last executing test programs: 7m4.829755334s ago: executing program 2 (id=1297): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000240)={'wg1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000180083ad0400000000000000020000000000fe020c00000008000400", @ANYRES32=r1], 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x300, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000180083ad040000000000000002fe00000000fe020c000c"], 0x24}}, 0x0) 7m4.442831095s ago: executing program 2 (id=1299): socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000000)) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4002004) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x4}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x2c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x24000000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x2f, 0x8, 0x8, 0x80000001, 0x28, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback, 0x7, 0x8, 0x8, 0x7}}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}, {0xfff2, 0x7}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001340)=@deltfilter={0x2c, 0x2d, 0x1, 0x78bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r10, {0xb, 0xfff2}, {0xfff2, 0xffff}, {0x0, 0xf}}, [@TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x2c}}, 0x24004810) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x7f673625695f403, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000240)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0xde, &(0x7f0000000300)=[{}, {}], 0x10, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x6b, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000740)=ANY=[@ANYBLOB="34010000", @ANYRES16=r6, @ANYBLOB="080026bd7000ffdbdf25190000001c00018008000100", @ANYRES32=r7, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f7465616d000000140002007665746830000000000000000000000018000180140002006e7230000000000000000000000000000c00018008000100", @ANYRES32=r10, @ANYBLOB="1800018014000200687372300000000000000000000000001400018008000100", @ANYRES32=r11, @ANYBLOB="080003000200000018000180140002007465616d5f736c6176655f300000000060000180080003000000000008000300010000001400020069705f7674693000000000000000000014000200697036677265300000000000000000001400020074756e6c300000000000000000000000080003000100000008000100", @ANYRES32=0x0, @ANYBLOB], 0x134}, 0x1, 0x0, 0x0, 0x4000050}, 0x8081) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) 7m2.667037183s ago: executing program 2 (id=1305): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfe, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) (async, rerun: 64) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) (async, rerun: 64) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x78201) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000180), &(0x7f00000001c0)=0x8) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x8, [0x0, 0x0, 0x0, 0x100, 0x5, 0xfffffffc, 0x0, 0x2]}}) (async) prctl$PR_SET_SECCOMP(0x3d, 0x0, 0x0) mknod$loop(&(0x7f0000000400)='./file0\x00', 0xfef, 0x0) (async) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) (async) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) (async) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0xafe6) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) (async) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000080)=0x1) 7m2.538438863s ago: executing program 2 (id=1306): prctl$PR_SCHED_CORE(0x3e, 0x2000001, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x8, 0x3, 0x0, 0x6, 0x1, 0xfffffe0000000001, 0x2000fa0e, 0xffffffff}, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x14) mremap(&(0x7f0000289000/0x3000)=nil, 0x3000, 0x800000, 0x2, &(0x7f0000130000/0x800000)=nil) r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="12012000f1048108cd060202d4c34e01000109021b1901000000d40904150001da40df000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000340)=@x={0x94, 0x1, "d5e63300"}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) socket(0x0, 0x4, 0x5) r1 = syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x89901) r3 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$bt_hci(r3, 0x0, 0x21, &(0x7f0000000200)=""/3, &(0x7f0000000280)=0x3) move_mount(r2, &(0x7f0000000140)='.\x00', r1, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0\x00') r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r5 = syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd018009050202100202000009"], 0x0) syz_usb_control_io$uac1(r5, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="001e060003"]}, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000026c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r6, 0xc0bc5351, &(0x7f0000002700)={0x10, 0x1, 'client1\x00', 0x2, "feebcfb4d1975c75", "b4cd259950cde1279c49e630ad8e9faee35e6b8354d2dd41e644e6fe8cb478b5", 0x4, 0x400}) syz_usb_control_io$uac1(r5, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0/../file0/../file0/../file0/file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') 6m58.649111172s ago: executing program 2 (id=1330): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x63, 0x86, 0x35, 0x10, 0xcf3, 0x1010, 0x3687, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x4, 0x50, 0x0, "", [{{0x9, 0x4, 0x7c, 0xb, 0x0, 0xa4, 0xca, 0xd4}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x19, &(0x7f0000000100)={0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x6, 0x2, 0x3, 0x0, 0x3, [0x3f30, 0xee]}]}}) syz_usb_disconnect(r0) syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x4, 0xf0, 0xb7, {0x8, 0xb, 0x2, 0x0, 0x1, 0x25, 0x30, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x1, 0xa, 0xa3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x5, 0xe, 0x0, {0xa, 0x25, 0x25, 0x1, 0x9, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x1, 0xb5, 0x3, {0xa, 0x25, 0x25, 0x81, 0xf, 0x6}}}}}}}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@allocspi={0x104, 0x16, 0x1, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private2, 0x4e23, 0x0, 0x0, 0x1, 0x0, 0xa0, 0x0, 0x2c, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x10, 0x0}, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0xfffffffffffffffe}, {0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x4}, 0x0, 0x0, 0xa, 0x3, 0xfe}, 0x0, 0x4}, [@lastused={0xc, 0xf, 0x10}]}, 0x104}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) 6m58.387525328s ago: executing program 2 (id=1333): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa00, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x34, r5, 0x1, 0x70ad2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}]}]}, 0x34}}, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r6, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000009c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0xffff, 0xb}, {}, {0x7, 0xefb52241b8ee6e67}}, [@filter_kind_options=@f_route={{0xa}, {0x10, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x9e}, @TCA_ROUTE4_ACT={0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) r10 = syz_open_dev$video4linux(&(0x7f0000000180), 0x2a3, 0x0) ioctl$VIDIOC_LOG_STATUS(r10, 0x5646, 0x0) 6m57.752164021s ago: executing program 32 (id=1333): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa00, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x34, r5, 0x1, 0x70ad2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}]}]}, 0x34}}, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r6, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000009c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0xffff, 0xb}, {}, {0x7, 0xefb52241b8ee6e67}}, [@filter_kind_options=@f_route={{0xa}, {0x10, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x9e}, @TCA_ROUTE4_ACT={0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) r10 = syz_open_dev$video4linux(&(0x7f0000000180), 0x2a3, 0x0) ioctl$VIDIOC_LOG_STATUS(r10, 0x5646, 0x0) 1m25.267799059s ago: executing program 3 (id=3400): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@timestamp, @window={0x3, 0x7}, @timestamp, @mss={0x2, 0x1}, @mss={0x2, 0x94b}, @sack_perm, @timestamp, @mss={0x2, 0x80000001}], 0x2000000000000042) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, &(0x7f0000004540)=[{&(0x7f00000034c0)="10d68ff0b9491f79af761d074baa2a5ae916a74b", 0x14}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000280)="ce6270db0e5d767b0fa64372595ba056821dcbaff2837b9c09", 0x19}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="e80000000000000004010000695900008eb719a8a1c3871a0aadd1ec942ae5fbc7e460e0b3c9948cede3dcf22d61955ec50cbbbeecf4b5fb4dc833bcfc88b222f6097fdb5e02e3c04ed20b04895448dafd0dec6a0bfc902b61a591f4bc371da7b20de8735e9a5dffce52b4e891b9706ba7ba069880ce8d4669d30cf5d43ab11423b8a1068387ac9fbfe49e03a8a27802eb4e4b0f6fa55637dbcd7a07c739f11f0fb6f21fc948f46b5abd05a71c147bb86d77897da1b4601303977122e41ae1998afd651bd1bf0ed4cdf1de05d000c6d4f9a3a53bfc374359cb9df7dad19c0faf7721d9e01800000000010000000000001101000080000000c460dec5294ef62559b028ec8c33c797bb74da2cc23464836088adb396098011c286ae633c47027ed2de242d2c186c01d477a4f7f56d493ddf67b0495acaae452e4ce8d89c0ec48d5aeb8145c4bb866d419e40f494e2aca94460eec92b64c6b1d4f9914a988a8185d979a54495b47a4df92249a1f65e7fda3fb88d2775596c73130eb3a2bc4635ceb098ad7bbc7a1184da21d28cd7078bae7944ee707d8448b25b488abb706eaa0b649303a54ec668416d218cac78d3f8ee88c25750f261fcaf7f67b7ddd1770fe1edad76ca5635ea8ab59fe82a1f804de0530850c0a2c43da34a77a67d30558590f86c7db7b84e0000101000000000000018010000090000000f22b74da3375770752d7b85d8c0750580248f8fede5c90c21d0cfcce3d66de6fdeb24b462363de7efa8bf5d1dcbef27fb2d8eff4654490797413e908e07c06ac35d90c0c1d5d7d405dda18d6b65a6abb5d4b656bac671437402f1ba33b9bd3ccde21bb7ce1209a04a03f5351dea5c25542b1be61da3a317c8e1ddb0b4c9aa7d16297ac25d6b433267a1c40c2810692cab2c4db80d702051d4f3c17c36483418aba2c60f101b3f1d40990ec642d25554e1364076239f7a523237a68c9f30bc7c16681d57ee29c4762ed72c893da3349d807d7e8e6d9a140997f3c6523bd0466295d63f2f3bc1dca5914d20b7b765ea20ec48dc8a71b7e7f54450fa2d29cf15692ffb151f30bb3afefda1756d13be6f696916eaf03fc2460e6295f7c379441a330a2741a40ba65240959e72832df7da04571fd03f96fbc03a4d0a797e6bf298e10500fe8fc51b4eedacd23e75d4e8d25d629e2e2dd0704df8ade5f628ed5ae485509e21619c81b535a353c71b0829de17edf5cea7eb95aac415242fb86a816ebdae02dfb2ef9db4659d77451af7b6477c5b3a57a7dbc96c17a90c99b979714d48945c75a782bbb54e9dbccc5e8afbd68e042de88aca978881bb818da3a8ee7b99b4cfff6cdbea504e4cc3823f1620b696f5bcadb30c6977bd98787922e8bc7e74550ea5f3e7da0e27174a968299709ff7fb4351fcaa4c46b7c763daf7be43146464dab95a0fba6a423ecf0b6b9bd3db7afd32a163e698fda71f8a4dee400badf82bc066dd523c72c6751a72c83b892508e181f297d9f63008e07ec891047ad72d0da7e07303d49f0bb2f387a9d4f182914d83b7b7de75cde0f4748fc50a6fd6e1801aebd26427e1c225286bcee9635f65aae02e0f46668ed6057220aaf2760fdc0212aa30dd287d9a6cd4814d8359a869ea3d01260739a54ca7dc07d421b7210bdaecfb187db29e72f54b9a041e1f1d021c4bb2306df4fe2a508f76ff174838a3701fe5b69dd438d284b1b6aa8d0414d0c5d0b61d0f7e0119302a743608c19eccbf707e0a1e4f9bdf5f5d84a13351e92aa0a2c6b364072ce21ad9c6cdcbcd884b99c1526217ea698650d6291cca1497f59aa551ddfa890d9c7ae45baa9c5850f2e21b8a8f8dab0f2c7f4b148b9175a92d76aa4fd477664509b93b6dae9982ecbade20b12d58b69bc255003580f7ef9bc376e932522aeacae45bad20b179e95bb28c62a3e8721873cb8269e2a2847ad93ff76a0a2b94aa3643571cece41204966a8deb8439b598a6247577f54ea1cc7a66fcd251412c9e63caa5e653ed3f1c3bae69e9ccc7415526521fe552dcbcf41584a90919cb89caaa4c58eb73875e02a56da13eac4fb22329a27e18ab7f28f65f25993ec6d04c48984df7b469212cfbc1c2d2a483a5bbc4e49f9076446bed503df906161859d38b6745ebf916fe1381997d86164a496e1a56ca9ee63751c8a15b8d78814c1df9a06b2407de79d20b45ae4cc599122dc74ad85a60fc2371cb52ee46ae90ce96f80469a8a4f96efc4710e9fe3b1c9d36af868d5d544fbe061e3979e7fe301c5b7a9f6d632630f7f4c30b53ff9e3044410d942d08b36718bc85556359e42dc6898070c09355d05722ae317204ff5e475c670770ab5ecae5286e380c77eb7f835d2fe6a186a23e09fac878fa870ddd455515cca916bd2c9027dfc2ad883121a0ab3c0f361ac6aeab5c4c92d5959e95db7df36a8ccf75c3b95deabe67504ed04df2b540f92e149ec39df537d36137446fa4f9c9e205217901ec7bd565ac00d4ca8adf60118b7b984a66220f5b18e5022f950b72fd5c9085fd351e3084b6c83846b83d6d44a75a15e64f990045ccac5d38eaf13173efd5be8907d71f16731c7bb722abc8640984d4332b33691faeb62c9aece693e3c905299aa14d303a8aa102cf023edc68a8371b1c89d4a78413a950923345e326be39504dc1095a01eda5f00d3ecb1b31a7ec0f12b514d64746746ebd5335909c40df695be998575ee8ae4e33bfc2ad1029e7cb787eaa5bf3eb989caddc13cba8f786d8be00e9643c717140307040e0b005c3dede09113a7439ebd40913c3b0dab884a8512fd625d1cd00a9c1702729aee4ec62a8cc618128f43cd209038b5c646fa60aec6469709ecf3489859b435d9387eb74674008b683ce95cd9b0cdf06b23071cd74065a37930521fecdb95fb5be5547040c5c38c49e25f57488f8db660fc2bf06950e45f926de0a732e84328a7e6aa33ee0b50299e2e8179f2172e69067f47fc93f207b706326c5cf866e774dd9cfc21c28ae22e7aec0a0eb4c3e1c94a7068f6f6ce52b3034fc95f56e8bd4b1072e9cb3225807b7a7c687b71dd489a47591a31081dd07021cf5d64305b5589e3841394d65a2f981569a044c85e345500b6579a5d297b72442f11bb5f8277b812fce277ecd810b3c63dba1b5823d056de8646ddc9a645f75945867b25e8a8384442f89dccbff60492ad12c4806297797d40dafd18a17046df91474bf3039e92ce207adaf04b5dd64f8acad7ade9b67ed7351b47b9c4603b53fb5f03678d71b162179df1c2ac1992fcd329bfc7bc024ec8534190061f71b9f14ecf643673e39d495236182a38a46185b5d227a18284e158fa0e4a52b5b8a6746e2bce22901d2f81be38dca2f622fd7884928f46491e075a96954c05146dfa79e77f9e7a489ab603c011c75be06e670fce15acde05fbd47a1ddec25bafa771d2ac3423ed9c99dedaefa66d63bb44727b1d3217130eb493c683d6ad4efb2d3340bf89cd44ec3bfadf84280952fa73e3b37ec42aee93e0ba13f681e7440d6dc0d2a09cbaef44e593615d5747f91af3aa6bb08c62406931a20c52399e4c66357bf32d8205f07c9d788c1bcd827503572f75891b1229c4305912369e06bafee191ad569ecddeb1e7b18f2372f9385ad8177ef2b8af9493c87f5cea622314b00e76bfdcedc5d6ca3ead3d17296c1cdc278449450beff46f39a9e443b2e4ee70dfbe4e890e6a8155b86e19d7b154be633110e36dcaf58ee090785298cb002d0899ac3ddaa47f5aec4479fcaf06e601d8a0b7dcc93eb81e07ff0bb23fc07b18403000c4f0754895112ea3bb2441ccddabd945a06426263b1c05905e22dc3a6f7b724aa4d76a2a7dfa838220b2a599383129981f4ace4e8126a5866b487b1ed7b5ad77338cde2b039bdef13d0dc1c41cd488d83d4b2c0e8837df3cfc8b8e5f55d99b1579b924bcbda5f325262fe71ff87bfe5ad593625a5424d19e2ed3a61abbf075ab5e97446aa4a18c534604be7adedbb2b7df5761f6e1bf08b647d6013caf8e42215d056dde984cdc0cb255782ed31ab4a113c2916e286e33bbee0804321d8d13071580910ee392f1f7ca6f1eb3204c571f390950ac4437d48fa3352f6b191e9e950c32612272f091f28fe09a8dac36ab968f578a6c3b6d2b1cdd4e3f1d0583854d36ac3d653c0195486df857eab3cca1c5b6971816db29f2879dc96ea47286525da3cc3248c6484b974e86ff7f208268fadf3756a0739c01de28c5febabda62b937f8ed938872becb9568d1fd6ff461cbd454929ac210f70490f0bd01d73c4566b84716f09ab2206aa1c92f8f21a9a4c0632abd047bb7249b9b90cdd361b15af4f1a6f60b736902fb12246dd09053fd4292a12b232fe855b9059d7ec02884cac85586c02513bd7427a139f1dfa579328bde1d977be37c9eee85efbe3c4851886b7cea5c891eab5e6bfc7bb9a894574ac989020a2cad323ec043e5865d9a211ee0465d7d73f6e3bf963b3163e67c5f1261d87b4e205b63b7ffeece213af4dbaad5b636d1d61367a0a5833f6aa5be92d07cbe7029c21d465ab898c10dd366b837af04eb501997c83881c5f4f1e1d07b39735bb7eb1b13956c09e2019972c87ca2e96c573b6b19cc815fe8d3fbc00835e5df86cbe46f73076379ee916f828173f46d1adca91cecd4fa32b7d50d8adc94d19f6dfaa97aa15b0b264dce8dd587d9ce4f0dd9cd65e323f047a7c5e96056734bdce89d8adf1ddec268b099d55b4ceb2b707b5f84dc5cecd8688ae1b9c08d70124d9d0747a9a891b043f0591ee63d3e2b89267169635643aff1508460bec3083736c5b20f02cc6bc5405937dc65679bb100b3fe49b476c5f872218ecd344a564c9bd5bd7dec8ee76f23149b452dde618228312f5937a42924832445510e6ba025bc12e04db45df6a25f8603838c7d90c341d5c88118fc4c66d65e89ad40d72c2a2a409af6145d151132b517eba373ba648a3782c9124b1db59508eba9743533350adfe5feff22eb7d4e34ccc4cb18405f054949a2382f8c5be95974101bbe4c8f50d78b5e16ce8cfc740f4dc055b242b9abdb311f36df2614800ebdc680ddad687b438344d49ea441d2d307b1953ab82d83d5d6301252dba957d18196454fadb6ffc50df946ec53f1685947e390fdd3d6ca94b3f8e25bc8fc510d1fe94090e2fe8eb4e475e51a7ade4a811d58c1701efc28dcbbbd836bce67d764c7086db865de43a1de21789ccc7ffd0fa04ff5b8141fa22296e290a9020e105c057beaa711ec6046c8ab3db44317a972e3829a60f30ba1a66e696b5fbb629fda3fac17e3c85a4c44dff42e4a3a0da9bce4e64761f60c7187bd0eecf81cab4d6318fd6703861b3c0685a22576021ca36429259e4fe008ec41b1bb1166c291018e9e71835ee9bc1e75720cbf7e8a44f3ab664776d4f5fb943c27a5f5df060ec269002f90d0ecb51563c74c32cc4b2ff681a82f8ffc8097d5d37eee5da0200429a5cfc8b9ca1f98b34fba46a31ab55598e8410418b8441bd0dc6e2ae61be786a83e67d1c025ce7243c43e2e9a3d67ef49209af570195e310c67814959090ac186106b7eae35bcfae5c5679bdb612e3717703a225459e3d659a326ba7e65743509dec960dc65ca62bcaa6a408a225946ff6a7becb829d29b12d2af2c01806335672ed3a145a3972ad054b57036d724fbbbd6b7a414b394c80d4a8e936af442ac2e388918319eae92e22e04a99cd36740c0e8a946dbc985ae4d6c5fbc474e9a8641e9b538913e759c1bcd8e65180808221804122aef14212b91e6f78a080be560a27d58a71fa3fe203b2f323c030bf138c3da54a4a34a3476ec982cda984f81e138e22b1c65c2328b77bad17e10491e6e38f56a9ae0f92a24e2fdf1f27630759eae0df95cc2644894f25c3a85f872185b95f6febc8302df7a4e74e4750dc052e7fd07e61ad31e81d9748fab55e8fd4add958dc100b867623fd0bbf579edb60b860899077f72020fe39b679d6ca7d257dd8f50c25a5eb03c94f66fa34d9b531eab531f53bb7c9a27614ff64895467b5eaeb68586951263a0bf078c1238dc053efc6083df255d7991d86aec6b0730377340bcce877ed145bd51b4781095529fe2779cc56493ededb5e6f515179c708b6544f8256b5099854916428937fac5d36aa7fd58b1290eb86f6e6f71da26d542188e1d8764a00915af6fa8f83d1f341fb63e9cdcd7bca82a66717c723b51509b6c25456208c96c46cb1fcc2876e3e4d3db1ffcd667eef9cab6489a5509b0710074694915547030b85fdcd019023065fe80dac496258f8c70b8f4dd15c1164159f04968a636751753b656adf37d09f60801748364557acad800168f8a029994a20ba46f499d1f38b61de0bf0a9183878e58ff1cf621827f2c227f59359d3e8b024267cbed14c4d5dacc33c9d040a19e513ce5bf210335cace5e85856e28ed9a0a3c566d9aa5347e4050eb7b90a6e96da56c7c1e852f64e49ca77afb1fb99bd0000000000000000600000050010000a442181cd4c0cd72ccc6b1f330af1a6bf8fa6dd1e9cf267eb4fcc5dca2817cb9fe04451a18ef47c7a6a0953eb7a7929daca2d9f39b6076274522b3852dd9b3dddb2e83a0eb21ad0efb9a9907e1e3e6ec5b8d8febedf5f3240e0156021bf5482f92e011bc566117e6a1bc74132ed89a0b0356053b563744b4193bc9dac1e6a48d09ef5a66c33a282b94c29c374adf2d117f718e5215773a69edff3674f5fde313807d78c90941bab168a55f83804a0f3df99089f5a0eaeef61b0000000000000000010000000000000801000044050000406fb208e7e356b440c37526299fe92fd2728022bc9d2c0d2e417ae815a4a59145ef741a17378d23ec5219fd4ebbc483fbcce1df8d1420309eea9e6c54eed658390135d42fb7e421d7be013a88937b837752f861d81594f0b6a67d30d77210e62faa5ed9593f6e7beb692405347c8d58ab154e2572dafc085c0bae42f479d513fc3c8cd90fa13a14cec9f4789f0e052f1ad27a4b331e51f82670235552635695f34bd6380f0f718965b90ab8b654d5e57e9f4a41c68ac39e809348228a25f295d4208cd6e3f340326317c85b40f5d2e87f8a345d2ee20269ac56886256622d357311d1dbf8002a3e983800000000000028"], 0x13f0}}], 0x2, 0x8000) 1m25.066816101s ago: executing program 3 (id=3401): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x50, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 1m23.578099523s ago: executing program 3 (id=3407): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r1, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}], 0x2, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94", 0x12}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd", 0x67}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0", 0x88}], 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x2, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) 1m23.293133125s ago: executing program 3 (id=3410): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x22, 0x8, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x7, 0x0, 0x0, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}}) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000100)={0x3}, 0x4) 1m23.096357078s ago: executing program 3 (id=3411): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mq_unlink(0x0) syz_usbip_server_init(0x6) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001500), r2) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f00000005c0)={0x18, r3, 0xd8e0afc25e019b91, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x24000010) (fail_nth: 8) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000900)=ANY=[], 0x1420) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x4, 0x400000d1, 0x80000000, 0x101, 0x0, 0x92}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0xfab, 0xfffffffa, 0x4, 0xd109, 0x8}}]}}}]}, 0x78}}, 0x4c840) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x11, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_val={0x18, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10000}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x8, 0x82, &(0x7f0000000440)=""/130, 0x41100, 0x0, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x4, 0x5, 0x10, 0xe437}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000600)=[{0x4, 0x2, 0x8, 0x7}, {0x3, 0x3, 0xe, 0x2}, {0x1, 0x3, 0xd, 0x5}, {0x0, 0x4, 0x0, 0x4}, {0x0, 0x5, 0x0, 0xa}, {0x2, 0x4, 0x2, 0x5}, {0x1, 0x5, 0x1, 0x5}, {0x4, 0x5, 0xd, 0x6}], 0x10, 0xd74}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@cgroup, 0xffffffffffffffff, 0x2f, 0x18, 0x4}, 0x20) 1m20.095316805s ago: executing program 3 (id=3428): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000880)=@vmx={0x2, 0x0, 0x2080, {0x9000, 0x0, {}, 0x1, 