last executing test programs: 13m34.850264391s ago: executing program 0 (id=689): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000012000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d657461000000001400028008000140", @ANYRES16], 0xc4}}, 0x0) 13m34.474458355s ago: executing program 0 (id=692): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000140)={0x3, 0x0, 0x58000, 0x1000, &(0x7f0000f40000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x2, 0x2, 0x0, 0x2000, &(0x7f0000f8b000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, &(0x7f0000000280)={0x5, 0x0, 0x7000, 0x2000, &(0x7f0000d6c000/0x2000)=nil, 0x7}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x1, 0xcccc0000, 0x2000, &(0x7f0000c7d000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x10001, 0x0, 0x0, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) 13m33.931512416s ago: executing program 0 (id=695): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.numa_stat\x00', 0x275a, 0x0) r1 = fanotify_init(0x200, 0x40000) r2 = openat$cgroup_ro(r0, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r1, 0x161, 0x40000867, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000840)={'syztnl1\x00', 0x0, 0x29, 0x80, 0x8, 0x2, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, 0x1, 0x1, 0x1b3, 0x5}}) sendfile(r4, r4, 0x0, 0x20000005) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = gettid() timer_create(0x3, &(0x7f0000000300)={0x0, 0x21, 0x2, @thr={&(0x7f0000000800)="fa93314bbe6ea8916386444e3bd62d", &(0x7f00000007c0)="48418dff254f"}}, &(0x7f0000000780)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000340)={0x0, 0x0, 0x10001, 0x5, r6}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000380)={{0x77359400}, {0x77359400}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) futex_waitv(&(0x7f00000003c0)=[{0x6, &(0x7f0000000400)=0x6, 0x2}], 0x1, 0x0, &(0x7f0000000440)={0x77359400}, 0x1) epoll_create1(0x0) io_uring_setup(0x2555, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={r0, 0x20, &(0x7f0000000600)={&(0x7f0000000480)=""/227, 0xe3, 0x0, &(0x7f0000000580)=""/91, 0x5b}}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x30, 0x43, 0x107, 0xfffffffd, 0x25dfdbfc, {0x1, 0x7c}, [@nested={0x4, 0x145}, @nested={0x18, 0x1, 0x0, 0x1, [@nested={0x14, 0x69, 0x0, 0x1, [@typed={0xe, 0xb9, 0x0, 0x0, @binary="c82a563a7e175c26e84a"}, @generic]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) socket$netlink(0x10, 0x3, 0x7) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x40148c0) syz_emit_ethernet(0x2a, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080045"], 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000700)="114353012008ba00000037510800", 0x59f, 0x4008015, &(0x7f0000000740)={0x11, 0xe5, r8, 0x1, 0x7}, 0x14) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) 13m31.704092362s ago: executing program 0 (id=699): socket$kcm(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb47, 0x4, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_ublk_setup_io_uring(0x1a, &(0x7f0000000040)={0x0, 0x30b5, 0x12003, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r5 = socket$inet(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000300)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007f9, &(0x7f00000003c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendto$inet(r5, &(0x7f0000000400)="02", 0x1, 0x14, 0x0, 0x0) shutdown(r5, 0x1) pipe2(&(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r5, 0x0, r6, 0x0, 0x7ffff000, 0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf4a, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@new_dev={0x3, 0xe1, 0x0, 0x0, 0x1000, 0xffffffff, r0, 0x0, 0x150}}}, &(0x7f0000000480)=0x0) r8 = dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) r9 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x841, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f00000007c0)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20044044) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000840)={[{0x500000, 0x1ff, 0x6, 0x1, 0x0, 0xc, 0x2, 0x4, 0x5, 0x4, 0xfa, 0x7, 0x7fffffffffffffff}, {0x7, 0x3, 0x9, 0xe7, 0x2, 0x80, 0x4, 0x7, 0xc1, 0x0, 0x7, 0xfb, 0xffffffff}, {0xfa7, 0x0, 0x0, 0x7, 0x9, 0x5, 0x2, 0x4, 0x6, 0x6, 0xa2, 0x0, 0x4}], 0x8}) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f0000000900)={[0x6, 0x9, 0xe6f, 0x400, 0x3, 0x0, 0x4002004c4, 0x1004, 0xb96f, 0x9, 0x100, 0x4, 0x1, 0x7ff, 0xb3, 0x10000000008d], 0x60000, 0xa80}) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) syz_ublk_setup_queues(r8, r7, &(0x7f0000000180)={0x0, 0x1, 0x8000, 0x3, 0x5e, 0x0, r1}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x617d, 0x20000, 0x2000, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x0, 0x148}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x1000, 0x1, 0x401f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367, 0x0, r8}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x4, 0x0, 0x0}}, 0x0) 13m30.292818129s ago: executing program 0 (id=703): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x200488c8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f00000002c0)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000040000000c"], 0x50) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x9, 0x4, 0xe9b, 0x22, 0x20000008, 0x7, 0x911d, 0x7, 0x8, 0x9, 0x5, 0x1006, 0xc, 0x8, 0x8000, 0xffffffffffffffff], 0x1000, 0x200000}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) getsockopt$inet6_opts(r4, 0x29, 0x36, 0xffffffffffffffff, &(0x7f0000000280)) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x3, 0xf, 0x0, 0x0, 0x80, 0x32, 0x1, 0x0, 0x20005, 0xfffffff8, 0xfd, 0xff, 0x1, 0x0, '\x00', 0x0, 0x60538872}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x200488c8) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f00000002c0)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) (async) close_range(r3, 0xffffffffffffffff, 0x2) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000040000000c"], 0x50) (async) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x9, 0x4, 0xe9b, 0x22, 0x20000008, 0x7, 0x911d, 0x7, 0x8, 0x9, 0x5, 0x1006, 0xc, 0x8, 0x8000, 0xffffffffffffffff], 0x1000, 0x200000}) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) (async) getsockopt$inet6_opts(r4, 0x29, 0x36, 0xffffffffffffffff, &(0x7f0000000280)) (async) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x3, 0xf, 0x0, 0x0, 0x80, 0x32, 0x1, 0x0, 0x20005, 0xfffffff8, 0xfd, 0xff, 0x1, 0x0, '\x00', 0x0, 0x60538872}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) 13m28.619266316s ago: executing program 0 (id=707): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x1, 0xbfff8000}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xe}, {0xfff2, 0xa}, {0x7}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x8, 0x400004, 0x0, 0x7}, 0xf0, 0x1, 0x31a, 0x3, 0x88a, 0x2, 0x8b, 0x1b, 0x5, 0x0, {0x0, 0x2, 0x800, 0x5, 0x0, 0x5}}}}]}, 0x78}}, 0x4000) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) sendmmsg(r6, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @multicast}, 0x10) ioperm(0x0, 0x80, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_clone(0x0, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, 0x0, 0x20004000) setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f0000000600)=0x100000001, 0x4) connect$inet(r7, &(0x7f0000000640)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000680), 0x20000328) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$sndctrl(0x0, 0x25, 0x282400) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000000, 0x200000005c831, r7, 0xffffd000) socket$unix(0x1, 0x5, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e2b02010301ffff64b029601f1e"], 0x2e) socket$nl_generic(0x10, 0x3, 0x10) 13m13.453307452s ago: executing program 32 (id=707): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x1, 0xbfff8000}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xe}, {0xfff2, 0xa}, {0x7}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x8, 0x400004, 0x0, 0x7}, 0xf0, 0x1, 0x31a, 0x3, 0x88a, 0x2, 0x8b, 0x1b, 0x5, 0x0, {0x0, 0x2, 0x800, 0x5, 0x0, 0x5}}}}]}, 0x78}}, 0x4000) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) sendmmsg(r6, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @multicast}, 0x10) ioperm(0x0, 0x80, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_clone(0x0, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, 0x0, 0x20004000) setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f0000000600)=0x100000001, 0x4) connect$inet(r7, &(0x7f0000000640)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000680), 0x20000328) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$sndctrl(0x0, 0x25, 0x282400) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000000, 0x200000005c831, r7, 0xffffd000) socket$unix(0x1, 0x5, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e2b02010301ffff64b029601f1e"], 0x2e) socket$nl_generic(0x10, 0x3, 0x10) 12m48.809930864s ago: executing program 3 (id=817): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000140), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000180)={0x5, 0x2, 0x1}) ppoll(&(0x7f0000000000)=[{r0, 0x1e}], 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000740)=0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000780)={0xffffffffffffffff}) socket(0x200000000000011, 0x2, 0x0) syz_emit_ethernet(0xff03, &(0x7f00000007c0)=ANY=[@ANYBLOB="0180c2000003000000000000080045300000400008019078ac1e0001ac142400004500000000010000fc0100077f000001640100fa4a8122a691f8ee23f224f268aba455fddfd313f14b794945448fec74b84167a0ba790037b9377296a31bed47298862fabc57440a61b547d70368e8105499b42f6ade0c08e1f578b67cf1a61d276445ff95e27bbd59f34065bca1a32db69dab71a1296dd6c3c9eae17d103cf1e3d8dcd6a87f01d5dbb6087e97747b61de5ec3d11d23d4dccb6f80cae943a666c33b3166cd1e0f987a839e81fa6b0e49cb"], 0x0) ioctl$int_in(r2, 0x5452, &(0x7f00000008c0)=0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000900)='./cgroup/syz1\x00', 0x1ff) r3 = syz_open_dev$vim2m(&(0x7f0000000940), 0x1f7ff6, 0x2) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x280000b, 0x28011, r3, 0x40000) r4 = syz_open_dev$vim2m(&(0x7f0000000980), 0x47b, 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x4) bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000100", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) mmap(&(0x7f0000bdf000/0x2000)=nil, 0x2000, 0x3000023, 0x13, r4, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000a00)={0xf0f080, 0x2}) 12m48.421599185s ago: executing program 3 (id=818): pipe(&(0x7f0000000580)={0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000600)=@abs, 0x6e) r3 = gettid() unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000680), 0x4000000002a82, 0x0) fadvise64(r4, 0x18, 0x2d, 0x0) waitid(0x2, r3, 0x0, 0x2, 0x0) syz_open_dev$sndpcmp(0x0, 0xfffffffffffffff1, 0x402000) sendmmsg$unix(r2, &(0x7f0000000700), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000740), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000007c0)={0x38, 0x5, 0x8, 0x3, 0x0, 0xd, 0x10000000000001, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000800), 0xa4342, 0x0) dup(r5) open_tree(0xffffffffffffff9c, 0x0, 0x89901) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000008c0)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000900)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x1, @loopback, 0x10}, {0xa, 0x4e1e, 0x800000d, @mcast1}, r7, 0x5}}, 0x48) write$RDMA_USER_CM_CMD_MIGRATE_ID(r6, &(0x7f0000000980)={0x12, 0x10, 0xfa00, {&(0x7f00000009c0), r7, r6}}, 0x18) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400"], 0x18}}, 0x0) move_pages(r3, 0x0, 0x0, 0x0, 0x0, 0x4) recvmmsg(r8, &(0x7f0000000ac0), 0x0, 0x30100, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)=@bridge_getvlan={0x18, 0x72, 0x7e3bfe4fa73db39f}, 0x18}}, 0x0) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000200b060a5840000102030109022d000101ffd080090400c5020301020309210900070122e5020905810320001f0a06090502030002040805"], &(0x7f0000000180)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x0, 0xff, 0x1, 0x20, 0xb8}, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="050f6c000167100148817ff1cc82427ebd5672962cc6e55c593d5ce9fdbc4fd0a4f84f48d1b616e9c51019de0f22669b52a02cd9528f8e0c98f1dfda7ec43ea0df0b8258b6623262dc9c582535d0ff71dde4d713dbe22bb575454322830fd52eaabec7e5925da2e56fd541fd"], 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x449}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x812}}]}) 12m44.222134764s ago: executing program 3 (id=831): socket$inet6_sctp(0xa, 0x1, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000080)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) prctl$PR_SET_NO_NEW_PRIVS(0x41, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) unshare(0x2c020400) syz_open_dev$dvb_frontend(0x0, 0x0, 0x882) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bridge0\x00'}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, 0x0, 0x2002c094) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0) memfd_create(&(0x7f0000000300)='\xecO\xdd\xbd\xfc\xfa\xe1\xea\xea\x00\xb0\xd8Y\x03\x00\x00\x00\x00\x00\x00\x7f.\x14\x89|cW\x11\x0e$]7\x99\x11\xfd\xbe/6&\xe6\x97\x1e\xfbon\'\x0f<;\xbe\xa5`\"E]\xda]\xb9\xeb>\xe9\xf2\x99\xa8\xbeOA\xf8\\\xeb[\xd7:{\r\x91.\xdbxn\x1b\x17\xccMz\x1dc\x1d5\x9fe/\xb7k}\xd7\xa6\xd1\xcf\x1f\xf3\xae\x9e\xd6\x040\x19\x88\xa7:OYw\xfe\xaf\xdf\x16\x88\xfe\xd3\x13\x9f!\xd7\xcf\x86\x9f\xe8)\x01\x01\x00\x00\x06^\xb4', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f00000002c0)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000400)={0x1, 0x0, 0x2}) close_range(r1, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0020040003000000300012800b00010067656e6576650000200002801400120056"], 0x50}, 0x1, 0x0, 0x0, 0x40680c5}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40a2a0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) madvise(&(0x7f000074b000/0x1000)=nil, 0x1000, 0xb) setpriority(0x2, 0x0, 0x2) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) 12m43.209596555s ago: executing program 3 (id=835): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0x0, 0x0}) r2 = syz_io_uring_setup(0x80, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x30, 0x0, &(0x7f0000000380), 0x40, 0x0, 0x0, {0x1}}) io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0) sendto$unix(r1, &(0x7f00000003c0)='a', 0x1, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000400)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r0, 0x0, 0x0, 0x0, 0x40010022, 0x0, {0x1}}) io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r6, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44805}, 0x20) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_SET_CPUID(r9, 0x4008ae8a, &(0x7f0000000480)={0xaaaaaaaaaaaad6c}) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000005, 0x6031, 0xffffffffffffffff, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r10, 0x7, &(0x7f0000000600)={0x1, 0x1, 0x7, 0x5}) fcntl$lock(r10, 0x25, &(0x7f0000000640)={0x0, 0x2, 0x3, 0x73e9}) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4006, &(0x7f0000000680)=0x4, 0x5, 0x2) syz_clone3(0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_open_dev$sg(&(0x7f00000006c0), 0x0, 0x8002) r12 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000700), 0x149002, 0x0) r13 = syz_open_dev$sndmidi(&(0x7f0000000740), 0x2, 0x141102) writev(r13, &(0x7f0000000780)=[{&(0x7f00000007c0)="94", 0xf000}, {0x0}], 0x2) write$P9_RSTATu(r12, &(0x7f0000000800)=ANY=[@ANYBLOB="930200007d00000005f000000000000005000000000000000000000000000000000000fffe000000000000000000000000001f00046e6f6465767b6376666f7892ffffff8102000000000031ffcebc920000003800704a86cec602007dfa673effeb09b5351f5bde05f7"], 0x232) r14 = fcntl$dupfd(r11, 0x0, r11) write$sndseq(r14, &(0x7f0000000880)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r14, &(0x7f00000008c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {0x0, 0xfe}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x20, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x56, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x40000000}, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {0xfc}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x1, @time, {0xfd}, {}, @connect}], 0xc4) 12m42.507633699s ago: executing program 3 (id=840): shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000300)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffff9c, &(0x7f00000003c0), 0x8800, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000240)=0x401, 0x4) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0xf, 0xf, 0x7fff8001}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = userfaultfd(0x80001) syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000390000/0x400000)=nil) ioctl$VIDIOC_G_MODULATOR(r2, 0xc0445636, &(0x7f0000000340)={0x1, "20a14025dfa9ff85c56471e7f364169560b8862eb4e00fa5f5f538e55622be9b", 0x4, 0xdd00, 0x0, 0x10, 0x1}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000100)={[0x12e8, 0x9, 0x8f3b8, 0x200, 0xa, 0x8000003fc, 0x4002004c4, 0x1000, 0xa, 0x97, 0x9, 0x1, 0x9, 0x4, 0x2000000000001, 0x200000000000003], 0xeeee7ffb}) ioctl$KVM_RUN(r4, 0xae80, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x30004040) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000500)={'syzkaller1\x00', @link_local}) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000280)=0x0) syz_open_procfs(r8, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r9, 0x84, 0x12, 0x0, &(0x7f0000000200)) write$tun(r6, &(0x7f0000000540)=ANY=[@ANYBLOB], 0xfdef) 12m41.306494349s ago: executing program 3 (id=845): unshare(0x8000000) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYRES8=r0], 0x34}, 0x1, 0x0, 0x0, 0x200080d1}, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)=0x20) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000600)=0x180004) write$binfmt_elf32(r0, 0x0, 0x4cd) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000100)=0xffffffff) write$dsp(r0, &(0x7f0000000140)="755a5398d512d39077459e67ee110daaf0413bc745ef85b89f2141d513969bd8", 0xffaa) ioctl$XFS_IOC_FSGROWFSLOG(r1, 0x4008586f, &(0x7f0000000000)={0x5, 0x7}) socket$nl_generic(0x10, 0x3, 0x10) semget$private(0x0, 0x4000, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0300000004020000040000000a00000000000000", @ANYRES16=0x0, @ANYBLOB="00000000010000006f080000002000000000be8a9ca48118d2dbb73a58873ad6aac6255a7e9d8c320d5ad4f650299107cb823d1b6db334a719e2c20564ac23bc83e333e38c8fe6e48f6865877946c43f5699fd9c0b636c761e410dcc50ad87423086f097d3de4be5626436fac1b0313ef2eaf997b77d294a484c21b8b65300000000002080e3106fd32b25ae3ae33af42449cebd5487d71da7a9d1e0e780f8a7b0bdb7ba94b79ec1b1f431ce5e93c3b5c391", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64=r1], 0x50) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0xa0, 0x0, 0x7, {{0x1000000000000002, 0x4, 0x6, 0x5, 0xfffffff8, 0x8003, {0x1000000002, 0x1, 0x5, 0x40000003, 0xfffffffffffffff7, 0x5, 0xfffffffb, 0x8, 0xfd55, 0x8000, 0x5, 0x0, 0x0, 0x1, 0xfffffdff}}, {0x0, 0x50120b533aae0b5d}}}, 0x0, 0x0}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000900), 0x202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000940)={0xfffffffe, 0x0, 0x0, 'queue0\x00', 0x48}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r4, 0x40bc5311, &(0x7f0000000a00)={0x80, 0x1, 'client1\x00', 0xffffffff80000004, "00ffe300", "717f90602f8ddfad5c4117ec00", 0x800200}) write$sndseq(r4, &(0x7f0000000ac0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, 0x0, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f00000004c0)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x4, 0x4, 0x100, 0x8, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="030000000400000004"], 