlock+0x28/0x50 [ 1336.367617][T29799] ? alloc_fd+0x651/0x6c0 [ 1336.367663][T29799] do_sys_openat2+0x115/0x200 [ 1336.367696][T29799] ? __pfx_do_sys_openat2+0x10/0x10 [ 1336.367727][T29799] ? exc_page_fault+0x6a/0xc0 [ 1336.367761][T29799] ? do_user_addr_fault+0xc4c/0x1340 [ 1336.367785][T29799] __x64_sys_openat+0x138/0x170 [ 1336.367819][T29799] do_syscall_64+0x166/0x520 [ 1336.367851][T29799] ? trace_irq_disable+0x3b/0x140 [ 1336.367877][T29799] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1336.367902][T29799] ? clear_bhb_loop+0x70/0xc0 [ 1336.367928][T29799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1336.367952][T29799] RIP: 0033:0x7f7e5cf5e98e [ 1336.367974][T29799] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1336.367994][T29799] RSP: 002b:00007f7e5dda3b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1336.368021][T29799] RAX: ffffffffffffffda RBX: 00007f7e5dda46c0 RCX: 00007f7e5cf5e98e [ 1336.368039][T29799] RDX: 0000000000000002 RSI: 00007f7e5dda3c00 RDI: ffffffffffffff9c [ 1336.368057][T29799] RBP: 00007f7e5dda3c00 R08: 0000000000000000 R09: 0000000000000000 [ 1336.368072][T29799] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1336.368088][T29799] R13: 00007f7e5d226218 R14: 00007f7e5d226180 R15: 00007f7e5d34fa48 [ 1336.368116][T29799] [ 1336.368125][T29799] [ 1336.368132][T29799] Allocated by task 28555: [ 1336.368155][T29799] kasan_save_track+0x3e/0x80 [ 1336.368182][T29799] __kasan_kmalloc+0x93/0xb0 [ 1336.368208][T29799] __kmalloc_noprof+0x36b/0x720 [ 1336.368229][T29799] iter_file_splice_write+0x1ea/0x1240 [ 1336.368264][T29799] direct_splice_actor+0x101/0x160 [ 1336.368297][T29799] splice_direct_to_actor+0x57b/0xcb0 [ 1336.368330][T29799] do_splice_direct+0x195/0x290 [ 1336.368362][T29799] do_sendfile+0x52e/0x7c0 [ 1336.368387][T29799] __se_sys_sendfile64+0x144/0x1a0 [ 1336.368410][T29799] do_syscall_64+0x166/0x520 [ 1336.368441][T29799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1336.368465][T29799] [ 1336.368472][T29799] Freed by task 28555: [ 1336.368484][T29799] kasan_save_track+0x3e/0x80 [ 1336.368508][T29799] kasan_save_free_info+0x40/0x50 [ 1336.368541][T29799] __kasan_slab_free+0x5c/0x80 [ 1336.368565][T29799] kfree+0x1c5/0x650 [ 1336.368595][T29799] iter_file_splice_write+0x109f/0x1240 [ 1336.368630][T29799] direct_splice_actor+0x101/0x160 [ 1336.368674][T29799] splice_direct_to_actor+0x57b/0xcb0 [ 1336.368708][T29799] do_splice_direct+0x195/0x290 [ 1336.368742][T29799] do_sendfile+0x52e/0x7c0 [ 1336.368769][T29799] __se_sys_sendfile64+0x144/0x1a0 [ 1336.368794][T29799] do_syscall_64+0x166/0x520 [ 1336.368824][T29799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1336.368846][T29799] [ 1336.368853][T29799] The buggy address belongs to the object at ffff88802c3b2c00 [ 1336.368853][T29799] which belongs to the cache kmalloc-256 of size 256 [ 1336.368874][T29799] The buggy address is located 24 bytes inside of [ 1336.368874][T29799] freed 256-byte region [ffff88802c3b2c00, ffff88802c3b2d00) [ 1336.368898][T29799] [ 1336.368905][T29799] The buggy address belongs to the physical page: [ 1336.368925][T29799] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802c3b2c00 pfn:0x2c3b2 [ 1336.368949][T29799] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1336.368969][T29799] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 1336.368994][T29799] page_type: f5(slab) [ 1336.369016][T29799] raw: 00fff00000000240 ffff88801b041b40 ffffea00017c2690 ffffea0001dfd190 [ 1336.369037][T29799] raw: ffff88802c3b2c00 000000000010000f 00000000f5000000 0000000000000000 [ 1336.369060][T29799] head: 00fff00000000240 ffff88801b041b40 ffffea00017c2690 ffffea0001dfd190 [ 1336.369081][T29799] head: ffff88802c3b2c00 000000000010000f 00000000f5000000 0000000000000000 [ 1336.369103][T29799] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 1336.369124][T29799] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 1336.369136][T29799] page dumped because: kasan: bad access detected [ 1336.369154][T29799] page_owner tracks the page as allocated [ 1336.369163][T29799] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 18116132817 [ 1336.369200][T29799] post_alloc_hook+0x1f9/0x250 [ 1336.369235][T29799] get_page_from_freelist+0x2209/0x2280 [ 1336.369261][T29799] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 1336.369285][T29799] allocate_slab+0x7d/0x620 [ 1336.369315][T29799] refill_objects+0x2d5/0x350 [ 1336.369345][T29799] __pcs_replace_empty_main+0x2c8/0x6c0 [ 1336.369374][T29799] __kmalloc_cache_noprof+0x39b/0x600 [ 1336.369397][T29799] bus_add_driver+0x162/0x670 [ 1336.369419][T29799] driver_register+0x23a/0x320 [ 1336.369505][T29799] usb_register_driver+0x1e4/0x390 [ 1336.369580][T29799] do_one_initcall+0x250/0x870 [ 1336.369612][T29799] do_initcall_level+0x10a/0x1a0 [ 1336.369733][T29799] do_initcalls+0x59/0xa0 [ 1336.369757][T29799] kernel_init_freeable+0x29d/0x3e0 [ 1336.369782][T29799] kernel_init+0x22/0x1d0 [ 1336.369803][T29799] ret_from_fork+0x514/0xb70 [ 1336.369828][T29799] page_owner free stack trace missing [ 1336.369837][T29799] [ 1336.369843][T29799] Memory state around the buggy address: [ 1336.369856][T29799] ffff88802c3b2b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1336.369873][T29799] ffff88802c3b2b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1336.369890][T29799] >ffff88802c3b2c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1336.369903][T29799] ^ [ 1336.369916][T29799] ffff88802c3b2c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1336.369931][T29799] ffff88802c3b2d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1336.369944][T29799] ================================================================== [ 1336.369978][T29799] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1337.084775][T29799] CPU: 0 UID: 0 PID: 29799 Comm: syz.2.5452 Tainted: G L syzkaller #0 PREEMPT(full) [ 1337.095735][T29799] Tainted: [L]=SOFTLOCKUP [ 1337.100077][T29799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1337.110162][T29799] Call Trace: [ 1337.113495][T29799] [ 1337.116456][T29799] vpanic+0x56d/0xa60 [ 1337.120480][T29799] ? __pfx_vpanic+0x10/0x10 [ 1337.125021][T29799] ? __pfx___schedule+0x10/0x10 [ 1337.129927][T29799] panic+0xc5/0xd0 [ 1337.133694][T29799] ? __pfx_panic+0x10/0x10 [ 1337.138141][T29799] ? preempt_schedule_thunk+0x16/0x40 [ 1337.143540][T29799] ? dvb_device_open+0xc4/0x340 [ 1337.148454][T29799] check_panic_on_warn+0x89/0xb0 [ 1337.153459][T29799] ? dvb_device_open+0xc4/0x340 [ 1337.158345][T29799] end_report+0x73/0x170 [ 1337.162614][T29799] ? dvb_device_open+0xc4/0x340 [ 1337.167514][T29799] kasan_report+0x128/0x150 [ 1337.172176][T29799] ? dvb_device_open+0xc4/0x340 [ 1337.177069][T29799] dvb_device_open+0xc4/0x340 [ 1337.181801][T29799] ? do_raw_spin_unlock+0xf5/0x200 [ 1337.186951][T29799] chrdev_open+0x4d9/0x600 [ 1337.191581][T29799] ? __pfx_chrdev_open+0x10/0x10 [ 1337.196569][T29799] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 1337.202926][T29799] ? __pfx_chrdev_open+0x10/0x10 [ 1337.207891][T29799] do_dentry_open+0x816/0x1380 [ 1337.212706][T29799] vfs_open+0x3b/0x340 [ 1337.216892][T29799] ? path_openat+0x1428/0x1d60 [ 1337.221684][T29799] path_openat+0x1443/0x1d60 [ 1337.226305][T29799] do_file_open+0x23e/0x4a0 [ 1337.230838][T29799] ? __pfx_do_file_open+0x10/0x10 [ 1337.235892][T29799] ? _raw_spin_unlock+0x28/0x50 [ 1337.240777][T29799] ? alloc_fd+0x651/0x6c0 [ 1337.245160][T29799] do_sys_openat2+0x115/0x200 [ 1337.249873][T29799] ? __pfx_do_sys_openat2+0x10/0x10 [ 1337.255104][T29799] ? exc_page_fault+0x6a/0xc0 [ 1337.259812][T29799] ? do_user_addr_fault+0xc4c/0x1340 [ 1337.265126][T29799] __x64_sys_openat+0x138/0x170 [ 1337.270012][T29799] do_syscall_64+0x166/0x520 [ 1337.274633][T29799] ? trace_irq_disable+0x3b/0x140 [ 1337.279684][T29799] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1337.285776][T29799] ? clear_bhb_loop+0x70/0xc0 [ 1337.290503][T29799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1337.296416][T29799] RIP: 0033:0x7f7e5cf5e98e [ 1337.300855][T29799] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1337.320483][T29799] RSP: 002b:00007f7e5dda3b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1337.328936][T29799] RAX: ffffffffffffffda RBX: 00007f7e5dda46c0 RCX: 00007f7e5cf5e98e [ 1337.336939][T29799] RDX: 0000000000000002 RSI: 00007f7e5dda3c00 RDI: ffffffffffffff9c [ 1337.344937][T29799] RBP: 00007f7e5dda3c00 R08: 0000000000000000 R09: 0000000000000000 [ 1337.353024][T29799] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1337.361029][T29799] R13: 00007f7e5d226218 R14: 00007f7e5d226180 R15: 00007f7e5d34fa48 [ 1337.369050][T29799] [ 1337.372687][T29799] Kernel Offset: disabled [ 1337.377039][T29799] Rebooting in 86400 seconds..