0x5b}, {"63c4d3fab3072c7aefb4f286833be8eb89ec4946691eba548207a4b93e0decf7814fbc1a3dff3e1f4266b82a6959b80b92c83f48e2a247be822ea07ad807ae03c1f5948181a00d76f29494cfa731bc33788f713e39097df6f29747422b825bb9acc9112ace7ff07f402d74bf74cf8d57ed6ffc0e17c82fb6b9b938e7a1165a260b94c6b9cfdffa7f33c6bf98b1563018b623cd22c4b5f72bbb58be4bade88b8b9497200d8d130b93b0ee4755d60a6def0fcc4b701bd006b9ccda0022f31fac9c4f88d766b6c9eb35ed2d0b9b966b57ba5ccd0df3fddae90a3694bb3cb3febc125f5940d01a7003f62f4cd5c02cd750a3a16f51306205ac0120f25f791f2ff2970cb2baaaa339f818f68e98ccd706e45dbfb5d2a5d60272b1896146b64c92b716687e7b79be73478c274cbe1859558e210e94fb7f1f8ae2f0455292b30c967fa717d5bdd6b6cc4f71d9d8301a25075f337507381eac48cd6c1209f84480d1ea29da5d2420e0265f2e92786025485bfa449e01f83f691f600c913d56207afed0e084d5b04399b76c2e85c3ec778a659bf6f27aa7b683564c53bfc52c9570f7303b7505016ae5d45bdd0612caad7caa37316fb7fd9f6da075feca79dca999b1e96d25f63a7be5b86715129aebce66e274ba20526ee551809eecce1a58928f4b43d221dceb9268906a509c55363d18e64a85d55535c19e508cddea01957f98931f1f461fe39fa4c1b6a6dcd9c21905d67d012a6ba877e9734ca25edf9dedd403a4ef144ce2832a80a434bfc7950574f07f0eadb019262f8308ae94cebc627761022ba99f7dd903c95e582fa32eff00e810afae96ff714ab6063cdbcaac8906614ec3f84802eb26d8c3bc20048f7b8069bc731523a48d3e9b7ae23536329e3334527b935a1c363ea73fa2734968c079330962a8c31e93e6e075ee5d253dc57e39695ceb87fc285691cd3fe85495d3c72c2ba8cae7433b7362cb4e744e54f62fd864e4fb81e2cc1e5d20b62c3f3951792609d7dc21055243146e21cf4b828de5c009804fe60b3dc54b00d2b28db209e8bf63f9f5eeffb0485fbb25a85aa1e426a471df1df663c3d5aae43dcb32566c8905822fec918ffe70ab7a8381ddfcb539b172cc8a01d15e40d5a93ad06a7b34582bbe00bc213fe05d138bdbc97b0448033103de67ed803496327a37fa698ee93ac705a39afacfdfdfb0cb7f4a8f1c4e2ef27f1c626940a3aa42cffccb73978490eabe0d78caeed9ee988a4d1e67bbdc0e387f25f1909d62008527a22ff44e8cf4c155610f8ed93bc0209884f505fd7457f8da2137659ad45f35524ec68d3f62ccde6cdf6424a5a87124fddf48e09816a4b1550605ee072461d3915dc7d4749c52291c02e5f3c04ceb7f6ab1f4835fb34f49068dad8d659e09af43f4e4bbc20df380b6fcfbf69d8f94129fbf98df23220118fad9fef758e484a43dc23773071e8f5ed6e1971b95d1634aa8aeb6a8dbef1d7373a725260d74b7d7c18d1e6cac6298ae6c931ff9e722dedfc2775428fd0a7f9cfee0dca7b4a770c764273100b91d2e4eb6d8349caf1f85231065388fe9277c5ae74bc37e9a74a09657a8580ca92224abf4aa870ae02a17f7e42ddc69606b8834d9d3595a4d185a93cd4a15b36c2fcd8d462cd50bb7cce60934bc70ec57c6eef7ecff008d68dd051f78c7272305fd5d67a888b737d7e48b65722e19731746c41aa16528670fcb8134e01ee4d85c197f61246b29a97c46bfdcb5c694f973a7d1a5a5b05c0129fef32a22defb5c43d9e758abaf51cc204b7f7e9ea019218041465cdda283f71ff420615287132db2ea4f2dc1c5c14232cc474ff2b2108c6a37f6f342d26279e7b42f8400d4eef0fa5416264b4fc92a79508925f990d8a0f99122a22fbb7a2a36ac6edfb174050732e5c9e396f3cedc57fd072bed0c82d3e4dfc1a02dd4cf986084ca6960db978ffb732cfe89d3dd527d0b1f1b19d88654c2e3d497787fab59692100c031b598579db996463495f4993aab2ce56e97c519fc6f60d06cad1a56404dff61402e26ffd5918ef39b87fad06c488dd19ec357447233f0dc830af1f8da81275a613da2b0f7a73082281a2f1740fe640c81fe859fb56a51fe8616fcc70c7dcce77ee4bbe38668682706b53f353dea1f8cae18e4f9d19bd1c179e314eba07f81d2cd652e59844d1fb23c42c629a091181e419b68ac43579ba533c6b4c966939fd8adb9868529bc6013f528c522c5d3349936f4574da4499e1db4f8dd2ec98200cc19dd4b9aadec12d99f2ab217b9cabe0d9e4a54282a34fec4bd94eb27c0dca145ed248089f1743e9881c4ef6469c3ce72181784737e19e69fa6aefaeac734e3e0a8374532b75b92402b9778937b4800c23786dd95611c569526113da941ab73910da0977e362bbd17a9a14ac976c5700fc779be0f2651eb753e5e0694440ddee479f7d0016696dfe5860b15d223f1790c883ea6031b80db095582747d309b91325696b2f1ce83f8972b5c21b393f38600a3eed112a9745f55270742a812420a9854d63be9f72e02794a311becd02be4f401e7d8459f4868c11864a9d6f522c5f83c2674c4c6c3b8c0105d70300f2670549f41b3fa2dfb6106c4512aef21b9fd577832509b278ba24acc05c4fd7a48019e6d33feccdcf349ef7b2322d20bda2c1195b27707127961bf897ed71df4082b94f7feb1eac0e867806ae33ed7199848ce4706077ec8944031ef6fd8733b505adc7181d83ec4dafec1fca5c2af3fea27b2373d8d107b2bffec88f5ed94a648d6609e8f737c5ef7cbebeb7839aa4d402fd1eb5f08ba82525074491cb083a06428f7bdff4c93e43b2e586532647ff323b2aac1209544bdb2c6109f4a1baf285c8100c91cb0ae612f54644545b261019254c62fc9eda6a43767fadd21d7aff0a013a85cab1aad1de70a86843c29f66ef7854631a398d0ecd0ca90db487cead4592e47f7c2c5292e17c23fd60c257caddc0dee395a243962952268bb038767da4146ab6f5c2b2236f84c1c2ee1f1657dfb1bce039b8d8319fba68532414cc26323f96eacfd5ebb5eae1e95863d483eb193e0d84d7e84dba721fc5ca9300604aa4e327ec39f54abc866b2f52acd9da1f63b1d73b9bc1c852bd6b39debafbc7c79fef8c6fc8b65b7447aefbd81731dae70488dc4851e1965f09c904dafdbdda36e1cb347e86fd287d469f2f623440677b88345d12f023203ee767c59f0ddc6e0c8f3e5ea309fb6f7601347ed22dcf45c5a9ced8ea0619be6d91f46fd06900f292772a21b40eed813f890ada658e3b61cbcce858da02cad8144fdcd91929a0e4de8e7030e84d8a6b350c8da201250c5ac85668c85dea9b394ac27afed9bf8c0b86f33dcb0dd0a6dceaec1eb4a6ffeab99aae4d99a81ab4622503972964d49cdc19161ef1cb6dce02dcb81bdbeeadb1742e4291c369420c2247f176f2ff3f66d586421e8801a0178b1d60828c0add32027bea7a5aab0143a7b366ab07efaeeca18eaf7da8aa6b889f87975c62ec10d82c856a60f8d7874927830a639793b589111b79cdc85c33709da4d581dfa31edb3f73cb7ebfa4eefee9a1c159be266fbb842c8125fb6530840f6ddec3778feb38c05caefa61d27bdaf31226000d0e210719aa531fc8b1e14def9dda50a3276403b5d6a56438d7a49a85b664805f6c308665680e5c6428decbf92bc725632c4f61901709a91c52e1a1c636617d8796b2dffee09066656a28e5715c4018cf5334e59c14bc4fa0c7acab1120516bbc86b46ad9b3abe8d36469c58640a5bbff7d2773f3bb917a821c04eacccfd9611980666c6eb9b137113f85a4af13c4156453b18721b34721022da3f3bdb47f971e4c3343bfa6904531507dc3671748287de5fec54481306c6dd25343ba3f420fbf86f0dd0e6ec4f14bc8bd630f1264f3bbfb6849743a498752a034712b0fc4ab4c62a37f15d456e36ae9aa29ab700ce0ac5af049dae7de58519736f8e6ccd918a2328bb2f0604c3b6a2a88c75f4ab121d814400bee1e233f682aa3879ce966ef2b90e54e3aa791d9d2bfd4dd07dc4593f283aca801fd9c6b7f644bfefae0839cc46108ad7e2f55684c264e4117d77ae04fa555f8a5a8af79507b73d7431340bfe928643778033eddf3bfa53dea9a2b2bd13ab2262696abf4c2d63f31e9d61d7ed5291e0c42822bc252cfa6602fd94d7b724e8cc134c51289950bdaceef718ec2ef13dfcd1e24f1023ed2d480de99c3343e0e26fcee6df439ed5c04dfe87abe619d5272cade5aa03227cb905610724b1dfe5d4874fb50f0885a9dc4dfbaf09957e2fb524dcfb648d188f2b7cf9e8b9250a629a4b5fb005eb19e6c2d51dd121b04c05b47a1c87a557702cd1fc6807e194c04b31aa8485ad14502e173b04a59ae58b59dad612767ebfb8b9b9b313c726b36823a7c14b1f626418eb1bebe7ed925f3ba523f20c4831397c0afe85b6cd9a40b1cbf99c90a2d29b73ab7f141634dd777fe70ac6fa2f8c8682b41b953752d63e3d75d3c2a0e2d6767a5a84a2ae45f1a7a9801c1278e34e3101d9192385db10b809b248abe235c2b481534617ca68156d512251e8ba1c53b87e3cde15c1b2f8a4e1624097bd1ca64a1c9db7de5a120058fbae278f0b09a46c79e47219b208e26adeeb4d676867fc5225e2ca66d25e9d3649e64c9b73ebc9811c7e03263e37f060dbba482840106e75aff3cf675740e12a09ce97d545c8b4590020c2f9469253a98facf108c2308d6b3595600d9f5c28dc8d2f59019070d5c1d0db05472d2bf4d6a542dd7219b70ef3e9bc01cb631012db7a935a991f918e9813b28eb5a2e8bb9c25ebaac1a08a2eb752ef7a8cf1835f2564da8629a39565883e1c38f508c246fbf9c3e8c9a8dd6382092ded9564cdc0c8f84cc9b66d1aff74a277a7551f729e31cfe34a9d3152a90527469809d18e14dcfe1a3c208ed88c4776e638589541161967a682dc434513e9c036795346f5bef73768a5b717f10a858517f09687fdc5bd6ca7d08af875c9f09adcd890b613e0d0bd70cc118f8a23217f1f49cd646736555b32b25fe7c51462d1d92af21d56231f5219b6190a8f219162dc3bdc50f373240aeb3d66bb250b522ec06ec180f1786c7eb6d99fee6c33b0e8ee9bc214c40d07c261b7a9b7a0795b6aad2900f637c173055a67ba6d7e4426831538fab31c351c3d15deba49257ca77fd687ac86c49908a2d965c64846e29ee424ece294d2171f7096840baf50a9b6b755583c9aa3a7d254d49afa3f279c1b3bc2e0015d8b8129ec9f0e15d6cf7e1860bd638f42b2d2dad6f3d656e6638b260f26cb4ed76ccfc5a7f8b7cdc26073fff2f6fa4f8c73b89501726d7c0ccfcc969edbcbb0a61c34fb6c0a2a4699ee6784e009b99edb79a46e3d89b9496d47a7cbcab4ff5d6bc6cce982051caf47523fa575c537133579d48777ad1b6d7b3a7d929eafefeca516fb058192b07436b0d93e2e1aba96ef504c6fd3327a486f60928537a0d920c9635c5758cb1e4106eabe5893b3556e21b2fb57ed0ffc2a94802196d96dd36738e7979c2d4e83a7cadbf3f319527c8f3b95473eead5eb2483fd7e7dc841cfce3eda6e28b493e228f6d6b2173445318c3ebcafa54fc998157b84127a91bc9c86688f794c153246b3b14e1a85d73d8d44116f66fcbd46382ea6656791cbef730677fd4ff7c581b477e0141bde158ab2bcd2379133a02e225a6228e8b11c2aeb0311d36eb159e93c165a6f51d5c38b71307e66e52c4836c0976099630afc885ed91179aa74528726eb", "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"}}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000440)={'ip_vti0\x00', {0x2, 0x4e20, @broadcast=0xfffffffe}}) r4 = socket$packet(0x11, 0x3, 0x300) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x200, 0x8041) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"}) ioctl$USBDEVFS_ALLOC_STREAMS(r5, 0x8008551c, &(0x7f0000000100)=ANY=[@ANYRES16=r3, @ANYRESDEC=r0]) ioctl$sock_inet_SIOCSIFNETMASK(r4, 0x891c, &(0x7f0000000440)={'ip_vti0\x00', {0x2, 0x4e20, @broadcast}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r7, 0x0, 0x0) connect$unix(r6, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000000)={0x0, 0xffffffff}, 0x8) 1m4.92555003s ago: executing program 33 (id=3428): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000880)=@vmx={0x2, 0x0, 0x2080, {0x9000, 0x0, {}, 0x1, 0x5b}, {"63c4d3fab3072c7aefb4f286833be8eb89ec4946691eba548207a4b93e0decf7814fbc1a3dff3e1f4266b82a6959b80b92c83f48e2a247be822ea07ad807ae03c1f5948181a00d76f29494cfa731bc33788f713e39097df6f29747422b825bb9acc9112ace7ff07f402d74bf74cf8d57ed6ffc0e17c82fb6b9b938e7a1165a260b94c6b9cfdffa7f33c6bf98b1563018b623cd22c4b5f72bbb58be4bade88b8b9497200d8d130b93b0ee4755d60a6def0fcc4b701bd006b9ccda0022f31fac9c4f88d766b6c9eb35ed2d0b9b966b57ba5ccd0df3fddae90a3694bb3cb3febc125f5940d01a7003f62f4cd5c02cd750a3a16f51306205ac0120f25f791f2ff2970cb2baaaa339f818f68e98ccd706e45dbfb5d2a5d60272b1896146b64c92b716687e7b79be73478c274cbe1859558e210e94fb7f1f8ae2f0455292b30c967fa717d5bdd6b6cc4f71d9d8301a25075f337507381eac48cd6c1209f84480d1ea29da5d2420e0265f2e92786025485bfa449e01f83f691f600c913d56207afed0e084d5b04399b76c2e85c3ec778a659bf6f27aa7b683564c53bfc52c9570f7303b7505016ae5d45bdd0612caad7caa37316fb7fd9f6da075feca79dca999b1e96d25f63a7be5b86715129aebce66e274ba20526ee551809eecce1a58928f4b43d221dceb9268906a509c55363d18e64a85d55535c19e508cddea01957f98931f1f461fe39fa4c1b6a6dcd9c21905d67d012a6ba877e9734ca25edf9dedd403a4ef144ce2832a80a434bfc7950574f07f0eadb019262f8308ae94cebc627761022ba99f7dd903c95e582fa32eff00e810afae96ff714ab6063cdbcaac8906614ec3f84802eb26d8c3bc20048f7b8069bc731523a48d3e9b7ae23536329e3334527b935a1c363ea73fa2734968c079330962a8c31e93e6e075ee5d253dc57e39695ceb87fc285691cd3fe85495d3c72c2ba8cae7433b7362cb4e744e54f62fd864e4fb81e2cc1e5d20b62c3f3951792609d7dc21055243146e21cf4b828de5c009804fe60b3dc54b00d2b28db209e8bf63f9f5eeffb0485fbb25a85aa1e426a471df1df663c3d5aae43dcb32566c8905822fec918ffe70ab7a8381ddfcb539b172cc8a01d15e40d5a93ad06a7b34582bbe00bc213fe05d138bdbc97b0448033103de67ed803496327a37fa698ee93ac705a39afacfdfdfb0cb7f4a8f1c4e2ef27f1c626940a3aa42cffccb73978490eabe0d78caeed9ee988a4d1e67bbdc0e387f25f1909d62008527a22ff44e8cf4c155610f8ed93bc0209884f505fd7457f8da2137659ad45f35524ec68d3f62ccde6cdf6424a5a87124fddf48e09816a4b1550605ee072461d3915dc7d4749c52291c02e5f3c04ceb7f6ab1f4835fb34f49068dad8d659e09af43f4e4bbc20df380b6fcfbf69d8f94129fbf98df23220118fad9fef758e484a43dc23773071e8f5ed6e1971b95d1634aa8aeb6a8dbef1d7373a725260d74b7d7c18d1e6cac6298ae6c931ff9e722dedfc2775428fd0a7f9cfee0dca7b4a770c764273100b91d2e4eb6d8349caf1f85231065388fe9277c5ae74bc37e9a74a09657a8580ca92224abf4aa870ae02a17f7e42ddc69606b8834d9d3595a4d185a93cd4a15b36c2fcd8d462cd50bb7cce60934bc70ec57c6eef7ecff008d68dd051f78c7272305fd5d67a888b737d7e48b65722e19731746c41aa16528670fcb8134e01ee4d85c197f61246b29a97c46bfdcb5c694f973a7d1a5a5b05c0129fef32a22defb5c43d9e758abaf51cc204b7f7e9ea019218041465cdda283f71ff420615287132db2ea4f2dc1c5c14232cc474ff2b2108c6a37f6f342d26279e7b42f8400d4eef0fa5416264b4fc92a79508925f990d8a0f99122a22fbb7a2a36ac6edfb174050732e5c9e396f3cedc57fd072bed0c82d3e4dfc1a02dd4cf986084ca6960db978ffb732cfe89d3dd527d0b1f1b19d88654c2e3d497787fab59692100c031b598579db996463495f4993aab2ce56e97c519fc6f60d06cad1a56404dff61402e26ffd5918ef39b87fad06c488dd19ec357447233f0dc830af1f8da81275a613da2b0f7a73082281a2f1740fe640c81fe859fb56a51fe8616fcc70c7dcce77ee4bbe38668682706b53f353dea1f8cae18e4f9d19bd1c179e314eba07f81d2cd652e59844d1fb23c42c629a091181e419b68ac43579ba533c6b4c966939fd8adb9868529bc6013f528c522c5d3349936f4574da4499e1db4f8dd2ec98200cc19dd4b9aadec12d99f2ab217b9cabe0d9e4a54282a34fec4bd94eb27c0dca145ed248089f1743e9881c4ef6469c3ce72181784737e19e69fa6aefaeac734e3e0a8374532b75b92402b9778937b4800c23786dd95611c569526113da941ab73910da0977e362bbd17a9a14ac976c5700fc779be0f2651eb753e5e0694440ddee479f7d0016696dfe5860b15d223f1790c883ea6031b80db095582747d309b91325696b2f1ce83f8972b5c21b393f38600a3eed112a9745f55270742a812420a9854d63be9f72e02794a311becd02be4f401e7d8459f4868c11864a9d6f522c5f83c2674c4c6c3b8c0105d70300f2670549f41b3fa2dfb6106c4512aef21b9fd577832509b278ba24acc05c4fd7a48019e6d33feccdcf349ef7b2322d20bda2c1195b27707127961bf897ed71df4082b94f7feb1eac0e867806ae33ed7199848ce4706077ec8944031ef6fd8733b505adc7181d83ec4dafec1fca5c2af3fea27b2373d8d107b2bffec88f5ed94a648d6609e8f737c5ef7cbebeb7839aa4d402fd1eb5f08ba82525074491cb083a06428f7bdff4c93e43b2e586532647ff323b2aac1209544bdb2c6109f4a1baf285c8100c91cb0ae612f54644545b261019254c62fc9eda6a43767fadd21d7aff0a013a85cab1aad1de70a86843c29f66ef7854631a398d0ecd0ca90db487cead4592e47f7c2c5292e17c23fd60c257caddc0dee395a243962952268bb038767da4146ab6f5c2b2236f84c1c2ee1f1657dfb1bce039b8d8319fba68532414cc26323f96eacfd5ebb5eae1e95863d483eb193e0d84d7e84dba721fc5ca9300604aa4e327ec39f54abc866b2f52acd9da1f63b1d73b9bc1c852bd6b39debafbc7c79fef8c6fc8b65b7447aefbd81731dae70488dc4851e1965f09c904dafdbdda36e1cb347e86fd287d469f2f623440677b88345d12f023203ee767c59f0ddc6e0c8f3e5ea309fb6f7601347ed22dcf45c5a9ced8ea0619be6d91f46fd06900f292772a21b40eed813f890ada658e3b61cbcce858da02cad8144fdcd91929a0e4de8e7030e84d8a6b350c8da201250c5ac85668c85dea9b394ac27afed9bf8c0b86f33dcb0dd0a6dceaec1eb4a6ffeab99aae4d99a81ab4622503972964d49cdc19161ef1cb6dce02dcb81bdbeeadb1742e4291c369420c2247f176f2ff3f66d586421e8801a0178b1d60828c0add32027bea7a5aab0143a7b366ab07efaeeca18eaf7da8aa6b889f87975c62ec10d82c856a60f8d7874927830a639793b589111b79cdc85c33709da4d581dfa31edb3f73cb7ebfa4eefee9a1c159be266fbb842c8125fb6530840f6ddec3778feb38c05caefa61d27bdaf31226000d0e210719aa531fc8b1e14def9dda50a3276403b5d6a56438d7a49a85b664805f6c308665680e5c6428decbf92bc725632c4f61901709a91c52e1a1c636617d8796b2dffee09066656a28e5715c4018cf5334e59c14bc4fa0c7acab1120516bbc86b46ad9b3abe8d36469c58640a5bbff7d2773f3bb917a821c04eacccfd9611980666c6eb9b137113f85a4af13c4156453b18721b34721022da3f3bdb47f971e4c3343bfa6904531507dc3671748287de5fec54481306c6dd25343ba3f420fbf86f0dd0e6ec4f14bc8bd630f1264f3bbfb6849743a498752a034712b0fc4ab4c62a37f15d456e36ae9aa29ab700ce0ac5af049dae7de58519736f8e6ccd918a2328bb2f0604c3b6a2a88c75f4ab121d814400bee1e233f682aa3879ce966ef2b90e54e3aa791d9d2bfd4dd07dc4593f283aca801fd9c6b7f644bfefae0839cc46108ad7e2f55684c264e4117d77ae04fa555f8a5a8af79507b73d7431340bfe928643778033eddf3bfa53dea9a2b2bd13ab2262696abf4c2d63f31e9d61d7ed5291e0c42822bc252cfa6602fd94d7b724e8cc134c51289950bdaceef718ec2ef13dfcd1e24f1023ed2d480de99c3343e0e26fcee6df439ed5c04dfe87abe619d5272cade5aa03227cb905610724b1dfe5d4874fb50f0885a9dc4dfbaf09957e2fb524dcfb648d188f2b7cf9e8b9250a629a4b5fb005eb19e6c2d51dd121b04c05b47a1c87a557702cd1fc6807e194c04b31aa8485ad14502e173b04a59ae58b59dad612767ebfb8b9b9b313c726b36823a7c14b1f626418eb1bebe7ed925f3ba523f20c4831397c0afe85b6cd9a40b1cbf99c90a2d29b73ab7f141634dd777fe70ac6fa2f8c8682b41b953752d63e3d75d3c2a0e2d6767a5a84a2ae45f1a7a9801c1278e34e3101d9192385db10b809b248abe235c2b481534617ca68156d512251e8ba1c53b87e3cde15c1b2f8a4e1624097bd1ca64a1c9db7de5a120058fbae278f0b09a46c79e47219b208e26adeeb4d676867fc5225e2ca66d25e9d3649e64c9b73ebc9811c7e03263e37f060dbba482840106e75aff3cf675740e12a09ce97d545c8b4590020c2f9469253a98facf108c2308d6b3595600d9f5c28dc8d2f59019070d5c1d0db05472d2bf4d6a542dd7219b70ef3e9bc01cb631012db7a935a991f918e9813b28eb5a2e8bb9c25ebaac1a08a2eb752ef7a8cf1835f2564da8629a39565883e1c38f508c246fbf9c3e8c9a8dd6382092ded9564cdc0c8f84cc9b66d1aff74a277a7551f729e31cfe34a9d3152a90527469809d18e14dcfe1a3c208ed88c4776e638589541161967a682dc434513e9c036795346f5bef73768a5b717f10a858517f09687fdc5bd6ca7d08af875c9f09adcd890b613e0d0bd70cc118f8a23217f1f49cd646736555b32b25fe7c51462d1d92af21d56231f5219b6190a8f219162dc3bdc50f373240aeb3d66bb250b522ec06ec180f1786c7eb6d99fee6c33b0e8ee9bc214c40d07c261b7a9b7a0795b6aad2900f637c173055a67ba6d7e4426831538fab31c351c3d15deba49257ca77fd687ac86c49908a2d965c64846e29ee424ece294d2171f7096840baf50a9b6b755583c9aa3a7d254d49afa3f279c1b3bc2e0015d8b8129ec9f0e15d6cf7e1860bd638f42b2d2dad6f3d656e6638b260f26cb4ed76ccfc5a7f8b7cdc26073fff2f6fa4f8c73b89501726d7c0ccfcc969edbcbb0a61c34fb6c0a2a4699ee6784e009b99edb79a46e3d89b9496d47a7cbcab4ff5d6bc6cce982051caf47523fa575c537133579d48777ad1b6d7b3a7d929eafefeca516fb058192b07436b0d93e2e1aba96ef504c6fd3327a486f60928537a0d920c9635c5758cb1e4106eabe5893b3556e21b2fb57ed0ffc2a94802196d96dd36738e7979c2d4e83a7cadbf3f319527c8f3b95473eead5eb2483fd7e7dc841cfce3eda6e28b493e228f6d6b2173445318c3ebcafa54fc998157b84127a91bc9c86688f794c153246b3b14e1a85d73d8d44116f66fcbd46382ea6656791cbef730677fd4ff7c581b477e0141bde158ab2bcd2379133a02e225a6228e8b11c2aeb0311d36eb159e93c165a6f51d5c38b71307e66e52c4836c0976099630afc885ed91179aa74528726eb", "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"}}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000440)={'ip_vti0\x00', {0x2, 0x4e20, @broadcast=0xfffffffe}}) r4 = socket$packet(0x11, 0x3, 0x300) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x200, 0x8041) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"}) ioctl$USBDEVFS_ALLOC_STREAMS(r5, 0x8008551c, &(0x7f0000000100)=ANY=[@ANYRES16=r3, @ANYRESDEC=r0]) ioctl$sock_inet_SIOCSIFNETMASK(r4, 0x891c, &(0x7f0000000440)={'ip_vti0\x00', {0x2, 0x4e20, @broadcast}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r7, 0x0, 0x0) connect$unix(r6, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000000)={0x0, 0xffffffff}, 0x8) 6.778986715s ago: executing program 1 (id=3840): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000004000000040000000100180000000000", @ANYRES32, @ANYBLOB="000000000000001300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000002"], 0x50) 6.426839854s ago: executing program 1 (id=3844): syz_emit_ethernet(0x1d, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, @void, {@llc_tr={0x11, {@llc={0xd4, 0x2, "cc54", "436dbaef21fe4ea6907953"}}}}}, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1a5042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x38011, r6, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r7, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0xc4, 0x3000, 0x0, 0x9) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0xa0, r2, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x69, 0xe, {{{}, {}, @device_a, @device_a, @from_mac}, 0x5, @default, 0x1, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @val={0x4, 0x6, {0xb3, 0x2, 0xd, 0x1ff}}, @void, @val={0x5, 0x3, {0x5, 0xc7, 0x6}}, @void, @void, @val={0x3c, 0x4, {0x1, 0x9, 0xce, 0xdd}}, @val={0x2d, 0x1a, {0x2ff, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1716}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4010}, 0x20000014) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4) 5.170665302s ago: executing program 1 (id=3853): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x63}, 0x68) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000380)='\x02\xc3\xf6\xddM\xd6\x8dwE)\x83\xe1\x1f\x9c\xf5q', &(0x7f00000003c0)='iochabset\xd9S\xdc\x85\xba\xbd\xd5\xb4B\x1b\x88$6\x85\\\xfe\x13\x1e\f\x14d\x04\x8e;\x9f\xa1/\xbe\xab\xc4\x82o\xe3c\xc5\xdd5\x1ca<\xdd\xd4\f\x14\xc2\xbd\xd2\x93H\x1a\xc3\x03\xf7\"\x16\xe2\xe6\xa5\xf7\ar\x0e\xedU\xb8!T\x13-\xef\x9fO\x1a\x03w\x99\xc5\xc3\x89\xd8\x99\xb6y\x18\x11\xb9\xf0\x17\x7fX\xfc\xb2\xc6\xc5\xbd\xde-\xdco*\xcd\xe8\xe9\x13\x04B\x9dw\xedH\xb0\xe0\x91\x04\xe6\t\xf1U\xb2Jn\x8da\xafv a\xee\xc3\xcf\x16+\xb4\xbbn \x1d<\xeeC\x1cv\'\xc8n\xd9.\xb8\xbe\xd7\xe0\xa8\xbb;\xf5\x1agV\xfcT\\\xb6\x7f\x9e|\xc5\xec6P\xd14\xfb\xe6~\xaa0\x955W6\xc8\x8d\x85\x86Q\x89\xf9\t3a\xed\xda\xb6\xc7\xf8\xa3\xcb>\x8a\xbd\x7fH\x80\x14', 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20000000000, 0xfffffffffffffffd, 0x10000000, 0x3}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x21182, 0x0) read$FUSE(r3, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, 0xffffffffffffffff, 0x0) r4 = mq_open(&(0x7f0000000600)=' \x01\x9c\x147\xb3\xcf\xfc\xc3\xa2W)\xebs\x93\xa7\xc7!Q\x8f\xf6\xec\xa5f\x02\x00\x00\x00\x00\x00\x00\x00,r\xa7\xd6\bO\x9a\x98\xf52:\"\xf4\x12\xc0T+\xcd\x9fv|\x8d\xd5\xb2Dvc\x8e\x93\xd8\xd6\xa0\xc56\xd2x\xe3c:\x00\x00\x00\x00\x00\x00\x00\x01\x97\x97\x9c \xdc\xaavt\x18\xcen\xe4\x03\x84;7\xfb\x84r\xf4\xe7\xc9\b\x987\xaa\x85\xfb\x05%\xa8\xe5b\x81\x8eu\xe1r\xf7s2\x82\xe57&bJ\xef\xd0V\x01i%\x18=E\xa7\x8e#4!3\x8d\xf9\xc1I\xcb0\x16P\x04\xc2TSxSn\xb0\f\xd9\'\xff01t\xbf\x01\x0f\xa9\xe3\a\xd2\xdf\x9f\x7f\xce\x92\x8bG\x15\x06\xcd:\x9c\x19\xc8\xf9\x84\xd7\x8b\"\x87\x05?h\x1d\xf5\v\x1a0\xa8\x85\x06\xed\xccm\xe4\x18\xca94\x8dN\x9d\xe4\xac\xa2s\xf79\xa4\xb4\xe9\xe9', 0x3, 0x8f, 0x0) mmap(&(0x7f000074f000/0x1000)=nil, 0x1000, 0xb635773f04ebbee2, 0x11, r4, 0x39526000) request_key(0x0, 0x0, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex;De', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20040055}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073793a0400000000090001000000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) recvmsg(r6, 0x0, 0x40000100) 3.443669848s ago: executing program 5 (id=3867): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0xfffffffd, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x48, 0x0, 0x0) write$P9_RSTATu(r0, &(0x7f0000000580)={0x20e, 0x2, 0x0, {{0x500, 0xcd, 0x500, 0xc3, {0x0, 0x0, 0xe803}, 0x0, 0x0, 0x4, 0x0, 0x1b, '\x18nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x28, 'pg>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18x\x9b\xa9\x16c\x88\x14\xe5p\x81\x03\xb4\x94\xe1\x00\x00\x00\x00\x00\x00\x00\x00', 0x2, '\b\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0x0, 0x0, 0xee01}}, 0x20e) 3.14742895s ago: executing program 4 (id=3868): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x0, 0x1000000002, 0x0, 0x0, 0x6}, 0x0, 0x0) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f0000000200)=0xd) syz_emit_ethernet(0x46, &(0x7f0000000180)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x38, 0x67, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @remote}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0xf7, 0x801f, {0x5, 0x4, 0x3, 0x14, 0x7ff, 0x64, 0x1ce2, 0xd9, 0xff, 0xe5c, @loopback, @loopback}, "65b37c42ddedc962"}}}}}, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={[&(0x7f0000000040)='-\')\x00']}, &(0x7f0000000100)={[&(0x7f00000000c0)='\xbb\xbb\xbb\xbb\xbb\xbb']}) 3.079089142s ago: executing program 5 (id=3870): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000005880)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[], 0x0}, 0x94) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000007000000080000000c"], 0x50) socket$inet6(0xa, 0x80002, 0x0) syz_io_uring_setup(0x8ff, &(0x7f0000000100)={0x0, 0xa6fe, 0x1000, 0x3, 0xa00404e}, 0x0, 0x0, 0x0) syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x101441) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0xa403, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500000000000500", @ANYRES8=r1], 0x7c}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r6 = socket$unix(0x1, 0x2, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) connect$unix(r7, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r7, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r6, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000280)=[{r6, 0x1300}, {r7, 0x13a8}, {r4, 0x6052}], 0x3, 0x0, 0x0, 0x0) close(r5) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000005840)={r0, 0xb4, &(0x7f0000001100)}, 0x10) 2.798239367s ago: executing program 5 (id=3871): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000100)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6bb74189000003c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x37}], 0x1, 0x55, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r8 = dup3(r7, r6, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) (async, rerun: 32) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000fdf000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, &(0x7f0000000080)="360f7883b81e2626660fc7350ff4650666b95c0300000f32f4656df30f09650f01cfc6f8000f0d35", 0x28}], 0xaaaaaaaaaaaab43, 0x7a, 0x0, 0x0) (async, rerun: 32) r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r9, r9, &(0x7f0000fce000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0xa, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r9, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x9000, 0x0, {}, 0x1}, {"00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005bcc00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cf3734f10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e5bd16380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008100", "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f38740000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a4900"}}) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000003c0)={@val={0x8, 0x800}, @val={0x0, 0x4, 0x6, 0x1, 0x6, 0x43}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x28, 0x5c, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010101, @broadcast}, {0x4e26, 0x4e23, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "b47233e19f10929b698cc6876071b37f37d06232afe3700d", "0dcc0f9b4038187fd0ea9a12d6db7ed3b59a831af9887dc7a7eb90392c61dd8f"}}}}, 0x6a) 2.569737359s ago: executing program 0 (id=3873): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1ff) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000224e00008000f0fffeffe809005300fff5dd000000100001000d0c10000000000000000000", 0x58}], 0x1) 2.471990071s ago: executing program 6 (id=3874): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bond0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000080)=[{0x0, 0x0, &(0x7f0000003a80)=[{&(0x7f0000000040)="d90077132dd512cf36818b740f406797e56c57a8a08e687399", 0x19}, {&(0x7f0000000280)="61eedfd3d39ecad6c07862c49cda04b8ef66799b8aec9a36630e4f86a182d883a6a410100ae1447055af285fdf62bb1efc0ff740f68048b6adb33c194f8665fbb98eb4d591edb7f54d35a511b0b708834b8741399c4335d0", 0x58}, {&(0x7f0000000140)="fce9b3ce7b5e620042567c6fff5dd8a3776d38f46019de2a8f9dea85ed5f3f8a2ca6c626d6a514dbaa0c249e9fbe909cc39151bc933a3e5332ff8e225ba8fce0638108cbf9e50816749aa4d9285bd740263b9438c2f2425000f070b31cc48ba57e8edafc79a033f6e10b10a1acc9c1b205ae9a140756eb", 0x77}, {&(0x7f00000004c0)="9a7a637d95d3bcd5", 0x8}], 0x4, 0x0, 0x0, 0x800}], 0x1, 0x150) recvmsg(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000700)}, 0x2042) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x4, 0x7, 0x6, 0x7fff, 0x0, 0x3, 0x5}, &(0x7f0000000300)=0x9c) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000400)={r4, 0xf1, "32657fe3597fdb1492ceaa863ec68bc4c91c796bef63869bb962c8012258ab6d02bc5c8d871acab484124097a715c423414e72f25c88e8a78f19e17cf73ebec309989f612db1ac8560c001f026bec5d0b66dbfb1a4d154f074c97f75e1c4aa179878e1ad20ae85e61975cd55777e76e8202b7d9ed41744953e92726886a4c326fbc0fe91e760cf7de8fe012219aec839ffc170a11472a97503c35a86171b22b7001d29ea132e1ea94b90df93415f96dcea8247a41aa6418e01fcd73d1ebae4724830410dafc03c42a966c0e085606462bba4d0fb58e7fca8faddedaf359fefa0d6d6479968e1b9be82a6ec50ca2cc57d49"}, &(0x7f0000000500)=0xf9) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) syz_emit_ethernet(0x42, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) removexattr(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000400)=@random={'user.', 'erspan0\x00'}) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x588}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=@ipv6_getanyicast={0x14, 0x3e, 0x200, 0x4070bd27, 0x25dfdbfd, {}, ["", "", ""]}, 0xffffffffffffffe8}, 