last executing test programs: 2m24.5032854s ago: executing program 0 (id=8323): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000f80)=@mangle={'mangle\x00', 0x2, 0x6, 0x850, 0x2b0, 0x460, 0x550, 0x0, 0x550, 0x780, 0x780, 0x780, 0x780, 0x780, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0x288, 0x2b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x460], 0x0, 0x10}}, @common=@inet=@hashlimit2={{0x150}, {'vxcan1\x00', {0x45cf, 0x2, 0x39, 0x67, 0xff, 0x1, 0x3}, {0x1}}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@loopback, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @mcast2, @private0, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x8b0) 2m24.299899998s ago: executing program 0 (id=8325): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2702, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0xe5c, 0x80000) r3 = eventfd2(0x7e, 0x80800) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={r2, 0x0, 0x2, r3}) socket$kcm(0x21, 0x2, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0d00000003000000040000000400000000000000", @ANYRES32=r4], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r4}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r6, &(0x7f0000000080)="e5d49118c58b3fc3bea1dbfa67f3ca0995ef5de5a9c5ee350f9791f78adc", 0x0, 0x4}, 0x20) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x80, 0x1c, {0x100, 0x2, 0xe2ae, 0x6ff, 0x2, 0x8, 0x7a, 0x3, 0x2006, 0x34, 0x22, 0xf8}}, 0x0, 0x0, 0x0, 0x0}) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) r8 = openat$cgroup_int(r7, &(0x7f0000000040)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) sendfile(r8, r8, 0x0, 0x1) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x2}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x2, 0x95c, 0x61, 0x7, 0xfe, 0xe, 0x1, 0x47, 0x8b, 0x3, 0x3, 0x18, 0x7}, {0x9, 0xa, 0x8, 0xff, 0x0, 0x4, 0x5, 0x1, 0x72, 0xc0, 0x5, 0x3, 0x401}, {0x5, 0x5, 0x40, 0x2, 0x20, 0xc8, 0xad, 0xe, 0x7, 0x0, 0x12, 0x2c, 0xc}], 0x6}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x0, 0x3, 0x6, 0x10, 0x5, 0x6, 0x6, 0x7, 0x3, 0x9, 0xff, 0x7, 0x64, 0xf6, 0x3, 0x9}}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f00000003c0)={[0xc9, 0x200000000d, 0x1, 0x6d, 0x2, 0x1002, 0xf1, 0x8, 0x7fffffffffff8, 0x8d, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x5, 0x3, 0xbde], 0x1000, 0x67a64fa265d09613}) ioctl$KVM_RUN(r9, 0xae80, 0x0) (fail_nth: 35) 2m23.24802864s ago: executing program 0 (id=8333): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="b4000000000000047911b800000000001801000020646c2500000000002020207b37f8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000c0000009500740000000000ef5f6082e4a0a52b72bde925efe35e0c28542f1716572a77c3939e085958131eb5d6ab7a69e1a83a4c8354fce7a66fe529cf5d06f6010e13c72fe2174e984706fbb446efe6271a62fc1c495beb391ce3ca6f852a3a36ecf9c5"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x29}, 0x94) r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000400)=ANY=[], 0x8) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @dev={0xfe, 0x80, '\x00', 0x16}, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0xc040) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fcdbdf251f00000018000180140002006c6f"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x200040d4) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="14d000003a00010100000000000204000a"], 0x14}}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f00000012c0), 0x1, 0x1c3000) ioctl$HIDIOCSUSAGES(r4, 0x501c4814, &(0x7f0000001540)={{0x1, 0x2, 0x5, 0x2, 0x2, 0x4}, 0x24d, [0x5, 0x3, 0xffffffff, 0xfffffffb, 0x10000, 0x0, 0xe13a, 0x7, 0x8, 0x5, 0x1000, 0x1, 0x7b1, 0x4, 0x3, 0x26, 0x1, 0x9c96, 0x2e58, 0x7f, 0x4c9, 0x401, 0x31, 0x9, 0x5, 0xaeae, 0xff, 0x184, 0x0, 0xd53, 0x8d0, 0xfffffffa, 0x5, 0xfff, 0xfffffffc, 0x8, 0x0, 0x3, 0x80000001, 0x10001, 0x727b, 0x3, 0x5dd3, 0x4, 0xa, 0x7, 0x0, 0x4, 0xd, 0x0, 0x1, 0xb404, 0x8, 0xfffff1ab, 0x1, 0x81, 0x5, 0x7fff, 0x5, 0x81, 0x96ba, 0x8, 0xb, 0x1, 0x3, 0x1, 0x0, 0x2, 0x5, 0x2, 0x7, 0x3, 0x4f9e, 0x4, 0x4, 0xfffffff7, 0xc, 0x2ba5, 0x5, 0x0, 0xca56a48, 0x1, 0x80000001, 0x3, 0xe, 0x80, 0x6, 0x53ced033, 0x6, 0x0, 0x2d5, 0x5, 0x8, 0xa, 0x37dc, 0x7, 0x0, 0x4, 0x4, 0x8, 0x8000, 0xd128, 0x2, 0x6, 0x1ff, 0x7, 0x4, 0x0, 0xbd, 0x9464, 0x6, 0x100, 0x609f, 0x805, 0x4, 0x6, 0x0, 0x20000000, 0x1ff, 0x9, 0x31a, 0xfffffda5, 0x400, 0x4, 0xffffffff, 0x9, 0x80000000, 0x7, 0x6, 0x3, 0x4, 0x2, 0x3, 0x7, 0x4, 0x0, 0x10000, 0x400, 0x4, 0x1, 0x4, 0x42b, 0x3, 0x854, 0x691c, 0xfffffff4, 0x8, 0x6, 0x7, 0x68e0, 0x6, 0x2, 0x5, 0x8, 0x5, 0x9, 0x8f83, 0x3, 0x7, 0x40, 0x6, 0x1000, 0x6, 0x3, 0x6, 0x8, 0x0, 0x8001, 0x3, 0x8, 0xffffffa6, 0x5, 0x1, 0x1, 0x4, 0xfd0, 0x2, 0x2, 0x6, 0x6, 0x2, 0x2, 0xffffffff, 0x3, 0x9, 0x1, 0x858d, 0x85ed, 0xb, 0x1, 0x6, 0x11e3, 0x8, 0x2, 0x8001, 0x3, 0x2, 0x40, 0x8, 0x6, 0x3, 0x7fffffff, 0x7, 0xa000, 0xa0, 0x3, 0x1, 0x4, 0x0, 0x3, 0x800, 0x6, 0x1, 0x5, 0x8, 0x10001, 0x9, 0xfffffff0, 0xfe7, 0xa, 0x9, 0x1ff, 0x7, 0x8000, 0x80, 0x1, 0xfffffc00, 0x3, 0x0, 0x7, 0x6, 0x7ff, 0x0, 0x0, 0x7, 0x40, 0x3ff, 0x8000, 0x80000000, 0x34, 0x8, 0xff, 0x3, 0x1104, 0x4, 0x7, 0x3, 0xb, 0x6800, 0x3, 0x6, 0x5, 0x1, 0x7, 0x1, 0x8000, 0x82, 0x5, 0xa, 0x3, 0x1, 0x0, 0x101, 0x6, 0xf2, 0x6, 0xa4ed331, 0x0, 0xfff, 0x8, 0x7be7, 0x1, 0x0, 0xbc7f, 0x7fff, 0x1, 0x9, 0x1, 0x3, 0x210e731a, 0x7, 0x5, 0x1, 0x8, 0x3, 0xffff, 0x7, 0x2, 0x4, 0x3ee, 0x5, 0xe, 0x2, 0xb, 0xfffffffc, 0x1, 0x5, 0x0, 0x1000, 0x2e, 0x0, 0x9, 0x9, 0x7fff, 0xd3, 0x61e6, 0xb, 0x6, 0x4000, 0x6, 0x7, 0x2, 0xa, 0xc, 0xc5a, 0x1ff, 0x7ff, 0x3, 0x7, 0xf8, 0x8, 0x701, 0x5, 0x5, 0x3, 0xff, 0xc, 0x79872cd1, 0x1, 0x8e, 0x7f, 0x7, 0xffffff55, 0x10001, 0x3, 0x64, 0x7fffffff, 0x8, 0x9da, 0x2, 0x6, 0xfffff000, 0x8, 0x183, 0xd, 0x6, 0x2, 0x3424b9d6, 0x6, 0x1000, 0xb, 0x1, 0x7f, 0xfd, 0x3b, 0x2, 0x7, 0xe, 0x8, 0x462, 0x1, 0x1, 0x4, 0x5, 0x2, 0x1, 0xfffffff9, 0x8, 0x800000, 0x7, 0x31946289, 0x6, 0x49e, 0x9b4, 0x1, 0xffffff0c, 0x8, 0xff, 0xe, 0x3, 0x7a, 0x3, 0x4, 0x7fff, 0x5, 0x5, 0x0, 0xffff, 0x49, 0x1000, 0x33b, 0x1, 0x7ff, 0x800, 0x5, 0xfb4, 0x1, 0x3, 0x9, 0xfffffffc, 0x96da, 0xfe, 0x0, 0xfffffffb, 0xf2e, 0x9, 0x7, 0x9, 0x6, 0x2, 0x9684, 0x2, 0x0, 0x7b, 0x10, 0x1ff, 0x1, 0x20d9, 0x9, 0xd, 0x2, 0xd5f, 0x6d, 0x2, 0x8, 0x9, 0x2, 0x7, 0x9, 0xed05, 0xd2, 0xb6a6, 0x480b, 0x800, 0x7, 0x0, 0x1000, 0x5, 0x3, 0x82f6, 0xfffffffc, 0x4, 0x4, 0x7, 0x5, 0x1000, 0xd, 0x3e79, 0xfffffff7, 0x7, 0x8, 0x6, 0xfffffedf, 0x0, 0x1000, 0x0, 0x6, 0x4, 0x1, 0x0, 0x8, 0x8, 0x8, 0x7, 0x8, 0x6, 0x7, 0x1, 0xffff8e8d, 0x7, 0x8001, 0x7, 0x2, 0x5b90, 0x8, 0x8, 0x87a, 0xe, 0x7, 0x8001, 0xed, 0x8, 0x80000000, 0x85, 0xa6, 0x210, 0xfffffffb, 0x6, 0xfa37, 0x5, 0x9, 0xb2f, 0x1, 0x3, 0xd, 0x8, 0x9, 0x7fffffff, 0x6, 0x4, 0x2, 0x3, 0x9, 0xffff, 0x8000, 0x0, 0xc6, 0x6, 0x8, 0x3, 0x15, 0x9, 0x0, 0x1, 0x0, 0x9, 0x3, 0xfff00000, 0x2, 0x0, 0x4, 0x3, 0x3, 0xd28, 0x4, 0x2, 0x9, 0x3f, 0x7fff, 0xd6b, 0x361, 0x8, 0x7, 0x83e, 0xffffff00, 0x8001, 0x1000, 0x5, 0x0, 0x3, 0x4, 0xd, 0x9, 0x7fffffff, 0x6, 0xd27, 0x148, 0xa3, 0x5, 0xe9, 0xb, 0x7, 0x2, 0x0, 0x1680000, 0x1, 0x4, 0x56b, 0x6, 0x5, 0x5, 0xa, 0x2, 0x0, 0x9, 0x9, 0xffffffff, 0xb4d, 0x3, 0xffff, 0x985, 0x8, 0x6, 0x8, 0x3, 0xa7be, 0x7fffffff, 0x401, 0x9, 0xcaf, 0x3f, 0x0, 0x8, 0xddb997d0, 0x1d87, 0x8001, 0x2d, 0x3, 0x1678, 0x1, 0x4c4, 0x1, 0x6, 0xc3, 0xff, 0x7, 0x80000001, 0x2f, 0x8, 0x1, 0x80000001, 0xf, 0x7fff, 0x7, 0x7, 0x0, 0x7, 0x37, 0x5, 0xff, 0x4, 0xb, 0x445, 0x7, 0x8, 0x81, 0x80, 0x1, 0x1, 0x6, 0x5, 0x8000, 0x6, 0xe, 0x2, 0x4, 0xf, 0xfffffffe, 0xffffffff, 0x3, 0x2, 0x9, 0x0, 0x2, 0x6, 0x207a, 0x6, 0x101, 0x81, 0x2, 0x1, 0x80000000, 0x4, 0x86, 0x4, 0x9, 0x6, 0x5, 0x9ccd, 0x7d, 0xde12, 0xfffffff4, 0x8, 0xfffffe00, 0x4, 0x2, 0x0, 0x6, 0x1, 0x401, 0x1, 0x3, 0x2, 0x4, 0xfffffffa, 0x4, 0xfff, 0x7, 0xc63b, 0x4, 0x1ed, 0x8, 0xf, 0x1, 0xcce, 0xfffffff1, 0x131f, 0x7, 0x0, 0x7fff, 0x7, 0x8, 0x2, 0x8, 0x2, 0xbaa, 0x6, 0x6a4, 0x80a, 0x5e8, 0x4, 0xb6b6, 0x101, 0x80000001, 0xc2, 0xfff, 0x5, 0x0, 0x8, 0x0, 0x7fff, 0x914f, 0x0, 0x7, 0x9, 0x3, 0x6, 0x8, 0x1, 0x586, 0x9, 0x8001, 0x7, 0xf3, 0x6, 0x0, 0x7, 0x1, 0x4, 0x6, 0x6, 0x4, 0x400, 0x4, 0x1, 0x4, 0x400, 0x33, 0x100, 0x5, 0x1, 0xf72, 0x4, 0x6a7bea84, 0xffffffff, 0xffff8000, 0x7, 0x9, 0x0, 0x80, 0x8, 0x3ff, 0x1, 0x3e, 0x7, 0x2, 0x101, 0x9, 0x3, 0x8, 0x4, 0x9, 0x4, 0xb, 0x4, 0x6a3, 0xa, 0x6, 0x0, 0x1000, 0x4, 0x40, 0x0, 0x5, 0xfffffff7, 0x5, 0x0, 0x4800000, 0x0, 0x3, 0x2090, 0x400, 0x400, 0xb5, 0x3ff, 0x80000000, 0x2, 0x3, 0x80000000, 0x70c06206, 0x7b4c, 0x6, 0xe, 0x5f88, 0x3, 0x40, 0x7, 0x7400, 0x8, 0xff, 0xc8f, 0x2, 0x6, 0x1000, 0x0, 0x3, 0x6, 0x8, 0x5, 0xbf, 0x5, 0x7, 0x2, 0x4, 0x0, 0x5, 0x9, 0x18, 0xffffff60, 0x4, 0x3ff, 0x8, 0x0, 0x9, 0xffffff00, 0xecf, 0x5, 0xfffffffa, 0x0, 0xcb9, 0x9, 0x800000, 0x7, 0x9, 0x5, 0x80000000, 0x5, 0x2, 0x6, 0x1, 0x8, 0x6, 0x1050052c, 0x1, 0x9, 0x1, 0xab6, 0x7, 0x5, 0xe1f, 0x3, 0x0, 0x7, 0x0, 0x0, 0x6, 0xf0, 0xfffeffff, 0x9, 0x200, 0x3, 0x1, 0x573, 0x80000000, 0x9, 0x3, 0x2, 0xfffffffe, 0x1, 0x7, 0x5, 0x4, 0x1, 0x8, 0x9, 0x2, 0xc, 0x1, 0x8, 0x4, 0x80, 0x0, 0xe, 0x9, 0xb82f, 0x0, 0xb, 0x1, 0x7, 0x9, 0x7ff, 0x7, 0x5, 0x27, 0xfff, 0x8001, 0x3ff, 0xb, 0xc, 0x4, 0x0, 0x0, 0x10, 0x4, 0x2, 0x4, 0x8, 0x0, 0x1, 0x1499, 0x9, 0x1000, 0xc04e, 0x731e, 0x1ff, 0xffffff57, 0x7, 0xbc0, 0x4, 0xfffffffe, 0x7, 0x4, 0x7e16, 0xff, 0x6, 0x2, 0x6, 0x7, 0x7, 0x9afa, 0xc, 0x9, 0x7ff, 0x80000001, 0x9, 0xd, 0x800000, 0x6, 0x6, 0x4, 0x101, 0x9, 0x3, 0x1, 0x3, 0x7, 0x7, 0x10000, 0x1, 0x7fff, 0xd, 0x6, 0x28, 0x4, 0x6, 0x10000, 0x10000, 0xa, 0x1, 0x5, 0x400, 0x1, 0xe, 0x7c, 0x7f, 0x5, 0x6, 0x0, 0x2f38, 0x7f, 0x3, 0xd, 0x9, 0xc, 0x8, 0x2, 0x6, 0x6, 0x9, 0x400, 0xfff, 0x7, 0x8, 0x4, 0x2211, 0x58f, 0x3, 0x4, 0xc43, 0x80000000, 0x6, 0x9f, 0x44, 0x4, 0x0, 0x9, 0x4, 0xfa7, 0x6, 0x0, 0x67, 0xc1, 0x2dd, 0x3, 0x0, 0xff, 0x93, 0xffff8000, 0x2, 0x2, 0x1, 0x4, 0x85b2, 0x9, 0x0, 0x4, 0x1, 0xc, 0x1, 0x7, 0x10000, 0x4, 0x1, 0xc, 0xb, 0x5, 0x4e, 0x8, 0x0, 0x7, 0xff, 0x0, 0x2, 0x1]}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0xdf10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) r6 = memfd_create(&(0x7f00000002c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x044\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00s.\xe3\xf3N\x80\xe8\xbb\x0f\\-\xa3v\x8b\xe9h\xaaO}\'F;y\x13AK\xf9\x10\x9e\xad\f\xfa\xc3\xb1\xe8IU\x8d\xfb\x82D\xb6 \x9e\x80L)\xc4\x0e\xc1J\xba9\xfeH\xbc\x17dH,E\x8d\x99\xc4\x83\xa3\xe1v\xf7\xae\xd1@c\xdb\xb5\xdbL\x19X\xca\xc3\x96v\r\x88Wpi\xc00\xa7\xbb[\x1c\x91\x8fp\x82O\x9au}\b\xfb\xfe\xc5\xd9{\f8\xa5SM*\xaf\xed\xe3\x8c\xdf\x9fH\x03\x98\xbby\xb8\x8aX&Q2\xe8!B\xb0U\x86\xfe\xe9-)\xea\x91R\xea\xa1\xb9\xfa\x82Kn\x1aQx!\x85\xec\xa2V\xd0>\x93\aX\a8\an.\x8f#\xb4\xda\xf8\x8e\xfb`\xb3\xb1\xfe\x9dg\xae\xda\xe1\xf30xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x2, 0x0, 0x300) (async) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x5, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3b}, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) (async, rerun: 32) r7 = socket$inet(0x2, 0x2, 0x0) (rerun: 32) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) (async) sendmsg$nl_route_sched(r5, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=@deltaction={0xb4, 0x31, 0x204, 0x70bd28, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x48, 0x1, [{0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x14, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x14, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8001}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff}}]}]}, 0xb4}}, 0x0) (async) write$tun(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="4500001c12344000403a"], 0x1c) (async, rerun: 64) fsmount(r2, 0x0, 0x0) (async, rerun: 64) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b8000000190001000000000000000100e00000020004000000000000000000000900000000000000000a0000002900000000000000000000d4b046dde19c1e5f", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0800000000000000000000000000000001000000010000000000000000000000000000000000000073b4ffffffffffffffffffffffffffff0000000000000000000000001000000000000000000000200000000000000000fffffffffffffffffeffffff00"/112], 0xb8}}, 0x4004) sendmsg$nl_xfrm(r8, 0x0, 0x987a3a9f32358a4c) (async) r9 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0xa2) ftruncate(r9, 0x2007ffb) sendfile(r9, r9, 0x0, 0x1000000201005) (async) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r10, 0x107, 0xb, &(0x7f0000000380)=0xffffffff, 0x4) 2m18.440561477s ago: executing program 0 (id=8352): r0 = memfd_create(&(0x7f0000000280)='-B\xd5N4\xa6\xa3y\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xff\x7f\xac\xacva}knh#\xcfJ\x0f\xc8\xc0:\x9cc\xa5\x10\xf7=\b\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xafQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xacM\xcc\v#cos7\xa1b1\xb1;i)j\x0e\x1e\xedI\xaa\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\x90\xae\x96J\xe2]\x00\x86\xb7.<\xf5N\xd3\x94W1\xf7\x18z>\xa7q,\xf7\x96\xb8{\x8e\x024\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGUh\x06\xb3[\xb0>e\xf7\n\xbamj\xd1\xa1\xbf\x01\xc3\\\xce0\xa6q.\'L\x8c\xed\xb6\xa8\xd2{\"Qm\x00\x13\xbd\x8f\xba\t\x89\a\xc9[\x06f\x8e\xdc\x0fG4\x12k;3\xbbW\xf7\x00d\tE\xc05\xdb_\xb8\xf9\xd3\x9f\xa2\xb1X\xf8H}F.(\xd7\x0f\x81\xeds\xf0\xc0\xbbx\xd8,\xef\xd4\xd1M\xa2K\xe1\xb0qR\'\xbb\xf7\x905]\xc8=\xe3\xc6\n\x85\x94\xa0\x1eL\x8c@#%5\xa6\xc3\xd9\xf7\xdb\xecC\x9f\x8a\xa5$\xb3\x16O\x13:\xa4/=\xc9\xd6R\x90\xaf\x99%\xbc\x17\xda0\xeb\xceC\xc4\xf0\xdc\x0f\xf6\xba}\xca-\"\x1a\xc3cK\xdcN\xd1-\v\x1c\r\xf0\xd0\x0f\xae\xe6bh\x95\xda\x03\xb30Kv79;\x03\xfa\xe1\xe8\xa7\xd5\x0fs\x97\x81\x9b\xab\x86\xac\x93\xa5\xb9_51\xad\x97\x18\xa2}\xf7bc\xd2\x87\xac\xcdPP\xfc=\x9f\v\xc0d\x8a\xd5\xe1\xd8PKk\xb97[\x18\xca\x8e\x05+/\x90m3\xddp\xb99\a\xb5Q*A\xb5\xb7\xe7\xbb\xe8\xbdL$qu\xb9E\x18\xd8;\x12r$\xfa\xcfc\x11y6\xe8\xfb\x9dU\n\x00\xa6/M\xc5\xcb_\xbe\xbc \x10\x8dM\xa7\x93en\xac\xe3k\xba\xfc\f\xf7\x87\xc7\x1e\x15d\x9a\xfd\xc9\xfe\x82\x95cO\x80\xbcA]23\xc1y\xb0\xceo/\xad\xeeOzi\xb6\xd8|7\x9f\x87\xd3\xca\xfe\x00\x93\x8a\xb80\xdbZW\xf1.\x9c\xd4\'7\xff\x92\x9f\xacV\xc5;\x00\xfa\xca\xb8\xc4\xa0pU\x9f3W\xeb\xf6\xf5\x008\x1dY\xd7\x18\x8f\xab\x80\xc1z\x8d\x0e\xb4<\xde\x83c\x964\x8aZ\xc0A\x8d\xc1RU\t\xd0\x0e\xb0\xc4h\x92\xe87^\xc0\xf4Y\xbb3o\xa1+\x1a\x04\x8dS~wr\x8619\xc1Y\xa3Z`\x02h&\x86\x86\x81=\xfdM\x1b\xf1\x89~\x16}\xddI$\xb4\'~\xb4\\\x1cQ', 0x0) r1 = dup(r0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x40001004, r1, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000080)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x7, 0x8000, 0x401, 0x85, {{0x6, 0x4, 0x1, 0x3a, 0x18, 0x65, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@end]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r1, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x9, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x64, &(0x7f0000000640)=[{}, {}], 0x10, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x62, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, [@ldst={0x2, 0x0, 0x3, 0xb, 0x6, 0xffffffffffffffc7, 0x4}]}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0xa4, &(0x7f00000000c0)=""/164, 0x40f00, 0x0, '\x00', r3, @cgroup_sock_addr=0x32, r1, 0x8, &(0x7f0000000200)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0xc, 0x1, 0x5}, 0x10, r4, r1, 0x5, &(0x7f0000000880)=[r2, r1, r1, r1], &(0x7f0000000a00)=[{0x1, 0x2, 0xe, 0x1}, {0x2, 0x1, 0x10, 0x5}, {0x4, 0x1, 0x7, 0x8}, {0x0, 0x1, 0x4, 0xb}, {0x4, 0x5, 0xb, 0x6}], 0x10, 0x7}, 0x94) 2m17.56035951s ago: executing program 32 (id=8352): r0 = memfd_create(&(0x7f0000000280)='-B\xd5N4\xa6\xa3y\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xff\x7f\xac\xacva}knh#\xcfJ\x0f\xc8\xc0:\x9cc\xa5\x10\xf7=\b\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xafQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xacM\xcc\v#cos7\xa1b1\xb1;i)j\x0e\x1e\xedI\xaa\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\x90\xae\x96J\xe2]\x00\x86\xb7.<\xf5N\xd3\x94W1\xf7\x18z>\xa7q,\xf7\x96\xb8{\x8e\x024\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGUh\x06\xb3[\xb0>e\xf7\n\xbamj\xd1\xa1\xbf\x01\xc3\\\xce0\xa6q.\'L\x8c\xed\xb6\xa8\xd2{\"Qm\x00\x13\xbd\x8f\xba\t\x89\a\xc9[\x06f\x8e\xdc\x0fG4\x12k;3\xbbW\xf7\x00d\tE\xc05\xdb_\xb8\xf9\xd3\x9f\xa2\xb1X\xf8H}F.(\xd7\x0f\x81\xeds\xf0\xc0\xbbx\xd8,\xef\xd4\xd1M\xa2K\xe1\xb0qR\'\xbb\xf7\x905]\xc8=\xe3\xc6\n\x85\x94\xa0\x1eL\x8c@#%5\xa6\xc3\xd9\xf7\xdb\xecC\x9f\x8a\xa5$\xb3\x16O\x13:\xa4/=\xc9\xd6R\x90\xaf\x99%\xbc\x17\xda0\xeb\xceC\xc4\xf0\xdc\x0f\xf6\xba}\xca-\"\x1a\xc3cK\xdcN\xd1-\v\x1c\r\xf0\xd0\x0f\xae\xe6bh\x95\xda\x03\xb30Kv79;\x03\xfa\xe1\xe8\xa7\xd5\x0fs\x97\x81\x9b\xab\x86\xac\x93\xa5\xb9_51\xad\x97\x18\xa2}\xf7bc\xd2\x87\xac\xcdPP\xfc=\x9f\v\xc0d\x8a\xd5\xe1\xd8PKk\xb97[\x18\xca\x8e\x05+/\x90m3\xddp\xb99\a\xb5Q*A\xb5\xb7\xe7\xbb\xe8\xbdL$qu\xb9E\x18\xd8;\x12r$\xfa\xcfc\x11y6\xe8\xfb\x9dU\n\x00\xa6/M\xc5\xcb_\xbe\xbc \x10\x8dM\xa7\x93en\xac\xe3k\xba\xfc\f\xf7\x87\xc7\x1e\x15d\x9a\xfd\xc9\xfe\x82\x95cO\x80\xbcA]23\xc1y\xb0\xceo/\xad\xeeOzi\xb6\xd8|7\x9f\x87\xd3\xca\xfe\x00\x93\x8a\xb80\xdbZW\xf1.\x9c\xd4\'7\xff\x92\x9f\xacV\xc5;\x00\xfa\xca\xb8\xc4\xa0pU\x9f3W\xeb\xf6\xf5\x008\x1dY\xd7\x18\x8f\xab\x80\xc1z\x8d\x0e\xb4<\xde\x83c\x964\x8aZ\xc0A\x8d\xc1RU\t\xd0\x0e\xb0\xc4h\x92\xe87^\xc0\xf4Y\xbb3o\xa1+\x1a\x04\x8dS~wr\x8619\xc1Y\xa3Z`\x02h&\x86\x86\x81=\xfdM\x1b\xf1\x89~\x16}\xddI$\xb4\'~\xb4\\\x1cQ', 0x0) r1 = dup(r0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x40001004, r1, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000080)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x7, 0x8000, 0x401, 0x85, {{0x6, 0x4, 0x1, 0x3a, 0x18, 0x65, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@end]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r1, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x9, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x64, &(0x7f0000000640)=[{}, {}], 0x10, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x62, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, [@ldst={0x2, 0x0, 0x3, 0xb, 0x6, 0xffffffffffffffc7, 0x4}]}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0xa4, &(0x7f00000000c0)=""/164, 0x40f00, 0x0, '\x00', r3, @cgroup_sock_addr=0x32, r1, 0x8, &(0x7f0000000200)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0xc, 0x1, 0x5}, 0x10, r4, r1, 0x5, &(0x7f0000000880)=[r2, r1, r1, r1], &(0x7f0000000a00)=[{0x1, 0x2, 0xe, 0x1}, {0x2, 0x1, 0x10, 0x5}, {0x4, 0x1, 0x7, 0x8}, {0x0, 0x1, 0x4, 0xb}, {0x4, 0x5, 0xb, 0x6}], 0x10, 0x7}, 0x94) 11.95959701s ago: executing program 2 (id=8912): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20003200000a010400000000000000000200000a0900010073797a300000000040000000030a010400000000000000000200000a0900010073797a30000000000900030073797a300000000014000480080001400000000308000240000000006c000000060a010400000000000000000200000a0900010073797a30000000000900020073797a30000000004000048020000180070001006374000014000280080001400000000108000240000000001c0001800a00010071756575650000000c000280060001"], 0xf4}}, 0x0) 11.728071178s ago: executing program 2 (id=8914): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) (async, rerun: 64) fsopen(&(0x7f0000000380)='nilfs2\x00', 0x1) (rerun: 64) close_range(r0, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_DRAIN(r1, 0x4144, 0x0) 10.954362202s ago: executing program 2 (id=8915): socket$inet6(0xa, 0x80002, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000010d00)={r1, 0xffffffffffffffff, 0x10, 0x0, @val=@iter={&(0x7f0000010d40)=@cgroup={0x4, 0xffffffffffffffff, 0x5}, 0x10}}, 0x20) syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000413b88400819151300000000000109022d00010000000009040000026bb22b000904fffffd0000000009", @ANYRES32=r0], 0x0) (async) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000b40)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r3, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r4, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b, 0x200000a00000}) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x3, 0x2, 0xfffff014}, {0x6, 0x0, 0x5, 0x9}]}, 0x10) (async) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io$printer(r2, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d00)=ANY=[@ANYBLOB="1c000000020303000000000000000000022000000800010001"], 0x1c}}, 0x40000) (async) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="2000000002038306000000000000000000000000090002000001002102"], 0x20}, 0x1, 0x0, 0x0, 0x40684b5}, 0x0) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r8, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x6, 0x3, 0x2b, 0x40}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x28, 0x14, 0x63, 0x0, 0x40, 0x11, 0x0, @private=0xa010104, @broadcast}, {0x4e23, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x9}}}}}, 0x32) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000690003050000000000000000000000000000000008"], 0x20}}, 0x0) (async) syz_usb_connect$cdc_ecm(0x6, 0x64, &(0x7f0000000440)=ANY=[@ANYBLOB="12011001020000102505a1a44000800000000000000001010490fa090400010202060001072406000045fb05240001800d240f0105fffffffcff0800ff0c241b0400010005005b0d000905810320008d010309058202fcba3e3c63f3362249bdcdead2f147e010000c0803090503022000990409"], &(0x7f0000000640)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x421, 0x2, 0x3, 0x2, 0x40, 0x5}, 0x2d, &(0x7f00000000c0)={0x5, 0xf, 0x2d, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x10, "ca369377053b074943e27a1c752b6cb9"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x7f, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x7, 0x7, 0x8}]}, 0x8, [{0x4, &(0x7f0000000100)=@lang_id={0x4}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x1c0a}}, {0xb9, &(0x7f00000002c0)=@string={0xb9, 0x3, "8c298ccc7d82ad8279bcb62dfa81519f6bb4cd9a9742b746a26116ceb16ce5c78ac6c69628319bcc9d17b8b30a13bfb77cd248211b0bbe19e4070115cd456468b10163bfdc1463c72ee42e91c189dc1b3f6f9dcc7e725dd0dd3bf92a3cfd596a8521b47205882ff1e170e8775030c39b9e71699397fde651c1baeb01e71ffe760dfbd37ec34608862ed09bac045f6fca3afd227c9935ff42b3adbfb4c87d6d062535680fc10b2c8c6fe402befb0c7b86c46fb3e135d58b"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x413}}, {0x1d, &(0x7f00000003c0)=@string={0x1d, 0x3, "24cc4bd714bec51273019aa0ede6580fa0accaba36fe6c91d94bc9"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x809}}, {0xce, &(0x7f00000004c0)=@string={0xce, 0x3, "6c5dd7630ed6ecae178ffa2737540b1650dd876054827e3fb4bfdd73a380d1483f37fade1a074d577a289f03742dca31bf7db574b71a335afa4b0ffcb526cbdae769de6fda704a507d6468440ddfe160a2e2d83e6683e1840c7abcc1bf4f3ee20f0491bfcac03b494703465f2f099c8b85a8837dbfcfadbe8a33bd3c3a6c91c8e159c0d62de615d6f235376fdf1b13c34da432d6cbb4cb93e87c94805ec7000912200956f05a4db86dbfd921f592d9b27b14d1d5505da0cca04829240c70213df73f1ed54410091409cf85b6"}}]}) 7.33842701s ago: executing program 2 (id=8929): add_key(&(0x7f0000000300)='rxrpc\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000100)="000000000000000463656c6c00000001000000440000000200000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000004010203040000000405060708", 0x58, 0xffffffffffffffff) 6.984363527s ago: executing program 2 (id=8935): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, r0) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}, 0x1, 0x0, 0x1e00}, 0x0) 6.79566144s ago: executing program 2 (id=8936): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f00000003c0)={0x1, 0x7, 0x97, &(0x7f0000000300)=""/151}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x19}}, 0x10) syz_usb_connect$cdc_ecm(0x4, 0x5d, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4b, 0x1, 0x1, 0x6, 0x50, 0x7, "", [{{0x9, 0x4, 0x0, 0x2, 0x3, 0x2, 0x6, 0x0, 0xf, {{0x9, 0x24, 0x6, 0x0, 0x0, "ba6f6491"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0xd, 0xa, 0x7, 0x48}, [@country_functional={0xc, 0x24, 0x7, 0x3, 0x2, [0x1, 0x61b, 0x1]}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x27, 0xd1, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x5, 0x6, 0x3}}}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x201, 0x18, 0x3, 0x0, 0x8, 