last executing test programs: 21m32.703034687s ago: executing program 0 (id=279): r0 = gettid() r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) symlink(&(0x7f0000000200)='.\x00', &(0x7f0000000240)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x40) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0xa}}, @NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xc}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0xfffffff9}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x68}, 0x1, 0x0, 0x0, 0x404c0d0}, 0x0) r4 = syz_open_procfs(r0, &(0x7f0000000080)='net/dev_mcast\x00') pread64(r4, &(0x7f0000002180)=""/102400, 0x19000, 0x41e) 21m32.459267778s ago: executing program 0 (id=282): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x80900, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0x2, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0x29, 0x1, 0x6) bpf$MAP_CREATE(0xb00000000000014, 0x0, 0x48) ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000000000)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b1889b90f105d66b3e5a7c94742"}, 0x4, 0x4}) r3 = syz_open_dev$dvb_demux(&(0x7f0000000040), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000000080)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b7c4fb9191024da8887f94ba4fb"}, 0x4, 0x5}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) read(0xffffffffffffffff, 0x0, 0x53) write$cgroup_pressure(0xffffffffffffffff, &(0x7f00000000c0)={'full'}, 0xfffffdef) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) r5 = syz_ublk_setup_io_uring(0xed2, &(0x7f0000000180)={0x0, 0x30b5, 0x0, 0x2, 0x376}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000300)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000380)=@any_dev={0x6, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f00000003c0)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000440)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) r11 = fsopen(&(0x7f0000000480)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r11, 0x1, &(0x7f00000004c0)='crush_location\x00', &(0x7f0000000500)='rack:foo\x00', 0x0) close_range(r10, 0xffffffffffffffff, 0x0) r12 = dup(r4) syz_ublk_setup_queues(r12, r9, &(0x7f0000000540)={0x0, 0x4, 0x1000, 0xfeffffff, 0x32c}, 0x0, 0x1, &(0x7f00000005c0)={0x2e, 0x54, 0x0, r12, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x3, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, 0x25, r2}, 0x94) 21m31.926159878s ago: executing program 0 (id=284): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001500010000000000000000000b000000080002000a", @ANYBLOB="bf"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x4000094) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x0, &(0x7f00000001c0)}) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='\x00', 0x89901) fchdir(r3) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@private1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x200000c, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000000540)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffe5e) syz_fuse_handle_req(r5, &(0x7f0000002580)="4e5350994ebf71ce3049a58c5d050078bf16b0757a4c27b455e2a547739587dd3380b5df8f40a0696c5bd6cdb672cffe4d870c5c90ca92095b9ebf3e92fe31d8cd74275d857d34a74f7eecc7fac15e2f148d4e9d47bb45b858bbf078999970d180f28d7b2cefd92635d45a563d9229c9fd770efdc0848e52fa5efd9ada5c94a1ba94b4b7c7507f8b0819bb20910f9f50a83a010abbe126dd9f6a7b84eab6b0d5ce78d2ade77a5f7e4e997df1d03ffab4b4c945d803e4457909013127a98769c938c237f37263bc509a42bc56ff2dbf80e847e2c407009eef94f18e1e59069d62298fdbadae007ffbdf403c5049a4530ac0abecceb5608da02754c9a575af52c0b7e41226e2d642a814861c4310c935bcbae413516dde2132652b39c7aa0218a6ce65dabb4494965209ce879ba7e7e59039db5c1d36d6a7f86d72dd59954fd6f46124a2506b245a0db11aa89d2feb312a6596ea2fecaa7b6021f37a255f628da7ff6b6c36b514d3b6be34e505f9dac6acfb888198004699fb350ac93431533554658c4957df36703591638d6488bc03dd8290a75ebb367a481a50e79a46b04d005649cabd79e5c6326c066bc2b6fc5febb87ef66d832ef31a16c2a450a0b990fb549a5d810c928d1a81fa1dc795db2607ac7d46cb5716b68acdeb00987e429fe6a394632c83b43336e7b51d9cfdb50e83d8c6ba1784d9f74c16b476e048e65e7ac0af683b347d7377ac1795422e00e5bd8da9b313af83abb3348861116de7a99959169b7dff9f7d9b7a6d107f2e76670a6214a419bf8298f80eb570fa29264ba57a383c5ec5836ce33104ecaf1aec76e311280a1d2c8bd7abff3a5a242e6a637f7db63038ef5d78aca9c680d72b60da4dbeb0e1e683ddc82898647c589a81b8f92db06711d8a0af05560cd77fa7005283db71e8da21713fccd450822062b994d152aaed2cdcf0dec9c60617e15ba4df628da4e71279bf9d1eee5c7f055c27cddfdd45f9225d5d5529ef7119e2e3c9838e7362971e069be487797e949b24297de19c61340d1cd7a2bfa3880b91a71e934720a59e1e0ea992d2a1633a0852ad8addfcab73a291e35745e694a6471f429b124305886c1f79f67c78de3f3ec998c91e7fc59d26766cd446f6f0de603f2c6892e13cdaa37d9e8e118d098b6986ccd991993ec152193e7d77394b05b99e7d310c506707f1be52249438fba9615f6dad2ec7244fedf36e34ec311b7d6bee64271d6491079e161190ded7e28e2ada4307a9b2986c267b1a30d2f720ff23408011f1d589ce9ee77f981c7833656ccf7df5b3a87ec253ff7c7ef1e67ceeb10c93e3fa683cdadad65850ffbc402b7744e94cdecef9db9d264c755c53d36278df23d4c9685fdefa69f7588a33b8a64b35191ee81abcb9765577d175cb06e31c582807ff7243bfef44961fbc0f8a235242f51ee991ea621803d4dcfed90d26f004b299425bf219f6d185fe6e088ae44601b03defada18794feac93787696a5d419f09f769bc590f43d2df6a131f6895da2de120c2644685e57b1d476c6aba5881e954fb2575356452b118b942cb02b4ea0fcf8f1bbb9a23b6e32c9d0accd3dd861452a3ad77b38fe709e216974932deb5397fd8033ff0e073d93ac0b4be762bca0424d69bd57b22ba914133f87671a29498b268c2911e793215463ca2164e38059456107dcb29beedfd6277e2b41a11d1c6f1361b19875c9384f04f9c53c1856d71f360a8fafe05f7aef750ec0cf2bfcfa971c017ad071b69a18fdaf970b384d4c889cfa5a0397dbe89543a5c6302645d6edf959aa60709ce0225fe6c3266c7ef62157ac8e78fddcd8a1f2ca5b58128218d19276885515775326aeeee0006cc810843eb05144bf8e2fe3340cf60b32cafd96d23cd7d0d3adcbdfec9a2a3d88307c362633b1c5637608ea8476d900b3f836a9734bc5862ef52983577128d3f74b903b0e3bf64326c1b564ae42aeeb0c07702b63a9ff74a2af6b45e5185a53f36c17bc29dfbc0ea28ca5cca43a15d751e9887ad3e6a87faacb6a278c4c8a8d21b9a77b9776f33102a6e645e99cc5cbc543ed0674282c2b9f8e5d14c2599aa9ac8f81438c77f2b9368bdac82edcdc5366f39adec9e9a3fbd55b79abc16d2ebff26b7d0c88f18b486e5836333575e3fc7808cb423b44781c57965767862922b4ff32d9bae76296843a46f430211c27ef9db168430026a5691623284dfd459dbdd1f1a6ec9bfad666507e6eacb1e2a7866da2e12e6d596d0bbb150500590013d9288af20596447f97bf1744eb9cfb244d8fca269b1fb71e14de664be4e95d83fff1d7abcfebcf3e78c1c66d28f260fb0c19f9fbcd2abbdd7dd7246e49dc25d954bf25f810a2ff6f9069dfdc62e7170fe3b0964b2ac95024256dfa3e7a426be5bb5f707fd82c2b3afec5d5dcf5bbb8fcb6dbc1b59f6c5330966c70d8b016956903a4278817414ba3652a102d7e7e37ecc79400267fc3bf7601c0731f87d479c33f100735e748874155267f708cea49d549e93cf7a398b20373dc90ad9afd56d9c77cd24e2c4a18f7130b366c7fe5b26bc4d11ca1ed1b98fa0b4d7396f82ae6593f4575d19f4d8fd586c991129e5cbe15c8bacc89c3ee15ca471dea966b5c48ede0d3ba2a7e28c75c04e6a4aa49a61f4e391ffe78eb5e40a5ef349f3aa4d15f2291cc86ec7e47ae301bf0b6083dae44b695820a893d46732553ef15ed1c16d28268d52a7e3a7e7c009d0c0708a356d3310c1ebcbcca4d7acf433e34bfc9fc115498142dcc725e7a16879c75e4c2f01c6c98b39619f3248bf530e6ee593467e38cf4026cfdc4db6296560000d587f3c580750b1453ecc141c0461495551297d88ae034acbd4f5e80ce198e6640c4c1e9501529988109cef006eb2090a6fcd974d7f60290b78f1a8ce3051ac2d69636c3219f0a6ad8c254764396a1684b2fd9805b1853525f2e640e513197283cc4d4073ac033e0539a88f08aabe1423cd40b8a7e073437d812b57a5d39a0531dcbe13f4466e89efc66c2a1e4b39a3e0b3073c9d44e6cf9b85f4df5c4e03628d05bc0f94ec04234c9eca4ed17463f190406834b02888728f625371cda75d15ec19efebd59f00ab659eb94eb88bcb2110862a369ad599610c1530fcc118f5b82205bc5215fe3623ac8ec297d8ff4eee75ace20731c5d505e6605c26203b7f754164c9463f0a6eefe3a2880b8e06e7bc66bb2adcc1a3f9b0325f5ec31d12a25f1f73c2aa6bb3a7680d786a082a63b13cce1822fa6a4b085a871ae3409eecbc1fd8661b5d52bb2b8b72f23e24a225075f272ed2ba0c6c5c693811a0ef8db6da7cfe7c966c647f0187ad223eedb1012a5b7af103e98464ac768c79b21ca45b12a52cf261de0d367442cda71c4b8ee39c94ded1b22ba06c13836cb467ebab4efea07bdf1e3de8da56a0ee6d4f848011253cc21fac10700003513d3167b7a73e0d752b861c49814bc5410ebe53a0264f76068c91ee6ec9e2daa343482b2f0f06e605c5aaf81f2a3cd570efc2094b4bc452f9526f1bbe7b22b694fb8109a5a987fabf6250912d6099e67da9cac79e8b6f2cce4702d1f17cbc5d06c38b8a48155ec758369c185ded839fb58cd736fbb74105fe5baf44e7e3ed06843f23601b60a43b1f88fd29e9b3f58479f9b95392a39d5ba1a31ee4441ca2d1fb57c0a8678a07a724b7a65b2ab16d1da197f435bce3ef003fce27fa2f0a67c9dd6c930a4bcf59e79e57b010000006fe34972958c28b56642d14ea89bf4d7d6f7fcbcf4fd92bd08fc9fe424de4359112b11f81fbdc1505658363697713ff6e1f8ca3c4be34a79993a9091f6017cda6c7489ae5c07062555231427c3eb42a049f42d22a060983b044a7d34ab5d2b5386cca79af72396a48aad6b8dcd7855410fc6106e4a165994f26efff1e7ea0aa8f560333b5dfdb2a0d899b0fda955155f90c75effd3c9535d88508e836feb7807d57b2a57cca42d3d08fe7de60d2a33376f49bdacdd3f814bd0927f417f15ad62a10b302f46dc53a26fd997f3af46bbf990b6ada45ef83ce13029d167c65134e7b82b59ddfdc367e61c40defd2732ccebb1d4000f6c742df964e1fb390c255d2b1dfc745c6ab34af8096b5b67aa179e3f341854f7a69f7bf47664c832037ec7a78f8e27209e3f20f833fb6e8c0fc4a40920a5ad2b0618982ff72540009d5db82f0f5bcaed2a27f35d1e50eaa0cf8e48c7a2d43c25d0264db750a7f33b44a4bfaae576cf9ee7594ed204513899566564ed8bbc97ed18b1d8868f926a5c70ac06fbac1eade46792186be7bf8ffa3301239edd093449b7d77192782b5111c14169d2b4a1b3443ad62e4abdf11aac6a5b89a5b20ab0ad0abd949b9d64582c67ffce018e7e46de4091fcc77a65b971fc67c8d9cbf0c341ca764b1056ee5014d9865059616a525a1d46ae2fad159afe86dd1df9b8246411827e19535ca0aa9f83050b06e70aa2737f27e93d584a9cef878a642e9361efaa5d20bd8da901fa2e064656f686d3b3ea31d1d850ae9196b7764548f5c6450a32a717e09b6b7e75d43fbbda76e43a24f186d5578933f408bfa28e0435cde525fb91e71d92d704cc5a9b5e3db7aaec46d2b1f8dcb3f921f69bd7397c96a1e132c39c8f1656cea4365c779abf76199cb5b6aada022edec5c901cdafa2e7f3765af9c8b20cb1a6785085fcb0dc901367b89051bdfdc6b68c5215fd04e2b3c7e1c454a4d21132953b25c50995af0f7159a5a8d0a1621f4808f126a5bd40ddc79fed90f49925ee367a57a05c070fbe39fe2c213e7c1724a907ecfa69efe6e021c06a262471a4377f3c9809e9fee4f375e27c31b6afbb2151da86b7cab63c7b4fa4b77fb30172b9d0d78b1c0535ec0639c4910b5eeecbb5b8b5c8aa74c140e7ad347812e36db3097a7ff85c09ab2c0020202307f50efefcdb497b9c060ca68c4be54a9165b4cebc6b2e2e14e5ffb9213142418faedcdf26fd326b7672399e71cfffe3ed712ced5317c254f9199ee10c24c802d102bd8749513d3145201ca4e01bc7c8bbcf430afa541ec5665f86dfb143be648521bb0f2b029018201444787f644f8c88b79e754e6ea9c797babdaec72a9680abadf3a41684cdd57c2b6e833acc0846be5aa927f1b1b36562d2acb9ecfb758455230d050daec6748ba280a5edc86d48e3f8af0f8f4ffb18ae3cd3c19a82d504a4fd52bb62289ae8026572a497fe268f87ef4b4b5886aa07eeb698b7cbf99683f710afc9ed1f8a488883ce0eb8f7fd055b82a9fe21a409caa231c41ba151008e9658919c611e157d7f3926a5e4248532a6860e615b9c86e9fea212128d96ed58c9b84ef22706071eb69f492e4d8321ed9faf6c6a8928f86172bdc930244583ea15be497d9ce4ae79cb3e6293a8512ffaa9e8e358f3c7c7117001fb92891a40b84f9126cc3def5cde84f463bbac9668b9f56c3e4ee72fceebb47e52fc226bab213d8193516e7064459fd1365350a95c5a1c3ac44a73bbba2a4c17ebe49dd781bff1995cd706b77bb533117594ad63566f4c0730beab85ff4c713b7f10b95480fe99a0f676c5770e85509e4e60f198148115f0a3ce6028516a946178d1acacf7767f6be7277891369eff67762aa58f928d48b7231e44d899cea8289003349117a53d61bc27b207fdc91c9db61e677d1e1a1bc6a1b6e8564130b335233db4b5de8d62324e6d0ccb2b08c2ff922324eb8c506711142d4b8d7a21223ef0a3d534fdb0de58be95cd827152f71bdd0a82766b62b4c87536f0b7e7df343c4263187da887de6e65d11d0360e2376c1d71c367ae85edeed8f767d24c644b1a9b455ded1dc3cc224f99936a6ee66931c45e5e3db2427719ab2d5cd9c20d9bb0ec004b69bccb00649f3d8e34a3572c257de114b9f027d76bc7db9007175cc03b9e2061b6b3fe7409e009b5371544e56fe438cbd361e5b11efbf2d79d1c250a1e73ca8c601c4f4d1e3761290950421c48c7daa45965e472f5ef3c4b8597444dc5dc01cd25358055b5000617f3e7291da3413e3f0853b1271366612405c35ff1b785b984d921b518425628a533a29ab65d3c11f44c6daa86f8b6457ebb9419274c481aa6f3fa4547641670aff58b9cc62c0993d49a509f02dee755ee5f1fd2710c995c43a91c4f873afa1bbdff14427cba2641052a8f361ecbc72e8a6cf587e83f8bd3110c95fb080edc77a6d43cd58c447b0e02261e4109500c6458dce70acb17aa8f9dc1d15b94a61354164031b5d563c25d0246fc45e6401cefceb501e1468903e5d677759dbe3f24bd48ce55ff8b8f26529fb3b2d669202a1e8a498984b449b4830a0126b18f0e78182c9ce78fe0c448c0e27845b926cfde28fa85e156fa98fefaeb19ed1247c9643b447b4342c97cba5ca94ef1c555d5b49aa70e6aad45bfb557f15e8fdb2d6e3d10d8338a13fe3f187751985b37a5bb10b750f79e36fc2e2ee9bdecc3ed156e202ed7b45a94809d77edaa398042fc6a825a4848c334c557303d24eb3f8e01be06995ceb283c70272b00da61c3381628f0e372fe2fcc779ff7daf7e4b7f2686c39d3fab674b8867b62b0bf9d5cfd0c1d3b270521f55f147de75142ffd7fc9ac7e5dae7ca2fdf26a9222d060823852409dd040cfd1f66f218c6dbdaaacddab34b123af22f97384d64fac64d84fd638c96378c8f9532a11927d48440bc777ff8b8b9be88f930f3b579a713c0bc449dca3a3bd5f2efa98240ccc594299e44451dc60c6c5c9edd0d7b777912b3dc40c57e0ea5f4425cd7047e686c7304f04ba9f7b5de6ad2bd524f1d29f8802a524441fa286015adf4589431710aa4d76de8a956dc1d39c0a13abb7fc309d24222d036e204ab6bb46ef8a7595d9e4512e0b9d5f8fd719a4e3072e1d806967045789c67a1681f2a9f1f4b19f4f5e1afdafc17db7a6d5196161499e62ab4b0ec27648f3eeb1fb2b78f8ecf9b05cf9509a3b9e2a361238deb1c91bdbc8b1d11bbeb939fd9da811cd439069da0ecc00665d72357aac01f259a0325409b201859cc0569e0eba67a7a9ca7e8b78078d9370bd3e37f0571680ede60cb6bbfe69435d6ab5efd80cf051d119a7004fc0b600844d49218d844de8f521524a47ee50229c7da25e42a8639b5db225e7f23967f5d4f8a297aff04a3cbedc2985b6393a5ba0b26b6c7b4ca22d369b35b410799d1ad02825104d34f73408db1948438597931ed1c1c260e78340517bfa2f734537dbdf5ec303518ff4640efe7f7b1c2f46ba8b9ddb7a18d5e87ced554c9d6de78f85d293349590c6c32483534bc968b24a28eb54b9515589d6dd8eb51a5ad0b4d896ce92250397cbc404323fcdf0ee47ed634e0c58213bc5b35a72b21a098e11b79c061430dc817c1e0c79a5b6ed3b002979933f1b83a17f250b1bd5c4958df4d75531ca03efbda89f6a92fe08c23ad9014ff562a7f3dcde578d6825b9847b5df04dbca4f2aa52d8e0f4cf8183ce121e39b50358a9796acde0372a8ff97769874a80ab997cd889145aad4888c06963c2f5b82f53a748a6729fbc79d35c06d84e05c62e44ff78040e56ebfc6efcf0d8b49337d5a17c4041f0d5a8b616244d585a162b69db073accd9071d12df5b326a43b834bbffc2f2a60deafcbddf1c6438a1769d6fb09fbe1990e89da12164ef237f326edb5be64bb64b143a030de8a99b3c5e543c871cb581e2be090a92134aa587701f864907cadd7c1ce20fcf8f5dc7f7ecd06a6c19d89a92ca0ad4393c208b80bba990c7a3702a9c79bddde75d5db244719ac32191b6ceb041ab541fb47680a97dc0422b8a50d91e32cb08cd341b0b099aca5bd12b69d4f89d10b755b351a6489180b786a3bebac926532a4a2d85b07bce6c090d1aaaff079e36d5394a612f1351b90c13a0fa6bf9d188d548dfe6fa51a9026edb52009c03ed45ac51d05c58a957bcc67e05a588985ba00d79f33ae9cdd5f5721d9fdc72ee6e880708be87e8a60c3c035c146f2091d1b9a4c2cfa56f292fe1ba62290d4e56c05669291bbe917f3cac51802a2cc8e9c90dadfe666c233c5a5bb71ee17deec51ce60c73f57bf9ecb84873afcc44815131810c6c1217bea485ef9aa2785e859b25315ef8aa3a274982786e45d622ae831fb76010d69a181b069e4cc55d4436edb10d1119b0c6000c6d5cff7c72f740a59dc0507e7a952b69403c62673f122c9d1264fac6ce2262e86cd8d6a402672f88530fc2d16f31736dd497a4e853253ac8d5aff8d1376895e9f5519b2490cc2a2412ba0c99cec855f668837310035e92fb646486de1b0acffb91ae7516df3eeef381456b55e65baa58e71461c928687e699d2b21814805591382e95e1b970aaa53259917f070281f2336b7d570249d838b3f1a32753c336864e15f4561badf8fee034a29c52ff3fca7456ae140f83e3b2fd5b57c9aef3f20c664200d235f236ec47dd2fc20b14dc6000812237aea992d987e5460679e8c5b76d931ef6d951e6c7087e3106b6ce2db9de6f228fdf3ffc38710c0e8d5000a195a79d1fa2301038f5b27c40b09c34c025e5099d40c2204ea0eae985263c9101cab88d6857a320c9e497f22348a24861a5fb8d734e08cad09f9933748ff01eab22f17756f58688dc1b486a397563ee9ad0784b8833cdb5f7c6bcf76d9c1105f71c3c6aabefd70dc6cd5c66d31caf916145ac5ed7fa070b4277c0448ab1eb78c943be9aeab0587d321a4bcb7754f070881178f8be668b686124899fac252519f4b60ec42db766a908755040463125c26850177402a977246d36d23afac0a11889d54640bd8f6f670d686cfd33f6fc5d90cf6cbd63d9d0fd201dd4c74dbbab899f3c23c0b7e37ea0b2aff421327200d0da58b5893a4186ae3652cc6e11c2c2a0e52184a3872532acce98c94cebf4f31333663a620f0dba0ffd89c3124380075bd28caa6d449a050b3661b8fbaf4747b77c4928b1378fdc8c7a7b38ade1aeec44bdfacc8271d0b132b2029b0f3582f9919f5c8cd543abc9caf6b82b197cd482c3ef61a64743506342bf50a3c1ff544563bb8b2002911ee1fad698f4ac133ffed5bfe81239c918207a03c7a8bd71a0a502aea78d38e970e3ab2abf754b598acb79cf276792aa08724d0ba24f2a694912ab795b3f45f52dec50d9bfbc99ae27e1d2c2216afec6709d6513a64b29ef58255bbe18478c5d4f15f74ea63a1e15487752eec8fd019f1d4a7aa25277664754bd2d7cd3a7a018b92c56d965a1974885363757286da9e055ef7fac17876f0a64c1026a597733b897a9155ecbf420159ae8e5209aa83a3544fff1fb4566f2d54f95e3bbd30dcca5f24397e4bd47ff01292f0d6fe9dd47a810e0c25382fa69b4987d1afd9b69ef125110ad6b240eaa9c85829a2646f9ab7874bc02bfa8346cc9190943e9d46b44880670b1e2aa3a29e83be5472d7418885a353faade6e8b18f4b588607bbb758588d1e2f11a9dfa1c4d61be50249f1ee32e6ff8c0c7722aaec1bc79654a4772efc578bd6a14c79abcc77a4e09c8b6c6ea35cd3ab31e35268fb55db843176f8042f8ce7be0ddd4ead6dbdad0ef9e7cb2323db5cc48119a72b27306b8ff6366c0bc682a85ab9e2cf2238b6d6eb2e38a97d5577e6334cb2aa6e7c86e489e876f9d7053577a5cb57f52812fab7c4bd7b19a34c228ffb67dcac9281612f778b58c580c140542200fd00cb3ad81d93420df93c5af2493f646d8de797102fa0a650b2c7638623b823ff11444fdde453570f99f9099b60061a908b83383ba8b82bb78edd074dccf9342afdf8d11a6129ba6ea7030f3629056264f1736c2b926171b6dc7e1fa455a473de656390495f3b6ad2f9f46f35eacb075628ff739ef78f28ba683448068c7f18fb63f28ba7dbbb78999100dde0a94e8b8570817c7114c13e139ceb333782b29a84a5b19497fa785915c7680dd7f972cb59ba22161f60886e5cb3c3e808726cbf96bc4da78914eee565c6d9d18e70d22cf8c0244cf3cf488c3550eaa400bc0f26d64e0f1bc8d0301a841d954073a641f3ef883d81f4d5db8e9df708e64e640b38df7295f7fe573863653086bae5507c880ab7fdb7a6c5ce77027ffa7395233d3ce536d77ae6c2e9c8ffb6fee78a3bcb3b5f888bd595caa3a5586948776b950a89cde4db8247ffff27491c882b430afdd60e7a22324f6635a9aa7139f3e624c6d9ece60f7f8153b2080cf0544fbf8e1c436503766e670b902604ab521e11aa5a65cedd64cfaf898ac5f55c08c87693c323517bcb0d99c28f5e072d4f6540c7ead70138d47c1a67fd72bd6ef5613af33a0af311c3d0a631ca2a2dfbe35d1021eb610e40b9be128683235a788b5a4cacf99babee382458d59e8aa1dd7bba7e09dd30c055a3df8ed721a1778b2c6ed587a403566325cd19962edd7831caa44a6b716517bad502130e7cf6a5ce5288dc84c0170f622ae0b1e1166a9c2c0771d91df9f9dd82ae210469602ce38964746c1c1d04321aae7d464eb801dbea7ec39505457e778208774d72673626c998b002c46a9b4b1e390d9344f0c1043a2100b35196bce42d40caa0ea9a486bf8526fd1f0f0d362c2cac463ea7377a20b54b9435442ca529fc00da4fd7e27c4eaf14215a06857b54254c26346956fd7fe215a5ce57ec38cedf50a3c759e563a4fd87494f00e7bd9b44f3b7e99c6ef67187056a21d2fe1ac9d24125b1947eb293189fdc448b591af4d9b8eb091d6bbb5e50fae79d000044e282bb2ab6c63cc9562b151c214e45015354e62be63e1881238b907f7bdb791ff44a4e03fa29dbd26db2f49d0f4729b7cd9ba69a65b0b493466d35d09b3f590c67c31660d95e2ab4af2c9f1df91f04ce5a57dde2d75206b42e3423126774d76593c2f713ae279d7092506b513fd5b38f0f52d3fafd7141dfd4a0de1063754dba865faf8dc0f6be9d90ef21ec86a275533f6ad4b4e360dc775413f29eab8b3daac6279b9abfe163ea2f183e09ed91ef67fbb090875109288a182cfdcc46d90678efe5edceda6518335e678438cac4bb47d376f3f0e12aa55301735d7f42653c073d6a4a37b2e17d332dc1be6b50918c007b14886307cc39250e81efecd63d24067a49994572725a9df1760caac13a28f5255556b27ec245e93969b85cdec7cd1c2d2a433d3f9572b93054a7ce8adff81bc1d30884d5fc4791e251bd907e37af5bec74235c3e2f804e4e0450b715289942b7859ad207bafcfec1b586dc15e7911fe6d20aa3d02fcd47e9956780e300d7c53c17dfa15754deb4c20efebc7270bda0fa6b37fc88c6be4250cac38c1b8186b364482026ab52d65d3a691903fccc39772277011bfaa421adba76bed9731077be00000000d40f36bbd2a839c67dc4b862c968491b877d4fd13fc90f8da57a29121e12f78e85af765cd66e72ba513593fe1cdf20019985b065d828707d8e509c6834eab188deea5c9ee97955f4b07d37b6fc7beed73be94887d423a349f35bb8782bc654ceaec870d97f061bda02ae73f6d575f81e0b6326eae6c1b3085cc584686120e12dd9ad8ce44036bec8a189f900", 0x2000, &(0x7f0000004580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004640)={0x90, 0x0, 0x4000000000000, {0x0, 0x1fffffffe, 0x8, 0x6, 0x8, 0xc, {0x1, 0x8010001, 0x4d0, 0x40d, 0x6, 0x0, 0xed1, 0x2, 0x5, 0xc000, 0x7ff, r6, r7, 0x3d5, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000004700)={{0x1, 0x1, 0x18, r2, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) r9 = add_key(&(0x7f0000004740)='keyring\x00', &(0x7f0000004780)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r10 = socket$vsock_stream(0x28, 0x1, 0x0) getpeername(r10, 0x0, 0x0) r11 = add_key(&(0x7f00000047c0)='asymmetric\x00', 0x0, &(0x7f0000004800)="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", 0x554, r9) r12 = syz_open_procfs(0xffffffffffffffff, 0x0) r13 = add_key$keyring(&(0x7f0000004d80), &(0x7f0000004dc0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r13, &(0x7f0000004e00)='asymmetric\x00', &(0x7f0000004e40)=@chain={'key_or_keyring:', r9}) keyctl$KEYCTL_MOVE(0x1e, r11, r9, r13, 0x0) r14 = getuid() r15 = syz_genetlink_get_family_id$tipc2(&(0x7f0000005140), r0) sendmsg$TIPC_NL_LINK_GET(r12, &(0x7f0000005240)={&(0x7f0000005100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000005200)={&(0x7f0000004ec0)=ANY=[@ANYBLOB="4850c6440000007556d265d5", @ANYRES16=r15, @ANYBLOB="000326bd7000fddbdf2508000000140001800e00010069623a70696d7265670000001c0009800800020001040000080001000900000008"], 0x44}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r12, 0xc018937b, &(0x7f0000004e80)={{0x1, 0x1, 0x18, r10, {0xee00, 0xee01}}, './file0\x00'}) keyctl$chown(0x4, r9, r14, r16) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000005280)=0x4, 0x30e, 0x0) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000280)='./file0\x00', 0x28000, &(0x7f00000052c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=r4, @ANYBLOB=',group_id=', @ANYRESDEC=r7, @ANYBLOB=',default_permissions,default_permissions,blksize=0x0000000000000800,default_permissions,blksize=0x0000000000000a00,blksize=0x0000000000001800,blksize=0x0000000000000000,allow_other,fowner=', @ANYRESDEC=0x0, @ANYBLOB=',subj_role=,smackfsfloor=.%$,euid<', @ANYRESDEC=r8, @ANYBLOB=',fowner>', @ANYRESDEC=r14, @ANYBLOB="2c7375626a5f726f6c653d212c736d61636b6673666c6f6f723d237b5b295b272140211e2c7065726d69745f646972656374696f2c736d61636b6673726f6f743d5c2c243b235d5d242c00d8bede6016e9321758174a2d5fd86f3e3814097fb11caa71b543eb96b05b79fc387bd311538a96f3beed1ba103c83abac4dea4971e5275788413055c3d3c84616bc98163b9df75ef1942f8a850f1d922b310"], 0x1, 0x0, &(0x7f00000050c0)="ec1a1a8f71938dabac8d65360944d7da6e23740f5e3dd066f6d94fca26969b221b62ef6af63a546cdd64a5045d") sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r0], 0x30}}, 0x4008030) 21m31.658607861s ago: executing program 0 (id=286): io_setup(0x8, &(0x7f00000002c0)=0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000200)={0x5, &(0x7f00000001c0)=[{0x4e6, 0xab, 0x8, 0x551}, {0xb3b, 0x9, 0x81, 0x101}, {0xb, 0x7, 0xc, 0x4}, {0xef0, 0x4, 0xc, 0x1}, {0x7fff, 0xfb, 0xc0, 0x81}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) r3 = syz_open_procfs(r2, &(0x7f0000000000)='net/netlink\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000300)=""/253) ustat(0x1, &(0x7f0000000140)) listen(r3, 0x3) io_setup(0x5, &(0x7f00000000c0)=0x0) read$FUSE(r3, &(0x7f0000000400)={0x2020}, 0x2020) r6 = eventfd2(0x0, 0x0) io_submit(r5, 0x1, &(0x7f0000000100)=[&(0x7f0000000240)={0x1802, 0x0, 0x0, 0x5, 0x0, r4, 0x0, 0x0, 0x2, 0x0, 0x1, r6}]) ppoll(&(0x7f0000000180)=[{r4, 0x403}, {r4, 0x44a}], 0x2, 0x0, 0x0, 0x0) shutdown(r4, 0x0) eventfd(0x6) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000002440)={"c4d31134", 0x1, 0xb1, 0x1, 0x1000, 0x2, "0c31c075a4605e002a9d751ae4db04", "2e746cd4", "c0c979e6", "e3234a1f", ["c1a2386510d8f772c403dea4", "4f6a3e24783d4a06bb35131f", "f669bd112fd3c26c6b64f7a2", "facc2d8a07f3634a1ec21dba"]}) io_submit(r0, 0x0, &(0x7f0000001480)) 21m31.223164346s ago: executing program 0 (id=291): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x2, 0x4) syz_mount_image$fuse(0x0, &(0x7f0000000680)='./file0\x00', 0x200000, 0x0, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup\x00', 0x9801) move_mount(r1, &(0x7f0000000700)='.