0x1, 0x0, 0x0, 0x10}, 0x40000) syz_emit_ethernet(0x143a, &(0x7f00000023c0)={@random="61fe71b72b5f", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "050096", 0x1404, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @remote, @loopback, [{0x7, 0x6, "22d1f8f82792de14c3dd47c0a013258328e618e9f60265d291e0fea3547909e092a20d71fe031978324ed983db91960a6f6708b4"}, {0x5, 0x1b, "89db2961c43854c269f9d38cc5aacbd68f06432790bec6b77ef4677310770b9d4b91ddf88179ef0561eea482a422db0d25a4f0de9f95de2828ba68d7e9fc31d3c28733d8d332bad760786bc13c00531b5affa0c72561a5cd85994b8d445630803617095433802ed8217f6ed386fbfaa91b9c61f72a4b4147b362dd22b0b3b8fa52fc794f35727c41084419f3c0861fa7dc97c758561e0525e5d1e6ec6205a9cb2bb9c306b75a3615e93c1f8c852deebc9f3767559f4ebc676ee4ebf23cbdc7cc97d507708e04de12544d83d139803d336c3b71d82b78f31055"}, {0x1, 0xb, "a29cc66f6a5ee71702e72a0bd78e258435b2ddd0ec3e520822e08d8d83cc02e03aa6f2edd7aac3f9c6e3adbb8ffbc3ca6b6231c104495b69494d3349935388c5a1703dc03837140952072267399ce99125222694b75bf05463fea67e"}, {0x4, 0xb, "47aeda8280c44880e0141eab88b2eb7c4c82114ec36c12282afab4f7ee74864899b9f160dfbbdb969ce9a3804cc0bad61a8c0063332092ea13b41c4e2010fbf3ad21a7f0396123e0b18219a8da8ad15cef11644d93da128a98b2"}, {0x2, 0x13, "0a2849922b10272006625d9503566183209068c3b7b7770b1199a9ac371979346d5406522e77ab8878b9edc1167301a4ae9832eec6668bae549c0f28c01a4079e94e74666138033a6549bb182b2b0a3b392279fbf8385dd7bd2abb0f18881601cf73c8fd15361d557082e8a7b27163c936f0a1a791fa804e94acf891856c5df6c966e4d5425491db2c480c709b4966b496c0e81f50fe"}, {0x19, 0x3, "9b8de59e2b06265a69625266181eb0cd31b09c0df0521d418b34"}, {0x3, 0x1f, "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"}, {0x4, 0x1da, "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"}, {0x5, 0x14, "a7dfab65455d7b45debc5c3a3014d33e2fb47f261bdfb6d3a7b5dcdff4e1570052a3075411bf25dc2e5ab2727efb164351bdb80b85d9c5b6d2ee5063244ff1361faa587dd9764801225667c87541dfa1e642a5017bb66376b7c0aaf98bbc33c429b9e6510ce5de991da8126928e3f93d8bcb5745e6683b93e3476a1b721dd5d1c01af0bcfa6d7f5c15439b3bee610a1cdd34a9cb7a04581df97d56ea4338"}, {0x1f, 0x1d, "4a2e30f42789a21bdb972380d906c97cc840dc0d4adb907d132beb4d0996846341b553b9312078d7d9a87e0fd4708777dfb815dad05202e75b6bb9dbf1365603fb21ce5fefc95440491b2539d3169ca4d23e277a5db1de0f522a9ac2407459cdc94c0205f9393992e45b02dbcf0630a06c4bf3a4461d96cc3471033601dc87e81498f4ff3df2b7f43c3305de2b1d65e13e7db93c080deaaaf6e0456f9d1346fdbb06d144e9b0a7154b96f91dd105fc071da2bfcb51a6ce896b266955c4eb99b68efc0eb32dbbc0afc64ba43fe745e90014ba33616d6d2514871a70ac4b54150a2c5fc5248b13380c55ad6847"}]}}}}}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000380)={'ip_vti0\x00', {0x2, 0x4e24, @multicast1}}) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000f01000020000000", 0x20}], 0x1}, 0x0) 2.453276862s ago: executing program 1 (id=3875): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010000304000000001200000000000000", @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="080004"], 0x54}, 0x1, 0xba01, 0x0, 0x4004}, 0x4000000) 2.351305422s ago: executing program 5 (id=3876): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x42400, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x17c00}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x9, 0x8, 0xfffffffd, 0x526}, 0xd7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x42) close(r4) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f0000000540)=@xdp={0x2c, 0x8, r6, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e000b00fdc6c1020000008407c2fb7fe0406e52534b4f6b3d327db412f40000000003000000", 0x2e}], 0x1, 0x0, 0x0, 0x1200}, 0x2000600d) 2.28406502s ago: executing program 0 (id=3877): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x8001fe01, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 2.082186574s ago: executing program 0 (id=3878): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r1, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed88", 0x3a}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94", 0x12}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd", 0x67}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0", 0x88}], 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x2, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) 2.002535884s ago: executing program 4 (id=3879): pipe(&(0x7f0000000080)={0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9400000013004f0a000200"/20, @ANYRES32=r0, @ANYBLOB="00000000000000000800cfffecc507006c001a8054"], 0x94}}, 0x20008841) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000200)='[\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) rt_sigprocmask(0x0, 0x0, &(0x7f00000004c0), 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x4008, r1}, 0x18) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f000001fac0)=ANY=[@ANYBLOB="6400000002060108000000000000000000000000050005000a000000050001000700000020000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e65740000000014000780080006400000570008001340"], 0x64}, 0x1, 0x0, 0x0, 0x40890}, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="64670feea1096f00003e660f38054c880f323e26640fb9a9c94f660fc7b27f1a360f09366764f4660fdd40e69a3a00e300baa000b0e5ee", 0x37}], 0x1, 0x6, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x10001, 0x3, 0x40000, 0x2000, &(0x7f0000181000/0x2000)=nil}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000440)={&(0x7f00000002c0), 0x10, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="07000000d20000000000020000000000", @ANYRES64=r7, @ANYRES64=r8/1000+60000, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x4008804}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000540)={{&(0x7f00007c5000/0x2000)=nil, 0x2000}, 0x4}) sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c18b90007061f08000000354bc43900eca7c55dcdf6ac2640400000"], 0x1c}}, 0x0) recvmmsg(r9, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000016c0)=""/4096, 0x1000}], 0x1}, 0x1}], 0x1, 0x20, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 1.92312912s ago: executing program 1 (id=3880): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x132, 0xffffffffffffffff, 0x6ad42000) r1 = shmget$private(0x0, 0x13000, 0x400, &(0x7f0000feb000/0x13000)=nil) openat$sysfs(0xffffffffffffff9c, 0x0, 0xe41, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000400)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000580)=[{&(0x7f00000005c0)="580000001400192360834b80043f679a10ff3d420000008eaac7e863d60001000000f61bcdf1194ad353e9cc853a80482409000000381effffffff0057e792945f80000000050028925aaa000000c600004f860004002e49", 0x58}], 0x1) syz_usb_control_io$uac3(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="201006000000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) pselect6(0x40, &(0x7f0000002a80)={0x7, 0x10000, 0x7, 0x5, 0x1, 0x8, 0x3, 0xfffffffffffffffc}, &(0x7f0000002ac0)={0x5, 0x7, 0x10000, 0x5, 0xff, 0x3, 0xdd, 0x2}, &(0x7f0000002b00)={0x9, 0xfffffffffffffff9, 0x10, 0x9, 0x4, 0x0, 0x2, 0x2}, 0x0, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) shmat(r1, &(0x7f0000ffa000/0x3000)=nil, 0x400c) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r5, 0xc0105500, &(0x7f0000000200)={0x20, 0x3, 0x0, 0x1000, 0x0, 0xfffffffe, 0x0}) r6 = accept$alg(r0, 0x0, 0x0) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000480)=""/114) sendmsg$alg(r6, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x80}], 0x30}, 0x0) sendmmsg$alg(r6, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000003c0)="553e12df315719c9cddfbe1f03774b1d49d6fc51d5b185", 0x17}, {&(0x7f0000000240)="33caaff65bbb491ee6d344e5ca70fa4e68f9ad2bd73518b68c50db097aa154c3da00"/54, 0x36}, {&(0x7f0000000400)="7082b8d45f4cc86d0267eabd24340e1911fe3ceeb757ca4a090897a00b8d106a8ceb5beaa118a5652769ac67e809e68ca18f0241349dc535", 0x38}], 0x3}], 0x1, 0x840) recvmsg(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)=""/149, 0x95}], 0x1}, 0x10001) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000680)='ns/pid_for_children\x00') setns(r7, 0x0) r8 = socket(0xa, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB], &(0x7f0000000500)=""/149, 0x2b, 0x95, 0x1, 0x3800}, 0x28) sendmsg$inet_sctp(r8, &(0x7f00000000c0)={&(0x7f00000002c0)=@in6={0xa, 0x4e24, 0x103, @private0, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000000)="db", 0x1}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="180009100000000084000000000000000d0009000000000020000000000000008400000008000000fe80"], 0x38, 0x4845}, 0x4008084) 1.909308477s ago: executing program 0 (id=3881): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) syz_emit_ethernet(0xda, &(0x7f0000000340)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x8, 0x1, 0x0, @private=0xa010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x2a, 0x4, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @multicast1, @multicast2, {[@cipso={0x86, 0x2a, 0x2, [{0x0, 0xd, "5e00020000020000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff003a0000b61af93a93"}]}, @rr={0x7, 0x1f, 0x63, [@remote, @broadcast, @empty, @private=0xa010102, @loopback, @loopback, @local]}, @cipso={0x86, 0x48, 0x0, [{0x0, 0x7, "4b3defc500"}, {0x0, 0xc, "df61168c24ac88ad078c"}, {0x0, 0xa, "2189ea43a2149b84"}, {0x0, 0xb, "f7d11634eea26b75af"}, {0x0, 0xb, "02a20848fd7406e8ed"}, {0x0, 0xf, "ccf0294e2a3bdb4aa40b249e8e"}]}]}}, "d850da37284d1872"}}}}}, 0x0) 1.830540132s ago: executing program 5 (id=3882): syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = open(&(0x7f0000000180)='./bus\x00', 0x169a7c, 0x41) copy_file_range(r1, 0x0, r1, 0x0, 0x1, 0x0) io_setup(0x5, &(0x7f0000000e80)=0x0) r3 = openat$random(0xffffffffffffff9c, &(0x7f00000002c0), 0x440, 0x0) io_submit(r2, 0x1, &(0x7f0000001580)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) fgetxattr(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="757365722e00ef7ef50e7de2aee2a22a910e5e85c6550826770150163bf798d0748faf736648c1fdf21884141bdf3e8aff137b2c3024c90a26fe1738220f0fbf0660c7040a4356cc58d6a58bc7b3bf773a865d504f707697ad45ae4a1122a0f0156fd4b40673d6223dd246869a9685d8183d60b24ddbc0937310cb11049cfa660e314e90"], 0x0, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x0, 0x0, 0xd, 0x0, 0x8c, "ff0000001a5fbf61048955f6f8ead1ff", 0x1, 0x0, 0xfc}) r4 = socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x40}}, 0x0) sendmsg$key(r4, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020a0000020000000000000000000000b2ed4ed9dceb76a3c502b0d4db1e4145f69bfb9a4d9b35553a6ca07c9eb68a807d52", @ANYRESDEC=r5, @ANYRESDEC], 0x10}}, 0x0) recvmmsg(r4, &(0x7f0000000740)=[{{&(0x7f00000005c0)=@tipc, 0x80, &(0x7f0000000800)=[{&(0x7f0000001740)=""/4066, 0xfe2}, {&(0x7f0000000940)=""/245, 0xf5}, {&(0x7f0000000300)=""/52, 0x34}, {&(0x7f0000000440)=""/140, 0x8c}], 0x4}}], 0x1, 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x4001, 0x3, 0x288, 0x138, 0x700001b, 0x148, 0x0, 0x148, 0x1f0, 0x206, 0x240, 0x1f0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x20, 0x0}, @empty, 0x0, 0x0, 'tunl0\x00', 'veth0_virt_wifi\x00', {0xff}, {0xff}, 0x0, 0x0, 0x21}, 0x1ea, 0xd0, 0x138, 0x0, {0x390, 0x8f00}, [@common=@inet=@socket1={{0x28}}, @common=@unspec=@quota={{0x38}, {0x1, 0x0, 0x2d, {0x3}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xb, 0x4, 0x6, 0x7ffffffd, 'syz1\x00', 'syz1\x00'}}}, {{@ip={@loopback, @empty, 0x0, 0xffffff00, 'sit0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x0, 0x0, 0x4}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x3, 0x80, '\x00', {0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet6(0xa, 0x2, 0x0) r9 = socket(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @empty, 0x2}, 0x1c) fcntl$setpipe(r7, 0x407, 0x8000b) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002a00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pwrite64(0xffffffffffffffff, 0x0, 0xffffffffffffff15, 0x239c1317) memfd_create(&(0x7f0000000080)='y\x105\x00\x00\x00\x00%*r\xc2\xb7u\xdc\x1c\x0f\xcb\xa0\xe4Z7\xcda\x9b\x11\x1a\x98S7\x00\x00\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b', 0xe) r10 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r11 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="600000001200050928bd7000fedbdf2521090b004e224e26fcffffff23090000000000000600000001040000040000000300000002000000", @ANYRES32=0x0, @ANYBLOB="0000010005200000310000000400000014000100071414000256"], 0x60}, 0x1, 0x0, 0x0, 0x2000010}, 0x20000000) keyctl$dh_compute(0x17, &(0x7f0000000800)={r10, r10, r10}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) 1.826811412s ago: executing program 6 (id=3883): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4083, 0xff3}], 0x1) r1 = userfaultfd(0x80000) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) pwritev2(r2, 0x0, 0x0, 0x7, 0x200, 0x10) (async) mremap(&(0x7f00002f9000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000162000/0x2000)=nil) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) (async) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) (async, rerun: 64) ioctl$UFFDIO_POISON(r1, 0xc020aa08, &(0x7f0000000100)={{&(0x7f0000355000/0x3000)=nil, 0x3000}}) (rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) (async) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) 1.725481582s ago: executing program 0 (id=3884): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x6c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x60}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x28, 0x12, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa, 0x84}}}, 0xb4}}, 0x20050800) 1.636310037s ago: executing program 6 (id=3885): syz_emit_ethernet(0x7e, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, @private=0xfffffffd, @local, {[@cipso={0x86, 0x36, 0xffffffffffffffff, [{0x0, 0xc, "5e000000ff0000000b00"}, {0x0, 0x12, "f3060ef6625c03a2e893dede449df4cf"}, {0x2, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x7, 0x0, [@dev={0xac, 0x14, 0x14, 0x42}]}]}}}}}}}, 0x0) 1.539283539s ago: executing program 0 (id=3886): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) setsockopt$MRT6_TABLE(r2, 0x29, 0xcf, &(0x7f00000001c0)=0xfe, 0x4) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x8010) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000200010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c0009800800014000", @ANYRESOCT=r5], 0xb0}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) timer_gettime(r6, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000965000/0x4000)=nil, 0x4000, 0x2000002) fcntl$lock(r7, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) linkat(r2, &(0x7f00000003c0)='./file7\x00', r7, &(0x7f0000000180)='./file7\x00', 0xc00) syz_usb_connect(0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}], 0x20) 1.538989061s ago: executing program 6 (id=3887): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x22, 0x8, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x7, 0x0, 0x0, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}}) 1.382651075s ago: executing program 6 (id=3888): r0 = socket(0xa, 0x3, 0x87) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x2) sendto(r0, &(0x7f00000003c0)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) socket$packet(0x11, 0x3, 0x300) unshare(0x22020400) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0x0, 0x0) 1.197514594s ago: executing program 6 (id=3889): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400000103000000092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0x7532}, {r1, 0x4004}], 0x2, 0x0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f00000006c0)='P') ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000180)={[0x0, 0x9000, 0xf000, 0x26e310882fc98f59], 0x9, 0x81, 0x7}) 737.034759ms ago: executing program 4 (id=3890): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000780)={{0x8, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x4, 0xfffffffffffffffe, 0x40000000000, 0xffffffffffffffff, 0xffffffeffffffffe, 0x0, 0x6, 0x3, 0x0, 0x7, 0x0, 0x0, 0xfffffeffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x3ff, 0x0, 0xfffffffffffffffc, 0x4, 0x4000000000, 0x6, 0x1, 0x40, 0x0, 0xfffffffffffffffd, 0x80100200000, 0xb, 0x8000000000000000, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000, 0x1000, 0x0, 0x8, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0xffffffdfffffffff, 0x0, 0x3, 0x0, 0x7, 0x10000, 0x7785, 0x0, 0x4, 0x4, 0x1a8e, 0x0, 0xfffffffffffffffe, 0x0, 0xbb4e, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x5, 0x0, 0x7ff, 0x0, 0xfffffffffffffffe, 0x9, 0x1000000000, 0x0, 0x80000000000000, 0x8, 0xfffffffffffffffe, 0x200000000, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2c5, 0x0, 0x4, 0x81, 0xfffffffffffffff9, 0x0, 0x200000000, 0x0, 0x9, 0x0, 0x1, 0x3, 0x2, 0x0, 0x7, 0xc0c0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0xffffffffffeffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]}) 483.430143ms ago: executing program 4 (id=3891): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r1, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b", 0x44}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94", 0x12}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd", 0x67}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0", 0x88}], 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x2, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) 254.15194ms ago: executing program 4 (id=3892): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r1 = fanotify_init(0x8, 0x40000) fanotify_mark(r1, 0x201, 0x40000036, r0, 0x0) fanotify_mark(r1, 0x441, 0x8000001, r0, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000000)={0x0, 0x8001}) 207.422299ms ago: executing program 1 (id=3893): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x77}, @exit], &(0x7f0000000200)='GPL\x00'}, 0x90) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_proto_private(r0, 0x89e1, &(0x7f0000001080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$radio(&(0x7f0000000380), 0x3, 0x2) ioctl$VIDIOC_G_FREQUENCY(r3, 0xc02c5638, &(0x7f0000000280)={0x0, 0x2, 0xfffff2ff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) socket$netlink(0x10, 0x3, 0x13) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000200), 0xfffffd9d) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f00000000c0)={0x2, 0x80000, r4}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x42}) syz_genetlink_get_family_id$devlink(&(0x7f0000008280), 0xffffffffffffffff) 64.786899ms ago: executing program 5 (id=3894): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) sendmmsg$inet(r1, &(0x7f0000007240)=[{{&(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000e40)=[{&(0x7f0000000580)="fe3c75b276077f435911f546fac465645aa92c329d22ff3c788e506d852723e2337591365c05e594c38a11b4f2baff4d0f1602c0bdf4b0fb565d3bbb73642f782c7b44b540941631d4e319aad5acd0922cc47e1ad1af5118208a8887090b7589a06ee0cdfc4a91092393ff52aa49dad7112d45daf4da328a8e481f4e07e0bca05b5a8f87a1ae62d84ed98921b3f350c96432cf2513dffe75fde1", 0x9a}, {&(0x7f0000000640)="6c8c778bd61f52153eadf672a8afd4ac2cd4485dcd4ec767a7bc9928c1328c782cc6c00961536b8714456de68c0b95c356c5b4aabed86f3324eeb0d0c5180e6ee7", 0x41}, {&(0x7f00000006c0)="0998b6d80a5faee59cbeec7bcfcf9c1e2063f5c7082c6896033bfc01320f555949aa7fb3aa9d03660281ad546de98f985dd938e4ed7e46ad0a835981830e04e89e6a70df4c3d0e95a4ff35c7fdcdc22db9305a009437df2d7eeb7d268c412a2a8b4dc9a4a82b330784399d9b907b59e310e590915cf77c7e8aebd679af6993193e5d6f9b2d040a353af1b5a36d640147dc4a59034dfb80c58eaf1ed1b1c0a1d6c26cd0e6238521f2e427", 0xaa}, {&(0x7f0000000780)="b36fb12aeed1fca7dbe86cf8a51fcba64a4500b788fff99c2fea82772ec33fc8474c776390bdeadd0d0163242a6aeee9f37464", 0x33}, {&(0x7f00000007c0)="c53403c9821d42ed436ddabc91e99c52cf74e4b7206281f94b750df03503ba7407ac3ed8d4423ff381d8c5ac6672bec3e85d29de039e96e57d5f68983261f0f7ab687cee54125ba3c3ae32dc0a78f5fefac1a06071f63da3c50eac66f63e6faad0176c96972e6e4e6314f80acf08a24b714ad9cd607f1e1d680b8f6be20f06fad2a91d3bbed6eb8651887af8735b", 0x8e}, {&(0x7f0000000d00)="6c382d4c4221187cfac03c3d119a2accb6f31ed54d2fe8453b4e73a51884e0a24c949212a48130a5e0b410f354a42d2112eb5c375be6bcce18d99939b6847eac6639596caccf62705ac125c649cc0db135845a8f4249e59b8d316683ece5c685004cd33a4a4af9c162cead5082f5c59890aba045d373af98383a102d8e3967c9f26cd5ec9b89a15fec37a6efb0ec86ce60e2ae52cd6e8214ff203416a652bdd1590cd15eacfb120d4204907f6980f35d60f0d44eb6c18ecca5cab428", 0xbc}, {&(0x7f0000000dc0)="f91e950036c987d2478835e0a2a4ccf3ebe3a3155d148859b14df46cac131d15ca84cbddc6187a6f5fe6add6d2280454c5b489b50219135a747a1db71c10948c533d48f03dd0ada4560f97dc6fbda978bbca02832323932aba13fa07a921f0aee209782615565ebe7787b916e7bf", 0x6e}], 0x7}}, {{0x0, 0x0, &(0x7f0000003780)=[{&(0x7f00000037c0)="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", 0x40b}], 0x1}}, {{0x0, 0x0, &(0x7f0000007100)}}], 0x3, 0x2000c044) writev(r1, &(0x7f0000002640)=[{&(0x7f0000000c40)="b4", 0x1}], 0x1) 0s ago: executing program 4 (id=3895): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x0, 0xc0107520, 0x500}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r6, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) kernel console output (not intermixed with test programs): T7290] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.064801][ T7290] usb 1-1: config 0 descriptor?? [ 644.103767][T16738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 644.110934][T16738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 644.138674][T16738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 644.154016][T16738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 644.165620][T16738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 644.192285][T16738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 644.322416][T15908] usb 6-1: 0:2 : does not exist [ 644.423737][T16738] hsr_slave_0: entered promiscuous mode [ 644.448567][T16738] hsr_slave_1: entered promiscuous mode [ 644.468361][T15908] usb 6-1: USB disconnect, device number 61 [ 644.476463][T16738] debugfs: 'hsr0' already exists in 'hsr' [ 644.499341][T16738] Cannot create hsr debugfs directory [ 644.577264][ T5678] udevd[5678]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 644.629435][ T4941] Bluetooth: hci1: command tx timeout [ 644.656193][ T7290] plantronics 0003:047F:FFFF.0029: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 645.057144][T16773] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3317'. [ 645.282369][T16723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 645.317835][T16723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 645.484138][T15909] usb 1-1: USB disconnect, device number 83 [ 645.580230][T16785] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 646.569475][T16738] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 646.614724][T16738] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 646.680677][T16738] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 646.713009][ T4941] Bluetooth: hci1: command tx timeout [ 646.738021][T16738] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 646.753013][T16738] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 646.838257][T16738] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 646.881663][T16738] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 646.902856][T16809] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3332'. [ 646.937011][T16738] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 647.478639][T16738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 647.592156][T16738] 8021q: adding VLAN 0 to HW filter on device team0 [ 647.647989][ T1540] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.655223][ T1540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 647.683645][T13291] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 647.719856][ T1540] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.727054][ T1540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 647.862082][T13291] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 647.891695][T13291] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 647.926233][T13291] usb 2-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 647.941100][T16738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 647.950336][T13291] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.984098][T13291] usb 2-1: config 0 descriptor?? [ 648.102588][T16738] veth0_vlan: entered promiscuous mode [ 648.154069][T16738] veth1_vlan: entered promiscuous mode [ 648.286359][T16738] veth0_macvtap: entered promiscuous mode [ 648.317314][T16738] veth1_macvtap: entered promiscuous mode [ 648.372022][T16738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 648.408289][T16738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 