0x78}, 0x37, &(0x7f0000000440)={0x5, 0xf, 0xfffffedd, 0x4, [@ptm_cap={0x3}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x5, 0xf000, 0x5a, [0xc0cf, 0xc0f0, 0xf]}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x3, 0x2, 0x3f7}, @ssp_cap={0x10, 0x10, 0xa, 0x9, 0x1, 0xe6, 0x0, 0x7, [0xc000]}]}, 0x1, [{0xa1, &(0x7f0000000480)=@string={0xa1, 0x3, "6f8b262f02a64a340ff7894939496c235cc5afe61dda512d944a167d6c40b42fc21ed8a35d6a6af989b1a7edc42c5cf5c71038c8e2547733425bd118fe59c0ea9fed7c78493f720371e93a4e5a8243faa90b1ace93af6e0bfcc0e6fe375f2dc90c8e97e8c5f59f030118a2da8f7c7a7fc146394cfbdf58ec281203ea14dfdc8741b74505032528d4b5ba7abf630223f5346d7030ab6e877e9c805877df3427"}}]}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x3}, 0x0, 0x0, 0x0, 0x0}, 0x58) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) r3 = syz_usb_connect$uac1(0x6, 0xca, &(0x7f0000000640)={{0x12, 0x1, 0x10, 0x0, 0x0, 0x0, 0x10, 0x582, 0x16, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb8, 0x3, 0x1, 0x98, 0x50, 0xc7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x33}, [@selector_unit={0x5, 0x24, 0x5, 0x2, 0xa1}, @processing_unit={0xa, 0x24, 0x7, 0x9, 0x2, 0x3, '\vJw'}, @feature_unit={0x11, 0x24, 0x6, 0x5, 0x2, 0x5, [0x9, 0x1, 0x7, 0x4, 0xa], 0x1}, @selector_unit={0x9, 0x24, 0x5, 0x4, 0x2, "e9b98791"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x0, 0x5, 0x8, '\aq'}]}, {{0x9, 0x5, 0x1, 0x9, 0x1df, 0x2, 0x1, 0x0, {0x7, 0x25, 0x1, 0x18, 0x9, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x0, 0x3, 0x9, 0x3, "", 'A'}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x5, 0x4, 0xcb, 0x9, "e57b9aed4b386e"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x0, 0x4, 0x40, 0x9, "b1b86792"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x0, 0x5, 0xf0, {0x7, 0x25, 0x1, 0xc, 0x1, 0x5}}}}}}}}]}}, &(0x7f0000000980)={0xa, &(0x7f0000000740)={0xa, 0x6, 0x110, 0x6, 0x9e, 0xe, 0xff, 0x9}, 0xf, &(0x7f0000000780)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x3, 0x10, 0x6}]}, 0x2, [{0xeb, &(0x7f00000007c0)=@string={0xeb, 0x3, "44df15ed6692f2f1102e1d6b51bad0e93e2046bfcae0399272f7802c9c4d7bd28d829194c1f23aab397768f9f78b5a39883a826aa8f9bcd28e05ee091f0048c1e94c958586db6da2b048597972fa4d0c2cd7f98d1c4a8ea20ebaa7b2f182b0469c166b3b42698fe2a433cddc885b4257af12425429e5d96f7cef84b1092e058f396716e48fd4cbded137459cfa7faae4f47eb682b33561b5cfb21561e90c497d4cb74a8752c5e779c1a4c9c805ad580abc02611daaa1103f331133dd6f4a14a8efabf905d1ec916f3f58144d1931efb3fb1a9d6a054fab5c712a3093ee35e8da0bd453c9b7fc2c0a3e"}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0xc04}}]}) syz_usb_control_io$uac1(r3, &(0x7f0000000a80)={0x14, &(0x7f00000009c0)={0x40, 0x1, 0x4a, {0x4a, 0x22, "2d84e1032f78530920b92a13eaed09245ea136a3714146df4fa1e6b2bc2d6c70b327de674f99403e7922937c2512b3658b14141b0dbad5a2aecbe9b39879ab060c52817fb10f5c54"}}, &(0x7f0000000a40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4ff}}}, &(0x7f0000000d40)={0x44, &(0x7f0000000ac0)={0x20, 0x7, 0x85, "b7549428368a0a4c62936c62b4093cfd34432421b55ee798eb717db9ccfc43a8143d18d8620b860bcd06ffb4f75f4eaf5630bf89ba3bf9f8514e306b725dbb2dc66a4665499186bca8242d3118726cc5ba8aeef11ae384d48b427fae9f873a2b011528f0f91c65bec0777d9ca74c05e63abb5484fa238a98443d3f6739495f451c88e486e2"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x7e}, &(0x7f0000000c00)={0x20, 0x81, 0x1, '<'}, &(0x7f0000000c40)={0x20, 0x82, 0x3, '=EU'}, &(0x7f0000000c80)={0x20, 0x83, 0x2, "0ae8"}, &(0x7f0000000cc0)={0x20, 0x84, 0x1, 's'}, &(0x7f0000000d00)={0x20, 0x85, 0x3, "1adf05"}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000240)={0x2c, 0x1}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001e40)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004) io_setup(0xa, &(0x7f0000000600)=0x0) io_submit(r4, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}]) socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r5, 0x7, 0x7, 0x4}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 6.608067016s ago: executing program 4 (id=8938): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000001c0)={0x150, r1, 0x1, 0x70bd28, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x124, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x11c, 0x3, 0x0, 0x1, [{0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x84, 0x2, '\x00\x91P{5\x057\x97:\xf1\xa0\x9fj\n\"\xf8\xcf\\\xc6/\xed\xe9\xe3Z\x9c\x8bK(\v|\xc0!\xfe\x04\xa3)\xc2\xb4\xe0j\x9ej)\a\x83~\x0e\x13\xaaF\x00\x00\x00\x00\x00\x00\x00o\xfao\xfe\x18\xe2\xbf\x15Q\xe8W*\x85N\x80\t\xd2n\x87\xf1|%.\x94\xea^[\xf37\xab\x9a\xf0 \xd3\x94H\x05\x1a\n8\xe95w\a0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x4}, &(0x7f0000000300)=0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = fsopen(&(0x7f0000000800)='hfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000280)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) r6 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) getpid() fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x80) r8 = openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r8, r8, 0x0, 0x200) r9 = socket$kcm(0x10, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000000)=0xfe, 0x4) splice(r9, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) write$UHID_INPUT(r7, &(0x7f0000001380)={0x8, {"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", 0x1000}}, 0x1006) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 5.563992408s ago: executing program 5 (id=8941): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x8001, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x800, 0x7}, {0x0, 0x0, 0xe6}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@remote, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}}, 0xe4) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a00"], 0xb8}}, 0x20040014) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b80000001d00e99900000000fcdbdf25fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00400000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000a30a000000000000f8ffffffffffffff0400000000000000000000000000000000000000000000100000000000000000000000000000000008b6b700"/114], 0xb8}}, 0x0) 5.166321809s ago: executing program 4 (id=8942): bind$inet6(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000001000/0x14000)=nil, 0x14000, 0x1) r0 = socket$inet6(0xa, 0x3, 0xff) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x40c81, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r2, 0x80044dfd, &(0x7f00000000c0)) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[], 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000499000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @loopback, 0x3}, 0x1c, 0x0}, 0x440e0) ioctl$PPPIOCBRIDGECHAN(r4, 0x40047435, &(0x7f0000000500)=0x401) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = dup(0xffffffffffffffff) syz_ublk_setup_queues(r6, 0x0, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffa, 0x80, 0x0, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xffffffff, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc841, 0x0, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x3, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) setsockopt$SO_J1939_FILTER(r6, 0x6b, 0x1, &(0x7f0000000580), 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r7 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e33, 0x0, @empty, 0x9}, 0x1c) sendmmsg$inet(r7, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000dc0)="33ae1baf930b45", 0x7}], 0x1, 0x0, 0x0, 0x900}}], 0x1, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000dae11c105e0484028fa40102030109022400016b8bbd020904000002437767000905fc"], 0x0) 5.070647534s ago: executing program 5 (id=8943): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a8d000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e2eafb9fdd672bad09d2f8bc7699c74e891a0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x38, 0x2, 0x9, 0x5, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfffffffd}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xb7}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x1922, 0x4000, 0x8, 0x223}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xfe, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7ffe}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008005}, 0x44050) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r2, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r2, 0x0) ftruncate(r2, 0x51) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r4, 0x1, 0x10, &(0x7f0000000100)=0xffff, 0x4) shutdown(r3, 0x1) setsockopt$sock_int(r4, 0x1, 0x22, &(0x7f0000000040)=0x7, 0x4) recvmmsg(r4, &(0x7f0000000540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)=""/4096, 0x1000}, 0x8001}, {{&(0x7f0000000200)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/23, 0x17}, {&(0x7f0000000380)=""/102, 0x66}], 0x2, &(0x7f0000000440)=""/220, 0xdc}, 0x6}], 0x2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x58}}, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r6, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0xe98, 0x0, 0xfffffffd}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_gfeatures={0x33}}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x189083) 4.248109063s ago: executing program 3 (id=8944): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="3801000010000100feffffff00010000ac141412000000000000000000000000fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac1414bb000000000000000000000000000000000000000092010000000000000400000000000100ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000000900000000000000feffffffffffffff02000000fcffffff000000002abd7000043500000a000100200000000000000048000300"], 0x138}, 0x1, 0x0, 0x0, 0x8881}, 0x0) 4.087841124s ago: executing program 3 (id=8945): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x4f, "5d08c602ed8c1f5952d2590908ff86646e0a16354f837e2a6c3624989d1e2fbeba84376db8fd4c3b7b800db3e2f629db64ae34fb6b90e4a2a44104087491de9a5342bbb0270ac6b3d1b4e67ec715ed"}, &(0x7f0000000080)=0x57) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000000c0)={r1, 0x3fe5}, 0x8) r2 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, &(0x7f0000000140)={0x0, 0x5, 0x7}) (async) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000180)={r1, 0x60, "7eec9cdfbf51d9479db16df535f2cc889e13a3c0f97e44bf17714f4d8fe0d303ed3a16bf2e3151d3cad074ee9f007f49b0aaede8247f7855f742be68fb49b1d54d91656a0baff773585d84774611f6031e62e0f50718ef1de79222234d1e31db"}, &(0x7f0000000200)=0x68) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000240)) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x100, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f00000002c0)=0x2, 0x4) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000300)={'TPROXY\x00'}, &(0x7f0000000340)=0x1e) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000380)={r1, @in6={{0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}}, [0x5, 0x44e88c82, 0xa0, 0x8000000000000001, 0x3384, 0x4, 0xfffffffffffffff9, 0xd2f, 0xfffffffffffffffa, 0xffffffffffffffa6, 0x7, 0xfffffffffffff001, 0x4, 0x0, 0x8]}, &(0x7f0000000480)=0x100) (async) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000004c0), 0x400000, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000500)={r5, 0x2}, 0x8) ioctl$TCGETS2(r6, 0x802c542a, &(0x7f0000000540)) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0), r2) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r6, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, r7, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x841}, 0x20) (async) openat$vicodec1(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001900)={&(0x7f0000000700)="c0630316fe61f93d1e337d6621569952e16ad6d803ff6fa058b5e0485ef3216e729d59cf19c026c1321c85b6d6c54523283c16e396083dc9e7c8b2d49d8cec88f45263bc1aebdcbe6ef042f5282c7e4e477954ad6bfa5cc53124568bd1f6527cb4e45da7ebad06dc4785e6e9b5f46d008d0401c547d31af0a7ac32df4233fa68d20c45cdbcfad42aca7109e7fe2b40f6cfa9c2e3cc9e4a91171f8df5088a20c838f923c2522e0d25d4cbe5dbe1f9bf7b979ab59dfb577fb5fbe4b8b30bb089645431a3ede59a650323a65ed96ac8500e67ee3e3bd51cfc3374e39d8ea37f9fcbd10b5e1b", &(0x7f0000000800)=""/105, &(0x7f0000000880)="742bba2cc139c7b9ccb81c60c08a1be03ab8a115a885dc30e399e0fc865030937a8f027f1e36c83e59e2d9cd44abc1a62edba1b7a339e6e148b793a0f0298c04153da3dcfb1bd35f2378704ddebfef61902f2317a98f1b862d061078e15ec43b9e7bcecc33b75cb2edefa031e7e6afaac5018a826f", &(0x7f0000000900)="7bd24059f2a73819acfc63f10be80f811091ae538e5008f453aba974af9f013c4b8784e64eac7fe2ac9f9b0c6dc994216e335d3fee445e0cb73e3d710e0a1681a92c5bef2b2ee39a7cf26aeaebc26a2ebdc6027ba4de2540b9c55b053aee8912cd134b4fa52dc8f6f5a5ee81b77c9268d25f2d7cf4eca0b58059fa0a294c70e426a0f2512ca99139c17647239a54d08cfda711c48bd3d0e4ba8e2be3ea1451b4462e02df8f1ca4ba482a4887261b1158c63070034d29c1cfe783b0de9539aa329f863f0cc2de98a55cc555ed105aa0bfd2df25b2e490502659d6f32cad418f2ef70cf2e972bcdc4422b1d09004bc8b234405404277998958419e2264b0f31b5fc9ec50996e051a2c11e65824d551e451337ed2aff94b5d19620bef84607d8669512952d515c06c8dab2a70ee98d8dc1820e28fc2af357531b7492c8794621bf7de881e39fd5c35a001e06bbbbf55846a2f1527b7b45d5239254de8bd67a0a6c7d5a8740858ec640b2a6ebac906c7f28bd714e6663f4cdafad538d8e9ea8988d7368f5a01a6be5eaa9d7f843a00f9f532c8f33e3ce244c91f2fc90067ecd24df34e50d51ee9609fb5bf9b87ea5f81ae0751418581958a015c6d54dbd1eb7a4cb445abcbd50670d020a9514c01edfc27e86d74a23c3f37c13634ff45f5b9e265fedb80e08e1bda05c5521303b46575fa5be7146cb3748d9c17fdc3c77915e0ed6fbd2502c693a82d04e7431e409b78327442a3b9954430ac4807b29efc5dbb322d09c61ec2d9854f725705e8eba033dca9e1c17730950522fdbcce411a7eb45e091f305a7020737113ad8515603ff11509e77fb90620ad07fba28c62db353ab0ff3d6f6e1a5fed77ff35893ff3a57621b65984fb025860e0b8b6d3e2696907033e125cfb3512be2f869a714446b27eabf60b93ce484605ca15e8daf09345167a9e5e23e36a6ac6df451199b4ec2956010bba51cb79fd0ea0587b1ba1c1d8e9947c1b9d902bae5d80f6015cd5924e7ee31f147228bfc2a7265179a45b764d5de14e8860c5cfe5d17182ac7b23df4a896f63a5ec446b62ebbebf537ef7edc9b729418ae9f3fbd01848e541454bed942638b49f2d284ff0547714879822b47a46abd1fb81af7c73ddd5080e5da0af56fd7b050d2e79035229aca9494b31952d2f62d3b5d4abe9ec714a44ae8d5e45d709d7a30f5f73d10aaaccb2b2d0eac6535a51dff53718280c3ada18e2fbb0382c1a8ce47e0f1f6865bc07d90a250d9f712bdf73dfab5911c3c4ee8be227c17a4145202320a21eaa6b87f0e7cfc6f8d9a9ce768a7f29cdcca57ca6ccf65496afe8ca81aab386db97c8bd000492f9561b8dcf1ed7b32e592465621acac635e4a789cb746b910103d0788857562eda45c01cd6561aae6e74ce7d2051c4d0fedf5c6f428fa942c79ca814aef1a04cade20fb1977dbeb37b0b2ecc02a17e5bda68566f77be7b83106a8986d175b6391c173668e1db7e5f6a032ec0c1742165d49a0fb0a12e19469ebdefb33513090853535992bbfc5686edbc94dd58effebc4cff970a278b49e721881f778988470875067426c57994c81125067a37aeb4f6d010863e85cf9382aecd5c58b883e1ca80f70ef35f4895ab9dd2f8eeb42f5fdef210aed24ed4c13457dbee16e6c2ab5a2341402ea04f3f547a133f1edc9b9e6ce52637cbbfd75d09382fed79ac774858582fcce999cabf1a21a03b853fbd358ed2edfc92af86775baf31b185461ad19ea99e4daf8c0987c78c36168ea70ff2c77321f83fc8cd61ad7cb7bbd448363a9fc1912573eae0eecd2532076ff3f40339009a0c65b2a3370f7ff4083d6c5a1c99fc9c413f03f4d918133b19e607c877120faf65b44b00eff1882ac5d5e712eec5c14be76c92f0b7790c6da3c125b7c0842b329de3011fa142ca591f809c18427cb33ac94f33691532db1d5838c06eca8c53629b9a5f7918c2f060165af24b364d18858acde957ca15322a40392dc1913f6b304e0b6f6455c324a025229a5d78aa10873ddd34228a95df40c860602a7038b969194906435e9ec74c1de9eb8e4d6e57ab7a921c9fcc9521603c2854c4594408915ce7767e48cf398a05f88c18c75a9b715e2771226623b5c0f57673d2fdf86024df93cfb0292ae637a19d7f8fdeb9c04dcac6b5524c8a7a495c387a142c8e35707aeff5949474a9bcfac56ff887fc901c27db8389566668a45a6b573721517ea3250cb46f85db1be4b3a13e5df75258d0cb3c0a65af5e6657a7e627abe3eca41dba29fc3c327e16b58252b2c5036d673ae43560bfd31c4ef92521221a731de50aa9400dafec259d64a32aae76a8e7a38acb7d75ddd983c51f21d7cf13b10ae728352cfb039d68d222de754d37cae592c5c20908c6ea4280b97e7d11991ac5aaa89265697e09ac1dffb851e8a733e63f2d8fdec29b0b70c4cdc655979f841e7fdeea0061b0227b627eb9f4ac358fda3c1784bb2f0b29e5a13278ba27ecf7b96b4a43adfc3357bdffa4d6db391f2c203aa0537fe20e05a43d25567e391efbc4e0f7188a9d135c85ba68c208b0c36c85be015a14b9b4aeb615e4423982a58659ea8caed662fbe506981a29a18529d5cbf0cc52b2163c36121231735bb031256a73500f93096b132c15222bef1c614aa47dc991a50aea0957b11e247546b6fe0408739f97d898cf53115636927c3fb46fb92749ad35e7c70060b64baaf22689b896093f167d65cf61ad8bf508eabdd97356ce94c81cb37caad676e3032d0dbcf5182fa8c429a909b59c9f3a1a955416ceff73f7c6ce7eb1e5c9763878c0b2338749dbc8ee57db5dfcd1da28b8a0cded9da30aabd4582bc554a5a3b7e7b63e75fa0a8a22f41f84cf4e86c65512189f960841a82778cf86c836fec7043706a957e58a53ea59c340acccf15a0e410c878d53705a8a34296aa97ee6f69016cd0a0775161ae8d0920183e8401adccf52490022ca49b320f9c81e9ac78d919d73832136efd05f22633f661d49b4cff2ea8feae5b73d16c5e656f68e75715aa60348f08015f8b9863a9e5fb314abe3946dcdb28e202f4f23212efe37f76cc18ec99e913213df34fe1cbbc3e3e414588a08ea78e1886245497c2dc335b855711cb3cea97e9011f891044f31925f58c896c8317b2330fc640984fcc657aec2c15c350871fcd8a9b40575bba44e4a6da0e6ef6999d71114583ecc305f231cf2b2f7cc52d8d4c5d937a7d7f59498768419051e802308bfcc942aba0ac75007044466ac326540b0d30e91f7d933e636b619ecde3a8f97131931adf4ceb0709ab8afa6e191a60c325a5bebe44be50bfc9feb3d4c5ce5448c9ad518dcbce7251ab8d503bb4a036b6c0ef6b05350861e3e9e69cabca0a35cd64350423068e4a342a0320911e654caddcfc7b4d943dbb1f7387a0b6970cdae816f0c723ae854759756e56639f3269d1bce06b11e06359652200e47b79f6981ff66914a3a53cdd615577009bb2d55eb3298f64fb59059d858e4448e7efe73274822b6027c0ea6e2b084cd0f4cc7358396d0943ca15350d8ade5543d9ce9782a232157e9ed3cbb05059517930c782130e0502bd6a39c920dae11fa9db4a5c52ea35aa2535a53a06b0e5a874612da763b376891bdd4c3bf64f0421fd9bac20065b4a79add0fa8befc5c6f2fd99f12c1d972db08898952cb814bc2705073ce2e4917de2fb317aa9f8bafb487a27bc257efceaf8ff59dab0a6deb70cbeda3515244149487c5371c8784e542d5707414862dafc09c1383dd35d5fe51e13f909e3ac4256704f11e82c1c2a8884f471671e6e3c86a409f74bed1948f742638b03916f1e7ceee007a3da1fc24e3be82cad9d559525e88f48aa070178ae54a5a99a5130d29485ddda5ac1fce4ab38a48d66f7e882001a8f0a1dcc1ba8e94183bdcff5655b3e6f3b56b9f8a47456f741ddb2d1b8b09572073a4b1209f195e20207e855aaa93269aa80366d24b62202eae6c5e24563f9beba7a28ce6ffc3d6f150778efea6389c7115ba9b1a6e26b19f54e22bbfd80e68ad0f98b4f7086afd551e4238e9d3edcb19d4b9e875e774feba3da34ca2f3234e8606a9ab42160fc8b9a5239eca16bc63da49ff64fb12722fd677200892021822257e9f6a02bd3aff2fb3aa03ab9a47e16e91e2334ed08daef7c2d036aa6d1e8053e93c038ebe6194c59ba3fbb5727e9e821c5b5ce3ec4d6577e182b3a582ffdd7f4250005bdf9a8eae7a226e36ac9ca2a0b95d6e44b3b7bdee5b41ed70f0ddf1fd3620815d1606c4bef4b8a41d00f72d74e3d9f551591173fa522f039d7124ba9712bca136dd6853b72cbd45af1af19ba25ac7728735f78a67db4ed3708d42897550385c3f2a2fa7aeadacdf866c78f69d68b6496f978491e53e17ad129477cdd913680a74c8547aef3b3d5a56e2fa65529a4c53b9fc9e829162976469ca2418a1bd704cf524f96e9b6fe3687b454dc6a1e15a49165071960fcc8099da027f4d21af0dbfc9eb549109913a216e46aab2ff35265d675f2c6ad8cec56cdc1e754f6af7e3adb59a92feff6a90fe80c14b4d346a93dc8f3d72e936405efaeb84220d9320c866c9cf5c18531b33d4f8b91786a3b65ed884412270fe228fa99ce66c39b623969344420498fc7ff97bb19558e1e21bb9e144069e550bd5659e87e56a38cce9a2aa8ae1cd37abab8c45f4844012ba124f5d9d5ac026d58206939e017979902cfb3889121a41e4018161e099d59f671bfc572b8addbaef851c2a67a66d21e63f447704fd2b9dccc23e6d03c57b6a8344b3f352b938c998cb6859e55f3a1bd9f64b6cf3d35bbea20fe8f20efcf0bfc0a42442975844281d07cd07bfbae1396d446d4049da2762e6875a7e40129ef163db4a272eef9df3e6ebbdf9fa7caf58c197e91e66d15d82881b07af40cae98f2324df59952a984d3ca2b733f2a410d254dd15d6f29e062c8e5ade2811a8e7fc579384c4783cff33907324c6d711dc3d0542216195bf405124a9263b43e3c7dbca9857e563d1f1fb5bcdb5a4e8d016abcb1e1f47a0a69a63f1afd01b110584ed5428458596d74645192e5f31c8f462bf540b12ab3d38e96fa1f8f03c3f3ba31a32ed9a40eb41d0099c26eef152bd8bd2d6879d5a6e324e9caea829392a5fd3e104bf3495d1157126effcc6dbde2780127d3fe5e9d0ba0deff556101774d7fadc76a168d3a2ea5dc29af0e2587f5086650ff801636dc7fff3d5c9e7547338b17fa1238eddd8cd6b0da1fe346c13b7df7704cbe6bfef836a8c2e244614dcf4e201f20eeba21b0553eee5207f707965e28b4c9470d57d8e9834bc1f0b32793f6ab1b3ae272c27643415f80ff3b82a90f608ac64534eb0cdce09c4ca94920d81c4dc722ba089c1c229191fea160359b83332d2ae460d7ff6d0f066eccb3666341e4a155ffaae85128fd1a350aabc9f3413170d1d8e0f55f3f099604d0258ebe07b0576b3e397ec5fa9e79130a18d22ac74593ec981de83f0d9cc8896a2a086aa9f6dee9069e1600c875a711347b11f95979fcaa66abf769e4d1dd17c41bb5f1f3a3b25cc9d834491e1e372fbe9af19ee508b0871d9f2e5bc2c42c41b52c3f255f0ed800c502dee4a81ef79f1f44efae15997bee59b92db036a38cfdf6c37328e2263bcb7be3878284c0257977e2c741710bcf73e7adf7676c3f6fecd138d6d6a24a23070d7072dc2b6b63c8a27caed5a79d8f621ef70064ec71b9c538d34cbc98159e4f78b823d4dc0b5f582c48e0fbcd985745c4a065a1e45b234279956cd43485756b107db37", 0xfffffe01, r6, 0x4}, 0x38) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000001940), r6) setsockopt$packet_buf(r6, 0x107, 0x2, &(0x7f0000001980)="6ce471ea873ff296afe4b074eb359a3e3a8b719c566a8c0ed80987fb6f790a422f59b6a383ecc8102c0197bde4674b31ae0aafc2de8f463878dabc2d0083db623828eabd098378a3b2c533b5c6c968b20ca4807d28c7741d67be5f3ce62f97a22b1faecec35d57f37b6da74d2a5a3596ba4a5fb3a19fa2a2a08ff38618425868aff2036ff3865d60111ccad3395ee6e12692def3cf349b32d444cf2cb68c7f23de9b039eda1bfc85fec73e725c6819d1c0a1ecab408624", 0xb7) ioctl$DRM_IOCTL_MODE_GETENCODER(r2, 0xc01464a6, &(0x7f0000001a40)={0x0, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000001ac0)={&(0x7f0000001a80)=[0x0, 0x0], 0x2, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000001b80)={&(0x7f0000001b40)=[0x0], 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETENCODER(r6, 0xc01464a6, &(0x7f0000001c00)={0x0, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000001ec0)={&(0x7f0000001c40)=[0x0], &(0x7f0000001c80)=[{}, {}, {}, {}, {}, {}], &(0x7f0000001e40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001e80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x9, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001f80)={&(0x7f0000001f40)=[r8, r9, r10, r11, r12, 0x0], 0x6, 0x800}) (async) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r0, 0xc0205866, &(0x7f0000002580)={&(0x7f0000001fc0)=0x1, 0x0, &(0x7f0000002000)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000002540)}) 3.848671353s ago: executing program 3 (id=8946): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000a40)=ANY=[@ANYBLOB], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000e00)=ANY=[@ANYBLOB="ec000000210001000040000000000000fc0200000000000000000000000000000000000000000300000000000000000100000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c0011007f000001000000000000000000000000fc000000000000000000000000000001fc020000000000000000000000000000fe8000000001000000000000000000aa33000000fffffffb020002fd00000000000000000000ffff7f000001fc020000000000000000000000000000fc020000000000000000000000000001fc0200000000000000000000000000003c"], 0xec}, 0x1, 0x0, 0x0, 0x40}, 0x0) 3.779066871s ago: executing program 1 (id=8947): add_key(&(0x7f0000000300)='rxrpc\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000100)="000000000000000463656c6c00000001000000440000000200000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000004010203040000000405060708", 0x58, 0xffffffffffffffff) 3.724447957s ago: executing program 3 (id=8948): r0 = fsopen(0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000c40)={0x2000000a}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/280], 0x160}, 0x1, 0x0, 0x0, 0x4000}, 0x4004004) close_range(r4, r3, 0x2) fsopen(&(0x7f0000000300)='afs\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000003c80)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x3f) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r8, &(0x7f0000005ec0)=[{{&(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000020c0), 0x0, &(0x7f0000002180)=[@rights={{0x24, 0x1, 0x1, [r7, r3, r0, r1, r3]}}], 0x28, 0x4008804}}, {{&(0x7f00000021c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000005800)=[{&(0x7f0000002240)="ae3517419092a2b32ac9d8adac8bab8e39bda279c32dfa6dede8723541cba6ce1f21c0aca9", 