\x00', 0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x0) chroot(&(0x7f0000000780)='./file0\x00') umount2(&(0x7f00000007c0)='./file0\x00', 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000600)=[@in6={0xa, 0x4e23, 0x7ff, @private1, 0xe}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e22, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5b}, @in={0x2, 0x4e22, @remote}], 0x58) listen(r3, 0x5) r4 = accept4(r3, 0x0, 0x0, 0x0) write(r4, &(0x7f0000000200)="ea", 0x1) write(r4, &(0x7f0000000240)="04", 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000280)={0xe, 0x8006, 0x9, 0x1, 0x2}, 0x10) sendto$inet6(r4, &(0x7f00000002c0)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0x2}, 0x8) r5 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000340), 0x1000, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000800)={0xda, {{0xa, 0x4e23, 0xffffffff, @mcast2, 0x9}}, 0x0, 0x2, [{{0xa, 0x4e22, 0x9, @mcast1}}, {{0xa, 0x4e22, 0xfffffffc, @local}}]}, 0x190) ioctl$DM_DEV_CREATE(0xffffffffffffffff, 0xc138fd03, &(0x7f0000000380)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x24410, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}, @uuid={'CRP-syz', 0x0, '1\x00'}}}) ioctl$DM_DEV_ARM_POLL(r5, 0xc138fd10, &(0x7f00000004c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_dev={r6}}) close(r4) r7 = syz_open_procfs(0x0, &(0x7f00000009c0)='net/anycast6\x00') preadv(r7, &(0x7f0000000a00)=[{&(0x7f0000000a40)=""/88, 0x58}], 0x1, 0x5, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r7) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x54, r8, 0x201, 0x70bd2a, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x26}}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x2b, 0xe, [@erp={0x2a, 0x1, {0x1, 0x1, 0x1}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @preq={0x82, 0x1a, {{0x0, 0x1}, 0x2, 0x5, 0x6, @device_a, 0x10001, @void, 0x4, 0xffff}}]}]]}, 0x54}, 0x1, 0x0, 0x0, 0x20000050}, 0x48000) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) readv(r9, &(0x7f0000000b00)=[{&(0x7f0000000b40)=""/4090, 0xffa}, {0x0}, {&(0x7f0000001b40)=""/169, 0xa9}], 0x3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}], 0x10) 21m30.930710963s ago: executing program 0 (id=294): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x82040, 0x0) (async) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x40200000001, &(0x7f0000000100)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x7803, 0x3, {}, 0x8000, 0xa, 0x4}}}, 0x90) (async) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f0000000240), r1, 0x2}}, 0x18) (async) r2 = syz_clone(0x23940200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$cont(0xffffffffffffffff, r2, 0x0, 0x1000) (async, rerun: 64) epoll_create1(0x0) (async, rerun: 64) r3 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0) syz_usb_ep_read(r3, 0x1, 0x0, 0x0) (async) syz_usb_ep_write(r3, 0x1, 0x0, 0x0) (async) syz_usb_ep_write(r3, 0x82, 0xffffffffffffffce, 0x0) syz_usb_ep_read(r3, 0x1, 0x0, 0x0) (async) syz_usb_ep_read(r3, 0x1, 0x0, 0x0) (async) syz_usb_ep_read(r3, 0x1, 0x0, 0x0) 21m15.741186453s ago: executing program 32 (id=294): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x82040, 0x0) (async) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x40200000001, &(0x7f0000000100)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x7803, 0x3, {}, 0x8000, 0xa, 0x4}}}, 0x90) (async) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f0000000240), r1, 0x2}}, 0x18) (async) r2 = syz_clone(0x23940200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$cont(0xffffffffffffffff, r2, 0x0, 0x1000) (async, rerun: 64) epoll_create1(0x0) (async, rerun: 64) r3 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0) syz_usb_ep_read(r3, 0x1, 0x0, 0x0) (async) syz_usb_ep_write(r3, 0x1, 0x0, 0x0) (async) syz_usb_ep_write(r3, 0x82, 0xffffffffffffffce, 0x0) syz_usb_ep_read(r3, 0x1, 0x0, 0x0) (async) syz_usb_ep_read(r3, 0x1, 0x0, 0x0) (async) syz_usb_ep_read(r3, 0x1, 0x0, 0x0) 17m51.593308929s ago: executing program 2 (id=1359): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x1, 0x6}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={r1, 0x1, 0x6, @random="2bc1cfa2897b"}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000180)={0x0, 0x1, 0x6, @remote}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect(0x0, 0x2d, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xb0, 0x3b, 0x6e, 0x10, 0x4b4, 0x1002, 0x16d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x9, 0x5, 0x0, 0x8, "", [{{0x9, 0x4, 0x85, 0x5, 0x0, 0x47, 0x74, 0x4c, 0xe0}}, {{0x9, 0x4, 0xf5, 0x93, 0x0, 0x63, 0x5a, 0x65, 0x4}}]}}]}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="300300002100010029bd7000fbdbdf2500000000000000000000000000000001fe880000000000000000fa91d04e210004020080403200"/64, @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x330}}, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000200)=0x1c) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000010000)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) syz_usb_control_io$uac1(r4, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="00000b33a73f00000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17m50.771293737s ago: executing program 2 (id=1367): openat$tun(0xffffffffffffff9c, 0x0, 0x80c80, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000b00), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000b40)=0x200) write$dsp(r0, &(0x7f0000000b80)="5cba91a4", 0xffffffd9) write$dsp(r0, &(0x7f0000000bc0)="dce480febb0ccd0bcb66ade3495e87b440e5afdc984cc06eb1c91c85a7fec04b2f82e267c1edd1543b79d80c0f949073bdbaa464c040e61ea6e658101100101097a5821b6c0c79d177b96995281707ce6d20a6db", 0x54) write$dsp(r0, &(0x7f0000000c40)="cd", 0x1) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (fail_nth: 1) r1 = landlock_create_ruleset(&(0x7f0000000c80)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r1, 0x8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 17m50.33041011s ago: executing program 2 (id=1369): socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x2, &(0x7f0000000040)=0x0) r1 = eventfd(0x800) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x5, 0x4, 0x8001, 0x0, 0x7, 0x1ffffffffffe, 0x7, 0x8, 0x3}, 0x0) io_submit(r0, 0x2, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x842, r1, 0x0, 0x0, 0x34}, &(0x7f0000000140)={0x0, 0x0, 0x8000000, 0x7, 0x3, r1, 0x0, 0x0, 0x7, 0x0, 0x1, r1}]) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) 17m50.011041677s ago: executing program 2 (id=1371): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0xc0010005, 0x0, 0x39}]}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r6, r6, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 17m48.967361264s ago: executing program 2 (id=1377): socket(0x10, 0x3, 0x0) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x11}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) add_key$user(0x0, &(0x7f00000001c0)={'syz', 0x1}, &(0x7f00000000c0), 0x0, 0x0) pipe2$watch_queue(0x0, 0x80) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)={0x28, 0x2, 0x3, 0x1, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffff, 0x2}}]}, 0x28}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b80), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000bc0)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000c00)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000c40)=ANY=[@ANYBLOB="034886dd0100000000001400000060"], 0xfdef) 17m48.388929799s ago: executing program 2 (id=1380): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fanotify_init(0x200, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x7c5100, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0xa8843, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) socket$nl_audit(0x10, 0x3, 0x9) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80280, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x241, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000340)={'syzkaller1\x00', 0xc201}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=@newqdisc={0x2c, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}, {0xc}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x98, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x64, 0x2, [@TCA_MATCHALL_ACT={0x60, 0x2, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0xd, 0x9, 0x0, 0x6, 0x588}, 0x2}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x1fc16}, @TCA_MPLS_BOS={0x5}]}, {0xfffffffffffffe90}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x98}}, 0x0) pipe2(&(0x7f0000000240), 0x0) socket$inet_tcp(0x2, 0x1, 0x0) memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xcd\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81', 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) ppoll(&(0x7f0000000300)=[{r6, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 17m47.095157395s ago: executing program 33 (id=1380): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fanotify_init(0x200, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x7c5100, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0xa8843, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) socket$nl_audit(0x10, 0x3, 0x9) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80280, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x241, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000340)={'syzkaller1\x00', 0xc201}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=@newqdisc={0x2c, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}, {0xc}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x98, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x64, 0x2, [@TCA_MATCHALL_ACT={0x60, 0x2, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0xd, 0x9, 0x0, 0x6, 0x588}, 0x2}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x1fc16}, @TCA_MPLS_BOS={0x5}]}, {0xfffffffffffffe90}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x98}}, 0x0) pipe2(&(0x7f0000000240), 0x0) socket$inet_tcp(0x2, 0x1, 0x0) memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xcd\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81', 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) ppoll(&(0x7f0000000300)=[{r6, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 24.975161401s ago: executing program 1 (id=6148): syz_emit_ethernet(0x11, &(0x7f0000000100)={@multicast, @local, @void, {@llc={0x4, {@llc={0x8e, 0xff, "bb"}}}}}, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000001440)={{0x12, 0x1, 0x200, 0x10, 0x97, 0x22, 0x20, 0x5ac, 0x120a, 0x7b2d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x9a, 0x20, 0x2e}}]}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="3900000014000549ca192c000500015601618575e2854a2e4afd8657567b36f3132f3f62123231ba377a1b2cc32b38d3440c6942cb76cab300", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x8050) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x3, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x2000003e}, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2, 0x0, 0x0, 0x3}, 0x30, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000600)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe6e3, 0x1000, 0x0, 0x20e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd1f0, 0x1000, 0xffffffff, 0x19e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcc0, 0x41, 0x1, 0x2ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x52e8, 0x400, 0x3, 0x30c}}], 0x4, &(0x7f0000000140)={0x2e, 0x8fc87e2c80dc2f21, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x1ff}, 0x0, 0x0, '\x00', {0x1, 0xfea, 0x0, &(0x7f0000000880)=@buf_max_buf="4feee5e107546de8479ec1116172bcebb5bac4321645c8c6dd01f86f32fa68f10ec2d6914191d8c3ef8ace84376b770364f1e720a21b0349fc71279686640bfd9cdd03b72dfcc4f1b959ef9c32a3c6094f8e2394dcb1be9f4ac4dac3ba6fcfe6171b1f3282ab800c12f1aebdb149f4f8f6f877af101b6f4110889002b9960ed7fe38c6957464d851979aef59c59e588e539c9dfecc835b2236907b5f38eac7e44d06e08643ce0de172b2fbbea91e187f827197889d2f60262990a58f1c1710734ab75eda7aca7b5d19aefe50ceaddf6678e3472649ddf5a60edbc215be30485c8281e56f7d7e8f053281097c7e9c314d8b05c16195a34d0e45b4ff171ade70ffea1b094445799f295b4a66fd3787aea7a2e2282eceaca85627f63ec4d798d26656f171830cdfebf8f9e9667239299efcbe09379bbda4e22e7fb07cae21f9c73aee1c3b25b146ba948691401f547767ef40afdc806609bedce384ddbae71ae5c48d5fdba90f103088bda7171aee83b658292dca422593171c7e7b7c50605bb8b7bfc9386a85d553a698dbdb6ee0b6899c241a4ea8dfb13600dd7dbb5ff912dfec2224ffb5e48e0411d37bd269583427de0e5f2883eff6e1315ec6f15e75a44cddc749993baefd73dd978c83b963f9288574cf81a9da1f0ba7e2870f1006543e0a6fdc0b3cde0d21d7b32420681a73d0a80a4030c12881c5be6e02ce12deb0447ee5111af6b597098bfae218fc18a5d1133842242000aa685caa05f56bfa5bd0289f77178190cf34a45ad21e579fb091ff59205e1a25453a6299ad8dcdc0e9daf2a160f137f97c304d751e2ce7d3e1e99ed074408a1c53bbeb9c42f4c89bf06bb7de2690e4d4d3f2067ba4963f2ca4059b7f5192f2eed7d60e89b51649155774c41a00be0bd3fe5707a74cffb4bbd75e1da8a7e9da86891e4f18c07162d3ecb4267a27d27ca4a4a3f05acd1aee02c01c2f7a46b9db66a22e4ed5ad3f8cd9281b3ef92d92aa2f7003f3230d83a2a76a9c43d53ef9a9561d3f8465288e3c4f72d026bd3b64f60eb371a341d1e0d5ae5ee392a70ddad7bf392f57672e835852e1581eafeac77490356338716ac17730f62fc7f07d9ab82515bd331ca071341428181bcb961c9fea7c08820aa855c418dac2490ce79e615e857543801ce7dc88e70c14803f90db99b54a6ce3a3290c69f13665f863c287da468a7501743647c644e1d3bad9b88503bc7c173502402b4f4a970d9906545e917d2a1afcb9686dd8ff0b5c8cf1d49ed1dad0d0f7f0285073b35432ce519b7cafb62cd6b723fb21ad83124c39e3cc9b20401da4e158e0c6d93adcf5d557a838856380867438870208e785a98e56f0c8ec972aecf5ecc82e108f80456cc370b83d468c816fa05de3fe60215c0c0da87e7faac3d75f41976ff3d90ef4400be444a844b44e20fd30d9e88d4b06b7a7c3be66c34b03d33a98dc8d7ac0677ed76eb66b7267c2fe62c8371c7cd3f71089b948b599f255c09f5ad52d3cad8deb4d3ff6bff623ea091ab85c1857e5322517247d6e7f5d2867a184025059901755b101b95d5f73b96fb2b507bcae701c761359771ee4d1855819714eec98571915dff9b9306c18261c2a6d3b8720723785b088e42dc52284ec1b10081e6afe647deb0cf9e30c3c697d85bde8394da6f693c08894f9e004a1f5e40bce039621e2c1796de9eedc2cbae7d5217bb645f2ba1b653b7d0c786afc2b0a78b3a60e8204fa2048dea0c2a5b4a10b36dd8684549b452bce44b6944d33ce6f5419bb5c7dc903f5e82e089ef9db97d1a36a5ba7ff891c128889e84b340e1b3bec339a04bcc64c71832a61951120b112c77204a9b9b99410819d266e658bcf82056fa1b8c0a83509330f66f51d587d4fdba947fe636bc850444eaa309965bbeaf066bafce98c4000efe4b79ed7c557eaf9d7e3a9773f021c2591efc197e523312ae5feec75619910cb7e8cdb18ee26ca4e857605b323b0327ee43538ef23ce72ee86154a6a7e1f2412e76aa309a3a1d3f799ef2b7e7ea40ec6a5af2e79200ca79126da70b29f59554763db845606162b2bd212e46adbbb7aff71a66af361bc270171c54e528bc16fc4cdfa379267b5947850b3b26b0ff5cebe1ab870939ca4ca5baa91dab623ede1a87efbe26b0557c990029ccda9b7add090086f2542da3478977da5379cd5e0c44b0dec69d2a946a33df41a1fae4b1c3c396fc18c81070d7941d70285ee257d05c8bfe4b3efd52b2d6503d0c215ccb6de88b3ba2acc7d9915bece8356f3a377ac95ec925e7eb962ecc4d9f40502a13304bf56a802a1aafff0c68651a410f51670d2900357839648ec684662d2e385eb535981187f31d88d809f7cc224929f70f0293edb5922f83e87ce07ddfa7c8f9643a18166c7cc704425d648f27f42d32fa5c7240423e7e8d3c2af4ed54a8c29b2b3cd6548ad09ae208779186a6afd80bab53330debf90108c2a6388923886d83c4953f1921dbb7e82c69c96bab116e8fa01c8a227f5d9112261b295f737d04ae37576a15eff8461e963989399beb06a311bba7ee59bdf2ab056f34ec297f2b73b1c4257865766feb4be57e4039d23a86c651bd932664023124457c75b562034514b497e5431e7be448047215f4d8c19c29e0d9051b306644e3d7f1a7683df10b6ff357d38c66c9af54e205eddb1cc4f12b72e20ebb92353bdc662cb300a5da505980ef9fe69e253184d5c09ff227b198f1e63bf7635d7af27682ae67a25905af0b43ed36e74bedee32fee8904c687bd908528581f3e8d235b3efdb9f169bf44ef5536b6e59c080b19fda7ae3b4aac263a7e315941619b30796e0cf01d1e8daeb2399a6968cde35f837ab078d2fcb7a6fd4f30be959cc15d52795f8cc13930bbf6c1a777d0a015e6b8b4888c05aad62aa02ad95125b4059a8c1435ab7703996ce4308d61e8d9fd9c52b1c7b99c1523b326ffe93c8e19be1c922c0f0a966eac19772b80d44ac503e5ed6eeee8a1127a0d15f9ca4461bf363e87d482e4ee09043aea52a77db6948e3adce6bb25511258bfd4020d22e70a6fb33d33433b7d8bfce88c4c26efac6dc131ccfe9e65501e30daaace57f3adee3f0d817e502ccc15ef31f817d11de943b370c4e637ae3c6dc9070785a1d032ed2e21cba708e28f0668bbc14fdcd05ac1e88c1422c44e5e015fd5b4c2e63a0e683350f781440a801ed0977994004ad8723928b118eacf15afbdfe9edb7775c38bc621e651828e734f8c4dea9ed09786610d058228c2520c030c6060bee5ab9ab888e8a868035ed792d489dd6d8f22ff2f632521062c9f157584542118616b2079ea89c7b53959f122ee60fc7af17c5a4a9740e22fc2c9bcad56a71a3fcda7c924d62647a004e620725c5d838b9b2944e6201fa220671ba29f733555a4d18c1996be3e91d0347dbc43ca93db175993794d092371941746d8a134694ea7265956ed90d37524c6f9bb70538226f34dac2494ac838dc89fb079582eb1cf06a823d0efa802ae4400ad311c7d80073c03d9979f882370eb05e5945b567a72ef6fc78a7e14a55377edf559bba7656dc3bbe4a4f0bc4c9d538b442dfb385fb6dc537780af226191dcff65f5a50aadb3dcafe5e9826aa951d5db8654fa0d1cd312f7efd51385684480e2b3bbcb47fcb59675cb48a3c4a2e650163ea884b80f080fc7d1839a60dc942ef749bea323378ebb82c93903d96d04782e0c56a8c8ebaf2d3986181ca7eaba42bc8403ec684d68c1b79e48de0a8fdad02c0a91f79dfd885cddc1de4980ad34d7cbdf1f3c0b5866e205ba66163311f05889d193e0f7f192c454e8ad38699c50809faeb585bbab94cf7b701e5ad27e42640c680c357e687cf138ae6c5bd2345710ad8eb97e92180477835eb75f2a85e9696951c08adb5282145feae40752c556b32683719044e2c699df1c344bafe1a4f1dc3e148a965133c5b668d3e3fd3dcaee7f57591d2c317788f93dba3320e647c98a3cd3bfad113254ade2d218a3355059b76a8dbdb5ce6bafe252b1bea09a8b09ce40b51aa1fcbe9bd183347bf3bc242b5b965d791b32a308599f44bcc311f57ffe0cf97ba2c11306314655ff25c0bf8606a15ce2f5b28a7fc4bfe825222a137c94c9870f4cc80c4e6d5257d0c7b3f7de2e049c65807b6a187edcf0416fa2b46077e055a4912c71c84e2634509ffbc62ab27af48240f36c8340ae3245784ccc134a5b5c0b2cd6eb61764594f5801a1e464b2ddb699301f3171a7c948d7b7554bf2b4f2d2db4e8bdd6049cf5759ebb551ee726958a1db669dca8d938ee2bc35a6efafe25a6f9928aecf23609c51e24056aeb98ae670cbd458072dbfd80668b066a9ff9b088cefc371fabca2d6235cf2b4777bb58503fb44e352e44815b3b1320563f4bc6e33727bedb766cd0c664f41179fe28fc5c7f0fbf7a807573f0c8910faf6f899295d8d10ef67fd94f661e54edf4e4f3b10329559ec3ec1bc8bfa977959a0d5b9b69fec9c4826f9ad36e8e66aaf6305094ce0b025f8119b5f51b73ae040e1cd7885575888b31e90276501e04d1abaa358478db1fe8f392872a0dbea473f5360923bc6def20a50a59cada2f338f88974d47c5599597a300be239f845bea4a50dc2478661b5ed0d8f8c6153ab04c1f9f4b8c38861bcac3906ab328878e14deef7b068c7cb07bbdc45511a28a7c44fa1caf84e0528e61065d1090dc43618912d3f7ce2ccf88ae7d2fde37cfb5be9bb3f8597843a1d374ba7e622a57e71e389499374633a3c2c9ad20134cd32092c746dab1dc0ac6fec09ef7abb77fa808e5eeb712b292adb3d576e25459712e92808f06c9a6bfc74f5908343a0d704d651e7830b7b35e145baa4ba5bf336bf4fad04d059b1851376a78a7d421587308196f7936e66a36caca9e31044d31e9d897d95fa57950a4871891e4d12dbe39621383d0b7a3b1263aef261939e78750cd7d2a7a9692eb196ff86fe564f27eec0443af24511e5d948e65e305f5588feb527c39194fed42a5f4d033ddacc93a35b8ee10c400f4ef1e65f7e319e9c4bb53234db8c759e3fd4680e834bc6cf79a8aef568f8e5579bbb1b63ef0d84bf10511f661a7d43fae60612ec3a0c8f9c36bb245097ec70326872c2b5ea9785773d8c8133d3c1fba2fc263ea0d9e7187590178977b00c2450057d69c51ebb2d40170d6a4ad73d1866679be4ff2334751dfd4c0fd34fc1f89b75175bbfe6f05d3619d433f78ad95348808f2136391d890261a6f7f15500f99cb7e5078f646ef13a5e7bc671a926da13342ea458a441ea7783ef97be74648e9370f2976960f10be2194dc8e4f0768c369a7da7cd8b2123502a730c7631838d532fbeae2347adf7f37600c53af39e074e6ed6896ede7fdbbeb730299568a55f0d842b72d7f011cdf231a583a899abbfa856ccb3e4eeb75a013d279f79742efd07ca06b36a18d3e1537d1cabd7fdf26db9d3e15464ee1f0976f908a6de1acf8b16427c77d8c9479c0bfd9a66392291d128f5f0d47f62139e20a9b5f57271c2c9bc0bc3f1465cb63c798fc8bf4db761d72cae1aa64fe5748c365ddb3372dc046c954934947fd70622588af897e98e7f57801faf2482fb9ed67fdb88561780c46cd7abcacb5dc11b2ebdcfa3b01475c2bc075d5454e39943e9bcb248fc44d08497f53c5f09d1a00267300ea6c8cfb774d128ff6d679d09f434bcc91e142adc8382077c7bc36262357d1686e9c2a97b01dd3ee8333555bdb4f00d7ab6926c2286fc6df1cb832341fec4becd44c9a73b62fcf417ccacfbf"}}, &(0x7f0000001900)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0x1, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303"], 0x0) syz_usb_ep_read(r3, 0xf, 0x0, 0x0) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2002) readv(r4, &(0x7f00000000c0)=[{&(0x7f0000001000)=""/4096, 0x18}], 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000380)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000030101030b0000000000000002000008"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20000880) 22.230085928s ago: executing program 1 (id=6152): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYRES8, @ANYRESOCT=r1, @ANYRESOCT=r1], 0x68}, 0x1, 0x0, 0x0, 0x2400c061}, 0x240480d5) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) userfaultfd(0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8000000) writev(0xffffffffffffffff, 0x0, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x55) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="60000000120001030044e5df0000000000000002000000000000000000000000000000000000000000000000000000000000000000b31800000000", @ANYRES32=0x0, @ANYRES16=r0], 0x60}}, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000480), 0x4a6f81, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x24000085) epoll_create(0x400) r4 = add_key$user(0x0, &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000400)="1e1c7decc8de5a1cce697828a282e45e1e03d31f4bb6f3856f9b5b2fe864b5b3c47eb62c0950320d1dabb1ee76be60e990fbf2cc5c9269e40e146514cfb67777a92d6f75ded0c8e2dd0eeb3cb2a99e2794090ebba4", 0x55, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={0x0, r4, r4}, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @private2, 0xa}, 0x1c) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000000), 0x90) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000280)=0xfffffffffffffe41) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000540)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000580)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000640)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000680)={{}, {0x0, 0x989680}}, 0x0) 21.203055091s ago: executing program 6 (id=6153): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000580)={'syzkaller0\x00', 0x7101}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000005c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000840)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0x8}, {}, {0x10, 0xfff2}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x1c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x14, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000) unshare(0x68040000) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0x0, 0x10}, {0xffe0, 0xb}, {0x7, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x54815}, 0x4008002) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000000500)={'syzkaller0\x00', @random="8e08321e00"}) r12 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r12, 0x29, 0x1b, &(0x7f0000000000)={@empty}, 0x14) r13 = memfd_secret(0x80000) setsockopt$packet_int(r13, 0x107, 0x14, &(0x7f0000000800)=0x800, 0x4) get_robust_list(0x0, &(0x7f0000000a40)=0x0, &(0x7f0000000a80)) syz_clone3(&(0x7f0000000b00)={0x400c080, &(0x7f0000000780), &(0x7f00000007c0), &(0x7f00000008c0), {0x39}, &(0x7f0000000900)=""/252, 0xfc, &(0x7f0000000a00)=""/47, &(0x7f0000000ac0)=[0x0], 0x1, {r13}}, 0x58) syz_emit_ethernet(0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaf86dd60000400000e3273fc010000f9ffffffffffffff0000000100000000000000000000000000000000000004d600000000000000080090"], 0x0) 19.267466958s ago: executing program 6 (id=6159): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001d00)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001dc0)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000001e80)=@delqdisc={0x2c, 0x25, 0x100, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x7, 0xf}, {0x8, 0x6}, {0xb, 0x7}}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001f00)=@delchain={0x74, 0x65, 0x400, 0xb, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xf, 0xb}, {0xfff2, 0xd}, {0xa, 0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FLAGS={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x6}}, @filter_kind_options=@f_route={{0xa}, {0x1c, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x10, 0x6}}, @TCA_ROUTE4_IIF={0x8, 0x4, r3}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x85}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r6, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x3ffffc}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000840)=""/111, 0x6f}, {&(0x7f00000008c0)=""/4116, 0x1014}, {&(0x7f0000001900)=""/182, 0xb6}, {&(0x7f00000019c0)=""/156, 0x9c}, {&(0x7f0000001a80)=""/167, 0xa7}, {&(0x7f0000001b40)=""/102, 0x66}], 0x6}, 0x5}], 0x4, 0x40010000, 0x0) ioctl$MEMREADOOB64(0xffffffffffffffff, 0xc0184d16, &(0x7f0000001cc0)={0x1, 0x0, 0x65, &(0x7f0000001c40)="a1811ecf688d4dac19204898e36195788c219e98ce5b3e2c271c73812f2ce778d56bc9c101cb375deecd9cac50c459b2b5085c1f8c64164bab63d1a4f712e0d4f4135e1aaf4463b37efbb5c73b52ad6af552dc43a570cf31ca7ec7c0721428a23c64b0d0be"}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dbdc01, {0x0, 0x0, 0x0, r3, {0xb, 0x10}, {0x1, 0xb}, {0x8, 0x7}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x0, 0x4, 0x100, 0xfff5, 0x2}, {0xf, 0x1, 0x7, 0x4007, 0x3, 0x8000}, 0x40000004, 0x40, 0x1876}}, @TCA_TBF_BURST={0x8, 0x6, 0x2}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240448a4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000380)={'syzkaller0\x00', @multicast}) r7 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r7, &(0x7f00000003c0)='9', 0x1f4, 0x40000, &(0x7f0000000400)={0x11, 0x10, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x14) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000021c0)=ANY=[@ANYBLOB="12010000000000401c1b271b00000000000109022400010000100909040000010300000009210000ff012218000905810300000200003c9830b0b8220a2938c547d006b544806dc28ac7cd1ec1381433f000246f0c357a835358fb37effada4cd6a1c45493941e93df92cfad7beff7d8e846fe850cc8c8e2368dbeb2fcbe23446dac1d76d202b7f9b904a2a2ea0df3159e44b4dd287d1b3ad919984ddc3d59769a5f2b40b7fe18b6ae3f7091e74139af9ff2dbbe0cc774af410de7b2dc24217224657a0a5079a5ac35d00f666a66c734f376003004db9721a5322038ec47ab3c03a7db069c55485a1e8f9b1d3388"], 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/timers\x00', 0x0, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001fc0), r6) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r10, &(0x7f0000002080)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002040)={&(0x7f0000002000)=ANY=[@ANYBLOB="02000003", @ANYRES16=r11, @ANYBLOB="01022cbd7000fcdbdf25770000000500ee00420000000800ef000a0000000800ef00020000000500ee0002000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004840) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) r13 = syz_open_dev$mouse(&(0x7f0000001bc0), 0x100000001, 0x102) connect$rds(r13, &(0x7f0000001c00)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000004c0)={@dev, @empty, 0x0}, &(0x7f0000000540)=0xc) sendmsg$ETHTOOL_MSG_RINGS_SET(r9, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000600)={&(0x7f00000020c0)=ANY=[@ANYBLOB="b8000000", @ANYRES16=r12, @ANYBLOB="020029bd7000ffdbdf2510000000080006007f000000080007000100000008000900cb000000500001801400020070696d7265670000000000000000000008000100", @ANYRES32=r3, @ANYBLOB="14000200627269646765300000000000000000001400020076657468305f6d61637674617000000008000300010000000800070002000000080009000800000008000700810000002400018008000100", @ANYRES32=r3, @ANYBLOB="080003000200000008000100", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="c15950e4070af61ebac3c634e7d64a394da769e6f1be2a2a260080c700"/43], 0xb8}, 0x1, 0x0, 0x0, 0x4015}, 0x20040001) syz_usb_control_io$hid(r8, 0x0, 0x0) 18.427653154s ago: executing program 1 (id=6161): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='attr\x00') r1 = open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2025, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x11e, 0x20, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffadff8cbcff0000000000000800450000270300000000019078ac1e0001ac1414aa040090780300000045000000000000000000000000000000ffffffff"], 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x9}]}}}]}]}], {0x14}}, 0xe4}}, 0x44840) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c00000013000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB="1400350064756d6d7930000000000000000000006f25d84793804da32eaf63"], 0x3c}}, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0xffe00000, 0x200000, &(0x7f0000200000/0x200000)=nil}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000140)={0x0, 0x1, 0xffe00000, 0x200000, &(0x7f0000200000/0x200000)=nil}) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 17.800151494s ago: executing program 1 (id=6164): set_mempolicy(0x4005, &(0x7f0000000000)=0x2e8d, 0x6) open(0x0, 0x143142, 0x80) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="020000002000000000000000040000000000000010000000000000008600000000000000"], 0xfe44, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000000740)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000002800)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000002840)={0x6, 0x0, 0x6, 0x691}, 0x10) sendto$inet6(r2, &(0x7f0000002880)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000028c0)={0x0, 