648.433562][T13291] kye 0003:0458:5016.002A: control desc unexpectedly large [ 648.446548][ T7346] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.466375][ T7346] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.480606][T13291] input: HID 0458:5016 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5016.002A/input/input53 [ 648.504277][ T7346] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.545237][ T7346] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.614255][T13291] input: HID 0458:5016 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5016.002A/input/input54 [ 648.790921][ T4941] Bluetooth: hci1: command tx timeout [ 648.867082][T13291] kye 0003:0458:5016.002A: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.1-1/input0 [ 648.988167][T16847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 649.005688][T16844] ucma_write: process 1151 (syz.5.3339) changed security contexts after opening file descriptor, this is not allowed. [ 649.023472][ T7346] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 649.052425][T16847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 649.073267][ T7346] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 649.233054][ T7033] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 649.268542][ T7033] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 649.332291][T16841] could not allocate digest TFM handle sha3-224-ce [ 649.341675][T16852] syzkaller0: entered promiscuous mode [ 649.364426][T16852] syzkaller0: entered allmulticast mode [ 649.554075][ C1] kye 0003:0458:5016.002A: usb_submit_urb(ctrl) failed: -1 [ 650.294189][T16879] trusted_key: syz.0.3346 sent an empty control message without MSG_MORE. [ 650.355672][T15908] usb 2-1: USB disconnect, device number 32 [ 650.489364][T13291] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 650.681923][T13291] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 650.709735][T13291] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 650.734003][T13291] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 650.744585][T13291] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 650.759541][ T30] audit: type=1326 audit(1783709379.306:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16887 comm="syz.1.3351" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c979de59 code=0x7fc00000 [ 650.762952][T13291] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 650.804329][T13291] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.846219][ T30] audit: type=1326 audit(1783709379.336:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16887 comm="syz.1.3351" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f74c979de59 code=0x7fc00000 [ 650.883094][ T4941] Bluetooth: hci1: command tx timeout [ 650.901548][T13291] usb 4-1: config 0 descriptor?? [ 650.987550][ T30] audit: type=1326 audit(1783709379.386:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16887 comm="syz.1.3351" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f74c9797bd7 code=0x7fc00000 [ 651.082410][ T30] audit: type=1326 audit(1783709379.386:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16887 comm="syz.1.3351" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f74c973f1d9 code=0x7fc00000 [ 651.172715][ T30] audit: type=1326 audit(1783709379.386:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16887 comm="syz.1.3351" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f74c973f29d code=0x7fc00000 [ 651.314320][ T30] audit: type=1326 audit(1783709379.386:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16887 comm="syz.1.3351" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f74c979de59 code=0x7fc00000 [ 651.561565][T16885] syz.5.3350 (16885): drop_caches: 2 [ 651.668739][T13291] plantronics 0003:047F:FFFF.002B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 652.000764][T15909] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 652.053216][T16901] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3356'. [ 652.068493][T16902] loop2: detected capacity change from 0 to 7 [ 652.093213][T16902] Dev loop2: unable to read RDB block 7 [ 652.109335][T16902] loop2: unable to read partition table [ 652.139602][T16902] loop2: partition table beyond EOD, truncated [ 652.162663][T16902] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 652.183616][T15909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 652.220601][T15909] usb 5-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 652.250799][T15909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.292998][T16835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 652.305146][T15909] usb 5-1: config 0 descriptor?? [ 652.333975][T16835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 652.494071][T15908] usb 4-1: USB disconnect, device number 101 [ 652.606483][T16908] netlink: 'syz.1.3359': attribute type 10 has an invalid length. [ 652.637968][T16908] team0: Device veth0_macvtap is up. Set it down before adding it as a team port [ 652.738435][T16897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 652.749893][T16897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 652.779505][T15909] hid_parser_main: 7 callbacks suppressed [ 652.779533][T15909] sunplus 0003:04FC:05D8.002C: unknown main item tag 0x0 [ 652.806834][T15909] sunplus 0003:04FC:05D8.002C: unknown main item tag 0x4 [ 652.815683][T15909] sunplus 0003:04FC:05D8.002C: unknown main item tag 0x0 [ 652.824628][T15909] sunplus 0003:04FC:05D8.002C: unknown main item tag 0x0 [ 652.832230][T15909] sunplus 0003:04FC:05D8.002C: unknown main item tag 0x0 [ 652.839750][T15909] sunplus 0003:04FC:05D8.002C: unknown main item tag 0x2 [ 652.847063][T15909] sunplus 0003:04FC:05D8.002C: unknown main item tag 0x0 [ 652.855735][T15909] sunplus 0003:04FC:05D8.002C: unknown main item tag 0x0 [ 652.863150][T15909] sunplus 0003:04FC:05D8.002C: unknown main item tag 0x0 [ 652.883390][T15909] sunplus 0003:04FC:05D8.002C: unknown main item tag 0x0 [ 652.902476][T16913] syz_tun: entered allmulticast mode [ 652.911639][T15909] sunplus 0003:04FC:05D8.002C: item fetching failed at offset 40/41 [ 652.936815][T15909] sunplus 0003:04FC:05D8.002C: probe with driver sunplus failed with error -22 [ 652.959937][T16914] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 652.966514][T16914] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 652.988310][T15909] usb 5-1: USB disconnect, device number 97 [ 652.999912][T16914] vhci_hcd vhci_hcd.0: Device attached [ 653.309692][T15908] usb 34-1: SetAddress Request (10) to port 0 [ 653.317113][T15908] usb 34-1: new SuperSpeed USB device number 10 using vhci_hcd [ 653.327636][T16920] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3362'. [ 653.825578][ T7346] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 653.857128][ T7346] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 654.156578][T16915] vhci_hcd: connection reset by peer [ 654.175006][ T7343] vhci_hcd vhci_hcd.0: stop threads [ 654.205357][ T7343] vhci_hcd vhci_hcd.0: release socket [ 654.234972][ T7343] vhci_hcd vhci_hcd.0: disconnect device [ 654.280373][T16938] syz.4.3366 (16938): drop_caches: 2 [ 654.579747][T16941] xt_limit: Overflow, try lower: 0/0 [ 654.966641][T16953] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3371'. [ 655.233991][T16961] netlink: 'syz.4.3374': attribute type 4 has an invalid length. [ 655.668332][T16977] Cannot find add_set index 2 as target [ 656.119398][T13291] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 656.299406][T13291] usb 2-1: Using ep0 maxpacket: 8 [ 656.305878][T15911] IPVS: starting estimator thread 0... [ 656.321231][T13291] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 656.342171][T13291] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.366125][T13291] usb 2-1: Product: syz [ 656.372950][T13291] usb 2-1: Manufacturer: syz [ 656.377751][T13291] usb 2-1: SerialNumber: syz [ 656.418778][T13291] usb 2-1: config 0 descriptor?? [ 656.453103][T17006] IPVS: using max 29 ests per chain, 69600 per kthread [ 656.698740][T17013] netlink: 'syz.3.3392': attribute type 1 has an invalid length. [ 656.722707][T17013] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3392'. [ 656.974850][T17019] IPv6: NLM_F_CREATE should be specified when creating new route [ 657.059478][ T5695] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 657.209391][ T5695] usb 1-1: Using ep0 maxpacket: 32 [ 657.238296][T13291] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 657.273526][T13291] usb 2-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 657.286744][T13291] usb 2-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 657.386115][ T5695] usb 1-1: unable to get BOS descriptor or descriptor too short [ 657.415473][ T5695] usb 1-1: too many configurations: 80, using maximum allowed: 8 [ 657.434764][ T5695] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 657.451920][ T5695] usb 1-1: can't read configurations, error -71 [ 657.869060][T17037] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 657.992206][T17037] Invalid logical block size (982) [ 658.389693][T15908] usb 34-1: device descriptor read/8, error -110 [ 658.497937][T17057] FAULT_INJECTION: forcing a failure. [ 658.497937][T17057] name failslab, interval 1, probability 0, space 0, times 0 [ 658.552893][ T5695] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 658.562193][T17057] CPU: 0 UID: 0 PID: 17057 Comm: syz.4.3405 Tainted: G L syzkaller #0 PREEMPT(full) [ 658.562227][T17057] Tainted: [L]=SOFTLOCKUP [ 658.562235][T17057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 658.562248][T17057] Call Trace: [ 658.562256][T17057] [ 658.562265][T17057] dump_stack_lvl+0xe8/0x150 [ 658.562312][T17057] should_fail_ex+0x40c/0x560 [ 658.562343][T17057] should_failslab+0xa8/0x100 [ 658.562381][T17057] __kmalloc_cache_noprof+0xa8/0x660 [ 658.562411][T17057] ? snd_pcm_hw_param_near+0x80/0x4d0 [ 658.562436][T17057] ? snd_pcm_hw_param_near+0x80/0x4d0 [ 658.562468][T17057] snd_pcm_hw_param_near+0x80/0x4d0 [ 658.562499][T17057] snd_pcm_oss_change_params_locked+0x1e5e/0x3c80 [ 658.562554][T17057] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 658.562589][T17057] ? __mutex_unlock_slowpath+0x731/0x900 [ 658.562636][T17057] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 658.562667][T17057] ? __might_fault+0xaf/0x130 [ 658.562696][T17057] snd_pcm_oss_get_active_substream+0x20b/0x280 [ 658.562730][T17057] snd_pcm_oss_set_rate+0x1bc/0x4f0 [ 658.562761][T17057] snd_pcm_oss_ioctl+0xc2e/0xdf0 [ 658.562788][T17057] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 658.562813][T17057] __se_sys_ioctl+0xfc/0x170 [ 658.562833][T17057] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.562858][T17057] do_syscall_64+0x174/0x580 [ 658.562886][T17057] ? trace_irq_disable+0x3b/0x140 [ 658.562913][T17057] ? clear_bhb_loop+0x40/0x90 [ 658.562940][T17057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.562961][T17057] RIP: 0033:0x7f33aa79de59 [ 658.562981][T17057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 658.563000][T17057] RSP: 002b:00007f33ab615028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 658.563024][T17057] RAX: ffffffffffffffda RBX: 00007f33aaa25fa0 RCX: 00007f33aa79de59 [ 658.563040][T17057] RDX: 00002000000000c0 RSI: 00000000c0045002 RDI: 0000000000000003 [ 658.563055][T17057] RBP: 00007f33ab615090 R08: 0000000000000000 R09: 0000000000000000 [ 658.563069][T17057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 658.563082][T17057] R13: 00007f33aaa26038 R14: 00007f33aaa25fa0 R15: 00007f33aab4fa48 [ 658.563115][T17057] [ 658.811700][T15908] usb usb34-port1: attempt power cycle [ 659.117768][ T5695] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 659.162964][ T5695] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 659.203896][ T5695] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 659.246448][ T5695] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 659.295987][ T5695] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 659.326026][ T5695] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.381545][T15908] usb usb34-port1: unable to enumerate USB device [ 659.396021][ T5695] usb 1-1: config 0 descriptor?? [ 659.453889][T17067] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3408'. [ 659.484333][T17067] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3408'. [ 659.589724][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 659.907953][ T5695] plantronics 0003:047F:FFFF.002D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 660.615267][T17072] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 660.621821][T17072] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 660.690287][T17072] vhci_hcd vhci_hcd.0: Device attached [ 660.723149][T17072] FAULT_INJECTION: forcing a failure. [ 660.723149][T17072] name failslab, interval 1, probability 0, space 0, times 0 [ 660.772328][T17072] CPU: 1 UID: 0 PID: 17072 Comm: syz.3.3411 Tainted: G L syzkaller #0 PREEMPT(full) [ 660.772369][T17072] Tainted: [L]=SOFTLOCKUP [ 660.772375][T17072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 660.772385][T17072] Call Trace: [ 660.772392][T17072] [ 660.772399][T17072] dump_stack_lvl+0xe8/0x150 [ 660.772428][T17072] should_fail_ex+0x40c/0x560 [ 660.772450][T17072] should_failslab+0xa8/0x100 [ 660.772478][T17072] __kmalloc_noprof+0xfe/0x720 [ 660.772499][T17072] ? ethnl_default_start+0x118/0x610 [ 660.772593][T17072] ? ethnl_default_start+0x118/0x610 [ 660.772615][T17072] ethnl_default_start+0x118/0x610 [ 660.772638][T17072] genl_start+0x4c1/0x6d0 [ 660.772663][T17072] __netlink_dump_start+0x442/0x7b0 [ 660.772738][T17072] genl_family_rcv_msg_dumpit+0x213/0x310 [ 660.772763][T17072] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 660.772782][T17072] ? genl_get_cmd+0x6cc/0x960 [ 660.772804][T17072] ? __pfx_genl_start+0x10/0x10 [ 660.772822][T17072] ? __pfx_genl_dumpit+0x10/0x10 [ 660.772839][T17072] ? __pfx_genl_done+0x10/0x10 [ 660.772860][T17072] ? __dev_queue_xmit+0x29b/0x37f0 [ 660.772909][T17072] genl_rcv_msg+0x5e1/0x7a0 [ 660.772933][T17072] ? __pfx_genl_rcv_msg+0x10/0x10 [ 660.772952][T17072] ? __pfx_ethnl_default_start+0x10/0x10 [ 660.772974][T17072] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 660.772991][T17072] ? __pfx_ethnl_default_done+0x10/0x10 [ 660.773009][T17072] ? __pfx_ref_tracker_free+0x10/0x10 [ 660.773037][T17072] netlink_rcv_skb+0x226/0x4a0 [ 660.773063][T17072] ? __pfx_genl_rcv_msg+0x10/0x10 [ 660.773083][T17072] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 660.773119][T17072] ? down_read+0x2be/0x330 [ 660.773148][T17072] genl_rcv+0x28/0x40 [ 660.773165][T17072] netlink_unicast+0x7bb/0x940 [ 660.773196][T17072] netlink_sendmsg+0x813/0xb40 [ 660.773218][T17072] ? __pfx_netlink_sendmsg+0x10/0x10 [ 660.773241][T17072] ? aa_sock_msg_perm+0xf1/0x1b0 [ 660.773261][T17072] ? __pfx_netlink_sendmsg+0x10/0x10 [ 660.773276][T17072] sock_sendmsg_nosec+0x13a/0x180 [ 660.773297][T17072] ____sys_sendmsg+0x54e/0x850 [ 660.773326][T17072] ? __pfx_____sys_sendmsg+0x10/0x10 [ 660.773357][T17072] ? import_iovec+0x73/0xa0 [ 660.773382][T17072] ___sys_sendmsg+0x2a5/0x360 [ 660.773406][T17072] ? __lock_acquire+0x683/0x2cf0 [ 660.773432][T17072] ? __pfx____sys_sendmsg+0x10/0x10 [ 660.773484][T17072] ? __fget_files+0x2a/0x420 [ 660.773506][T17072] ? __fget_files+0x3a2/0x420 [ 660.773534][T17072] __x64_sys_sendmsg+0x1b1/0x290 [ 660.773561][T17072] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 660.773595][T17072] ? arch_syscall_is_vdso_sigreturn+0x11f/0x1a0 [ 660.773614][T17072] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.773631][T17072] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.773648][T17072] do_syscall_64+0x174/0x580 [ 660.773670][T17072] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.773686][T17072] ? clear_bhb_loop+0x40/0x90 [ 660.773706][T17072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.773722][T17072] RIP: 0033:0x7fa42799de59 [ 660.773737][T17072] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 660.773751][T17072] RSP: 002b:00007fa4287b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 660.773768][T17072] RAX: ffffffffffffffda RBX: 00007fa427c25fa0 RCX: 00007fa42799de59 [ 660.773780][T17072] RDX: 0000000024000010 RSI: 0000200000001680 RDI: 0000000000000006 [ 660.773790][T17072] RBP: 00007fa4287b6090 R08: 0000000000000000 R09: 0000000000000000 [ 660.773800][T17072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 660.773809][T17072] R13: 00007fa427c26038 R14: 00007fa427c25fa0 R15: 00007fa427d4fa48 [ 660.773834][T17072] [ 661.378302][ T5722] usb 1-1: USB disconnect, device number 85 [ 661.401201][T17086] vhci_hcd: connection closed [ 661.406280][ T12] vhci_hcd vhci_hcd.3: stop threads [ 661.459319][T15911] usb 40-1: SetAddress Request (8) to port 0 [ 661.465468][T15911] usb 40-1: new SuperSpeed USB device number 8 using vhci_hcd [ 661.482624][ T12] vhci_hcd vhci_hcd.3: release socket [ 661.500376][ T5695] usb 6-1: new full-speed USB device number 62 using dummy_hcd [ 661.523053][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 661.702692][ T5695] usb 6-1: too many endpoints for config 0 interface 0 altsetting 254: 254, using maximum allowed: 30 [ 661.714054][ T5695] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 661.725994][ T5695] usb 6-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 661.740880][ T5695] usb 6-1: config 0 interface 0 has no altsetting 0 [ 661.747637][ T5695] usb 6-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 661.757654][ T5695] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.770159][ T5695] usb 6-1: config 0 descriptor?? [ 661.783493][T17093] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 661.869305][T13290] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 662.025214][ T5695] hid_parser_main: 2 callbacks suppressed [ 662.025243][ T5695] lenovo 0003:17EF:6067.002E: unknown main item tag 0x0 [ 662.068004][ T5695] lenovo 0003:17EF:6067.002E: unknown main item tag 0x0 [ 662.075307][T13290] usb 5-1: Using ep0 maxpacket: 32 [ 662.088384][T13290] usb 5-1: config 8 has an invalid interface number: 162 but max is 0 [ 662.102951][ T5695] lenovo 0003:17EF:6067.002E: unknown main item tag 0x0 [ 662.110293][T13290] usb 5-1: config 8 has no interface number 0 [ 662.122042][ T5695] lenovo 0003:17EF:6067.002E: unknown main item tag 0x0 [ 662.130995][T13290] usb 5-1: config 8 interface 162 has no altsetting 0 [ 662.144603][ T5695] lenovo 0003:17EF:6067.002E: unknown main item tag 0x0 [ 662.167322][T13290] usb 5-1: New USB device found, idVendor=0123, idProduct=0001, bcdDevice=ce.9f [ 662.186417][ T5695] lenovo 0003:17EF:6067.002E: unknown main item tag 0x0 [ 662.196036][T13290] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.209898][ T5695] lenovo 0003:17EF:6067.002E: unknown main item tag 0x0 [ 662.225205][T13290] usb 5-1: Product: syz [ 662.250742][T13290] usb 5-1: Manufacturer: syz [ 662.262241][ T5695] lenovo 0003:17EF:6067.002E: unknown main item tag 0x0 [ 662.273044][T13290] usb 5-1: SerialNumber: syz [ 662.290329][ T5695] lenovo 0003:17EF:6067.002E: unknown main item tag 0x0 [ 662.310294][ T5695] lenovo 0003:17EF:6067.002E: unknown main item tag 0x0 [ 662.333022][ T5695] lenovo 0003:17EF:6067.002E: hidraw0: USB HID v0.01 Device [HID 17ef:6067] on usb-dummy_hcd.5-1/input0 [ 662.532048][T13290] usbtouchscreen 5-1:8.162: probe with driver usbtouchscreen failed with error -71 [ 662.561095][T13290] usb 5-1: USB disconnect, device number 98 [ 662.808671][T17124] ipip0: entered allmulticast mode [ 663.357574][T17144] syzkaller0: entered promiscuous mode [ 663.363494][T17144] syzkaller0: entered allmulticast mode [ 663.383474][T17144] tipc: Enabled bearer , priority 0 [ 663.395271][T17143] tipc: Resetting bearer [ 663.452786][T17143] tipc: Disabling bearer [ 663.589327][T13290] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 663.722675][ T5695] usb 6-1: USB disconnect, device number 62 [ 663.760675][T13290] usb 5-1: Using ep0 maxpacket: 8 [ 663.791021][T13290] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 663.822899][T17152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3441'. [ 663.850522][T13290] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 663.878863][T13290] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.925303][T17156] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3442'. [ 663.937338][T13290] usb 5-1: Product: syz [ 663.945468][T17155] netlink: 'syz.1.3441': attribute type 54 has an invalid length. [ 663.958523][T13290] usb 5-1: Manufacturer: syz [ 663.970711][T13290] usb 5-1: SerialNumber: syz [ 663.988517][T17155] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3441'. [ 663.999270][T13290] usb 5-1: config 0 descriptor?? [ 664.023427][T13290] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 664.041119][T13290] usb 5-1: setting power ON [ 664.050358][T13290] dvb-usb: bulk message failed: -22 (2/0) [ 664.080101][T13290] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 664.092879][T13290] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 664.103467][T13290] usb 5-1: media controller created [ 664.121241][T17157] macvtap0: entered allmulticast mode [ 664.130524][T13290] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 664.144930][T17159] bond3: (slave vti0): refused to change device type [ 664.161840][T13290] usb 5-1: selecting invalid altsetting 6 [ 664.169930][T13290] usb 5-1: digital interface selection failed (-22) [ 664.176711][T13290] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 664.186969][T13290] usb 5-1: setting power OFF [ 664.192446][T13290] dvb-usb: bulk message failed: -22 (2/0) [ 664.201727][T13290] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 664.212236][T13290] (NULL device *): no alternate interface [ 664.219399][T17142] dvb-usb: bulk message failed: -22 (3/0) [ 664.266645][T17142] dvb-usb: bulk message failed: -22 (3/0) [ 664.306452][T17142] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3437'. [ 664.354350][T13290] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 664.377719][T13290] usb 5-1: USB disconnect, device number 99 [ 664.392059][ T5899] udevd[5899]: setting mode of /dev/bus/usb/005/099 to 020664 failed: No such file or directory [ 664.411589][ T5899] udevd[5899]: setting owner of /dev/bus/usb/005/099 to uid=0, gid=0 failed: No such file or directory [ 664.734698][T17177] netlink: 'syz.1.3445': attribute type 23 has an invalid length. [ 665.304989][T17192] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3450'. [ 665.638937][T17202] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3455'. [ 665.840279][T17206] dummy0: entered promiscuous mode [ 665.863399][T17206] dummy0: left promiscuous mode [ 665.974388][T17204] fuse: Unknown parameter '' [ 666.259436][T15908] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 666.421381][T15908] usb 5-1: unable to get BOS descriptor or descriptor too short [ 666.437435][T15908] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 36, changing to 7 [ 666.463471][T15908] usb 5-1: config 1 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 666.498079][T15908] usb 5-1: New USB device found, idVendor=18d1, idProduct=2d05, bcdDevice= 0.40 [ 666.519474][T15908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.539393][T15908] usb 5-1: Product: syz [ 666.543647][T15908] usb 5-1: Manufacturer: syz [ 666.548271][T15908] usb 5-1: SerialNumber: syz [ 666.553731][T15911] usb 40-1: device descriptor read/8, error -110 [ 666.819873][T15908] usb 5-1: 1:1 : sample bitwidth 62 in over sample bytes 3 [ 666.837650][T15908] usb 5-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 666.877757][T15908] usb 5-1: failed to enable PITCH for EP 0x1 [ 666.895583][T15908] usb 5-1: unit 2 not found! [ 666.905370][T15908] usb 5-1: unit 0 not found! [ 666.962646][T15911] usb usb40-port1: attempt power cycle [ 667.012505][T15908] usb 5-1: USB disconnect, device number 100 [ 667.091682][ T5744] udevd[5744]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 667.425549][T17244] netlink: 'syz.5.3460': attribute type 1 has an invalid length. [ 667.533299][T17244] 8021q: adding VLAN 0 to HW filter on device bond4 [ 667.544045][T15911] usb usb40-port1: unable to enumerate USB device [ 667.594315][T17246] bond4: (slave gretap1): Enslaving as a backup interface with an up link [ 667.619738][T17244] bond4 (unregistering): (slave gretap1): Releasing backup interface [ 667.633173][T17244] bond4 (unregistering): Released all slaves [ 