0x25}, {&(0x7f0000002280)="88c2fce6a155135ce961ec7d428978a203a44eb7bfa654a772b82f4a3e2aae337cb8334fdb47e67c27cea5615d2b39cd483837b9eab239e7c2bcca076cc67fbe4b163bae99b3c10a5711cd02052170", 0x4f}, {&(0x7f0000002300)="6226beac73d4081b0531ab204dafa3e896aa480670bc716f86526a6cdbd6684ccacdb7a390ce97a9d30e538923b39f7c4b37e681e8b374b81642b48ce9e0db228ee919042008d2dd8d6401691c52ed0efb059ac57c9d50bcba3698", 0x5b}, {&(0x7f0000002380)="8f03f2d3ebd29db6a221465713526043a2995afdf18e8f", 0x17}, {&(0x7f00000023c0)="32b887221f9e6fcf13ab39bd0f9f51b6b25f282c4216087a5d6e9acb73d6af91c264537fe73ebfff9b4638a1aed8db3bcd4c17c3493fcf1795de26c35fa58846e695fedb2bba5c7dbe039e0a77c47032eda35828fda8c1507348e0f18d1a8a29bf88a11da14d25ae40850037f8d8125621d0cda1f42298a61af01ffbd7225a3f71320dab738b2032f6b05b70b38a0871364c227b319147d3c256d0f6e20117765c3e070b36892f7f5ec56b09fb66bf6b274efec4d24fe52a8cf8779aefe2df63f5b6d0adc5a8689fe3820cf7483fe2b6c783800bb45338c691", 0xd9}, {&(0x7f00000047c0)="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", 0x1000}, {&(0x7f00000057c0)="9206", 0x2}], 0x7, &(0x7f0000005b00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x68, 0x4004080}}, {{0x0, 0x0, &(0x7f0000005cc0)=[{&(0x7f0000005b80)}, {&(0x7f0000005bc0)="d3e19498933d3501351ec1e4e7838f87c557021452fda24fd63dc504fb8c67958ef23a47283a58862b203db21495b34b4b1f9aaa46402165265a64f95b0876b32c8e470d2f437e722d33f4fe7454139d427f9d38a84de1fa7e2f36c486a0ca996b23da8c42bddb1822d9bb9a99dcd1b557c8ccf7f4a21bcd13ff00cb94f801a8327e973c54f4053c1bc4630dffc5e040e7dbfa9117d95e5d160bbb", 0x9b}, {&(0x7f0000005c80)="066e673922b289399d57b5fd0deff2bc9b22317b253fee83b02ad3bcfd0d720033e2d5869e70472420316749aae0441715ee4e85d801d03a", 0x38}], 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="01004274003aee72bc0000001900000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x88, 0x40}}], 0x3, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x22882, 0x0) writev(r9, &(0x7f0000000440)=[{0x0}, {&(0x7f0000000240)}], 0x2) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000003, 0xfa11, 0x9}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x10, 0xffffffffffffffff, 0x0) r10 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd) r11 = add_key$user(&(0x7f00000003c0), &(0x7f00000000c0), &(0x7f0000000480)="eaa8729b31b3a8d184baeab8cae38bfcd9a8685a9593ffffffffffff76f15eae389cc95d422f3206360cdeda0f2baed2d46fc4a52d310399e9b0b78b800c0b7a3507785b0c56a0171ca783fa5895b2a2c365814d53dec405dd09206e38e996a1e25025df7b2c1261a2244a94c26895be9216a1d7e56a287376194ea78c08ec478b782fe24ac4189fd9e8aa6cce0da9312fbf462f7aef374274f667e68482be", 0xfffffffffffffef6, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000200)={r11, r10, r10}, &(0x7f00000005c0)=""/85, 0x55, &(0x7f0000000000)={&(0x7f0000000280)={'sha512-ce\x00'}}) syz_open_procfs(0x0, &(0x7f00000002c0)='net/vlan/vlan0\x00') read$FUSE(r1, &(0x7f0000005f80)={0x2020}, 0xff91) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) 3.574004325s ago: executing program 1 (id=8949): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x388, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x8, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) r1 = socket$inet6(0xa, 0x3, 0xff) sendto$inet6(r1, &(0x7f0000000200)="600000000008004000000000000000000000000000000001000000000000000000000080fe0000013b00010400000000", 0x30, 0x20000000, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xf}}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x1b7b, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, 0x0) 3.547423808s ago: executing program 5 (id=8950): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x19}}, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000000)=0xffffff7e, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f0000000500)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000340)={0x0, 0x80, 0x1, 0x9, 0x8, 0x8d4}, &(0x7f00000003c0)=0x14) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg(r0, &(0x7f0000000780)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000800)=""/254, 0xfe}, {&(0x7f0000000400)=""/243, 0xf3}, {&(0x7f00000007c0)=""/5, 0x5}, {&(0x7f0000000640)=""/251, 0xfb}], 0x4, &(0x7f0000000540)=""/186, 0xba}, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x10) sendfile(r2, r0, &(0x7f0000000600)=0x10, 0xc) syz_clone3(&(0x7f0000000900)={0x206110000, &(0x7f0000000380), 0x0, 0x0, {0x16}, 0x0, 0xffffffffffffffd6, 0x0, 0x0}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb27}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote}}}], 0x20}, 0x48000) syz_usb_connect(0x4, 0x24, &(0x7f0000000080)=ANY=[@ANYRESDEC=0x0, @ANYRES8=r1], 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000d40), 0x4bb, 0x800) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r3, 0x80dc5521, &(0x7f0000003440)=""/4096) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/zoneinfo\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) close(r4) syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700) r6 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x4004010}, 0x8000) 3.375817437s ago: executing program 1 (id=8952): add_key(&(0x7f0000000300)='rxrpc\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000100)="000000000000000463656c6c000000010000004400000002fe000000000000000000000000000000007fffffffffffffff000000000000000000000000000000000000000000000000000004010203040000000405060708", 0x58, 0xffffffffffffffff) 3.222296661s ago: executing program 1 (id=8953): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0xe22, 0x800, @empty}, 0x0, {[0x0, 0x8001, 0x4d0, 0x0, 0x0, 0x2]}}, 0x5c) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000100040000000600180000100000060019"], 0x4c}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4100, 0x31) getsockopt$inet6_udp_int(r2, 0x11, 0xc7f89e44cf3c8e88, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 2.426341448s ago: executing program 1 (id=8954): socket$inet6(0xa, 0xc64f2b20929bdc0f, 0x5) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000012, 0x3000005, 0x401d032, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) r0 = socket$inet(0x2, 0x4000000000000001, 0x1) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_emit_ethernet(0x87a2f, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x100, 0x103100) ioctl$EVIOCGLED(r1, 0x80404519, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x20000800) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="84010000100013070000000000000000ff"], 0x184}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c00010000020101"], 0x60}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x450, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0xffffffff, 0x0, 0xff000000], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x21, 0x3, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket(0x840000000002, 0x3, 0x100) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r4, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), &(0x7f00000006c0), 0x0, 0xcf, &(0x7f0000000700)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000740), &(0x7f0000000580), 0x8, 0x74, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) connect$inet(r6, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r6, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_int(r6, 0x0, 0x2, &(0x7f0000000040)=0x1, 0x4) close(r5) socket$key(0xf, 0x3, 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) 2.411335493s ago: executing program 3 (id=8955): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, &(0x7f0000000000)={0x2c, 0x1, 0x0, 0x3b, r1}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000140)={&(0x7f0000000040)=""/223, 0x111a000, 0x800, 0x8ad}, 0x20) r2 = socket$netlink(0x10, 0x3, 0x12) getsockname$netlink(r2, &(0x7f0000000180), &(0x7f00000001c0)=0xc) r3 = semget(0x0, 0x1, 0x4) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000200)=[0x3, 0x10]) r4 = semget$private(0x0, 0x4, 0x238) semctl$SEM_INFO(r4, 0x2, 0x13, &(0x7f0000000240)=""/64) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) fstat(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000003c0)={0x6, 0x200, {0x0}, {0xee01}, 0x8, 0x1}) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000000400)={{0x0, r5, r6, r8, 0x0, 0x14, 0x9}, 0x5, 0x9000000000, 0x0, 0x0, 0x0, 0x0, 0x5}) semctl$GETALL(r3, 0x0, 0xd, &(0x7f0000000480)=""/128) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000002}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)=@delqdisc={0x180, 0x25, 0x217, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x10, 0x1}, {0x9, 0xfff3}, {0x2, 0xffe0}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xd5b7886e}, @TCA_RATE={0x6, 0x5, {0x5e, 0x7}}, @TCA_RATE={0x6, 0x5, {0x62, 0x5}}, @TCA_STAB={0x13c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xc, 0xfe, 0x7, 0x4, 0x1, 0x0, 0x5, 0x7}}, {0x12, 0x2, [0x800, 0x5, 0x1, 0x0, 0xd7, 0x53d, 0x0]}}, {{0x1c, 0x1, {0x2, 0xc, 0x0, 0x7fffffff, 0x2, 0x3ff, 0xffffffff, 0x8}}, {0x14, 0x2, [0xd, 0x6, 0x8000, 0x2, 0x5, 0x8, 0x3, 0x5e]}}, {{0x1c, 0x1, {0x7, 0xfe, 0x40, 0x5, 0x2, 0x0, 0xa3, 0x8}}, {0x14, 0x2, [0x6f1, 0x3, 0x6, 0xb9, 0x10, 0x287f, 0x800, 0x1]}}, {{0x1c, 0x1, {0x8a, 0x1, 0x2da, 0x4e, 0x2, 0x4, 0x8000, 0x6}}, {0x10, 0x2, [0x2, 0xb, 0x7, 0x8, 0x8, 0x9]}}, {{0x1c, 0x1, {0xb6, 0x80, 0xf, 0x7, 0x2, 0x800, 0xc19, 0x1}}, {0x6, 0x2, [0x8f]}}, {{0x1c, 0x1, {0x9, 0x40, 0x5, 0x2, 0x0, 0x904, 0x92db, 0x7}}, {0x12, 0x2, [0x7fff, 0x5, 0x8, 0x6b, 0x5, 0x10, 0x401]}}, {{0x1c, 0x1, {0x1, 0x0, 0x4, 0xfffffff3, 0x2, 0x0, 0x401, 0x3}}, {0xa, 0x2, [0x5, 0x8, 0x1]}}]}, @TCA_RATE={0x6, 0x5, {0x8, 0x80}}]}, 0x180}, 0x1, 0x0, 0x0, 0x10008810}, 0x80) fstat(r0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f0000000740)=@sg0, r10, &(0x7f0000000800)) r11 = fcntl$dupfd(r9, 0x406, r9) ioctl$HIDIOCGREPORTINFO(r11, 0xc00c4809, &(0x7f0000000880)={0x3, 0x1, 0x6}) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r2) getsockname$l2tp6(r11, &(0x7f0000000900)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000940)=0x20) semctl$GETALL(r4, 0x0, 0xd, &(0x7f0000000980)=""/153) semctl$GETVAL(r3, 0x4, 0xc, &(0x7f0000000a40)=""/126) socket$nl_route(0x10, 0x3, 0x0) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$AUDIT_SET(r11, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0xd8008}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x3c, 0x3e9, 0x20, 0x70bd27, 0x25dfdbfe, {0x41, 0x0, 0x1, r7, 0xbd, 0x10, 0xffffffff, 0x7fff, 0x0, 0x4, 0x987}, ["", "", "", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x20008000) read(r12, &(0x7f0000000bc0)=""/98, 0x62) ioctl$HIDIOCGREPORTINFO(r11, 0xc00c4809, &(0x7f0000000c40)={0x3, 0xffffffff, 0x1}) 2.201057004s ago: executing program 5 (id=8956): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) r0 = socket(0x400000000010, 0x2, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r3, 0x50b, 0x70bd27, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}, 0x1, 0x0, 0x0, 0x88d4}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x1007e, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x7fffffff, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x6, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r6, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@getlink={0x28, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x3ff}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x8, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0xc}}]}}]}, 0x48}}, 0x4010) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="000229bd7000fcdbdf250e0000002800018007000600666f0000060001000a00000008000900320000000c000700170000002e00000028000180060001000600000014000300ac141412000000000000000000000000080009005d0000000c007c7ae255394cda20ed5c"], 0x70}, 0x1, 0x0, 0x0, 0x44040}, 0x40844) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 2.132557904s ago: executing program 3 (id=8957): r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)={0x0, 0x14, 0x572, 0x9, 0x7, "ff000d00009a468e0cd912098d00"}) (async) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCCBRK(r2, 0x541e) (async) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000c80), 0x7, 0xc82) ioctl$VIDIOC_ENUMSTD(r3, 0xc0485619, &(0x7f0000000000)={0x3, 0x8, "1aabb23ef6291d62ae11ede62550f9d181b324398518496f", {0xffffffff, 0x80000000}, 0x3}) (async) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x44, &(0x7f0000000500)=ANY=[]) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async) syz_usb_ep_read(r0, 0x1, 0xfffffffffffffd9b, 0x0) (async) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) 1.717508098s ago: executing program 4 (id=8958): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000a40)=ANY=[@ANYBLOB], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000e00)=ANY=[@ANYBLOB="ec000000210001000040000000000000fc0200000000000000000000000000000000000000500300000000000000000100000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c0011007f000001000000000000000000000000fc000000000000000000000000000001fc020000000000000000000000000000fe8000000001000000000000000000aa33000000fffffffb020002fd00000000000000000000ffff7f000001fc020000000000000000000000000000fc020000000000000000000000000001fc0200000000000000000000000000003c"], 0xec}, 0x1, 0x0, 0x0, 0x40}, 0x0) 1.636014967s ago: executing program 4 (id=8959): add_key(&(0x7f0000000300)='rxrpc\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000100)="000000000000000463656c6c00000001000000440000000200000000000000000000000000000000000000000007000000000000000000000000000000000000000000000000000000000004010203040000000405060708", 0x58, 0xffffffffffffffff) 1.319588988s ago: executing program 4 (id=8960): socket(0x18, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000400)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x20fb87, 0x1000, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7f7ffe, 0x200, 0x1006, 0x15a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8000, 0x1, 0x147}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff7, 0x826, 0x0, 0x0}}, 0x0) r9 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r9, 0xc0045516, &(0x7f0000000000)=0xffb) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r9, 0xc4c85513, &(0x7f0000001180)={{0x3, 0x2, 0x80000000, 0x100, 'syz1\x00', 0xffffffff}, 0x0, [0x6ba74c59, 0x85, 0xf, 0xfff, 0x1000000009, 0x6, 0x7, 0xdb, 0x0, 0xf0, 0x3, 0x5, 0x8001, 0xfffffffffffffffb, 0x6, 0x2938, 0x100, 0xfffffffffffffff8, 0xfffffffffffffff9, 0xfffffffffffffffb, 0x5, 0x9025, 0x5, 0x5, 0x7, 0x100000001, 0x40, 0x9, 0x9, 0x100000005, 0x100, 0x9, 0xb, 0x1a7427cb, 0x7, 0x8, 0x7, 0x6, 0x5, 0xfffd, 0xffffffff, 0xffffffffffffff3d, 0x800, 0x5, 0xe4e, 0x9, 0x6, 0xa8, 0x659, 0xc2, 0xfff, 0x2, 0xffff, 0xffffffffffffff53, 0x0, 0x101, 0x7f, 0x100000000004, 0x7, 0x10, 0x2, 0x40d1c, 0x0, 0x9, 0x8001, 0x0, 0x1, 0x6, 0x4, 0x4, 0x4, 0x1, 0x9, 0xe3, 0xfa0, 0x9, 0xffffffffffffbffd, 0x401, 0x8, 0x7fffffffffffffff, 0x101, 0xffffffffffffff2f, 0xe, 0x4, 0x4040000, 0xffffffff, 0x1, 0x7, 0x5, 0x1ff, 0xa46, 0xfff7fffffffffb27, 0x100, 0x5, 0x7, 0x5, 0x3, 0xfffffdfffffffff9, 0x6, 0x8, 0x3, 0x4, 0x9, 0x800027ee, 0x0, 0x0, 0x0, 0x4, 0x101, 0x8, 0x6, 0x8000000000000001, 0x4, 0x3, 0x1, 0xa03, 0x8001, 0x3, 0x9, 0x87, 0x80, 0x3, 0x2, 0x2c, 0xa, 0x6, 0x1, 0x8]}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r9, 0xc4c85513, &(0x7f0000000c80)={{0x3, 0x1, 0x1, 0x3557, 'syz1\x00', 0x200005}, 0x1, [0x2, 0x84, 0x1c00000000000002, 0x7fffffffffffffff, 0x80000003, 0x3896, 0x5, 0x3, 0x8, 0xffffffff, 0xfffffffffffffff7, 0x9, 0x7, 0x80, 0x2fc2f8ae, 0x1, 0x101, 0xa70, 0x7fffffffffffffff, 0xa1, 0xfffffffffffffff8, 0x40, 0x2, 0x7, 0x10, 0x9, 0x8, 0x2, 0x6, 0x6, 0x6, 0x5, 0x2, 0x101, 0xffff, 0x144be44d, 0xc3b, 0x400000000003, 0x800000, 0x12, 0x2, 0x8, 0xbb9, 0x2, 0x8, 0x9, 0xb1e, 0x8, 0xf, 0x651, 0x8, 0x8000, 0xc, 0xffffffffffffffff, 0x4, 0x0, 0x400, 0x1, 0x5, 0x80000000, 0x5, 0x81, 0x5, 0x1, 0x6, 0xb, 0x4, 0x5af0512f, 0x8001, 0x5, 0xfffd, 0x8, 0x1, 0x100000001, 0x81, 0x3, 0x1, 0x800, 0xf5, 0x7, 0x1, 0x401, 0xf, 0x4, 0x2c, 0x5, 0x8, 0x2, 0x3, 0x5, 0x80000000, 0xed, 0x9, 0x7, 0x3, 0x7, 0x500000000000000, 0x100, 0xfffffffffffffffb, 0x6, 0xf, 0xf95, 0x4, 0x4, 0x8, 0x61, 0x1, 0xe, 0x8, 0x1, 0x2, 0x0, 0x400000000, 0x13ff, 0xa, 0xd3, 0x80, 0x6, 0x1000, 0x401, 0xe51b, 0x9, 0x7, 0x3, 0x9, 0x5, 0x9, 0x1ff]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r10, 0x3b82, &(0x7f0000000140)={0x18, r11, 0x2, 0x0, &(0x7f0000000100)=[{0xe26, 0x7fffffffffffffff}, {0x9, 0xb}]}) close(0x3) r12 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x0) unshare(0x22020400) r13 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0xfac7}) syz_io_uring_setup(0x48ce, &(0x7f0000000400)={0x0, 0xd353, 0x3221, 0x0, 0x19a, 0x0, r13}, &(0x7f0000000140), &(0x7f0000000900), &(0x7f0000000000)) ioctl$USBDEVFS_REAPURBNDELAY(r12, 0x4004550d, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) 1.26444405s ago: executing program 5 (id=8961): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000340)="04", 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/35, 0x23}, 0x7}], 0x40000cb, 0x12141, 0x0) 1.02915537s ago: executing program 5 (id=8962): r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r3, 0x110, 0x7, 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000280)={0xffffffffffffff66, 0x5, 0x8, 0x0, 0x10000, 0x9, 0xffffff7fffffffff, 0xfffffdfffffffffd, 0xffffffc0, 0xfffffffc}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000680)={0x22dc, 0x840a, 0x56, 0x4f6, 0x0}, &(0x7f0000000880)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000008c0)={r5, 0x2}, &(0x7f0000000900)=0x8) sendmsg$sock(r4, &(0x7f0000000840)={&(0x7f0000000500)=@qipcrtr, 0x80, &(0x7f0000000780)=[{&(0x7f0000000580)="64973ffae24a72a1a4b99157590182c95c7cfcce833b16f7057c38c00b2010b16a11fba4d4810e54f96bc0ecd2dcd4a2bd1d8cce40d21067277bacce8d80e7576b1afc246d8c631f093d67911514de546ace35ac76c5c833a6b630c92d00fdd487ff4f23ee", 0x65}, {&(0x7f00000006c0)="fe2ff97f1b06dd569a05502020378f3a814f6616341156eef71523bd011b606714cbba7a0aa06f89c5a01e8530dbc114bb08c2b28831f155abeba7fcbae372122aeb3ed3c1799a8ec83ae6836a1b5ef139267e2b24f559bd46dc99d44aa1d0d749069e22812db3328a1f33e56b52fd4b614098bf163be6d7e709417e839b784a6aac9210c06c69f06fdba22c6d88fdbf364d20786a3f455b3d4d6007bbdf936ce45df15b7ac3a51ec755d30d09226fd4999a3695bb8638", 0xb7}], 0x2, &(0x7f0000000800)}, 0x40000) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x438, 0x110, 0x2c8, 0xfeffffff, 0x2c8, 0x2c8, 0x3a0, 0x3a0, 0xffffffff, 0x3a0, 0x3a0, 0x5, 0x0, {[{{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@inet=@dscp={{0x28}, {0x7, 0x1}}, @common=@inet=@multiport={{0x50}, {0x1, 0x7, [0x4e20, 0x4e22, 0x4e20, 0x4e23, 0x4e24, 0x4e24, 0x4f24, 0x4e23, 0x4e21, 0x4e21, 0x4e23, 0x4e20, 0x4e24, 0x4e23, 0x4e1f], [0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfc, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1], 0x1}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x3, 0x0, 0x0, 0x0, 0x3]}}}, @common=@ttl={{0x28}, {0x3, 0xb}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x40, 0x0}, @broadcast, @gre_key=0x6, @port=0x4e20}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x66, @gre_key=0x9}}}}, {{@ip={@local, @remote, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {}, 0x16}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@remote, @ipv6=@rand_addr=' \x01\x00', @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x498) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x10000, &(0x7f0000002140)=ANY=[]) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000040)=0x800001c) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000401, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r7, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f00000007c0)={0x28, 0x4, r7, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x9}) r8 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r8, 0x29, 0xc8, 0x0, 0xc000000) getsockopt(0xffffffffffffffff, 0x128b, 0x100, &(0x7f00000004c0)=""/34, &(0x7f0000000800)=0x22) setsockopt$MRT6_ADD_MFC(r8, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) r9 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r9, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1}, 0x5c) setsockopt$MRT6_FLUSH(r8, 0x29, 0xd4, &(0x7f0000000100)=0x2, 0x4) 0s ago: executing program 4 (id=8963): syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902130001000000000904"], 0x0) (async) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0xae00) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000100)={&(0x7f0000000240)=[{0x7, 0x4200, 0x86, &(0x7f0000000280)="96df4115be9221c8ee3e139c4c56a4b8a0748db0833d700700ab6035664b4a10eee6823fb5892b7c07a7bb88fac47b12c11d1b30fdcef415f73bcb31e26babd25461e6f8ff3aefc5c293d39d2090f28a9dc400b100c911a19840cce61c928fc792434170280ad7e81a9c9e4c3c814780d3c6387505921dec14f0f54f00000000000000000069"}, {0x7, 0x8001, 0x0, 0x0}], 0x2}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) (async, rerun: 32) r1 = socket$unix(0x1, 0x1, 0x0) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x75, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) (async) accept4(r4, 0x0, 0x0, 0x1800) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) (async) r5 = gettid() rt_sigqueueinfo(r5, 0x12, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x400, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xff2e) (async) unshare(0x6a040000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x80) (async) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xfffffffc, 0x1, 0x406, 0x1, 0xffffffff, 0x9}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x0, 0x3c8, 0x9, 0x1, 0x95ce, 0x8}}, {0x4}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) (rerun: 32) kernel console output (not intermixed with test programs): [ 1691.072322][T29518] usb 4-1: config 0 descriptor?? [ 1691.406175][T29518] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1691.406234][T29518] usb 4-1: MIDIStreaming interface descriptor not found [ 1691.638932][T29518] usb 4-1: USB disconnect, device number 29 [ 1691.668563][ T720] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8460'. [ 1691.724901][T29521] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1691.797928][T27640] udevd[27640]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1691.905772][T29521] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1691.947836][T29521] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1691.947869][T29521] usb 6-1: Product: syz [ 1691.947885][T29521] usb 6-1: Manufacturer: syz [ 1691.947901][T29521] usb 6-1: SerialNumber: syz [ 1692.268392][ T733] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8464'. [ 1693.302157][T29521] rtl8150 6-1:1.0: couldn't reset the device [ 1693.302412][T29521] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 1694.506503][T29518] usb 6-1: USB disconnect, device number 4 [ 1694.744212][ T775] netlink: 48 bytes leftover after parsing attributes in process `syz.5.8472'. [ 1695.236889][ T8058] IPVS: starting estimator thread 0... [ 1695.331726][ T805] IPVS: using max 27 ests per chain, 64800 per kthread [ 1695.851140][ T821] Cannot find add_set index 0 as target [ 1696.158382][ T826] loop5: detected capacity change from 0 to 7 [ 1696.175129][ T826] loop5: [ 1696.175163][ T826] loop5: partition table partially beyond EOD, truncated [ 1696.280838][ T827] loop2: detected capacity change from 0 to 7 [ 1696.283959][ T827] Dev loop2: unable to read RDB block 7 [ 1696.283992][ T827] loop2: AHDI p1 p2 p3 [ 1696.284014][ T827] loop2: partition table partially beyond EOD, truncated [ 1696.284198][ T827] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1696.284219][ T827] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1696.478150][ T833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1696.503683][ T833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1696.587835][ T833] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8487'. [ 1696.959957][ T31] kauditd_printk_skb: 124 callbacks suppressed [ 1696.959981][ T31] audit: type=1326 audit(1791141254.222:24711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=845 