0x1}, 0x8) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000180)=0x200000, 0x4) r4 = syz_open_dev$dvb_dvr(&(0x7f0000000100), 0x0, 0x13f) r5 = syz_usb_connect(0x0, 0x32, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00008d4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) set_mempolicy(0x6005, &(0x7f0000000380)=0xfffffffffffffffd, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000027c0)='auxv\x00') read$FUSE(r6, &(0x7f0000000780)={0x2020}, 0x2020) syz_usb_control_io(r5, 0x0, &(0x7f0000000280)={0x84, &(0x7f0000000340)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, &(0x7f0000000440)={0x84, &(0x7f0000000500)={0x40, 0x40, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, &(0x7f0000000540)={0x84, &(0x7f0000000600)={0x40, 0x41}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r5, 0x0, &(0x7f0000000640)={0x34, &(0x7f0000000680)={0x20, 0x1, 0xa, "b9ab30fcfd5c80f4fce4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r5, 0x0, &(0x7f00000006c0)={0x34, &(0x7f0000000700)={0x0, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$vim2m(&(0x7f0000000140), 0x4, 0x2) dup2(r4, r7) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0xc000, 0x0) 15.864462542s ago: executing program 5 (id=6171): sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f0000000540), 0x0, 0x0, 0x0, &(0x7f0000000580)) unshare(0x60000600) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt(r0, 0x0, 0x482, &(0x7f00000002c0)="110000007f0000014e200000000000006d6811000000000000000000000000001000"/44, 0x2c) 15.060625638s ago: executing program 1 (id=6172): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000800)=ANY=[], 0x0}, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={r0, 0xb4, &(0x7f0000000780)}, 0x10) 14.179091684s ago: executing program 1 (id=6173): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = dup2(r0, r0) readv(r1, 0x0, 0x0) write$P9_RREADLINK(r1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x38, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x10c0}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}]}}}]}, 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000880}, 0x44804) r4 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x88, r6, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000}, 0x20004005) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) 9.242476559s ago: executing program 6 (id=6174): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000880), 0x2c0440, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = socket$tipc(0x1e, 0x5, 0x0) getitimer(0xe, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x842, 0x2}, 0x10) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r4 = syz_open_dev$video4linux(&(0x7f0000000200), 0x3ff, 0xb00) ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, &(0x7f0000000240)={0x1, 0x0, {0xb4f, 0x5b, 0x3002, 0x7, 0x3, 0x1, 0x0, 0x2}}) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f000015c000/0x18000)=nil, &(0x7f0000000900)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0xa4242, 0x0) r6 = socket$netlink(0x10, 0x3, 0x15) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000080)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SET_BITMAP_FILE(r5, 0x4004092b, r3) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r7) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000000005000300030000000500050036000000050003"], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r5, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) sendfile(0xffffffffffffffff, r5, 0x0, 0x2000fb) ioctl$KVM_RUN(r3, 0xae80, 0x0) 9.217219464s ago: executing program 6 (id=6175): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x2, '\x00', 0x2}, 0x18) r1 = socket$inet6(0xa, 0x3, 0x3) syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = openat$binfmt_format(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000180)='./file1\x00', 0x0, 0x0, r4}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) unshare(0x400) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) accept4(r5, 0x0, 0x0, 0x0) set_mempolicy(0x4005, &(0x7f0000000040)=0x13, 0x6) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@bridge_newneigh={0x48, 0x1c, 0x2, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x0, 0x2, 0x80, 0x9}, [@NDA_FLAGS_EXT={0x8}, @NDA_DST_IPV4={0x8, 0x1, @multicast1}, @NDA_PROTOCOL={0x5, 0xc, 0x8}, @NDA_LLADDR={0xa, 0x2, @remote}, @NDA_SRC_VNI={0x8, 0xb, 0x10}]}, 0x48}, 0x1, 0x0, 0x0, 0x45844}, 0x4000080) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x1f, 0x6, 0x610, 0x1e8, 0x0, 0x400, 0x400, 0x400, 0x540, 0x540, 0x540, 0x540, 0x540, 0x6, &(0x7f0000000280), {[{{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x3, 0x10}}}, {{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @loopback}, [0xffffff00, 0xffffff80], [0xffffff00, 0xff, 0xff0000ff, 0xffffffff], 'sit0\x00', 'ip6gretap0\x00', {}, {0xff}, 0x56, 0x0, 0x0, 0x24}, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30}, {[0x3680, 0xf], 0xd72e, 0x20, 0x1}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x7fff, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xff000000], [0xff, 0xffffffff, 0xffffffff, 0xff000000], 'veth1_virt_wifi\x00', 'erspan0\x00', {0xff}, {}, 0xc, 0x17, 0x1}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x46}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xd}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz0\x00', {0x4f4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x670) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xffe0) socket$inet_icmp_raw(0x2, 0x3, 0x1) 8.170604353s ago: executing program 5 (id=6179): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b5, &(0x7f00000008c0)) r2 = io_uring_setup(0x289f, &(0x7f00000009c0)={0x0, 0x904b, 0x3000, 0x0, 0x2d6}) poll(&(0x7f0000000a40)=[{r2}], 0x20, 0x72) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000780)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x58, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1a}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="c706e368607e"}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000050}, 0x1) io_uring_setup(0x4e9c, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000002f695871dece0a000004000000080018000dac0f0004001e00"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x4) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'sit0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x48801}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x158, 0x18c, 0x203, 0x158, 0x19030000, 0x248, 0x2e0, 0x2e0, 0x248, 0x2e0, 0x7fffffe, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0x0, 0x0, 0xff, 0xff], [0xffffff00, 0xff000000, 0xff000000, 0xff000000], 'bond_slave_1\x00', 'bond0\x00', {}, {}, 0x84, 0x7, 0x2, 0x55}, 0x300, 0x110, 0x158, 0x0, {0x1000000}, [@common=@unspec=@physdev={{0x68}, {'ip_vti0\x00', {}, 'veth0_macvtap\x00', {}, 0x1c, 0x11}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00', {0x8}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00', {0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) fsopen(0x0, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x2040400) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) getdents64(0xffffffffffffffff, &(0x7f0000000900)=""/58, 0x3a) getdents64(0xffffffffffffffff, 0xfffffffffffffffe, 0x29) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000980)) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x73f8, 0x4}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 6.900569044s ago: executing program 4 (id=6183): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000800)=ANY=[], 0x0}, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={r0, 0xb4, &(0x7f0000000780)}, 0x10) 6.218672698s ago: executing program 4 (id=6185): socket(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r1, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000680)=[@text32={0x20, &(0x7f0000000180)="c4e1c1e4346c670f01710e0f080fda49040f7f4104f4b913020000b800000000ba000000800f3066baa100b000eec4c1615f5a49660f3834e9", 0x39}], 0x1, 0xe8, 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec0000000109021200"], 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYRES64=0x0], 0x3c}}, 0x0) r7 = signalfd(r6, &(0x7f00000007c0)={[0x5]}, 0x8) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_NAN(r7, &(0x7f0000000340)={&(0x7f0000000880), 0xc, &(0x7f00000008c0)={&(0x7f0000000240)=ANY=[@ANYRES8=r3, @ANYRES64=r8, @ANYBLOB="200027bd7000fe050000000000000c0099000800000052000000f1ff0bab4d496d44fb866816ef0012be69099825a5544754509c63000000084c93fe66174ba89a080000000000e2631eb65a08083313d459d3f07c88880600000089decc3253efd9384daf817d95130b4cb3b83eded561446a3398df9af0b89135b627363b416fe28344a518ab56ec6dc03f000000000000000000000000000000000000000000000000000000000016a713efe67ab756ca0788ef40aecc89a8ca225e8d3ff331277cdb97060b78"], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r7, 0x12, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'bridge_slave_1\x00'}) fchdir(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r9 = gettid() timer_create(0x7, &(0x7f0000000940)={0x0, 0x28, 0x5, @tid=r9}, &(0x7f0000000980)) openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000a00)={0x0, 0x0, 0x10001, 0x9, r9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 5.782513794s ago: executing program 5 (id=6186): syz_emit_ethernet(0x11, &(0x7f0000000100)={@multicast, @local, @void, {@llc={0x4, {@llc={0x8e, 0xff, "bb"}}}}}, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000001440)={{0x12, 0x1, 0x200, 0x10, 0x97, 0x22, 0x20, 0x5ac, 0x120a, 0x7b2d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x9a, 0x20, 0x2e}}]}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="3900000014000549ca192c000500015601618575e2854a2e4afd8657567b36f3132f3f62123231ba377a1b2cc32b38d3440c6942cb76cab300", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x8050) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x3, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x2000003e}, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2, 0x0, 0x0, 0x3}, 0x30, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000600)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe6e3, 0x1000, 0x0, 0x20e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd1f0, 0x1000, 0xffffffff, 0x19e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcc0, 0x41, 0x1, 0x2ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x52e8, 0x400, 0x3, 0x30c}}], 0x4, &(0x7f0000000140)={0x2e, 0x8fc87e2c80dc2f21, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x1ff}, 0x0, 0x0, '\x00', {0x1, 0xfea, 0x0, &(0x7f0000000880)=@buf_max_buf="4feee5e107546de8479ec1116172bcebb5bac4321645c8c6dd01f86f32fa68f10ec2d6914191d8c3ef8ace84376b770364f1e720a21b0349fc71279686640bfd9cdd03b72dfcc4f1b959ef9c32a3c6094f8e2394dcb1be9f4ac4dac3ba6fcfe6171b1f3282ab800c12f1aebdb149f4f8f6f877af101b6f4110889002b9960ed7fe38c6957464d851979aef59c59e588e539c9dfecc835b2236907b5f38eac7e44d06e08643ce0de172b2fbbea91e187f827197889d2f60262990a58f1c1710734ab75eda7aca7b5d19aefe50ceaddf6678e3472649ddf5a60edbc215be30485c8281e56f7d7e8f053281097c7e9c314d8b05c16195a34d0e45b4ff171ade70ffea1b094445799f295b4a66fd3787aea7a2e2282eceaca85627f63ec4d798d26656f171830cdfebf8f9e9667239299efcbe09379bbda4e22e7fb07cae21f9c73aee1c3b25b146ba948691401f547767ef40afdc806609bedce384ddbae71ae5c48d5fdba90f103088bda7171aee83b658292dca422593171c7e7b7c50605bb8b7bfc9386a85d553a698dbdb6ee0b6899c241a4ea8dfb13600dd7dbb5ff912dfec2224ffb5e48e0411d37bd269583427de0e5f2883eff6e1315ec6f15e75a44cddc749993baefd73dd978c83b963f9288574cf81a9da1f0ba7e2870f1006543e0a6fdc0b3cde0d21d7b32420681a73d0a80a4030c12881c5be6e02ce12deb0447ee5111af6b597098bfae218fc18a5d1133842242000aa685caa05f56bfa5bd0289f77178190cf34a45ad21e579fb091ff59205e1a25453a6299ad8dcdc0e9daf2a160f137f97c304d751e2ce7d3e1e99ed074408a1c53bbeb9c42f4c89bf06bb7de2690e4d4d3f2067ba4963f2ca4059b7f5192f2eed7d60e89b51649155774c41a00be0bd3fe5707a74cffb4bbd75e1da8a7e9da86891e4f18c07162d3ecb4267a27d27ca4a4a3f05acd1aee02c01c2f7a46b9db66a22e4ed5ad3f8cd9281b3ef92d92aa2f7003f3230d83a2a76a9c43d53ef9a9561d3f8465288e3c4f72d026bd3b64f60eb371a341d1e0d5ae5ee392a70ddad7bf392f57672e835852e1581eafeac77490356338716ac17730f62fc7f07d9ab82515bd331ca071341428181bcb961c9fea7c08820aa855c418dac2490ce79e615e857543801ce7dc88e70c14803f90db99b54a6ce3a3290c69f13665f863c287da468a7501743647c644e1d3bad9b88503bc7c173502402b4f4a970d9906545e917d2a1afcb9686dd8ff0b5c8cf1d49ed1dad0d0f7f0285073b35432ce519b7cafb62cd6b723fb21ad83124c39e3cc9b20401da4e158e0c6d93adcf5d557a838856380867438870208e785a98e56f0c8ec972aecf5ecc82e108f80456cc370b83d468c816fa05de3fe60215c0c0da87e7faac3d75f41976ff3d90ef4400be444a844b44e20fd30d9e88d4b06b7a7c3be66c34b03d33a98dc8d7ac0677ed76eb66b7267c2fe62c8371c7cd3f71089b948b599f255c09f5ad52d3cad8deb4d3ff6bff623ea091ab85c1857e5322517247d6e7f5d2867a184025059901755b101b95d5f73b96fb2b507bcae701c761359771ee4d1855819714eec98571915dff9b9306c18261c2a6d3b8720723785b088e42dc52284ec1b10081e6afe647deb0cf9e30c3c697d85bde8394da6f693c08894f9e004a1f5e40bce039621e2c1796de9eedc2cbae7d5217bb645f2ba1b653b7d0c786afc2b0a78b3a60e8204fa2048dea0c2a5b4a10b36dd8684549b452bce44b6944d33ce6f5419bb5c7dc903f5e82e089ef9db97d1a36a5ba7ff891c128889e84b340e1b3bec339a04bcc64c71832a61951120b112c77204a9b9b99410819d266e658bcf82056fa1b8c0a83509330f66f51d587d4fdba947fe636bc850444eaa309965bbeaf066bafce98c4000efe4b79ed7c557eaf9d7e3a9773f021c2591efc197e523312ae5feec75619910cb7e8cdb18ee26ca4e857605b323b0327ee43538ef23ce72ee86154a6a7e1f2412e76aa309a3a1d3f799ef2b7e7ea40ec6a5af2e79200ca79126da70b29f59554763db845606162b2bd212e46adbbb7aff71a66af361bc270171c54e528bc16fc4cdfa379267b5947850b3b26b0ff5cebe1ab870939ca4ca5baa91dab623ede1a87efbe26b0557c990029ccda9b7add090086f2542da3478977da5379cd5e0c44b0dec69d2a946a33df41a1fae4b1c3c396fc18c81070d7941d70285ee257d05c8bfe4b3efd52b2d6503d0c215ccb6de88b3ba2acc7d9915bece8356f3a377ac95ec925e7eb962ecc4d9f40502a13304bf56a802a1aafff0c68651a410f51670d2900357839648ec684662d2e385eb535981187f31d88d809f7cc224929f70f0293edb5922f83e87ce07ddfa7c8f9643a18166c7cc704425d648f27f42d32fa5c7240423e7e8d3c2af4ed54a8c29b2b3cd6548ad09ae208779186a6afd80bab53330debf90108c2a6388923886d83c4953f1921dbb7e82c69c96bab116e8fa01c8a227f5d9112261b295f737d04ae37576a15eff8461e963989399beb06a311bba7ee59bdf2ab056f34ec297f2b73b1c4257865766feb4be57e4039d23a86c651bd932664023124457c75b562034514b497e5431e7be448047215f4d8c19c29e0d9051b306644e3d7f1a7683df10b6ff357d38c66c9af54e205eddb1cc4f12b72e20ebb92353bdc662cb300a5da505980ef9fe69e253184d5c09ff227b198f1e63bf7635d7af27682ae67a25905af0b43ed36e74bedee32fee8904c687bd908528581f3e8d235b3efdb9f169bf44ef5536b6e59c080b19fda7ae3b4aac263a7e315941619b30796e0cf01d1e8daeb2399a6968cde35f837ab078d2fcb7a6fd4f30be959cc15d52795f8cc13930bbf6c1a777d0a015e6b8b4888c05aad62aa02ad95125b4059a8c1435ab7703996ce4308d61e8d9fd9c52b1c7b99c1523b326ffe93c8e19be1c922c0f0a966eac19772b80d44ac503e5ed6eeee8a1127a0d15f9ca4461bf363e87d482e4ee09043aea52a77db6948e3adce6bb25511258bfd4020d22e70a6fb33d33433b7d8bfce88c4c26efac6dc131ccfe9e65501e30daaace57f3adee3f0d817e502ccc15ef31f817d11de943b370c4e637ae3c6dc9070785a1d032ed2e21cba708e28f0668bbc14fdcd05ac1e88c1422c44e5e015fd5b4c2e63a0e683350f781440a801ed0977994004ad8723928b118eacf15afbdfe9edb7775c38bc621e651828e734f8c4dea9ed09786610d058228c2520c030c6060bee5ab9ab888e8a868035ed792d489dd6d8f22ff2f632521062c9f157584542118616b2079ea89c7b53959f122ee60fc7af17c5a4a9740e22fc2c9bcad56a71a3fcda7c924d62647a004e620725c5d838b9b2944e6201fa220671ba29f733555a4d18c1996be3e91d0347dbc43ca93db175993794d092371941746d8a134694ea7265956ed90d37524c6f9bb70538226f34dac2494ac838dc89fb079582eb1cf06a823d0efa802ae4400ad311c7d80073c03d9979f882370eb05e5945b567a72ef6fc78a7e14a55377edf559bba7656dc3bbe4a4f0bc4c9d538b442dfb385fb6dc537780af226191dcff65f5a50aadb3dcafe5e9826aa951d5db8654fa0d1cd312f7efd51385684480e2b3bbcb47fcb59675cb48a3c4a2e650163ea884b80f080fc7d1839a60dc942ef749bea323378ebb82c93903d96d04782e0c56a8c8ebaf2d3986181ca7eaba42bc8403ec684d68c1b79e48de0a8fdad02c0a91f79dfd885cddc1de4980ad34d7cbdf1f3c0b5866e205ba66163311f05889d193e0f7f192c454e8ad38699c50809faeb585bbab94cf7b701e5ad27e42640c680c357e687cf138ae6c5bd2345710ad8eb97e92180477835eb75f2a85e9696951c08adb5282145feae40752c556b32683719044e2c699df1c344bafe1a4f1dc3e148a965133c5b668d3e3fd3dcaee7f57591d2c317788f93dba3320e647c98a3cd3bfad113254ade2d218a3355059b76a8dbdb5ce6bafe252b1bea09a8b09ce40b51aa1fcbe9bd183347bf3bc242b5b965d791b32a308599f44bcc311f57ffe0cf97ba2c11306314655ff25c0bf8606a15ce2f5b28a7fc4bfe825222a137c94c9870f4cc80c4e6d5257d0c7b3f7de2e049c65807b6a187edcf0416fa2b46077e055a4912c71c84e2634509ffbc62ab27af48240f36c8340ae3245784ccc134a5b5c0b2cd6eb61764594f5801a1e464b2ddb699301f3171a7c948d7b7554bf2b4f2d2db4e8bdd6049cf5759ebb551ee726958a1db669dca8d938ee2bc35a6efafe25a6f9928aecf23609c51e24056aeb98ae670cbd458072dbfd80668b066a9ff9b088cefc371fabca2d6235cf2b4777bb58503fb44e352e44815b3b1320563f4bc6e33727bedb766cd0c664f41179fe28fc5c7f0fbf7a807573f0c8910faf6f899295d8d10ef67fd94f661e54edf4e4f3b10329559ec3ec1bc8bfa977959a0d5b9b69fec9c4826f9ad36e8e66aaf6305094ce0b025f8119b5f51b73ae040e1cd7885575888b31e90276501e04d1abaa358478db1fe8f392872a0dbea473f5360923bc6def20a50a59cada2f338f88974d47c5599597a300be239f845bea4a50dc2478661b5ed0d8f8c6153ab04c1f9f4b8c38861bcac3906ab328878e14deef7b068c7cb07bbdc45511a28a7c44fa1caf84e0528e61065d1090dc43618912d3f7ce2ccf88ae7d2fde37cfb5be9bb3f8597843a1d374ba7e622a57e71e389499374633a3c2c9ad20134cd32092c746dab1dc0ac6fec09ef7abb77fa808e5eeb712b292adb3d576e25459712e92808f06c9a6bfc74f5908343a0d704d651e7830b7b35e145baa4ba5bf336bf4fad04d059b1851376a78a7d421587308196f7936e66a36caca9e31044d31e9d897d95fa57950a4871891e4d12dbe39621383d0b7a3b1263aef261939e78750cd7d2a7a9692eb196ff86fe564f27eec0443af24511e5d948e65e305f5588feb527c39194fed42a5f4d033ddacc93a35b8ee10c400f4ef1e65f7e319e9c4bb53234db8c759e3fd4680e834bc6cf79a8aef568f8e5579bbb1b63ef0d84bf10511f661a7d43fae60612ec3a0c8f9c36bb245097ec70326872c2b5ea9785773d8c8133d3c1fba2fc263ea0d9e7187590178977b00c2450057d69c51ebb2d40170d6a4ad73d1866679be4ff2334751dfd4c0fd34fc1f89b75175bbfe6f05d3619d433f78ad95348808f2136391d890261a6f7f15500f99cb7e5078f646ef13a5e7bc671a926da13342ea458a441ea7783ef97be74648e9370f2976960f10be2194dc8e4f0768c369a7da7cd8b2123502a730c7631838d532fbeae2347adf7f37600c53af39e074e6ed6896ede7fdbbeb730299568a55f0d842b72d7f011cdf231a583a899abbfa856ccb3e4eeb75a013d279f79742efd07ca06b36a18d3e1537d1cabd7fdf26db9d3e15464ee1f0976f908a6de1acf8b16427c77d8c9479c0bfd9a66392291d128f5f0d47f62139e20a9b5f57271c2c9bc0bc3f1465cb63c798fc8bf4db761d72cae1aa64fe5748c365ddb3372dc046c954934947fd70622588af897e98e7f57801faf2482fb9ed67fdb88561780c46cd7abcacb5dc11b2ebdcfa3b01475c2bc075d5454e39943e9bcb248fc44d08497f53c5f09d1a00267300ea6c8cfb774d128ff6d679d09f434bcc91e142adc8382077c7bc36262357d1686e9c2a97b01dd3ee8333555bdb4f00d7ab6926c2286fc6df1cb832341fec4becd44c9a73b62fcf417ccacfbf"}}, &(0x7f0000001900)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0x1, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303"], 0x0) syz_usb_ep_read(r3, 0xf, 0x0, 0x0) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2002) readv(r4, &(0x7f00000000c0)=[{&(0x7f0000001000)=""/4096, 0x18}], 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000380)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000030101030b0000000000000002000008"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20000880) 5.676733201s ago: executing program 3 (id=6187): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000080)={0x0, 0x3, 0x3}) ppoll(&(0x7f0000000240)=[{r0, 0x8018}], 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000280)=0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x200000000000011, 0x2, 0x0) syz_emit_ethernet(0xff03, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2000003000000000000080045300000400008019078ac1e0001ac142400004500000000010000fc0100077f000001640100fa4a8122a691f8ee23f224f268aba455fddfd313f14b794945448fec74b84167a0ba790037b9377296a31bed47298862fabc57440a61b547d70368e8105499b42f6ade0c08e1f578b67cf1a61d276445ff95e27bbd59f34065bca1a32db69dab71a1296dd6c3c9eae17d103cf1e3d8dcd6a87f01d5dbb6087e97747b61de5ec3d11d23d4dccb6f80cae943a666c33b3166cd1e0f987a839e81fa6b0e49cb"], 0x0) ioctl$int_in(r1, 0x5452, &(0x7f00000004c0)=0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup/syz1\x00', 0x1ff) r4 = syz_open_dev$vim2m(&(0x7f0000000540), 0x1f7ff6, 0x2) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x380000f, 0x28011, r4, 0x40000) r5 = syz_open_dev$vim2m(&(0x7f0000000580), 0x47b, 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x4) r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000340)=ANY=[@ANYRES8=r5, @ANYRESOCT=r0, @ANYRESDEC=r3, @ANYRES32=0x0, @ANYBLOB="1defe7acace6e655c253678bdf637c661dad60ccaabd2e555fbe4a40d23af8"], 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000023, 0x13, r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000100)=@ethtool_regs={0x4, 0x7}}) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000180)={0xf0f083, 0x2}) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000680), 0x88002, 0x0) r8 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r2, &(0x7f0000000000)={0xc0002009}) r9 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000740)=0x1) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000780)={0x0, 0x1}) r10 = syz_open_procfs$userns(0x0, &(0x7f00000007c0)) open_by_handle_at(r10, &(0x7f0000000800)=ANY=[@ANYBLOB="10000000f1000000980000000000000000000002"], 0x400040) ppoll(&(0x7f0000000040)=[{r2, 0x8000}, {r6}], 0x2, 0x0, 0x0, 0x0) dup2(r0, r2) 5.44190991s ago: executing program 6 (id=6188): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_clone(0x20000, &(0x7f0000000540), 0x0, 0x0, 0x0, &(0x7f0000000580)) unshare(0x60000600) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt(r0, 0x0, 0x482, &(0x7f00000002c0)="110000007f0000014e200000000000006d6811000000000000000000000000001000"/44, 0x2c) 4.17467833s ago: executing program 4 (id=6189): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 3.854082209s ago: executing program 5 (id=6190): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) (async, rerun: 64) socket$key(0xf, 0x3, 0x2) (async, rerun: 64) socket$xdp(0x2c, 0x3, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) (async) socket$packet(0x11, 0x3, 0x300) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) io_setup(0x1, &(0x7f0000000080)=0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="14"], 0x14}, 0x1, 0x0, 0x0, 0x4810}, 0x8000) (async, rerun: 32) io_submit(r4, 0x1, &(0x7f00000004c0)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x8, 0x1, r3, &(0x7f0000000540)="653de841f0", 0x5, 0x8000}]) (rerun: 32) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x38, r2, 0x1, 0x0, 0x100000, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x20004800) (async) listen(r0, 0xc) (async) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e22, @local}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x14, 0x17, 0x1, 0x70bd06, 0x25dfdbfd, {0x8}}, 0x5c}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYRES16=r6, @ANYRES8, @ANYBLOB="01"], 0x5c}, 0x1, 0x0, 0x0, 0x2000}, 0x40090) r7 = add_key$user(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, &(0x7f0000000780)="166ec4b16a", 0x5, 0xfffffffffffffffe) (async) r8 = add_key$user(&(0x7f00000007c0), &(0x7f0000000800), &(0x7f0000000840), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000880)={r7, r8, r7}, &(0x7f00000008c0)=""/83, 0xfffffffffffffe4f, 0x0) (async, rerun: 32) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000940), 0x20042, 0x0) (async, rerun: 32) add_key$user(&(0x7f0000000980), 0x0, 0x0, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x100000000) r11 = dup(r10) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f00000009c0)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (rerun: 64) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x2) 3.777207215s ago: executing program 3 (id=6191): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000f00)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1}, 0x20) r1 = socket$inet_udp(0x2, 0x2, 0x0) execve(&(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001140)={[&(0x7f0000001180)='&.\x00']}, &(0x7f00000011c0)={[&(0x7f0000001200)='\x00', &(0x7f0000001240)='{+\x00', &(0x7f0000001280)=':]#].