0xc) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) symlinkat(&(0x7f0000002080)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00') r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000300), 0x2, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000540)=""/42) sendfile(r6, r6, 0x0, 0x8) 12m26.144355866s ago: executing program 33 (id=845): unshare(0x8000000) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYRES8=r0], 0x34}, 0x1, 0x0, 0x0, 0x200080d1}, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)=0x20) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000600)=0x180004) write$binfmt_elf32(r0, 0x0, 0x4cd) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000100)=0xffffffff) write$dsp(r0, &(0x7f0000000140)="755a5398d512d39077459e67ee110daaf0413bc745ef85b89f2141d513969bd8", 0xffaa) ioctl$XFS_IOC_FSGROWFSLOG(r1, 0x4008586f, &(0x7f0000000000)={0x5, 0x7}) socket$nl_generic(0x10, 0x3, 0x10) semget$private(0x0, 0x4000, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0300000004020000040000000a00000000000000", @ANYRES16=0x0, @ANYBLOB="00000000010000006f080000002000000000be8a9ca48118d2dbb73a58873ad6aac6255a7e9d8c320d5ad4f650299107cb823d1b6db334a719e2c20564ac23bc83e333e38c8fe6e48f6865877946c43f5699fd9c0b636c761e410dcc50ad87423086f097d3de4be5626436fac1b0313ef2eaf997b77d294a484c21b8b65300000000002080e3106fd32b25ae3ae33af42449cebd5487d71da7a9d1e0e780f8a7b0bdb7ba94b79ec1b1f431ce5e93c3b5c391", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64=r1], 0x50) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0xa0, 0x0, 0x7, {{0x1000000000000002, 0x4, 0x6, 0x5, 0xfffffff8, 0x8003, {0x1000000002, 0x1, 0x5, 0x40000003, 0xfffffffffffffff7, 0x5, 0xfffffffb, 0x8, 0xfd55, 0x8000, 0x5, 0x0, 0x0, 0x1, 0xfffffdff}}, {0x0, 0x50120b533aae0b5d}}}, 0x0, 0x0}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000900), 0x202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000940)={0xfffffffe, 0x0, 0x0, 'queue0\x00', 0x48}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r4, 0x40bc5311, &(0x7f0000000a00)={0x80, 0x1, 'client1\x00', 0xffffffff80000004, "00ffe300", "717f90602f8ddfad5c4117ec00", 0x800200}) write$sndseq(r4, &(0x7f0000000ac0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, 0x0, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f00000004c0)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x4, 0x4, 0x100, 0x8, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="030000000400000004"], 0xc) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) symlinkat(&(0x7f0000002080)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00') r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000300), 0x2, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000540)=""/42) sendfile(r6, r6, 0x0, 0x8) 1m22.101848174s ago: executing program 4 (id=2957): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$IPSET_CMD_TEST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2c, 0xb, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r1 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000204f045db600000000000109022d0001000060020904001005030001000921000036012205000905810300000c00070905", @ANYRES16], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000380)={0x18, &(0x7f0000000100)=ANY=[@ANYBLOB="000457"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1m20.226202498s ago: executing program 4 (id=2962): r0 = creat(&(0x7f0000002200)='./file1\x00', 0x1) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f00000026c0), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000002700)=0x20) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000002740)=0x180004) write$binfmt_elf32(r0, 0x0, 0x11) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000002780)=0x1) write$dsp(r1, &(0x7f00000027c0)="755a5398d512d39077459e67ee110daaf0413bc745ef85b89f2141d513969bd8", 0xffaa) mkdirat(0xffffffffffffff9c, &(0x7f0000002240)='./file0\x00', 0x61) r2 = syz_open_procfs(0x0, &(0x7f0000002440)='net/igmp\x00') pread64(r2, &(0x7f0000002480)=""/43, 0xfd8a, 0x3c) r3 = openat(0xffffffffffffff9c, &(0x7f0000002280)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r3, &(0x7f00000022c0)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) linkat(0xffffffffffffff9c, &(0x7f0000002300)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000002340)='./file0/file0\x00', 0x1000) write$binfmt_elf64(r0, 0x0, 0x1820) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setrlimit(0x2, &(0x7f0000002380)={0x2, 0x8}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000023c0)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = syz_usb_connect$hid(0xe031cddfbc41e86d, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) r7 = syz_usb_connect$sierra_net(0x4, 0x0, 0x0, 0x0) r8 = syz_usb_connect$cdc_ncm(0x0, 0x6f, &(0x7f0000002640)=ANY=[@ANYRES8=r7], &(0x7f0000002540)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r8, &(0x7f0000002580)={0x2c, 0x0, &(0x7f00000025c0)={0x0, 0x3, 0x3e, @string={0x3e, 0x3, "64a11b273c1d015d1cc6862741c6c6ec7e91253b17ccfeb2a9f488fab639680769e977927be19fa71eeeab6a104c896e707e2d15ed7b94d962d89fdf"}}, 0x0, 0x0, 0x0}, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="360f7883b81e2626660fc7350ff4650666b95c030010dada32f4656df30f09e3650f01ef66b9720500000f32f8000f0d35", 0x31}], 0x1, 0x2, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x1a, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r9, 0x4080aebf, &(0x7f0000000180)=@vmx={0x109, 0x0, 0x2080, {0x0, 0x10000}, {'\x00', "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f38740000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a4900"}}) ioctl$KVM_RUN(r9, 0xae80, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000140), 0x103902, 0x0) 1m16.86657177s ago: executing program 4 (id=2974): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x1}]}) socket$inet6_udp(0xa, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x600000000000000) eventfd2(0x8, 0x80000) inotify_init1(0x80000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r1], 0xc4}}, 0x0) (fail_nth: 3) 1m15.851348147s ago: executing program 4 (id=2978): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0xe503, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc000, 0x103) syz_fuse_handle_req(r0, &(0x7f0000004100)="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", 0x2000, &(0x7f0000006d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f0000002100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) 1m14.912032435s ago: executing program 4 (id=2985): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000000408010200000000000000000300000a060002400805000005000300ff"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r3, 0x6, 0x1f, &(0x7f0000000380)='G', 0x1) (async) r4 = syz_usb_connect(0x0, 0x24, &(0x7f00000006c0)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r4, &(0x7f0000000700)={0x2c, &(0x7f0000000880)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$uac3(r4, 0x0, 0x0) (async) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xb, 0x60443) ioctl$DRM_IOCTL_MODE_ADDFB(r5, 0xc01c64ae, &(0x7f0000000900)={0x0, 0x4, 0xf7, 0x5, 0x20, 0x18, 0xfffffc00}) (async) syz_emit_ethernet(0x137, &(0x7f0000000540)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "108f84", 0x101, 0x3a, 0xff, @remote, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0xc1, '\x00', @local, [{0x1f, 0x1d, "92e6ea2905071740e5bbd6dc012f99da24e06539bcbf950b4d2e8f7e5a1d866cfcec32a5d09667f25e96d41ef034d9cddcc26b2357b08f3d38376f23437ad686b03d16f6aa501c17243bab0a9feeb9e040de757f467f4dcef63c5863db2ea96a320ef5e962ac05c50ac16405ca10b72657bf146826ef1b83cf0550fc5dab01971c63431ed26eefd1aadf3bdc0be32f82665140eb58ddbd930da1993ec7cab0b6174d2110544a1d9b7550457f39ecff870eb11b0b55932890067c3656ed6c4a79aa90c4f89883a351c17cd3bc3d1bf34d3e570dcfb892f00687a6c3b7db57fd9484195a4f421b3f"}]}}}}}}, 0x0) (async) r6 = syz_io_uring_setup(0x414b, &(0x7f0000000140)={0x0, 0xa52a, 0x0, 0x100003, 0x28f}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5c0000000d06010300000000000000000300000905000500020000000500050000000000050001000700000005000500010000000e0003006269746d61703a6970000000050005000a0000000500010007000000050001000700000049ae04eed3e6b3f2d2369a13604d3bb1b749c25926264e1f34cc0ff2275b311598eabe14e76dda94a919d13a5d85f63955c530b62f85513becb0380d6239e244778f8c1731dccb0cddbe3e81f29be6f0a87c625b80"], 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x1) (async) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r2, 0x0, 0x0, 0x0, 0x800}) (async) r10 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f00000004c0)={'gre0\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x2100, 0x700, 0x0, 0x200, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x60, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010101, @local}}}}) (async) io_uring_enter(r6, 0x2003, 0x0, 0x2, 0x0, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r2) syz_clone3(&(0x7f00000000c0)={0x200000400, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) (async) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x7, 0x1, 0x1, 0x0, 0x0, {0xa, 0x0, 0x8}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040190}, 0x40) 1m13.394182727s ago: executing program 4 (id=3000): r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x8) r1 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x7, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f0000000000)={0xfdf9, 0x8, 0x1f}, 0x8) sendto$inet6(r6, &(0x7f00000000c0)='\x00', 0x1, 0xc001, &(0x7f0000000140)={0xa, 0x0, 0x80, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3355}, 0x1c) setsockopt$inet6_int(r6, 0x29, 0x2, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r5, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x22, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0) unshare(0x22020400) syz_usb_connect(0x0, 0x39, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010002ff000040da0b5281113001020301090227"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) socket$inet(0xa, 0x801, 0x84) (async) listen(r0, 0x8) (async) syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000300)) (async) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x7, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f0000000000)={0xfdf9, 0x8, 0x1f}, 0x8) (async) sendto$inet6(r6, &(0x7f00000000c0)='\x00', 0x1, 0xc001, &(0x7f0000000140)={0xa, 0x0, 0x80, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3355}, 0x1c) (async) setsockopt$inet6_int(r6, 0x29, 0x2, 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) dup(r7) (async) syz_ublk_setup_queues(r8, r5, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x22, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0) (async) unshare(0x22020400) (async) syz_usb_connect(0x0, 0x39, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010002ff000040da0b5281113001020301090227"], 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) (async) 32.406416311s ago: executing program 34 (id=3000): r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x8) r1 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x7, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f0000000000)={0xfdf9, 0x8, 0x1f}, 0x8) sendto$inet6(r6, &(0x7f00000000c0)='\x00', 0x1, 0xc001, &(0x7f0000000140)={0xa, 0x0, 0x80, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3355}, 0x1c) setsockopt$inet6_int(r6, 0x29, 0x2, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r5, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x22, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0) unshare(0x22020400) syz_usb_connect(0x0, 0x39, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010002ff000040da0b5281113001020301090227"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) socket$inet(0xa, 0x801, 0x84) (async) listen(r0, 0x8) (async) syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000300)) (async) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x7, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f0000000000)={0xfdf9, 0x8, 0x1f}, 0x8) (async) sendto$inet6(r6, &(0x7f00000000c0)='\x00', 0x1, 0xc001, &(0x7f0000000140)={0xa, 0x0, 0x80, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3355}, 0x1c) (async) setsockopt$inet6_int(r6, 0x29, 0x2, 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) dup(r7) (async) syz_ublk_setup_queues(r8, r5, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x22, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0) (async) unshare(0x22020400) (async) syz_usb_connect(0x0, 0x39, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010002ff000040da0b5281113001020301090227"], 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) (async) 20.507089287s ago: executing program 5 (id=3105): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x40010) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x100000, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000010001ffffcfffffffddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000010000000000240012800b00010067726574617000001400028008000700ac141428060003002e50000008000a00", @ANYRES32=r2, @ANYBLOB="6a9b2be5a36a4cde128cd4347c44786aa672d2a30ac1491694e871bb918eebcf8aa94c7c49a5e2161f10852a7ed4bc325abcfc63f7220b84bd9144a17ad5a5a0365777013de7766b02397b7fc9cd427487"], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 19.142479364s ago: executing program 5 (id=3109): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind(r0, &(0x7f0000000080)=@can={0x1d, r1, 0x1, 0x2}, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r2, &(0x7f0000000100)={&(0x7f0000000140)={0x1d, r1}, 0x10, &(0x7f0000000180)={&(0x7f0000000200)=@can={{0x1}, 0x8, 0x0, 0x0, 0x0, "0100"}, 0x10}}, 0x0) recvfrom$l2tp6(r0, 0x0, 0x0, 0x2, 0x0, 0x0) read(r0, &(0x7f0000000240)=""/100, 0x64) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 18.002712614s ago: executing program 5 (id=3114): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0x20, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4a880, 0x80e1}, [@IFLA_GROUP={0x8, 0x1b, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000082}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000700)=@req3={0xffffffff, 0xf79, 0xff, 0x4f, 0x9, 0x3ff, 0x3}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, r4, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8, 0x77}}}}, [@NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_TX_RATES={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x810) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x41}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_MASQ_REG_PROTO_MAX={0x8}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x15}]}}}, {0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xc4}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040840) setsockopt$packet_rx_ring(r2, 0x107, 0x5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r7, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x3c, r8, 0x706, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x6, 0x35}}}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "8897457dcd171872e888cae33f8395dd"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000000) r10 = socket$packet(0x11, 0x3, 0x300) mremap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000003000/0x2000)=nil) setsockopt$packet_tx_ring(r10, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r11 = syz_open_dev$swradio(&(0x7f00000006c0), 0x1, 0x2) poll(&(0x7f0000000740)=[{r11, 0xa2f0}], 0x1, 0x10000) ioctl$VIDIOC_STREAMON(r11, 0x40045612, &(0x7f0000000780)=0x4) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13012, r10, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x50103}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 15.856578683s ago: executing program 5 (id=3123): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r1 = syz_clone(0x40000080, &(0x7f0000000000)="3d3e489f992280d85f10065a3a14862e8a7ba19f0b8eef", 0x17, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000180)="29c35e0420b76cbb1321d2980ff478a2b0658052f6925edb6d4450198bd7") prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, r1, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r0, r0, 0x0, 0x20000005) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = userfaultfd(0x801) socket$nl_xfrm(0x10, 0x3, 0x6) timer_create(0x0, 0x0, &(0x7f0000000300)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x12, r2, 0xec776000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="5d010000000000001c001a8018000a8014000700fc020000000000000000000000000000140003006970766c616e300000000000000000001c0012800b0001006970766c616e00000c0002800600010000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7fffffe, 0x1000009, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000080)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e2a, @empty}, 0x10) accept(r5, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000200)) recvfrom(r7, 0x0, 0x0, 0x4100, 0x0, 0x0) 12.686609647s ago: executing program 1 (id=3129): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)) r1 = syz_clone(0x1120000, &(0x7f00000000c0)="d2a61d78a97f8ba26bc11c6b612b0c2b48939f378a61461c0c70895a649f7077be3574f91a7eafb4ae846deb47cc20597516c1aa91c969e3498aa8b3feb0a74dc04f7300eadf4c04a976309c7c2aacd57f66dab3ba725ec205ff7048279ec05aee3266680eb65c26ce9aba75b64385ba89f581f70bb280490437b2abec0ab5946a", 0x81, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="618965f2c594df4f3b38f5d6275e8a56f95e0ad8c2ab06206a4ca05d08399c7c634a52f915bd06c658891edde3554c773102f94aa5f59cfec310659f20756172a55823a2fa62b1cb7da01803c5b0ec5e74b9fe18965ad78f625ae01d311e0203867b33cc58e5") ioprio_set$pid(0x3, r1, 0x2000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x50220}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0xfc}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2000001}, 0x0) 11.906263036s ago: executing program 6 (id=3131): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c81, 0x80000003) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f7410262e66f36d0f330f09660f3a0cb90000a6752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x31}], 0x1, 0x4498bda7e2139f37, 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x9, 0xfff, 0x7, 0x0, 0x12, 0x8, 0x40, 0x4, 0x2b, 0x2, 0x7, 0x0, 0x7fffffffffffffff}, {0x7ff, 0x1ff, 0x9, 0x18, 0x9, 0x81, 0x97, 0x40, 0x5, 0xbc, 0x4, 0x9, 0x3}, {0xd3, 0x80b0, 0x5, 0x2, 0x84, 0x9, 0xfc, 0xe, 0xe, 0x9, 0xe, 0x6, 0x4}]}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000300)={[0x0, 0x5, 0x40, 0x40, 0x0, 0x3, 0x2004cb, 0x4000000000000000, 0x2, 0x3, 0x0, 0x7, 0x0, 0x2, 0x9, 0x1], 0x80a0000, 0x450}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0xf, {"a2e3ad21ed0d09f91b3d090987f70e06d038e7ff7fc6e5539b0d440e8b089b3f380068090890e0878f0e1ac6e7049b334d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b5b070d074a0936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) openat$incfs(r5, &(0x7f0000000080)='.pending_reads\x00', 0x4000, 0x80) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp\x00') syz_fuse_handle_req(r10, &(0x7f0000000cc0)="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", 0x2000, &(0x7f0000003ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lseek(r10, 0xffffffffffffffff, 0x1) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf4a, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4043, 0x8a, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, 0x1}}}, &(0x7f0000000480)=0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x2000884c) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) r14 = openat$vnet(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r14, 0x4008af30, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c00000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000140016"], 0x4c}, 0x1, 