667.740012][T15908] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 667.919276][T15908] usb 1-1: Using ep0 maxpacket: 8 [ 667.926452][T15908] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 667.935725][T15908] usb 1-1: config 0 has no interface number 0 [ 667.959350][T15908] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 667.972962][T15908] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 667.995759][T15908] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 668.022279][T15908] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 668.049260][T15908] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 668.069291][T15908] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.080410][ T5695] usb 6-1: new full-speed USB device number 63 using dummy_hcd [ 668.092322][T15908] usb 1-1: config 0 descriptor?? [ 668.113973][T15908] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 668.264600][ T5695] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 668.290770][ T5695] usb 6-1: config 0 interface 0 has no altsetting 0 [ 668.312669][ T5695] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 668.338265][T17248] program syz.0.3462 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 668.366537][ T5695] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 668.378795][ T5695] usb 6-1: Product: syz [ 668.387696][ T5695] usb 6-1: Manufacturer: syz [ 668.400980][ T5722] usb 1-1: USB disconnect, device number 86 [ 668.411482][ T5695] usb 6-1: SerialNumber: syz [ 668.423907][ T5722] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 668.475135][ T5695] usb 6-1: config 0 descriptor?? [ 668.504820][ T5695] usb 6-1: selecting invalid altsetting 0 [ 668.804936][ T5695] usb 6-1: USB disconnect, device number 63 [ 668.812074][T17255] usb 6-1: cannot submit urb 0, error -19: no device [ 669.305921][T17275] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3472'. [ 669.359342][ T5695] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 669.463280][T17280] FAULT_INJECTION: forcing a failure. [ 669.463280][T17280] name failslab, interval 1, probability 0, space 0, times 0 [ 669.490618][T17280] CPU: 1 UID: 0 PID: 17280 Comm: syz.0.3473 Tainted: G L syzkaller #0 PREEMPT(full) [ 669.490653][T17280] Tainted: [L]=SOFTLOCKUP [ 669.490661][T17280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 669.490674][T17280] Call Trace: [ 669.490683][T17280] [ 669.490692][T17280] dump_stack_lvl+0xe8/0x150 [ 669.490736][T17280] should_fail_ex+0x40c/0x560 [ 669.490767][T17280] should_failslab+0xa8/0x100 [ 669.490800][T17280] __kmalloc_noprof+0xfe/0x720 [ 669.490825][T17280] ? rcu_is_watching+0x15/0xb0 [ 669.490858][T17280] ? tomoyo_realpath_from_path+0xef/0x640 [ 669.490880][T17280] ? tomoyo_realpath_from_path+0xef/0x640 [ 669.490911][T17280] tomoyo_realpath_from_path+0xef/0x640 [ 669.490945][T17280] ? tomoyo_path_number_perm+0x219/0x5f0 [ 669.490977][T17280] tomoyo_path_number_perm+0x246/0x5f0 [ 669.491011][T17280] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 669.491041][T17280] ? __lock_acquire+0x683/0x2cf0 [ 669.491093][T17280] ? hook_file_ioctl+0x1f0/0x5f0 [ 669.491147][T17280] ? __fget_files+0x2a/0x420 [ 669.491177][T17280] ? __fget_files+0x2a/0x420 [ 669.491204][T17280] ? __fget_files+0x3a2/0x420 [ 669.491229][T17280] ? __fget_files+0x2a/0x420 [ 669.491261][T17280] security_file_ioctl+0xc3/0x2a0 [ 669.491292][T17280] __se_sys_ioctl+0x47/0x170 [ 669.491314][T17280] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.491338][T17280] do_syscall_64+0x174/0x580 [ 669.491367][T17280] ? trace_irq_disable+0x3b/0x140 [ 669.491413][T17280] ? clear_bhb_loop+0x40/0x90 [ 669.491441][T17280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.491463][T17280] RIP: 0033:0x7ff5def9de59 [ 669.491485][T17280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 669.491504][T17280] RSP: 002b:00007ff5dfda5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 669.491528][T17280] RAX: ffffffffffffffda RBX: 00007ff5df225fa0 RCX: 00007ff5def9de59 [ 669.491544][T17280] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 669.491558][T17280] RBP: 00007ff5dfda5090 R08: 0000000000000000 R09: 0000000000000000 [ 669.491572][T17280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 669.491586][T17280] R13: 00007ff5df226038 R14: 00007ff5df225fa0 R15: 00007ff5df34fa48 [ 669.491621][T17280] [ 669.491643][T17280] ERROR: Out of memory at tomoyo_realpath_from_path. [ 669.533293][ T5695] usb 5-1: too many configurations: 30, using maximum allowed: 8 [ 669.623488][ T5695] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 669.779260][ T5695] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.792207][ T5695] usb 5-1: Product: syz [ 669.799284][ T5695] usb 5-1: Manufacturer: syz [ 669.809201][ T5695] usb 5-1: SerialNumber: syz [ 669.827194][ T5695] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 669.844814][ T5722] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 670.001702][T15908] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 670.069288][ C0] usb 5-1: ath9k_htc: invalid pkt_len (e108) [ 670.159272][T15908] usb 6-1: Using ep0 maxpacket: 8 [ 670.171517][T15908] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 670.193118][T15908] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 670.209211][T15908] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.223931][T15908] usb 6-1: Product: syz [ 670.231111][T15908] usb 6-1: Manufacturer: syz [ 670.239218][T15908] usb 6-1: SerialNumber: syz [ 670.253506][T15908] usb 6-1: config 0 descriptor?? [ 670.271067][T15908] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 670.284756][T15908] usb 6-1: setting power ON [ 670.299304][T15908] dvb-usb: bulk message failed: -22 (2/0) [ 670.308779][ T5695] usb 5-1: USB disconnect, device number 101 [ 670.336194][T15908] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 670.350534][T15908] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 670.379693][T15908] usb 6-1: media controller created [ 670.394602][T15908] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 670.420955][T15908] usb 6-1: selecting invalid altsetting 6 [ 670.426795][T15908] usb 6-1: digital interface selection failed (-22) [ 670.438894][T15908] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 670.448660][T15908] usb 6-1: setting power OFF [ 670.455497][T15908] dvb-usb: bulk message failed: -22 (2/0) [ 670.461568][T15908] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 670.466015][T17283] dvb-usb: bulk message failed: -22 (3/0) [ 670.510281][T15908] (NULL device *): no alternate interface [ 670.628553][T15908] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 670.651780][T15908] usb 6-1: USB disconnect, device number 64 [ 670.818118][T17300] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3479'. [ 670.959745][ T5722] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 670.971335][ T5722] ath9k_htc: Failed to initialize the device [ 670.982633][ T5695] usb 5-1: ath9k_htc: USB layer deinitialized [ 671.060006][T13290] usb 1-1: new full-speed USB device number 87 using dummy_hcd [ 671.149974][ T7290] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 671.176056][T17307] loop5: detected capacity change from 0 to 7 [ 671.184034][T17307] Dev loop5: unable to read RDB block 7 [ 671.189749][T17307] loop5: unable to read partition table [ 671.195718][T17307] loop5: partition table beyond EOD, truncated [ 671.202295][T17307] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 671.231732][T13290] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x5 has an invalid bInterval 0, changing to 4 [ 671.248953][T13290] usb 1-1: config 0 interface 0 has no altsetting 0 [ 671.258154][T13290] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 671.267514][T13290] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 671.276521][T13290] usb 1-1: Product: syz [ 671.283531][T13290] usb 1-1: Manufacturer: syz [ 671.288240][T13290] usb 1-1: SerialNumber: syz [ 671.305939][T13290] usb 1-1: config 0 descriptor?? [ 671.313566][ T7290] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 671.327896][T13290] usb 1-1: selecting invalid altsetting 0 [ 671.337737][ T7290] usb 6-1: config 0 has no interfaces? [ 671.352515][ T7290] usb 6-1: config 0 has no interfaces? [ 671.364340][ T7290] usb 6-1: config 0 has no interfaces? [ 671.379731][ T7290] usb 6-1: config 0 has no interfaces? [ 671.397629][ T7290] usb 6-1: config 0 has no interfaces? [ 671.407033][ T7290] usb 6-1: config 0 has no interfaces? [ 671.421715][ T7290] usb 6-1: config 0 has no interfaces? [ 671.436520][ T7290] usb 6-1: config 0 has no interfaces? [ 671.444882][ T7290] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 671.455659][ T7290] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 671.465121][ T7290] usb 6-1: Product: syz [ 671.469731][ T7290] usb 6-1: Manufacturer: syz [ 671.474518][ T7290] usb 6-1: SerialNumber: syz [ 671.489419][ T7290] usb 6-1: config 0 descriptor?? [ 671.565413][T17299] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 671.582135][T17299] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 671.600002][T17299] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 671.618765][T17299] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 671.646912][ T7290] usb 1-1: USB disconnect, device number 87 [ 671.649871][T17299] usb 1-1: cannot submit urb 0, error -19: no device [ 671.671847][T17299] usb 1-1: cannot submit urb 0, error -19: no device [ 672.238777][T17321] syzkaller0: entered promiscuous mode [ 672.251328][T17321] syzkaller0: entered allmulticast mode [ 676.658579][ T7290] usb 6-1: USB disconnect, device number 65 [ 676.862972][T17362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3495'. [ 676.923283][T17362] macvtap1: entered promiscuous mode [ 676.945461][T17362] dummy0: entered promiscuous mode [ 676.969531][T17362] macvtap1: entered allmulticast mode [ 676.991707][T17362] dummy0: entered allmulticast mode [ 678.038961][T14351] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 678.058841][T14351] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 678.076910][T14351] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 678.090760][T14351] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 678.100354][T14351] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 678.895055][ T30] audit: type=1326 audit(1783709407.436:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17406 comm="syz.4.3506" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33aa79de59 code=0x7fc00000 [ 679.031190][ T30] audit: type=1326 audit(1783709407.436:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17406 comm="syz.4.3506" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f33aa79de59 code=0x7fc00000 [ 679.137115][ T30] audit: type=1326 audit(1783709407.486:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17406 comm="syz.4.3506" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f33aa797bd7 code=0x7fc00000 [ 679.246763][ T30] audit: type=1326 audit(1783709407.486:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17406 comm="syz.4.3506" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f33aa73f1d9 code=0x7fc00000 [ 679.281368][T17416] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3508'. [ 679.357152][T17418] FAULT_INJECTION: forcing a failure. [ 679.357152][T17418] name failslab, interval 1, probability 0, space 0, times 0 [ 679.369772][ T30] audit: type=1326 audit(1783709407.486:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17406 comm="syz.4.3506" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f33aa73f29d code=0x7fc00000 [ 679.369860][ T30] audit: type=1326 audit(1783709407.486:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17406 comm="syz.4.3506" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f33aa79de59 code=0x7fc00000 [ 679.583232][T17418] CPU: 0 UID: 0 PID: 17418 Comm: syz.1.3509 Tainted: G L syzkaller #0 PREEMPT(full) [ 679.583269][T17418] Tainted: [L]=SOFTLOCKUP [ 679.583277][T17418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 679.583291][T17418] Call Trace: [ 679.583301][T17418] [ 679.583311][T17418] dump_stack_lvl+0xe8/0x150 [ 679.583351][T17418] should_fail_ex+0x40c/0x560 [ 679.583381][T17418] should_failslab+0xa8/0x100 [ 679.583417][T17418] __kmalloc_noprof+0xfe/0x720 [ 679.583446][T17418] ? iovec_from_user+0x87/0x250 [ 679.583476][T17418] ? iovec_from_user+0x87/0x250 [ 679.583513][T17418] iovec_from_user+0x87/0x250 [ 679.583548][T17418] __import_iovec+0x15e/0x7e0 [ 679.583591][T17418] import_iovec+0x73/0xa0 [ 679.583625][T17418] ___sys_recvmsg+0x4c9/0x5a0 [ 679.583667][T17418] ? __pfx____sys_recvmsg+0x10/0x10 [ 679.583706][T17418] ? __fget_files+0x2a/0x420 [ 679.583767][T17418] do_recvmmsg+0x31a/0x7f0 [ 679.583798][T17418] ? __pfx_do_recvmmsg+0x10/0x10 [ 679.583833][T17418] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 679.583866][T17418] ? __fget_files+0x3a2/0x420 [ 679.583905][T17418] __x64_sys_recvmmsg+0x198/0x250 [ 679.583931][T17418] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 679.583962][T17418] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.583987][T17418] do_syscall_64+0x174/0x580 [ 679.584016][T17418] ? trace_irq_disable+0x3b/0x140 [ 679.584044][T17418] ? clear_bhb_loop+0x40/0x90 [ 679.584071][T17418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.584093][T17418] RIP: 0033:0x7f74c979de59 [ 679.584115][T17418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 679.584142][T17418] RSP: 002b:00007f74ca752028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 679.584166][T17418] RAX: ffffffffffffffda RBX: 00007f74c9a25fa0 RCX: 00007f74c979de59 [ 679.584182][T17418] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 0000000000000004 [ 679.584197][T17418] RBP: 00007f74ca752090 R08: 0000000000000000 R09: 0000000000000000 [ 679.584211][T17418] R10: 0000000000000060 R11: 0000000000000246 R12: 0000000000000001 [ 679.584225][T17418] R13: 00007f74c9a26038 R14: 00007f74c9a25fa0 R15: 00007f74c9b4fa48 [ 679.584260][T17418] [ 679.999309][ T5740] usb 6-1: new low-speed USB device number 66 using dummy_hcd [ 680.012807][T17431] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3511'. [ 680.097673][T17428] batadv_slave_0: entered promiscuous mode [ 680.115298][T17427] vlan3: entered allmulticast mode [ 680.132597][T17427] bridge_slave_0: entered allmulticast mode [ 680.150196][ T4941] Bluetooth: hci3: command tx timeout [ 680.172492][ T5740] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 680.183337][ T5740] usb 6-1: config 179 has no interface number 0 [ 680.191198][T17431] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 680.200916][ T5740] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 680.212565][ T5740] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 680.229664][ T5740] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 680.241417][ T5740] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 680.253017][ T5740] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 680.277435][ T5740] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 680.297271][ T5740] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.326613][T17423] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 680.334986][T17423] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 680.355789][T17431] batadv_slave_0 (unregistering): left promiscuous mode [ 680.398846][T17431] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 680.576790][T17395] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.607152][T17395] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.637016][T17395] bridge_slave_0: entered allmulticast mode [ 680.710946][T17395] bridge_slave_0: entered promiscuous mode [ 680.759336][T17395] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.789953][T17395] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.820383][T17395] bridge_slave_1: entered allmulticast mode [ 680.859384][T17395] bridge_slave_1: entered promiscuous mode [ 681.053298][T17395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 681.089852][T17395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 681.177841][T17455] syzkaller0: entered promiscuous mode [ 681.195414][T17455] syzkaller0: entered allmulticast mode [ 681.306415][T17395] team0: Port device team_slave_0 added [ 681.341564][T17395] team0: Port device team_slave_1 added [ 681.367389][ T5695] usb 6-1: USB disconnect, device number 66 [ 681.367535][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 681.381720][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 681.479365][T13290] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 681.502667][T17395] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 681.515727][T17395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 681.546585][T17395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 681.560348][T17395] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 681.567437][T17395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 681.596857][T17395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 681.669251][T13290] usb 1-1: Using ep0 maxpacket: 32 [ 681.676579][T13290] usb 1-1: config 0 interface 0 altsetting 88 bulk endpoint 0x85 has invalid maxpacket 1024 [ 681.687081][T13290] usb 1-1: config 0 interface 0 has no altsetting 0 [ 681.717641][T13290] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=ea.79 [ 681.731151][T13290] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=0 [ 681.741272][T15908] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 681.758848][T13290] usb 1-1: Product: syz [ 681.764687][T17395] hsr_slave_0: entered promiscuous mode [ 681.778586][T13290] usb 1-1: Manufacturer: syz [ 681.785369][T17395] hsr_slave_1: entered promiscuous mode [ 681.798258][T13290] usb 1-1: config 0 descriptor?? [ 681.809364][T17395] debugfs: 'hsr0' already exists in 'hsr' [ 681.817765][T17455] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 681.834252][T17395] Cannot create hsr debugfs directory [ 681.937196][T15908] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 681.994821][T15908] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 682.038606][T15908] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 682.050029][T15911] usb 1-1: USB disconnect, device number 88 [ 682.078185][T15908] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 682.121551][T15908] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 682.202925][T15908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.229675][ T4941] Bluetooth: hci3: command tx timeout [ 682.247266][T15908] usb 5-1: config 0 descriptor?? [ 682.254800][T17433] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 682.399709][ T5740] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 682.494757][T17469] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3524'. [ 682.559293][ T5740] usb 6-1: Using ep0 maxpacket: 32 [ 682.567122][ T5740] usb 6-1: config 8 has an invalid interface number: 162 but max is 0 [ 682.578279][ T5740] usb 6-1: config 8 has no interface number 0 [ 682.585703][ T5740] usb 6-1: config 8 interface 162 has no altsetting 0 [ 682.596941][ T5740] usb 6-1: New USB device found, idVendor=0123, idProduct=0001, bcdDevice=ce.9f [ 682.607903][ T5740] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.616423][ T5740] usb 6-1: Product: syz [ 682.621205][ T5740] usb 6-1: Manufacturer: syz [ 682.625891][ T5740] usb 6-1: SerialNumber: syz [ 682.701411][T17395] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 682.712838][T17395] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 682.721119][T17395] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 682.732655][T17395] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 682.742358][T17395] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 682.761633][T17395] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 682.771558][T17395] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 682.784946][T15908] plantronics 0003:047F:FFFF.002F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 682.811983][T17395] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 682.867645][ T5740] usbtouchscreen 6-1:8.162: probe with driver usbtouchscreen failed with error -71 [ 682.902684][ T5740] usb 6-1: USB disconnect, device number 67 [ 683.026780][T17395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 683.053266][T17395] 8021q: adding VLAN 0 to HW filter on device team0 [ 683.073045][ T7343] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.080287][ T7343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 683.099827][ T7022] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.107079][ T7022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 683.193253][T17395] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 683.239305][T17395] veth0_vlan: entered promiscuous mode [ 683.254675][T17395] veth1_vlan: entered promiscuous mode [ 683.292036][T17395] veth0_macvtap: entered promiscuous mode [ 683.304018][T17395] veth1_macvtap: entered promiscuous mode [ 683.326113][T17395] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 683.333813][ T5695] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 683.350171][T17395] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 683.366804][ T7343] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.376757][ T7343] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.389776][ T7343] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.398871][ T7343] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.510502][ T5695] usb 1-1: Using ep0 maxpacket: 32 [ 683.532927][ T5695] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 683.553509][ T5695] usb 1-1: config 0 has no interface number 0 [ 683.585930][ T5695] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 683.612383][ T5695] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.622624][ T5695] usb 1-1: Product: syz [ 683.626886][ T5695] usb 1-1: Manufacturer: syz [ 683.632339][ T5695] usb 1-1: SerialNumber: syz [ 683.641650][ T5695] usb 1-1: config 0 descriptor?? [ 683.664594][ T5695] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 683.695509][ T7033] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 683.718565][ T7033] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 683.773276][ T7022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 683.802033][ T7022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 683.865183][ T5695] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 683.893511][ T5695] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 684.095214][T17487] loop4: detected capacity change from 0 to 2640 [ 684.120342][T17487] buffer_io_error: 10 callbacks suppressed [ 684.120362][T17487] Buffer I/O error on dev loop4, logical block 0, async page read [ 684.149845][T17487] Buffer I/O error on dev loop4, logical block 0, async page read [ 684.169400][T17487] Buffer I/O error on dev loop4, logical block 0, async page read [ 684.199353][T17487] Buffer I/O error on dev loop4, logical block 0, async page read [ 684.230144][T17487] Buffer I/O error on dev loop4, logical block 0, async page read [ 684.243192][T17487] Buffer I/O error on dev loop4, logical block 0, async page read [ 684.277369][T17487] Buffer I/O error on dev loop4, logical block 0, async page read [ 684.309494][ T4941] Bluetooth: hci3: command tx timeout [ 684.334644][T17487] Buffer I/O error on dev loop4, logical block 0, async page read [ 684.374620][ T5740] usb 5-1: USB disconnect, device number 102 [ 684.386092][T17487] ldm_validate_partition_table(): Disk read failed. [ 684.463810][T17487] Buffer I/O error on dev loop4, logical block 0, async page read [ 684.520786][T17487] Buffer I/O error on dev loop4, logical block 0, async page read [ 684.536244][T17487] Dev loop4: unable to read RDB block 0 [ 684.570841][T17487] loop4: unable to read partition table [ 684.599624][T17487] loop_reread_partitions: partition scan of loop4 (3 ) failed (rc=-5) [ 684.753507][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 684.754665][ T5740] usb 1-1: USB disconnect, device number 89 [ 684.813008][ T5740] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 684.858230][ T5740] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 684.892667][ T5740] quatech2 1-1:0.51: device disconnected [ 685.004385][T17503] fuse: Bad value for 'user_id' [ 685.029361][T17503] fuse: Bad value for 'user_id' [ 685.269953][ T7294] usb 6-1: new full-speed USB device number 68 using dummy_hcd [ 685.497031][ T7294] usb 6-1: unable to get BOS descriptor or descriptor too short [ 685.513009][ T7294] usb 6-1: not running at top speed; connect to a high speed hub [ 685.589456][ T7294] usb 6-1: config 8 has an invalid interface number: 3 but max is 0 [ 685.626464][ T7294] usb 6-1: config 8 has no interface number 0 [ 685.649498][ T7294] usb 6-1: config 8 interface 3 has no altsetting 0 [ 685.744812][ T7294] usb 6-1: New USB device found, idVendor=093a, idProduct=2603, bcdDevice=1d.22 [ 685.811944][ T7294] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.831234][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.838553][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.863037][ T7294] usb 6-1: Product: syz [ 685.885699][ T7294] usb 6-1: Manufacturer: syz [ 685.898357][ T7294] usb 6-1: SerialNumber: syz [ 686.244599][T17503] netlink: 'syz.5.3530': attribute type 1 has an invalid length. [ 686.288558][T17503] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3530'. [ 686.356800][ T7294] gspca_main: pac7311-2.14.0 probing 093a:2603 [ 686.390046][ T4941] Bluetooth: hci3: command tx timeout [ 686.408195][ T7294] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -71 [ 686.426623][ T7294] pac7311 6-1:8.3: probe with driver pac7311 failed with error -71 [ 686.458756][ T7294] usb 6-1: USB disconnect, device number 68 [ 687.060566][T17536] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0 [ 687.170472][T17542] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3545'. [ 687.770376][T17563] vlan2: entered allmulticast mode [ 687.796509][T17563] bridge0: port 3(vlan2) entered blocking state [ 687.820200][T17563] bridge0: port 3(vlan2) entered disabled state [ 687.831937][T17563] vlan2: entered promiscuous mode [ 688.231167][T17579] FAULT_INJECTION: forcing a failure. [ 688.231167][T17579] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 688.291603][T17579] CPU: 0 UID: 0 PID: 17579 Comm: syz.6.3558 Tainted: G L syzkaller #0 PREEMPT(full) [ 688.291639][T17579] Tainted: [L]=SOFTLOCKUP [ 688.291647][T17579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 688.291661][T17579] Call Trace: [ 688.291670][T17579] [ 688.291680][T17579] dump_stack_lvl+0xe8/0x150 [ 688.291720][T17579] should_fail_ex+0x40c/0x560 [ 688.291751][T17579] _copy_from_user+0x2d/0xb0 [ 688.291785][T17579] copy_from_sockptr_offset+0x66/0xa0 [ 688.291939][T17579] do_tcp_getsockopt+0x1d62/0x2980 [ 688.291975][T17579] ? __pfx_do_tcp_getsockopt+0x10/0x10 [ 688.292001][T17579] ? sock_recv_errqueue+0x580/0x5e0 [ 688.292031][T17579] ? aa_file_perm+0x18b/0x15f0 [ 688.292061][T17579] ? aa_label_sk_perm+0x532/0x6e0 [ 688.292104][T17579] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 688.292140][T17579] ? _parse_integer_limit+0x192/0x1e0 [ 688.292174][T17579] ? __lock_acquire+0x683/0x2cf0 [ 688.292204][T17579] ? kstrtouint+0x6e/0xe0 [ 688.292263][T17579] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 688.292292][T17579] tcp_getsockopt+0x83/0x130 [ 688.292317][T17579] ? sock_recv_errqueue+0x580/0x5e0 [ 688.292352][T17579] ? sock_recv_errqueue+0x580/0x5e0 [ 688.292380][T17579] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 688.292408][T17579] do_sock_getsockopt+0x51d/0x7e0 [ 688.292447][T17579] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 688.292496][T17579] ? __fget_files+0x3a2/0x420 [ 688.292524][T17579] ? __fget_files+0x2a/0x420 [ 688.292560][T17579] __x64_sys_getsockopt+0x1a4/0x240 [ 688.292599][T17579] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.292624][T17579] do_syscall_64+0x174/0x580 [ 688.292654][T17579] ? trace_irq_disable+0x3b/0x140 [ 688.292681][T17579] ? clear_bhb_loop+0x40/0x90 [ 688.292708][T17579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.292730][T17579] RIP: 0033:0x7f1bd839de59 [ 688.292750][T17579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 688.292770][T17579] RSP: 002b:00007f1bd919d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 688.292794][T17579] RAX: ffffffffffffffda RBX: 00007f1bd8625fa0 RCX: 00007f1bd839de59 [ 688.292811][T17579] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000003 [ 688.292825][T17579] RBP: 00007f1bd919d090 R08: 0000200000000040 R09: 0000000000000000 [ 688.292840][T17579] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 688.292854][T17579] R13: 00007f1bd8626038 R14: 00007f1bd8625fa0 R15: 00007f1bd874fa48 [ 688.292887][T17579] [ 688.754856][T17594] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3563'. [ 689.249946][T13290] usb 6-1: new full-speed USB device number 69 using dummy_hcd [ 689.480493][T13290] usb 6-1: unable to get BOS descriptor or descriptor too short [ 689.520819][T13290] usb 6-1: not running at top speed; connect to a high speed hub [ 689.557597][T13290] usb 6-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 689.600350][T13290] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.628998][T13290] usb 6-1: Product: syz [ 689.643665][T13290] usb 6-1: Manufacturer: syz [ 689.657974][T13290] usb 6-1: SerialNumber: syz [ 689.695185][T17609] syzkaller0: entered promiscuous mode [ 689.714198][T17609] syzkaller0: entered allmulticast mode [ 689.798068][ T30] audit: type=1326 audit(1783709418.336:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17615 comm="syz.1.3572" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c979de59 code=0x7fc00000 [ 689.895743][ T30] audit: type=1326 audit(1783709418.376:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17615 comm="syz.1.3572" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f74c979de59 code=0x7fc00000 [ 689.942556][T13290] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 689.971697][ T30] audit: type=1326 audit(1783709418.436:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17615 comm="syz.1.3572" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f74c9797bd7 code=0x7fc00000 [ 690.050732][ T30] audit: type=1326 audit(1783709418.436:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17615 comm="syz.1.3572" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f74c973f1d9 code=0x7fc00000 [ 690.122461][ T30] audit: type=1326 audit(1783709418.436:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17615 comm="syz.1.3572" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f74c973f29d code=0x7fc00000 [ 690.167725][T13290] gp8psk: usb in 146 operation failed. [ 690.176340][T13290] gp8psk: failed to get FW version [ 690.184662][T13290] gp8psk: usb in 149 operation failed. [ 690.190805][T13290] gp8psk: failed to get FPGA version [ 690.196817][T13290] gp8psk: usb in 138 operation failed. [ 690.209352][ T30] audit: type=1326 audit(1783709418.466:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17615 comm="syz.1.3572" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f74c979de59 code=0x7fc00000 [ 690.234627][T13290] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 690.251569][T13290] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-19) [ 690.265196][T13290] usb 6-1: USB disconnect, device number 69 [ 691.992622][T17655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3581'. [ 692.264338][T17657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3582'. [ 695.308662][T17665] FAULT_INJECTION: forcing a failure. [ 695.308662][T17665] name failslab, interval 1, probability 0, space 0, times 0 [ 695.321962][T17665] CPU: 1 UID: 0 PID: 17665 Comm: syz.6.3586 Tainted: G L syzkaller #0 PREEMPT(full) [ 695.321994][T17665] Tainted: [L]=SOFTLOCKUP [ 695.322002][T17665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 695.322032][T17665] Call Trace: [ 695.322041][T17665] [ 695.322050][T17665] dump_stack_lvl+0xe8/0x150 [ 695.322089][T17665] should_fail_ex+0x40c/0x560 [ 695.322119][T17665] should_failslab+0xa8/0x100 [ 695.322152][T17665] __kmalloc_noprof+0xfe/0x720 [ 695.322178][T17665] ? lock_sock_nested+0x6a/0x100 [ 695.322205][T17665] ? sock_kmalloc+0xd6/0x160 [ 695.322223][T17665] ? sock_kmalloc+0xd6/0x160 [ 695.322247][T17665] sock_kmalloc+0xd6/0x160 [ 695.322272][T17665] af_alg_alloc_areq+0x8c/0x200 [ 695.322338][T17665] aead_recvmsg+0x465/0xd10 [ 695.322384][T17665] ? __pfx_aead_recvmsg+0x10/0x10 [ 695.322418][T17665] ? rcu_is_watching+0x15/0xb0 [ 695.322451][T17665] ? __pfx_aead_recvmsg+0x10/0x10 [ 695.322480][T17665] sock_recvmsg_nosec+0x130/0x170 [ 695.322511][T17665] ____sys_recvmsg+0x3e3/0x4a0 [ 695.322543][T17665] ? iovec_from_user+0x87/0x250 [ 695.322581][T17665] ? __pfx_____sys_recvmsg+0x10/0x10 [ 695.322629][T17665] ? import_iovec+0x73/0xa0 [ 695.322665][T17665] ___sys_recvmsg+0x213/0x5a0 [ 695.322704][T17665] ? __pfx____sys_recvmsg+0x10/0x10 [ 695.322744][T17665] ? __fget_files+0x2a/0x420 [ 695.322811][T17665] do_recvmmsg+0x31a/0x7f0 [ 695.322842][T17665] ? __pfx_do_recvmmsg+0x10/0x10 [ 695.322876][T17665] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 695.322910][T17665] ? __fget_files+0x3a2/0x420 [ 695.322954][T17665] __x64_sys_recvmmsg+0x198/0x250 [ 695.322979][T17665] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 695.323009][T17665] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.323034][T17665] do_syscall_64+0x174/0x580 [ 695.323065][T17665] ? trace_irq_disable+0x3b/0x140 [ 695.323093][T17665] ? clear_bhb_loop+0x40/0x90 [ 695.323120][T17665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.323143][T17665] RIP: 0033:0x7f1bd839de59 [ 695.323165][T17665] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 695.323184][T17665] RSP: 002b:00007f1bd919d028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 695.323207][T17665] RAX: ffffffffffffffda RBX: 00007f1bd8625fa0 RCX: 00007f1bd839de59 [ 695.323224][T17665] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 0000000000000004 [ 695.323239][T17665] RBP: 00007f1bd919d090 R08: 0000000000000000 R09: 0000000000000000 [ 695.323252][T17665] R10: 0000000000000060 R11: 0000000000000246 R12: 0000000000000001 [ 695.323266][T17665] R13: 00007f1bd8626038 R14: 00007f1bd8625fa0 R15: 00007f1bd874fa48 [ 695.323300][T17665] [ 695.683380][T17661] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=9175040 (293601280 ns) > initial count (2272 ns). Using initial count to start timer. [ 695.725811][T17661] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 695.780222][T17671] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 696.234284][T17687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 696.268844][T17687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 696.449506][T15908] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 696.522141][T17695] netlink: 'syz.0.3595': attribute type 1 has an invalid length. [ 696.561293][T17695] 8021q: adding VLAN 0 to HW filter on device bond1 [ 696.598147][T17695] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 696.625122][ T7343] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 696.736203][T17695] bond1 (unregistering): (slave gretap1): Removing an active aggregator [ 696.746263][T17700] netlink: 'syz.4.3597': attribute type 10 has an invalid length. [ 696.781448][T17695] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 696.814118][T17695] bond1 (unregistering): Released all slaves [ 696.885593][T17700] bond0: (slave bond_slave_0): Releasing backup interface [ 696.904242][T17700] team0: Port device bond_slave_0 added [ 697.060390][T17706] kvm: pic: single mode not supported [ 697.062298][T17706] kvm: pic: level sensitive irq not supported [ 697.091630][T17706] kvm: pic: non byte write [ 697.376431][T17723] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3603'. [ 697.445760][T17716] vlan3: entered allmulticast mode [ 697.461485][T17716] bond0: entered allmulticast mode [ 697.476127][T17716] bond_slave_0: entered allmulticast mode [ 697.497327][T17716] bond_slave_1: entered allmulticast mode [ 697.740840][T17723] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 697.788428][T17723] bond_slave_0: left allmulticast mode [ 697.811773][T17733] trusted_key: encrypted_key: insufficient parameters specified [ 697.827621][T17723] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 697.850475][T17723] bond_slave_1: left allmulticast mode [ 697.867678][T17723] bond0 (unregistering): Released all slaves [ 697.950998][ T7294] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 697.969250][T15911] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 698.119847][ T7294] usb 5-1: Using ep0 maxpacket: 8 [ 698.132660][ T7294] usb 5-1: config 2 has an invalid interface number: 31 but max is 0 [ 698.144301][ T7294] usb 5-1: config 2 has no interface number 0 [ 698.160659][T15911] usb 1-1: too many configurations: 255, using maximum allowed: 8 [ 698.173601][ T7294] usb 5-1: config 2 interface 31 has no altsetting 0 [ 698.187961][T15911] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 698.214686][ T7294] usb 5-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 698.238903][T15911] usb 1-1: can't read configurations, error -61 [ 698.271837][ T7294] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.286063][ T7294] usb 5-1: Product: syz [ 698.318366][ T7294] usb 5-1: Manufacturer: syz [ 698.327229][ T7294] usb 5-1: SerialNumber: syz [ 698.411447][T15911] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 698.573136][T17731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 698.592205][T15911] usb 1-1: too many configurations: 255, using maximum allowed: 8 [ 698.605730][T17731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 698.637677][T17731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 698.652408][T15911] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 698.668145][T15911] usb 1-1: can't read configurations, error -61 [ 698.693342][T17731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 698.701078][T15911] usb usb1-port1: attempt power cycle [ 698.744847][ T7294] ch9200 5-1:2.31: probe with driver ch9200 failed with error -71 [ 698.783150][ T7294] usb 5-1: USB disconnect, device number 103 [ 699.079457][T15911] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 699.115994][T15911] usb 1-1: too many configurations: 255, using maximum allowed: 8 [ 699.170636][T15911] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 699.214232][T15911] usb 1-1: can't read configurations, error -61 [ 699.359650][T15911] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 699.390920][T15911] usb 1-1: too many configurations: 255, using maximum allowed: 8 [ 699.418924][T15911] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 699.445066][T15911] usb 1-1: can't read configurations, error -61 [ 699.466333][T15911] usb usb1-port1: unable to enumerate USB device [ 700.269408][T15911] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 700.471639][T15911] usb 6-1: Using ep0 maxpacket: 32 [ 700.489808][T15911] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 700.548592][T15911] usb 6-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 700.608809][T15911] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.706712][T15911] usb 6-1: config 0 descriptor?? [ 700.745683][T15911] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 700.938415][T15911] usb 6-1: USB disconnect, device number 70 [ 701.093018][ T5695] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 701.276124][ T5695] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 7 [ 701.326908][ T5695] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 701.364443][ T5695] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.406550][ T5695] usb 5-1: Product: చ [ 701.424981][ T5695] usb 5-1: Manufacturer: А [ 701.451128][T17793] xt_limit: Overflow, try lower: 0/0 [ 701.458882][ T5695] usb 5-1: SerialNumber: 뛷ꃫ芇ꊿ칪〈⻖虫푗⋆霔ृ흉坼孯췔뮰ﶊ쁵䐮ꀺϵ㍰♄䖯췯⣬ᴇ輪䤗谩ㄿ껒밫㉱隐㈴忭솢词픺癒튴글췓畢컥놆螷碼摼źౚ㦼蛵曟⩓ᑯ৲넇坭ꋥ [ 701.501171][T15911] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 701.532018][ T5695] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 701.691770][T15911] usb 6-1: Using ep0 maxpacket: 8 [ 701.717192][T15911] usb 6-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=a5.79 [ 701.728289][ T4941] Bluetooth: hci1: unexpected cc 0x042e length: 1 < 7 [ 701.749257][T15911] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.773282][T15911] usb 6-1: config 0 descriptor?? [ 701.788529][T15911] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 701.890739][ T5695] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 701.974583][ T5695] usb 5-1: USB disconnect, device number 104 [ 702.027519][ T5899] udevd[5899]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 702.366837][T17800] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3626'. [ 702.682536][ T5695] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 702.862687][ T5695] usb 1-1: Using ep0 maxpacket: 8 [ 702.954367][ T5695] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 703.001311][ T5695] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 703.070524][ T5695] usb 1-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 703.118145][ T5695] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.159247][ T5695] usb 1-1: Product: syz [ 703.187253][ T5695] usb 1-1: Manufacturer: syz [ 703.211079][ T5695] usb 1-1: SerialNumber: syz [ 703.244511][T17820] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3631'. [ 703.269964][ T5695] usb 1-1: config 0 descriptor?? [ 703.297410][T15911] usb 6-1: USB disconnect, device number 71 [ 703.732399][T17827] loop9: detected capacity change from 0 to 8 [ 703.842836][T17831] loop9: detected capacity change from 8 to 7 [ 703.933598][ C1] blk_print_req_error: 10 callbacks suppressed [ 703.933618][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 703.949280][ C1] buffer_io_error: 11 callbacks suppressed [ 703.949298][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 703.998810][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 704.008098][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 704.090892][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 704.100329][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 704.129706][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 704.139080][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 704.155839][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 704.165107][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 704.176993][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 704.186242][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 704.195498][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 704.204741][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 704.212703][T17831] ldm_validate_partition_table(): Disk read failed. [ 704.221168][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 704.230470][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 704.238613][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 704.247922][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 704.261940][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 704.271332][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 704.291448][T17831] Dev loop9: unable to read RDB block 0 [ 704.328310][T17831] loop9: unable to read partition table [ 704.369881][T17831] loop9: partition table beyond EOD, truncated [ 704.402757][T17831] loop_reread_partitions: partition scan of loop9 (|LCTn1`BPY 꽡7=ݥ4ɫ,߸MyV4!4) failed (rc=-5) [ 704.528568][ T4991] ldm_validate_partition_table(): Disk read failed. [ 704.548385][ T4991] Dev loop9: unable to read RDB block 0 [ 704.594653][ T4991] loop9: unable to read partition table [ 704.614620][ T4991] loop9: partition table beyond EOD, truncated [ 704.639490][T13290] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 704.863088][T13290] usb 5-1: config 2 has an invalid interface number: 174 but max is 0 [ 704.922565][T13290] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 705.048747][T13290] usb 5-1: config 2 has no interface number 0 [ 705.117639][T13290] usb 5-1: config 2 interface 174 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E [ 705.222725][T13290] usb 5-1: config 2 interface 174 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 705.329384][T13290] usb 5-1: config 2 interface 174 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 705.449993][T13290] usb 5-1: config 2 interface 174 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 705.468528][T17845] syzkaller0: entered promiscuous mode [ 705.505932][T17845] syzkaller0: entered allmulticast mode [ 705.540273][T13290] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 705.573872][T13290] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.657070][T13290] usb 5-1: Product: syz [ 705.686079][T13290] usb 5-1: Manufacturer: syz [ 705.725338][T13290] usb 5-1: SerialNumber: syz [ 706.021508][T13290] usb 5-1: probing VID:PID(0424:012C) [ 706.036010][T17850] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 706.050909][T13290] usb 5-1: vub300 testing BULK IN EndPoint(0) 8E [ 706.067668][T13290] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs [ 706.120943][T13290] vub300 5-1:2.174: probe with driver vub300 failed with error -22 [ 706.168272][T13290] usb 5-1: USB disconnect, device number 105 [ 706.638863][T17859] netlink: 'syz.6.3643': attribute type 23 has an invalid length. [ 706.714314][ T5695] usb 1-1: USB disconnect, device number 94 [ 707.027129][T17871] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 707.033687][T17871] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 707.072457][T17871] vhci_hcd vhci_hcd.0: Device attached [ 707.114994][T17871] netlink: 'syz.6.3647': attribute type 2 has an invalid length. [ 707.162740][T17871] netlink: 'syz.6.3647': attribute type 5 has an invalid length. [ 707.216107][T17871] netlink: 'syz.6.3647': attribute type 2 has an invalid length. [ 707.260286][T17871] netlink: 'syz.6.3647': attribute type 5 has an invalid length. [ 707.319267][ T5695] usb 45-1: new high-speed USB device number 2 using vhci_hcd [ 707.453246][T17872] vhci_hcd: connection reset by peer [ 707.468599][ T7022] vhci_hcd vhci_hcd.6: stop threads [ 707.479438][ T7022] vhci_hcd vhci_hcd.6: release socket [ 707.493031][ T7022] vhci_hcd vhci_hcd.6: disconnect device [ 707.559432][ T5740] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 707.722200][ T5740] usb 5-1: Using ep0 maxpacket: 32 [ 707.734749][ T5740] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 707.751913][ T5740] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 707.787852][ T5740] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 707.820339][ T5740] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.879323][ T5740] usb 5-1: config 0 descriptor?? [ 708.178114][T17906] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3658'. [ 708.285592][T17909] netlink: 'syz.6.3658': attribute type 54 has an invalid length. [ 708.381781][ T5740] savu 0003:1E7D:2D5A.0030: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 708.399998][T17909] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3658'. [ 708.517273][ T5722] usb 5-1: USB disconnect, device number 106 [ 708.594197][T17914] fido_id[17914]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 708.788280][T17929] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3663'. [ 708.828793][T17929] macvtap1: entered promiscuous mode [ 708.834730][T17929] dummy0: entered promiscuous mode [ 708.840992][T17929] macvtap1: entered allmulticast mode [ 708.846560][T17929] dummy0: entered allmulticast mode [ 709.120098][T13290] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 709.133981][T17934] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3665'. [ 709.312880][T13290] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 709.343947][T13290] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 709.365354][T13290] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 709.381301][T13290] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.405592][T13290] usb 6-1: config 0 descriptor?? [ 709.963410][T17955] netlink: 'syz.6.3673': attribute type 1 has an invalid length. [ 710.058566][T13290] usbhid 6-1:0.0: can't add hid device: -32 [ 710.075910][T17955] 8021q: adding VLAN 0 to HW filter on device bond2 [ 710.101219][T13290] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 710.183291][T17973] bond2 (unregistering): Released all slaves [ 710.289497][T17971] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 710.677690][T17984] netlink: 'syz.4.3679': attribute type 4 has an invalid length. [ 710.949416][ T5740] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 711.111989][ T5740] usb 7-1: Using ep0 maxpacket: 8 [ 711.134587][ T5740] usb 7-1: config 6 has an invalid interface number: 2 but max is 0 [ 711.149251][ T5740] usb 7-1: config 6 has no interface number 0 [ 711.155636][ T5740] usb 