\'.:&++(#>{\x00']}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) bind$inet(r1, &(0x7f0000001380)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r1, &(0x7f00000013c0)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000001400), 0x800001d, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f000072d000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x7, 0x1) mbind(&(0x7f000058a000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x6, 0x3) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000567000/0x2000)=nil) mbind(&(0x7f00000bd000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x400, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0x8) connect$inet6(r3, &(0x7f0000001480)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r4 = add_key$fscrypt_v1(&(0x7f00000014c0), &(0x7f0000001500)={'fscrypt:', @desc4}, &(0x7f0000001540)={0x0, "4d8067db19aa646e32658521757a3d7b5ac4b723b9205427f026575de1b4f21e32658952e567c2cd0bd5fc86922812585f7caa9191aa33d4546caf1ae7c4127e", 0x40}, 0x48, 0xfffffffffffffffc) keyctl$restrict_keyring(0xa, r4, &(0x7f00000015c0)='asymmetric\x00', &(0x7f0000001600)='ix\x00\x00\x00\b\x00') setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000001640)='bridge0\x00', 0x10) write(r3, &(0x7f0000001680)="8f2a0a65bd8c3a2b0304000e0580a7b6070d63e286a5ce", 0x17) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000016c0)={0x0, &(0x7f0000001700)=""/251, &(0x7f0000001800), &(0x7f0000001840), 0xa7c, r0}, 0x38) nanosleep(&(0x7f0000000e40)={0x0, 0x50000000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)=@newlink={0x44, 0x10, 0x503, 0x0, 0x400003, {0x0, 0x0, 0x0, 0x0, 0x24395, 0x20000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x8}, @IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x2}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x40800) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000e80), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) 3.5471507s ago: executing program 4 (id=6192): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)='3', 0x1}, {&(0x7f00000000c0)=' E', 0x2}], 0x2) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x1031, r1, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r3, r1, 0xe, 0x4) write$binfmt_script(r4, &(0x7f0000000240)={'#! ', './file0'}, 0xb) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYRESHEX=r0], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000140), 0x3, 0x0) 2.489354549s ago: executing program 3 (id=6193): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x14c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0xfffffffe, 0x0, 0x0, 0x2, 0x12, 0x1e, 0x3}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x24040800}, 0x40020) 2.162117413s ago: executing program 5 (id=6194): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/clients\x00', 0x0, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x36, 0x0, 0x0) r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x6, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_open_dev$sndpcmc(&(0x7f0000000180), 0x2, 0x340382) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, 0x0}], 0x1, 0x18, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000a40)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000a80)={0x0, 0x20, &(0x7f0000000ac0)={&(0x7f0000000b00)=@newtfilter={0x24, 0x11, 0x111, 0x70bd2a, 0x100000, {0x0, 0x0, 0x74, r6, {0xffff, 0xfff6}, {0x5, 0x10}, {0xffe0, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0xc4) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ca03f202520b749e", @ANYRES16=r2, @ANYBLOB="00032abd7000000008001000000018000180140002006978365f76746930010000000000000005000b000000000090822f5783b1aa8f49bafcb05645c5df71cb08be86f3c8d62e4037c8fa9292879868804bde0a6d3689e2f04d9e26b4aed02ba8bf5499642c1421bc44dd35f0c73125d4ce445c4c9dcfa40ae0584129589d"], 0xd}}, 0x4044890) times(&(0x7f0000000040)) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) 2.09333279s ago: executing program 3 (id=6195): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) write$tun(r0, &(0x7f0000000100)={@val={0x0, 0xf9}, @val={0x1, 0x0, 0xb, 0xc, 0xfff, 0x3}, @llc={@llc={0xfe, 0x1, "c4", "0a163fb8a75b7c0812426f2eed76c15e681e787320eca7b68a26c6f0ee442331"}}}, 0x31) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) r2 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r2, &(0x7f0000000300)='keyring\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0) fcntl$lock(r1, 0x410, &(0x7f0000000240)={0x0, 0x0, 0x4, 0x1fd}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000068a000000000000041f00181801000020696c2500000000002020207ba1d8ff000000007ba1003000000000070100000400ffffb70200000800ffb0b703000002000007850000002effb00095"], &(0x7f0000000200)='GPL\x00', 0x7, 0xffa, &(0x7f0000000b00)=""/4090, 0x0, 0xa8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94) 2.028666883s ago: executing program 6 (id=6196): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x10c0, 0xe0}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}]}}}]}, 0x38}}, 0x0) 1.730773077s ago: executing program 3 (id=6197): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000480)={0x2, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="0218462bf584acff000a00000000000000ffdbdf25030005003200000002006e20e8000001000000000000000005000600000000000a004e24000010002001000000000000000000000000000000000000000100004dccf2d53db196b248d25512cc61c96965eff0ce973c6eac7e4d1932cb1a2dc7068d93bae460ec0697b86d28450ce55e2c621a0bd983c087adb87cb6335204a552a1ee70e6c2950da209845a502328d614b3531032f4336bec2ae8f16d1cba785da1ece33f03a7325e0d0ba007ad0330e3a9"], 0x50}}, 0x8000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x2000, 0x25dfdbff, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x80000000, 0x8, 0x10000000, 0x20001, 0xa}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x8a}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x4}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8800}, 0x4040000) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='oom_score_adj\x00') write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000800)={0x30, 0x5, 0x0, {0x0, 0x6, 0x4, 0xfc5}}, 0x30) pidfd_getfd(r2, r0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'geneve0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000780)='sessionid\x00') pread64(r6, 0x0, 0x0, 0x4eb) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newlink={0x4c, 0x10, 0x401, 0x70bd28, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8, 0x10015}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYRESHEX=r1], 0xe1c}}, 0x0) 607.202203ms ago: executing program 3 (id=6198): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)={0x0, 0xfffffff5, 0x40, 0xd000, 0xe, "0062ba7d8200000016001b001e00f705096604"}) r2 = syz_open_pts(r1, 0xa0200) dup3(r2, r1, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000140)=0x9) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newtaction={0x4c, 0x1e, 0x109, 0xfffffffd, 0x0, {}, [{0x38, 0x1, [@m_simple={0x34, 0x18, 0x0, 0x0, {{0xb}, {0x4}, {0x6, 0x6, "05f6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x4c}, 0x1, 0x2b1e}, 0x0) 234.85647ms ago: executing program 4 (id=6199): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f00000001c0)=@ethtool_eee={0x50, 0xc, 0x990c, 0x1, 0x8, 0x9, 0x80, 0x3, [0xfff, 0x7]}}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000)=0x40e5, 0x4) 36.079606ms ago: executing program 5 (id=6200): r0 = socket$nl_generic(0x10, 0x3, 0x10) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, 0x0, r1) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)) fchown(r0, 0x0, 0x0) 0s ago: executing program 4 (id=6201): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000140)={@empty}, 0x14) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = socket(0xa, 0x1, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x2083, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl(r6, 0x4048aecb, &(0x7f0000000500)="070000000000000001000000ffffffff0100"/72) ioctl(r5, 0x4048aec9, &(0x7f0000000680)="0c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c10000000000") ioctl(r6, 0xc048aeca, &(0x7f0000000880)='\a\x00'/72) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @local, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) getsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000000100), &(0x7f0000000300)=0x4) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="03000000000000000a004e230000000cff010000000000000000000000000001f8ffffff000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003"], 0x210) setsockopt$inet6_group_source_req(r3, 0x29, 0x2c, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0xbe, @mcast1, 0xbfd}}, {{0xa, 0x4e20, 0x9, @empty, 0xfffffe01}}}, 0x108) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, &(0x7f0000000700)={0x1, 0x0, {0xfffffffd, 0x5, 0x1014, 0x3, 0x0, 0x7, 0x2, 0x1}}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="48010000100001002bbd700000000000ff020000000000000000000000000001ffffffff0000000000000000000000000000ecdf00fdffff0100000000000000b056f02f49c7260745042f6b96cbe75b93974b383115ed099155e48c893065b5a4861fd73a87b8b7a543f96c022ef8adc43a19913f8171af4cdd820ca6f07b55fc01c7a1494b7f0d30811f86a68c8605a1cc435b66cf865ee8a8158b229ea81ed5fc65b5ccf8c7cd139bd863c7f2e1d758c467bd94ee39e50f00b3a95dd25d36817cc91325e2be1207c3aa653e13a7d8cd2c87b7b278", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x148}}, 0x44050) r9 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r9, 0x2000) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r2, 0x4068aea3, &(0x7f0000000000)={0xbc, 0x0, 0x1}) ioctl$KVM_PRE_FAULT_MEMORY(r7, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x12000}) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) kernel console output (not intermixed with test programs): promiscuous mode [ 1312.658839][T25513] bond0: entered promiscuous mode [ 1312.677228][ T30] audit: type=1326 audit(1792951809.494:6007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25512 comm="syz.6.5737" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f670d99f559 code=0x7ffc0000 [ 1312.677308][ T30] audit: type=1326 audit(1792951809.494:6008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25512 comm="syz.6.5737" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f670d99f559 code=0x7ffc0000 [ 1312.677346][ T30] audit: type=1326 audit(1792951809.494:6009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25512 comm="syz.6.5737" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f670d99f559 code=0x7ffc0000 [ 1312.685965][ T30] audit: type=1326 audit(1792951809.504:6010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25512 comm="syz.6.5737" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f670d99f559 code=0x7ffc0000 [ 1312.686013][ T30] audit: type=1326 audit(1792951809.504:6011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25512 comm="syz.6.5737" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f670d99f559 code=0x7ffc0000 [ 1312.686050][ T30] audit: type=1326 audit(1792951809.504:6012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25512 comm="syz.6.5737" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f670d99f559 code=0x7ffc0000 [ 1312.738450][ T30] audit: type=1326 audit(1792951809.554:6013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25512 comm="syz.6.5737" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f670d99f559 code=0x7ffc0000 [ 1312.847045][ T30] audit: type=1326 audit(1792951809.664:6014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25512 comm="syz.6.5737" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f670d99f559 code=0x7ffc0000 [ 1312.891361][T25409] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1312.926383][T25516] ip_tables: iptables: counters copy to user failed while replacing table [ 1312.940772][T25409] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1312.994699][ T7482] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1312.994729][ T7482] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1312.994747][ T7482] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1312.994765][ T7482] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1313.369502][ T7482] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1313.369524][ T7482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1313.581567][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1313.581593][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1314.523882][T23264] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 1314.653093][T23264] usb 5-1: device descriptor read/64, error -71 [ 1314.892781][T23264] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 1315.021339][T25529] kvm: debugfs: duplicate directory 25529-30 [ 1315.022949][T23264] usb 5-1: device descriptor read/64, error -71 [ 1315.107318][T25529] kvm: debugfs: duplicate directory 25529-29 [ 1315.133582][T23264] usb usb5-port1: attempt power cycle [ 1315.243160][T25529] kvm: debugfs: duplicate directory 25529-27 [ 1315.421927][T25529] kvm: debugfs: duplicate directory 25529-25 [ 1315.476301][T23264] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 1315.500805][T23264] usb 5-1: device descriptor read/8, error -71 [ 1315.596407][ T7482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1315.618902][T25529] kvm: debugfs: duplicate directory 25529-23 [ 1315.681119][T25529] kvm: debugfs: duplicate directory 25529-22 [ 1315.733793][T23264] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 1315.757603][T23264] usb 5-1: device descriptor read/8, error -71 [ 1315.846586][T25545] netlink: 65528 bytes leftover after parsing attributes in process `syz.1.5746'. [ 1315.863230][T23264] usb usb5-port1: unable to enumerate USB device [ 1316.633047][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1316.659313][T25560] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5752'. [ 1316.659342][T25560] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5752'. [ 1317.673038][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1318.249912][T25582] netlink: 'syz.5.5759': attribute type 2 has an invalid length. [ 1318.992104][T25587] netlink: 160 bytes leftover after parsing attributes in process `syz.5.5760'. [ 1318.992136][T25587] netlink: 160 bytes leftover after parsing attributes in process `syz.5.5760'. [ 1319.393363][T25593] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5761'. [ 1319.394351][T25589] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 1319.558620][T25596] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5763'. [ 1319.598949][T25596] batadv0: entered promiscuous mode [ 1319.599337][T25596] macvtap1: entered promiscuous mode [ 1319.601980][T25596] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1319.634956][T25596] batadv0: left promiscuous mode [ 1320.002784][ T5727] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1320.153060][ T5727] usb 4-1: Using ep0 maxpacket: 16 [ 1320.153782][ T5727] usb 4-1: New USB device found: idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 1320.154788][ T5727] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1320.154811][ T5727] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1320.154845][ T5727] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1320.168266][ T5727] usb 4-1: config 0 descriptor?? [ 1320.412395][T25610] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5768'. [ 1320.516775][ T5727] usb 4-1: USB disconnect, device number 100 [ 1320.851720][T25618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1320.880563][T25620] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5770'. [ 1320.880589][T25620] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5770'. [ 1321.333894][T25610] syz.6.5768 (25610): drop_caches: 2 [ 1321.360221][ T7480] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1321.425255][T25629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5772'. [ 1321.532852][ T5727] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1321.662846][ T5727] usb 2-1: device descriptor read/64, error -71 [ 1321.922995][ T5727] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1322.062964][ T5727] usb 2-1: device descriptor read/64, error -71 [ 1322.182944][ T5727] usb usb2-port1: attempt power cycle [ 1322.332249][T25644] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1322.392948][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1322.447476][T25646] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5776'. [ 1322.533239][ T5727] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1322.553376][ T5727] usb 2-1: device descriptor read/8, error -71 [ 1322.802931][ T5727] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1322.841896][ T5727] usb 2-1: device descriptor read/8, error -71 [ 1322.943245][ T5727] usb usb2-port1: unable to enumerate USB device [ 1323.315603][T25662] netlink: 65528 bytes leftover after parsing attributes in process `syz.4.5782'. [ 1323.432933][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1324.756364][T25677] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1324.780822][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1325.070435][T25678] bond3 (unregistering): Released all slaves [ 1325.296254][T25682] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1325.732631][T25682] bond2 (unregistering): Released all slaves [ 1325.753590][T23264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1326.211514][T25693] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5790'. [ 1327.009166][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1327.009186][ T30] audit: type=1326 audit(1792951823.824:6018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25700 comm="syz.1.5792" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4114f9f559 code=0x7ffc0000 [ 1327.009621][ T30] audit: type=1326 audit(1792951823.824:6019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25700 comm="syz.1.5792" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4114f9f559 code=0x7ffc0000 [ 1327.009912][ T30] audit: type=1326 audit(1792951823.824:6020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25700 comm="syz.1.5792" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f4114f9f559 code=0x7ffc0000 [ 1327.019760][ T30] audit: type=1326 audit(1792951823.824:6021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25700 comm="syz.1.5792" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4114f9f559 code=0x7ffc0000 [ 1327.120835][T17253] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1327.131406][ T30] audit: type=1326 audit(1792951823.944:6022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25700 comm="syz.1.5792" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4114f5fd8e code=0x7ffc0000 [ 1327.132109][ T30] audit: type=1326 audit(1792951823.944:6023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25700 comm="syz.1.5792" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4114f9f1eb code=0x7ffc0000 [ 1327.132536][ T30] audit: type=1326 audit(1792951823.944:6024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25700 comm="syz.1.5792" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4114f9f1eb code=0x7ffc0000 [ 1327.221984][T25707] netlink: 84 bytes leftover after parsing attributes in process `syz.5.5794'. [ 1327.237328][ T30] audit: type=1326 audit(1792951824.054:6025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25700 comm="syz.1.5792" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4114f9f1eb code=0x7ffc0000 [ 1327.237374][ T30] audit: type=1326 audit(1792951824.054:6026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25700 comm="syz.1.5792" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4114f9f1eb code=0x7ffc0000 [ 1327.324411][ T30] audit: type=1326 audit(1792951824.144:6027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25700 comm="syz.1.5792" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4114f9f1eb code=0x7ffc0000 [ 1327.453427][T23264] usb 2-1: new low-speed USB device number 63 using dummy_hcd [ 1327.628466][T23264] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1327.628501][T23264] usb 2-1: New USB device found: idVendor=0c2e, idProduct=0720, bcdDevice=d4.29 [ 1327.661256][T23264] usb 2-1: config 8 has an invalid interface number: 109 but max is 0 [ 1327.661284][T23264] usb 2-1: config 8 has no interface number 0 [ 1327.661324][T23264] usb 2-1: config 8 interface 109 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 8 [ 1327.661345][T23264] usb 2-1: config 8 interface 109 altsetting 0 has an invalid endpoint descriptor of length 5, skipping [ 1327.661363][T23264] usb 2-1: config 8 interface 109 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1327.730544][T23264] usb 2-1: string descriptor 0 read error: -22 [ 1327.730628][T23264] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1327.772583][T25703] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1327.791872][T23264] metro_usb 2-1:8.109: required endpoints missing [ 1328.034676][T25693] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5790'. [ 1328.152912][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1328.162563][T25717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1328.192341][T25717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1328.960550][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1329.102476][T25726] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1329.202896][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1329.359211][T25726] bond3 (unregistering): Released all slaves [ 1329.843277][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1329.998495][T23264] usb 2-1: USB disconnect, device number 63 [ 1330.425447][T25747] tipc: Cannot configure node identity twice [ 1330.948153][T25758] bridge0: port 1(vlan2) entered blocking state [ 1330.948391][T25758] bridge0: port 1(vlan2) entered disabled state [ 1330.948555][T25758] vlan2: entered allmulticast mode [ 1330.948571][T25758] geneve0: entered allmulticast mode [ 1330.962839][T23264] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1331.114750][T23264] usb 6-1: Using ep0 maxpacket: 32 [ 1331.118261][T23264] usb 6-1: New USB device found: idVendor=05ac, idProduct=120a, bcdDevice=7b.2d [ 1331.120931][T23264] usb 6-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1331.120959][T23264] usb 6-1: config 5 has 0 interfaces, different from the descriptor's value: 1 [ 1331.124090][T23264] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1331.124117][T23264] usb 6-1: Product: syz [ 1331.124131][T23264] usb 6-1: Manufacturer: syz [ 1331.124145][T23264] usb 6-1: SerialNumber: syz [ 1331.264396][ T5714] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1331.321283][T25766] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1331.415403][ T5714] usb 4-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1331.416757][ T5714] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1331.451444][ T5714] usb 4-1: config 0 descriptor?? [ 1331.631453][T25753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1331.651298][T25753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1331.671830][ T5714] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1331.742415][T25768] bond2 (unregistering): Released all slaves [ 1332.022114][ T5714] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 1332.022132][ T5714] [drm] Initialized udl on minor 1 [ 1332.236809][T17253] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1332.827423][T25782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5817'. [ 1333.283087][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1334.313797][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1334.621053][T25798] ip_tables: iptables: counters copy to user failed while replacing table [ 1335.034870][T25800] FAULT_INJECTION: forcing a failure. [ 1335.034870][T25800] name failslab, interval 1, probability 0, space 0, times 0 [ 1335.034911][T25800] CPU: 0 UID: 0 PID: 25800 Comm: syz.5.5822 Tainted: G L syzkaller #0 PREEMPT(full) [ 1335.034945][T25800] Tainted: [L]=SOFTLOCKUP [ 1335.034952][T25800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1335.034963][T25800] Call Trace: [ 1335.034969][T25800] [ 1335.034974][T25800] dump_stack_lvl+0xe8/0x150 [ 1335.034996][T25800] should_fail_ex+0x410/0x560 [ 1335.035014][T25800] should_failslab+0xa8/0x100 [ 1335.035040][T25800] __kmalloc_noprof+0xf9/0x710 [ 1335.035062][T25800] ? __kmalloc_cache_noprof+0x148/0x600 [ 1335.035081][T25800] ? alloc_pipe_info+0x1f4/0x4c0 [ 1335.035102][T25800] ? alloc_pipe_info+0x1f4/0x4c0 [ 1335.035125][T25800] alloc_pipe_info+0x1f4/0x4c0 [ 1335.035139][T25800] splice_direct_to_actor+0xa41/0xcb0 [ 1335.035157][T25800] ? lock_acquire+0x115/0x350 [ 1335.035173][T25800] ? __pfx_aa_file_perm+0x10/0x10 [ 1335.035198][T25800] ? __pfx_direct_splice_actor+0x10/0x10 [ 1335.035219][T25800] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1335.035250][T25800] do_splice_direct+0x195/0x290 [ 1335.035271][T25800] ? __pfx_do_splice_direct+0x10/0x10 [ 1335.035282][T25800] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1335.035296][T25800] ? bpf_lsm_file_permission+0x9/0x20 [ 1335.035310][T25800] ? security_file_permission+0x75/0x260 [ 1335.035331][T25800] ? rw_verify_area+0x203/0x4c0 [ 1335.035351][T25800] ? fdget+0x1ac/0x250 [ 1335.035373][T25800] do_sendfile+0x52e/0x7c0 [ 1335.035406][T25800] ? __pfx_do_sendfile+0x10/0x10 [ 1335.035427][T25800] ? fdget+0x1ac/0x250 [ 1335.035442][T25800] __se_sys_sendfile64+0x144/0x1a0 [ 1335.035458][T25800] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 1335.035482][T25800] do_syscall_64+0x166/0x520 [ 1335.035503][T25800] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1335.035526][T25800] ? clear_bhb_loop+0x70/0xc0 [ 1335.035549][T25800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1335.035567][T25800] RIP: 0033:0x7fee8d39f559 [ 1335.035579][T25800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1335.035588][T25800] RSP: 002b:00007fee8e2fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1335.035601][T25800] RAX: ffffffffffffffda RBX: 00007fee8d625fa0 RCX: 00007fee8d39f559 [ 1335.035608][T25800] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 1335.035615][T25800] RBP: 00007fee8e2fd090 R08: 0000000000000000 R09: 0000000000000000 [ 1335.035623][T25800] R10: 0000000020000005 R11: 0000000000000246 R12: 0000000000000001 [ 1335.035634][T25800] R13: 00007fee8d626038 R14: 00007fee8d625fa0 R15: 00007fee8d74fa48 [ 1335.035665][T25800] [ 1335.577483][T25805] FAULT_INJECTION: forcing a failure. [ 1335.577483][T25805] name failslab, interval 1, probability 0, space 0, times 0 [ 1335.577520][T25805] CPU: 0 UID: 0 PID: 25805 Comm: syz.6.5824 Tainted: G L syzkaller #0 PREEMPT(full) [ 1335.577547][T25805] Tainted: [L]=SOFTLOCKUP [ 1335.577555][T25805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1335.577567][T25805] Call Trace: [ 1335.577575][T25805] [ 1335.577584][T25805] dump_stack_lvl+0xe8/0x150 [ 1335.577615][T25805] should_fail_ex+0x410/0x560 [ 1335.577635][T25805] should_failslab+0xa8/0x100 [ 1335.577652][T25805] __kvmalloc_node_noprof+0x171/0x820 [ 1335.577669][T25805] ? __kvmalloc_node_noprof+0x340/0x820 [ 1335.577690][T25805] ? io_alloc_cache_init+0x42/0x140 [ 1335.577709][T25805] ? io_alloc_cache_init+0x42/0x140 [ 1335.577734][T25805] io_alloc_cache_init+0x42/0x140 [ 1335.577756][T25805] io_rsrc_cache_init+0x43/0x50 [ 1335.577773][T25805] io_ring_ctx_alloc+0x588/0xb80 [ 1335.577830][T25805] io_uring_create+0x50/0x980 [ 1335.577855][T25805] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 1335.577877][T25805] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1335.577900][T25805] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 1335.577926][T25805] ? __pfx_ksys_write+0x10/0x10 [ 1335.577943][T25805] do_syscall_64+0x166/0x520 [ 1335.577955][T25805] ? trace_irq_disable+0x3b/0x140 [ 1335.577970][T25805] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1335.577989][T25805] ? clear_bhb_loop+0x70/0xc0 [ 1335.578011][T25805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1335.578030][T25805] RIP: 0033:0x7f670d99f559 [ 1335.578048][T25805] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1335.578063][T25805] RSP: 002b:00007f670e80fee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1335.578077][T25805] RAX: ffffffffffffffda RBX: 0000200000000a88 RCX: 00007f670d99f559 [ 1335.578086][T25805] RDX: 0000200000000b08 RSI: 0000200000000a88 RDI: 0000000000000e26 [ 1335.578093][T25805] RBP: 0000200000000a80 R08: 