0x0, 0x0, 0x40080}, 0x14) r15 = dup(0xffffffffffffffff) syz_ublk_setup_queues(r15, r11, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x617d, 0x8, 0x2000, 0x10000004, 0x0, r15}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1, 0x401f0, 0x0, r15}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) ioctl$FE_SET_FRONTEND_TUNE_MODE(r15, 0x6f51, &(0x7f00000001c0)) 11.80807626s ago: executing program 1 (id=3132): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0), 0x11e, 0x4c200) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = dup(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x7c, r3, 0x1, 0x0, 0x8000000, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_PEERS={0x30, 0x8, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0x4}]}]}]}, 0x7c}, 0x1, 0x0, 0x30000, 0x4084}, 0x20000010) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x30, 0x41, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x16, 0x0, 0x0, @uid}]}, @nested={0x4, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) write$UHID_INPUT(r1, &(0x7f00000003c0)={0xc, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000380), 0x4000, 0x0) ioctl$SNDCTL_SYNTH_ID(r4, 0xc08c5114, &(0x7f0000001400)={"4f90d728f4808accc919710e431a2b3da3b2848aa60b86afa53842cff834", 0x7f, 0x2, 0x0, 0xfffffffc, 0x9, 0xd, 0xb, 0x1, [0x10000, 0x7, 0x6, 0xfffffffd, 0xfffff801, 0x2, 0x0, 0xffffffff, 0x7fff, 0x2, 0x5, 0x8, 0x8000, 0x2, 0x0, 0x7fffffff, 0x20000, 0x8893, 0x80000000]}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001500), 0x2, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/timer_list\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r7, 0x2, r7) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r6, 0xe503, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, r5, 0xfffff000) syz_clone3(&(0x7f0000001580)={0x180801600, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {0xc}, 0x0, 0x0, 0x0, 0x0}, 0x58) r9 = syz_open_dev$vcsn(&(0x7f0000001640), 0x8, 0x804840) ioctl$BLKRAGET(r9, 0x1263, &(0x7f0000001680)) process_madvise(r8, 0x0, 0x0, 0xf, 0x0) 10.642369569s ago: executing program 6 (id=3134): r0 = landlock_create_ruleset(&(0x7f00000026c0)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x10, 0x0, 0x3, 0x0, 0x2}, 0x30, 0x0) landlock_restrict_self(r1, 0x3) (async) landlock_restrict_self(r1, 0x3) socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x2f, 0x9, 0xf, 0xf29, 0x21, @empty, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1, 0x8, 0x1, 0x4}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x2f, 0x9, 0xf, 0xf29, 0x21, @empty, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1, 0x8, 0x1, 0x4}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000002c0)={'gretap0\x00', &(0x7f0000000240)={'tunl0\x00', r3, 0x7800, 0x80, 0x3, 0x1000, {{0x15, 0x4, 0x1, 0x35, 0x54, 0x65, 0x0, 0x2, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x23}, @private=0xa010102, {[@rr={0x7, 0x1f, 0xb4, [@dev={0xac, 0x14, 0x14, 0x31}, @multicast2, @broadcast, @remote, @multicast2, @loopback, @multicast2]}, @lsrr={0x83, 0x1f, 0x16, [@broadcast, @broadcast, @empty, @private=0xa010102, @empty, @remote, @private=0xa010101]}, @noop]}}}}}) lchown(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', 0xffffffffffffffff, 0x0) r4 = landlock_create_ruleset(&(0x7f0000002740)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) socket$igmp6(0xa, 0x3, 0x2) openat$ptmx(0xffffffffffffff9c, 0x0, 0x482, 0x0) (async) openat$ptmx(0xffffffffffffff9c, 0x0, 0x482, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) (async) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r6 = socket$unix(0x1, 0x1, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r7 = landlock_create_ruleset(&(0x7f0000002800)={0x19a1, 0x2, 0x3}, 0x18, 0x0) landlock_restrict_self(r7, 0x0) (async) landlock_restrict_self(r7, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_int(r8, 0x1, 0x3, &(0x7f0000000000)=0x80000, 0x4) (async) setsockopt$sock_int(r8, 0x1, 0x3, &(0x7f0000000000)=0x80000, 0x4) bind$unix(r6, &(0x7f0000000100)=@file={0x1}, 0x6e) listen(r6, 0x0) connect$unix(r5, &(0x7f00000028c0)=@file={0x1}, 0x6e) 10.392618743s ago: executing program 5 (id=3135): add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000140), 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000001c0)={'netdevsim0\x00', &(0x7f0000002fc0)=@ethtool_wolinfo={0x3, 0x8, 0xfffffffd, "050000009582"}}) dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = fsopen(&(0x7f00000004c0)='hpfs\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000300)=[{0x30, 0x6, 0x4, 0xfffff000}]}, 0x10) syz_usb_connect$uac2(0x5, 0xcf, &(0x7f0000000680)=ANY=[@ANYBLOB="1201500900000008732b13004001010000010902bd000301f40006080b0002010020400904000000010120000924010300063f00130f240805050100010000000000010010240206ff0101056f070000000000000724080106030091949bf01e2f9ab20f5b00000006d47f0904010000010220000904010101010220000a2402025200050003030a24020211ff0a005905090501090800030509082501030f0c080009040200"], 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000340)={'dummy0\x00', &(0x7f0000000380)=@ethtool_perm_addr={0x4b, 0x23, "5c76276f6c86622447099377e66e2ebe40decbab5fbe9cc10fa5cb7566d7135e00a137"}}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r7 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xcd\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81', 0x0) fsetxattr$security_capability(r7, &(0x7f0000000080), 0x0, 0x0, 0x1) fsetxattr(r7, &(0x7f0000000280)=@known='user.incfs.size\x00', 0x0, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 8.822358322s ago: executing program 1 (id=3138): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000800)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000840)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000008c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000940), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000980), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000009c0)=0x6) poll(0x0, 0x0, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001180)={0x0, 0x8}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f00000000c0)={0x1, 0x1}) 8.165917758s ago: executing program 7 (id=3139): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, 0x0}, 0x6) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r0, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={r1, 0x20, &(0x7f0000000280)={&(0x7f0000000080)=""/238, 0xffffffffffffff80, 0x0, 0x0}}, 0x1e) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000a80)=@assoc_value={0x0}, &(0x7f0000000ac0)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000b00)={r4, 0x1}, 0x8) 7.557902761s ago: executing program 7 (id=3140): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000001c0), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000002c0)={0x2, &(0x7f0000000300)=[{0x20, 0x2a, 0x81, 0xfffff034}, {0x6, 0x0, 0x0, 0x63552b78}]}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfc8e012e79578e51bc5f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b803000000661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b32a0080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e14861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84d23c44d09305222fd3a0ec4be3e563112f0b39bd87afe234870072858dc06e7c337642d3e5a815232f5e16b089f37b3591a15c0a9be6eb18208404c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6ee82a73b787046b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b2c2f56411e48455b5a8b90dfae158b94f0800000000000000af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b4000000000000072c57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced91180604b6dd2499d16d7d9158ffffffff00000000d6069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeedd005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe00000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c1c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed210d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e170000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e80339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd52364600000000000000000000000000000000000000000000000022000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69f865ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000a5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f3390343c12aa51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9c42b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fca4d97a0ae75ccf11e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35e9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff17320adda5c97947257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a927de6f4c09f4b742e037381c85d2ec7bb2a8152f0d6a99a0370e0cbd65744eb2efd7b65f04aa7e72588757b9612bb4253a63bb303c0c68a07f115d104f2007237a4f771416741bfd63fdfe3ae6f8bea755d8b7202c2bbae137dc1c3cf40db74a4c1c219d8ddec8f91dae2cdea1353fe062830fa1d233296ec9d8317872257e154665485e7f31cdbfbf435517faf93015b57417d84b8bc8662e097d5ba55d02d48e150695ffae3a676555b10da11751865126d19336116a1e58ab727dda6b343cc97f9479136a66f552abf8fe3d134f6d69df1cffe6740f90735f66ca54fd878e0b3bda4db5e68aaccf44d24e09f8a769e3ae7bf246673f15e3d1adae4384bdb7cd30a33e30466b421feb96006c810fd3830a1c75af2580727ffc604d2b04f476acc21419fadb85c8086e4b7f1fd568042ad5396d3179c71b1dc43291e450ce9b8d7d80fcb44966d7ad4691a37870000000000000000000000000000000000000000000000000000000000000000000083a5765d06da91165d24bc316607e2d69344aa1c07ff7cd7bc3d17f122478b6e81077782b9c298edc2546045feff90e7aa7da88d2489fb000a4aa838f911c1a869fa55e979e033b7707df75b93cf5b8d25242741a88f2d54a7107375b25911aa11efa3a4f87fc14f180e353615b3cb9a5cf5ea843014a277c3694a5a83266f73ef039dd739187923715548d58ff43be997e357e0cbed29faef19c0082e26fb867bf0ff0099d71bb0d2f443e77a44e8c4b0455d95b19c73ef4c98f775aad9e1b317b3cc48f7ad1d82ea6ad6c3c7d943fb0157c2ed8a8e1538560f2be7d4cca6539277505826bd61bad2bcd4914344d4a27b29d2eb89bdc7a702e485d68c04e8f6b05336bf8d8e116605eaf375a592fe2382763c3cba76a0e4029dad5d37dd77abb1b7d2e2de23a4131e45ed81123ad6fa4f8b92c47e00000000000000000000000000000002928efeae918fc0a8169a3c965af4a789e5d8f5a51d00d9deb18086071556a0a4d1c562f721450807b770449f6affc91e7f9dbe0ec29c1bf00632ec723262c665af7c56a8538bb99a5b9733a34ef2bb36a2cb72c7bc7052f89809a375825cc4cb42837e07df102dc16a4e422ab0f8865a26cdd4597aca429d7f1ae655de15ad84ff77589ea56ca53190dc65c9ea21c375c2659c854ae12d16ccbd84753230dc8ed63ef4e245ef42884485811f26"], 0x0}, 0x94) fsmount(0xffffffffffffffff, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pread64(0xffffffffffffffff, 0x0, 0x0, 0x800000000004) socket$inet6(0xa, 0x3, 0x7) 7.332475609s ago: executing program 6 (id=3141): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000100)=@assoc_value, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000001c0)='syz_tun\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000200)={0x2, 0x3, @remote}, 0x10) syz_extract_tcp_res(&(0x7f0000000280), 0x0, 0x4) 6.262168686s ago: executing program 7 (id=3143): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x7ff}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000030c0)={0xc, 0xd, &(0x7f0000000b80)=ANY=[@ANYBLOB="1800000004000000000000000080000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000015000000850000007d00000095"], &(0x7f0000000c00)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x5, 0x3, &(0x7f0000001600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7d7}}, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0xa, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x10, 0xea}, 0x94) 5.942829793s ago: executing program 6 (id=3144): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0d, &(0x7f0000000040)) 5.710393739s ago: executing program 7 (id=3145): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x3, r0, 0x20}, 0x38) 5.167472035s ago: executing program 7 (id=3147): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) syz_emit_ethernet(0x4a, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) r1 = timerfd_create(0x0, 0x0) read(r1, &(0x7f0000002180)=""/257, 0x101) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timerfd_settime(r1, 0x3, &(0x7f0000000080)={{}, {r2, r3+60000000}}, 0x0) 4.466522858s ago: executing program 7 (id=3149): socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001440)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000014c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000001500), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001540)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$sndctrl(0x0, 0x1, 0xc0202) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0xc4c85513, 0x0) sendmsg$nl_generic(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001600)={0x14, 0x15, 0x301, 0x70bd2a, 0x4, {0x1}}, 0x14}}, 0x0) openat$binderfs_feature(0xffffffffffffff9c, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000380)) 3.69441438s ago: executing program 2 (id=3150): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4}, 0x80, &(0x7f0000001700)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e105400000894f00050004ee0b", 0x1e}, {&(0x7f0000000700)="a858d1c551ac168a128b3dc498dd54553762d8d5356e6998946942228069adc531fa254a8cd1d795ce1df1ffb398c6e269695b9271855f239f618ef1e37c45a854e9b768679c35bdade010452be9f8468fd2fd09f9d2c6ffd87758d98ff053e1f5290430230971d42dde2777441b11f8da43c3cfe3a2eccd711a48c883a6bfeebd405dc5c8e62e0ba084aa83f29737", 0x8f}], 0x2}, 0x4) 3.26825308s ago: executing program 2 (id=3151): syz_usb_connect(0x3, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x4008c001, 0x0) 3.15849465s ago: executing program 5 (id=3152): prlimit64(0x0, 0xe, &(0x7f0000000c80)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000cc0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000d00)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000d80)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000e00), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000e40), 0x4000087, 0x2, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000e80)=""/173) 2.462893701s ago: executing program 6 (id=3153): socket$inet_udp(0x2, 0x2, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f00000005c0)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) syz_open_dev$I2C(&(0x7f0000000100), 0x2000000, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2002, 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='0', 0x1) msgrcv(0x0, 0x0, 0x2000000, 0x0, 0x86b1b18158a7cb82) 1.564448319s ago: executing program 1 (id=3154): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000002c0)={0x0, 0x8a, 0x4, 0x30, 0xd, "00080000000000000000000cadf100004000"}) r1 = syz_open_pts(r0, 0x141401) fcntl$setstatus(r1, 0x4, 0x2000) write(r1, &(0x7f0000000340)="d5", 0xfffffedf) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000001a80)=0x3) 1.338460089s ago: executing program 2 (id=3155): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.266646498s ago: executing program 6 (id=3156): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004898b610c2154500201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$printer(r1, &(0x7f0000000080)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100a}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r2, &(0x7f0000000100)="0bcde56ca9a62cbf", 0x8) write$char_usb(r2, 0x0, 0x0) syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x0, 0x0, 0x0) syz_usb_disconnect(r1) 1.114490555s ago: executing program 1 (id=3157): rt_sigprocmask(0x2, &(0x7f0000005a00)={[0xffffffffffffffff]}, 0x0, 0x8) syz_clone3(&(0x7f0000005a40)={0x100000000, 0x0, 0x0, 0x0, {0xe}, 0x0, 0x0, 0x0, 0x0}, 0x58) setitimer(0x0, &(0x7f0000005ac0)={{0x0, 0xea60}, {0x77359400}}, 0x0) rt_sigtimedwait(&(0x7f0000005b00)={[0xfffffffffffffff8]}, 0x0, 0x0, 0x8) 741.838544ms ago: executing program 2 (id=3158): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) io_uring_setup(0x1dd, &(0x7f0000000680)={0x0, 0x1fffff, 0x0, 0x2, 0x18b}) 417.386311ms ago: executing program 2 (id=3159): r0 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f00000013c0)={0x0, 0x0, 0x0}) 35.416638ms ago: executing program 2 (id=3160): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0xa5, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffffff3f54aaaaaaaaaa08004f04009700680000ff069078e000000100000000940a9b40f51983638a38890f746401010200000000ac1414aa", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="e10a0008907800801e10230c0400000000"], 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x100}, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f00000004c0)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="7400000040000901feffffff00000000017c0000040042800c00018006000600800a0000500002804c000380", @ANYBLOB="72b0538bfe12"], 0x74}, 0x1, 0x0, 0x0, 0x48805}, 0x4800) r5 = syz_open_dev$ublk_chdev(&(0x7f0000002000), 0x0, 0x2) r6 = syz_open_dev$dri(&(0x7f0000000300), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(r6, 0xc01864b1, &(0x7f0000000640)={0x0, 0x2, 0x0, 0x0, 0x0}) syz_ublk_setup_queues(r5, 0x0, &(0x7f0000000540)={0x0, 0x3e0e, 0x1, 0x1, 0x28e, 0x0, r3}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x701, 0x1000, 0x2, 0x23f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6, 0x2, 0x0, 0x32d, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x42d3, 0x8000, 0x1, 0x2db}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x118d, 0x20, 0x3fc, 0x1fe}}], 0x4, &(0x7f0000001f40)={0x2e, 0x0, 0x0, r5, 0xc0107526, 0x0, 0x20000700, 0x0, 0x1, {0x10}, 0x0, 0x0, '\x00', {0x3, 0xee3, 0x100104, 0x0}}, &(0x7f0000000280)) 0s ago: executing program 1 (id=3161): r0 = socket$inet_smc(0x2b, 0x1, 0x0) select(0x40, &(0x7f0000000440)={0x8, 0x8000, 0x2, 0x7, 0x3, 0x9, 0xb8e, 0x101}, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x40000004) r1 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) kernel console output (not intermixed with test programs): rocess `syz.6.2766'. [ 938.846743][T16013] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2766'. [ 939.207825][ T2248] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 939.357946][ T2248] usb 3-1: Using ep0 maxpacket: 8 [ 939.359718][ T2248] usb 3-1: New USB device found: idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 939.387353][ T2248] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.387384][ T2248] usb 3-1: Product: syz [ 939.387400][ T2248] usb 3-1: Manufacturer: syz [ 939.387415][ T2248] usb 3-1: SerialNumber: syz [ 939.417539][ T2248] usb 3-1: config 0 descriptor?? [ 939.437583][ T2248] cdc_ether 3-1:0.0: bad CDC descriptors [ 939.443819][ T2248] usb 3-1: unsupported MDLM descriptors [ 939.661727][ T5721] usb 3-1: USB disconnect, device number 21 [ 941.084350][T16032] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2771'. [ 941.136136][T16032] tipc: Enabling of bearer rejected, failed to enable media [ 941.628557][T16041] syz.4.2774: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 941.629555][T16041] CPU: 0 UID: 0 PID: 16041 Comm: syz.4.2774 Tainted: G L syzkaller #0 PREEMPT(full) [ 941.629574][T16041] Tainted: [L]=SOFTLOCKUP [ 941.629578][T16041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 941.629586][T16041] Call Trace: [ 941.629591][T16041] [ 941.629597][T16041] dump_stack_lvl+0xe8/0x150 [ 941.629621][T16041] warn_alloc+0x24d/0x270 [ 941.629636][T16041] ? stack_depot_save_flags+0x33/0x7f0 [ 941.629734][T16041] ? __pfx_warn_alloc+0x10/0x10 [ 941.629745][T16041] ? kasan_save_track+0x4f/0x80 [ 941.629758][T16041] ? __kasan_kmalloc+0x93/0xb0 [ 941.629772][T16041] ? xsk_init_queue+0x8a/0xe0 [ 941.629831][T16041] ? xsk_setsockopt+0x52a/0x960 [ 941.629843][T16041] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 941.629862][T16041] __vmalloc_node_range_noprof+0x12c/0x16f0 [ 941.629889][T16041] ? rcu_is_watching+0x16/0xb0 [ 941.629908][T16041] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 941.629919][T16041] ? __kmalloc_cache_noprof+0x31c/0x600 [ 941.629931][T16041] ? __kmalloc_cache_noprof+0x148/0x600 [ 941.629943][T16041] ? xskq_create+0x56/0x220 [ 941.629958][T16041] xskq_create+0x148/0x220 [ 941.629971][T16041] ? xsk_init_queue+0x8a/0xe0 [ 941.629984][T16041] xsk_init_queue+0x8a/0xe0 [ 941.629998][T16041] xsk_setsockopt+0x52a/0x960 [ 941.630016][T16041] ? __pfx_xsk_setsockopt+0x10/0x10 [ 941.630028][T16041] ? __pfx_aa_sk_perm+0x10/0x10 [ 941.630077][T16041] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 941.630092][T16041] ? __pfx_xsk_setsockopt+0x10/0x10 [ 941.630106][T16041] do_sock_setsockopt+0x17c/0x1b0 [ 941.630123][T16041] __x64_sys_setsockopt+0x13d/0x1b0 [ 941.630139][T16041] do_syscall_64+0x166/0x520 [ 941.630153][T16041] ? trace_irq_disable+0x3b/0x140 [ 941.630167][T16041] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 941.630178][T16041] ? clear_bhb_loop+0x70/0xc0 [ 941.630191][T16041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 941.630202][T16041] RIP: 0033:0x7f221139f559 [ 941.630215][T16041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 941.630224][T16041] RSP: 002b:00007f2212323028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 941.630236][T16041] RAX: ffffffffffffffda RBX: 00007f2211625fa0 RCX: 00007f221139f559 [ 941.630244][T16041] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 941.630251][T16041] RBP: 00007f2211436b20 R08: 0000000000000029 R09: 0000000000000000 [ 941.630258][T16041] R10: 0000200000000700 R11: 0000000000000246 R12: 0000000000000000 [ 941.630266][T16041] R13: 00007f2211626038 R14: 00007f2211625fa0 R15: 00007f221174fa48 [ 941.630284][T16041] [ 941.768092][T16041] Mem-Info: [ 941.768108][T16041] active_anon:24688 inactive_anon:9 isolated_anon:0 [ 941.768108][T16041] active_file:6535 inactive_file:56242 isolated_file:0 [ 941.768108][T16041] unevictable:0 dirty:4 writeback:0 [ 941.768108][T16041] slab_reclaimable:8191 slab_unreclaimable:106182 [ 941.768108][T16041] mapped:35565 shmem:19078 pagetables:1800 [ 941.768108][T16041] sec_pagetables:0 bounce:0 [ 941.768108][T16041] kernel_misc_reclaimable:0 [ 941.768108][T16041] free:1211469 free_pcp:16933 free_cma:0 [ 941.768158][T16041] Node 0 active_anon:98752kB inactive_anon:36kB active_file:26140kB inactive_file:224736kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:142232kB dirty:0kB writeback:0kB shmem:76312kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14060kB pagetables:7040kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 941.768247][T16041] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:232kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:28kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 941.768296][T16041] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 941.768393][T16041] lowmem_reserve[]: 0 2464 2465 2465 2465 [ 941.768431][T16041] Node 0 DMA32 free:902964kB boost:0kB min:33936kB low:42420kB high:50904kB reserved_highatomic:0kB free_highatomic:0kB active_anon:98752kB inactive_anon:36kB active_file:26140kB inactive_file:224736kB unevictable:0kB writepending:188kB zspages:532kB present:3129332kB managed:2523320kB mlocked:0kB bounce:0kB free_pcp:51404kB local_pcp:36012kB free_cma:0kB [ 941.768517][T16041] lowmem_reserve[]: 0 0 1 1 1 [ 941.768554][T16041] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1664kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 941.768607][T16041] lowmem_reserve[]: 0 0 0 0 0 [ 941.768661][T16041] Node 1 Normal free:3927552kB boost:0kB min:55940kB low:69924kB high:83908kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:232kB unevictable:0kB writepending:28kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:16324kB local_pcp:5380kB free_cma:0kB [ 941.768713][T16041] lowmem_reserve[]: 0 0 0 0 0 [ 941.768769][T16041] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 941.768901][T16041] Node 0 DMA32: 383*4kB (UE) 70*8kB (UME) 2158*16kB (UME) 3135*32kB (UME) 1592*64kB (UME) 704*128kB (UME) 304*256kB (UME) 85*512kB (UME) 24*1024kB (UME) 9*2048kB (UME) 100*4096kB (UM) = 902892kB [ 941.772142][T16041] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 941.772267][T16041] Node 1 Normal: 8*4kB (M) 14*8kB (UM) 13*16kB (UM) 11*32kB (M) 15*64kB (UM) 11*128kB (UM) 10*256kB (UM) 2*512kB (M) 1*1024kB (U) 2*2048kB (UM) 956*4096kB (UM) = 3927552kB [ 941.772785][T16041] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 941.772803][T16041] Node 0 hugepages_total=8 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 941.772818][T16041] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 941.773253][T16041] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 941.773272][T16041] 81825 total pagecache pages [ 941.773281][T16041] 9 pages in swap cache [ 941.773289][T16041] Free swap = 124804kB [ 941.773298][T16041] Total swap = 124996kB [ 941.773307][T16041] 2097051 pages RAM [ 941.773314][T16041] 0 pages HighMem/MovableOnly [ 941.773321][T16041] 434189 pages reserved [ 941.773328][T16041] 0 pages cma reserved [ 942.621423][T16047] syzkaller1: entered allmulticast mode [ 942.759505][T16056] netlink: 'syz.2.2780': attribute type 1 has an invalid length. [ 942.987360][T16056] 8021q: adding VLAN 0 to HW filter on device bond8 [ 943.063573][ T30] audit: type=1800 audit(1793172109.629:3164): pid=16066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2781" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=-22 [ 943.147691][T16062] bond8: (slave gretap2): making interface the new active one [ 943.167408][T16062] bond8: (slave gretap2): Enslaving as an active interface with an up link [ 943.512177][T16070] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2782'. [ 943.531101][T16070] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2782'. [ 943.552304][T16072] netlink: 88 bytes leftover after parsing attributes in process `syz.6.2783'. [ 943.642609][T16072] tipc: Enabling of bearer rejected, already enabled [ 944.077097][T16083] kvm: requested 5028 ns i8254 timer period limited to 200000 ns [ 944.157665][T16083] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 944.166592][T16083] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 944.166619][T16083] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 944.166640][T16083] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 944.166668][T16083] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 944.166688][T16083] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 944.168252][T16083] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 944.177694][T16083] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 944.251375][T16083] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 944.864166][T16098] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2790'. [ 945.368212][ T2248] usb 6-1: new full-speed USB device number 109 using dummy_hcd [ 945.523018][ T2248] usb 6-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 945.541916][ T2248] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.541945][ T2248] usb 6-1: Product: syz [ 945.541959][ T2248] usb 6-1: Manufacturer: syz [ 945.541974][ T2248] usb 6-1: SerialNumber: syz [ 945.575602][ T2248] usb 6-1: config 0 descriptor?? [ 945.833353][ T2248] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 946.000300][T16114] netlink: 'syz.1.2794': attribute type 1 has an invalid length. [ 946.129031][T16114] 8021q: adding VLAN 0 to HW filter on device bond3 [ 946.228300][T16116] bond3: (slave gretap2): making interface the new active one [ 946.229152][T16116] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 946.573143][ T2248] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 946.590797][ T2248] usb 6-1: USB disconnect, device number 109 [ 946.973541][ T30] audit: type=1326 audit(1793172113.549:3165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16121 comm="syz.4.2797" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f221139f559 code=0x0 [ 947.186971][T16129] netlink: 88 bytes leftover after parsing attributes in process `syz.6.2798'. [ 947.232020][T16129] tipc: Enabling of bearer rejected, already enabled [ 947.477891][ T5721] usb 6-1: new full-speed USB device number 110 using dummy_hcd [ 947.696963][ T5721] usb 6-1: unable to get BOS descriptor or descriptor too short [ 947.700386][ T5721] usb 6-1: not running at top speed; connect to a high speed hub [ 947.700417][ T5721] usb 6-1: New USB device found: idVendor=0e8f, idProduct=0012, bcdDevice=0.40 [ 947.704036][ T5721] usb 6-1: config 1 interface 0 altsetting 188 endpoint 0x2 has invalid maxpacket 959, setting to 64 [ 947.704070][ T5721] usb 6-1: config 1 interface 0 has no altsetting 0 [ 947.756275][ T5721] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.756292][ T5721] usb 6-1: Product: ࠧ [ 947.756300][ T5721] usb 6-1: Manufacturer: 樣쌖䔸Ἐ॓唠잧䀝⁻欕洂椦꿑岟帓ᆄ惩梡ꍴꃔ憣ⓠ∿Ꙭᴲ㈵㹝梈엘矬ႛꈴ鈍ఢˡ檔봿霦㨇ꋫ璠껍儒謿婿辡氝䉯酨툲阞쵗펮䘛ಽ麿ड़破齙ธⷤ녤╇鎏貒ꂞ넩䕐໼듸襙Ѷ쇩㑘繁৤ꀅ䙦쥌啊ᾱ団獍씝 [ 947.756316][ T5721] usb 6-1: SerialNumber: ࡃ [ 947.757920][ T8725] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 947.837414][T16130] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 947.968588][ T8725] usb 3-1: Using ep0 maxpacket: 32 [ 947.970474][ T8725] usb 3-1: New USB device found: idVendor=2040, idProduct=c603, bcdDevice=1.8e [ 947.974741][ T8725] usb 3-1: config 0 interface 0 has no altsetting 0 [ 947.974782][ T8725] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.028912][ T8725] usb 3-1: config 0 descriptor?? [ 948.075201][ T8725] usb 3-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state [ 948.104257][ T8725] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 948.104622][ T8725] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+) [ 948.104677][ T8725] usb 3-1: media controller created [ 948.339269][ T8725] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 948.419617][ T5721] usbhid 6-1:1.0: can't add hid device: -71 [ 948.419686][ T5721] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 948.449770][ T5721] usb 6-1: USB disconnect, device number 110 [ 948.453213][ T8725] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 948.453228][ T8725] error writing reg: 0xff, val: 0x00 [ 948.508168][ T5706] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 948.658574][ T5706] usb 5-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 948.659762][ T5706] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 948.659792][ T5706] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 948.659814][ T5706] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 948.659854][ T5706] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.730014][ T5706] usb 5-1: config 0 descriptor?? [ 948.730655][ T8725] dvb_usb_mxl111sf 3-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 949.277280][ T5706] plantronics 0003:047F:FFFF.0028: nested delimiters [ 949.277295][ T5706] plantronics 0003:047F:FFFF.0028: item 0 2 2 10 parsing failed [ 949.277833][ T5706] plantronics 0003:047F:FFFF.0028: parse failed [ 949.277933][ T5706] plantronics 0003:047F:FFFF.0028: probe with driver plantronics failed with error -22 [ 949.427494][ T5706] usb 5-1: USB disconnect, device number 13 [ 950.515248][T16159] netlink: 'syz.4.2805': attribute type 1 has an invalid length. [ 950.651638][ T5721] usb 3-1: USB disconnect, device number 22 [ 950.957072][T16159] 8021q: adding VLAN 0 to HW filter on device bond10 [ 951.084745][T16160] bond10: (slave gretap5): making interface the new active one [ 951.096288][T16160] bond10: (slave gretap5): Enslaving as an active interface with an up link [ 951.720753][T16172] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2810'. [ 951.733166][T16174] netlink: 'syz.2.2811': attribute type 29 has an invalid length. [ 951.803500][T16172] tipc: Enabling of bearer rejected, failed to enable media [ 951.817876][ T5722] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 951.968699][ T5722] usb 2-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40 [ 951.969864][ T5722] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 951.969908][ T5722] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.014435][ T5722] usb 2-1: config 0 descriptor?? [ 952.244076][T16168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 952.244346][T16168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 952.272612][ T5722] usbhid 2-1:0.0: can't add hid device: -71 [ 952.272677][ T5722] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 952.294562][ T5722] usb 2-1: USB disconnect, device number 15 [ 952.448414][ T5721] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 952.465790][ T30] audit: type=1326 audit(1793172119.039:3166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16175 comm="syz.4.2812" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f221139f559 code=0x0 [ 952.618416][ T5721] usb 6-1: New USB device found: idVendor=041e, idProduct=3010, bcdDevice=1.00 [ 952.625368][ T5721] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 952.625385][ T5721] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 952.625416][ T5721] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.696475][ T5721] usb 6-1: 0:1 : does not exist [ 952.737917][ T5722] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 952.888572][ T5722] usb 2-1: Using ep0 maxpacket: 32 [ 952.895366][ T5722] usb 2-1: New USB device found: idVendor=0f11, idProduct=1021, bcdDevice=0.40 [ 952.910351][ T5721] usb 6-1: USB disconnect, device number 111 [ 952.918479][ T5722] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 952.918534][ T5722] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.990065][ T5722] usb 2-1: config 0 descriptor?? [ 952.994184][ T5722] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 953.012937][ T5722] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 953.707949][ T8725] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 953.869945][ T8725] usb 3-1: New USB device found: idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 953.891948][ T8725] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 953.891977][ T8725] usb 3-1: Product: syz [ 953.891991][ T8725] usb 3-1: SerialNumber: syz [ 953.923535][ T8725] usb 3-1: config 0 descriptor?? [ 954.007961][ T5721] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 954.180329][ T5721] usb 6-1: Using ep0 maxpacket: 32 [ 954.181265][ T5721] usb 6-1: New USB device found: idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 954.200199][ T5721] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 954.200228][ T5721] usb 6-1: config 0 has no interface number 0 [ 954.200293][ T5721] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 954.237078][T16191] random: crng reseeded on system resumption [ 954.254950][ T5721] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.254976][ T5721] usb 6-1: Product: syz [ 954.254984][ T5721] usb 6-1: Manufacturer: syz [ 954.254993][ T5721] usb 6-1: SerialNumber: syz [ 954.324394][ T5721] usb 6-1: config 0 descriptor?? [ 954.325455][T16197] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 954.540654][T16197] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 954.629121][ T8725] usb 3-1: USB disconnect, device number 23 [ 954.787595][ T5721] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 954.787617][ T5721] asix 6-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 954.811941][ T5721] asix 6-1:0.188: probe with driver asix failed with error -61 [ 954.993858][ T5721] usb 2-1: USB disconnect, device number 16 [ 955.010878][ T5721] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 956.019866][T16224] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2823'. [ 956.078950][T16224] tipc: Enabling of bearer rejected, failed to enable media [ 956.662874][T12997] Bluetooth: hci3: unexpected event for opcode 0x0413 [ 956.739870][T16233] veth2: entered allmulticast mode [ 956.890590][ T8725] usb 6-1: USB disconnect, device number 112 [ 957.097023][T16228] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2825'. [ 957.879085][ T5721] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 958.038104][ T5721] usb 3-1: Using ep0 maxpacket: 8 [ 960.993913][ T5721] usb 3-1: unable to get BOS descriptor or descriptor too short [ 960.993946][ T5721] usb 3-1: New USB device found: idVendor=2b73, idProduct=0013, bcdDevice=1.40 [ 960.994706][ T5721] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 960.994728][ T5721] usb 3-1: can't read configurations, error -71 [ 961.362008][T16268] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2836'. [ 961.855742][T16268] tipc: Enabling of bearer rejected, failed to enable media [ 963.478192][ T5721] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 963.628970][ T5721] usb 2-1: not running at top speed; connect to a high speed hub [ 963.628993][ T5721] usb 2-1: New USB device found: idVendor=046d, idProduct=0825, bcdDevice=1.00 [ 963.629846][ T5721] usb 2-1: config 1 has an invalid descriptor of length 101, skipping remainder of the config [ 963.629908][ T5721] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.685441][ T5721] uvcvideo 2-1:1.0: Found UVC 1.00 device (046d:0825) [ 963.947287][T16308] tipc: Enabling of bearer rejected, failed to enable media [ 964.037502][T16311] batadv_slave_0: entered promiscuous mode [ 964.044689][ T5721] uvcvideo 2-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 964.046861][ T5721] uvcvideo 2-1:1.1: No frame descriptor found for the default format. [ 964.046875][ T5721] uvcvideo 2-1:1.1: Failed to initialize the device (-22). [ 964.090705][ T5721] uvcvideo 2-1:1.0: probe with driver uvcvideo failed with error -22 [ 964.251706][T16315] FAULT_INJECTION: forcing a failure. [ 964.251706][T16315] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 964.251746][T16315] CPU: 0 UID: 0 PID: 16315 Comm: syz.4.2851 Tainted: G L syzkaller #0 PREEMPT(full) [ 964.251775][T16315] Tainted: [L]=SOFTLOCKUP [ 964.251783][T16315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 964.251796][T16315] Call Trace: [ 964.251804][T16315] [ 964.251814][T16315] dump_stack_lvl+0xe8/0x150 [ 964.251850][T16315] should_fail_ex+0x410/0x560 [ 964.251883][T16315] _copy_from_user+0x2d/0xb0 [ 964.251913][T16315] ___sys_recvmsg+0x173/0x5a0 [ 964.251945][T16315] ? __pfx____sys_recvmsg+0x10/0x10 [ 964.252008][T16315] do_recvmmsg+0x31a/0x800 [ 964.252041][T16315] ? __pfx_do_recvmmsg+0x10/0x10 [ 964.252080][T16315] ? get_timespec64+0x119/0x1b0 [ 964.252108][T16315] ? __pfx_get_timespec64+0x10/0x10 [ 964.252137][T16315] ? fdget+0x1ac/0x250 [ 964.252166][T16315] __x64_sys_recvmmsg+0x1b7/0x250 [ 964.252195][T16315] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 964.252232][T16315] do_syscall_64+0x166/0x520 [ 964.252258][T16315] ? trace_irq_disable+0x3b/0x140 [ 964.252285][T16315] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 964.252305][T16315] ? clear_bhb_loop+0x70/0xc0 [ 964.252330][T16315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 964.252350][T16315] RIP: 0033:0x7f221139f559 [ 964.252370][T16315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 964.252386][T16315] RSP: 002b:00007f2212323028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 964.252408][T16315] RAX: ffffffffffffffda RBX: 00007f2211625fa0 RCX: 00007f221139f559 [ 964.252423][T16315] RDX: 00000000000006f5 RSI: 0000200000000000 RDI: 0000000000000003 [ 964.252437][T16315] RBP: 00007f2212323090 R08: 0000200000000040 R09: 0000000000000000 [ 964.252452][T16315] R10: 0000002000000022 R11: 0000000000000246 R12: 0000000000000002 [ 964.252465][T16315] R13: 00007f2211626038 R14: 00007f2211625fa0 R15: 00007f221174fa48 [ 964.252497][T16315] [ 964.380328][ T8725] usb 2-1: USB disconnect, device number 