comm="syz.1.8491" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b73f9e159 code=0x7ffc0000 [ 1696.960039][ T31] audit: type=1326 audit(1791141254.222:24712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=845 comm="syz.1.8491" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b73f9e159 code=0x7ffc0000 [ 1696.960086][ T31] audit: type=1326 audit(1791141254.222:24713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=845 comm="syz.1.8491" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b73f9e159 code=0x7ffc0000 [ 1696.960252][ T31] audit: type=1326 audit(1791141254.222:24714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=845 comm="syz.1.8491" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f5b73f9e159 code=0x7ffc0000 [ 1696.960301][ T31] audit: type=1326 audit(1791141254.222:24715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=845 comm="syz.1.8491" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b73f9e159 code=0x7ffc0000 [ 1696.960348][ T31] audit: type=1326 audit(1791141254.222:24716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=845 comm="syz.1.8491" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b73f9e159 code=0x7ffc0000 [ 1696.960400][ T31] audit: type=1326 audit(1791141254.222:24717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=845 comm="syz.1.8491" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b73f9e159 code=0x7ffc0000 [ 1696.960445][ T31] audit: type=1326 audit(1791141254.222:24718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=845 comm="syz.1.8491" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5b73f9e159 code=0x7ffc0000 [ 1696.961208][ T31] audit: type=1326 audit(1791141254.222:24719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=845 comm="syz.1.8491" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b73f9e159 code=0x7ffc0000 [ 1696.961267][ T31] audit: type=1326 audit(1791141254.222:24720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=845 comm="syz.1.8491" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b73f9e159 code=0x7ffc0000 [ 1696.992698][T29499] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1697.222123][T29499] usb 3-1: Using ep0 maxpacket: 16 [ 1697.222919][T29499] usb 3-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00 [ 1697.237962][T29499] usb 3-1: too many endpoints for config 0 interface 0 altsetting 12: 254, using maximum allowed: 30 [ 1697.238010][T29499] usb 3-1: config 0 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1697.238038][T29499] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1697.238074][T29499] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1697.294608][T29499] usb 3-1: config 0 descriptor?? [ 1697.608976][T27672] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 1697.653799][ T853] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 1697.676401][ T853] FAULT_INJECTION: forcing a failure. [ 1697.676401][ T853] name failslab, interval 1, probability 0, space 0, times 0 [ 1697.677379][ T853] CPU: 1 UID: 0 PID: 853 Comm: syz.4.8492 Tainted: G L syzkaller #0 PREEMPT(full) [ 1697.677416][ T853] Tainted: [L]=SOFTLOCKUP [ 1697.677426][ T853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1697.677439][ T853] Call Trace: [ 1697.677449][ T853] [ 1697.677459][ T853] dump_stack_lvl+0xe8/0x150 [ 1697.677498][ T853] should_fail_ex+0x410/0x560 [ 1697.677532][ T853] should_failslab+0xa8/0x100 [ 1697.677563][ T853] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 1697.677600][ T853] kmem_cache_alloc_noprof+0xa1/0x600 [ 1697.677623][ T853] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 1697.677656][ T853] ? kmem_cache_alloc_noprof+0x156/0x600 [ 1697.677679][ T853] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 1697.677722][ T853] __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 1697.677779][ T853] mmu_topup_memory_caches+0x21/0x170 [ 1697.677806][ T853] kvm_mmu_load+0x9d/0x21e0 [ 1697.677829][ T853] ? lockdep_hardirqs_on+0x7b/0x110 [ 1697.677863][ T853] ? irqentry_exit+0x218/0x910 [ 1697.677893][ T853] ? trace_irq_disable+0x3b/0x140 [ 1697.677935][ T853] ? vcpu_run+0x3411/0x7aa0 [ 1697.677977][ T853] vcpu_run+0x4f7e/0x7aa0 [ 1697.678009][ T853] ? trace_irq_disable+0x3b/0x140 [ 1697.678046][ T853] ? __lock_acquire+0x747/0x2de0 [ 1697.678091][ T853] ? update_se+0x90/0x1080 [ 1697.678164][ T853] ? __pfx_vcpu_run+0x10/0x10 [ 1697.678198][ T853] ? lock_acquire+0x115/0x350 [ 1697.678242][ T853] kvm_arch_vcpu_ioctl_run+0xe87/0x19c0 [ 1697.678283][ T853] ? kvm_arch_vcpu_ioctl_run+0x1f8/0x19c0 [ 1697.678321][ T853] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 1697.678351][ T853] kvm_vcpu_ioctl+0xa61/0xfd0 [ 1697.678382][ T853] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1697.678405][ T853] ? hook_file_ioctl+0x1f2/0x600 [ 1697.678458][ T853] ? __fget_files+0x2a/0x420 [ 1697.678493][ T853] ? __fget_files+0x2a/0x420 [ 1697.678524][ T853] ? __fget_files+0x3a2/0x420 [ 1697.678555][ T853] ? __fget_files+0x2a/0x420 [ 1697.678592][ T853] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1697.678626][ T853] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1697.678652][ T853] __se_sys_ioctl+0xfc/0x170 [ 1697.678681][ T853] do_syscall_64+0x166/0x520 [ 1697.678714][ T853] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1697.678737][ T853] ? clear_bhb_loop+0x70/0xc0 [ 1697.678772][ T853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1697.678795][ T853] RIP: 0033:0x7f272899e159 [ 1697.678817][ T853] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1697.678835][ T853] RSP: 002b:00007f2729796028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1697.678860][ T853] RAX: ffffffffffffffda RBX: 00007f2728c25fa0 RCX: 00007f272899e159 [ 1697.678877][ T853] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000c [ 1697.678891][ T853] RBP: 00007f2729796090 R08: 0000000000000000 R09: 0000000000000000 [ 1697.678906][ T853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1697.678919][ T853] R13: 00007f2728c26038 R14: 00007f2728c25fa0 R15: 00007f2728d4fa48 [ 1697.678955][ T853] [ 1697.752996][ T853] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1697.976426][T29499] elecom 0003:056E:010C.004A: ignoring exceeding usage max [ 1698.035093][T29499] elecom 0003:056E:010C.004A: ignoring exceeding usage max [ 1698.035112][T29499] elecom 0003:056E:010C.004A: usage index exceeded [ 1698.035126][T29499] elecom 0003:056E:010C.004A: item 0 2 2 2 parsing failed [ 1698.035729][T29499] elecom 0003:056E:010C.004A: probe with driver elecom failed with error -22 [ 1698.302070][ T860] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8494'. [ 1698.302543][ T860] bridge0: port 2(bridge_slave_1) entered disabled state [ 1698.303229][ T860] bridge0: port 1(bridge_slave_0) entered disabled state [ 1698.563435][ T867] FAULT_INJECTION: forcing a failure. [ 1698.563435][ T867] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1698.563465][ T867] CPU: 0 UID: 0 PID: 867 Comm: syz.3.8496 Tainted: G L syzkaller #0 PREEMPT(full) [ 1698.563487][ T867] Tainted: [L]=SOFTLOCKUP [ 1698.563492][ T867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1698.563502][ T867] Call Trace: [ 1698.563509][ T867] [ 1698.563516][ T867] dump_stack_lvl+0xe8/0x150 [ 1698.563544][ T867] should_fail_ex+0x410/0x560 [ 1698.563572][ T867] _copy_from_user+0x2d/0xb0 [ 1698.563597][ T867] copy_from_sockptr_offset+0x66/0xa0 [ 1698.563617][ T867] do_arpt_set_ctl+0x7dd/0xb50 [ 1698.563633][ T867] ? trace_contention_end+0x3d/0x140 [ 1698.563661][ T867] ? __pfx_do_arpt_set_ctl+0x10/0x10 [ 1698.563678][ T867] ? nf_setsockopt+0x221/0x290 [ 1698.563705][ T867] ? __mutex_unlock_slowpath+0x731/0x900 [ 1698.563747][ T867] nf_setsockopt+0x26f/0x290 [ 1698.563771][ T867] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1698.563794][ T867] do_sock_setsockopt+0x17c/0x1b0 [ 1698.563821][ T867] __x64_sys_setsockopt+0x13d/0x1b0 [ 1698.563850][ T867] do_syscall_64+0x166/0x520 [ 1698.563873][ T867] ? trace_irq_disable+0x3b/0x140 [ 1698.563890][ T867] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1698.563908][ T867] ? clear_bhb_loop+0x70/0xc0 [ 1698.563928][ T867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1698.563944][ T867] RIP: 0033:0x7fe91e19e159 [ 1698.563959][ T867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1698.563973][ T867] RSP: 002b:00007fe91ef8b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1698.563990][ T867] RAX: ffffffffffffffda RBX: 00007fe91e425fa0 RCX: 00007fe91e19e159 [ 1698.564002][ T867] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 1698.564012][ T867] RBP: 00007fe91ef8b090 R08: 0000000000000a50 R09: 0000000000000000 [ 1698.564023][ T867] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 1698.564033][ T867] R13: 00007fe91e426038 R14: 00007fe91e425fa0 R15: 00007fe91e54fa48 [ 1698.564064][ T867] [ 1699.275538][ T875] loop5: detected capacity change from 0 to 7 [ 1699.278751][ T875] loop5: [ 1699.278778][ T875] loop5: partition table partially beyond EOD, truncated [ 1699.712520][ T885] tunl0: entered promiscuous mode [ 1699.718412][ T885] netlink: 'syz.1.8501': attribute type 4 has an invalid length. [ 1699.718438][ T885] netlink: 9 bytes leftover after parsing attributes in process `syz.1.8501'. [ 1699.821907][T21089] usb 3-1: USB disconnect, device number 54 [ 1699.849226][ T885] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8501'. [ 1699.999046][ T892] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1700.623938][ T902] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8507'. [ 1700.628272][ T902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1700.628760][ T902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1700.803274][T29499] logitech-hidpp-device 0003:046D:C082.004B: unbalanced collection at end of report description [ 1700.804018][T29499] logitech-hidpp-device 0003:046D:C082.004B: hidpp_probe:parse failed [ 1700.804098][T29499] logitech-hidpp-device 0003:046D:C082.004B: probe with driver logitech-hidpp-device failed with error -22 [ 1701.110783][T29518] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1701.160849][T21089] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1701.270736][T29518] usb 3-1: Using ep0 maxpacket: 16 [ 1701.272558][T29518] usb 3-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 1701.276657][T29518] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1701.276685][T29518] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1701.317237][T29518] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1701.317286][T29518] usb 3-1: Product: syz [ 1701.317302][T29518] usb 3-1: Manufacturer: syz [ 1701.317320][T29518] usb 3-1: SerialNumber: syz [ 1701.326288][T21089] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1701.351756][T21089] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1701.351795][T21089] usb 2-1: Product: syz [ 1701.351813][T21089] usb 2-1: Manufacturer: syz [ 1701.351828][T21089] usb 2-1: SerialNumber: syz [ 1701.860757][T29521] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1702.039389][ T921] kvm: MWAIT instruction emulated as NOP! [ 1702.100245][T21089] rtl8150 2-1:1.0: couldn't reset the device [ 1702.100694][T21089] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 1702.135079][T21089] usb 2-1: USB disconnect, device number 55 [ 1702.383767][ T957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1702.384321][ T957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1702.387381][ T957] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8521'. [ 1702.418435][ T957] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8521'. [ 1702.419020][ T957] netlink: 14 bytes leftover after parsing attributes in process `syz.4.8521'. [ 1702.720657][T21089] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1702.871030][T21089] usb 6-1: Using ep0 maxpacket: 16 [ 1702.871878][T21089] usb 6-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 1702.874003][T21089] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1702.874029][T21089] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1702.877782][T21089] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1702.877808][T21089] usb 6-1: Product: syz [ 1702.877824][T21089] usb 6-1: Manufacturer: syz [ 1702.877841][T21089] usb 6-1: SerialNumber: syz [ 1703.124028][T21089] usb 6-1: USB disconnect, device number 5 [ 1703.146862][ T971] bond4: option ad_user_port_key: invalid value (33022) [ 1703.146883][ T971] bond4: option ad_user_port_key: allowed values 0 - 1023 [ 1703.170336][ T971] bond4 (unregistering): Released all slaves [ 1703.667834][ T985] nvme nvme0: failed to connect socket: -22 [ 1703.882864][T29521] usb 3-1: USB disconnect, device number 55 [ 1703.901903][ T988] use of bytesused == 0 is deprecated and will be removed in the future, [ 1703.901922][ T988] use the actual size instead. [ 1704.180782][T29518] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1704.354191][T29518] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1704.358281][T29518] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1704.358312][T29518] usb 6-1: Product: syz [ 1704.358323][T29518] usb 6-1: Manufacturer: syz [ 1704.358334][T29518] usb 6-1: SerialNumber: syz [ 1704.681151][T21089] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1704.810820][T21089] usb 3-1: device descriptor read/64, error -71 [ 1704.901696][ T1006] syzkaller1: tun_chr_ioctl cmd 1074025680 [ 1705.050667][T21089] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1705.181716][T21089] usb 3-1: device descriptor read/64, error -71 [ 1705.292319][T21089] usb usb3-port1: attempt power cycle [ 1705.640718][T29518] rtl8150 6-1:1.0: couldn't reset the device [ 1705.640732][T21089] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1705.641041][T29518] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 1705.674300][T21089] usb 3-1: device descriptor read/8, error -71 [ 1705.910956][T21089] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1705.931644][T21089] usb 3-1: device descriptor read/8, error -71 [ 1706.041191][T21089] usb usb3-port1: unable to enumerate USB device [ 1706.088296][T29518] usb 6-1: USB disconnect, device number 6 [ 1706.557029][ T1032] fuse: Unknown parameter 'r00000000040000' [ 1706.666426][ T8058] IPVS: starting estimator thread 0... [ 1706.705952][T21089] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1706.750843][ T1034] IPVS: using max 30 ests per chain, 72000 per kthread [ 1706.851673][T21089] usb 2-1: Using ep0 maxpacket: 16 [ 1706.852623][T21089] usb 2-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 1706.856255][T21089] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1706.856277][T21089] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1706.895083][T21089] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1706.895110][T21089] usb 2-1: Product: syz [ 1706.895126][T21089] usb 2-1: Manufacturer: syz [ 1706.895141][T21089] usb 2-1: SerialNumber: syz [ 1706.976111][ T1036] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8546'. [ 1706.976152][ T1036] netlink: 'syz.5.8546': attribute type 30 has an invalid length. [ 1707.034365][ T1041] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8546'. [ 1707.034394][ T1041] netlink: 'syz.5.8546': attribute type 30 has an invalid length. [ 1707.100739][ T1043] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1707.133975][ T1036] vxlan0: entered promiscuous mode [ 1707.133995][ T1036] vxlan0: entered allmulticast mode [ 1707.165982][ T1041] vxlan1: entered promiscuous mode [ 1707.166006][ T1041] vxlan1: entered allmulticast mode [ 1707.330792][T20651] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1707.330844][T20651] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1707.330883][T20651] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1707.330919][T20651] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1707.333566][ T8058] IPVS: stop unused estimator thread 0... [ 1707.860727][T21089] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1708.011613][T21089] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1708.013094][T21089] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 1708.013132][T21089] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1708.013150][T21089] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1708.016294][T21089] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1708.016323][T21089] usb 3-1: Product: syz [ 1708.016341][T21089] usb 3-1: Manufacturer: syz [ 1708.016357][T21089] usb 3-1: SerialNumber: syz [ 1708.065940][T21089] usb 3-1: config 0 descriptor?? [ 1708.089910][T21089] hub 3-1:0.0: bad descriptor, ignoring hub [ 1708.089931][T21089] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1708.121605][T21089] usb 3-1: selecting invalid altsetting 0 [ 1708.143297][ T1063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1708.165478][ T1063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1708.201863][ T1063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1708.207737][ T1063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1708.243207][ T1063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1708.243806][ T1063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1708.544102][T29518] usb 3-1: USB disconnect, device number 60 [ 1709.011126][T29518] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1709.186038][T29518] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1709.187554][T29518] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 1709.187592][T29518] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1709.187610][T29518] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1709.202389][T29518] usb 3-1: string descriptor 0 read error: -22 [ 1709.202762][T29518] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1709.265126][T29518] usb 3-1: config 0 descriptor?? [ 1709.285696][T29518] hub 3-1:0.0: bad descriptor, ignoring hub [ 1709.285718][T29518] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1709.315463][T29518] usb 3-1: selecting invalid altsetting 0 [ 1709.443420][T21089] usb 2-1: USB disconnect, device number 56 [ 1709.681691][T29518] usb 3-1: USB disconnect, device number 61 [ 1710.030608][T29521] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 1710.170633][T29521] usb 4-1: device descriptor read/64, error -71 [ 1710.410917][T29521] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 1710.540626][T29521] usb 4-1: device descriptor read/64, error -71 [ 1710.661042][T29521] usb usb4-port1: attempt power cycle [ 1710.922651][ T1107] could not allocate digest TFM handle sha512-ce [ 1711.000941][T29521] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 1711.021515][T29521] usb 4-1: device descriptor read/8, error -71 [ 1711.260692][T29521] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 1711.293486][T29521] usb 4-1: device descriptor read/8, error -71 [ 1711.401914][T29521] usb usb4-port1: unable to enumerate USB device [ 1711.661027][ T1120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1711.661497][ T1120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1712.449256][ T1144] ip_tables: iptables: counters copy to user failed while replacing table [ 1712.476952][ T1145] usb usb7: usbfs: process 1145 (syz.5.8577) did not claim interface 0 before use [ 1712.585482][ T1147] loop5: detected capacity change from 0 to 7 [ 1712.606589][ T1147] loop5: [ 1712.606611][ T1147] loop5: partition table partially beyond EOD, truncated [ 1713.045093][ T1157] netlink: 108 bytes leftover after parsing attributes in process `syz.3.8581'. [ 1713.047735][ T1156] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1713.065710][T26325] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1713.090786][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1713.246874][ T1159] netlink: 'syz.2.8582': attribute type 1 has an invalid length. [ 1713.285543][ T1161] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8583'. [ 1713.379052][ T1159] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1713.621088][ T1163] bond4: (slave veth3): Enslaving as an active interface with a down link [ 1713.703912][ T1171] random: crng reseeded on system resumption [ 1713.724851][ T1165] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1713.749844][ T1165] bond4: (slave batadv1): making interface the new active one [ 1713.781942][ T1165] batadv1: entered promiscuous mode [ 1713.782491][ T1165] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 1713.824147][ T1159] bond4 (unregistering): (slave veth3): Releasing active interface [ 1713.843183][ T1159] bond4 (unregistering): (slave batadv1): Releasing active interface [ 1713.843207][ T1159] batadv1: left promiscuous mode [ 1713.867813][ T1159] bond4 (unregistering): Released all slaves [ 1714.011620][ T1175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1714.012415][ T1175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1715.015634][ T1203] openvswitch: netlink: ufid size 21 bytes exceeds the range (1, 16) [ 1715.108485][ T1209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8598'. [ 1715.109606][ T1209] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8598'. [ 1715.143860][ T1198] could not allocate digest TFM handle sha512-ce [ 1715.387958][ T1214] 8021q: VLANs not supported on ip6_vti0 [ 1715.441045][T21089] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1715.590614][T21089] usb 6-1: Using ep0 maxpacket: 32 [ 1715.593824][T21089] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1715.593881][T21089] usb 6-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 1715.598658][T21089] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1715.598925][T21089] usb 6-1: Product: syz [ 1715.598943][T21089] usb 6-1: SerialNumber: syz [ 1715.911923][ T1223] SET target dimension over the limit! [ 1716.636086][ T1237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8609'. [ 1716.636299][ T1237] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8609'. [ 1716.698010][ T1246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8609'. [ 1716.698038][ T1212] futex_wake_op: syz.5.8599 tries to shift op by 144; fix this program [ 1716.698062][ T1246] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8609'. [ 1716.719381][ T1237] bridge2: entered promiscuous mode [ 1716.719418][ T1237] bridge2: entered allmulticast mode [ 1716.754849][T21089] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1716.755289][T21089] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1716.759026][ T1247] fuse: Invalid uid '00000000000000000000007' [ 1716.837721][ T1246] bridge3: entered promiscuous mode [ 1716.837749][ T1246] bridge3: entered allmulticast mode [ 1716.885948][T21089] usb 6-1: USB disconnect, device number 7 [ 1716.998829][T27653] udevd[27653]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1717.423956][ T1250] sg_write: 55 callbacks suppressed [ 1717.423981][ T1250] sg_write: data in/out 1027584/136 bytes for SCSI command 0x0-- guessing data in; [ 1717.423981][ T1250] program syz.4.8611 not setting count and/or reply_len properly [ 1717.560786][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1717.965454][ T1268] SET target dimension over the limit! [ 1718.082590][ T1260] could not allocate digest TFM handle sha512-ce [ 1718.228248][ T1275] bond4: option ad_user_port_key: invalid value (33022) [ 1718.228270][ T1275] bond4: option ad_user_port_key: allowed values 0 - 1023 [ 1718.236119][ T1275] bond4 (unregistering): Released all slaves [ 1718.260345][ T1278] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8619'. [ 1719.280817][T21089] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 1719.443945][T21089] usb 3-1: not running at top speed; connect to a high speed hub [ 1719.443983][T21089] usb 3-1: New USB device found, idVendor=1235, idProduct=8002, bcdDevice= 0.40 [ 1719.469398][T21089] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1719.469427][T21089] usb 3-1: Product: ࠁ [ 1719.469444][T21089] usb 