0000200000000340 R09: 0000000000000000 [ 1335.578100][T25805] R10: 0000200000000b10 R11: 0000000000000206 R12: 0000200000000b08 [ 1335.578107][T25805] R13: 0000200000000b10 R14: 00007f670e80ffd8 R15: 0000000000000000 [ 1335.578128][T25805] [ 1335.822818][ T5727] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1335.993987][ T5727] usb 5-1: New USB device found: idVendor=2466, idProduct=8010, bcdDevice=1.00 [ 1335.995477][ T5727] usb 5-1: config 1 has an invalid descriptor of length 156, skipping remainder of the config [ 1335.995514][ T5727] usb 5-1: too many endpoints for config 1 interface 1 altsetting 65: 86, using maximum allowed: 30 [ 1335.995534][ T5727] usb 5-1: config 1 interface 1 altsetting 65 has 0 endpoint descriptors, different from the interface descriptor's value: 86 [ 1335.995550][ T5727] usb 5-1: config 1 interface 1 has no altsetting 0 [ 1335.995580][ T5727] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1336.205155][ T5727] usb 5-1: selecting invalid altsetting 0 [ 1336.461618][ T5727] usb 5-1: string descriptor 0 read error: -71 [ 1336.487285][T25813] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5826'. [ 1336.487311][T25813] batman_adv: batadv0: Interface deactivated: macsec1 [ 1336.487336][T25813] batman_adv: batadv0: Removing interface: macsec1 [ 1336.492045][T25814] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5826'. [ 1336.544758][ T5727] usb 5-1: USB disconnect, device number 53 [ 1336.994354][T25817] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1337.033048][ T5714] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 1337.033316][ T5714] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1337.035070][ T5714] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 1337.037879][ T5714] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 1337.038003][ T5714] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1337.092602][ T5727] usb 4-1: USB disconnect, device number 101 [ 1337.108527][T25819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1337.108950][T25819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1337.267918][T25817] bond2 (unregistering): Released all slaves [ 1337.280437][T17250] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1337.313283][T25824] FAULT_INJECTION: forcing a failure. [ 1337.313283][T25824] name failslab, interval 1, probability 0, space 0, times 0 [ 1337.313319][T25824] CPU: 1 UID: 0 PID: 25824 Comm: syz.3.5829 Tainted: G L syzkaller #0 PREEMPT(full) [ 1337.313343][T25824] Tainted: [L]=SOFTLOCKUP [ 1337.313350][T25824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1337.313361][T25824] Call Trace: [ 1337.313369][T25824] [ 1337.313378][T25824] dump_stack_lvl+0xe8/0x150 [ 1337.313412][T25824] should_fail_ex+0x410/0x560 [ 1337.313441][T25824] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1337.313461][T25824] should_failslab+0xa8/0x100 [ 1337.313486][T25824] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1337.313502][T25824] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 1337.313521][T25824] ? lock_vma_under_rcu+0x45a/0x500 [ 1337.313546][T25824] ? sock_alloc_inode+0x2c/0x1a0 [ 1337.313568][T25824] ? sock_alloc_inode+0x2c/0x1a0 [ 1337.313592][T25824] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1337.313611][T25824] sock_alloc_inode+0x2c/0x1a0 [ 1337.313631][T25824] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1337.313651][T25824] alloc_inode+0x6a/0x1b0 [ 1337.313678][T25824] __sock_create+0x127/0xac0 [ 1337.313700][T25824] ? exc_page_fault+0x6a/0xc0 [ 1337.313725][T25824] __sys_socket+0xd6/0x1b0 [ 1337.313750][T25824] __x64_sys_socket+0x7a/0x90 [ 1337.313775][T25824] do_syscall_64+0x166/0x520 [ 1337.313792][T25824] ? trace_irq_disable+0x3b/0x140 [ 1337.313814][T25824] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1337.313832][T25824] ? clear_bhb_loop+0x70/0xc0 [ 1337.313852][T25824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1337.313866][T25824] RIP: 0033:0x7f8331da0dc7 [ 1337.313883][T25824] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1337.313898][T25824] RSP: 002b:00007f8332ce9f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 1337.313919][T25824] RAX: ffffffffffffffda RBX: 00007f8332025fa0 RCX: 00007f8331da0dc7 [ 1337.313937][T25824] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1337.313949][T25824] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 1337.313960][T25824] R10: 00002000000001c0 R11: 0000000000000286 R12: 0000000000000001 [ 1337.313971][T25824] R13: 00007f8332026038 R14: 00007f8332025fa0 R15: 00007f833214fa48 [ 1337.314000][T25824] [ 1337.314010][T25824] socket: no more sockets [ 1337.704345][T25826] nvme_rdma: malformed address passed: 1:4420 [ 1337.809866][T25834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5833'. [ 1337.809883][T25834] FAULT_INJECTION: forcing a failure. [ 1337.809883][T25834] name failslab, interval 1, probability 0, space 0, times 0 [ 1337.809901][T25834] CPU: 1 UID: 0 PID: 25834 Comm: syz.3.5833 Tainted: G L syzkaller #0 PREEMPT(full) [ 1337.809916][T25834] Tainted: [L]=SOFTLOCKUP [ 1337.809920][T25834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1337.809927][T25834] Call Trace: [ 1337.809932][T25834] [ 1337.809937][T25834] dump_stack_lvl+0xe8/0x150 [ 1337.809958][T25834] should_fail_ex+0x410/0x560 [ 1337.809976][T25834] ? __alloc_skb+0x1db/0x7a0 [ 1337.809992][T25834] should_failslab+0xa8/0x100 [ 1337.810008][T25834] ? __alloc_skb+0x1db/0x7a0 [ 1337.810021][T25834] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 1337.810032][T25834] ? __alloc_skb+0x18d/0x7a0 [ 1337.810047][T25834] ? __alloc_skb+0x1db/0x7a0 [ 1337.810064][T25834] __alloc_skb+0x1db/0x7a0 [ 1337.810083][T25834] netlink_ack+0x136/0xb30 [ 1337.810096][T25834] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1337.810114][T25834] ? __copy_skb_header+0xa3/0x4a0 [ 1337.810130][T25834] netlink_rcv_skb+0x2a4/0x4a0 [ 1337.810144][T25834] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1337.810163][T25834] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1337.810182][T25834] ? netlink_deliver_tap+0x2e/0x1b0 [ 1337.810195][T25834] ? netlink_deliver_tap+0x2e/0x1b0 [ 1337.810211][T25834] netlink_unicast+0x8ef/0xa80 [ 1337.810232][T25834] netlink_sendmsg+0x7f0/0xb20 [ 1337.810248][T25834] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1337.810263][T25834] ? aa_sock_msg_perm+0x144/0x210 [ 1337.810278][T25834] ? apparmor_socket_sendmsg+0x98/0x360 [ 1337.810289][T25834] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1337.810302][T25834] sock_sendmsg_nosec+0x14e/0x190 [ 1337.810317][T25834] ____sys_sendmsg+0x54e/0x850 [ 1337.810330][T25834] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1337.810344][T25834] ? import_iovec+0x73/0xa0 [ 1337.810360][T25834] ___sys_sendmsg+0x2a5/0x360 [ 1337.810369][T25834] ? __lock_acquire+0x747/0x2de0 [ 1337.810385][T25834] ? __pfx____sys_sendmsg+0x10/0x10 [ 1337.810393][T25834] ? __lock_acquire+0x747/0x2de0 [ 1337.810408][T25834] ? kstrtouint+0x6e/0xe0 [ 1337.810440][T25834] __sys_sendmmsg+0x273/0x4e0 [ 1337.810453][T25834] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1337.810468][T25834] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1337.810487][T25834] ? ksys_write+0x242/0x270 [ 1337.810499][T25834] ? __pfx_ksys_write+0x10/0x10 [ 1337.810514][T25834] __x64_sys_sendmmsg+0xa0/0xc0 [ 1337.810526][T25834] do_syscall_64+0x166/0x520 [ 1337.810536][T25834] ? trace_irq_disable+0x3b/0x140 [ 1337.810550][T25834] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1337.810560][T25834] ? clear_bhb_loop+0x70/0xc0 [ 1337.810573][T25834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1337.810583][T25834] RIP: 0033:0x7f8331d9f559 [ 1337.810594][T25834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1337.810603][T25834] RSP: 002b:00007f8332ceb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1337.810615][T25834] RAX: ffffffffffffffda RBX: 00007f8332025fa0 RCX: 00007f8331d9f559 [ 1337.810622][T25834] RDX: 0400000000000235 RSI: 0000200000000000 RDI: 0000000000000003 [ 1337.810629][T25834] RBP: 00007f8332ceb090 R08: 0000000000000000 R09: 0000000000000000 [ 1337.810636][T25834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1337.810643][T25834] R13: 00007f8332026038 R14: 00007f8332025fa0 R15: 00007f833214fa48 [ 1337.810665][T25834] [ 1338.189717][T25838] ip_tables: iptables: counters copy to user failed while replacing table [ 1338.225315][T23264] apple-mfi-fastcharge 6-1: USB disconnect, device number 72 [ 1338.312896][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1338.574689][T25851] FAULT_INJECTION: forcing a failure. [ 1338.574689][T25851] name failslab, interval 1, probability 0, space 0, times 0 [ 1338.574716][T25851] CPU: 1 UID: 0 PID: 25851 Comm: syz.5.5839 Tainted: G L syzkaller #0 PREEMPT(full) [ 1338.574733][T25851] Tainted: [L]=SOFTLOCKUP [ 1338.574737][T25851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1338.574743][T25851] Call Trace: [ 1338.574748][T25851] [ 1338.574754][T25851] dump_stack_lvl+0xe8/0x150 [ 1338.574775][T25851] should_fail_ex+0x410/0x560 [ 1338.574793][T25851] should_failslab+0xa8/0x100 [ 1338.574809][T25851] __kmalloc_cache_noprof+0x9e/0x600 [ 1338.574821][T25851] ? __kmalloc_cache_noprof+0x148/0x600 [ 1338.574832][T25851] ? snd_seq_prioq_new+0x47/0xa0 [ 1338.574843][T25851] ? snd_seq_prioq_new+0x47/0xa0 [ 1338.574857][T25851] snd_seq_prioq_new+0x47/0xa0 [ 1338.574867][T25851] snd_seq_queue_alloc+0x13b/0x740 [ 1338.574883][T25851] ? __pfx_snd_seq_ioctl_create_port+0x10/0x10 [ 1338.574898][T25851] snd_seq_ioctl_create_queue+0x7f/0x3c0 [ 1338.574913][T25851] snd_seq_oss_open+0x657/0xf80 [ 1338.574930][T25851] ? __pfx_snd_seq_oss_open+0x10/0x10 [ 1338.574961][T25851] ? rcu_is_watching+0x16/0xb0 [ 1338.574976][T25851] ? trace_contention_end+0x3d/0x140 [ 1338.575002][T25851] ? __pfx___mutex_lock+0x10/0x10 [ 1338.575016][T25851] ? __pfx_snd_seq_oss_event_input+0x10/0x10 [ 1338.575029][T25851] ? __pfx_free_devinfo+0x10/0x10 [ 1338.575041][T25851] ? do_raw_spin_unlock+0xf5/0x200 [ 1338.575054][T25851] ? soundcore_open+0x2da/0x490 [ 1338.575070][T25851] odev_open+0x67/0xa0 [ 1338.575082][T25851] chrdev_open+0x4d9/0x600 [ 1338.575097][T25851] ? __pfx_chrdev_open+0x10/0x10 [ 1338.575110][T25851] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 1338.575124][T25851] ? devcgroup_check_permission+0x31/0x8f0 [ 1338.575154][T25851] ? __pfx_chrdev_open+0x10/0x10 [ 1338.575177][T25851] do_dentry_open+0x80e/0x1360 [ 1338.575198][T25851] vfs_open_consume+0x4a/0x350 [ 1338.575212][T25851] ? path_openat+0x16e1/0x20f0 [ 1338.575225][T25851] path_openat+0x16fc/0x20f0 [ 1338.575247][T25851] do_file_open+0x23e/0x4a0 [ 1338.575262][T25851] ? __pfx_do_file_open+0x10/0x10 [ 1338.575286][T25851] ? _raw_spin_unlock+0x28/0x50 [ 1338.575300][T25851] ? alloc_fd+0x6af/0x760 [ 1338.575322][T25851] do_sys_openat2+0x115/0x200 [ 1338.575341][T25851] ? __pfx_do_sys_openat2+0x10/0x10 [ 1338.575368][T25851] ? ksys_write+0x242/0x270 [ 1338.575386][T25851] ? __pfx_ksys_write+0x10/0x10 [ 1338.575399][T25851] __x64_sys_open+0x11e/0x150 [ 1338.575416][T25851] do_syscall_64+0x166/0x520 [ 1338.575426][T25851] ? trace_irq_disable+0x3b/0x140 [ 1338.575439][T25851] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1338.575450][T25851] ? clear_bhb_loop+0x70/0xc0 [ 1338.575462][T25851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1338.575472][T25851] RIP: 0033:0x7fee8d39f559 [ 1338.575483][T25851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1338.575492][T25851] RSP: 002b:00007fee8e2fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1338.575504][T25851] RAX: ffffffffffffffda RBX: 00007fee8d625fa0 RCX: 00007fee8d39f559 [ 1338.575511][T25851] RDX: 0000000000000110 RSI: 0000000000101000 RDI: 0000200000000000 [ 1338.575518][T25851] RBP: 00007fee8e2fd090 R08: 0000000000000000 R09: 0000000000000000 [ 1338.575524][T25851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1338.575531][T25851] R13: 00007fee8d626038 R14: 00007fee8d625fa0 R15: 00007fee8d74fa48 [ 1338.575547][T25851] [ 1339.340706][T25865] bridge_slave_0: left allmulticast mode [ 1339.340737][T25865] bridge_slave_0: left promiscuous mode [ 1339.340994][T25865] bridge0: port 1(bridge_slave_0) entered disabled state [ 1339.355710][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1339.418621][T25865] bridge_slave_1: left allmulticast mode [ 1339.418651][T25865] bridge_slave_1: left promiscuous mode [ 1339.418869][T25865] bridge0: port 2(bridge_slave_1) entered disabled state [ 1339.526809][T25865] bond0: (slave bond_slave_0): Releasing backup interface [ 1339.593655][T25865] bond0: (slave bond_slave_1): Releasing backup interface [ 1339.658431][T25865] team0: Port device team_slave_0 removed [ 1339.686999][T25865] team0: Port device team_slave_1 removed [ 1339.687596][T25865] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1339.687610][T25865] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1339.730140][T25865] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1339.730158][T25865] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1339.764164][T25865] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1339.913488][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1339.973179][T25867] bond1 (unregistering): Released all slaves [ 1340.570656][T25876] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5845'. [ 1340.846706][T25876] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5845'. [ 1341.412539][T25890] FAULT_INJECTION: forcing a failure. [ 1341.412539][T25890] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1341.412563][T25890] CPU: 1 UID: 0 PID: 25890 Comm: syz.5.5849 Tainted: G L syzkaller #0 PREEMPT(full) [ 1341.412578][T25890] Tainted: [L]=SOFTLOCKUP [ 1341.412582][T25890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1341.412589][T25890] Call Trace: [ 1341.412593][T25890] [ 1341.412599][T25890] dump_stack_lvl+0xe8/0x150 [ 1341.412620][T25890] should_fail_ex+0x410/0x560 [ 1341.412639][T25890] _copy_from_user+0x2d/0xb0 [ 1341.412666][T25890] kstrtouint_from_user+0xd6/0x180 [ 1341.412686][T25890] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1341.412714][T25890] ? lock_acquire+0x115/0x350 [ 1341.412731][T25890] proc_fail_nth_write+0x8e/0x210 [ 1341.412749][T25890] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1341.412767][T25890] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1341.412780][T25890] vfs_write+0x296/0xba0 [ 1341.412797][T25890] ? __pfx_vfs_write+0x10/0x10 [ 1341.412810][T25890] ? __fget_files+0x2a/0x420 [ 1341.412820][T25890] ? __fget_files+0x3a2/0x420 [ 1341.412830][T25890] ? __fget_files+0x2a/0x420 [ 1341.412842][T25890] ? fdget+0x1ac/0x250 [ 1341.412856][T25890] ksys_write+0x150/0x270 [ 1341.412870][T25890] ? __pfx_ksys_write+0x10/0x10 [ 1341.412887][T25890] do_syscall_64+0x166/0x520 [ 1341.412900][T25890] ? trace_irq_disable+0x3b/0x140 [ 1341.412914][T25890] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1341.412933][T25890] ? clear_bhb_loop+0x70/0xc0 [ 1341.412946][T25890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1341.412957][T25890] RIP: 0033:0x7fee8d35fd8e [ 1341.412968][T25890] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1341.412977][T25890] RSP: 002b:00007fee8e2fcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1341.412990][T25890] RAX: ffffffffffffffda RBX: 00007fee8e2fd6c0 RCX: 00007fee8d35fd8e [ 1341.412998][T25890] RDX: 0000000000000001 RSI: 00007fee8e2fd0a0 RDI: 0000000000000004 [ 1341.413005][T25890] RBP: 00007fee8e2fd090 R08: 0000000000000000 R09: 0000000000000000 [ 1341.413011][T25890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1341.413017][T25890] R13: 00007fee8d626038 R14: 00007fee8d625fa0 R15: 00007fee8d74fa48 [ 1341.413034][T25890] [ 1341.751222][T25866] IPVS: Scheduler module ip_vs_mh not found [ 1341.899345][T25896] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5852'. [ 1342.242806][ T5727] usb 6-1: new full-speed USB device number 73 using dummy_hcd [ 1342.402981][T23264] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1342.413564][ T5727] usb 6-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 1342.414809][ T5727] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1342.414836][ T5727] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1342.414873][ T5727] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 1342.414897][ T5727] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1342.417129][ T5727] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1342.417153][ T5727] usb 6-1: Product: syz [ 1342.417167][ T5727] usb 6-1: Manufacturer: syz [ 1342.417181][ T5727] usb 6-1: SerialNumber: syz [ 1342.541038][T25893] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1342.553674][T23264] usb 2-1: New USB device found: idVendor=0846, idProduct=1001, bcdDevice=1.00 [ 1342.554691][T23264] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1342.554719][T23264] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1342.556649][T23264] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1342.556674][T23264] usb 2-1: Product: syz [ 1342.556687][T23264] usb 2-1: Manufacturer: syz [ 1342.556701][T23264] usb 2-1: SerialNumber: syz [ 1342.584507][ T5727] cdc_mbim 6-1:1.0: skipping garbage [ 1342.813273][T23264] kaweth 2-1:1.0: Firmware present in device. [ 1342.835736][T25893] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1342.835871][T25893] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1342.997893][T23264] kaweth 2-1:1.0: Statistics collection: 0 [ 1342.997917][T23264] kaweth 2-1:1.0: Multicast filter limit: 0 [ 1342.997931][T23264] kaweth 2-1:1.0: MTU: 0 [ 1342.997945][T23264] kaweth 2-1:1.0: Read MAC address 00:00:00:00:00:00 [ 1343.115303][T17250] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1343.464316][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 1343.464336][ T30] audit: type=1326 audit(1792951840.284:6068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25915 comm="syz.3.5860" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8331d9f559 code=0x7ffc0000 [ 1343.464812][ T30] audit: type=1326 audit(1792951840.284:6069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25915 comm="syz.3.5860" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8331d9f559 code=0x7ffc0000 [ 1343.467758][ T30] audit: type=1326 audit(1792951840.284:6070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25915 comm="syz.3.5860" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f8331d9f559 code=0x7ffc0000 [ 1343.468015][ T30] audit: type=1326 audit(1792951840.284:6071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25915 comm="syz.3.5860" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8331d9f559 code=0x7ffc0000 [ 1343.470612][ T30] audit: type=1326 audit(1792951840.284:6072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25915 comm="syz.3.5860" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8331d9f559 code=0x7ffc0000 [ 1343.470879][ T30] audit: type=1326 audit(1792951840.284:6073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25915 comm="syz.3.5860" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8331d9f559 code=0x7ffc0000 [ 1343.645499][T25899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1343.646166][T25899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1343.690419][ T30] audit: type=1326 audit(1792951840.504:6074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25915 comm="syz.3.5860" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8331d9f559 code=0x7ffc0000 [ 1343.690737][ T30] audit: type=1326 audit(1792951840.504:6075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25915 comm="syz.3.5860" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8331d9f559 code=0x7ffc0000 [ 1343.803442][ T5727] cdc_mbim 6-1:1.0: failed GET_NTB_PARAMETERS [ 1343.803511][ T5727] cdc_mbim 6-1:1.0: bind() failure [ 1343.828897][ T30] audit: type=1326 audit(1792951840.644:6076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25915 comm="syz.3.5860" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f8331d9f559 code=0x7ffc0000 [ 1343.828967][ T30] audit: type=1326 audit(1792951840.644:6077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25915 comm="syz.3.5860" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8331d9f559 code=0x7ffc0000 [ 1343.886385][ T5727] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 1343.886434][ T5727] cdc_ncm 6-1:1.1: bind() failure [ 1343.961965][T23264] kaweth 2-1:1.0: kaweth interface created at eth10 [ 1343.988107][ T5727] usb 6-1: USB disconnect, device number 73 [ 1344.152924][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1344.169463][T25920] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1344.183002][T23264] usb 2-1: USB disconnect, device number 64 [ 1344.376907][T25927] syzkaller0: entered promiscuous mode [ 1344.376930][T25927] syzkaller0: entered allmulticast mode [ 1345.102781][T23264] usb 6-1: new full-speed USB device number 74 using dummy_hcd [ 1345.219422][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1345.258986][T23264] usb 6-1: not running at top speed; connect to a high speed hub [ 1345.259020][T23264] usb 6-1: New USB device found: idVendor=1b1c, idProduct=1c04, bcdDevice=0.40 [ 1345.260115][T23264] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1345.295462][T23264] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1345.296438][T23264] usb 6-1: Product: à° [ 1345.296457][T23264] usb 6-1: Manufacturer: 윚묔뛉鳀퉯ì‚錄뎠ï…ç˜å¹§ïš´ï©…뱽⡶㗜ï¢â½î¬‹à¨ï˜Šâ¾êŒŒì…¼â†çˆˆçšŸÍ­ä…€çŽ•ìª”æ¦â£ê£‹áž¥î¨âª…á‘–åµà«²à¥´á™¡é£˜â“¦å’”ä„ヽê˜è±†é”Ÿâ˜‘ì¡¢ç¡è¼¦ã©šá‚¥é•„ڔ᫅ [ 1345.296479][T23264] usb 6-1: SerialNumber: à¡  [ 1345.658809][T25943] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1346.020607][T25943] bond3 (unregistering): Released all slaves [ 1347.845124][T25980] netlink: 'syz.6.5874': attribute type 1 has an invalid length. [ 1348.032958][T25980] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1348.069774][T23264] usbhid 6-1:1.0: can't add hid device: -71 [ 1348.069891][T23264] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 1348.095058][T23264] usb 6-1: USB disconnect, device number 74 [ 1348.178655][T25982] gretap1: entered promiscuous mode [ 1348.237750][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1348.648719][T25989] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5875'. [ 1349.282860][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1350.312935][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1350.647502][T26037] netlink: 65536 bytes leftover after parsing attributes in process `syz.1.5887'. [ 1352.942363][ T30] kauditd_printk_skb: 55 callbacks suppressed [ 1352.942381][ T30] audit: type=1326 audit(1792951849.744:6133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26063 comm="syz.6.5893" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f670d99f559 code=0x0 [ 1353.275842][T17801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1353.281112][T26074] ip_tables: iptables: counters copy to user failed while replacing table [ 1354.050074][T26082] netlink: 65536 bytes leftover after parsing attributes in process `syz.3.5898'. [ 1354.050193][T26082] netlink: 272 bytes leftover after parsing attributes in process `syz.3.5898'. [ 1354.312871][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1354.366943][ T30] audit: type=1326 audit(1792951851.184:6134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26091 comm="syz.3.5902" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8331d9f559 code=0x7ffc0000 [ 1354.367864][ T30] audit: type=1326 audit(1792951851.184:6135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26091 comm="syz.3.5902" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8331d9f559 code=0x7ffc0000 [ 1354.368691][ T30] audit: type=1326 audit(1792951851.184:6136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26091 comm="syz.3.5902" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8331d9f559 code=0x7ffc0000 [ 1354.369479][ T30] audit: type=1326 audit(1792951851.184:6137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26091 comm="syz.3.5902" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8331d9f559 code=0x7ffc0000 [ 1354.422747][ T30] audit: type=1326 audit(1792951851.194:6138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26091 comm="syz.3.5902" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8331d9f559 code=0x7ffc0000 [ 1354.422806][ T30] audit: type=1326 audit(1792951851.194:6139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26091 comm="syz.3.5902" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8331d9f559 code=0x7ffc0000 [ 1354.422846][ T30] audit: type=1326 audit(1792951851.194:6140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26091 comm="syz.3.5902" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8331d9f559 code=0x7ffc0000 [ 1354.422875][ T30] audit: type=1326 audit(1792951851.194:6141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26091 comm="syz.3.5902" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8331d9f559 code=0x7ffc0000 [ 1354.422896][ T30] audit: type=1326 audit(1792951851.194:6142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26091 comm="syz.3.5902" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8331d9f559 code=0x7ffc0000 [ 1354.851632][T26093] bridge0: port 1(vlan2) entered blocking state [ 1354.853017][T26093] bridge0: port 1(vlan2) entered disabled state [ 1354.853203][T26093] vlan2: entered allmulticast mode [ 1354.853219][T26093] geneve0: entered allmulticast mode [ 1354.975603][T26085] ip_tables: iptables: counters copy to user failed while replacing table [ 1355.213073][T26102] veth2: entered allmulticast mode [ 1355.353042][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1355.481420][T26109] ip_tables: iptables: counters copy to user failed while replacing table [ 1355.632358][T26098] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5903'. [ 1355.758501][T26114] netlink: 'syz.5.5908': attribute type 1 has an invalid length. [ 1355.782396][T26114] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1355.799984][T26114] gretap1: entered promiscuous mode [ 1356.101469][T26121] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1356.599994][T26141] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1356.838607][T26144] bond8 (unregistering): Released all slaves [ 1357.452846][ T5727] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1357.603180][ T5727] usb 6-1: Using ep0 maxpacket: 32 [ 1357.605172][ T5727] usb 6-1: New USB device found: idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1357.608294][ T5727] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1357.608319][ T5727] usb 6-1: Product: syz [ 1357.608333][ T5727] usb 6-1: Manufacturer: syz [ 1357.608347][ T5727] usb 6-1: SerialNumber: syz [ 1357.611936][ T5727] usb 6-1: config 0 descriptor?? [ 1357.656618][ T5727] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1357.656678][ T5727] dvb-usb: bulk message failed: -22 (4/0) [ 1357.656688][ T5727] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1357.656754][ T5727] dvb-usb: bulk message failed: -22 (5/0) [ 1357.656762][ T5727] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1357.683609][ T5727] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1357.686967][ T5727] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1357.687034][ T5727] usb 6-1: media controller created [ 1357.708142][ T5727] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1357.741962][ T5727] usb 6-1: selecting invalid altsetting 3 [ 1357.741984][ T5727] ttusb2: set interface to alts=3 failed [ 1357.779737][ T5727] DVB: Unable to find symbol tda10086_attach() [ 1357.779758][ T5727] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1357.780569][ T5727] dvb-usb: bulk message failed: -22 (4/0) [ 1357.780588][ T5727] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1357.780709][ T5727] dvb-usb: bulk message failed: -22 (5/0) [ 1357.780721][ T5727] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1357.780788][ T5727] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1357.884029][T26158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1357.884717][T26158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1357.950198][T26164] openvswitch: netlink: Message has 70 unknown bytes. [ 1357.950220][T26164] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1358.242188][T26171] vimc link validate: Sensor A:src:640x480 (0x33424752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 1358.473803][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1358.482504][T26176] netlink: 'syz.3.5927': attribute type 1 has an invalid length. [ 1358.545955][T26176] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1358.576906][T26176] gretap1: entered promiscuous mode [ 1358.777478][T26182] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1358.963420][T26183] bond4 (unregistering): Released all slaves [ 1359.261332][T23264] usb 6-1: USB disconnect, device number 75 [ 1359.397940][T23264] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1359.512184][T26194] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5933'. [ 1359.512214][T26194] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5933'. [ 1359.512894][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1359.559670][T26194] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5933'. [ 1359.559714][T26194] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5933'. [ 1359.584831][T17801] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1359.585799][ T62] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1359.585822][ T62] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1359.585840][ T62] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1359.712903][ T6423] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1359.713938][T26197] x_tables: duplicate underflow at hook 2 [ 1359.873022][ T6423] usb 2-1: Using ep0 maxpacket: 16 [ 1359.873535][ T6423] usb 2-1: New USB device found: idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1359.879064][ T6423] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1359.879082][ T6423] usb 2-1: Product: syz [ 1359.879089][ T6423] usb 2-1: Manufacturer: syz [ 1359.879097][ T6423] usb 2-1: SerialNumber: syz [ 1359.890878][ T6423] usb 2-1: config 0 descriptor?? [ 1360.050929][T26199] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5935'. [ 1360.272437][T26207] xt_hashlimit: size too large, truncated to 1048576 [ 1360.443130][T26192] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5931'. [ 1360.444698][ T6423] dvb_usb_dtv5100 2-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 1360.532432][T26212] fuse: Bad value for 'user_id' [ 1360.532446][T26212] fuse: Bad value for 'user_id' [ 1360.552938][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1361.585828][T26224] syzkaller0: entered promiscuous mode [ 1361.585856][T26224] syzkaller0: entered allmulticast mode [ 1361.676219][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.676256][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.677520][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1362.617882][ T6423] usb 2-1: USB disconnect, device number 65 [ 1362.682838][ T5731] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 1362.712871][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1362.766218][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 1362.766245][ T30] audit: type=1326 audit(1792951859.584:6194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26233 comm="syz.1.5945" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4114f9f559 code=0x7ffc0000 [ 1362.766366][ T30] audit: type=1326 audit(1792951859.584:6195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26233 comm="syz.1.5945" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4114f9f559 code=0x7ffc0000 [ 1362.772178][ T30] audit: type=1326 audit(1792951859.584:6196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26233 comm="syz.1.5945" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4114f9f559 code=0x7ffc0000 [ 1362.772426][ T30] audit: type=1326 audit(1792951859.584:6197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26233 comm="syz.1.5945" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4114f9f559 code=0x7ffc0000 [ 1362.807815][ T30] audit: type=1326 audit(1792951859.584:6198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26233 comm="syz.1.5945" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4114f9f559 code=0x7ffc0000 [ 1362.814940][ T30] audit: type=1326 audit(1792951859.634:6199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26233 comm="syz.1.5945" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4114f9f559 code=0x7ffc0000 [ 1362.829232][ T30] audit: type=1326 audit(1792951859.634:6200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26233 comm="syz.1.5945" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4114f9f559 code=0x7ffc0000 [ 1362.829286][ T30] audit: type=1326 audit(1792951859.634:6201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26233 comm="syz.1.5945" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4114f9f559 code=0x7ffc0000 [ 1362.833762][ T5731] usb 5-1: New USB device found: idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 1362.834992][ T5731] usb 5-1: config 0 has an invalid interface number: 119 but max is 0 [ 1362.835014][ T5731] usb 5-1: config 0 has no interface number 0 [ 1362.835052][ T5731] usb 5-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1362.835072][ T5731] usb 5-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xD3, changing to 0x83 [ 1362.835095][ T5731] usb 5-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 4 [ 1362.835119][ T5731] usb 5-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1362.837635][ T5731] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1362.837658][ T5731] usb 5-1: Product: syz [ 1362.837671][ T5731] usb 5-1: Manufacturer: syz [ 1362.837685][ T5731] usb 5-1: SerialNumber: syz [ 1362.840583][ T5731] usb 5-1: config 0 descriptor?? [ 1362.877859][ T30] audit: type=1326 audit(1792951859.694:6202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26233 comm="syz.1.5945" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4114f9f559 code=0x7ffc0000 [ 1362.877915][ T30] audit: type=1326 audit(1792951859.694:6203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26233 comm="syz.1.5945" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4114f9f559 code=0x7ffc0000 [ 1363.079260][ T5731] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.119/input/input100 [ 1363.446555][ T5731] input: failed to attach handler mousedev to device input100, error: -22 [ 1363.496916][T26235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1363.497698][T26235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1363.656603][T26240] tipc: Enabling of bearer rejected, failed to enable media [ 1363.752923][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1363.922543][T26243] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5948'. [ 1364.573364][T26252] ip_tables: iptables: counters copy to user failed while replacing table [ 1364.881056][T17801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1365.162802][T23264] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1365.293876][T23264] usb 4-1: device descriptor read/64, error -71 [ 1365.533581][T23264] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1365.662946][T23264] usb 4-1: device descriptor read/64, error -71 [ 1365.743871][T26272] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1365.744789][T26272] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1365.750640][T26272] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1365.774551][T23264] usb usb4-port1: attempt power cycle [ 1365.876127][ T5714] usb 5-1: USB disconnect, device number 54 [ 1365.912963][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1366.113592][T23264] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1366.133359][T23264] usb 4-1: device descriptor read/8, error -71 [ 1366.373197][T23264] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1366.398590][T23264] usb 4-1: device descriptor read/8, error -71 [ 1366.503105][T23264] usb usb4-port1: unable to enumerate USB device [ 1366.952855][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1367.368097][T26305] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5967'. [ 1367.513419][T26314] batadv_slave_0: Caught tx_queue_len zero misconfig [ 1367.747577][T26327] x_tables: unsorted underflow at hook 3 [ 1367.753158][ T5635] Bluetooth: hci1: command 0x0c1a tx timeout [ 1367.950034][T26334] ip_tables: iptables: counters copy to user failed while replacing table [ 1368.572769][ T5713] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1368.732785][ T5713] usb 2-1: Using ep0 maxpacket: 16 [ 1368.736254][ T5713] usb 2-1: New USB device found: idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1368.753468][T23264] usb 4-1: new full-speed USB device number 106 using dummy_hcd [ 1368.770819][ T5713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1368.770838][ T5713] usb 2-1: Product: syz [ 1368.770846][ T5713] usb 2-1: Manufacturer: syz [ 1368.770854][ T5713] usb 2-1: SerialNumber: syz [ 1368.800108][ T5713] usb 2-1: config 0 descriptor?? [ 1368.904076][T23264] usb 4-1: New USB device found: idVendor=17ef, idProduct=6067, bcdDevice=0.00 [ 1368.909913][T23264] usb 4-1: too many endpoints for config 0 interface 0 altsetting 254: 254, using maximum allowed: 30 [ 1368.909956][T23264] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1368.909982][T23264] usb 4-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1368.910006][T23264] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1368.910025][T23264] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1368.956601][T23264] usb 4-1: config 0 descriptor?? [ 1368.964795][T26343] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1369.099350][T26341] xt_hashlimit: size too large, truncated to 1048576 [ 1369.161648][T26354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5977'. [ 1369.356900][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1369.396505][ T5713] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1369.421767][ T5713] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1369.433720][ T5713] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1369.433757][ T5713] usb 2-1: media controller created [ 1369.452635][T23264] hid_parser_main: 14 callbacks suppressed [ 1369.474186][T23264] lenovo 0003:17EF:6067.0043: unknown main item tag 0x0 [ 1369.474220][T23264] lenovo 0003:17EF:6067.0043: unknown main item tag 0x0 [ 1369.474237][T23264] lenovo 0003:17EF:6067.0043: unknown main item tag 0x0 [ 1369.474252][T23264] lenovo 0003:17EF:6067.0043: unknown main item tag 0x0 [ 1369.474269][T23264] lenovo 0003:17EF:6067.0043: unknown main item tag 0x0 [ 1369.474284][T23264] lenovo 0003:17EF:6067.0043: unknown main item tag 0x0 [ 1369.474299][T23264] lenovo 0003:17EF:6067.0043: unknown main item tag 0x0 [ 1369.474313][T23264] lenovo 0003:17EF:6067.0043: unknown main item tag 0x0 [ 1369.474328][T23264] lenovo 0003:17EF:6067.0043: unknown main item tag 0x0 [ 1369.474343][T23264] lenovo 0003:17EF:6067.0043: unknown main item tag 0x0 [ 1369.547330][ T5713] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1369.615957][T23264] lenovo 0003:17EF:6067.0043: hidraw0: USB HID v0.01 Device [HID 17ef:6067] on usb-dummy_hcd.3-1/input0 [ 1369.833958][ T5635] Bluetooth: hci1: command 0x0c1a tx timeout [ 1370.124315][ T5713] zl10353_read_register: readreg error (reg=127, ret==0) [ 1370.124365][ T5713] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1370.124377][ T5713] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1370.126460][ T5713] usb 2-1: USB disconnect, device number 66 [ 1370.177973][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 1370.177990][ T30] audit: type=1326 audit(1792951866.994:6246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26364 comm="syz.5.5984" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8d39f559 code=0x7ffc0000 [ 1370.178453][ T30] audit: type=1326 audit(1792951866.994:6247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26364 comm="syz.5.5984" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8d39f559 code=0x7ffc0000 [ 1370.179969][ T30] audit: type=1326 audit(1792951866.994:6248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26364 comm="syz.5.5984" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fee8d39f559 code=0x7ffc0000 [ 1370.180203][ T30] audit: type=1326 audit(1792951866.994:6249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26364 comm="syz.5.5984" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8d39f559 code=0x7ffc0000 [ 1370.180685][ T30] audit: type=1326 audit(1792951866.994:6250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26364 comm="syz.5.5984" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fee8d39f559 code=0x7ffc0000 [ 1370.181173][ T30] audit: type=1326 audit(1792951866.994:6251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26364 comm="syz.5.5984" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8d39f559 code=0x7ffc0000 [ 1370.183530][ T30] audit: type=1326 audit(1792951866.994:6252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26364 comm="syz.5.5984" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8d39f559 code=0x7ffc0000 [ 1370.188083][ T30] audit: type=1326 audit(1792951867.004:6253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26364 comm="syz.5.5984" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fee8d39f559 code=0x7ffc0000 [ 1370.188611][ T30] audit: type=1326 audit(1792951867.004:6254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26364 comm="syz.5.5984" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8d39f559 code=0x7ffc0000 [ 1370.189251][ T30] audit: type=1326 audit(1792951867.004:6255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26364 comm="syz.5.5984" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8d39f559 code=0x7ffc0000 [ 1370.392890][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1370.495689][ T5713] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1371.052879][T23264] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1371.204763][T23264] usb 6-1: New USB device found: idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1371.206407][T23264] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 1371.206458][T23264] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1371.208692][T23264] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1371.208714][T23264] usb 6-1: Manufacturer: syz [ 1371.214119][T23264] usb 6-1: config 0 descriptor?? [ 1371.412820][T23264] rc_core: IR keymap rc-hauppauge not found [ 1371.412832][T23264] Registered IR keymap rc-empty [ 1371.414919][T23264] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1371.418610][T23264] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input101 [ 1371.433025][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1371.625268][T23264] usb 4-1: USB disconnect, device number 106 [ 1371.922247][ T5635] Bluetooth: hci1: command 0x0c1a tx timeout [ 1372.705388][ T5713] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1372.872751][ T5713] usb 4-1: Using ep0 maxpacket: 16 [ 1372.873622][ T5713] usb 4-1: New USB device found: idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1372.876955][ T5713] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1372.876979][ T5713] usb 4-1: Product: syz [ 1372.876992][ T5713] usb 4-1: Manufacturer: syz [ 1372.877006][ T5713] usb 4-1: SerialNumber: syz [ 1372.923064][ T5713] usb 4-1: config 0 descriptor?? [ 1373.023822][T17256] bond0 (unregistering): Released all slaves [ 1373.046394][T17256] bond1 (unregistering): Released all slaves [ 1373.081814][T17256] bond2 (unregistering): Released all slaves [ 1373.218281][T26423] xt_hashlimit: size too large, truncated to 1048576 [ 1373.286308][T26404] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5997'. [ 1373.476587][T17256] tipc: Disabling bearer [ 1373.476778][T17256] tipc: Left network mode [ 1373.599912][ T5713] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1373.639664][ T5713] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1373.656250][ T5713] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1373.656303][ T5713] usb 4-1: media controller created [ 1373.709921][ T5713] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1373.773765][T23264] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 1373.923655][T23264] usb 2-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1373.925183][T23264] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1373.925209][T23264] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1373.927377][T23264] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1373.927401][T23264] usb 2-1: Product: syz [ 1373.927414][T23264] usb 2-1: Manufacturer: syz [ 1373.927451][T23264] usb 2-1: SerialNumber: syz [ 1373.996515][ T5713] zl10353_read_register: readreg error (reg=127, ret==0) [ 1373.996569][ T5713] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1373.996580][ T5713] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1373.999802][ T5713] usb 4-1: USB disconnect, device number 107 [ 1374.005519][T23264] usb 2-1: config 0 descriptor?? [ 1374.063144][T23264] usb 2-1: selecting invalid altsetting 0 [ 1374.104576][T26433] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6006'. [ 1374.147947][ T5713] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1374.173966][T26433] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1374.347572][T23264] usb 2-1: USB disconnect, device number 67 [ 1374.591042][ T5713] usb 6-1: USB disconnect, device number 76 [ 1374.932773][ T5727] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1375.084245][ T5727] usb 4-1: New USB device found: idVendor=9710, idProduct=7810, bcdDevice=1.00 [ 1375.085646][ T5727] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1375.085676][ T5727] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1375.088597][ T5727] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1375.088621][ T5727] usb 4-1: Product: syz [ 1375.088635][ T5727] usb 4-1: Manufacturer: syz [ 1375.151577][ T5727] mos7840 4-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 1375.249252][ T30] kauditd_printk_skb: 84 callbacks suppressed [ 1375.249271][ T30] audit: type=1326 audit(1792951872.064:6340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26464 comm="syz.5.6013" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8d39f559 code=0x7ffc0000 [ 1375.250762][ T30] audit: type=1326 audit(1792951872.064:6341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26464 comm="syz.5.6013" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8d39f559 code=0x7ffc0000 [ 1375.252207][ T30] audit: type=1326 audit(1792951872.064:6342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26464 comm="syz.5.6013" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fee8d39f559 code=0x7ffc0000 [ 1375.323555][ T30] audit: type=1326 audit(1792951872.064:6343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26464 comm="syz.5.6013" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8d39f559 code=0x7ffc0000 [ 1375.323610][ T30] audit: type=1326 audit(1792951872.074:6344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26464 comm="syz.5.6013" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fee8d39f559 code=0x7ffc0000 [ 1375.323647][ T30] audit: type=1326 audit(1792951872.074:6345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26464 comm="syz.5.6013" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8d39f559 code=0x7ffc0000 [ 1375.323691][ T30] audit: type=1326 audit(1792951872.084:6346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26464 comm="syz.5.6013" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8d39f559 code=0x7ffc0000 [ 1375.385967][ T30] audit: type=1326 audit(1792951872.194:6347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26464 comm="syz.5.6013" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fee8d39f559 code=0x7ffc0000 [ 1375.386031][ T30] audit: type=1326 audit(1792951872.194:6348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26464 comm="syz.5.6013" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8d39f559 code=0x7ffc0000 [ 1375.386068][ T30] audit: type=1326 audit(1792951872.194:6349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26464 comm="syz.5.6013" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8d39f559 code=0x7ffc0000 [ 1375.618580][ T5727] mos7840 4-1:1.0: probe with driver mos7840 failed with error -71 [ 1375.714177][ T5727] usb 4-1: USB disconnect, device number 108 [ 1376.409827][T26477] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6016'. [ 1376.409844][T26477] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6016'. [ 1376.530187][T26478] tipc: Can't add remote ip to TIPC UDP multicast bearer [ 1377.088622][T17256] IPVS: stop unused estimator thread 0... [ 1377.341000][T26495] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1377.557930][T26500] bond8 (unregistering): Released all slaves [ 1377.722148][T26471] IPVS: Scheduler module ip_vs_mh not found [ 1378.153660][T26508] FAULT_INJECTION: forcing a failure. [ 1378.153660][T26508] name failslab, interval 1, probability 0, space 0, times 0 [ 1378.153684][T26508] CPU: 0 UID: 0 PID: 26508 Comm: syz.3.6023 Tainted: G L syzkaller #0 PREEMPT(full) [ 1378.153700][T26508] Tainted: [L]=SOFTLOCKUP [ 1378.153704][T26508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1378.153711][T26508] Call Trace: [ 1378.153716][T26508] [ 1378.153721][T26508] dump_stack_lvl+0xe8/0x150 [ 1378.153744][T26508] should_fail_ex+0x410/0x560 [ 1378.153763][T26508] should_failslab+0xa8/0x100 [ 1378.153779][T26508] __kmalloc_cache_noprof+0x9e/0x600 [ 1378.153792][T26508] ? tcf_chain_create+0xaf/0x310 [ 1378.153806][T26508] ? tcf_chain_create+0xaf/0x310 [ 1378.153822][T26508] tcf_chain_create+0xaf/0x310 [ 1378.153834][T26508] ? __tcf_chain_get+0xfb/0x3c0 [ 1378.153846][T26508] __tcf_chain_get+0x111/0x3c0 [ 1378.153860][T26508] tc_new_tfilter+0x7ba/0x1900 [ 1378.153881][T26508] ? __lock_acquire+0x747/0x2de0 [ 1378.153898][T26508] ? __pfx_tc_new_tfilter+0x10/0x10 [ 1378.153910][T26508] ? __dev_queue_xmit+0x29b/0x3920 [ 1378.153941][T26508] ? lock_acquire+0x115/0x350 [ 1378.153962][T26508] ? __pfx_tc_new_tfilter+0x10/0x10 [ 1378.153975][T26508] rtnetlink_rcv_msg+0x802/0xc00 [ 1378.153993][T26508] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1378.154008][T26508] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1378.154025][T26508] ? __copy_skb_header+0xa3/0x4a0 [ 1378.154036][T26508] ? __asan_memcpy+0x40/0x70 [ 1378.154051][T26508] netlink_rcv_skb+0x226/0x4a0 [ 1378.154066][T26508] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1378.154082][T26508] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1378.154102][T26508] ? netlink_deliver_tap+0x2e/0x1b0 [ 1378.154115][T26508] ? netlink_deliver_tap+0x2e/0x1b0 [ 1378.154131][T26508] netlink_unicast+0x8ef/0xa80 [ 1378.154152][T26508] netlink_sendmsg+0x7f0/0xb20 [ 1378.154169][T26508] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1378.154184][T26508] ? aa_sock_msg_perm+0x144/0x210 [ 1378.154199][T26508] ? apparmor_socket_sendmsg+0x98/0x360 [ 1378.154213][T26508] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1378.154226][T26508] sock_sendmsg_nosec+0x14e/0x190 [ 1378.154241][T26508] ____sys_sendmsg+0x54e/0x850 [ 1378.154254][T26508] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1378.154269][T26508] ? import_iovec+0x73/0xa0 [ 1378.154287][T26508] ___sys_sendmsg+0x2a5/0x360 [ 1378.154296][T26508] ? __lock_acquire+0x747/0x2de0 [ 1378.154311][T26508] ? __pfx____sys_sendmsg+0x10/0x10 [ 1378.154324][T26508] ? kstrtouint+0x6e/0xe0 [ 1378.154350][T26508] ? __fget_files+0x3a2/0x420 [ 1378.154361][T26508] ? __fget_files+0x2a/0x420 [ 1378.154376][T26508] __sys_sendmmsg+0x273/0x4e0 [ 1378.154390][T26508] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1378.154405][T26508] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1378.154426][T26508] ? ksys_write+0x242/0x270 [ 1378.154442][T26508] ? __pfx_ksys_write+0x10/0x10 [ 1378.154457][T26508] __x64_sys_sendmmsg+0xa0/0xc0 [ 1378.154473][T26508] do_syscall_64+0x166/0x520 [ 1378.154489][T26508] ? trace_irq_disable+0x3b/0x140 [ 1378.154512][T26508] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1378.154525][T26508] ? clear_bhb_loop+0x70/0xc0 [ 1378.154538][T26508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1378.154548][T26508] RIP: 0033:0x7f8331d9f559 [ 