17 [ 964.538580][T16318] FAULT_INJECTION: forcing a failure. [ 964.538580][T16318] name failslab, interval 1, probability 0, space 0, times 0 [ 964.538604][T16318] CPU: 0 UID: 0 PID: 16318 Comm: syz.2.2852 Tainted: G L syzkaller #0 PREEMPT(full) [ 964.538620][T16318] Tainted: [L]=SOFTLOCKUP [ 964.538624][T16318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 964.538632][T16318] Call Trace: [ 964.538636][T16318] [ 964.538641][T16318] dump_stack_lvl+0xe8/0x150 [ 964.538664][T16318] should_fail_ex+0x410/0x560 [ 964.538683][T16318] should_failslab+0xa8/0x100 [ 964.538699][T16318] ? __pmd_alloc+0xc1/0x5c0 [ 964.538714][T16318] kmem_cache_alloc_noprof+0x9c/0x600 [ 964.538725][T16318] ? alloc_pages_mpol+0x256/0x390 [ 964.538741][T16318] ? __pmd_alloc+0xc1/0x5c0 [ 964.538759][T16318] __pmd_alloc+0xc1/0x5c0 [ 964.538776][T16318] handle_mm_fault+0xe9d/0x3750 [ 964.538796][T16318] ? handle_mm_fault+0xf1/0x3750 [ 964.538817][T16318] ? __pfx_handle_mm_fault+0x10/0x10 [ 964.538839][T16318] ? __lock_acquire+0x747/0x2de0 [ 964.538854][T16318] ? lock_mm_and_find_vma+0xa7/0x340 [ 964.538872][T16318] do_user_addr_fault+0x7f6/0x1480 [ 964.538931][T16318] exc_page_fault+0x6a/0xc0 [ 964.538947][T16318] asm_exc_page_fault+0x26/0x30 [ 964.538958][T16318] RIP: 0010:rep_movs_alternative+0x30/0xa0 [ 964.538969][T16318] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 8d 7e 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 964.538979][T16318] RSP: 0018:ffffc90006587d58 EFLAGS: 00050212 [ 964.539001][T16318] RAX: 00007ffffffff001 RBX: 0000000000000010 RCX: 0000000000000010 [ 964.539009][T16318] RDX: 0000000000000001 RSI: 0000200000000640 RDI: ffffc90006587dc0 [ 964.539017][T16318] RBP: ffffc90006587eb8 R08: ffffc90006587dcf R09: 1ffff92000cb0fb9 [ 964.539024][T16318] R10: dffffc0000000000 R11: fffff52000cb0fba R12: 0000200000000640 [ 964.539032][T16318] R13: ffffc90006587dc0 R14: ffffc90006587dc0 R15: 0000200000000640 [ 964.539049][T16318] _copy_from_user+0x7a/0xb0 [ 964.539067][T16318] __sys_bind+0x1c6/0x410 [ 964.539079][T16318] ? __pfx___sys_bind+0x10/0x10 [ 964.539096][T16318] ? __pfx_ksys_write+0x10/0x10 [ 964.539113][T16318] __x64_sys_bind+0x7a/0x90 [ 964.539123][T16318] do_syscall_64+0x166/0x520 [ 964.539137][T16318] ? trace_irq_disable+0x3b/0x140 [ 964.539151][T16318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 964.539162][T16318] ? clear_bhb_loop+0x70/0xc0 [ 964.539176][T16318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 964.539187][T16318] RIP: 0033:0x7f450d59f559 [ 964.539197][T16318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 964.539206][T16318] RSP: 002b:00007f450e3ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 964.539217][T16318] RAX: ffffffffffffffda RBX: 00007f450d825fa0 RCX: 00007f450d59f559 [ 964.539224][T16318] RDX: 0000000000000010 RSI: 0000200000000640 RDI: 0000000000000003 [ 964.539231][T16318] RBP: 00007f450e3ae090 R08: 0000000000000000 R09: 0000000000000000 [ 964.539237][T16318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 964.539244][T16318] R13: 00007f450d826038 R14: 00007f450d825fa0 R15: 00007f450d94fa48 [ 964.539260][T16318] [ 965.307902][ T5706] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 965.459692][ T5706] usb 3-1: Using ep0 maxpacket: 32 [ 965.460950][ T5706] usb 3-1: New USB device found: idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 965.464325][ T5706] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 965.464359][ T5706] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 965.464374][ T5706] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 965.464395][ T5706] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 965.533109][ T5706] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.533128][ T5706] usb 3-1: Product: syz [ 965.533136][ T5706] usb 3-1: Manufacturer: syz [ 965.533144][ T5706] usb 3-1: SerialNumber: syz [ 965.577409][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 965.681023][T16310] batadv_slave_0: left promiscuous mode [ 965.713351][ T5706] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input65 [ 965.791166][T16339] syzkaller0: entered promiscuous mode [ 965.791192][T16339] syzkaller0: entered allmulticast mode [ 965.839896][ T5706] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 965.839920][ T5706] (id 0x00) [ 965.957852][ T5706] rc_core: IR keymap rc-imon-pad not found [ 965.957872][ T5706] Registered IR keymap rc-empty [ 965.957953][ T5706] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 965.957971][ T5706] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 966.055581][ T5706] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 966.056863][ T5706] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input66 [ 966.137402][T16342] tipc: Enabling of bearer rejected, failed to enable media [ 966.176444][ T5706] imon 3-1:155.0: iMON device (15c2:ffdc) on usb<3:26> initialized [ 966.290945][T16344] FAULT_INJECTION: forcing a failure. [ 966.290945][T16344] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 966.290969][T16344] CPU: 1 UID: 0 PID: 16344 Comm: syz.4.2863 Tainted: G L syzkaller #0 PREEMPT(full) [ 966.290995][T16344] Tainted: [L]=SOFTLOCKUP [ 966.290999][T16344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 966.291007][T16344] Call Trace: [ 966.291012][T16344] [ 966.291017][T16344] dump_stack_lvl+0xe8/0x150 [ 966.291039][T16344] should_fail_ex+0x410/0x560 [ 966.291059][T16344] _copy_from_user+0x2d/0xb0 [ 966.291076][T16344] ___sys_recvmsg+0x173/0x5a0 [ 966.291093][T16344] ? __pfx____sys_recvmsg+0x10/0x10 [ 966.291126][T16344] do_recvmmsg+0x31a/0x800 [ 966.291143][T16344] ? __pfx_do_recvmmsg+0x10/0x10 [ 966.291163][T16344] ? get_timespec64+0x119/0x1b0 [ 966.291179][T16344] ? __pfx_get_timespec64+0x10/0x10 [ 966.291194][T16344] ? fdget+0x1ac/0x250 [ 966.291210][T16344] __x64_sys_recvmmsg+0x1b7/0x250 [ 966.291225][T16344] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 966.291245][T16344] do_syscall_64+0x166/0x520 [ 966.291259][T16344] ? trace_irq_disable+0x3b/0x140 [ 966.291274][T16344] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 966.291285][T16344] ? clear_bhb_loop+0x70/0xc0 [ 966.291298][T16344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 966.291309][T16344] RIP: 0033:0x7f221139f559 [ 966.291323][T16344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 966.291332][T16344] RSP: 002b:00007f2212323028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 966.291345][T16344] RAX: ffffffffffffffda RBX: 00007f2211625fa0 RCX: 00007f221139f559 [ 966.291353][T16344] RDX: 00000000000006f5 RSI: 0000200000000000 RDI: 0000000000000003 [ 966.291360][T16344] RBP: 00007f2212323090 R08: 0000200000000040 R09: 0000000000000000 [ 966.291367][T16344] R10: 0000002000000022 R11: 0000000000000246 R12: 0000000000000002 [ 966.291374][T16344] R13: 00007f2211626038 R14: 00007f2211625fa0 R15: 00007f221174fa48 [ 966.291396][T16344] [ 966.294261][ T5706] usb 3-1: USB disconnect, device number 26 [ 967.285348][ T5721] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 967.447933][ T5721] usb 2-1: Using ep0 maxpacket: 32 [ 967.468590][ T5721] usb 2-1: New USB device found: idVendor=044e, idProduct=120b, bcdDevice=0.00 [ 967.471790][ T5721] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 967.471826][ T5721] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 967.471853][ T5721] usb 2-1: config 0 interface 0 has no altsetting 0 [ 967.471886][ T5721] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.533657][ T5721] usb 2-1: config 0 descriptor?? [ 967.650392][T16349] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:21 [ 967.659842][T10970] IPVS: starting estimator thread 0... [ 967.757883][T16369] IPVS: using max 51 ests per chain, 122400 per kthread [ 967.996337][T16367] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2870'. [ 968.245874][T16379] tipc: Enabling of bearer rejected, failed to enable media [ 968.678684][ T5721] hid-alps 0003:044E:120B.0029: failed read register (-71) [ 968.678749][ T5721] hid-alps 0003:044E:120B.0029: failed U1_NUM_SENS_X (-71) [ 968.686002][ T5721] hid-alps 0003:044E:120B.0029: hidraw0: USB HID v80.00 Joystick [HID 044e:120b] on usb-dummy_hcd.1-1/input0 [ 968.738003][ T5721] usb 2-1: USB disconnect, device number 18 [ 969.052367][T16385] fido_id[16385]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 969.728861][ T5721] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 969.857150][T16411] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2884'. [ 969.897833][ T5721] usb 5-1: Using ep0 maxpacket: 8 [ 969.918357][T16411] tipc: Enabling of bearer rejected, failed to enable media [ 970.038109][T16413] FAULT_INJECTION: forcing a failure. [ 970.038109][T16413] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 970.038167][T16413] CPU: 1 UID: 0 PID: 16413 Comm: syz.5.2886 Tainted: G L syzkaller #0 PREEMPT(full) [ 970.038194][T16413] Tainted: [L]=SOFTLOCKUP [ 970.038201][T16413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 970.038212][T16413] Call Trace: [ 970.038220][T16413] [ 970.038230][T16413] dump_stack_lvl+0xe8/0x150 [ 970.038266][T16413] should_fail_ex+0x410/0x560 [ 970.038304][T16413] _copy_from_user+0x2d/0xb0 [ 970.038334][T16413] ___sys_recvmsg+0x173/0x5a0 [ 970.038365][T16413] ? __pfx____sys_recvmsg+0x10/0x10 [ 970.038424][T16413] do_recvmmsg+0x31a/0x800 [ 970.038459][T16413] ? __pfx_do_recvmmsg+0x10/0x10 [ 970.038497][T16413] ? get_timespec64+0x119/0x1b0 [ 970.038528][T16413] ? __pfx_get_timespec64+0x10/0x10 [ 970.038556][T16413] ? fdget+0x1ac/0x250 [ 970.038586][T16413] __x64_sys_recvmmsg+0x1b7/0x250 [ 970.038632][T16413] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 970.038669][T16413] do_syscall_64+0x166/0x520 [ 970.038696][T16413] ? trace_irq_disable+0x3b/0x140 [ 970.038722][T16413] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.038743][T16413] ? clear_bhb_loop+0x70/0xc0 [ 970.038768][T16413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.038788][T16413] RIP: 0033:0x7efc7bf9f559 [ 970.038807][T16413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 970.038824][T16413] RSP: 002b:00007efc7cf0f028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 970.038846][T16413] RAX: ffffffffffffffda RBX: 00007efc7c225fa0 RCX: 00007efc7bf9f559 [ 970.038861][T16413] RDX: 00000000000006f5 RSI: 0000200000000000 RDI: 0000000000000003 [ 970.038875][T16413] RBP: 00007efc7cf0f090 R08: 0000200000000040 R09: 0000000000000000 [ 970.038889][T16413] R10: 0000002000000022 R11: 0000000000000246 R12: 0000000000000002 [ 970.038902][T16413] R13: 00007efc7c226038 R14: 00007efc7c225fa0 R15: 00007efc7c34fa48 [ 970.038936][T16413] [ 971.107904][ T5707] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 971.256448][ T5707] usb 6-1: device descriptor read/64, error -71 [ 971.498425][ T5707] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 971.513741][T16431] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2891'. [ 971.552329][T16432] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2891'. [ 971.641393][ T5707] usb 6-1: device descriptor read/64, error -71 [ 971.750020][ T5707] usb usb6-port1: attempt power cycle [ 971.809245][T16434] FAULT_INJECTION: forcing a failure. [ 971.809245][T16434] name failslab, interval 1, probability 0, space 0, times 0 [ 971.809270][T16434] CPU: 0 UID: 0 PID: 16434 Comm: syz.1.2892 Tainted: G L syzkaller #0 PREEMPT(full) [ 971.809287][T16434] Tainted: [L]=SOFTLOCKUP [ 971.809291][T16434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 971.809298][T16434] Call Trace: [ 971.809303][T16434] [ 971.809310][T16434] dump_stack_lvl+0xe8/0x150 [ 971.809350][T16434] should_fail_ex+0x410/0x560 [ 971.809385][T16434] should_failslab+0xa8/0x100 [ 971.809407][T16434] ? ptlock_alloc+0x20/0x70 [ 971.809435][T16434] kmem_cache_alloc_noprof+0x9c/0x600 [ 971.809458][T16434] ? ptlock_alloc+0x20/0x70 [ 971.809493][T16434] ptlock_alloc+0x20/0x70 [ 971.809521][T16434] pte_alloc_one+0x7a/0x370 [ 971.809547][T16434] __pte_alloc+0x25/0x1a0 [ 971.809561][T16434] do_pte_missing+0x2db7/0x34b0 [ 971.809575][T16434] ? do_raw_spin_unlock+0xf5/0x200 [ 971.809589][T16434] ? __pmd_alloc+0x40a/0x5c0 [ 971.809610][T16434] handle_mm_fault+0x1a53/0x3750 [ 971.809649][T16434] ? handle_mm_fault+0xf1/0x3750 [ 971.809688][T16434] ? __pfx_handle_mm_fault+0x10/0x10 [ 971.809712][T16434] ? __lock_acquire+0x747/0x2de0 [ 971.809727][T16434] ? lock_mm_and_find_vma+0xa7/0x340 [ 971.809745][T16434] do_user_addr_fault+0x7f6/0x1480 [ 971.809780][T16434] exc_page_fault+0x6a/0xc0 [ 971.809808][T16434] asm_exc_page_fault+0x26/0x30 [ 971.809828][T16434] RIP: 0010:rep_movs_alternative+0x30/0xa0 [ 971.809846][T16434] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 8d 7e 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 971.809856][T16434] RSP: 0018:ffffc900070cfd58 EFLAGS: 00050212 [ 971.809866][T16434] RAX: 00007ffffffff001 RBX: 0000000000000010 RCX: 0000000000000010 [ 971.809874][T16434] RDX: 0000000000000001 RSI: 0000200000000640 RDI: ffffc900070cfdc0 [ 971.809882][T16434] RBP: ffffc900070cfeb8 R08: ffffc900070cfdcf R09: 1ffff92000e19fb9 [ 971.809889][T16434] R10: dffffc0000000000 R11: fffff52000e19fba R12: 0000200000000640 [ 971.809897][T16434] R13: ffffc900070cfdc0 R14: ffffc900070cfdc0 R15: 0000200000000640 [ 971.809925][T16434] _copy_from_user+0x7a/0xb0 [ 971.809962][T16434] __sys_bind+0x1c6/0x410 [ 971.809986][T16434] ? __pfx___sys_bind+0x10/0x10 [ 971.810007][T16434] ? __pfx_ksys_write+0x10/0x10 [ 971.810025][T16434] __x64_sys_bind+0x7a/0x90 [ 971.810035][T16434] do_syscall_64+0x166/0x520 [ 971.810049][T16434] ? trace_irq_disable+0x3b/0x140 [ 971.810072][T16434] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.810092][T16434] ? clear_bhb_loop+0x70/0xc0 [ 971.810117][T16434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.810136][T16434] RIP: 0033:0x7fcde1f9f559 [ 971.810152][T16434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 971.810160][T16434] RSP: 002b:00007fcde2e69028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 971.810171][T16434] RAX: ffffffffffffffda RBX: 00007fcde2225fa0 RCX: 00007fcde1f9f559 [ 971.810179][T16434] RDX: 0000000000000010 RSI: 0000200000000640 RDI: 0000000000000003 [ 971.810186][T16434] RBP: 00007fcde2e69090 R08: 0000000000000000 R09: 0000000000000000 [ 971.810193][T16434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 971.810199][T16434] R13: 00007fcde2226038 R14: 00007fcde2225fa0 R15: 00007fcde234fa48 [ 971.810225][T16434] [ 972.115875][ T5707] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 972.176560][ T5707] usb 6-1: device descriptor read/8, error -71 [ 972.409032][ T5707] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 972.438809][ T5707] usb 6-1: device descriptor read/8, error -71 [ 972.548461][ T5707] usb usb6-port1: unable to enumerate USB device [ 972.628256][ C0] ip6_tunnel: K xmit: Local address not yet configured! [ 972.870766][ T5706] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 973.021226][ T5706] usb 2-1: New USB device found: idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 973.023288][ T5706] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 973.023316][ T5706] usb 2-1: config 0 has no interface number 0 [ 973.023357][ T5706] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 973.023380][ T5706] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 973.079945][ T5706] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.079972][ T5706] usb 2-1: Product: syz [ 973.079988][ T5706] usb 2-1: Manufacturer: syz [ 973.080002][ T5706] usb 2-1: SerialNumber: syz [ 973.138163][ T5706] usb 2-1: config 0 descriptor?? [ 973.139010][T16438] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 973.163360][ T5706] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 973.213452][ T5706] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 973.352145][T16444] netlink: 88 bytes leftover after parsing attributes in process `syz.6.2897'. [ 973.408618][T16444] tipc: Enabling of bearer rejected, already enabled [ 973.563077][T16446] netlink: 'syz.2.2898': attribute type 1 has an invalid length. [ 973.743073][T16446] 8021q: adding VLAN 0 to HW filter on device bond9 [ 973.759925][ T2248] usb 2-1: USB disconnect, device number 19 [ 973.863426][ T2248] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 973.864058][ T2248] cyberjack 2-1:0.69: device disconnected [ 973.967392][T16448] bond9: (slave gretap3): making interface the new active one [ 973.983261][T16448] bond9: (slave gretap3): Enslaving as an active interface with an up link [ 974.140179][ T5721] usb 5-1: unable to get BOS descriptor or descriptor too short [ 974.140230][ T5721] usb 5-1: New USB device found: idVendor=2b73, idProduct=0013, bcdDevice=1.40 [ 974.165213][ T5721] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 974.165238][ T5721] usb 5-1: can't read configurations, error -71 [ 975.805280][T16481] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2909'. [ 975.859424][T16481] tipc: Enabling of bearer rejected, failed to enable media [ 976.399470][ T5721] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 976.568754][ T5721] usb 5-1: New USB device found: idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 976.570113][ T5721] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 976.570133][ T5721] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 976.572116][ T5721] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.572140][ T5721] usb 5-1: Product: syz [ 976.572155][ T5721] usb 5-1: Manufacturer: syz [ 976.572169][ T5721] usb 5-1: SerialNumber: syz [ 976.642668][ T5721] usb 5-1: config 0 descriptor?? [ 976.643330][T16485] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 976.643411][T16485] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 976.849587][T16485] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 976.849658][T16485] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 977.500183][ T5721] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 977.560223][ T5721] usb 5-1: USB disconnect, device number 16 [ 977.758096][T16493] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 977.980396][ T8729] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 978.159150][ T8729] usb 3-1: unable to get BOS descriptor or descriptor too short [ 978.159596][ T8729] usb 3-1: not running at top speed; connect to a high speed hub [ 978.159617][ T8729] usb 3-1: New USB device found: idVendor=0408, idProduct=4033, bcdDevice=96.91 [ 978.160466][ T8729] usb 3-1: config 4 has an invalid interface number: 106 but max is 0 [ 978.160490][ T8729] usb 3-1: config 4 has no interface number 0 [ 978.160520][ T8729] usb 3-1: config 4 interface 106 has no altsetting 0 [ 978.211537][ T8729] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.211564][ T8729] usb 3-1: Product: syz [ 978.211573][ T8729] usb 3-1: Manufacturer: syz [ 978.211581][ T8729] usb 3-1: SerialNumber: syz [ 978.535345][ T8729] uvcvideo 3-1:4.106: Found UVC 0.00 device syz (0408:4033) [ 978.535367][ T8729] uvcvideo 3-1:4.106: Forcing UVC version to 1.0a [ 978.535379][ T8729] uvcvideo 3-1:4.106: No valid video chain found. [ 978.567989][ T8729] usb 3-1: USB disconnect, device number 27 [ 978.605835][T15275] udevd[15275]: setting mode of /dev/bus/usb/003/027 to 020664 failed: No such file or directory [ 978.605913][T15275] udevd[15275]: setting owner of /dev/bus/usb/003/027 to uid=0, gid=0 failed: No such file or directory [ 978.760304][ T30] audit: type=1326 audit(1793172145.339:3167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16507 comm="syz.4.2917" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221139f559 code=0x7ffc0000 [ 978.765367][ T30] audit: type=1326 