7-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 711.176809][ T5740] usb 7-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 711.199254][ T5740] usb 7-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 711.220661][ T5740] usb 7-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 711.246609][ T5740] usb 7-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 711.260381][ T5740] usb 7-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 711.269328][ T5740] usb 7-1: Product: syz [ 711.276173][ T5740] usb 7-1: Manufacturer: syz [ 711.281349][ T5740] usb 7-1: SerialNumber: syz [ 711.315608][ T5740] hso 7-1:6.2: Failed to find BULK eps [ 711.503666][T17985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 711.529514][T17985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 711.548551][ T7290] usb 7-1: USB disconnect, device number 3 [ 711.857026][T15912] usb 6-1: USB disconnect, device number 72 [ 712.078364][T18000] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 712.144653][T18000] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 712.275195][T18012] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 712.483476][ T5695] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 712.574066][T18017] Cannot find set identified by id 0 to match [ 712.670983][T18000] dummy0: left allmulticast mode [ 712.698348][T18000] dummy0: left promiscuous mode [ 712.723809][T18000] macvtap1: left promiscuous mode [ 712.736210][T18000] macvtap1: left allmulticast mode [ 712.758660][T18019] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3690'. [ 712.760654][T17216] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.780168][ T5740] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 712.816175][T17216] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.844049][T17216] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.864532][T17216] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.942052][ T5740] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 712.989265][ T5740] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 713.021730][ T5740] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 713.021766][ T5740] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 713.021819][ T5740] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 713.021846][ T5740] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.029500][ T5740] usb 5-1: config 0 descriptor?? [ 713.127673][T18027] netlink: 'syz.6.3693': attribute type 1 has an invalid length. [ 713.276396][T18027] 8021q: adding VLAN 0 to HW filter on device bond2 [ 713.328307][T18029] vlan2: entered allmulticast mode [ 713.346177][T18029] bond2: entered allmulticast mode [ 713.428911][T18030] bond2: (slave geneve2): making interface the new active one [ 713.442302][T18030] geneve2: entered allmulticast mode [ 713.464349][T18030] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 713.486915][ T5740] plantronics 0003:047F:FFFF.0031: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 713.731150][T18041] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3698'. [ 713.914773][T18043] pim6reg: entered allmulticast mode [ 714.219368][ T7297] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 714.268736][ T5695] usb 5-1: USB disconnect, device number 107 [ 714.390905][ T7297] usb 6-1: Using ep0 maxpacket: 8 [ 714.411204][ T7297] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 714.431820][ T7297] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 714.449197][ T7297] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.472148][ T7297] usb 6-1: config 0 descriptor?? [ 714.684350][ T7297] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 714.980904][T18065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3707'. [ 714.999347][ T7291] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 715.015731][T18065] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3707'. [ 715.179273][ T7291] usb 7-1: device descriptor read/64, error -71 [ 715.195386][T18043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 715.225596][T18043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 715.249923][ T7297] usb 6-1: USB disconnect, device number 73 [ 715.275110][T18072] netlink: 'syz.4.3710': attribute type 10 has an invalid length. [ 715.341950][T18072] team0: Port device bond_slave_0 removed [ 715.438068][T18042] pim6reg: left allmulticast mode [ 715.469291][ T7291] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 715.524683][T18074] bond0: entered promiscuous mode [ 715.539269][T18074] bond_slave_0: entered promiscuous mode [ 715.545521][T18074] bond_slave_1: entered promiscuous mode [ 715.560097][T18074] batadv0: entered promiscuous mode [ 715.582025][T18074] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 715.605843][T18074] bond0: left promiscuous mode [ 715.610948][ T7291] usb 7-1: device descriptor read/64, error -71 [ 715.617647][T18074] bond_slave_0: left promiscuous mode [ 715.624597][T18074] bond_slave_1: left promiscuous mode [ 715.637208][T18074] batadv0: left promiscuous mode [ 715.670447][T18077] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3712'. [ 715.729482][ T7291] usb usb7-port1: attempt power cycle [ 716.070080][ T7289] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 716.094455][ T7291] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 716.139945][ T7291] usb 7-1: device descriptor read/8, error -71 [ 716.165305][T18091] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3717'. [ 716.191848][T18091] blktrace: Concurrent blktraces are not allowed on sg0 [ 716.265891][T18091] blk_print_req_error: 156 callbacks suppressed [ 716.265914][T18091] I/O error, dev loop9, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 7 prio class 2 [ 716.282192][ T7289] usb 1-1: Using ep0 maxpacket: 16 [ 716.297163][ T7289] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 716.305574][ T7289] usb 1-1: can't read configurations, error -61 [ 716.312499][T18091] buffer_io_error: 155 callbacks suppressed [ 716.312512][T18091] Buffer I/O error on dev loop9, logical block 0, lost async page write [ 716.364084][T18091] Buffer I/O error on dev loop9, logical block 1, lost async page write [ 716.398520][T18091] Buffer I/O error on dev loop9, logical block 2, lost async page write [ 716.419258][ T7291] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 716.452125][ T7289] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 716.461122][ T7291] usb 7-1: device descriptor read/8, error -71 [ 716.483076][T18091] Buffer I/O error on dev loop9, logical block 3, lost async page write [ 716.483161][T18091] Buffer I/O error on dev loop9, logical block 4, lost async page write [ 716.483244][T18091] Buffer I/O error on dev loop9, logical block 5, lost async page write [ 716.483315][T18091] Buffer I/O error on dev loop9, logical block 6, lost async page write [ 716.572169][ T7291] usb usb7-port1: unable to enumerate USB device [ 716.621079][ T7289] usb 1-1: Using ep0 maxpacket: 16 [ 716.623781][ T7289] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 716.623822][ T7289] usb 1-1: can't read configurations, error -61 [ 716.624114][ T7289] usb usb1-port1: attempt power cycle [ 716.969439][ T7289] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 717.010485][ T7289] usb 1-1: Using ep0 maxpacket: 16 [ 717.013004][ T7289] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 717.013033][ T7289] usb 1-1: can't read configurations, error -61 [ 717.149446][ T7289] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 717.173065][ T7289] usb 1-1: Using ep0 maxpacket: 16 [ 717.201420][ T7289] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 717.201464][ T7289] usb 1-1: can't read configurations, error -61 [ 717.201803][ T7289] usb usb1-port1: unable to enumerate USB device [ 717.974372][T18133] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3727'. [ 718.015618][T18133] netlink: 240 bytes leftover after parsing attributes in process `syz.6.3727'. [ 718.189458][T18140] syzkaller0: entered promiscuous mode [ 718.204716][T18140] syzkaller0: entered allmulticast mode [ 718.290512][ T7289] usb 5-1: new full-speed USB device number 108 using dummy_hcd [ 718.471731][ T7289] usb 5-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 718.518275][ T7289] usb 5-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 718.557328][ T7289] usb 5-1: config 0 interface 0 has no altsetting 0 [ 718.583668][ T7289] usb 5-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 718.600574][ T7289] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.657650][ T7289] usb 5-1: config 0 descriptor?? [ 718.669437][T18135] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 719.039652][T18153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3737'. [ 719.078169][T18154] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3735'. [ 719.150638][T18154] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3735'. [ 719.284901][T18159] netlink: 27 bytes leftover after parsing attributes in process `syz.5.3739'. [ 719.618785][ T7289] usbhid 5-1:0.0: can't add hid device: -71 [ 719.631978][ T7289] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 719.662596][ T7289] usb 5-1: USB disconnect, device number 108 [ 720.014077][T18182] loop5: detected capacity change from 0 to 7 [ 720.022178][T18182] Dev loop5: unable to read RDB block 7 [ 720.028882][T18182] loop5: unable to read partition table [ 720.036964][T18182] loop5: partition table beyond EOD, truncated [ 720.044299][T18182] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 720.482016][T18192] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 720.488607][T18192] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 720.760232][T18192] vhci_hcd vhci_hcd.0: Device attached [ 721.019398][ T809] usb 34-1: SetAddress Request (14) to port 0 [ 721.036570][ T809] usb 34-1: new SuperSpeed USB device number 14 using vhci_hcd [ 721.328267][T18216] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 721.728011][T13291] usb 2-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 721.785729][T13291] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -110 [ 721.785775][T18195] vhci_hcd: connection reset by peer [ 721.831916][T17232] vhci_hcd vhci_hcd.0: stop threads [ 721.855597][T13291] usb 2-1: USB disconnect, device number 33 [ 721.877954][T18223] geneve2: entered allmulticast mode [ 721.898934][T17232] vhci_hcd vhci_hcd.0: release socket [ 721.930508][T17232] vhci_hcd vhci_hcd.0: disconnect device [ 722.121498][T18228] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.129189][T18228] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.169332][ T7291] usb 5-1: new full-speed USB device number 109 using dummy_hcd [ 722.209521][T13291] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 722.364504][ T7291] usb 5-1: config 0 has an invalid interface number: 172 but max is 0 [ 722.400899][ T7291] usb 5-1: config 0 has no interface number 0 [ 722.429744][ T7291] usb 5-1: config 0 interface 172 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 722.476561][ T7291] usb 5-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 722.509302][ T7291] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.544429][ T7291] usb 5-1: Product: syz [ 722.549553][T13291] usb 2-1: device descriptor read/all, error -71 [ 722.566645][ T7291] usb 5-1: Manufacturer: syz [ 722.582609][ T7291] usb 5-1: SerialNumber: syz [ 722.627835][T18228] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 722.665342][ T7291] usb 5-1: config 0 descriptor?? [ 722.713745][ T7291] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 722.741621][T18228] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 723.400018][T18228] vlan2: left allmulticast mode [ 723.417547][T18228] bond2: left allmulticast mode [ 723.434386][T18228] geneve2: left allmulticast mode [ 723.530144][ T7291] input: gspca_pac7302 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input62 [ 723.655023][ T7022] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.682423][ T7022] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.717493][ T7022] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.751699][ T7022] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.802833][ T7291] usb 5-1: USB disconnect, device number 109 [ 724.040467][ T5740] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 724.230044][ T5740] usb 2-1: Using ep0 maxpacket: 32 [ 724.254946][ T5740] usb 2-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 724.294517][ T5740] usb 2-1: New USB device strings: Mfr=10, Product=2, SerialNumber=3 [ 724.304483][ T5740] usb 2-1: Product: syz [ 724.308921][ T5740] usb 2-1: Manufacturer: syz [ 724.334436][ T5740] usb 2-1: SerialNumber: syz [ 724.351116][ T5740] usb 2-1: config 0 descriptor?? [ 724.465327][T17233] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.598699][T18251] netlink: 'syz.6.3770': attribute type 1 has an invalid length. [ 724.632143][T18251] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3770'. [ 724.673981][T17233] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.786944][T17233] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.913791][ T30] audit: type=1326 audit(1783709453.456:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18262 comm="syz.0.3776" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5def9de59 code=0x7ffc0000 [ 724.971144][ T30] audit: type=1326 audit(1783709453.486:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18262 comm="syz.0.3776" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5def9de59 code=0x7ffc0000 [ 725.003436][T17233] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.023370][ T30] audit: type=1326 audit(1783709453.486:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18262 comm="syz.0.3776" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5def9de59 code=0x7ffc0000 [ 725.077134][ T30] audit: type=1326 audit(1783709453.486:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18262 comm="syz.0.3776" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5def9de59 code=0x7ffc0000 [ 725.112025][ T5740] usb 2-1: reset high-speed USB device number 36 using dummy_hcd [ 725.169740][ T30] audit: type=1326 audit(1783709453.486:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18262 comm="syz.0.3776" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7ff5def9de59 code=0x7ffc0000 [ 725.211186][ T30] audit: type=1326 audit(1783709453.486:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18262 comm="syz.0.3776" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5def9de59 code=0x7ffc0000 [ 725.291116][ T30] audit: type=1326 audit(1783709453.486:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18262 comm="syz.0.3776" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5def9de59 code=0x7ffc0000 [ 725.405590][ T30] audit: type=1326 audit(1783709453.496:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18262 comm="syz.0.3776" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5def9de59 code=0x7ffc0000 [ 725.505222][ T30] audit: type=1326 audit(1783709453.496:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18262 comm="syz.0.3776" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5def9de59 code=0x7ffc0000 [ 725.551731][ T30] audit: type=1326 audit(1783709453.516:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18262 comm="syz.0.3776" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7ff5def9de59 code=0x7ffc0000 [ 725.601330][ T5740] usb 2-1: [UEAGLE-ATM] interface 1 not found [ 725.610280][T13291] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 725.629054][ T5740] ueagle-atm 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 725.651495][T17233] bridge_slave_1: left allmulticast mode [ 725.669371][T17233] bridge_slave_1: left promiscuous mode [ 725.675361][T17233] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.712619][T17233] bridge_slave_0: left allmulticast mode [ 725.729735][T17233] bridge_slave_0: left promiscuous mode [ 725.743818][T17233] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.796981][T13291] usb 5-1: unable to get BOS descriptor or descriptor too short [ 725.807300][T13291] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 725.832823][T13291] usb 5-1: too many endpoints for config 1 interface 0 altsetting 13: 33, using maximum allowed: 30 [ 725.869037][T13291] usb 5-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 725.907417][T13291] usb 5-1: config 1 interface 0 has no altsetting 0 [ 725.915362][T18277] Set syz1 is full, maxelem 0 reached [ 725.947451][T13291] usb 5-1: string descriptor 0 read error: -22 [ 725.955428][T13291] usb 5-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.40 [ 725.978544][T13291] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.155920][ T809] usb 34-1: device descriptor read/8, error -110 [ 726.571361][T17233] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 726.597330][ T809] usb usb34-port1: attempt power cycle [ 726.614342][T17233] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 726.634259][T17233] bond0 (unregistering): Released all slaves [ 726.789374][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 726.842530][ T7289] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 727.019280][ T7289] usb 6-1: Using ep0 maxpacket: 8 [ 727.026804][ T7289] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 727.055430][ T7289] usb 6-1: config 0 interface 0 has no altsetting 0 [ 727.073281][T13291] usb 2-1: USB disconnect, device number 36 [ 727.093253][ T7289] usb 6-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 727.137317][ T7289] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.184267][ T7289] usb 6-1: Product: syz [ 727.188695][ T7289] usb 6-1: Manufacturer: syz [ 727.193714][ T809] usb usb34-port1: unable to enumerate USB device [ 727.205611][ T7289] usb 6-1: SerialNumber: syz [ 727.248297][ T7289] usb 6-1: config 0 descriptor?? [ 727.273356][ T7289] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 found [ 727.495085][ T7289] snd_usb_toneport 6-1:0.0: cannot get proper max packet size [ 727.508322][ T7289] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 now disconnected [ 727.535359][T18300] FAULT_INJECTION: forcing a failure. [ 727.535359][T18300] name failslab, interval 1, probability 0, space 0, times 0 [ 727.550808][ T7289] snd_usb_toneport 6-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 727.561704][T18300] CPU: 0 UID: 0 PID: 18300 Comm: syz.1.3783 Tainted: G L syzkaller #0 PREEMPT(full) [ 727.561738][T18300] Tainted: [L]=SOFTLOCKUP [ 727.561753][T18300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 727.561766][T18300] Call Trace: [ 727.561775][T18300] [ 727.561784][T18300] dump_stack_lvl+0xe8/0x150 [ 727.561826][T18300] should_fail_ex+0x40c/0x560 [ 727.561858][T18300] should_failslab+0xa8/0x100 [ 727.561894][T18300] __kmalloc_cache_noprof+0xa8/0x660 [ 727.561925][T18300] ? tcf_exts_init_ex+0x10e/0x7b0 [ 727.562085][T18300] ? tcf_exts_init_ex+0x10e/0x7b0 [ 727.562117][T18300] ? __kasan_kmalloc+0x93/0xb0 [ 727.562149][T18300] tcf_exts_init_ex+0x10e/0x7b0 [ 727.562191][T18300] fw_change+0x728/0xe50 [ 727.562255][T18300] ? __pfx_fw_change+0x10/0x10 [ 727.562301][T18300] tc_new_tfilter+0x10c4/0x1850 [ 727.562352][T18300] ? __pfx_tc_new_tfilter+0x10/0x10 [ 727.562390][T18300] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 727.562467][T18300] ? __pfx_tc_new_tfilter+0x10/0x10 [ 727.562488][T18300] rtnetlink_rcv_msg+0x802/0xc00 [ 727.562516][T18300] ? netlink_sendmsg+0x5d4/0xb40 [ 727.562542][T18300] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 727.562571][T18300] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 727.562601][T18300] ? __lock_acquire+0x683/0x2cf0 [ 727.562645][T18300] netlink_rcv_skb+0x226/0x4a0 [ 727.562680][T18300] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 727.562715][T18300] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 727.562766][T18300] ? netlink_deliver_tap+0x2e/0x1b0 [ 727.562798][T18300] ? netlink_deliver_tap+0x2e/0x1b0 [ 727.562837][T18300] netlink_unicast+0x7bb/0x940 [ 727.562879][T18300] netlink_sendmsg+0x813/0xb40 [ 727.562910][T18300] ? __pfx_netlink_sendmsg+0x10/0x10 [ 727.562936][T18300] ? aa_sock_msg_perm+0xf1/0x1b0 [ 727.562966][T18300] ? __pfx_netlink_sendmsg+0x10/0x10 [ 727.562987][T18300] sock_sendmsg_nosec+0x13a/0x180 [ 727.563017][T18300] ____sys_sendmsg+0x54e/0x850 [ 727.563055][T18300] ? __pfx_____sys_sendmsg+0x10/0x10 [ 727.563096][T18300] ? import_iovec+0x73/0xa0 [ 727.563132][T18300] ___sys_sendmsg+0x2a5/0x360 [ 727.563163][T18300] ? __lock_acquire+0x683/0x2cf0 [ 727.563198][T18300] ? __pfx____sys_sendmsg+0x10/0x10 [ 727.563268][T18300] ? __fget_files+0x2a/0x420 [ 727.563295][T18300] ? __fget_files+0x3a2/0x420 [ 727.563334][T18300] __x64_sys_sendmsg+0x1b1/0x290 [ 727.563370][T18300] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 727.563420][T18300] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.563445][T18300] do_syscall_64+0x174/0x580 [ 727.563477][T18300] ? trace_irq_disable+0x3b/0x140 [ 727.563506][T18300] ? clear_bhb_loop+0x40/0x90 [ 727.563534][T18300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.563557][T18300] RIP: 0033:0x7f74c979de59 [ 727.563579][T18300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 727.563598][T18300] RSP: 002b:00007f74ca752028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 727.563622][T18300] RAX: ffffffffffffffda RBX: 00007f74c9a25fa0 RCX: 00007f74c979de59 [ 727.563639][T18300] RDX: 0000000000000800 RSI: 00002000000003c0 RDI: 0000000000000004 [ 727.563654][T18300] RBP: 00007f74ca752090 R08: 0000000000000000 R09: 0000000000000000 [ 727.563669][T18300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 727.563682][T18300] R13: 00007f74c9a26038 R14: 00007f74c9a25fa0 R15: 00007f74c9b4fa48 [ 727.563718][T18300] [ 727.963290][T17233] hsr_slave_0: left promiscuous mode [ 727.972811][T17233] hsr_slave_1: left promiscuous mode [ 727.978894][T17233] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 727.988092][T17233] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 728.005579][T17233] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 728.013619][T17233] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 728.066075][T17233] veth1_macvtap: left promiscuous mode [ 728.074037][T17233] veth0_macvtap: left promiscuous mode [ 728.079747][T17233] veth1_vlan: left promiscuous mode [ 728.085972][T17233] veth0_vlan: left promiscuous mode [ 728.412793][T13291] usb 5-1: USB disconnect, device number 110 [ 728.568354][T18313] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3785'. [ 728.837941][T18322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3787'. [ 729.001367][T18327] program syz.6.3790 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 729.047431][T17233] team0 (unregistering): Port device team_slave_1 removed [ 729.068413][T17233] team0 (unregistering): Port device team_slave_0 removed [ 729.303351][T18283] tipc: Invalid UDP bearer configuration [ 729.303402][T18283] tipc: Enabling of bearer rejected, failed to enable media [ 729.323631][ T5286] 8021q: adding VLAN 0 to HW filter on device eth6 [ 729.597560][T13291] usb 6-1: USB disconnect, device number 74 [ 729.868822][T18344] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3794'. [ 730.152075][T17233] IPVS: stop unused estimator thread 0... [ 730.602609][ T5286] 8021q: adding VLAN 0 to HW filter on device eth5 [ 731.084208][ T5286] 8021q: adding VLAN 0 to HW filter on device eth7 [ 731.522571][ T5286] 8021q: adding VLAN 0 to HW filter on device eth8 [ 732.070734][T18341] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 732.070781][ T4941] Bluetooth: hci1: command 0x0c1a tx timeout [ 732.634626][T18341] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 732.649262][T18341] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 732.660731][T18341] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 732.666824][T18341] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 732.677410][T18341] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 732.938363][T18425] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3809'. [ 732.947680][T13291] usb 6-1: new full-speed USB device number 75 using dummy_hcd [ 732.959451][ T5687] usb 1-1: new low-speed USB device number 99 using dummy_hcd [ 732.969718][ T7291] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 733.089259][ T5687] usb 1-1: device descriptor read/64, error -71 [ 733.096402][T18430] netlink: 'syz.6.3806': attribute type 1 has an invalid length. [ 