1378.154560][T26508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1378.154569][T26508] RSP: 002b:00007f8332ceb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1378.154582][T26508] RAX: ffffffffffffffda RBX: 00007f8332025fa0 RCX: 00007f8331d9f559 [ 1378.154590][T26508] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000005 [ 1378.154598][T26508] RBP: 00007f8332ceb090 R08: 0000000000000000 R09: 0000000000000000 [ 1378.154605][T26508] R10: 0000000002000000 R11: 0000000000000246 R12: 0000000000000001 [ 1378.154611][T26508] R13: 00007f8332026038 R14: 00007f8332025fa0 R15: 00007f833214fa48 [ 1378.154629][T26508] [ 1378.463435][T26513] FAULT_INJECTION: forcing a failure. [ 1378.463435][T26513] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1378.463470][T26513] CPU: 1 UID: 0 PID: 26513 Comm: syz.1.6024 Tainted: G L syzkaller #0 PREEMPT(full) [ 1378.463495][T26513] Tainted: [L]=SOFTLOCKUP [ 1378.463502][T26513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1378.463514][T26513] Call Trace: [ 1378.463522][T26513] [ 1378.463530][T26513] dump_stack_lvl+0xe8/0x150 [ 1378.463564][T26513] should_fail_ex+0x410/0x560 [ 1378.463593][T26513] _copy_from_user+0x2d/0xb0 [ 1378.463620][T26513] ___sys_sendmsg+0x1c6/0x360 [ 1378.463638][T26513] ? __lock_acquire+0x747/0x2de0 [ 1378.463665][T26513] ? __pfx____sys_sendmsg+0x10/0x10 [ 1378.463716][T26513] ? __fget_files+0x3a2/0x420 [ 1378.463735][T26513] ? __fget_files+0x2a/0x420 [ 1378.463763][T26513] __x64_sys_sendmsg+0x1b1/0x290 [ 1378.463783][T26513] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1378.463821][T26513] do_syscall_64+0x166/0x520 [ 1378.463840][T26513] ? trace_irq_disable+0x3b/0x140 [ 1378.463864][T26513] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1378.463885][T26513] ? clear_bhb_loop+0x70/0xc0 [ 1378.463915][T26513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1378.463933][T26513] RIP: 0033:0x7f4114f9f559 [ 1378.463951][T26513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1378.463966][T26513] RSP: 002b:00007f4115d82028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1378.463985][T26513] RAX: ffffffffffffffda RBX: 00007f4115225fa0 RCX: 00007f4114f9f559 [ 1378.463999][T26513] RDX: 0000000000000002 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1378.464011][T26513] RBP: 00007f4115d82090 R08: 0000000000000000 R09: 0000000000000000 [ 1378.464023][T26513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1378.464034][T26513] R13: 00007f4115226038 R14: 00007f4115225fa0 R15: 00007f411534fa48 [ 1378.464064][T26513] [ 1378.968839][T26527] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3481609219 (111411495008 ns) > initial count (97790769952 ns). Using initial count to start timer. [ 1379.007959][T26529] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1379.216909][T26530] bond8 (unregistering): Released all slaves [ 1379.462803][ T5713] usb 4-1: new full-speed USB device number 109 using dummy_hcd [ 1379.612939][ T5727] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1379.613523][ T5713] usb 4-1: New USB device found: idVendor=0c70, idProduct=f00d, bcdDevice=0.00 [ 1379.615232][ T5713] usb 4-1: config 0 has an invalid descriptor of length 112, skipping remainder of the config [ 1379.615260][ T5713] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1379.615284][ T5713] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1379.620134][ T5713] usb 4-1: config 0 descriptor?? [ 1379.763461][ T5727] usb 5-1: New USB device found: idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1379.764418][ T5727] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1379.764433][ T5727] usb 5-1: config 0 has no interface number 0 [ 1379.767242][ T5727] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1379.767266][ T5727] usb 5-1: Product: syz [ 1379.767312][ T5727] usb 5-1: Manufacturer: syz [ 1379.767325][ T5727] usb 5-1: SerialNumber: syz [ 1379.821412][ T5727] usb 5-1: config 0 descriptor?? [ 1379.969657][ T5713] usb 4-1: string descriptor 0 read error: -71 [ 1379.983226][ T5713] usb 4-1: USB disconnect, device number 109 [ 1380.027517][ T5727] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1380.029775][ T5727] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1380.030313][ T5727] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1380.030344][ T5727] usb 5-1: media controller created [ 1380.076321][ T5727] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1380.288074][T26542] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 1380.340782][T26561] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6036'. [ 1380.832816][ T5713] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1380.894064][T17252] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1380.894112][T17252] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1380.894145][T17252] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1380.894185][T17252] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1380.985731][ T5713] usb 4-1: New USB device found: idVendor=056a, idProduct=0063, bcdDevice=0.00 [ 1380.986317][ T5713] usb 4-1: config 0 has no interfaces? [ 1380.986349][ T5713] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1380.990427][ T5713] usb 4-1: config 0 descriptor?? [ 1381.193060][ T5727] i2c i2c-2: ec100: i2c rd failed=-110 reg=33 [ 1381.392989][ T5714] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1381.553370][ T5714] usb 6-1: Using ep0 maxpacket: 8 [ 1381.554061][ T5714] usb 6-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1381.557406][ T5714] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1381.557438][ T5714] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1381.559421][ T5714] usb 6-1: config 0 descriptor?? [ 1381.729744][ T5731] usb 4-1: USB disconnect, device number 110 [ 1381.790958][ T5714] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1382.000324][ T5713] usb 6-1: USB disconnect, device number 77 [ 1382.086376][T26587] geneve2: entered promiscuous mode [ 1382.232947][ T5727] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1382.383615][ T5727] usb 2-1: New USB device found: idVendor=0d49, idProduct=7000, bcdDevice=0.01 [ 1382.384767][ T5727] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1382.384795][ T5727] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1382.384817][ T5727] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1382.387108][ T5727] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1382.387131][ T5727] usb 2-1: Product: syz [ 1382.387146][ T5727] usb 2-1: Manufacturer: syz [ 1382.387160][ T5727] usb 2-1: SerialNumber: syz [ 1382.391194][T26589] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1382.425946][ T5727] ums-onetouch 2-1:1.0: USB Mass Storage device detected [ 1382.478920][ T5727] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/input/input103 [ 1382.482244][ T5727] scsi host1: usb-storage 2-1:1.0 [ 1382.548677][ T5731] usb 5-1: USB disconnect, device number 55 [ 1382.625995][ T5727] usb 2-1: USB disconnect, device number 68 [ 1382.626114][ C0] input input103: can't resubmit intr, dummy_hcd.1-1/input0, retval -19 [ 1383.393479][T26615] netlink: 63772 bytes leftover after parsing attributes in process `syz.6.6056'. [ 1383.762506][T26630] wg2: Caught tx_queue_len zero misconfig [ 1383.821289][T26633] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6065'. [ 1383.832821][ T5727] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1383.896298][T26634] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6062'. [ 1383.931030][T26634] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6062'. [ 1383.937382][T26634] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6062'. [ 1383.938461][T26634] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6062'. [ 1383.940265][T26634] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6062'. [ 1384.017043][ T5727] usb 4-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=1.00 [ 1384.019653][ T5727] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1384.019683][ T5727] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1384.042638][ T5727] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1384.043421][ T5727] usb 4-1: Product: syz [ 1384.043437][ T5727] usb 4-1: Manufacturer: syz [ 1384.043451][ T5727] usb 4-1: SerialNumber: syz [ 1384.249282][T26646] input: syz1 as /devices/virtual/input/input104 [ 1385.180877][T26656] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1385.594366][ T5727] usb 4-1: USB disconnect, device number 111 [ 1385.598929][T26665] syzkaller0: entered promiscuous mode [ 1385.598952][T26665] syzkaller0: entered allmulticast mode [ 1392.100117][T26705] ip6gre1: entered allmulticast mode [ 1392.342435][T26718] syzkaller1: entered promiscuous mode [ 1392.342459][T26718] syzkaller1: entered allmulticast mode [ 1392.354652][T26717] netlink: 76 bytes leftover after parsing attributes in process `syz.6.6085'. [ 1392.354676][T26717] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6085'. [ 1392.354690][T26717] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6085'. [ 1392.555847][ T5713] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1392.715047][ T5713] usb 5-1: New USB device found: idVendor=0458, idProduct=5003, bcdDevice=0.00 [ 1392.716330][ T5713] usb 5-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1392.716360][ T5713] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1392.716385][ T5713] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1392.716418][ T5713] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1392.720767][T26716] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1392.842808][ T5731] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1393.048997][T26726] tipc: New replicast peer: 172.20.20.187 [ 1393.049718][T26726] tipc: Enabled bearer , priority 0 [ 1393.488807][ T5713] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 1393.501128][ T5713] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input105 [ 1393.559311][ T5713] usb 5-1: USB disconnect, device number 56 [ 1393.559441][ C0] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1393.792828][ T5731] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1393.792878][ T5731] usb 2-1: New USB device found: idVendor=8086, idProduct=0ad2, bcdDevice=0.00 [ 1393.796288][ T5731] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1393.796328][ T5731] usb 2-1: can't read configurations, error -71 [ 1394.167150][T23264] tipc: Node number set to 2964492082 [ 1394.671780][T26754] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1394.889143][T26754] bond2 (unregistering): Released all slaves [ 1395.123484][T26764] netlink: 'syz.1.6101': attribute type 16 has an invalid length. [ 1395.123509][T26764] netlink: 'syz.1.6101': attribute type 17 has an invalid length. [ 1395.464619][T23264] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1395.497815][T26764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1395.510275][T26764] 8021q: adding VLAN 0 to HW filter on device team0 [ 1395.513201][T23264] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1395.671592][T26779] fuse: Bad value for 'fd' [ 1395.791748][T26764] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1395.791772][T26764] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1395.842121][T26764] veth1_vlan: left promiscuous mode [ 1395.859043][T26764] vlan0: left promiscuous mode [ 1395.871757][T26764] veth1_vlan: entered promiscuous mode [ 1395.889112][T26764] veth1_macvtap: left promiscuous mode [ 1395.890757][T26764] veth0_macvtap: left promiscuous mode [ 1395.892360][T26764] veth0_macvtap: entered promiscuous mode [ 1395.899157][T26764] veth1_macvtap: entered promiscuous mode [ 1395.931187][T26764] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1395.939565][T26764] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1395.943220][T26764] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1395.958324][T26764] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1395.973089][T23264] usb 6-1: new full-speed USB device number 78 using dummy_hcd [ 1395.983717][T26764] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1395.990712][ T5727] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 1396.015574][T26764] ip6gre2: left promiscuous mode [ 1396.015611][T26764] ip6gre2: left allmulticast mode [ 1396.069903][T26764] veth0_to_team: entered promiscuous mode [ 1396.071844][T26764] hsr1: Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 1396.071860][T26764] hsr1: Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network [ 1396.102792][T23264] usb 6-1: device descriptor read/64, error -71 [ 1396.130065][T26764] bridge0: port 1(vlan2) entered blocking state [ 1396.130142][T26764] bridge0: port 1(vlan2) entered forwarding state [ 1396.138187][T26764] bridge0: port 1(vlan2) entered disabled state [ 1396.139651][T26764] geneve0: entered promiscuous mode [ 1396.146828][ T5727] usb 4-1: Using ep0 maxpacket: 16 [ 1396.159105][ T5727] usb 4-1: New USB device found: idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1396.178461][ T5727] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1396.178489][ T5727] usb 4-1: Product: syz [ 1396.178503][ T5727] usb 4-1: Manufacturer: syz [ 1396.178517][ T5727] usb 4-1: SerialNumber: syz [ 1396.183296][T26784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1396.220982][ T5727] usb 4-1: config 0 descriptor?? [ 1396.233166][ T5727] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 1396.345106][T23264] usb 6-1: new full-speed USB device number 79 using dummy_hcd [ 1396.499139][T23264] usb 6-1: device descriptor read/64, error -71 [ 1396.510035][T17252] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1396.521516][T17252] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1396.521667][T17252] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1396.521833][T17252] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1396.538710][T17252] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1396.538877][T17252] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1396.564902][T26784] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1396.565074][T26784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1396.614603][T23264] usb usb6-port1: attempt power cycle [ 1396.656952][ T5727] usb 4-1: clie_3_5_startup: get config number failed: -71 [ 1396.657058][ T5727] visor 4-1:0.0: probe with driver visor failed with error -71 [ 1396.697550][ T5727] usb 4-1: USB disconnect, device number 112 [ 1396.734437][T26784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1396.953367][T23264] usb 6-1: new full-speed USB device number 80 using dummy_hcd [ 1396.966413][T17256] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1396.976128][T23264] usb 6-1: device descriptor read/8, error -71 [ 1397.103154][T26784] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1397.213032][T23264] usb 6-1: new full-speed USB device number 81 using dummy_hcd [ 1397.235601][T23264] usb 6-1: device descriptor read/8, error -71 [ 1397.274270][ T9264] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1397.345010][T23264] usb usb6-port1: unable to enumerate USB device [ 1397.531193][T26800] tipc: Disabling bearer [ 1397.990944][T26807] syzkaller0: entered promiscuous mode [ 1397.990969][T26807] syzkaller0: entered allmulticast mode [ 1398.010098][T17252] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1398.010339][T17252] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1398.509303][T26826] fuse: Bad value for 'fd' [ 1399.142527][T26837] ipvlan1: Caught tx_queue_len zero misconfig [ 1400.575275][T20812] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1400.578577][T20812] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1400.598763][T20812] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1400.600295][T20812] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1400.604194][T20812] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1400.668028][T23264] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1400.834131][T23264] usb 6-1: Using ep0 maxpacket: 32 [ 1400.837754][T23264] usb 6-1: New USB device found: idVendor=05ac, idProduct=120a, bcdDevice=7b.2d [ 1400.838808][T23264] usb 6-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1400.838832][T23264] usb 6-1: config 5 has 0 interfaces, different from the descriptor's value: 1 [ 1400.840687][T23264] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1400.840711][T23264] usb 6-1: Product: syz [ 1400.840726][T23264] usb 6-1: Manufacturer: syz [ 1400.840740][T23264] usb 6-1: SerialNumber: syz [ 1400.878104][ C1] ip6_tnl_xmit_ctl: 1 callbacks suppressed [ 1400.878119][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1401.373106][T26784] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1401.494709][T26850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1401.510249][T26850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1401.525608][T26784] usb 4-1: New USB device found: idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1401.526990][T26784] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1401.527020][T26784] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1401.562335][T26784] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1401.672915][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1401.886562][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 1401.886577][ T30] audit: type=1326 audit(1792951898.694:6373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26865 comm="syz.6.6133" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f670d99f559 code=0x7ffc0000 [ 1401.886624][ T30] audit: type=1326 audit(1792951898.704:6374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26865 comm="syz.6.6133" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f670d99f559 code=0x7ffc0000 [ 1401.938053][ T30] audit: type=1326 audit(1792951898.754:6375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26865 comm="syz.6.6133" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f670d99f559 code=0x7ffc0000 [ 1401.938107][ T30] audit: type=1326 audit(1792951898.754:6376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26865 comm="syz.6.6133" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f670d99f559 code=0x7ffc0000 [ 1401.953221][ T30] audit: type=1326 audit(1792951898.774:6377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26865 comm="syz.6.6133" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f670d99f559 code=0x7ffc0000 [ 1401.953794][ T30] audit: type=1326 audit(1792951898.774:6378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26865 comm="syz.6.6133" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f670d99f559 code=0x7ffc0000 [ 1401.954166][ T30] audit: type=1326 audit(1792951898.774:6379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26865 comm="syz.6.6133" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f670d99f559 code=0x7ffc0000 [ 1401.983910][ T30] audit: type=1326 audit(1792951898.804:6380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26865 comm="syz.6.6133" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f670d99f559 code=0x7ffc0000 [ 1401.987088][ T30] audit: type=1326 audit(1792951898.804:6381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26865 comm="syz.6.6133" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f670d99f559 code=0x7ffc0000 [ 1402.127324][ T30] audit: type=1326 audit(1792951898.944:6382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26865 comm="syz.6.6133" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f670d99f559 code=0x7ffc0000 [ 1402.191833][T26866] netlink: 'syz.6.6133': attribute type 1 has an invalid length. [ 1402.572070][T26866] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1402.644321][T26784] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 1402.644349][T26784] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 1402.712868][ T5635] Bluetooth: hci2: command tx timeout [ 1402.968577][T26855] bridge0: port 1(bridge_slave_0) entered blocking state [ 1402.968665][T26855] bridge0: port 1(bridge_slave_0) entered disabled state [ 1402.968820][T26855] bridge_slave_0: entered allmulticast mode [ 1402.995296][T26855] bridge_slave_0: entered promiscuous mode [ 1403.006485][T26784] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1403.006503][T26784] stv0680 4-1:4.0: last error: 0, command = 0x0 [ 1403.010446][T26784] usb 4-1: USB disconnect, device number 113 [ 1403.014396][T26855] bridge0: port 2(bridge_slave_1) entered blocking state [ 1403.044315][T26855] bridge0: port 2(bridge_slave_1) entered disabled state [ 1403.049364][T26855] bridge_slave_1: entered allmulticast mode [ 1403.088276][T26855] bridge_slave_1: entered promiscuous mode [ 1403.123092][ T9264] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1403.237538][T26855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1403.267104][T26855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1403.283199][ T9264] usb 2-1: Using ep0 maxpacket: 16 [ 1403.289252][ T9264] usb 2-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 1403.306951][ T9264] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1403.306984][ T9264] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1403.307053][ T9264] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1403.307095][ T9264] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1403.356991][ T9264] usb 2-1: config 0 descriptor?? [ 1403.526775][T26855] team0: Port device team_slave_0 added [ 1403.548714][T26855] team0: Port device team_slave_1 added [ 1403.817458][ T9264] microsoft 0003:045E:07DA.0044: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1403.872047][T26855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1403.872065][T26855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1403.872089][T26855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1404.007629][T26784] usb 2-1: USB disconnect, device number 71 [ 1404.087145][T26887] fido_id[26887]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1404.147015][T26855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1404.147057][T26855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1404.147082][T26855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1404.431306][T26855] hsr_slave_0: entered promiscuous mode [ 1404.440489][T26855] hsr_slave_1: entered promiscuous mode [ 1404.449460][T26855] debugfs: 'hsr0' already exists in 'hsr' [ 1404.449478][T26855] Cannot create hsr debugfs directory [ 1404.792905][ T5635] Bluetooth: hci2: command tx timeout [ 1405.417712][ T5713] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1405.573349][ T5713] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1405.573403][ T5713] usb 4-1: New USB device found: idVendor=07c0, idProduct=158b, bcdDevice=d9.d2 [ 1405.575845][ T5713] usb 4-1: config index 0 descriptor too short (expected 62697, got 27) [ 1405.575870][ T5713] usb 4-1: config 226 has too many interfaces: 92, using maximum allowed: 32 [ 1405.575882][ T5713] usb 4-1: config 226 has an invalid descriptor of length 92, skipping remainder of the config [ 1405.575892][ T5713] usb 4-1: config 226 has 0 interfaces, different from the descriptor's value: 92 [ 1405.645576][ T5713] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1405.645606][ T5713] usb 4-1: Product: syz [ 1405.645621][ T5713] usb 4-1: Manufacturer: syz [ 1405.645634][ T5713] usb 4-1: SerialNumber: syz [ 1405.935659][ T5713] usb 4-1: USB disconnect, device number 114 [ 1406.107780][T26855] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1406.567627][T26855] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1406.883132][ T5635] Bluetooth: hci2: command tx timeout [ 1407.055698][T26855] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1407.418339][T26855] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1407.753140][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1408.073818][ T5727] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1408.223770][ T5727] usb 2-1: Using ep0 maxpacket: 32 [ 1408.225970][ T5727] usb 2-1: New USB device found: idVendor=05ac, idProduct=120a, bcdDevice=7b.2d [ 1408.227571][ T5727] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1408.227587][ T5727] usb 2-1: config 5 has 0 interfaces, different from the descriptor's value: 1 [ 1408.230678][ T5727] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1408.230694][ T5727] usb 2-1: Product: syz [ 1408.230703][ T5727] usb 2-1: Manufacturer: syz [ 1408.230711][ T5727] usb 2-1: SerialNumber: syz [ 1408.666051][T26855] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1408.706203][T26855] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1408.708534][T26855] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1408.741816][T26855] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1408.755637][T26855] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1408.791377][T26855] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1408.800680][T26855] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1408.855841][T26855] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1408.920275][T26906] IPVS: Scheduler module ip_vs_mh not found [ 1408.953102][ T5635] Bluetooth: hci2: command tx timeout [ 1409.012173][T26927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1409.032228][T26927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1409.673770][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1409.674976][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1409.684623][T26855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1409.897855][T26855] 8021q: adding VLAN 0 to HW filter on device team0 [ 1409.988358][T17256] bridge0: port 1(bridge_slave_0) entered blocking state [ 1409.988483][T17256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1410.053299][T17801] bridge0: port 2(bridge_slave_1) entered blocking state [ 1410.053402][T17801] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1410.546225][T26855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1410.718382][ T5713] apple-mfi-fastcharge 6-1: USB disconnect, device number 82 [ 1410.861708][T26855] veth0_vlan: entered promiscuous mode [ 1410.924769][T26855] veth1_vlan: entered promiscuous mode [ 1411.169259][T26855] veth0_macvtap: entered promiscuous mode [ 1411.216372][T26855] veth1_macvtap: entered promiscuous mode [ 