3-1: Manufacturer: 梜 [ 1719.469460][T21089] usb 3-1: SerialNumber: ꡒƓ캎䋠颯ꉼﵛ茊댑ꂏ㙎贸㹄ၑ襇ޠ愁Ẍ햆姡푾뱛؄탊꾡䶈㶐⇋搏䪝齐⧼驥墟癗왐 [ 1719.638751][ T1314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1719.639213][ T1314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1719.761371][T21089] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1719.979979][ T1320] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8630'. [ 1720.453097][T29499] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1720.609804][T29499] usb 2-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice= 0.01 [ 1720.610304][ T1326] ip_tables: iptables: counters copy to user failed while replacing table [ 1720.632112][T29499] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1720.632180][T29499] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1720.636736][T29499] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1720.636799][T29499] usb 2-1: Product: syz [ 1720.636818][T29499] usb 2-1: Manufacturer: syz [ 1720.636837][T29499] usb 2-1: SerialNumber: syz [ 1720.692381][T29499] ums-onetouch 2-1:1.0: USB Mass Storage device detected [ 1720.748087][T29499] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/input/input104 [ 1720.748212][T29499] input input104: usb_submit_urb failed [ 1720.824281][T29499] input: failed to attach handler kbd to device input104, error: -5 [ 1720.830398][ T4969] input input104: usb_submit_urb failed [ 1720.852562][T29499] scsi host1: usb-storage 2-1:1.0 [ 1720.895743][ T1323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1720.896316][ T1323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1720.926376][T29521] usb 2-1: USB disconnect, device number 57 [ 1720.956897][ T4969] input input104: usb_submit_urb failed [ 1721.239125][ T1332] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8634'. [ 1721.280925][T21089] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1721.316815][ T1332] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8634'. [ 1721.322942][ T1332] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8634'. [ 1721.440139][T21089] usb 3-1: USB disconnect, device number 62 [ 1721.477670][T29521] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 1721.527604][T27653] udevd[27653]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1721.631697][T29521] usb 2-1: not running at top speed; connect to a high speed hub [ 1721.631727][T29521] usb 2-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice= 0.01 [ 1721.634615][T29521] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1721.634652][T29521] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1721.634681][T29521] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1721.634709][T29521] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1721.638438][T29521] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1721.638456][T29521] usb 2-1: Product: syz [ 1721.638467][T29521] usb 2-1: Manufacturer: syz [ 1721.638484][T29521] usb 2-1: SerialNumber: syz [ 1721.668674][ T1323] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1721.669154][ T1323] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1721.718499][T29521] ums-onetouch 2-1:1.0: USB Mass Storage device detected [ 1721.768495][T29521] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/input/input105 [ 1721.768564][T29521] input input105: usb_submit_urb failed [ 1721.794208][T29521] input: failed to attach handler kbd to device input105, error: -5 [ 1721.795648][ T4969] input input105: usb_submit_urb failed [ 1721.805683][T29521] scsi host1: usb-storage 2-1:1.0 [ 1721.831496][ T4969] input input105: usb_submit_urb failed [ 1721.880999][T29521] usb 2-1: USB disconnect, device number 58 [ 1721.909719][ T1335] could not allocate digest TFM handle sha512-ce [ 1722.575117][ T1357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1722.579491][ T1357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1722.630125][ T1359] bridge0: port 2(bridge_slave_1) entered disabled state [ 1722.631066][ T1359] bridge0: port 1(bridge_slave_0) entered disabled state [ 1722.660312][ T1359] bridge0: entered allmulticast mode [ 1722.955932][ T1362] ip_tables: iptables: counters copy to user failed while replacing table [ 1723.322694][T26325] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1723.481779][T26325] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1723.487594][T26325] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1723.487628][T26325] usb 2-1: Product: syz [ 1723.487645][T26325] usb 2-1: Manufacturer: syz [ 1723.487661][T26325] usb 2-1: SerialNumber: syz [ 1723.622618][T21098] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 1723.721545][ T1381] loop5: detected capacity change from 0 to 7 [ 1723.725108][ T1381] loop5: [ 1723.725158][ T1381] loop5: partition table partially beyond EOD, truncated [ 1723.773916][T21098] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1723.775186][T21098] usb 4-1: config 1 has an invalid descriptor of length 253, skipping remainder of the config [ 1723.775213][T21098] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1723.784369][T21098] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1723.784445][T21098] usb 4-1: Product: syz [ 1723.784496][T21098] usb 4-1: Manufacturer: syz [ 1723.784539][T21098] usb 4-1: SerialNumber: syz [ 1723.877022][T21098] usb 4-1: invalid UAC_HEADER (v1) [ 1724.031932][ T1386] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8647'. [ 1724.189361][T21098] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1724.246238][T21098] usb 4-1: USB disconnect, device number 35 [ 1724.291233][T27625] udevd[27625]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1724.696169][ T1391] could not allocate digest TFM handle sha512-ce [ 1724.732597][T26325] rtl8150 2-1:1.0: couldn't reset the device [ 1724.732854][T26325] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 1724.859868][ T1401] netlink: 'syz.5.8653': attribute type 13 has an invalid length. [ 1724.902258][ T1401] vxlan2: entered promiscuous mode [ 1724.902480][ T1401] vxlan2: entered allmulticast mode [ 1725.135544][T21098] usb 2-1: USB disconnect, device number 59 [ 1725.529758][ T31] kauditd_printk_skb: 194 callbacks suppressed [ 1725.529780][ T31] audit: type=1326 audit(1791141282.792:24915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1418 comm="syz.5.8660" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7bd9e159 code=0x7ffc0000 [ 1725.529906][ T31] audit: type=1326 audit(1791141282.792:24916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1418 comm="syz.5.8660" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7bd9e159 code=0x7ffc0000 [ 1725.530144][ T31] audit: type=1326 audit(1791141282.792:24917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1418 comm="syz.5.8660" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7bd9e159 code=0x7ffc0000 [ 1725.536931][ T31] audit: type=1326 audit(1791141282.802:24918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1418 comm="syz.5.8660" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7bd9e159 code=0x7ffc0000 [ 1725.571409][ T31] audit: type=1326 audit(1791141282.832:24919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1418 comm="syz.5.8660" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7bd9e159 code=0x7ffc0000 [ 1725.580036][ T31] audit: type=1326 audit(1791141282.842:24920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1418 comm="syz.5.8660" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fbc7bd9e159 code=0x7ffc0000 [ 1725.580247][ T31] audit: type=1326 audit(1791141282.842:24921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1418 comm="syz.5.8660" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7bd9e159 code=0x7ffc0000 [ 1725.580363][ T31] audit: type=1326 audit(1791141282.842:24922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1418 comm="syz.5.8660" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7bd9e159 code=0x7ffc0000 [ 1725.586723][ T31] audit: type=1326 audit(1791141282.852:24923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1418 comm="syz.5.8660" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7bd9e159 code=0x7ffc0000 [ 1725.587004][ T31] audit: type=1326 audit(1791141282.852:24924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1418 comm="syz.5.8660" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7bd9e159 code=0x7ffc0000 [ 1725.816482][ T1413] ptrace attach of ""[1420] was attempted by "ci-upstream-kasan-gce/syz-executor exec"[1413] [ 1727.493353][ T1439] bond1: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 1727.525129][ T1439] bond1 (unregistering): Released all slaves [ 1727.645421][ T1451] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8669'. [ 1727.748901][ T1451] ovs-dp0: entered promiscuous mode [ 1727.752325][ T1453] ovs-dp0: left promiscuous mode [ 1728.001500][ T1447] could not allocate digest TFM handle sha512-ce [ 1728.171056][T26325] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1728.221635][T21089] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1728.320649][T26325] usb 3-1: Using ep0 maxpacket: 8 [ 1728.321502][T26325] usb 3-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 1728.322961][T26325] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 1728.323012][T26325] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1728.323040][T26325] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1728.323068][T26325] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1728.325608][T26325] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1728.325633][T26325] usb 3-1: Product: syz [ 1728.325650][T26325] usb 3-1: Manufacturer: syz [ 1728.325666][T26325] usb 3-1: SerialNumber: syz [ 1728.393932][T26325] usb 3-1: config 0 descriptor?? [ 1728.394945][ T1460] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1728.401300][T21098] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1728.430449][T21089] usb 6-1: Using ep0 maxpacket: 32 [ 1728.444472][T21089] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1728.445705][T21089] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 1728.445730][T21089] usb 6-1: config 0 has no interface number 0 [ 1728.445771][T21089] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1728.445800][T21089] usb 6-1: config 0 interface 85 has no altsetting 0 [ 1728.449352][T21089] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1728.449385][T21089] usb 6-1: Product: syz [ 1728.449403][T21089] usb 6-1: Manufacturer: syz [ 1728.449418][T21089] usb 6-1: SerialNumber: syz [ 1728.518503][T21089] usb 6-1: config 0 descriptor?? [ 1728.554575][T21098] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1728.573943][T21098] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1728.573986][T21098] usb 4-1: Product: syz [ 1728.574003][T21098] usb 4-1: Manufacturer: syz [ 1728.574018][T21098] usb 4-1: SerialNumber: syz [ 1728.721834][T26325] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 1728.726982][T26325] input: Griffin SoundKnob as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input107 [ 1729.027586][T21089] appletouch 6-1:0.85: Failed to request geyser raw mode [ 1729.030003][T21089] appletouch 6-1:0.85: probe with driver appletouch failed with error -5 [ 1729.097194][T21089] usb 6-1: USB disconnect, device number 8 [ 1729.795963][T21098] rtl8150 4-1:1.0: couldn't reset the device [ 1729.797406][T21098] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 1729.947708][T21098] usb 5-1: USB disconnect, device number 77 [ 1730.141640][ T1481] bond1: option ad_user_port_key: invalid value (33022) [ 1730.141660][ T1481] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 1730.283494][ T1481] bond1 (unregistering): Released all slaves [ 1730.310796][T29521] usb 4-1: USB disconnect, device number 36 [ 1730.318926][T27672] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1730.350241][T27672] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1730.362944][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.362987][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.374424][T27672] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1730.393598][T27672] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1730.398072][T27672] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1731.151022][ C1] powermate: config urb returned -71 [ 1731.151246][ C1] powermate: config urb returned -71 [ 1731.151447][ C1] powermate: config urb returned -71 [ 1731.151500][T21098] usb 3-1: USB disconnect, device number 63 [ 1731.151672][ C1] powermate 3-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 1731.521397][ T1488] IPv6: addrconf: prefix option has invalid lifetime [ 1731.574930][ T1489] binder: BINDER_SET_CONTEXT_MGR already set [ 1731.575052][ T1489] binder: 1487:1489 ioctl 4018620d 200000000100 returned -16 [ 1732.364525][ T31] kauditd_printk_skb: 148 callbacks suppressed [ 1732.364562][ T31] audit: type=1326 audit(1791141289.632:25073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1519 comm="syz.1.8688" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b73f9e159 code=0x7ffc0000 [ 1732.364672][ T31] audit: type=1326 audit(1791141289.632:25074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1519 comm="syz.1.8688" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b73f9e159 code=0x7ffc0000 [ 1732.365112][ T31] audit: type=1326 audit(1791141289.632:25075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1519 comm="syz.1.8688" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b73f9e159 code=0x7ffc0000 [ 1732.365341][ T31] audit: type=1326 audit(1791141289.632:25076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1519 comm="syz.1.8688" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b73f9e159 code=0x7ffc0000 [ 1732.365525][ T31] audit: type=1326 audit(1791141289.632:25077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1519 comm="syz.1.8688" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f5b73f9e159 code=0x7ffc0000 [ 1732.365667][ T31] audit: type=1326 audit(1791141289.632:25078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1519 comm="syz.1.8688" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b73f9e159 code=0x7ffc0000 [ 1732.366008][ T31] audit: type=1326 audit(1791141289.632:25079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1519 comm="syz.1.8688" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b73f9e159 code=0x7ffc0000 [ 1732.369090][ T31] audit: type=1326 audit(1791141289.632:25080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1519 comm="syz.1.8688" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b73f9e159 code=0x7ffc0000 [ 1732.369394][ T31] audit: type=1326 audit(1791141289.632:25081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1519 comm="syz.1.8688" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f5b73f9e159 code=0x7ffc0000 [ 1732.369550][ T31] audit: type=1326 audit(1791141289.632:25082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1519 comm="syz.1.8688" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b73f9e159 code=0x7ffc0000 [ 1732.523416][ T582] Bluetooth: hci4: command tx timeout [ 1732.534357][T26325] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1732.720809][ T1512] could not allocate digest TFM handle sha512-ce [ 1732.720921][T26325] usb 6-1: Using ep0 maxpacket: 8 [ 1732.721676][T26325] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1732.722857][T26325] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1732.722891][T26325] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1732.722919][T26325] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1732.722946][T26325] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1732.722991][T26325] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1732.967303][T26325] usb 6-1: GET_CAPABILITIES returned 0 [ 1732.967370][T26325] usbtmc 6-1:16.0: can't read capabilities [ 1733.288774][ T1525] mmap: syz.2.8689 (1525): VmData 37851136 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data. [ 1733.457052][T21098] usb 6-1: USB disconnect, device number 9 [ 1733.729621][ T1536] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8690'. [ 1733.794289][ T1484] bridge0: port 1(bridge_slave_0) entered blocking state [ 1733.794624][ T1484] bridge0: port 1(bridge_slave_0) entered disabled state [ 1733.794793][ T1484] bridge_slave_0: entered allmulticast mode [ 1733.796769][ T1484] bridge_slave_0: entered promiscuous mode [ 1733.835124][ T1484] bridge0: port 2(bridge_slave_1) entered blocking state [ 1733.835274][ T1484] bridge0: port 2(bridge_slave_1) entered disabled state [ 1733.835444][ T1484] bridge_slave_1: entered allmulticast mode [ 1733.837392][ T1484] bridge_slave_1: entered promiscuous mode [ 1734.025106][ T1484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1734.029183][ T1484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1734.101893][T21098] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 1734.106894][ T1484] team0: Port device team_slave_0 added [ 1734.112359][ T1484] team0: Port device team_slave_1 added [ 1734.232872][ T1484] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1734.232892][ T1484] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1734.232921][ T1484] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1734.239239][ T1484] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1734.239257][ T1484] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1734.239286][ T1484] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1734.350122][T21098] usb 2-1: New USB device found, idVendor=093a, idProduct=8002, bcdDevice= 0.00 [ 1734.371284][T21098] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1734.371314][T21098] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1734.371329][T21098] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1734.371388][T21098] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1734.374173][T21098] usb 2-1: config 0 descriptor?? [ 1734.473139][ T1484] hsr_slave_0: entered promiscuous mode [ 1734.474157][ T1484] hsr_slave_1: entered promiscuous mode [ 1734.474937][ T1484] debugfs: 'hsr0' already exists in 'hsr' [ 1734.474985][ T1484] Cannot create hsr debugfs directory [ 1734.516674][ T1545] batadv_slave_1: entered promiscuous mode [ 1734.602099][ T582] Bluetooth: hci4: command tx timeout [ 1734.879715][T21098] hid (null): global environment stack underflow [ 1734.929939][T21098] hid_parser_main: 30 callbacks suppressed [ 1734.929968][T21098] hid-generic 0003:093A:8002.004C: unknown main item tag 0x0 [ 1734.930000][T21098] hid-generic 0003:093A:8002.004C: global environment stack underflow [ 1734.930016][T21098] hid-generic 0003:093A:8002.004C: item 0 4 1 11 parsing failed [ 1734.939823][T21098] hid-generic 0003:093A:8002.004C: probe with driver hid-generic failed with error -22 [ 1735.504327][ T1543] batadv_slave_1: left promiscuous mode [ 1735.582716][T21098] usb 2-1: USB disconnect, device number 60 [ 1735.698489][T20651] bridge_slave_1: left allmulticast mode [ 1735.698520][T20651] bridge_slave_1: left promiscuous mode [ 1735.698805][T20651] bridge0: port 2(bridge_slave_1) entered disabled state [ 1735.721942][T20651] bridge_slave_0: left allmulticast mode [ 1735.721970][T20651] bridge_slave_0: left promiscuous mode [ 1735.722262][T20651] bridge0: port 1(bridge_slave_0) entered disabled state [ 1735.887315][T20651] bond3 (unregistering): (slave ip6gretap2): Removing an active aggregator [ 1735.887913][T20651] bond3 (unregistering): (slave ip6gretap2): Releasing backup interface [ 1736.074311][ T1564] could not allocate digest TFM handle sha512-ce [ 1736.142959][T20651] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1736.145344][T20651] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1736.147453][T20651] bond0 (unregistering): Released all slaves [ 1736.182286][T20651] bond1 (unregistering): Released all slaves [ 1736.223025][T20651] bond2 (unregistering): Released all slaves [ 1736.263773][T20651] bond3 (unregistering): Released all slaves [ 1736.311567][T21098] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 1736.461352][T21098] usb 4-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice= 2.23 [ 1736.467699][T21098] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1736.481203][T21098] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1736.481294][T21098] usb 4-1: Product: syz [ 1736.481343][T21098] usb 4-1: Manufacturer: syz [ 1736.481385][T21098] usb 4-1: SerialNumber: syz [ 1736.567536][T21098] usb 4-1: config 0 descriptor?? [ 1736.680696][ T582] Bluetooth: hci4: command tx timeout [ 1737.443005][ T31] kauditd_printk_skb: 375 callbacks suppressed [ 1737.443026][ T31] audit: type=1326 audit(1791141294.712:25458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1571 comm="syz.1.8700" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5b73f9e159 code=0x7ffc0000 [ 1737.493054][ T31] audit: type=1326 audit(1791141294.762:25459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1571 comm="syz.1.8700" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f5b73f9e159 code=0x7ffc0000 [ 1738.366389][ T1606] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1738.760881][ T582] Bluetooth: hci4: command tx timeout [ 1738.786050][T20651] hsr_slave_0: left promiscuous mode [ 1738.786685][T20651] hsr_slave_1: left promiscuous mode [ 1738.889525][T29501] usb 4-1: USB disconnect, device number 37 [ 1739.932277][T29518] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1740.081244][T29518] usb 6-1: Using ep0 maxpacket: 16 [ 1740.081852][T29518] usb 6-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 1740.117632][T29518] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1740.117654][T29518] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1740.119520][ T1484] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1740.173316][T29518] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1740.173348][T29518] usb 6-1: Product: syz [ 1740.173365][T29518] usb 6-1: Manufacturer: syz [ 1740.173382][T29518] usb 6-1: SerialNumber: syz [ 1740.189550][ T1484] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1740.212361][ T1484] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1740.244969][ T1484] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1740.249638][ T1484] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1740.301369][ T1484] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1740.303980][ T1484] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1740.393534][ T1484] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1740.528788][T21089] usb 6-1: USB disconnect, device number 10 [ 1740.678503][ T1655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8718'. [ 1740.875824][ T1651] bridge0: port 2(bridge_slave_1) entered disabled state [ 1740.876495][ T1651] bridge0: port 1(bridge_slave_0) entered disabled state [ 1741.263417][ T1651] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1741.288073][ T1651] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1741.631468][T29518] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1741.781613][T29518] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1741.783149][T29518] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1741.783205][T29518] usb 4-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 1741.788702][T29518] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1741.788747][T29518] usb 4-1: Product: syz [ 1741.788763][T29518] usb 4-1: Manufacturer: syz [ 1741.788779][T29518] usb 4-1: SerialNumber: syz [ 1741.863640][T11769] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1741.863680][T11769] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1741.874142][T24633] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1741.874247][T24633] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1741.874410][T24633] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1741.875754][T24633] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1741.875898][T24633] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1741.875979][T24633] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1741.972423][T29521] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1742.109853][ T1675] netlink: 'syz.5.8720': attribute type 10 has an invalid length. [ 1742.172195][ T1675] bridge0: left allmulticast mode [ 1742.173317][ T1675] bridge0: port 2(bridge_slave_1) entered blocking state [ 1742.173451][ T1675] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1742.173793][ T1675] bridge0: port 1(bridge_slave_0) entered blocking state [ 1742.173920][ T1675] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1742.258391][ T1675] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1742.296985][ T1667] atomic_op ffff88807eb159e0 conn xmit_atomic 0000000000000000 [ 1742.299450][T20651] IPVS: stop unused estimator thread 0... [ 1742.420161][ T1484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1742.487333][ T1484] 8021q: adding VLAN 0 to HW filter on device team0 [ 1742.505935][ T1663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1742.508289][T20651] bridge0: port 1(bridge_slave_0) entered blocking state [ 1742.508392][T20651] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1742.535813][ T1663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1742.564607][T20649] bridge0: port 2(bridge_slave_1) entered blocking state [ 1742.564718][T20649] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1743.007202][T29499] usb 4-1: USB disconnect, device number 38 [ 1743.018881][T29521] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1743.019074][T29521] ath9k_htc: Failed to initialize the device [ 1743.058497][T29499] usb 4-1: ath9k_htc: USB layer deinitialized [ 1743.167957][ T1484] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1743.237271][ T1484] veth0_vlan: entered promiscuous mode [ 1743.266870][ T1484] veth1_vlan: entered promiscuous mode [ 1743.314884][ T1484] veth0_macvtap: entered promiscuous mode [ 1743.338765][ T1484] veth1_macvtap: entered promiscuous mode [ 1743.385669][ T1484] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1743.413030][ T1484] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1743.489043][ T1687] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1743.523397][T20651] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1743.523449][T20651] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1743.523493][T20651] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1743.523528][T20651] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1743.848632][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1743.848656][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1743.949209][ T1695] SET target dimension over the limit! [ 1743.976680][T20650] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1743.976705][T20650] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1744.007339][ T1693] loop5: detected capacity change from 0 to 7 [ 1744.029673][ T1693] loop5: [ 1744.029704][ T1693] loop5: partition table partially beyond EOD, truncated [ 1744.056987][ T1699] netlink: 'syz.5.8726': attribute type 2 has an invalid length. [ 1744.057745][ T1703] netlink: 'syz.5.8726': attribute type 2 has an invalid length. [ 1744.138063][ T31] audit: type=1326 audit(1791141301.402:25460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1705 comm="syz.2.8729" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db5b9e159 code=0x7ffc0000 [ 1744.138318][ T31] audit: type=1326 audit(1791141301.402:25461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1705 comm="syz.2.8729" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db5b9e159 code=0x7ffc0000 [ 1744.138692][ T31] audit: type=1326 audit(1791141301.402:25462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1705 comm="syz.2.8729" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db5b9e159 code=0x7ffc0000 [ 1744.138998][ T31] audit: type=1326 audit(1791141301.402:25463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1705 comm="syz.2.8729" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6db5b9e159 code=0x7ffc0000 [ 1744.139654][ T31] audit: type=1326 audit(1791141301.402:25464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1705 comm="syz.2.8729" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db5b9e159 code=0x7ffc0000 [ 1744.139992][ T31] audit: type=1326 audit(1791141301.402:25465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1705 comm="syz.2.8729" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db5b9e159 code=0x7ffc0000 [ 1744.140237][ T31] audit: type=1326 audit(1791141301.402:25466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1705 comm="syz.2.8729" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db5b9e159 code=0x7ffc0000 [ 1744.140466][ T31] audit: type=1326 audit(1791141301.402:25467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1705 comm="syz.2.8729" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db5b9e159 code=0x7ffc0000 [ 1744.315485][ T31] audit: type=1326 audit(1791141301.562:25468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1705 comm="syz.2.8729" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f6db5b9e159 code=0x7ffc0000 [ 1744.342170][ T31] audit: type=1326 audit(1791141301.582:25470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1705 comm="syz.2.8729" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db5b9e159 code=0x7ffc0000 [ 1744.700919][T29499] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 1744.851549][T29499] usb 4-1: New USB device found, idVendor=056a, idProduct=030c, bcdDevice= 0.00 [ 1744.852785][T29499] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1744.852825][T29499] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1744.871916][T29499] usb 4-1: config 0 descriptor?? [ 1744.919700][ T1720] bond1: option ad_user_port_key: invalid value (33022) [ 1744.919728][ T1720] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 1744.936462][ T1720] bond1 (unregistering): Released all slaves [ 1745.645130][T27672] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1745.667913][T27672] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1745.685526][T27672] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1745.702717][T27672] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1745.706197][T27672] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1745.819919][T27672] Bluetooth: hci2: Malformed HCI Event: 0x22 [ 1745.957551][ T1734] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8736'. [ 1746.039193][T29499] usb 4-1: string descriptor 0 read error: -71 [ 1746.057099][T29499] usbhid 4-1:0.0: can't add hid device: -71 [ 1746.057221][T29499] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1746.080617][T29499] usb 4-1: USB disconnect, device number 39 [ 1746.126961][ T1737] SET target dimension over the limit! [ 1746.211569][T29521] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1746.398499][T29521] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 1746.424912][T29521] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1746.425062][T29521] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1746.484900][T29521] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1746.484923][T29521] usb 5-1: Product: syz [ 1746.484935][T29521] usb 5-1: Manufacturer: syz [ 1746.484946][T29521] usb 5-1: SerialNumber: syz [ 1746.568669][T32126] syz_tun (unregistering): left promiscuous mode [ 1746.726284][ T1747] FAULT_INJECTION: forcing a failure. [ 1746.726284][ T1747] name failslab, interval 1, probability 0, space 0, times 0 [ 1746.726324][ T1747] CPU: 1 UID: 0 PID: 1747 Comm: syz.3.8739 Tainted: G L syzkaller #0 PREEMPT(full) [ 1746.726353][ T1747] Tainted: [L]=SOFTLOCKUP [ 1746.726362][ T1747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1746.726376][ T1747] Call Trace: [ 1746.726386][ T1747] [ 1746.726397][ T1747] dump_stack_lvl+0xe8/0x150 [ 1746.726435][ T1747] should_fail_ex+0x410/0x560 [ 1746.726470][ T1747] should_failslab+0xa8/0x100 [ 1746.726503][ T1747] __kmalloc_cache_noprof+0xa3/0x600 [ 1746.726528][ T1747] ? stack_trace_save+0xa9/0x100 [ 1746.726552][ T1747] ? rtnl_newlink+0x143/0x1c30 [ 1746.726583][ T1747] ? rtnl_newlink+0x143/0x1c30 [ 1746.726622][ T1747] rtnl_newlink+0x143/0x1c30 [ 1746.726654][ T1747] ? kasan_save_track+0x4f/0x80 [ 1746.726678][ T1747] ? kasan_save_track+0x3e/0x80 [ 1746.726702][ T1747] ? __kasan_slab_free+0x5c/0x80 [ 1746.726728][ T1747] ? kmem_cache_free+0x182/0x650 [ 1746.726751][ T1747] ? nlmon_xmit+0xb0/0x100 [ 1746.726779][ T1747] ? dev_hard_start_xmit+0x2cd/0x830 [ 1746.726804][ T1747] ? __dev_queue_xmit+0x14d1/0x3920 [ 1746.726826][ T1747] ? __netlink_deliver_tap+0x5b4/0x860 [ 1746.726849][ T1747] ? netlink_deliver_tap+0x19c/0x1b0 [ 1746.726871][ T1747] ? netlink_unicast+0x781/0x940 [ 1746.726903][ T1747] ? netlink_sendmsg+0x813/0xb40 [ 1746.726928][ T1747] ? __pfx_rtnl_newlink+0x10/0x10 [ 1746.726959][ T1747] ? __x64_sys_sendmmsg+0xa0/0xc0 [ 1746.726992][ T1747] ? do_syscall_64+0x166/0x520 [ 1746.727024][ T1747] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1746.727100][ T1747] ? kasan_quarantine_put+0xbb/0x1f0 [ 1746.727125][ T1747] ? lockdep_hardirqs_on+0x7b/0x110 [ 1746.727158][ T1747] ? nlmon_xmit+0xb0/0x100 [ 1746.727183][ T1747] ? kmem_cache_free+0x182/0x650 [ 1746.727216][ T1747] ? __lock_acquire+0x747/0x2de0 [ 1746.727250][ T1747] ? __local_bh_enable_ip+0xd6/0x140 [ 1746.727278][ T1747] ? lockdep_hardirqs_on+0x7b/0x110 [ 1746.727308][ T1747] ? __dev_queue_xmit+0x29b/0x3920 [ 1746.727330][ T1747] ? __local_bh_enable_ip+0xd6/0x140 [ 1746.727367][ T1747] ? lock_acquire+0x115/0x350 [ 1746.727391][ T1747] ? __pfx_rtnl_newlink+0x10/0x10 [ 1746.727432][ T1747] ? __pfx_rtnl_newlink+0x10/0x10 [ 1746.727461][ T1747] rtnetlink_rcv_msg+0x802/0xc00 [ 1746.727496][ T1747] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1746.727525][ T1747] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1746.727553][ T1747] ? ref_tracker_free+0x689/0x830 [ 1746.727586][ T1747] ? __pfx_ref_tracker_free+0x10/0x10 [ 1746.727614][ T1747] ? __asan_memcpy+0x40/0x70 [ 1746.727635][ T1747] ? __skb_clone+0x5c/0x6c0 [ 1746.727675][ T1747] netlink_rcv_skb+0x226/0x4a0 [ 1746.727700][ T1747] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1746.727732][ T1747] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1746.727768][ T1747] ? netlink_deliver_tap+0x2e/0x1b0 [ 1746.727791][ T1747] ? netlink_deliver_tap+0x2e/0x1b0 [ 1746.727820][ T1747] netlink_unicast+0x7bd/0x940 [ 1746.727863][ T1747] netlink_sendmsg+0x813/0xb40 [ 1746.727894][ T1747] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1746.727926][ T1747] ? apparmor_socket_sendmsg+0x98/0x360 [ 1746.727954][ T1747] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1746.727978][ T1747] sock_sendmsg_nosec+0x13a/0x180 [ 1746.728007][ T1747] ____sys_sendmsg+0x54e/0x850 [ 1746.728045][ T1747] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1746.728113][ T1747] ? import_iovec+0x73/0xa0 [ 1746.728148][ T1747] ___sys_sendmsg+0x2a5/0x360 [ 1746.728181][ T1747] ? __lock_acquire+0x747/0x2de0 [ 1746.728210][ T1747] ? __pfx____sys_sendmsg+0x10/0x10 [ 1746.728251][ T1747] ? kstrtouint+0x6e/0xe0 [ 1746.728303][ T1747] ? __fget_files+0x2a/0x420 [ 1746.728336][ T1747] ? __fget_files+0x3a2/0x420 [ 1746.728390][ T1747] __sys_sendmmsg+0x273/0x4d0 [ 1746.728429][ T1747] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1746.728472][ T1747] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1746.728519][ T1747] ? ksys_write+0x242/0x270 [ 1746.728544][ T1747] ? __pfx_ksys_write+0x10/0x10 [ 1746.728574][ T1747] __x64_sys_sendmmsg+0xa0/0xc0 [ 1746.728610][ T1747] do_syscall_64+0x166/0x520 [ 1746.728640][ T1747] ? trace_irq_disable+0x3b/0x140 [ 1746.728664][ T1747] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1746.728687][ T1747] ? clear_bhb_loop+0x70/0xc0 [ 1746.728715][ T1747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1746.728737][ T1747] RIP: 0033:0x7fe91e19e159 [ 1746.728758][ T1747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1746.728776][ T1747] RSP: 002b:00007fe91ef8b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1746.728800][ T1747] RAX: ffffffffffffffda RBX: 00007fe91e425fa0 RCX: 00007fe91e19e159 [ 1746.728817][ T1747] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 1746.728832][ T1747] RBP: 00007fe91ef8b090 R08: 0000000000000000 R09: 0000000000000000 [ 1746.728847][ T1747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1746.728860][ T1747] R13: 00007fe91e426038 R14: 00007fe91e425fa0 R15: 00007fe91e54fa48 [ 1746.728893][ T1747] [ 1746.762176][T29517] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1747.013347][T29517] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1747.074001][T29517] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1747.074103][T29517] usb 6-1: Product: syz [ 1747.074145][T29517] usb 6-1: Manufacturer: syz [ 1747.074187][T29517] usb 6-1: SerialNumber: syz [ 1747.801108][T27672] Bluetooth: hci5: command tx timeout [ 1748.168437][ T1731] bridge0: port 1(bridge_slave_0) entered blocking state [ 1748.168696][ T1731] bridge0: port 1(bridge_slave_0) entered disabled state [ 1748.168942][ T1731] bridge_slave_0: entered allmulticast mode [ 1748.197657][ T1731] bridge_slave_0: entered promiscuous mode [ 1748.270754][ T1731] bridge0: port 2(bridge_slave_1) entered blocking state [ 1748.270919][ T1731] bridge0: port 2(bridge_slave_1) entered disabled state [ 1748.271158][ T1731] bridge_slave_1: entered allmulticast mode [ 1748.273322][ T1731] bridge_slave_1: entered promiscuous mode [ 1748.507263][ T1731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1748.517443][T29517] rtl8150 6-1:1.0: couldn't reset the device [ 1748.518400][T29517] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 1748.590099][T29517] usb 5-1: USB disconnect, device number 78 [ 1748.708055][ T1731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1748.746959][T29521] usb 6-1: USB disconnect, device number 11 [ 1748.837125][ T1731] team0: Port device team_slave_0 added [ 1748.864460][ T1774] netlink: 'syz.2.8746': attribute type 13 has an invalid length. [ 1748.883372][ T1731] team0: Port device team_slave_1 added [ 1748.926389][ T1731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1748.926407][ T1731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1748.926433][ T1731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1748.929631][ T1731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1748.929649][ T1731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1748.929678][ T1731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1749.103587][ T1731] hsr_slave_0: entered promiscuous mode [ 1749.106412][ T1731] hsr_slave_1: entered promiscuous mode [ 1749.107109][ T1731] debugfs: 'hsr0' already exists in 'hsr' [ 1749.108039][ T1731] Cannot create hsr debugfs directory [ 1749.249800][ T1779] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 1749.264166][ T1779] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1749.572569][ T50] bridge_slave_1: left allmulticast mode [ 1749.572598][ T50] bridge_slave_1: left promiscuous mode [ 1749.572818][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 1749.600110][ T50] bridge_slave_0: left allmulticast mode [ 1749.600139][ T50] bridge_slave_0: left promiscuous mode [ 1749.600423][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 1749.647425][ T50] pimreg: left allmulticast mode [ 1749.647539][ T50] dvmrp6: left allmulticast mode [ 1749.690627][T29499] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1749.696898][ T1791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8752'. [ 1749.803369][ T50] ip6gretap0 (unregistering): left promiscuous mode [ 1749.845660][T29499] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1749.866082][T29499] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1749.866111][T29499] usb 5-1: Product: syz [ 1749.866127][T29499] usb 5-1: Manufacturer: syz [ 1749.866143][T29499] usb 5-1: SerialNumber: syz [ 1749.891012][T27672] Bluetooth: hci5: command tx timeout [ 1750.093755][ T50] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 1750.115314][ T1783] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8749'. [ 1750.185882][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1750.188479][ T50] bond0 (unregistering): Released all slaves [ 1750.226022][ T50] bond1 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 1750.229071][ T50] bond1 (unregistering): Released all slaves [ 1750.229352][T29499] rtl8150 5-1:1.0: couldn't reset the device [ 1750.229963][T29499] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 1750.281291][T29499] usb 5-1: USB disconnect, device number 79 [ 1750.282907][ T50] bond2 (unregistering): Released all slaves [ 1750.475216][ T50] : left promiscuous mode [ 1750.622508][ T50] tipc: Left network mode [ 1751.696165][ T1842] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8767'. [ 1751.762246][ T1844] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8767'. [ 1751.915190][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1751.918524][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1751.961370][T27672] Bluetooth: hci5: command tx timeout [ 1752.020656][T29518] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1752.043121][ T1852] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8770'. [ 1752.182461][T29518] usb 6-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 1752.204675][T29518] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1752.204706][T29518] usb 6-1: config 0 has no interface number 0 [ 1752.204748][T29518] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1752.204779][T29518] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1752.204821][T29518] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1752.237851][T29518] usb 6-1: config 0 descriptor?? [ 1752.384948][ T1858] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8773'. [ 1752.660242][T29518] asus 0003:048D:CE50.004D: reserved main item tag 0xd [ 1752.706633][T29518] asus 0003:048D:CE50.004D: hidraw0: USB HID v0.00 Device [HID 048d:ce50] on usb-dummy_hcd.5-1/input1 [ 1752.861772][T29499] usb 6-1: USB disconnect, device number 12 [ 1752.925534][ T1862] fido_id[1862]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 1753.388303][ T1873] SET target dimension over the limit! [ 1753.515941][ T1875] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1753.632379][ T1879] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1753.650009][T20650] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1753.650071][T20650] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1753.650107][T20650] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1753.650143][T20650] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1754.041135][T27672] Bluetooth: hci5: command tx timeout [ 1754.704228][ T1861] atomic_op ffff8880279661e0 conn xmit_atomic 0000000000000000 [ 1755.099620][ T1731] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1755.142340][ T1731] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1755.146756][ T1731] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1755.197242][ T1731] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1755.204476][ T1731] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1755.234413][ T1731] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1755.244893][ T1731] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1755.279631][ T1731] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1755.394233][ T50] IPVS: stop unused estimator thread 0... [ 1755.500648][T29521] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1755.675343][T29521] usb 3-1: Using ep0 maxpacket: 32 [ 1755.687949][T29521] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1755.688085][T29521] usb 3-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 1755.712469][T29521] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1755.712501][T29521] usb 3-1: Product: syz [ 1755.712517][T29521] usb 3-1: SerialNumber: syz [ 1755.748549][ T1731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1755.817924][ T1731] 8021q: adding VLAN 0 to HW filter on device team0 [ 1755.869564][T20651] bridge0: port 1(bridge_slave_0) entered blocking state [ 1755.869650][T20651] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1755.906406][ T1871] atomic_op ffff888035f1e9e0 conn xmit_atomic 0000000000000000 [ 1755.907057][T20651] bridge0: port 2(bridge_slave_1) entered blocking state [ 1755.907140][T20651] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1756.363559][ T1731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1756.572721][ T1924] FAULT_INJECTION: forcing a failure. [ 1756.572721][ T1924] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1756.572765][ T1924] CPU: 0 UID: 0 PID: 1924 Comm: syz.4.8787 Tainted: G L syzkaller #0 PREEMPT(full) [ 1756.572802][ T1924] Tainted: [L]=SOFTLOCKUP [ 1756.572812][ T1924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1756.572826][ T1924] Call Trace: [ 1756.572835][ T1924] [ 1756.572846][ T1924] dump_stack_lvl+0xe8/0x150 [ 1756.572888][ T1924] should_fail_ex+0x410/0x560 [ 1756.572925][ T1924] prepare_alloc_pages+0x223/0x600 [ 1756.572961][ T1924] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 1756.572996][ T1924] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1756.573029][ T1924] ? __pfx_policy_nodemask+0x10/0x10 [ 1756.573060][ T1924] ? __kvm_mmu_topup_memory_cache+0x461/0x600 [ 1756.573095][ T1924] ? rcu_is_watching+0x16/0xb0 [ 1756.573132][ T1924] ? __kvm_mmu_topup_memory_cache+0x461/0x600 [ 1756.573164][ T1924] ? trace_kmalloc+0x2a/0xf0 [ 1756.573191][ T1924] alloc_pages_mpol+0x21e/0x390 [ 1756.573228][ T1924] alloc_pages_noprof+0xb1/0x2b0 [ 1756.573262][ T1924] get_free_pages_noprof+0xf/0x80 [ 1756.573291][ T1924] __kvm_mmu_topup_memory_cache+0x252/0x600 [ 1756.573340][ T1924] mmu_topup_memory_caches+0xd6/0x170 [ 1756.573367][ T1924] kvm_mmu_load+0x9d/0x21e0 [ 1756.573393][ T1924] ? kvm_msr_allowed+0x9a/0x490 [ 1756.573415][ T1924] ? kvm_msr_allowed+0x3f4/0x490 [ 1756.573436][ T1924] ? kvm_msr_allowed+0x9a/0x490 [ 1756.573458][ T1924] ? kvm_msr_allowed+0x9a/0x490 [ 1756.573487][ T1924] ? kvm_apic_has_interrupt+0x740/0x770 [ 1756.573532][ T1924] vcpu_run+0x4f7e/0x7aa0 [ 1756.573604][ T1924] ? update_se+0x90/0x1080 [ 1756.573676][ T1924] ? __pfx_vcpu_run+0x10/0x10 [ 1756.573711][ T1924] ? lock_acquire+0x115/0x350 [ 1756.573755][ T1924] kvm_arch_vcpu_ioctl_run+0xe87/0x19c0 [ 1756.573796][ T1924] ? kvm_arch_vcpu_ioctl_run+0x1f8/0x19c0 [ 1756.573834][ T1924] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 1756.573866][ T1924] kvm_vcpu_ioctl+0xa61/0xfd0 [ 1756.573898][ T1924] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1756.573920][ T1924] ? hook_file_ioctl+0x1f2/0x600 [ 1756.573970][ T1924] ? __fget_files+0x2a/0x420 [ 1756.574007][ T1924] ? __fget_files+0x2a/0x420 [ 1756.574039][ T1924] ? __fget_files+0x3a2/0x420 [ 1756.574073][ T1924] ? __fget_files+0x2a/0x420 [ 1756.574110][ T1924] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1756.574155][ T1924] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1756.574181][ T1924] __se_sys_ioctl+0xfc/0x170 [ 1756.574212][ T1924] do_syscall_64+0x166/0x520 [ 1756.574247][ T1924] ? trace_irq_disable+0x3b/0x140 [ 1756.574271][ T1924] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1756.574296][ T1924] ? clear_bhb_loop+0x70/0xc0 [ 1756.574326][ T1924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1756.574350][ T1924] RIP: 0033:0x7f0b0599e159 [ 1756.574373][ T1924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1756.574393][ T1924] RSP: 002b:00007f0b06830028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1756.574418][ T1924] RAX: ffffffffffffffda RBX: 00007f0b05c25fa0 RCX: 00007f0b0599e159 [ 1756.574436][ T1924] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000c [ 1756.574451][ T1924] RBP: 00007f0b06830090 R08: 0000000000000000 R09: 0000000000000000 [ 1756.574466][ T1924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1756.574480][ T1924] R13: 00007f0b05c26038 R14: 00007f0b05c25fa0 R15: 00007f0b05d4fa48 [ 1756.574518][ T1924] [ 1756.734342][ T1924] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1756.969639][ T1731] veth0_vlan: entered promiscuous mode [ 1757.024902][ T1731] veth1_vlan: entered promiscuous mode [ 1757.229009][ T1731] veth0_macvtap: entered promiscuous mode [ 1757.288575][ T1731] veth1_macvtap: entered promiscuous mode [ 1757.372979][ T1731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1757.419465][ T1731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1757.543754][T20650] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1757.604996][T20651] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1757.609551][T11769] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1757.610023][T11769] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1757.953630][T11769] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1757.953657][T11769] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1758.012373][ T1904] futex_wake_op: syz.2.8784 tries to shift op by 144; fix this program [ 1758.105333][T29521] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1758.109268][T29521] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1758.138167][T20651] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1758.138191][T20651] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1758.315399][T29521] usb 3-1: USB disconnect, device number 64 [ 1758.368433][T27653] udevd[27653]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1760.456226][T27672] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 1760.584156][ T1980] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 1760.605554][ T1980] FAULT_INJECTION: forcing a failure. [ 1760.605554][ T1980] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1760.605692][ T1980] CPU: 0 UID: 0 PID: 1980 Comm: syz.4.8800 Tainted: G L syzkaller #0 PREEMPT(full) [ 1760.605764][ T1980] Tainted: [L]=SOFTLOCKUP [ 1760.605803][ T1980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1760.605836][ T1980] Call Trace: [ 1760.605859][ T1980] [ 1760.605888][ T1980] dump_stack_lvl+0xe8/0x150 [ 1760.605990][ T1980] should_fail_ex+0x410/0x560 [ 1760.606081][ T1980] prepare_alloc_pages+0x223/0x600 [ 1760.606176][ T1980] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 1760.606260][ T1980] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1760.606345][ T1980] ? __pfx_policy_nodemask+0x10/0x10 [ 1760.606410][ T1980] ? __kvm_mmu_topup_memory_cache+0x461/0x600 [ 1760.606489][ T1980] ? rcu_is_watching+0x16/0xb0 [ 1760.606570][ T1980] ? __kvm_mmu_topup_memory_cache+0x461/0x600 [ 1760.606705][ T1980] ? trace_kmalloc+0x2a/0xf0 [ 1760.606784][ T1980] alloc_pages_mpol+0x21e/0x390 [ 1760.606895][ T1980] alloc_pages_noprof+0xb1/0x2b0 [ 1760.606980][ T1980] get_free_pages_noprof+0xf/0x80 [ 1760.607053][ T1980] __kvm_mmu_topup_memory_cache+0x252/0x600 [ 1760.607175][ T1980] mmu_topup_memory_caches+0xd6/0x170 [ 1760.607248][ T1980] kvm_mmu_load+0x9d/0x21e0 [ 1760.607314][ T1980] ? __pfx_pic_unlock+0x10/0x10 [ 1760.607409][ T1980] ? pic_update_irq+0x3a5/0x7f0 [ 1760.607504][ T1980] ? kvm_apic_has_interrupt+0x4b1/0x770 [ 1760.607617][ T1980] vcpu_run+0x4f7e/0x7aa0 [ 1760.607804][ T1980] ? update_se+0x90/0x1080 [ 1760.608005][ T1980] ? __pfx_vcpu_run+0x10/0x10 [ 1760.608112][ T1980] ? lock_acquire+0x115/0x350 [ 1760.608219][ T1980] kvm_arch_vcpu_ioctl_run+0xe87/0x19c0 [ 1760.608348][ T1980] ? kvm_arch_vcpu_ioctl_run+0x1f8/0x19c0 [ 1760.608452][ T1980] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 1760.608546][ T1980] kvm_vcpu_ioctl+0xa61/0xfd0 [ 1760.608620][ T1980] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1760.608681][ T1980] ? hook_file_ioctl+0x1f2/0x600 [ 1760.608839][ T1980] ? __fget_files+0x2a/0x420 [ 1760.608906][ T1980] ? __fget_files+0x2a/0x420 [ 1760.608997][ T1980] ? __fget_files+0x3a2/0x420 [ 1760.609072][ T1980] ? __fget_files+0x2a/0x420 [ 1760.609166][ T1980] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1760.609252][ T1980] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1760.609311][ T1980] __se_sys_ioctl+0xfc/0x170 [ 1760.609412][ T1980] do_syscall_64+0x166/0x520 [ 1760.609504][ T1980] ? trace_irq_disable+0x3b/0x140 [ 1760.609566][ T1980] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1760.609628][ T1980] ? clear_bhb_loop+0x70/0xc0 [ 1760.609710][ T1980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1760.609773][ T1980] RIP: 0033:0x7f0b0599e159 [ 1760.609834][ T1980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1760.609887][ T1980] RSP: 002b:00007f0b06830028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1760.609951][ T1980] RAX: ffffffffffffffda RBX: 00007f0b05c25fa0 RCX: 00007f0b0599e159 [ 1760.609994][ T1980] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000c [ 1760.610034][ T1980] RBP: 00007f0b06830090 R08: 0000000000000000 R09: 0000000000000000 [ 1760.610074][ T1980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1760.610108][ T1980] R13: 00007f0b05c26038 R14: 00007f0b05c25fa0 R15: 00007f0b05d4fa48 [ 1760.610202][ T1980] [ 1760.612865][ T1980] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1763.051956][T29501] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1763.219510][T29501] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1763.245947][T29501] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1763.245979][T29501] usb 5-1: Product: syz [ 1763.245990][T29501] usb 5-1: Manufacturer: syz [ 1763.246001][T29501] usb 5-1: SerialNumber: syz [ 1763.517698][ T1993] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8804'. [ 1764.239827][ T1999] Cannot find add_set index 0 as target [ 1764.328704][ T1968] syzkaller0: entered promiscuous mode [ 1764.328732][ T1968] syzkaller0: entered allmulticast mode [ 1764.419223][T29501] rtl8150 5-1:1.0: couldn't reset the device [ 1764.419548][T29501] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 1765.093992][T29521] usb 5-1: USB disconnect, device number 80 [ 1765.402964][ T2019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8811'. [ 1765.561765][T29521] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1765.726366][T29521] usb 6-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 1765.740081][T29521] usb 6-1: config 0 has an invalid descriptor of length 47, skipping remainder of the config [ 1765.740135][T29521] usb 6-1: config 0 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1765.740164][T29521] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1765.740199][T29521] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1765.765406][T29521] usb 6-1: config 0 descriptor?? [ 1766.276024][ T2001] atomic_op ffff8880223141e0 conn xmit_atomic 0000000000000000 [ 1766.303158][T29518] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1766.407577][T29521] usb 6-1: string descriptor 0 read error: -71 [ 1766.425388][T29521] usb 6-1: USB disconnect, device number 13 [ 1766.469696][T29518] usb 5-1: Using ep0 maxpacket: 32 [ 1766.477198][T29518] usb 5-1: New USB device found, idVendor=17cc, idProduct=1915, bcdDevice= 0.40 [ 1766.481546][T29518] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1766.481575][T29518] usb 5-1: Product: ‌ [ 1766.481592][T29518] usb 5-1: Manufacturer: 獼삥溗㬆單渔츶킭䔄薫껀뚁蠗奭苕ᙅ [ 1766.481612][T29518] usb 5-1: SerialNumber: 㪝胉鰓㢩嵜由〘▽웝ƿ癏䬪鐵리㘯塄玜੅㱮뫐賉믇さᵳţ᭞堾珀ᖤ总燺신釞渚탽㽐ᦸ㌝绍怈㩑ẍ⌽㧴ᡯ剻㜣췚ቬ䜿v쳞㱵ﯬ鸑蟛ᣨ짜抔式쫴耗ྺ럱ᔰ쉨ꃧ湳㕙㟒웙⊳쮲ɹ䒡喗匶Ꝿ豍ꋇ昭뵆殒膚鶗쳼ꕕ싃 [ 1766.713292][ T2027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1766.713633][ T2027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1766.839920][ T2034] loop5: detected capacity change from 0 to 7 [ 1766.864061][ T2034] loop5: [ 1766.864083][ T2034] loop5: partition table partially beyond EOD, truncated [ 1768.302630][ T582] Bluetooth: hci2: command 0x0406 tx timeout [ 1769.837140][T21089] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1770.039954][T21089] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1770.116314][T21089] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1770.116395][T21089] usb 6-1: Product: syz [ 1770.116413][T21089] usb 6-1: Manufacturer: syz [ 1770.116428][T21089] usb 6-1: SerialNumber: syz [ 1770.375292][ T2055] netlink: 48 bytes leftover after parsing attributes in process `syz.5.8823'. [ 1771.583127][T21089] rtl8150 6-1:1.0: couldn't reset the device [ 1771.583445][T21089] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 1771.686742][T29518] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1771.687095][T29518] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1771.900701][T29518] usb 6-1: USB disconnect, device number 14 [ 1772.031382][T21089] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 1772.181304][T21089] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1772.182914][T21089] usb 3-1: config 1 has an invalid descriptor of length 253, skipping remainder of the config [ 1772.182943][T21089] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1772.189773][T21089] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1772.189800][T21089] usb 3-1: Product: syz [ 1772.189816][T21089] usb 3-1: Manufacturer: syz [ 1772.189832][T21089] usb 3-1: SerialNumber: syz [ 1772.286452][T21089] usb 3-1: invalid UAC_HEADER (v1) [ 1772.348084][ T2067] bond1: option ad_user_port_key: invalid value (33022) [ 1772.348105][ T2067] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 1772.382621][ T2067] bond1 (unregistering): Released all slaves [ 1772.420487][T21089] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1772.465030][T27653] udevd[27653]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1772.489378][T29499] usb 3-1: USB disconnect, device number 65 [ 1772.634287][ T31] kauditd_printk_skb: 186 callbacks suppressed [ 1772.634308][ T31] audit: type=1326 audit(1791141329.902:25656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2070 comm="syz.3.8829" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91e19e159 code=0x7ffc0000 [ 1772.634554][ T31] audit: type=1326 audit(1791141329.902:25657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2070 comm="syz.3.8829" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91e19e159 code=0x7ffc0000 [ 1772.636826][ T31] audit: type=1326 audit(1791141329.902:25658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2070 comm="syz.3.8829" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fe91e19e159 code=0x7ffc0000 [ 1772.636928][ T31] audit: type=1326 audit(1791141329.902:25659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2070 comm="syz.3.8829" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91e19e159 code=0x7ffc0000 [ 1772.637079][ T31] audit: type=1326 audit(1791141329.902:25660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2070 comm="syz.3.8829" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91e19e159 code=0x7ffc0000 [ 1772.637876][ T31] audit: type=1326 audit(1791141329.902:25661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2070 comm="syz.3.8829" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7fe91e19e159 code=0x7ffc0000 [ 1772.638001][ T31] audit: type=1326 audit(1791141329.902:25662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2070 comm="syz.3.8829" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91e19e159 code=0x7ffc0000 [ 1772.638124][ T31] audit: type=1326 audit(1791141329.902:25663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2070 comm="syz.3.8829" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91e19e159 code=0x7ffc0000 [ 1772.638737][ T31] audit: type=1326 audit(1791141329.902:25664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2070 comm="syz.3.8829" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe91e19e159 code=0x7ffc0000 [ 1772.639032][ T31] audit: type=1326 audit(1791141329.902:25665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2070 comm="syz.3.8829" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91e19e159 code=0x7ffc0000 [ 1772.957284][T29518] usb 5-1: USB disconnect, device number 81 [ 1773.290782][ T2080] loop5: detected capacity change from 0 to 7 [ 1773.304275][ T2080] loop5: [ 1773.304295][ T2080] loop5: partition table partially beyond EOD, truncated [ 1773.540774][T29501] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1773.701816][T29501] usb 6-1: Using ep0 maxpacket: 16 [ 1773.705202][T29501] usb 6-1: unable to get BOS descriptor set [ 1773.707675][T29501] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1773.735460][T29501] usb 6-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 32 [ 1773.735493][T29501] usb 6-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1773.735522][T29501] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1773.779062][T29501] usb 6-1: string descriptor 0 read error: -22 [ 1773.779233][T29501] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1773.781120][T29518] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 1773.830625][T21089] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1773.838793][ T2076] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1773.910692][T29518] usb 4-1: device descriptor read/64, error -71 [ 1773.981670][T21089] usb 5-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 1773.986951][T21089] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1773.986982][T21089] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1773.987030][T21089] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1773.987076][T21089] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1774.060998][T21089] ims_pcu 5-1:1.0: Missing CDC union descriptor [ 1774.061046][T21089] ims_pcu 5-1:1.0: probe with driver ims_pcu failed with error -22 [ 1774.161404][T29518] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 1774.265712][ T2090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1774.267321][ T2090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1774.290596][T29518] usb 4-1: device descriptor read/64, error -71 [ 1774.325900][ T2090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1774.330459][ T2090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1774.401256][T29518] usb usb4-port1: attempt power cycle [ 1774.740835][T29518] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 1774.762805][T29518] usb 4-1: device descriptor read/8, error -71 [ 1775.002668][T29518] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 1775.022545][T29518] usb 4-1: device descriptor read/8, error -71 [ 1775.132251][T29518] usb usb4-port1: unable to enumerate USB device [ 1775.693880][T29518] usb 6-1: USB disconnect, device number 15 [ 1776.044417][T21098] usb 3-1: new low-speed USB device number 66 using dummy_hcd [ 1776.192122][T21098] usb 3-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 1776.194873][T21098] usb 3-1: config 0 has an invalid descriptor of length 156, skipping remainder of the config [ 1776.194920][T21098] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1776.194959][T21098] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1776.222274][T21098] usb 3-1: config 0 descriptor?? [ 1776.362207][T29518] usb 5-1: USB disconnect, device number 82 [ 1776.630998][T21089] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1776.720101][ T2122] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1776.800569][T21089] usb 6-1: Using ep0 maxpacket: 8 [ 1776.801371][T21089] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1776.802947][T21089] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1776.802973][T21089] usb 6-1: config 0 has no interface number 0 [ 1776.803016][T21089] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1776.803063][T21089] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1776.860703][T29518] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1776.869188][T21089] usb 6-1: config 0 descriptor?? [ 1776.881442][T21089] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1777.012474][T29518] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1777.013830][T29518] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 1777.013850][T29518] usb 5-1: config 1 has no interface number 0 [ 1777.013879][T29518] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1777.013899][T29518] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1777.013918][T29518] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1777.013952][T29518] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1777.013970][T29518] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1777.017075][T29518] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1777.017103][T29518] usb 5-1: Product: syz [ 1777.017149][T29518] usb 5-1: Manufacturer: syz [ 1777.017175][T29518] usb 5-1: SerialNumber: syz [ 1777.053126][ T2116] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1777.125386][T29518] usb 5-1: Error in usbnet_get_endpoints (-22) [ 1777.783303][T21089] usb 6-1: USB disconnect, device number 16 [ 1778.300690][T21089] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 1778.320643][T26325] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1778.451400][T21089] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1778.454065][T21089] usb 6-1: config 1 has an invalid descriptor of length 253, skipping remainder of the config [ 1778.454096][T21089] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1778.456751][T21089] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1778.456793][T21089] usb 6-1: Product: syz [ 1778.456807][T21089] usb 6-1: Manufacturer: syz [ 1778.456820][T21089] usb 6-1: SerialNumber: syz [ 1778.513484][T26325] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1778.525552][T26325] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1778.525582][T26325] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1778.528617][T26325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 1778.528645][T26325] usb 4-1: SerialNumber: syz [ 1778.530094][T21089] usb 6-1: invalid UAC_HEADER (v1) [ 1778.638650][T21089] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1778.698010][T27653] udevd[27653]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1778.732841][T29521] usb 6-1: USB disconnect, device number 17 [ 1778.752181][T21098] usb 3-1: string descriptor 0 read error: -71 [ 1778.770589][T21098] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1778.780163][T21098] usb 3-1: USB disconnect, device number 66 [ 1778.793769][ T2150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1778.816800][ T2150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1779.273640][ T2173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8858'. [ 1779.569918][ T31] kauditd_printk_skb: 107 callbacks suppressed [ 1779.569940][ T31] audit: type=1326 audit(1791141336.832:25773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2179 comm="syz.5.8861" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbc7bd9e159 code=0x0 [ 1779.603622][T29501] usb 5-1: USB disconnect, device number 83 [ 1779.940712][T21098] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1780.091367][T21098] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1780.092983][T21098] usb 6-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1780.093018][T21098] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1780.093046][T21098] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1780.096293][T21098] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1780.096323][T21098] usb 6-1: Product: syz [ 1780.096341][T21098] usb 6-1: Manufacturer: syz [ 1780.096358][T21098] usb 6-1: SerialNumber: syz [ 1780.111091][T29521] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1780.115038][T21098] usb 6-1: config 0 descriptor?? [ 1780.182818][T21098] usb 6-1: selecting invalid altsetting 0 [ 1780.301467][T29521] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1780.308949][T29521] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1780.308986][T29521] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1780.309028][T29521] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1780.351585][T29521] usb 2-1: config 0 descriptor?? [ 1781.143505][T26325] usb 4-1: invalid UAC_HEADER (v1) [ 1781.277191][ T31] audit: type=1326 audit(1791141338.542:25774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2205 comm="syz.3.8865" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91e19e159 code=0x7ffc0000 [ 1781.277259][ T31] audit: type=1326 audit(1791141338.542:25775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2205 comm="syz.3.8865" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91e19e159 code=0x7ffc0000 [ 1781.277314][ T31] audit: type=1326 audit(1791141338.542:25776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2205 comm="syz.3.8865" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91e19e159 code=0x7ffc0000 [ 1781.277370][ T31] audit: type=1326 audit(1791141338.542:25778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2205 comm="syz.3.8865" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91e19e159 code=0x7ffc0000 [ 1781.277421][ T31] audit: type=1326 audit(1791141338.542:25777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2205 comm="syz.3.8865" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fe91e19e159 code=0x7ffc0000 [ 1781.277475][ T31] audit: type=1326 audit(1791141338.542:25779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2205 comm="syz.3.8865" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91e19e159 code=0x7ffc0000 [ 1781.277532][ T31] audit: type=1326 audit(1791141338.542:25781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2205 comm="syz.3.8865" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91e19e159 code=0x7ffc0000 [ 1781.277586][ T31] audit: type=1326 audit(1791141338.542:25780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2205 comm="syz.3.8865" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91e19e159 code=0x7ffc0000 [ 1781.280350][ T31] audit: type=1326 audit(1791141338.542:25782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2205 comm="syz.3.8865" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe91e19e159 code=0x7ffc0000 [ 1781.555759][T26325] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1781.572207][ T5692] kworker/0:4 (5692) used greatest stack depth: 17504 bytes left [ 1781.596505][T26325] usb 4-1: USB disconnect, device number 44 [ 1781.700157][T27653] udevd[27653]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1782.664337][T26325] usb 6-1: USB disconnect, device number 18 [ 1782.949222][ T2215] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8868'. [ 1782.950264][ T2215] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8868'. [ 1782.997850][ T2215] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8868'. [ 1782.998434][ T2215] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1783.049529][T29521] usbhid 2-1:0.0: can't add hid device: -71 [ 1783.052834][T29521] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1783.089199][T29521] usb 2-1: USB disconnect, device number 61 [ 1783.190190][ T2226] bridge0: port 2(bridge_slave_1) entered disabled state [ 1783.191273][ T2226] bridge0: port 1(bridge_slave_0) entered disabled state [ 1783.214725][ T2226] bridge0: entered allmulticast mode [ 1783.380722][ T10] usb 3-1: new full-speed USB device number 67 using dummy_hcd [ 1783.541833][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1783.543036][ T10] usb 3-1: config 1 has an invalid descriptor of length 253, skipping remainder of the config [ 1783.543064][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1783.545434][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1783.545462][ T10] usb 3-1: Product: syz [ 1783.545479][ T10] usb 3-1: Manufacturer: syz [ 1783.545495][ T10] usb 3-1: SerialNumber: syz [ 1783.550368][ T2234] netlink: 'syz.3.8874': attribute type 13 has an invalid length. [ 1783.671438][ T10] usb 3-1: invalid UAC_HEADER (v1) [ 1783.854611][ T10] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1783.918791][T27653] udevd[27653]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1783.941982][ T10] usb 3-1: USB disconnect, device number 67 [ 1784.218448][ T2233] ip_tables: iptables: counters copy to user failed while replacing table [ 1785.645074][ T2260] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1785.822796][ T2242] atomic_op ffff8880340559e0 conn xmit_atomic 0000000000000000 [ 1786.249971][ T2274] netlink: 'syz.5.8887': attribute type 13 has an invalid length. [ 1786.283128][ T2274] vxlan2: entered promiscuous mode [ 1786.283157][ T2274] vxlan2: entered allmulticast mode [ 1786.456695][ T2199] Set syz0 is full, maxelem 65536 reached [ 1786.466935][T29518] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1786.621356][T29518] usb 4-1: Using ep0 maxpacket: 16 [ 1786.622091][T29518] usb 4-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 1786.623146][T29518] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1786.623178][T29518] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1786.623203][T29518] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1786.623250][T29518] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1786.627752][T29518] usb 4-1: config 0 descriptor?? [ 1786.751755][T29501] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 1786.755163][ T2289] bond2: option ad_user_port_key: invalid value (33022) [ 1786.755188][ T2289] bond2: option ad_user_port_key: allowed values 0 - 1023 [ 1786.772287][ T2289] bond2 (unregistering): Released all slaves [ 1786.910256][T29501] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1786.921748][T29501] usb 3-1: config 1 has an invalid descriptor of length 253, skipping remainder of the config [ 1786.921866][T29501] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1786.935742][T29501] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1786.935783][T29501] usb 3-1: Product: syz [ 1786.935834][T29501] usb 3-1: Manufacturer: syz [ 1786.935880][T29501] usb 3-1: SerialNumber: syz [ 1787.007256][T29501] usb 3-1: invalid UAC_HEADER (v1) [ 1787.166179][T29501] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1787.217285][T29501] usb 3-1: USB disconnect, device number 68 [ 1787.263124][T27653] udevd[27653]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1787.303042][T29518] wacom 0003:056A:0045.004E: Unknown device_type for 'HID 056a:0045'. Assuming pen. [ 1787.326459][T29518] wacom 0003:056A:0045.004E: hidraw0: USB HID v0.08 Joystick [HID 056a:0045] on usb-dummy_hcd.3-1/input0 [ 1787.362041][T29518] input: Wacom Intuos2 12x18 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0045.004E/input/input110 [ 1787.493334][T29501] usb 4-1: USB disconnect, device number 45 [ 1787.650615][ T2301] fido_id[2301]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 1787.814331][ T2286] atomic_op ffff88807c2949e0 conn xmit_atomic 0000000000000000 [ 1787.897649][ T2311] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1787.979911][ T2295] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8895'. [ 1788.100667][T29501] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1788.250614][T29501] usb 2-1: Using ep0 maxpacket: 16 [ 1788.251395][T29501] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1788.258259][ T2318] JFS: charset not found [ 1788.260556][T29501] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1788.260583][T29501] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1788.314958][T29501] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1788.314990][T29501] usb 2-1: Product: syz [ 1788.315007][T29501] usb 2-1: Manufacturer: syz [ 1788.315024][T29501] usb 2-1: SerialNumber: syz [ 1788.374996][T29501] usb 2-1: 0:2 : does not exist [ 1788.741422][ T2309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1788.741982][ T2309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1788.767900][T27672] Bluetooth: hci0: command 0x0406 tx timeout [ 1788.792911][ T2309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1788.793464][ T2309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1788.835205][ T2309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1788.853595][ T2309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1788.919379][ T2309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1788.919872][ T2309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1788.957981][ T2334] netlink: 'syz.4.8904': attribute type 13 has an invalid length. [ 1789.520870][T29518] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 1789.684892][T29518] usb 6-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 1789.688734][T29518] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1789.688779][T29518] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1789.733610][T29518] usb 6-1: config 0 descriptor?? [ 1789.936624][ T2351] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8910'. [ 1790.080811][T29521] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 1790.234747][T29521] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1790.237292][T29521] usb 3-1: config 1 has an invalid descriptor of length 253, skipping remainder of the config [ 1790.237320][T29521] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1790.267743][T29521] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1790.267889][T29521] usb 3-1: Product: syz [ 1790.267938][T29521] usb 3-1: Manufacturer: syz [ 1790.268041][T29521] usb 3-1: SerialNumber: syz [ 1790.541311][T21098] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1790.668702][T29518] usbhid 6-1:0.0: can't add hid device: -71 [ 1790.668816][T29518] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1790.697534][T29518] usb 6-1: USB disconnect, device number 19 [ 1790.721734][T21098] usb 4-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=2d.d8 [ 1790.725645][T21098] usb 4-1: config 219 has an invalid descriptor of length 0, skipping remainder of the config [ 1790.758977][T21098] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1790.759010][T21098] usb 4-1: Product: syz [ 1790.759022][T21098] usb 4-1: Manufacturer: syz [ 1790.759033][T21098] usb 4-1: SerialNumber: syz [ 1791.025994][ T2356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1791.028300][ T2356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1791.180347][ T2357] lo: entered promiscuous mode [ 1791.187471][ T2357] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1791.804076][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.804157][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.999246][ T2371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1792.714824][ T2375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1792.740093][ T2375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1792.883441][ T2375] ip_tables: iptables: counters copy to user failed while replacing table [ 1793.188100][T21098] usbsevseg 4-1:219.0: USB 7 Segment device now attached [ 1793.222083][T21098] usb 4-1: USB disconnect, device number 46 [ 1793.229626][T21098] usbsevseg 4-1:219.0: USB 7 Segment now disconnected [ 1793.389671][ T2354] atomic_op ffff8880616311e0 conn xmit_atomic 0000000000000000 [ 1793.415663][T29501] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1793.539962][T29521] usb 3-1: invalid UAC_HEADER (v1) [ 1793.826792][T29521] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1793.849044][T29521] usb 3-1: USB disconnect, device number 69 [ 1793.949374][T27625] udevd[27625]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1794.201536][T29521] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 1794.330945][T29521] usb 3-1: device descriptor read/64, error -71 [ 1794.570892][T29521] usb 3-1: new full-speed USB device number 71 using dummy_hcd [ 1794.702350][T29521] usb 3-1: device descriptor read/64, error -71 [ 1794.812563][T29521] usb usb3-port1: attempt power cycle [ 1794.845830][ T10] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 1794.907560][ T2405] bond1: option ad_user_port_key: invalid value (33022) [ 1794.907589][ T2405] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 1794.935321][ T2405] bond1 (unregistering): Released all slaves [ 1794.993838][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1794.997256][ T10] usb 4-1: config 1 has an invalid descriptor of length 253, skipping remainder of the config [ 1794.997286][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1795.039777][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1795.039809][ T10] usb 4-1: Product: syz [ 1795.039826][ T10] usb 4-1: Manufacturer: syz [ 1795.039843][ T10] usb 4-1: SerialNumber: syz [ 1795.087133][ T10] usb 4-1: invalid UAC_HEADER (v1) [ 1795.183430][T29521] usb 3-1: new full-speed USB device number 72 using dummy_hcd [ 1795.218022][T29521] usb 3-1: device descriptor read/8, error -71 [ 1795.241031][ T2410] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8926'. [ 1795.347662][ T10] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1795.360187][ T10] usb 4-1: USB disconnect, device number 47 [ 1795.441206][T27653] udevd[27653]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1795.451382][T29521] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 1795.479887][T29521] usb 3-1: device descriptor read/8, error -71 [ 1795.582128][T29521] usb usb3-port1: unable to enumerate USB device [ 1796.086282][ T2434] netlink: 'syz.4.8931': attribute type 13 has an invalid length. [ 1796.492374][ T2450] syz_tun: entered allmulticast mode [ 1796.802950][ T2457] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer. [ 1797.045025][ T2468] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1797.186655][ T10] usb 2-1: USB disconnect, device number 62 [ 1797.751659][ T10] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1797.888018][ T2472] netlink: 168 bytes leftover after parsing attributes in process `syz.5.8941'. [ 1797.905146][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 1797.905941][ T10] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1797.910844][ T10] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1797.910871][ T10] usb 2-1: config 179 has no interface number 0 [ 1797.910914][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1797.910943][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1797.910973][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1797.911063][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1797.911145][ T10] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1797.911293][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1797.988906][ T2470] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1798.187874][ T2474] netlink: 5 bytes leftover after parsing attributes in process `syz.5.8943'. [ 1798.419365][ T2474] netdevsim netdevsim5: Direct firmware load for X failed with error -2 [ 1798.419520][ T2474] netdevsim netdevsim5: Falling back to sysfs fallback for: X [ 1798.629779][T29501] usb 2-1: USB disconnect, device number 63 [ 1798.629890][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1798.629942][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1798.755078][ T2483] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1799.020675][T21098] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1799.172157][T21098] usb 5-1: Using ep0 maxpacket: 16 [ 1799.179388][T21098] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 1799.198677][T21098] usb 5-1: config 107 has an invalid descriptor of length 0, skipping remainder of the config [ 1799.198730][T21098] usb 5-1: config 107 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 1799.198758][T21098] usb 5-1: config 107 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 1799.198783][T21098] usb 5-1: config 107 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1799.256400][T21098] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1799.256422][T21098] usb 5-1: Product: syz [ 1799.256434][T21098] usb 5-1: Manufacturer: syz [ 1799.256445][T21098] usb 5-1: SerialNumber: syz [ 1799.750245][ T2504] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1800.004456][ T2500] could not allocate digest TFM handle sha512-ce [ 1800.469469][ T2516] bond2: option ad_user_port_key: invalid value (33022) [ 1800.469500][ T2516] bond2: option ad_user_port_key: allowed values 0 - 1023 [ 1800.490066][ T2516] bond2 (unregistering): Released all slaves [ 1800.527135][T27672] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1800.553489][T27672] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1800.554807][T27672] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1800.559253][T27672] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1800.562149][T27672] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1801.279065][T29501] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1801.343176][T21098] xbox_remote_probe: Unexpected endpoint_in [ 1801.367987][T21098] usb 5-1: USB disconnect, device number 84 [ 1801.420964][ T10] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1801.427552][T29501] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1801.446089][T29501] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1801.446117][T29501] usb 2-1: Product: syz [ 1801.446132][T29501] usb 2-1: Manufacturer: syz [ 1801.446149][T29501] usb 2-1: SerialNumber: syz [ 1801.591737][ T10] usb 4-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00 [ 1801.593042][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1801.593095][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1801.593140][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1802.682627][ T582] Bluetooth: hci3: command tx timeout [ 1802.720723][T29501] rtl8150 2-1:1.0: couldn't reset the device [ 1802.721007][T29501] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 1802.734244][ T2570] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1803.436249][ T2521] bridge0: port 1(bridge_slave_0) entered blocking state [ 1803.436357][ T2521] bridge0: port 1(bridge_slave_0) entered disabled state [ 1803.436519][ T2521] bridge_slave_0: entered allmulticast mode [ 1803.438389][ T2521] bridge_slave_0: entered promiscuous mode [ 1803.445426][ T2521] bridge0: port 2(bridge_slave_1) entered blocking state [ 1803.445567][ T2521] bridge0: port 2(bridge_slave_1) entered disabled state [ 1803.445732][ T2521] bridge_slave_1: entered allmulticast mode [ 1803.447542][ T2521] bridge_slave_1: entered promiscuous mode [ 1803.629305][ T2579] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8963'. [ 1803.802075][T29518] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1803.941139][T29518] usb 5-1: device descriptor read/64, error -71 [ 1804.002523][T21098] ================================================================== [ 1804.002542][T21098] BUG: KASAN: slab-use-after-free in ms_read_bytes+0x772/0xc70 [ 1804.002652][T21098] Write of size 1 at addr ffff8880777a1079 by task kworker/0:2/21098 [ 1804.002673][T21098] [ 1804.002688][T21098] CPU: 0 UID: 0 PID: 21098 Comm: kworker/0:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 1804.002718][T21098] Tainted: [L]=SOFTLOCKUP [ 1804.002727][T21098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1804.002745][T21098] Workqueue: events rtsx_usb_ms_handle_req [ 1804.002777][T21098] Call Trace: [ 1804.002786][T21098] [ 1804.002804][T21098] dump_stack_lvl+0xe8/0x150 [ 1804.002837][T21098] print_address_description+0x55/0x1e0 [ 1804.002870][T21098] ? ms_read_bytes+0x772/0xc70 [ 1804.002892][T21098] print_report+0x58/0x70 [ 1804.002911][T21098] kasan_report+0x117/0x150 [ 1804.002934][T21098] ? ms_read_bytes+0x772/0xc70 [ 1804.002958][T21098] ms_read_bytes+0x772/0xc70 [ 1804.002982][T21098] ? __pfx_ms_read_bytes+0x10/0x10 [ 1804.003003][T21098] ? rtsx_usb_get_card_status+0x641/0xa30 [ 1804.003078][T21098] rtsx_usb_ms_handle_req+0x345/0x1900 [ 1804.003107][T21098] ? __pfx_rtsx_usb_ms_handle_req+0x10/0x10 [ 1804.003131][T21098] ? rcu_is_watching+0x16/0xb0 [ 1804.003151][T21098] ? process_scheduled_works+0x97a/0x1630 [ 1804.003172][T21098] process_scheduled_works+0xc3d/0x1630 [ 1804.003236][T21098] ? __pfx_process_scheduled_works+0x10/0x10 [ 1804.003268][T21098] ? assign_work+0x3cf/0x5d0 [ 1804.003298][T21098] worker_thread+0xa47/0xfb0 [ 1804.003336][T21098] ? __kthread_parkme+0x71/0x1f0 [ 1804.003362][T21098] kthread+0x38b/0x480 [ 1804.003377][T21098] ? __pfx_worker_thread+0x10/0x10 [ 1804.003398][T21098] ? __pfx_kthread+0x10/0x10 [ 1804.003414][T21098] ret_from_fork+0x514/0xb70 [ 1804.003430][T21098] ? __pfx_ret_from_fork+0x10/0x10 [ 1804.003444][T21098] ? __switch_to+0xc89/0x1420 [ 1804.003468][T21098] ? __pfx_kthread+0x10/0x10 [ 1804.003483][T21098] ret_from_fork_asm+0x1a/0x30 [ 1804.003514][T21098] [ 1804.003520][T21098] [ 1804.003524][T21098] Allocated by task 20652: [ 1804.003538][T21098] kasan_save_track+0x3e/0x80 [ 1804.003555][T21098] __kasan_kmalloc+0x93/0xb0 [ 1804.003572][T21098] __kmalloc_cache_noprof+0x321/0x600 [ 1804.003587][T21098] memstick_check+0x1a7/0x1250 [ 1804.003605][T21098] process_scheduled_works+0xc3d/0x1630 [ 1804.003623][T21098] worker_thread+0xa47/0xfb0 [ 1804.003642][T21098] kthread+0x38b/0x480 [ 1804.003654][T21098] ret_from_fork+0x514/0xb70 [ 1804.003665][T21098] ret_from_fork_asm+0x1a/0x30 [ 1804.003687][T21098] [ 1804.003690][T21098] Freed by task 20652: [ 1804.003697][T21098] kasan_save_track+0x3e/0x80 [ 1804.003713][T21098] kasan_save_free_info+0x40/0x50 [ 1804.003736][T21098] __kasan_slab_free+0x5c/0x80 [ 1804.003753][T21098] kfree+0x1c5/0x650 [ 1804.003764][T21098] memstick_check+0x7b6/0x1250 [ 1804.003781][T21098] process_scheduled_works+0xc3d/0x1630 [ 1804.003828][T21098] worker_thread+0xa47/0xfb0 [ 1804.003854][T21098] kthread+0x38b/0x480 [ 1804.003872][T21098] ret_from_fork+0x514/0xb70 [ 1804.003889][T21098] ret_from_fork_asm+0x1a/0x30 [ 1804.003920][T21098] [ 1804.003926][T21098] The buggy address belongs to the object at ffff8880777a1000 [ 1804.003926][T21098] which belongs to the cache kmalloc-2k of size 2048 [ 1804.003945][T21098] The buggy address is located 121 bytes inside of [ 1804.003945][T21098] freed 2048-byte region [ffff8880777a1000, ffff8880777a1800) [ 1804.003968][T21098] [ 1804.003974][T21098] The buggy address belongs to the physical page: [ 1804.003986][T21098] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880777a2000 pfn:0x777a0 [ 1804.004007][T21098] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1804.004025][T21098] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 1804.004046][T21098] page_type: f5(slab) [ 1804.004066][T21098] raw: 00fff00000000240 ffff88801b042000 ffffea0000d22210 ffffea0000996c10 [ 1804.004085][T21098] raw: ffff8880777a2000 0000000000080006 00000000f5000000 0000000000000000 [ 1804.004105][T21098] head: 00fff00000000240 ffff88801b042000 ffffea0000d22210 ffffea0000996c10 [ 1804.004124][T21098] head: ffff8880777a2000 0000000000080006 00000000f5000000 0000000000000000 [ 1804.004144][T21098] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 1804.004163][T21098] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1804.004175][T21098] page dumped because: kasan: bad access detected [ 1804.004193][T21098] page_owner tracks the page as allocated [ 1804.004201][T21098] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5692, tgid 5692 (kworker/0:4), ts 95201416730 [ 1804.004235][T21098] post_alloc_hook+0x1f9/0x250 [ 1804.004254][T21098] get_page_from_freelist+0x2209/0x2280 [ 1804.004276][T21098] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 1804.004298][T21098] allocate_slab+0x7d/0x620 [ 1804.004326][T21098] refill_objects+0x2d5/0x350 [ 1804.004368][T21098] __pcs_replace_empty_main+0x2c8/0x6c0 [ 1804.004396][T21098] __kmalloc_node_track_caller_noprof+0x548/0x720 [ 1804.004437][T21098] __alloc_skb+0x2c1/0x7a0 [ 1804.004464][T21098] mld_newpack+0x165/0xcb0 [ 1804.004536][T21098] add_grec+0x119f/0x19d0 [ 1804.004562][T21098] mld_send_initial_cr+0x288/0x550 [ 1804.004585][T21098] mld_dad_work+0x3d/0x480 [ 1804.004608][T21098] process_scheduled_works+0xc3d/0x1630 [ 1804.004635][T21098] worker_thread+0xa47/0xfb0 [ 1804.004661][T21098] kthread+0x38b/0x480 [ 1804.004697][T21098] ret_from_fork+0x514/0xb70 [ 1804.004716][T21098] page last free pid 9 tgid 9 ts 94893438601 stack trace: [ 1804.004732][T21098] __free_frozen_pages+0xc93/0xd90 [ 1804.004752][T21098] __slab_free+0x274/0x2c0 [ 1804.004773][T21098] qlist_free_all+0x99/0x100 [ 1804.004793][T21098] kasan_quarantine_reduce+0x148/0x160 [ 1804.004824][T21098] __kasan_slab_alloc+0x22/0x80 [ 1804.004849][T21098] __kmalloc_cache_noprof+0x29f/0x600 [ 1804.004871][T21098] nsim_fib_event+0xf37/0xa3a0 [ 1804.004933][T21098] nsim_fib_event_work+0x244/0x3b0 [ 1804.004953][T21098] process_scheduled_works+0xc3d/0x1630 [ 1804.004979][T21098] worker_thread+0xa47/0xfb0 [ 1804.005006][T21098] kthread+0x38b/0x480 [ 1804.005023][T21098] ret_from_fork+0x514/0xb70 [ 1804.005041][T21098] ret_from_fork_asm+0x1a/0x30 [ 1804.005072][T21098] [ 1804.005078][T21098] Memory state around the buggy address: [ 1804.005090][T21098] ffff8880777a0f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1804.005106][T21098] ffff8880777a0f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1804.005122][T21098] >ffff8880777a1000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1804.005134][T21098] ^ [ 1804.005148][T21098] ffff8880777a1080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1804.005163][T21098] ffff8880777a1100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1804.005175][T21098] ================================================================== [ 1804.007996][T21098] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1804.680235][T21098] CPU: 0 UID: 0 PID: 21098 Comm: kworker/0:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 1804.691312][T21098] Tainted: [L]=SOFTLOCKUP [ 1804.695651][T21098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1804.705708][T21098] Workqueue: events rtsx_usb_ms_handle_req [ 1804.711543][T21098] Call Trace: [ 1804.714827][T21098] [ 1804.717781][T21098] vpanic+0x56d/0xa60 [ 1804.721781][T21098] ? __pfx_vpanic+0x10/0x10 [ 1804.726309][T21098] panic+0xc5/0xd0 [ 1804.730059][T21098] ? __pfx_panic+0x10/0x10 [ 1804.734504][T21098] ? preempt_schedule_thunk+0x16/0x40 [ 1804.739891][T21098] ? ms_read_bytes+0x772/0xc70 [ 1804.744670][T21098] ? preempt_schedule_thunk+0x16/0x40 [ 1804.750065][T21098] ? ms_read_bytes+0x772/0xc70 [ 1804.754874][T21098] check_panic_on_warn+0x89/0xb0 [ 1804.759841][T21098] ? ms_read_bytes+0x772/0xc70 [ 1804.764617][T21098] end_report+0x73/0x170 [ 1804.768875][T21098] ? ms_read_bytes+0x772/0xc70 [ 1804.773668][T21098] kasan_report+0x128/0x150 [ 1804.778182][T21098] ? ms_read_bytes+0x772/0xc70 [ 1804.782962][T21098] ms_read_bytes+0x772/0xc70 [ 1804.787570][T21098] ? __pfx_ms_read_bytes+0x10/0x10 [ 1804.792687][T21098] ? rtsx_usb_get_card_status+0x641/0xa30 [ 1804.798423][T21098] rtsx_usb_ms_handle_req+0x345/0x1900 [ 1804.803915][T21098] ? __pfx_rtsx_usb_ms_handle_req+0x10/0x10 [ 1804.809817][T21098] ? rcu_is_watching+0x16/0xb0 [ 1804.814605][T21098] ? process_scheduled_works+0x97a/0x1630 [ 1804.820331][T21098] process_scheduled_works+0xc3d/0x1630 [ 1804.825920][T21098] ? __pfx_process_scheduled_works+0x10/0x10 [ 1804.831917][T21098] ? assign_work+0x3cf/0x5d0 [ 1804.836522][T21098] worker_thread+0xa47/0xfb0 [ 1804.841133][T21098] ? __kthread_parkme+0x71/0x1f0 [ 1804.846087][T21098] kthread+0x38b/0x480 [ 1804.850214][T21098] ? __pfx_worker_thread+0x10/0x10 [ 1804.855359][T21098] ? __pfx_kthread+0x10/0x10 [ 1804.859962][T21098] ret_from_fork+0x514/0xb70 [ 1804.864557][T21098] ? __pfx_ret_from_fork+0x10/0x10 [ 1804.869674][T21098] ? __switch_to+0xc89/0x1420 [ 1804.874362][T21098] ? __pfx_kthread+0x10/0x10 [ 1804.878957][T21098] ret_from_fork_asm+0x1a/0x30 [ 1804.883754][T21098] [ 1804.886957][T21098] Kernel Offset: disabled [ 1804.891294][T21098] Rebooting in 86400 seconds..