733.105018][T18430] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3806'. [ 733.124300][T13291] usb 6-1: unable to get BOS descriptor or descriptor too short [ 733.143549][ T7291] usb 5-1: Using ep0 maxpacket: 32 [ 733.154424][T13291] usb 6-1: not running at top speed; connect to a high speed hub [ 733.164935][ T7291] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 733.176137][ T7291] usb 5-1: config 0 has no interface number 0 [ 733.182675][ T7291] usb 5-1: config 0 interface 184 has no altsetting 0 [ 733.192170][T13291] usb 6-1: config 8 has an invalid interface number: 3 but max is 0 [ 733.200733][T13291] usb 6-1: config 8 has no interface number 0 [ 733.207177][T13291] usb 6-1: config 8 interface 3 has no altsetting 0 [ 733.217287][ T7291] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 733.227350][ T7291] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.236404][T13291] usb 6-1: New USB device found, idVendor=093a, idProduct=2603, bcdDevice=1d.22 [ 733.249232][ T7291] usb 5-1: Product: syz [ 733.255009][T13291] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.264825][ T7291] usb 5-1: Manufacturer: syz [ 733.274962][ T7291] usb 5-1: SerialNumber: syz [ 733.279847][T13291] usb 6-1: Product: syz [ 733.287762][T13291] usb 6-1: Manufacturer: syz [ 733.305607][ T7291] usb 5-1: config 0 descriptor?? [ 733.311387][T13291] usb 6-1: SerialNumber: syz [ 733.339337][ T5687] usb 1-1: new low-speed USB device number 100 using dummy_hcd [ 733.362990][T13291] usb 6-1: can't set config #8, error -71 [ 733.400532][T13291] usb 6-1: USB disconnect, device number 75 [ 733.496538][T18439] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3814'. [ 733.635051][ T30] kauditd_printk_skb: 171 callbacks suppressed [ 733.635070][ T30] audit: type=1800 audit(1783709462.176:934): pid=18443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3816" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 733.741532][ T7291] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 733.772428][ T7291] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 733.780641][ T5687] usb 1-1: device descriptor read/64, error -71 [ 733.821972][ T7291] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 733.836087][ T7291] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 733.859418][ T7291] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 733.870296][ T7291] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 733.910012][ T5687] usb usb1-port1: attempt power cycle [ 733.912087][ T7291] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 733.950491][ T7291] usb 5-1: USB disconnect, device number 111 [ 734.006887][T18454] fuse: Bad value for 'rootmode' [ 734.149582][ T4941] Bluetooth: hci1: command 0x0c1a tx timeout [ 734.265956][T18466] FAULT_INJECTION: forcing a failure. [ 734.265956][T18466] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 734.279256][ T5687] usb 1-1: new low-speed USB device number 101 using dummy_hcd [ 734.288799][T18466] CPU: 0 UID: 0 PID: 18466 Comm: syz.1.3824 Tainted: G L syzkaller #0 PREEMPT(full) [ 734.288833][T18466] Tainted: [L]=SOFTLOCKUP [ 734.288841][T18466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 734.288854][T18466] Call Trace: [ 734.288863][T18466] [ 734.288872][T18466] dump_stack_lvl+0xe8/0x150 [ 734.288910][T18466] should_fail_ex+0x40c/0x560 [ 734.288940][T18466] _copy_from_user+0x2d/0xb0 [ 734.288972][T18466] get_user_ifreq+0x6b/0x180 [ 734.288997][T18466] sock_ioctl+0x6f8/0x7e0 [ 734.289025][T18466] ? __pfx_sock_ioctl+0x10/0x10 [ 734.289050][T18466] ? __fget_files+0x3a2/0x420 [ 734.289082][T18466] ? __fget_files+0x2a/0x420 [ 734.289112][T18466] ? bpf_lsm_file_ioctl+0x9/0x20 [ 734.289176][T18466] ? __pfx_sock_ioctl+0x10/0x10 [ 734.289199][T18466] __se_sys_ioctl+0xfc/0x170 [ 734.289221][T18466] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.289245][T18466] do_syscall_64+0x174/0x580 [ 734.289275][T18466] ? trace_irq_disable+0x3b/0x140 [ 734.289302][T18466] ? clear_bhb_loop+0x40/0x90 [ 734.289329][T18466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.289352][T18466] RIP: 0033:0x7f74c979de59 [ 734.289372][T18466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 734.289391][T18466] RSP: 002b:00007f74ca752028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 734.289414][T18466] RAX: ffffffffffffffda RBX: 00007f74c9a25fa0 RCX: 00007f74c979de59 [ 734.289430][T18466] RDX: 0000200000000080 RSI: 00000000000089f3 RDI: 0000000000000003 [ 734.289445][T18466] RBP: 00007f74ca752090 R08: 0000000000000000 R09: 0000000000000000 [ 734.289459][T18466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 734.289473][T18466] R13: 00007f74c9a26038 R14: 00007f74c9a25fa0 R15: 00007f74c9b4fa48 [ 734.289513][T18466] [ 734.300925][ T5687] usb 1-1: device descriptor read/8, error -71 [ 734.686423][T18469] syzkaller0: entered promiscuous mode [ 734.702983][T18469] syzkaller0: entered allmulticast mode [ 734.709461][ T4941] Bluetooth: hci3: command 0x0c1a tx timeout [ 734.789283][ T5687] usb 1-1: new low-speed USB device number 102 using dummy_hcd [ 734.819966][ T5687] usb 1-1: device descriptor read/8, error -71 [ 734.891673][T18474] loop5: detected capacity change from 0 to 7 [ 734.911595][T18474] Dev loop5: unable to read RDB block 7 [ 734.919341][T18474] loop5: unable to read partition table [ 734.931587][T18474] loop5: partition table beyond EOD, truncated [ 734.939966][ T5687] usb usb1-port1: unable to enumerate USB device [ 734.961306][T18474] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 735.521999][T13291] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 735.689299][T13291] usb 6-1: device descriptor read/64, error -71 [ 735.949391][T13291] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 736.089249][T13291] usb 6-1: device descriptor read/64, error -71 [ 736.161159][T18515] netlink: zone id is out of range [ 736.166454][T18515] netlink: zone id is out of range [ 736.172035][T18515] netlink: zone id is out of range [ 736.177260][T18515] netlink: zone id is out of range [ 736.182671][T18515] netlink: zone id is out of range [ 736.187863][T18515] netlink: zone id is out of range [ 736.193602][T18515] netlink: zone id is out of range [ 736.198793][T18515] netlink: zone id is out of range [ 736.204209][T18515] netlink: zone id is out of range [ 736.209963][T13291] usb usb6-port1: attempt power cycle [ 736.215530][T18515] netlink: zone id is out of range [ 736.230941][ T4941] Bluetooth: hci1: command 0x0c1a tx timeout [ 736.579274][T13291] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 736.587230][T18520] kvm_pr_unimpl_wrmsr: 6 callbacks suppressed [ 736.587338][T18520] kvm: kvm [18519]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x100000000 [ 736.632058][T13291] usb 6-1: device descriptor read/8, error -71 [ 736.645588][T18520] kvm: kvm [18519]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x80 [ 736.680329][T18520] kvm: kvm [18519]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 736.711662][T18520] kvm: kvm [18519]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x80 [ 736.789765][ T4941] Bluetooth: hci3: command 0x0c1a tx timeout [ 736.904676][T13291] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 736.971438][T13291] usb 6-1: device descriptor read/8, error -71 [ 737.099686][T13291] usb usb6-port1: unable to enumerate USB device [ 737.486686][T18544] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3852'. [ 737.628444][T18548] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3854'. [ 737.954794][T18558] bond0: entered allmulticast mode [ 737.975586][T18558] bond_slave_0: entered allmulticast mode [ 738.004524][T18558] bond_slave_1: entered allmulticast mode [ 738.106418][T18558] bond0: (slave bond_slave_1): Releasing backup interface [ 738.155879][T18558] bond_slave_1: left allmulticast mode [ 738.475466][T18569] loop5: detected capacity change from 0 to 7 [ 738.501064][T18569] Dev loop5: unable to read RDB block 7 [ 738.515237][T18569] loop5: unable to read partition table [ 738.544059][T18569] loop5: partition table beyond EOD, truncated [ 738.545922][T18569] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 738.812315][T18575] netlink: 'syz.6.3863': attribute type 10 has an invalid length. [ 738.847577][T18576] Cannot find set identified by id 0 to match [ 738.856459][T18575] bond0: (slave bond_slave_0): Releasing backup interface [ 738.869957][ T4941] Bluetooth: hci3: command 0x0c1a tx timeout [ 739.203082][T18580] fuse: Unknown parameter '&d' [ 739.967297][T18598] binder: 18597:18598 ioctl c0306201 200000000080 returned -14 [ 740.184554][T18608] xt_hashlimit: size too large, truncated to 1048576 [ 740.240923][T18611] bridge_slave_1: left allmulticast mode [ 740.253706][T18611] bridge_slave_1: left promiscuous mode [ 740.268959][T18611] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.294755][T18611] bridge_slave_0: left allmulticast mode [ 740.307644][T18611] bridge_slave_0: left promiscuous mode [ 740.323070][T18611] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.352586][T18616] loop2: detected capacity change from 0 to 7 [ 740.363537][T18616] Dev loop2: unable to read RDB block 7 [ 740.372978][T18616] loop2: unable to read partition table [ 740.382781][T18616] loop2: partition table beyond EOD, truncated [ 740.397436][T18616] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 740.420271][T18610] vlan2: entered allmulticast mode [ 740.497918][T18614] mac80211_hwsim hwsim16 syzkaller0: entered promiscuous mode [ 740.511438][T18614] mac80211_hwsim hwsim16 syzkaller0: entered allmulticast mode [ 740.722693][T18623] netlink: 'syz.4.3879': attribute type 4 has an invalid length. [ 740.752261][T18623] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3879'. [ 741.039369][T15910] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 741.047192][ T5687] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 741.087769][T18641] netlink: 'syz.0.3886': attribute type 1 has an invalid length. [ 741.138184][T18641] 8021q: adding VLAN 0 to HW filter on device bond2 [ 741.210906][T18641] bond2: (slave veth3): Enslaving as an active interface with a down link [ 741.219624][T15910] usb 6-1: Using ep0 maxpacket: 32 [ 741.226384][ T5687] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 741.238933][ T5687] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.250194][T15910] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 741.262074][ T5687] usb 2-1: config 0 descriptor?? [ 741.272485][T15910] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.301572][T15910] usb 6-1: config 0 descriptor?? [ 741.486994][ T5687] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 741.722547][ T5687] [drm:udl_init] *ERROR* Selecting channel failed [ 741.761725][ T7291] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 741.825899][T15910] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 741.897754][ T5687] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 741.904720][ T5687] [drm] Initialized udl on minor 2 [ 741.918246][ T5687] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 741.948864][T15910] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 741.961315][ T7291] usb 7-1: Using ep0 maxpacket: 16 [ 741.975159][T15910] dib0700: firmware download failed at 7 with -22 [ 741.985436][ T7291] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 742.011710][ T5687] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 742.021343][T15910] usb 6-1: USB disconnect, device number 80 [ 742.026095][ T7291] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 742.066619][ T7291] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.093137][ T5687] usb 2-1: USB disconnect, device number 37 [ 742.125745][ T7291] usb 7-1: config 0 descriptor?? [ 742.144044][ T809] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 742.206236][ T809] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 742.612702][T18665] net_ratelimit: 9 callbacks suppressed [ 742.612725][T18665] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 742.649564][ T7291] mcp2221 0003:04D8:00DD.0032: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 742.787027][ C0] ================================================================== [ 742.795227][ C0] BUG: KASAN: use-after-free in mcp2221_raw_event+0x10b0/0x12a0 [ 742.803054][ C0] Read of size 1 at addr ffff88805ca63fff by task syz.1.3893/18667 [ 742.811014][ C0] [ 742.813408][ C0] CPU: 0 UID: 0 PID: 18667 Comm: syz.1.3893 Tainted: G L syzkaller #0 PREEMPT(full) [ 742.813481][ C0] Tainted: [L]=SOFTLOCKUP [ 742.813487][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 742.813499][ C0] Call Trace: [ 742.813508][ C0] [ 742.813516][ C0] dump_stack_lvl+0xe8/0x150 [ 742.813546][ C0] print_address_description+0x55/0x1e0 [ 742.813580][ C0] ? mcp2221_raw_event+0x10b0/0x12a0 [ 742.813608][ C0] print_report+0x58/0x70 [ 742.813630][ C0] kasan_report+0x117/0x150 [ 742.813657][ C0] ? mcp2221_raw_event+0x10b0/0x12a0 [ 742.813687][ C0] mcp2221_raw_event+0x10b0/0x12a0 [ 742.813712][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 742.813735][ C0] ? down_trylock+0x50/0xb0 [ 742.813760][ C0] __hid_input_report+0x41c/0x580 [ 742.813810][ C0] ? __pfx_mcp2221_raw_event+0x10/0x10 [ 742.813838][ C0] hid_irq_in+0x492/0x710 [ 742.813892][ C0] __usb_hcd_giveback_urb+0x374/0x530 [ 742.813912][ C0] dummy_timer+0xac3/0x4b40 [ 742.814020][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 742.814039][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 742.814055][ C0] __hrtimer_run_queues+0x3bc/0xa10 [ 742.814081][ C0] hrtimer_run_softirq+0x17a/0x240 [ 742.814102][ C0] handle_softirqs+0x225/0x840 [ 742.814123][ C0] ? __irq_exit_rcu+0xca/0x220 [ 742.814145][ C0] __irq_exit_rcu+0xca/0x220 [ 742.814164][ C0] irq_exit_rcu+0x9/0x30 [ 742.814181][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 742.814205][ C0] [ 742.814212][ C0] [ 742.814218][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 742.814237][ C0] RIP: 0010:lock_acquire+0x221/0x350 [ 742.814262][ C0] Code: ff ff ff e8 61 df 2c 0a f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 4b 5a ca 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 98 de b8 [ 742.814277][ C0] RSP: 0018:ffffc90004ca74e8 EFLAGS: 00000286 [ 742.814293][ C0] RAX: c7d7e5a308c6f800 RBX: 0000000000000000 RCX: 0000000080000001 [ 742.814305][ C0] RDX: 0000000072a5f24f RSI: ffffffff8e4af202 RDI: ffffffff8c4bd380 [ 742.814319][ C0] RBP: ffffffff823fb727 R08: ffffffff823fb727 R09: 0000000000000000 [ 742.814331][ C0] R10: 0000000000000000 R11: ffffffff8eb59c60 R12: 0000000000000002 [ 742.814342][ C0] R13: ffffffff8eb59c60 R14: 0000000000000000 R15: 0000000000000246 [ 742.814361][ C0] ? page_table_check_set+0x127/0x530 [ 742.814385][ C0] ? page_table_check_set+0x127/0x530 [ 742.814410][ C0] ? page_table_check_set+0x127/0x530 [ 742.814432][ C0] page_table_check_set+0x144/0x530 [ 742.814453][ C0] ? page_table_check_set+0x127/0x530 [ 742.814477][ C0] set_pte_range+0x7ef/0x840 [ 742.814499][ C0] finish_fault+0xe65/0x1220 [ 742.814521][ C0] ? shmem_fault+0x270/0x390 [ 742.814552][ C0] ? do_pte_missing+0x140c/0x34b0 [ 742.814573][ C0] do_pte_missing+0x223d/0x34b0 [ 742.814598][ C0] ? handle_mm_fault+0xec/0x3080 [ 742.814617][ C0] handle_mm_fault+0x1b36/0x3080 [ 742.814640][ C0] ? handle_mm_fault+0xec/0x3080 [ 742.814660][ C0] ? __pfx_handle_mm_fault+0x10/0x10 [ 742.814678][ C0] ? follow_page_pte+0x6ce/0xe70 [ 742.814699][ C0] ? __pfx_follow_page_pte+0x10/0x10 [ 742.814741][ C0] __get_user_pages+0x1678/0x2720 [ 742.814795][ C0] populate_vma_page_range+0x2be/0x3c0 [ 742.814836][ C0] ? __pfx_populate_vma_page_range+0x10/0x10 [ 742.814876][ C0] ? down_read+0x2be/0x330 [ 742.814903][ C0] __mm_populate+0x25f/0x390 [ 742.814930][ C0] ? __pfx___mm_populate+0x10/0x10 [ 742.814960][ C0] do_mlock+0x615/0x720 [ 742.814988][ C0] ? __pfx_do_mlock+0x10/0x10 [ 742.815017][ C0] ? rcu_is_watching+0x15/0xb0 [ 742.815045][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.815062][ C0] __x64_sys_mlock+0x60/0x70 [ 742.815086][ C0] do_syscall_64+0x174/0x580 [ 742.815110][ C0] ? trace_irq_disable+0x3b/0x140 [ 742.815131][ C0] ? clear_bhb_loop+0x40/0x90 [ 742.815149][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.815167][ C0] RIP: 0033:0x7f74c979de59 [ 742.815182][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 742.815197][ C0] RSP: 002b:00007f74ca710028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 742.815214][ C0] RAX: ffffffffffffffda RBX: 00007f74c9a26180 RCX: 00007f74c979de59 [ 742.815227][ C0] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 742.815238][ C0] RBP: 00007f74c9833e6f R08: 0000000000000000 R09: 0000000000000000 [ 742.815250][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 742.815260][ C0] R13: 00007f74c9a26218 R14: 00007f74c9a26180 R15: 00007f74c9b4fa48 [ 742.815280][ C0] [ 742.815286][ C0] [ 743.275876][ C0] The buggy address belongs to the physical page: [ 743.282301][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805ca63000 pfn:0x5ca63 [ 743.292370][ C0] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 743.299502][ C0] raw: 00fff00000000000 dead000000000100 dead000000000122 0000000000000000 [ 743.308086][ C0] raw: ffff88805ca63000 0000000000000000 00000000ffffffff 0000000000000000 [ 743.316666][ C0] page dumped because: kasan: bad access detected [ 743.323158][ C0] page_owner tracks the page as freed [ 743.328527][ C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x400cc0(GFP_KERNEL_ACCOUNT), pid 18210, tgid 18207 (syz.5.3755), ts 721292216231, free_ts 722085190105 [ 743.345469][ C0] post_alloc_hook+0x1f9/0x250 [ 743.350253][ C0] get_page_from_freelist+0x21fa/0x2270 [ 743.355826][ C0] __alloc_frozen_pages_noprof+0x18d/0x380 [ 743.361652][ C0] alloc_pages_mpol+0x212/0x380 [ 743.366518][ C0] alloc_pages_noprof+0xac/0x2a0 [ 743.371467][ C0] get_free_pages_noprof+0xf/0x80 [ 743.376528][ C0] __kvm_mmu_topup_memory_cache+0x252/0x600 [ 743.382459][ C0] mmu_topup_memory_caches+0xd6/0x170 [ 743.387895][ C0] kvm_mmu_load+0x9d/0x2360 [ 743.392407][ C0] vcpu_run+0x4cdb/0x77d0 [ 743.396742][ C0] kvm_arch_vcpu_ioctl_run+0x1193/0x2070 [ 743.402379][ C0] kvm_vcpu_ioctl+0xa61/0xfd0 [ 743.407091][ C0] __se_sys_ioctl+0xfc/0x170 [ 743.411684][ C0] do_syscall_64+0x174/0x580 [ 743.416284][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.422183][ C0] page last free pid 18207 tgid 18207 stack trace: [ 743.428688][ C0] __free_frozen_pages+0xc1e/0xd10 [ 743.433828][ C0] kvm_mmu_free_memory_cache+0x122/0x260 [ 743.439533][ C0] kvm_mmu_destroy+0x336/0x390 [ 743.444333][ C0] kvm_arch_vcpu_destroy+0x28e/0x380 [ 743.449636][ C0] kvm_destroy_vcpus+0x123/0x380 [ 743.454640][ C0] kvm_arch_destroy_vm+0xf9/0x2d0 [ 743.459681][ C0] kvm_put_kvm+0x772/0xae0 [ 743.464111][ C0] kvm_vm_release+0x43/0x50 [ 743.468621][ C0] __fput+0x418/0xa50 [ 743.472612][ C0] task_work_run+0x1d9/0x270 [ 743.477215][ C0] exit_to_user_mode_loop+0x1fa/0x730 [ 743.482600][ C0] do_syscall_64+0x353/0x580 [ 743.487200][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.493098][ C0] [ 743.495421][ C0] Memory state around the buggy address: [ 743.501136][ C0] ffff88805ca63e80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 743.509206][ C0] ffff88805ca63f00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 743.517428][ C0] >ffff88805ca63f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 743.525498][ C0] ^ [ 743.533504][ C0] ffff88805ca64000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 743.541571][ C0] ffff88805ca64080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 743.549636][ C0] ================================================================== [ 743.557722][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 743.564924][ C0] CPU: 0 UID: 0 PID: 18667 Comm: syz.1.3893 Tainted: G L syzkaller #0 PREEMPT(full) [ 743.575889][ C0] Tainted: [L]=SOFTLOCKUP [ 743.580233][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 743.590295][ C0] Call Trace: [ 743.593582][ C0] [ 743.596450][ C0] vpanic+0x56c/0xa60 [ 743.600459][ C0] ? __pfx_vpanic+0x10/0x10 [ 743.604990][ C0] panic+0xc5/0xd0 [ 743.608730][ C0] ? __pfx_panic+0x10/0x10 [ 743.613164][ C0] ? mcp2221_raw_event+0x10b0/0x12a0 [ 743.618469][ C0] ? mcp2221_raw_event+0x10b0/0x12a0 [ 743.623767][ C0] ? mcp2221_raw_event+0x10b0/0x12a0 [ 743.629137][ C0] check_panic_on_warn+0x89/0xb0 [ 743.634122][ C0] ? mcp2221_raw_event+0x10b0/0x12a0 [ 743.639435][ C0] end_report+0x73/0x170 [ 743.643718][ C0] ? mcp2221_raw_event+0x10b0/0x12a0 [ 743.649044][ C0] kasan_report+0x128/0x150 [ 743.653633][ C0] ? mcp2221_raw_event+0x10b0/0x12a0 [ 743.658939][ C0] mcp2221_raw_event+0x10b0/0x12a0 [ 743.664070][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 743.669906][ C0] ? down_trylock+0x50/0xb0 [ 743.674451][ C0] __hid_input_report+0x41c/0x580 [ 743.679497][ C0] ? __pfx_mcp2221_raw_event+0x10/0x10 [ 743.684987][ C0] hid_irq_in+0x492/0x710 [ 743.689346][ C0] __usb_hcd_giveback_urb+0x374/0x530 [ 743.694751][ C0] dummy_timer+0xac3/0x4b40 [ 743.699294][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 743.704252][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 743.709210][ C0] __hrtimer_run_queues+0x3bc/0xa10 [ 743.714449][ C0] hrtimer_run_softirq+0x17a/0x240 [ 743.719585][ C0] handle_softirqs+0x225/0x840 [ 743.724374][ C0] ? __irq_exit_rcu+0xca/0x220 [ 743.729156][ C0] __irq_exit_rcu+0xca/0x220 [ 743.733775][ C0] irq_exit_rcu+0x9/0x30 [ 743.738024][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 743.743669][ C0] [ 743.746604][ C0] [ 743.749539][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 743.755528][ C0] RIP: 0010:lock_acquire+0x221/0x350 [ 743.760831][ C0] Code: ff ff ff e8 61 df 2c 0a f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 4b 5a ca 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 98 de b8 [ 743.780463][ C0] RSP: 0018:ffffc90004ca74e8 EFLAGS: 00000286 [ 743.786568][ C0] RAX: c7d7e5a308c6f800 RBX: 0000000000000000 RCX: 0000000080000001 [ 743.794547][ C0] RDX: 0000000072a5f24f RSI: ffffffff8e4af202 RDI: ffffffff8c4bd380 [ 743.802525][ C0] RBP: ffffffff823fb727 R08: ffffffff823fb727 R09: 0000000000000000 [ 743.810503][ C0] R10: 0000000000000000 R11: ffffffff8eb59c60 R12: 0000000000000002 [ 743.818524][ C0] R13: ffffffff8eb59c60 R14: 0000000000000000 R15: 0000000000000246 [ 743.826505][ C0] ? page_table_check_set+0x127/0x530 [ 743.831898][ C0] ? page_table_check_set+0x127/0x530 [ 743.837376][ C0] ? page_table_check_set+0x127/0x530 [ 743.842755][ C0] page_table_check_set+0x144/0x530 [ 743.847967][ C0] ? page_table_check_set+0x127/0x530 [ 743.853354][ C0] set_pte_range+0x7ef/0x840 [ 743.857962][ C0] finish_fault+0xe65/0x1220 [ 743.862564][ C0] ? shmem_fault+0x270/0x390 [ 743.867176][ C0] ? do_pte_missing+0x140c/0x34b0 [ 743.872228][ C0] do_pte_missing+0x223d/0x34b0 [ 743.877125][ C0] ? handle_mm_fault+0xec/0x3080 [ 743.882161][ C0] handle_mm_fault+0x1b36/0x3080 [ 743.887121][ C0] ? handle_mm_fault+0xec/0x3080 [ 743.892074][ C0] ? __pfx_handle_mm_fault+0x10/0x10 [ 743.897373][ C0] ? follow_page_pte+0x6ce/0xe70 [ 743.902319][ C0] ? __pfx_follow_page_pte+0x10/0x10 [ 743.907618][ C0] __get_user_pages+0x1678/0x2720 [ 743.912684][ C0] populate_vma_page_range+0x2be/0x3c0 [ 743.918168][ C0] ? __pfx_populate_vma_page_range+0x10/0x10 [ 743.924168][ C0] ? down_read+0x2be/0x330 [ 743.928607][ C0] __mm_populate+0x25f/0x390 [ 743.933221][ C0] ? __pfx___mm_populate+0x10/0x10 [ 743.938362][ C0] do_mlock+0x615/0x720 [ 743.942554][ C0] ? __pfx_do_mlock+0x10/0x10 [ 743.947258][ C0] ? rcu_is_watching+0x15/0xb0 [ 743.952041][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.958193][ C0] __x64_sys_mlock+0x60/0x70 [ 743.962805][ C0] do_syscall_64+0x174/0x580 [ 743.967434][ C0] ? trace_irq_disable+0x3b/0x140 [ 743.972469][ C0] ? clear_bhb_loop+0x40/0x90 [ 743.977164][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.983064][ C0] RIP: 0033:0x7f74c979de59 [ 743.987485][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 744.007103][ C0] RSP: 002b:00007f74ca710028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 744.015549][ C0] RAX: ffffffffffffffda RBX: 00007f74c9a26180 RCX: 00007f74c979de59 [ 744.023539][ C0] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 744.031523][ C0] RBP: 00007f74c9833e6f R08: 0000000000000000 R09: 0000000000000000 [ 744.039514][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 744.047517][ C0] R13: 00007f74c9a26218 R14: 00007f74c9a26180 R15: 00007f74c9b4fa48 [ 744.055530][ C0] [ 744.059187][ C0] Kernel Offset: disabled [ 744.063520][ C0] Rebooting in 86400 seconds..