1411.299757][T26855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1411.342287][T26855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1411.596241][T17801] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1411.600777][ T43] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1411.601881][ T43] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1411.644286][ T43] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1411.790964][T26956] tipc: Enabled bearer , priority 0 [ 1411.835789][T26956] syzkaller0: entered promiscuous mode [ 1411.835816][T26956] syzkaller0: entered allmulticast mode [ 1412.262186][T26962] syzkaller0: mtu greater than device maximum [ 1412.378201][T17801] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1412.378224][T17801] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1412.606208][T26955] tipc: Resetting bearer [ 1412.764376][T26955] tipc: Disabling bearer [ 1412.997767][T23264] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1413.057833][T17256] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1413.057855][T17256] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1413.153785][T23264] usb 4-1: New USB device found: idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1413.154735][T23264] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1413.154750][T23264] usb 4-1: config 0 has no interface number 0 [ 1413.160440][T23264] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1413.160465][T23264] usb 4-1: Product: syz [ 1413.160479][T23264] usb 4-1: Manufacturer: syz [ 1413.160493][T23264] usb 4-1: SerialNumber: syz [ 1413.213293][T23264] usb 4-1: config 0 descriptor?? [ 1413.425876][T23264] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1413.469427][T23264] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1413.469612][T23264] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1413.469638][T23264] usb 4-1: media controller created [ 1413.519226][T23264] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1413.632300][T23264] i2c i2c-2: ec100: i2c rd failed=-32 reg=33 [ 1413.766564][ T30] kauditd_printk_skb: 165 callbacks suppressed [ 1413.766580][ T30] audit: type=1326 audit(1792951910.584:6548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26977 comm="syz.5.6160" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8d39f559 code=0x7ffc0000 [ 1413.766802][ T30] audit: type=1326 audit(1792951910.584:6549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26977 comm="syz.5.6160" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8d39f559 code=0x7ffc0000 [ 1413.768484][ T30] audit: type=1326 audit(1792951910.584:6550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26977 comm="syz.5.6160" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fee8d39f559 code=0x7ffc0000 [ 1413.769364][ T30] audit: type=1326 audit(1792951910.584:6551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26977 comm="syz.5.6160" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8d39f559 code=0x7ffc0000 [ 1413.853617][ T30] audit: type=1326 audit(1792951910.584:6552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26977 comm="syz.5.6160" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8d39f559 code=0x7ffc0000 [ 1413.853669][ T30] audit: type=1326 audit(1792951910.644:6553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26977 comm="syz.5.6160" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fee8d39f559 code=0x7ffc0000 [ 1413.853708][ T30] audit: type=1326 audit(1792951910.644:6554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26977 comm="syz.5.6160" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8d39f559 code=0x7ffc0000 [ 1413.853744][ T30] audit: type=1326 audit(1792951910.644:6555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26977 comm="syz.5.6160" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8d39f559 code=0x7ffc0000 [ 1413.932765][ T30] audit: type=1326 audit(1792951910.744:6556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26977 comm="syz.5.6160" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fee8d39f559 code=0x7ffc0000 [ 1413.932839][ T30] audit: type=1326 audit(1792951910.744:6557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26977 comm="syz.5.6160" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8d39f559 code=0x7ffc0000 [ 1414.133542][T26983] xt_hashlimit: size too large, truncated to 1048576 [ 1414.188027][T26976] syzkaller0: entered promiscuous mode [ 1414.188052][T26976] syzkaller0: entered allmulticast mode [ 1414.772795][ T5727] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1414.923118][ T5727] usb 6-1: Using ep0 maxpacket: 16 [ 1414.925721][ T5727] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1414.925753][ T5727] usb 6-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=0.40 [ 1414.928617][ T5727] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1414.928632][ T5727] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1414.931590][ T5727] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1414.931608][ T5727] usb 6-1: Product: syz [ 1414.931615][ T5727] usb 6-1: Manufacturer: syz [ 1414.931623][ T5727] usb 6-1: SerialNumber: syz [ 1415.010904][T26999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1415.023238][T26999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1415.361462][ T5727] usb 6-1: USB disconnect, device number 83 [ 1415.447819][T26730] udevd[26730]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1415.778560][ T5731] usb 4-1: USB disconnect, device number 115 [ 1416.082439][T27010] loop3: detected capacity change from 0 to 7 [ 1416.137999][T27010] Dev loop3: unable to read RDB block 7 [ 1416.138033][T27010] loop3: unable to read partition table [ 1416.138179][T27010] loop3: partition table beyond EOD, truncated [ 1416.139079][T27010] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1416.429562][T27010] bond8 (unregistering): Released all slaves [ 1416.547723][ T5731] apple-mfi-fastcharge 2-1: USB disconnect, device number 72 [ 1418.616866][T27019] IPVS: Scheduler module ip_vs_mh not found [ 1423.116062][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.116121][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.791917][T20812] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1423.816302][T20812] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1423.818141][T20812] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1423.822555][T20812] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1423.831501][T20812] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1424.350089][T22297] syz_tun (unregistering): left promiscuous mode [ 1424.394308][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1424.857359][T27052] usb usb8: usbfs: process 27052 (syz.3.6181) did not claim interface 0 before use [ 1425.135144][T17255] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1425.579973][T17255] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1425.803043][T17255] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1425.913269][T20812] Bluetooth: hci0: command tx timeout [ 1425.965292][T27040] bridge0: port 1(bridge_slave_0) entered blocking state [ 1425.971160][T27040] bridge0: port 1(bridge_slave_0) entered disabled state [ 1425.971285][T27040] bridge_slave_0: entered allmulticast mode [ 1425.975624][T27040] bridge_slave_0: entered promiscuous mode [ 1426.043451][T17255] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1426.070523][T27040] bridge0: port 2(bridge_slave_1) entered blocking state [ 1426.072510][T27040] bridge0: port 2(bridge_slave_1) entered disabled state [ 1426.072638][T27040] bridge_slave_1: entered allmulticast mode [ 1426.088934][T27040] bridge_slave_1: entered promiscuous mode [ 1426.220137][T27040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1426.240410][T27040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1426.497351][T27040] team0: Port device team_slave_0 added [ 1426.521815][T27040] team0: Port device team_slave_1 added [ 1426.581495][T27074] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6185'. [ 1426.621598][T27040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1426.621616][T27040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1426.621638][T27040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1426.687740][T27040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1426.687758][T27040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1426.687783][T27040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1426.704807][T27074] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6185'. [ 1427.082366][T17255] vlan2: left allmulticast mode [ 1427.082393][T17255] geneve0: left allmulticast mode [ 1427.113455][T23264] usb 5-1: new full-speed USB device number 57 using dummy_hcd [ 1427.120379][T17255] bridge0: port 1(vlan2) entered disabled state [ 1427.273364][ T5731] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 1427.286026][T23264] usb 5-1: New USB device found: idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1427.287169][T23264] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1427.287193][T23264] usb 5-1: config 0 has no interfaces? [ 1427.287222][T23264] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1427.292146][T23264] usb 5-1: config 0 descriptor?? [ 1427.443434][ T5731] usb 6-1: Using ep0 maxpacket: 32 [ 1427.447219][ T5731] usb 6-1: New USB device found: idVendor=05ac, idProduct=120a, bcdDevice=7b.2d [ 1427.448204][ T5731] usb 6-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1427.448226][ T5731] usb 6-1: config 5 has 0 interfaces, different from the descriptor's value: 1 [ 1427.450140][ T5731] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1427.450163][ T5731] usb 6-1: Product: syz [ 1427.450176][ T5731] usb 6-1: Manufacturer: syz [ 1427.450189][ T5731] usb 6-1: SerialNumber: syz [ 1427.690756][T25520] usb 5-1: USB disconnect, device number 57 [ 1427.729275][T17255] ip6gretap0 (unregistering): left promiscuous mode [ 1427.992925][T20812] Bluetooth: hci0: command tx timeout [ 1428.070460][T27081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1428.106733][T27081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1428.624845][T17255] bond0 (unregistering): Released all slaves [ 1428.632841][T27093] IPVS: Scheduler module ip_vs_mh not found [ 1428.657271][T17255] bond1 (unregistering): Released all slaves [ 1428.701021][T27040] hsr_slave_0: entered promiscuous mode [ 1428.711372][T27040] hsr_slave_1: entered promiscuous mode [ 1428.719098][T27040] debugfs: 'hsr0' already exists in 'hsr' [ 1428.719115][T27040] Cannot create hsr debugfs directory [ 1428.812790][ T5294] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1428.998985][T17255] ovs-dp0: left promiscuous mode [ 1429.371974][T17255] tipc: Left network mode [ 1429.545754][T27112] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1429.584861][ T5713] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1429.712815][ T5713] usb 5-1: device descriptor read/64, error -71 [ 1429.767621][T27119] bond2 (unregistering): Released all slaves [ 1429.954056][ T5713] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1430.073956][T20812] Bluetooth: hci0: command tx timeout [ 1430.100920][ T5713] usb 5-1: device descriptor read/64, error -71 [ 1430.204150][ T5713] usb usb5-port1: attempt power cycle [ 1430.542868][ T5713] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1430.568615][ T5713] usb 5-1: device descriptor read/8, error -71 [ 1430.777662][T27137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1430.794236][T27137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1430.813157][ T5713] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1430.834949][ T5713] usb 5-1: device descriptor read/8, error -71 [ 1430.858430][T27137] xt_hashlimit: size too large, truncated to 1048576 [ 1430.943037][ T5713] usb usb5-port1: unable to enumerate USB device [ 1430.943671][T27140] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6194'. [ 1431.242560][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 1431.242582][ T30] audit: type=1326 audit(1792951928.054:6593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27146 comm="syz.3.6197" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8331d9f559 code=0x7ffc0000 [ 1431.242745][ T30] audit: type=1326 audit(1792951928.054:6594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27146 comm="syz.3.6197" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8331d9f559 code=0x7ffc0000 [ 1431.279712][ T30] audit: type=1326 audit(1792951928.094:6595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27146 comm="syz.3.6197" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8331d9f559 code=0x7ffc0000 [ 1431.336541][ T30] audit: type=1326 audit(1792951928.124:6596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27146 comm="syz.3.6197" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8331d9f559 code=0x7ffc0000 [ 1431.339991][ T30] audit: type=1326 audit(1792951928.154:6597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27146 comm="syz.3.6197" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8331d9f559 code=0x7ffc0000 [ 1431.342094][ T30] audit: type=1326 audit(1792951928.154:6598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27146 comm="syz.3.6197" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8331d9f559 code=0x7ffc0000 [ 1431.347739][ T30] audit: type=1326 audit(1792951928.154:6599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27146 comm="syz.3.6197" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8331d9f559 code=0x7ffc0000 [ 1431.347811][ T30] audit: type=1326 audit(1792951928.154:6600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27146 comm="syz.3.6197" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8331d9f559 code=0x7ffc0000 [ 1431.348176][ T30] audit: type=1326 audit(1792951928.154:6601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27146 comm="syz.3.6197" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8331d9f559 code=0x7ffc0000 [ 1431.361849][ T30] audit: type=1326 audit(1792951928.154:6602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27146 comm="syz.3.6197" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8331d9f559 code=0x7ffc0000 [ 1431.936180][ T5294] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1432.072370][T17255] hsr_slave_0: left promiscuous mode [ 1432.089785][T17255] hsr_slave_1: left promiscuous mode [ 1432.153016][T20812] Bluetooth: hci0: command tx timeout [ 1432.187423][T17255] veth0_to_team: left promiscuous mode [ 1432.209519][T17255] veth1_macvtap: left promiscuous mode [ 1432.209562][T17255] veth0_macvtap: left promiscuous mode [ 1432.209712][T17255] veth1_vlan: left promiscuous mode [ 1432.210398][T17255] veth0_vlan: left promiscuous mode [ 1432.380214][T27159] netlink: 'syz.3.6198': attribute type 7 has an invalid length. [ 1432.380237][T27159] netlink: 'syz.3.6198': attribute type 8 has an invalid length. [ 1432.864423][T27172] ------------[ cut here ]------------ [ 1432.864434][T27172] kvm_is_error_gpa(gpa) == kvm_is_error_hva(uhva) [ 1432.864443][T27172] WARNING: arch/x86/kvm/../../../virt/kvm/pfncache.c:267 at __kvm_gpc_refresh+0x1506/0x1700, CPU#0: syz.4.6201/27172 [ 1432.889602][T27172] Modules linked in: [ 1432.894012][T27172] CPU: 0 UID: 0 PID: 27172 Comm: syz.4.6201 Tainted: G L syzkaller #0 PREEMPT(full) [ 1432.905106][T27172] Tainted: [L]=SOFTLOCKUP [ 1432.909448][T27172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1432.919568][T27172] RIP: 0010:__kvm_gpc_refresh+0x1506/0x1700 [ 1432.925506][T27172] Code: c6 05 02 3c 45 10 01 48 c7 c7 2a 03 68 8e be 49 04 00 00 48 c7 c2 a0 42 22 8c e8 05 65 63 00 e9 8b ee ff ff e8 db 08 88 00 90 <0f> 0b 90 bb ea ff ff ff 49 bf 00 00 00 00 00 fc ff df e9 55 f6 ff [ 1432.945645][T27172] RSP: 0018:ffffc900057cf360 EFLAGS: 00010287 [ 1432.951705][T27172] RAX: ffffffff8140fe05 RBX: ffff888000000000 RCX: 0000000000080000 [ 1432.960111][T27172] RDX: ffffc900113e5000 RSI: 00000000000003bc RDI: 00000000000003bd [ 1432.968145][T27172] RBP: ffffc900057cf4e8 R08: ffffffff919cf4bf R09: 1ffffffff2339e97 [ 1432.976151][T27172] R10: dffffc0000000000 R11: fffffbfff2339e98 R12: 1ffff92000af9e80 [ 1432.984214][T27172] R13: ffff8880237a1b78 R14: ffff888000000000 R15: ffffffffffffff01 [ 1432.992208][T27172] FS: 00007fb50c5b46c0(0000) GS:ffff88812363c000(0000) knlGS:0000000000000000 [ 1433.001193][T27172] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1433.007860][T27172] CR2: 0000559a03925fd8 CR3: 000000007efe4000 CR4: 00000000003526f0 [ 1433.015914][T27172] Call Trace: [ 1433.019204][T27172] [ 1433.022183][T27172] ? kvm_gpc_refresh+0x31/0x110 [ 1433.027133][T27172] ? __pfx___kvm_gpc_refresh+0x10/0x10 [ 1433.033241][T27172] kvm_gpc_refresh+0xe1/0x110 [ 1433.038442][T27172] ? kvm_xen_set_evtchn+0x11e/0x220 [ 1433.043771][T27172] kvm_xen_set_evtchn+0x14f/0x220 [ 1433.048835][T27172] kvm_xen_vcpu_get_attr+0x5b0/0xb20 [ 1433.054221][T27172] kvm_arch_vcpu_ioctl+0x1558/0x23a0 [ 1433.059534][T27172] ? lock_acquire+0x115/0x350 [ 1433.064320][T27172] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 1433.069991][T27172] ? lock_acquire+0x115/0x350 [ 1433.074753][T27172] ? is_bpf_text_address+0x26/0x2b0 [ 1433.079949][T27172] ? is_bpf_text_address+0x292/0x2b0 [ 1433.085265][T27172] ? is_bpf_text_address+0x26/0x2b0 [ 1433.090467][T27172] ? kernel_text_address+0xa5/0xe0 [ 1433.095685][T27172] ? __kernel_text_address+0xd/0x30 [ 1433.100915][T27172] ? unwind_get_return_address+0x4d/0x90 [ 1433.106622][T27172] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1433.113162][T27172] ? arch_stack_walk+0xfb/0x150 [ 1433.118034][T27172] ? stack_trace_save+0xa9/0x100 [ 1433.123077][T27172] ? __pfx_stack_trace_save+0x10/0x10 [ 1433.128438][T27172] ? kasan_save_track+0x4f/0x80 [ 1433.133721][T27172] ? stack_depot_save_flags+0x33/0x7f0 [ 1433.139192][T27172] ? __lock_acquire+0x747/0x2de0 [ 1433.144632][T27172] ? kfree+0x1c5/0x650 [ 1433.148721][T27172] ? __se_sys_ioctl+0x47/0x170 [ 1433.153552][T27172] ? do_syscall_64+0x166/0x520 [ 1433.158341][T27172] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1433.164476][T27172] ? __mutex_trylock_common+0x15f/0x270 [ 1433.170042][T27172] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1433.175973][T27172] ? rcu_is_watching+0x16/0xb0 [ 1433.180736][T27172] ? trace_contention_end+0x3d/0x140 [ 1433.186122][T27172] ? __mutex_lock+0x305/0x15a0 [ 1433.190874][T27172] ? kasan_quarantine_put+0xbb/0x1f0 [ 1433.196292][T27172] ? __pfx___mutex_lock+0x10/0x10 [ 1433.201333][T27172] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1433.207025][T27172] ? do_vfs_ioctl+0x116f/0x1530 [ 1433.211890][T27172] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1433.217016][T27172] kvm_vcpu_ioctl+0x7e3/0xfd0 [ 1433.221691][T27172] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1433.226970][T27172] ? do_futex+0x3e7/0x4e0 [ 1433.231303][T27172] ? fd_install+0x95/0x4e0 [ 1433.236114][T27172] ? __fget_files+0x2a/0x420 [ 1433.240698][T27172] ? __fget_files+0x2a/0x420 [ 1433.245586][T27172] ? __fget_files+0x2a/0x420 [ 1433.250188][T27172] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1433.255193][T27172] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1433.260388][T27172] __se_sys_ioctl+0xfc/0x170 [ 1433.265032][T27172] do_syscall_64+0x166/0x520 [ 1433.269606][T27172] ? trace_irq_disable+0x3b/0x140 [ 1433.274709][T27172] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1433.280763][T27172] ? clear_bhb_loop+0x70/0xc0 [ 1433.285467][T27172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1433.291345][T27172] RIP: 0033:0x7fb50b79f559 [ 1433.295790][T27172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1433.315471][T27172] RSP: 002b:00007fb50c5b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1433.323937][T27172] RAX: ffffffffffffffda RBX: 00007fb50ba25fa0 RCX: 00007fb50b79f559 [ 1433.331912][T27172] RDX: 0000200000000880 RSI: 00000000c048aeca RDI: 0000000000000009 [ 1433.340256][T27172] RBP: 00007fb50b836b20 R08: 0000000000000000 R09: 0000000000000000 [ 1433.348506][T27172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1433.357345][T27172] R13: 00007fb50ba26038 R14: 00007fb50ba25fa0 R15: 00007fb50bb4fa48 [ 1433.365458][T27172] [ 1433.368490][T27172] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1433.375760][T27172] CPU: 0 UID: 0 PID: 27172 Comm: syz.4.6201 Tainted: G L syzkaller #0 PREEMPT(full) [ 1433.386782][T27172] Tainted: [L]=SOFTLOCKUP [ 1433.391105][T27172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1433.401143][T27172] Call Trace: [ 1433.404412][T27172] [ 1433.407354][T27172] vpanic+0x56d/0xa60 [ 1433.411329][T27172] ? __pfx__printk+0x10/0x10 [ 1433.415906][T27172] ? __pfx_vpanic+0x10/0x10 [ 1433.420394][T27172] ? is_bpf_text_address+0x292/0x2b0 [ 1433.425664][T27172] ? is_bpf_text_address+0x26/0x2b0 [ 1433.430871][T27172] panic+0xc5/0xd0 [ 1433.434581][T27172] ? __pfx_panic+0x10/0x10 [ 1433.438990][T27172] __warn+0x315/0x4c0 [ 1433.442976][T27172] ? __kvm_gpc_refresh+0x1506/0x1700 [ 1433.448250][T27172] ? __kvm_gpc_refresh+0x1506/0x1700 [ 1433.453522][T27172] __report_bug+0x276/0x570 [ 1433.458098][T27172] ? __kvm_gpc_refresh+0x1506/0x1700 [ 1433.463376][T27172] ? __pfx___report_bug+0x10/0x10 [ 1433.468387][T27172] ? __lock_acquire+0x747/0x2de0 [ 1433.473319][T27172] ? __bfs+0x153/0x290 [ 1433.477372][T27172] ? __pfx_hlock_conflict+0x10/0x10 [ 1433.482558][T27172] ? __kvm_gpc_refresh+0x1506/0x1700 [ 1433.487826][T27172] report_bug+0x16b/0x220 [ 1433.492157][T27172] ? __kvm_gpc_refresh+0x1506/0x1700 [ 1433.497427][T27172] ? __kvm_gpc_refresh+0x1508/0x1700 [ 1433.502704][T27172] handle_bug+0x9c/0x200 [ 1433.506941][T27172] exc_invalid_op+0x1a/0x50 [ 1433.511447][T27172] asm_exc_invalid_op+0x1a/0x20 [ 1433.516279][T27172] RIP: 0010:__kvm_gpc_refresh+0x1506/0x1700 [ 1433.522158][T27172] Code: c6 05 02 3c 45 10 01 48 c7 c7 2a 03 68 8e be 49 04 00 00 48 c7 c2 a0 42 22 8c e8 05 65 63 00 e9 8b ee ff ff e8 db 08 88 00 90 <0f> 0b 90 bb ea ff ff ff 49 bf 00 00 00 00 00 fc ff df e9 55 f6 ff [ 1433.541794][T27172] RSP: 0018:ffffc900057cf360 EFLAGS: 00010287 [ 1433.547849][T27172] RAX: ffffffff8140fe05 RBX: ffff888000000000 RCX: 0000000000080000 [ 1433.555829][T27172] RDX: ffffc900113e5000 RSI: 00000000000003bc RDI: 00000000000003bd [ 1433.563784][T27172] RBP: ffffc900057cf4e8 R08: ffffffff919cf4bf R09: 1ffffffff2339e97 [ 1433.571741][T27172] R10: dffffc0000000000 R11: fffffbfff2339e98 R12: 1ffff92000af9e80 [ 1433.579705][T27172] R13: ffff8880237a1b78 R14: ffff888000000000 R15: ffffffffffffff01 [ 1433.587690][T27172] ? __kvm_gpc_refresh+0x1505/0x1700 [ 1433.593073][T27172] ? kvm_gpc_refresh+0x31/0x110 [ 1433.597959][T27172] ? __pfx___kvm_gpc_refresh+0x10/0x10 [ 1433.603459][T27172] kvm_gpc_refresh+0xe1/0x110 [ 1433.608158][T27172] ? kvm_xen_set_evtchn+0x11e/0x220 [ 1433.613349][T27172] kvm_xen_set_evtchn+0x14f/0x220 [ 1433.618379][T27172] kvm_xen_vcpu_get_attr+0x5b0/0xb20 [ 1433.623672][T27172] kvm_arch_vcpu_ioctl+0x1558/0x23a0 [ 1433.628953][T27172] ? lock_acquire+0x115/0x350 [ 1433.633700][T27172] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 1433.639423][T27172] ? lock_acquire+0x115/0x350 [ 1433.644134][T27172] ? is_bpf_text_address+0x26/0x2b0 [ 1433.649331][T27172] ? is_bpf_text_address+0x292/0x2b0 [ 1433.654600][T27172] ? is_bpf_text_address+0x26/0x2b0 [ 1433.659845][T27172] ? kernel_text_address+0xa5/0xe0 [ 1433.664971][T27172] ? __kernel_text_address+0xd/0x30 [ 1433.670204][T27172] ? unwind_get_return_address+0x4d/0x90 [ 1433.675831][T27172] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1433.681999][T27172] ? arch_stack_walk+0xfb/0x150 [ 1433.686864][T27172] ? stack_trace_save+0xa9/0x100 [ 1433.691825][T27172] ? __pfx_stack_trace_save+0x10/0x10 [ 1433.697224][T27172] ? kasan_save_track+0x4f/0x80 [ 1433.702110][T27172] ? stack_depot_save_flags+0x33/0x7f0 [ 1433.707593][T27172] ? __lock_acquire+0x747/0x2de0 [ 1433.712530][T27172] ? kfree+0x1c5/0x650 [ 1433.716613][T27172] ? __se_sys_ioctl+0x47/0x170 [ 1433.721363][T27172] ? do_syscall_64+0x166/0x520 [ 1433.726111][T27172] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1433.732189][T27172] ? __mutex_trylock_common+0x15f/0x270 [ 1433.737737][T27172] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1433.743622][T27172] ? rcu_is_watching+0x16/0xb0 [ 1433.748381][T27172] ? trace_contention_end+0x3d/0x140 [ 1433.753659][T27172] ? __mutex_lock+0x305/0x15a0 [ 1433.758411][T27172] ? kasan_quarantine_put+0xbb/0x1f0 [ 1433.763693][T27172] ? __pfx___mutex_lock+0x10/0x10 [ 1433.768717][T27172] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1433.774347][T27172] ? do_vfs_ioctl+0x116f/0x1530 [ 1433.779207][T27172] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1433.784249][T27172] kvm_vcpu_ioctl+0x7e3/0xfd0 [ 1433.788946][T27172] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1433.794148][T27172] ? do_futex+0x3e7/0x4e0 [ 1433.798500][T27172] ? fd_install+0x95/0x4e0 [ 1433.802950][T27172] ? __fget_files+0x2a/0x420 [ 1433.807562][T27172] ? __fget_files+0x2a/0x420 [ 1433.812173][T27172] ? __fget_files+0x2a/0x420 [ 1433.816767][T27172] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1433.821695][T27172] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1433.826889][T27172] __se_sys_ioctl+0xfc/0x170 [ 1433.831483][T27172] do_syscall_64+0x166/0x520 [ 1433.836058][T27172] ? trace_irq_disable+0x3b/0x140 [ 1433.841087][T27172] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1433.847137][T27172] ? clear_bhb_loop+0x70/0xc0 [ 1433.851804][T27172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1433.857753][T27172] RIP: 0033:0x7fb50b79f559 [ 1433.862178][T27172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1433.881788][T27172] RSP: 002b:00007fb50c5b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1433.890201][T27172] RAX: ffffffffffffffda RBX: 00007fb50ba25fa0 RCX: 00007fb50b79f559 [ 1433.898163][T27172] RDX: 0000200000000880 RSI: 00000000c048aeca RDI: 0000000000000009 [ 1433.906121][T27172] RBP: 00007fb50b836b20 R08: 0000000000000000 R09: 0000000000000000 [ 1433.914078][T27172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1433.922047][T27172] R13: 00007fb50ba26038 R14: 00007fb50ba25fa0 R15: 00007fb50bb4fa48 [ 1433.930032][T27172] [ 1433.933337][T27172] Kernel Offset: disabled [ 1433.937659][T27172] Rebooting in 86400 seconds..