audit(1793172145.339:3168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16507 comm="syz.4.2917" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221139f559 code=0x7ffc0000 [ 978.826559][ T30] audit: type=1326 audit(1793172145.399:3169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16507 comm="syz.4.2917" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221139f559 code=0x7ffc0000 [ 978.826706][ T30] audit: type=1326 audit(1793172145.399:3170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16507 comm="syz.4.2917" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221139f559 code=0x7ffc0000 [ 978.830125][ T30] audit: type=1326 audit(1793172145.409:3171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16507 comm="syz.4.2917" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f221139f559 code=0x7ffc0000 [ 978.903743][ T30] audit: type=1326 audit(1793172145.479:3172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16507 comm="syz.4.2917" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221139f559 code=0x7ffc0000 [ 978.904337][ T30] audit: type=1326 audit(1793172145.479:3173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16507 comm="syz.4.2917" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221139f559 code=0x7ffc0000 [ 978.966539][ T30] audit: type=1326 audit(1793172145.529:3174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16507 comm="syz.4.2917" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221139f559 code=0x7ffc0000 [ 978.966589][ T30] audit: type=1326 audit(1793172145.529:3175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16507 comm="syz.4.2917" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221139f559 code=0x7ffc0000 [ 978.991140][ T30] audit: type=1326 audit(1793172145.549:3176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16507 comm="syz.4.2917" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f221139f559 code=0x7ffc0000 [ 979.897939][ T8729] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 979.971942][ T5706] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 980.057842][ T8729] usb 3-1: Using ep0 maxpacket: 16 [ 980.058605][ T8729] usb 3-1: New USB device found: idVendor=056a, idProduct=0094, bcdDevice=0.00 [ 980.059554][ T8729] usb 3-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30 [ 980.059596][ T8729] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 980.059622][ T8729] usb 3-1: config 0 interface 0 has no altsetting 0 [ 980.059645][ T8729] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.084439][ T8729] usb 3-1: config 0 descriptor?? [ 980.159889][ T5706] usb 5-1: Using ep0 maxpacket: 16 [ 980.175783][ T5706] usb 5-1: New USB device found: idVendor=0763, idProduct=2001, bcdDevice=0.40 [ 980.215893][ T5706] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.215912][ T5706] usb 5-1: Product: syz [ 980.215920][ T5706] usb 5-1: Manufacturer: syz [ 980.215928][ T5706] usb 5-1: SerialNumber: syz [ 980.467907][ T2248] usb 6-1: new full-speed USB device number 117 using dummy_hcd [ 980.565562][ T8729] hid (null): report_id 0 is invalid [ 980.589981][ T8729] hid_parser_main: 52 callbacks suppressed [ 980.590008][ T8729] wacom 0003:056A:0094.002A: unknown main item tag 0x3 [ 980.597907][ T2248] usb 6-1: device descriptor read/64, error -71 [ 980.604171][ T8729] wacom 0003:056A:0094.002A: unknown main item tag 0x6 [ 980.604208][ T8729] wacom 0003:056A:0094.002A: unknown main item tag 0x0 [ 980.604235][ T8729] wacom 0003:056A:0094.002A: unknown main item tag 0x0 [ 980.604268][ T8729] wacom 0003:056A:0094.002A: unknown main item tag 0x0 [ 980.604284][ T8729] wacom 0003:056A:0094.002A: unknown main item tag 0x0 [ 980.604299][ T8729] wacom 0003:056A:0094.002A: unknown main item tag 0x0 [ 980.604315][ T8729] wacom 0003:056A:0094.002A: unknown main item tag 0x0 [ 980.604340][ T8729] wacom 0003:056A:0094.002A: report_id 0 is invalid [ 980.604362][ T8729] wacom 0003:056A:0094.002A: item 0 1 1 8 parsing failed [ 980.663371][ T8729] wacom 0003:056A:0094.002A: parse failed [ 980.663475][ T8729] wacom 0003:056A:0094.002A: probe with driver wacom failed with error -22 [ 980.856726][ T2248] usb 6-1: new full-speed USB device number 118 using dummy_hcd [ 980.987933][ T2248] usb 6-1: device descriptor read/64, error -71 [ 981.098022][ T2248] usb usb6-port1: attempt power cycle [ 981.107823][ T5721] usb 3-1: USB disconnect, device number 28 [ 981.439174][ T2248] usb 6-1: new full-speed USB device number 119 using dummy_hcd [ 981.461972][ T2248] usb 6-1: device descriptor read/8, error -71 [ 981.697907][ T2248] usb 6-1: new full-speed USB device number 120 using dummy_hcd [ 981.743930][ T2248] usb 6-1: device descriptor read/8, error -71 [ 981.795110][ T5706] usb 5-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 981.795131][ T5706] usb 5-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 981.798528][ T5706] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 981.853040][ T2248] usb usb6-port1: unable to enumerate USB device [ 982.045580][ T5706] usb 5-1: USB disconnect, device number 17 [ 982.159688][T15275] udevd[15275]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 982.597843][ T5721] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 982.758945][ T5721] usb 2-1: New USB device found: idVendor=0489, idProduct=e057, bcdDevice=0.00 [ 982.760076][ T5721] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 982.760092][ T5721] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 982.760121][ T5721] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.797120][ T5721] usb 2-1: config 0 descriptor?? [ 983.243102][ T5721] Bluetooth: Can't get state to change to load configuration err [ 983.243123][ T5721] Bluetooth: Loading sysconfig file failed [ 983.243147][ T5721] ath3k 2-1:0.0: probe with driver ath3k failed with error -16 [ 983.274458][ T5721] usb 2-1: USB disconnect, device number 20 [ 983.712184][T16554] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2931'. [ 983.712210][T16554] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2931'. [ 983.712227][T16554] netlink: 31 bytes leftover after parsing attributes in process `syz.2.2931'. [ 983.712244][T16554] netlink: 'syz.2.2931': attribute type 2 has an invalid length. [ 983.712257][T16554] netlink: 31 bytes leftover after parsing attributes in process `syz.2.2931'. [ 983.935299][T16559] xt_SECMARK: invalid mode: 2 [ 985.189495][ T2248] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 985.338664][ T2248] usb 6-1: Using ep0 maxpacket: 8 [ 985.560066][ T2248] usb 6-1: unable to get BOS descriptor or descriptor too short [ 985.560119][ T2248] usb 6-1: New USB device found: idVendor=2b73, idProduct=0013, bcdDevice=1.40 [ 985.569573][ T2248] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 985.569602][ T2248] usb 6-1: can't read configurations, error -71 [ 985.754168][ T30] kauditd_printk_skb: 975 callbacks suppressed [ 985.754181][ T30] audit: type=1326 audit(1793172152.329:4152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16583 comm="syz.6.2940" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e899f559 code=0x7ffc0000 [ 985.756054][T16581] openvswitch: netlink: Tunnel attr 7 has unexpected len 8 expected 0 [ 985.757410][ T30] audit: type=1326 audit(1793172152.329:4153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16583 comm="syz.6.2940" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e899f559 code=0x7ffc0000 [ 985.830511][ T30] audit: type=1326 audit(1793172152.409:4154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16583 comm="syz.6.2940" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e899f559 code=0x7ffc0000 [ 985.830653][ T30] audit: type=1326 audit(1793172152.409:4155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16583 comm="syz.6.2940" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e899f559 code=0x7ffc0000 [ 985.831329][ T30] audit: type=1326 audit(1793172152.409:4156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16583 comm="syz.6.2940" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd9e899f559 code=0x7ffc0000 [ 985.831498][ T30] audit: type=1326 audit(1793172152.409:4157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16583 comm="syz.6.2940" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e899f559 code=0x7ffc0000 [ 985.832381][ T30] audit: type=1326 audit(1793172152.409:4158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16583 comm="syz.6.2940" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e899f559 code=0x7ffc0000 [ 985.832939][ T30] audit: type=1326 audit(1793172152.409:4159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16583 comm="syz.6.2940" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e899f559 code=0x7ffc0000 [ 985.833298][ T30] audit: type=1326 audit(1793172152.409:4160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16583 comm="syz.6.2940" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd9e899f559 code=0x7ffc0000 [ 985.835360][ T30] audit: type=1326 audit(1793172152.409:4161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16583 comm="syz.6.2940" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e899f559 code=0x7ffc0000 [ 986.129925][T16585] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 986.147482][T16585] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 986.159426][T16585] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 986.190599][T16585] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 986.192831][T16585] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 986.887797][T16597] netlink: 'syz.4.2942': attribute type 1 has an invalid length. [ 986.983252][T15891] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 986.984417][T15891] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.984435][T15891] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 987.149251][T16597] 8021q: adding VLAN 0 to HW filter on device bond11 [ 987.216104][T16599] bond11: (slave gretap6): making interface the new active one [ 987.226948][T16599] bond11: (slave gretap6): Enslaving as an active interface with an up link [ 987.442317][T15891] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 987.442342][T15891] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.442356][T15891] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 987.710452][T15891] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 987.710490][T15891] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.710517][T15891] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 987.922975][T15891] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 987.922999][T15891] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.923014][T15891] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 988.160447][T15891] Failed to reload devlink instance into init_net [ 988.187674][T16588] bridge0: port 1(bridge_slave_0) entered blocking state [ 988.187958][T16588] bridge0: port 1(bridge_slave_0) entered disabled state [ 988.188054][T16588] bridge_slave_0: entered allmulticast mode [ 988.189034][T16588] bridge_slave_0: entered promiscuous mode [ 988.194007][T16588] bridge0: port 2(bridge_slave_1) entered blocking state [ 988.194105][T16588] bridge0: port 2(bridge_slave_1) entered disabled state [ 988.194236][T16588] bridge_slave_1: entered allmulticast mode [ 988.196098][T16588] bridge_slave_1: entered promiscuous mode [ 988.233017][T15891] bridge_slave_1: left allmulticast mode [ 988.233043][T15891] bridge_slave_1: left promiscuous mode [ 988.235471][T15891] bridge0: port 2(bridge_slave_1) entered disabled state [ 988.252810][T15891] bridge_slave_0: left allmulticast mode [ 988.252835][T15891] bridge_slave_0: left promiscuous mode [ 988.253038][T15891] bridge0: port 1(bridge_slave_0) entered disabled state [ 988.280579][T15891] dvmrp1: left allmulticast mode [ 988.308157][T12997] Bluetooth: hci0: command tx timeout [ 989.033849][T15891] bond9 (unregistering): (slave gretap3): Releasing active interface [ 989.110567][T15891] bond8 (unregistering): (slave gretap2): Releasing active interface [ 989.179061][T15891] bond7 (unregistering): (slave gretap0): Releasing active interface [ 989.344747][T15891] bond4 (unregistering): (slave geneve2): Releasing active interface [ 989.433762][T15891] bond3 (unregistering): (slave bridge2): Releasing active interface [ 989.511587][T15891] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 989.527338][T15891] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 989.539871][T15891] bond0 (unregistering): (slave team0): Releasing backup interface [ 989.551110][T15891] bond0 (unregistering): Released all slaves [ 989.565763][T15891] bond1 (unregistering): Released all slaves [ 989.590528][T15891] bond2 (unregistering): (slave wireguard0): Releasing backup interface [ 989.591903][T15891] bond2 (unregistering): Released all slaves [ 989.627592][T15891] bond3 (unregistering): Released all slaves [ 989.644277][T15891] bond4 (unregistering): Released all slaves [ 989.669871][T15891] bond5 (unregistering): Released all slaves [ 989.692128][T15891] bond6 (unregistering): Released all slaves [ 989.711241][T15891] bond7 (unregistering): Released all slaves [ 989.733303][T15891] bond8 (unregistering): Released all slaves [ 989.755710][T15891] bond9 (unregistering): Released all slaves [ 989.788225][T16588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 989.804431][T16588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 990.000108][T16588] team0: Port device team_slave_0 added [ 990.012750][T16588] team0: Port device team_slave_1 added [ 990.065481][T16646] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2952'. [ 990.175934][T16588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 990.175952][T16588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 990.175977][T16588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 990.184564][T16588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 990.184582][T16588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 990.184607][T16588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 990.333508][T16659] netlink: 88 bytes leftover after parsing attributes in process `syz.6.2955'. [ 990.388335][T12997] Bluetooth: hci0: command tx timeout [ 990.422291][T15891] tipc: Left network mode [ 990.422314][T16659] tipc: Enabling of bearer rejected, already enabled [ 990.477897][T16588] hsr_slave_0: entered promiscuous mode [ 990.478958][T16588] hsr_slave_1: entered promiscuous mode [ 990.485844][T16588] debugfs: 'hsr0' already exists in 'hsr' [ 990.485866][T16588] Cannot create hsr debugfs directory [ 990.641427][ T10] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 990.799871][ T10] usb 6-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 990.824951][T16663] nvme_fabrics: missing parameter 'transport=%s' [ 990.845227][T16663] nvme_fabrics: missing parameter 'nqn=%s' [ 990.856177][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.856203][ T10] usb 6-1: Product: syz [ 990.856218][ T10] usb 6-1: Manufacturer: syz [ 990.856232][ T10] usb 6-1: SerialNumber: syz [ 991.479870][ T2248] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 991.628341][ T2248] usb 5-1: Using ep0 maxpacket: 32 [ 991.629954][ T2248] usb 5-1: New USB device found: idVendor=044f, idProduct=b65d, bcdDevice=0.00 [ 991.631748][ T2248] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 991.631770][ T2248] usb 5-1: config 0 interface 0 altsetting 16 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 991.631783][ T2248] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 991.631814][ T2248] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x8F has invalid wMaxPacketSize 0 [ 991.631826][ T2248] usb 5-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 991.631840][ T2248] usb 5-1: config 0 interface 0 has no altsetting 0 [ 991.631858][ T2248] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.634268][ T2248] usb 5-1: config 0 descriptor?? [ 991.747275][T16673] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2959'. [ 991.867440][T16588] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 991.894817][T16588] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 991.896767][T16588] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 991.920751][T16588] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 991.954957][T16588] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 991.975562][T16588] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 991.994668][T16588] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 992.012344][T16588] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 992.172411][ T2248] hid-thrustmaster 0003:044F:B65D.002B: unknown main item tag 0x0 [ 992.172436][ T2248] hid-thrustmaster 0003:044F:B65D.002B: unknown main item tag 0x0 [ 992.173444][ T2248] hid-thrustmaster 0003:044F:B65D.002B: unknown main item tag 0x0 [ 992.173499][ T2248] hid-thrustmaster 0003:044F:B65D.002B: unknown main item tag 0x0 [ 992.173527][ T2248] hid-thrustmaster 0003:044F:B65D.002B: unknown main item tag 0x0 [ 992.229402][ T2248] hid-thrustmaster 0003:044F:B65D.002B: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.4-1/input0 [ 992.229658][ T2248] hid-thrustmaster 0003:044F:B65D.002B: setup data couldn't be sent [ 992.361125][ C0] hid-thrustmaster 0003:044F:B65D.002B: URB to get model id failed with error -71 [ 992.362311][T16449] usb 5-1: USB disconnect, device number 18 [ 992.468119][T12997] Bluetooth: hci0: command tx timeout [ 992.538835][T16685] fido_id[16685]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 992.705970][T15891] hsr_slave_0: left promiscuous mode [ 992.709526][T15891] hsr_slave_1: left promiscuous mode [ 992.710425][T15891] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 992.710445][T15891] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 992.715119][T15891] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 992.715140][T15891] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 992.728935][T15891] veth1_macvtap: left promiscuous mode [ 992.728971][T15891] veth0_macvtap: left promiscuous mode [ 992.729092][T15891] veth1_vlan: left promiscuous mode [ 992.729158][T15891] veth0_vlan: left promiscuous mode [ 993.113029][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.113084][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.274978][ T10] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 993.275042][ T10] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 993.276293][ T10] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 993.276342][ T10] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 993.351697][ T10] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 993.371583][ T10] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 993.377169][ T10] usb 6-1: USB disconnect, device number 123 [ 993.484688][T16700] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2963'. [ 993.484724][T16700] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2963'. [ 993.817810][ T8729] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 993.955029][ T8729] usb 5-1: device descriptor read/64, error -71 [ 993.996644][T15891] team0 (unregistering): Port device team_slave_1 removed [ 994.033903][T15891] team0 (unregistering): Port device team_slave_0 removed [ 994.189719][ T8729] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 994.297377][T16688] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 994.319575][ T8729] usb 5-1: device descriptor read/64, error -71 [ 994.409799][T15880] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 994.429150][ T8729] usb usb5-port1: attempt power cycle [ 994.531378][T16711] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2965'. [ 994.550450][T12997] Bluetooth: hci0: command tx timeout [ 994.613499][T16711] tipc: Enabling of bearer rejected, failed to enable media [ 994.715364][T16588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 994.737307][T16588] 8021q: adding VLAN 0 to HW filter on device team0 [ 994.780016][ T8729] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 994.780967][T15895] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 994.781491][T15895] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 994.781513][T15895] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 994.793794][T15895] bridge0: port 1(bridge_slave_0) entered blocking state [ 994.793895][T15895] bridge0: port 1(bridge_slave_0) entered forwarding state [ 994.798569][ T8729] usb 5-1: device descriptor read/8, error -71 [ 994.837760][T15880] bridge0: port 2(bridge_slave_1) entered blocking state [ 994.837861][T15880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 995.032741][T16588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 995.039799][ T8729] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 995.061679][ T8729] usb 5-1: device descriptor read/8, error -71 [ 995.123372][T16588] veth0_vlan: entered promiscuous mode [ 995.136166][T16588] veth1_vlan: entered promiscuous mode [ 995.173326][ T8729] usb usb5-port1: unable to enumerate USB device [ 995.204426][T16588] veth0_macvtap: entered promiscuous mode [ 995.207304][T16588] veth1_macvtap: entered promiscuous mode [ 995.258859][T15891] IPVS: stop unused estimator thread 0... [ 995.264102][T16588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 995.282321][T16588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 995.305001][T15895] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.305046][T15895] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.305075][T15895] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.305103][T15895] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.604504][ T8463] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 995.604528][ T8463] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 995.691982][ T8463] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 995.692005][ T8463] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 995.952638][T16725] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2969'. [ 995.992056][T16718] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2968'. [ 996.223678][T16731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 996.224107][T16731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 996.430264][T16747] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2975'. [ 996.447536][T16747] tipc: Enabling of bearer rejected, failed to enable media [ 996.478403][T16449] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 996.507095][ T30] kauditd_printk_skb: 125 callbacks suppressed [ 996.507114][ T30] audit: type=1326 audit(1793172163.079:4287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16748 comm="syz.4.2974" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f221139f559 code=0x0 [ 996.614769][T16754] FAULT_INJECTION: forcing a failure. [ 996.614769][T16754] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 996.614793][T16754] CPU: 0 UID: 0 PID: 16754 Comm: syz.4.2974 Tainted: G L syzkaller #0 PREEMPT(full) [ 996.614809][T16754] Tainted: [L]=SOFTLOCKUP [ 996.614813][T16754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 996.614820][T16754] Call Trace: [ 996.614825][T16754] [ 996.614830][T16754] dump_stack_lvl+0xe8/0x150 [ 996.614852][T16754] should_fail_ex+0x410/0x560 [ 996.614871][T16754] _copy_from_iter+0x1d3/0x1680 [ 996.614886][T16754] ? __alloc_skb+0x27a/0x7a0 [ 996.614900][T16754] ? __alloc_skb+0x27a/0x7a0 [ 996.614912][T16754] ? __alloc_skb+0x27a/0x7a0 [ 996.614923][T16754] ? __pfx__copy_from_iter+0x10/0x10 [ 996.614936][T16754] ? kmem_cache_alloc_node_noprof+0x1f4/0x600 [ 996.614947][T16754] ? __alloc_skb+0x27a/0x7a0 [ 996.614965][T16754] ? __alloc_skb+0x27a/0x7a0 [ 996.614979][T16754] ? netlink_sendmsg+0x64f/0xb20 [ 996.614991][T16754] ? skb_put+0x112/0x210 [ 996.615004][T16754] netlink_sendmsg+0x6bb/0xb20 [ 996.615017][T16754] ? __pfx_netlink_sendmsg+0x10/0x10 [ 996.615030][T16754] ? aa_sock_msg_perm+0x144/0x210 [ 996.615046][T16754] ? apparmor_socket_sendmsg+0x98/0x360 [ 996.615058][T16754] ? __pfx_netlink_sendmsg+0x10/0x10 [ 996.615068][T16754] sock_sendmsg_nosec+0x14e/0x190 [ 996.615091][T16754] ____sys_sendmsg+0x54e/0x850 [ 996.615107][T16754] ? __pfx_____sys_sendmsg+0x10/0x10 [ 996.615124][T16754] ? import_iovec+0x73/0xa0 [ 996.615143][T16754] ___sys_sendmsg+0x2a5/0x360 [ 996.615158][T16754] ? __lock_acquire+0x747/0x2de0 [ 996.615174][T16754] ? __pfx____sys_sendmsg+0x10/0x10 [ 996.615204][T16754] ? __fget_files+0x3a2/0x420 [ 996.615216][T16754] ? __fget_files+0x2a/0x420 [ 996.615231][T16754] __x64_sys_sendmsg+0x1b1/0x290 [ 996.615245][T16754] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 996.615269][T16754] do_syscall_64+0x166/0x520 [ 996.615283][T16754] ? trace_irq_disable+0x3b/0x140 [ 996.615298][T16754] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 996.615309][T16754] ? clear_bhb_loop+0x70/0xc0 [ 996.615322][T16754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 996.615332][T16754] RIP: 0033:0x7f221139f559 [ 996.615344][T16754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 996.615353][T16754] RSP: 002b:00007f2212302028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 996.615366][T16754] RAX: ffffffffffffffda RBX: 00007f2211626090 RCX: 00007f221139f559 [ 996.615374][T16754] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000002 [ 996.615382][T16754] RBP: 00007f2212302090 R08: 0000000000000000 R09: 0000000000000000 [ 996.615388][T16754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 996.615395][T16754] R13: 00007f2211626128 R14: 00007f2211626090 R15: 00007f221174fa48 [ 996.615412][T16754] [ 996.638092][T16449] usb 3-1: Using ep0 maxpacket: 32 [ 996.638879][T16449] usb 3-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 996.643264][T16449] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 996.643289][T16449] usb 3-1: Product: 締툡ፎ뵰茁ꌐ蝼砍摗襁钷偼黿부䀭낧뀋ሑ墁捚㣕ฎ㢗ᡚ늦죤망볠⨍ퟙ⢎離㜓ꚡ⓴놃땻杒䕜䠄檇툷卂傎 [ 996.643310][T16449] usb 3-1: Manufacturer:  [ 996.643326][T16449] usb 3-1: SerialNumber: ﶉ䒧虊쇳醟㴢웟⊭晩䆚䙏ꇀᤝ㸫낕Ɖ覾屶ᝯ蟍燧䗰፮ఫ漳㠩氤脓궭䐱ੜ急먏¾簾㵙察㥇됤䣿⌋㊌玑諚盰쒀紃摤㬧㉼뜲쫷㮡莪홖稐ᓻ㘬寘噬᭻嵜퇚咒띒碹堑尙煚१ㄠ봻Ⴤ袬阘楧舛̷홦瀞珎楝낵 [ 996.892166][T16449] usb 3-1: found format II with max.bitrate = 257, frame size=16 [ 996.892193][T16449] usb 3-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 997.186029][T16449] usb 3-1: USB disconnect, device number 29 [ 997.242405][T15275] udevd[15275]: setting owner of /dev/bus/usb/003/029 to uid=0, gid=0 failed: No such file or directory [ 997.286345][T16757] udevd[16757]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 997.473457][T16763] macsec2: entered promiscuous mode [ 997.473485][T16763] bridge0: entered promiscuous mode [ 997.757979][T16449] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 997.911925][T16449] usb 2-1: unable to get BOS descriptor or descriptor too short [ 997.911991][T16449] usb 2-1: New USB device found: idVendor=8086, idProduct=0ad2, bcdDevice=0.00 [ 997.920639][T16449] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 997.920664][T16449] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 997.920707][T16449] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 997.922441][T16449] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 997.922465][T16449] usb 2-1: Product: syz [ 997.922503][T16449] usb 2-1: Manufacturer: syz [ 997.965894][T16449] uvcvideo 2-1:1.0: Found UVC 1.00 device syz (8086:0ad2) [ 997.972540][T16449] uvcvideo 2-1:1.0: No streaming interface found for terminal 32770. [ 998.414994][T16782] tipc: Enabling of bearer rejected, failed to enable media [ 998.493444][ T30] audit: type=1326 audit(1793172165.069:4288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16783 comm="syz.5.2987" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efc7bf9f559 code=0x0 [ 998.598022][ T5707] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 998.704480][ T8729] usb 2-1: USB disconnect, device number 21 [ 998.748612][ T5707] usb 5-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 998.753528][ T5707] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.777402][ T5707] usb 5-1: config 0 descriptor?? [ 998.806566][ T30] audit: type=1326 audit(1793172165.379:4289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16786 comm="syz.1.2988" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcde1f9f559 code=0x0 [ 998.910915][T16790] FAULT_INJECTION: forcing a failure. [ 998.910915][T16790] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 998.910939][T16790] CPU: 1 UID: 0 PID: 16790 Comm: syz.1.2988 Tainted: G L syzkaller #0 PREEMPT(full) [ 998.910955][T16790] Tainted: [L]=SOFTLOCKUP [ 998.910959][T16790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 998.910966][T16790] Call Trace: [ 998.910971][T16790] [ 998.910976][T16790] dump_stack_lvl+0xe8/0x150 [ 998.911001][T16790] should_fail_ex+0x410/0x560 [ 998.911021][T16790] _copy_from_iter+0x1d3/0x1680 [ 998.911036][T16790] ? __alloc_skb+0x27a/0x7a0 [ 998.911050][T16790] ? __alloc_skb+0x27a/0x7a0 [ 998.911066][T16790] ? __alloc_skb+0x27a/0x7a0 [ 998.911086][T16790] ? __pfx__copy_from_iter+0x10/0x10 [ 998.911108][T16790] ? kmem_cache_alloc_node_noprof+0x1f4/0x600 [ 998.911128][T16790] ? __alloc_skb+0x27a/0x7a0 [ 998.911147][T16790] ? __alloc_skb+0x27a/0x7a0 [ 998.911171][T16790] ? netlink_sendmsg+0x64f/0xb20 [ 998.911182][T16790] ? skb_put+0x112/0x210 [ 998.911195][T16790] netlink_sendmsg+0x6bb/0xb20 [ 998.911208][T16790] ? __pfx_netlink_sendmsg+0x10/0x10 [ 998.911220][T16790] ? aa_sock_msg_perm+0x144/0x210 [ 998.911237][T16790] ? apparmor_socket_sendmsg+0x98/0x360 [ 998.911249][T16790] ? __pfx_netlink_sendmsg+0x10/0x10 [ 998.911259][T16790] sock_sendmsg_nosec+0x14e/0x190 [ 998.911276][T16790] ____sys_sendmsg+0x54e/0x850 [ 998.911291][T16790] ? __pfx_____sys_sendmsg+0x10/0x10 [ 998.911308][T16790] ? import_iovec+0x73/0xa0 [ 998.911325][T16790] ___sys_sendmsg+0x2a5/0x360 [ 998.911337][T16790] ? __lock_acquire+0x747/0x2de0 [ 998.911356][T16790] ? __pfx____sys_sendmsg+0x10/0x10 [ 998.911387][T16790] ? __fget_files+0x3a2/0x420 [ 998.911398][T16790] ? __fget_files+0x2a/0x420 [ 998.911413][T16790] __x64_sys_sendmsg+0x1b1/0x290 [ 998.911427][T16790] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 998.911451][T16790] do_syscall_64+0x166/0x520 [ 998.911466][T16790] ? trace_irq_disable+0x3b/0x140 [ 998.911480][T16790] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 998.911491][T16790] ? clear_bhb_loop+0x70/0xc0 [ 998.911505][T16790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 998.911516][T16790] RIP: 0033:0x7fcde1f9f559 [ 998.911527][T16790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 998.911536][T16790] RSP: 002b:00007fcde2e48028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 998.911548][T16790] RAX: ffffffffffffffda RBX: 00007fcde2226090 RCX: 00007fcde1f9f559 [ 998.911556][T16790] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000002 [ 998.911563][T16790] RBP: 00007fcde2e48090 R08: 0000000000000000 R09: 0000000000000000 [ 998.911570][T16790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 998.911576][T16790] R13: 00007fcde2226128 R14: 00007fcde2226090 R15: 00007fcde234fa48 [ 998.911593][T16790] [ 999.009393][ T5707] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 999.048326][ T5707] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1 [ 999.048349][ T5707] [drm] Initialized udl on minor 1 [ 999.269721][ T5707] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 999.270156][ T5707] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 999.276649][ T8729] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 999.278379][ T8729] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 999.278585][ T8729] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 999.282220][ T5707] usb 5-1: USB disconnect, device number 23 [ 999.522513][T16807] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2992'. [ 999.713191][T16819] tipc: Enabling of bearer rejected, failed to enable media [ 999.756905][T16821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 999.757315][T16821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 999.887209][T16829] netlink: 'syz.1.2999': attribute type 1 has an invalid length. [ 999.988773][ T8729] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 1000.138556][ T8729] usb 6-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 1000.161709][ T8729] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.161738][ T8729] usb 6-1: Product: syz [ 1000.161753][ T8729] usb 6-1: Manufacturer: syz [ 1000.161768][ T8729] usb 6-1: SerialNumber: syz [ 1000.257996][ T5707] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1000.412547][ T5707] usb 5-1: New USB device found: idVendor=0bda, idProduct=8152, bcdDevice=30.11 [ 1000.430747][ T5707] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1000.430772][ T5707] usb 5-1: config 0 has no interfaces? [ 1000.457691][ T5707] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.457891][ T5707] usb 5-1: Product: syz [ 1000.457908][ T5707] usb 5-1: Manufacturer: syz [ 1000.457923][ T5707] usb 5-1: SerialNumber: syz [ 1000.510957][ T5707] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1000.510974][ T5707] r8152-cfgselector 5-1: config 0 descriptor?? [ 1000.612065][ T8729] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1000.614649][ T8729] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1000.734747][T16831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1000.737274][T16831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1000.987854][ T30] audit: type=1326 audit(1793172167.559:4290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16841 comm="syz.6.3002" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd9e899f559 code=0x0 [ 1001.071580][ T8729] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPIPE [ 1001.071633][ T8729] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1001.105864][T16821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1001.106514][T16821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1001.180986][ T8729] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1001.201582][ T8729] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32 [ 1002.274080][T16858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3005'. [ 1002.804819][ T8729] usb 6-1: USB disconnect, device number 124 [ 1002.983900][T16872] tipc: Enabling of bearer rejected, failed to enable media [ 1003.237983][ T8729] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 1003.418967][ T8729] usb 6-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 1003.431076][ T8729] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1003.431105][ T8729] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1003.431124][ T8729] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1003.431169][ T8729] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1003.431207][ T8729] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1003.433611][ T8729] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1003.433637][ T8729] usb 6-1: Product: syz [ 1003.433653][ T8729] usb 6-1: Manufacturer: syz [ 1003.515599][ T8729] cdc_wdm 6-1:1.0: skipping garbage [ 1003.515613][ T8729] cdc_wdm 6-1:1.0: skipping garbage [ 1003.534892][ T8729] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1003.534914][ T8729] cdc_wdm 6-1:1.0: Unknown control protocol [ 1003.737489][ T8729] usb 6-1: USB disconnect, device number 125 [ 1004.006994][T16886] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3013'. [ 1004.007015][T16886] netlink: 'syz.6.3013': attribute type 1 has an invalid length. [ 1004.064207][T16888] netlink: 'syz.6.3013': attribute type 39 has an invalid length. [ 1004.250428][ T5706] r8152-cfgselector 5-1: USB disconnect, device number 24 [ 1004.279570][T16891] syzkaller0: MTU not usable for tipc bearer [ 1004.279595][T16891] tipc: Enabling of bearer rejected, failed to enable media [ 1004.604683][T16894] SET target dimension over the limit! [ 1004.817159][T16900] bridge_slave_1: Caught tx_queue_len zero misconfig [ 1005.291029][T16449] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 1005.437940][T16449] usb 6-1: Using ep0 maxpacket: 8 [ 1005.522016][T16449] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1005.522070][T16449] usb 6-1: New USB device found: idVendor=2b73, idProduct=0013, bcdDevice=1.40 [ 1005.523073][T16449] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1005.523192][T16449] usb 6-1: can't read configurations, error -71 [ 1007.736209][T16932] random: crng reseeded on system resumption [ 1008.329971][T16942] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1008.352052][T16942] team0: Port device bond4 added [ 1009.355871][T16964] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1010.122339][ T30] audit: type=1326 audit(1793172176.699:4291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16972 comm="syz.1.3039" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcde1f9f559 code=0x0 [ 1011.100184][T16979] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3041'. [ 1011.607092][T16585] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1011.626930][T16585] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1011.638504][T16585] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1011.639639][T16585] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1011.640284][T16585] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1012.828531][T16449] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1012.982729][T16449] usb 3-1: New USB device found: idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1012.987133][T16449] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1013.018595][T16449] usb 3-1: config 0 descriptor?? [ 1013.074980][T16449] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1013.482899][T16449] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 1013.652179][T16917] syz_tun (unregistering): left allmulticast mode [ 1013.750704][T16585] Bluetooth: hci1: command tx timeout [ 1013.895177][T16987] bridge0: port 1(bridge_slave_0) entered blocking state [ 1013.895277][T16987] bridge0: port 1(bridge_slave_0) entered disabled state [ 1013.895414][T16987] bridge_slave_0: entered allmulticast mode [ 1013.896886][T16987] bridge_slave_0: entered promiscuous mode [ 1013.933348][T16987] bridge0: port 2(bridge_slave_1) entered blocking state [ 1013.934702][T16987] bridge0: port 2(bridge_slave_1) entered disabled state [ 1013.934838][T16987] bridge_slave_1: entered allmulticast mode [ 1013.964694][T16987] bridge_slave_1: entered promiscuous mode [ 1014.227299][T16449] gspca_cpia1: usb_control_msg 05, error -71 [ 1014.227401][T16449] cpia1 3-1:0.0: unexpected systemstate: 00 [ 1014.245369][T16449] usb 3-1: USB disconnect, device number 30 [ 1014.349632][T16987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1014.385710][T16987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1015.654596][T16987] team0: Port device team_slave_0 added [ 1015.733390][T16987] team0: Port device team_slave_1 added [ 1015.828054][T16585] Bluetooth: hci1: command tx timeout [ 1016.051092][T16987] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1016.051106][T16987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1016.051120][T16987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1016.133165][T16987] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1016.133186][T16987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1016.133214][T16987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1016.256457][T12997] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1016.269319][T12997] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1016.277201][T12997] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1016.286327][T12997] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1016.286994][T12997] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1016.947245][T16987] hsr_slave_0: entered promiscuous mode [ 1016.972056][T16987] hsr_slave_1: entered promiscuous mode [ 1017.908608][T16585] Bluetooth: hci1: command tx timeout [ 1018.388232][T16585] Bluetooth: hci3: command tx timeout [ 1019.551198][ T8463] bond3 (unregistering): (slave gretap2): Releasing active interface [ 1019.745653][ T8463] bond0 (unregistering): (slave gretap1): Releasing active interface [ 1019.988184][T16585] Bluetooth: hci1: command tx timeout [ 1020.001679][ T8463] bridge0 (unregistering): left promiscuous mode [ 1020.156474][ T8463] bond1 (unregistering): Released all slaves [ 1020.213506][ T8463] bond2 (unregistering): Released all slaves [ 1020.261854][ T8463] bond0 (unregistering): Released all slaves [ 1020.329048][ T8463] bond3 (unregistering): Released all slaves [ 1020.380252][ T8463] team0: Port device bond4 removed [ 1020.380642][ T8463] bond4 (unregistering): Released all slaves [ 1020.468098][T16585] Bluetooth: hci3: command tx timeout [ 1020.562910][ T5296] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1020.769474][ T8463] : left promiscuous mode [ 1021.127511][ T8463] tipc: Left network mode [ 1022.459950][ T8463] hsr_slave_0: left promiscuous mode [ 1022.460679][ T8463] hsr_slave_1: left promiscuous mode [ 1022.550146][T16585] Bluetooth: hci3: command tx timeout [ 1023.401425][T17031] bridge0: port 1(bridge_slave_0) entered blocking state [ 1023.401598][T17031] bridge0: port 1(bridge_slave_0) entered disabled state [ 1023.401731][T17031] bridge_slave_0: entered allmulticast mode [ 1023.403407][T17031] bridge_slave_0: entered promiscuous mode [ 1023.449157][T17031] bridge0: port 2(bridge_slave_1) entered blocking state [ 1023.449259][T17031] bridge0: port 2(bridge_slave_1) entered disabled state [ 1023.449382][T17031] bridge_slave_1: entered allmulticast mode [ 1023.451142][T17031] bridge_slave_1: entered promiscuous mode [ 1023.542101][T17031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1023.544892][T17031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1023.630752][T16987] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1023.670532][T16987] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1023.672209][T16987] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1023.694467][T16987] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1023.704661][T17031] team0: Port device team_slave_0 added [ 1023.705199][T16987] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1023.716071][T16987] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1023.716944][T16987] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1023.724353][T16987] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1023.745595][T17031] team0: Port device team_slave_1 added [ 1023.825118][T17031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1023.825136][T17031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1023.825160][T17031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1023.840071][T17031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1023.840087][T17031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1023.840113][T17031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1023.937074][T17031] hsr_slave_0: entered promiscuous mode [ 1023.938444][T17031] hsr_slave_1: entered promiscuous mode [ 1023.939229][T17031] debugfs: 'hsr0' already exists in 'hsr' [ 1023.939248][T17031] Cannot create hsr debugfs directory [ 1024.413187][T16987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1024.566640][T16987] 8021q: adding VLAN 0 to HW filter on device team0 [ 1024.615608][T17031] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1024.622274][T17031] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1024.625143][T17031] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1024.634404][T16585] Bluetooth: hci3: command tx timeout [ 1024.641453][T17031] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1024.643352][T15880] bridge0: port 1(bridge_slave_0) entered blocking state [ 1024.643453][T15880] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1024.645375][T17031] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1024.661931][T17031] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1024.672249][T17031] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1024.686054][T17031] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1024.692078][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 1024.692186][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1025.095340][T16987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1025.182061][T10970] pimreg: left allmulticast mode [ 1025.363077][T10970] bond11 (unregistering): (slave gretap6): Releasing active interface [ 1025.393245][T10970] bond10 (unregistering): (slave gretap5): Releasing active interface [ 1025.424218][T10970] bond9 (unregistering): (slave gretap4): Releasing active interface [ 1025.542308][T10970] bond0 (unregistering): Released all slaves [ 1025.546326][T10970] bond1 (unregistering): Released all slaves [ 1025.566029][T10970] bond2 (unregistering): Released all slaves [ 1025.584559][T10970] bond3 (unregistering): Released all slaves [ 1025.600786][T10970] bond4 (unregistering): Released all slaves [ 1025.614351][T10970] bond5 (unregistering): Released all slaves [ 1025.631704][T10970] bond6 (unregistering): Released all slaves [ 1025.650396][T10970] bond7 (unregistering): Released all slaves [ 1025.657515][T10970] bond8 (unregistering): Released all slaves [ 1025.683749][T10970] bond9 (unregistering): Released all slaves [ 1025.701837][T10970] bond10 (unregistering): Released all slaves [ 1025.715393][T10970] bond11 (unregistering): Released all slaves [ 1025.737666][T17031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1025.824121][T17031] 8021q: adding VLAN 0 to HW filter on device team0 [ 1025.890123][T16987] veth0_vlan: entered promiscuous mode [ 1025.911685][T10970] tipc: Left network mode [ 1025.917258][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 1025.917365][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1025.951628][T15893] bridge0: port 2(bridge_slave_1) entered blocking state [ 1025.951726][T15893] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1025.986265][T16987] veth1_vlan: entered promiscuous mode [ 1026.285274][T16987] veth0_macvtap: entered promiscuous mode [ 1026.810095][T16987] veth1_macvtap: entered promiscuous mode [ 1026.816622][ T5296] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1026.846260][T17031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1026.866443][T16987] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1026.895639][T16987] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1026.988320][T15882] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.988370][T15882] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.988409][T15882] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.988445][T15882] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.103031][T17031] veth0_vlan: entered promiscuous mode [ 1027.147406][T15895] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1027.147429][T15895] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1027.160120][T17031] veth1_vlan: entered promiscuous mode [ 1027.254034][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1027.254053][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1027.275273][T17031] veth0_macvtap: entered promiscuous mode [ 1027.295951][T17031] veth1_macvtap: entered promiscuous mode [ 1027.340214][T17031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1027.383256][T17031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1027.465787][T10970] IPVS: stop unused estimator thread 0... [ 1027.513074][T15895] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.513343][T15895] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.518984][T15895] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.519282][T15895] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.621041][T17130] netlink: 'syz.1.3042': attribute type 1 has an invalid length. [ 1027.735539][T15882] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1027.735560][T15882] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1027.883695][T15895] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1027.883718][T15895] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1028.198396][ T5296] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1028.885569][ T5296] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1029.216454][ T5296] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1042.267927][ T8725] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 1042.419957][ T8725] usb 6-1: New USB device found: idVendor=28bd, idProduct=1903, bcdDevice=0.00 [ 1042.421374][ T8725] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 1042.421400][ T8725] usb 6-1: config 0 has no interface number 0 [ 1042.421448][ T8725] usb 6-1: config 0 interface 34 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1042.421474][ T8725] usb 6-1: config 0 interface 34 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1042.421500][ T8725] usb 6-1: config 0 interface 34 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1042.421540][ T8725] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1042.425196][ T8725] usb 6-1: config 0 descriptor?? [ 1043.560332][ T8725] usbhid 6-1:0.34: can't add hid device: -71 [ 1043.560433][ T8725] usbhid 6-1:0.34: probe with driver usbhid failed with error -71 [ 1043.590551][ T8725] usb 6-1: USB disconnect, device number 2 [ 1044.790918][ T30] audit: type=1326 audit(1793172211.369:4292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17298 comm="syz.5.3072" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc7bf9f559 code=0x7ffc0000 [ 1044.790969][ T30] audit: type=1326 audit(1793172211.369:4293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17298 comm="syz.5.3072" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc7bf9f559 code=0x7ffc0000 [ 1044.792990][ T30] audit: type=1326 audit(1793172211.369:4294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17298 comm="syz.5.3072" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efc7bf9f559 code=0x7ffc0000 [ 1044.794074][ T30] audit: type=1326 audit(1793172211.369:4295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17298 comm="syz.5.3072" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc7bf9f559 code=0x7ffc0000 [ 1044.794105][ T30] audit: type=1326 audit(1793172211.369:4296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17298 comm="syz.5.3072" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc7bf9f559 code=0x7ffc0000 [ 1044.795410][ T30] audit: type=1326 audit(1793172211.369:4297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17298 comm="syz.5.3072" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc7bf9f559 code=0x7ffc0000 [ 1044.795454][ T30] audit: type=1326 audit(1793172211.369:4298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17298 comm="syz.5.3072" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc7bf9f559 code=0x7ffc0000 [ 1044.795492][ T30] audit: type=1326 audit(1793172211.369:4299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17298 comm="syz.5.3072" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efc7bf9f559 code=0x7ffc0000 [ 1044.795532][ T30] audit: type=1326 audit(1793172211.369:4300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17298 comm="syz.5.3072" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc7bf9f559 code=0x7ffc0000 [ 1044.796257][ T30] audit: type=1326 audit(1793172211.369:4301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17298 comm="syz.5.3072" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efc7bf9f559 code=0x7ffc0000 [ 1044.826409][T17299] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1045.317977][T15825] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1045.494325][T15825] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1045.494379][T15825] usb 6-1: New USB device found: idVendor=0582, idProduct=004c, bcdDevice=0.40 [ 1045.517983][T15825] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1045.558581][T15825] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1045.558601][T15825] usb 6-1: Product: syz [ 1045.558610][T15825] usb 6-1: Manufacturer: syz [ 1045.558624][T15825] usb 6-1: SerialNumber: syz [ 1045.852417][T15825] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1046.037401][T15825] usb 6-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1046.037425][T15825] usb 6-1: found format II with max.bitrate = 4, frame size=7372 [ 1046.364830][T15825] usb 6-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1046.364849][T15825] usb 6-1: found format II with max.bitrate = 4, frame size=7372 [ 1046.540866][ T2248] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1046.608975][T15825] usb 6-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 1046.671724][T17333] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3079'. [ 1046.697515][ T2248] usb 2-1: Using ep0 maxpacket: 8 [ 1046.703543][ T2248] usb 2-1: New USB device found: idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1046.732730][ T2248] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1046.767328][ T2248] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1046.767340][ T2248] pvrusb2: ********** [ 1046.767344][ T2248] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1046.767350][ T2248] pvrusb2: Important functionality might not be entirely working. [ 1046.767355][ T2248] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1046.767369][ T2248] pvrusb2: ********** [ 1046.875131][T15825] usb 6-1: USB disconnect, device number 3 [ 1046.940859][T17334] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3079'. [ 1046.941262][T17333] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3079'. [ 1046.984831][ T2355] pvrusb2: Invalid write control endpoint [ 1046.984849][ T2355] pvrusb2: Device being rendered inoperable [ 1046.984864][ T2355] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1046.984875][ T2355] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1047.075971][T17335] udevd[17335]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1047.207477][T17326] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3076'. [ 1047.352563][T17333] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3079'. [ 1047.883225][ T2248] usb 2-1: USB disconnect, device number 22 [ 1050.342101][T17395] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3093'. [ 1051.957273][T17412] bridge1: entered promiscuous mode [ 1051.977192][T17415] x_tables: unsorted underflow at hook 3 [ 1052.026221][T17415] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1052.066663][T17418] bridge2: entered promiscuous mode [ 1052.867135][T17434] netlink: 'syz.5.3105': attribute type 1 has an invalid length. [ 1052.969526][T17439] ALSA: mixer_oss: invalid OSS volume '' [ 1052.969545][T17439] ALSA: mixer_oss: invalid OSS volume '1' [ 1052.969552][T17439] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1052.969559][T17439] ALSA: mixer_oss: invalid OSS volume '2' [ 1052.969566][T17439] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1052.969572][T17439] ALSA: mixer_oss: invalid OSS volume '3' [ 1052.969579][T17439] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1052.969586][T17439] ALSA: mixer_oss: invalid OSS volume '4' [ 1052.969592][T17439] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1052.969598][T17439] ALSA: mixer_oss: invalid OSS volume '5' [ 1052.969605][T17439] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1052.969611][T17439] ALSA: mixer_oss: invalid OSS volume '6' [ 1052.969618][T17439] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1052.969623][T17439] ALSA: mixer_oss: invalid OSS volume '7' [ 1052.969630][T17439] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1052.969636][T17439] ALSA: mixer_oss: invalid OSS volume '8' [ 1052.969643][T17439] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1052.969649][T17439] ALSA: mixer_oss: invalid OSS volume '9' [ 1052.969655][T17439] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1052.969661][T17439] ALSA: mixer_oss: invalid OSS volume '10' [ 1052.969668][T17439] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1052.969674][T17439] ALSA: mixer_oss: invalid OSS volume '11' [ 1052.969681][T17439] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1052.969687][T17439] ALSA: mixer_oss: invalid OSS volume '12' [ 1052.969694][T17439] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1052.969700][T17439] ALSA: mixer_oss: invalid OSS volume '13' [ 1052.969706][T17439] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1052.969713][T17439] ALSA: mixer_oss: invalid OSS volume '6A0000E0' [ 1052.969719][T17439] ALSA: mixer_oss: invalid OSS volume '14' [ 1052.969725][T17439] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1052.969731][T17439] ALSA: mixer_oss: invalid OSS volume '15' [ 1052.969737][T17439] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1052.969743][T17439] ALSA: mixer_oss: invalid OSS volume '16' [ 1052.969749][T17439] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1052.969755][T17439] ALSA: mixer_oss: invalid OSS volume '17' [ 1052.969762][T17439] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1052.969767][T17439] ALSA: mixer_oss: invalid OSS volume '18' [ 1052.969774][T17439] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1052.969780][T17439] ALSA: mixer_oss: invalid OSS volume '19' [ 1052.969786][T17439] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1052.969792][T17439] ALSA: mixer_oss: invalid OSS volume '20' [ 1052.969798][T17439] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1052.969804][T17439] ALSA: mixer_oss: invalid OSS volume '21' [ 1052.969810][T17439] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1052.969816][T17439] ALSA: mixer_oss: invalid OSS volume '22' [ 1052.969822][T17439] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1052.969829][T17439] ALSA: mixer_oss: invalid OSS volume '23' [ 1052.969835][T17439] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1052.969841][T17439] ALSA: mixer_oss: invalid OSS volume '24' [ 1052.969847][T17439] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1052.969853][T17439] ALSA: mixer_oss: invalid OSS volume '25' [ 1052.969859][T17439] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1052.969865][T17439] ALSA: mixer_oss: invalid OSS volume '26' [ 1052.969872][T17439] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1052.969880][T17439] ALSA: mixer_oss: invalid OSS volume '27' [ 1052.969886][T17439] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1052.969893][T17439] ALSA: mixer_oss: invalid OSS volume '28' [ 1052.969899][T17439] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1052.969905][T17439] ALSA: mixer_oss: invalid OSS volume '29' [ 1052.969911][T17439] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1052.969917][T17439] ALSA: mixer_oss: invalid OSS volume '30' [ 1052.969923][T17439] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1052.969930][T17439] ALSA: mixer_oss: invalid OSS volume '31' [ 1052.969936][T17439] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1052.969942][T17439] ALSA: mixer_oss: invalid OSS volume '32' [ 1052.969948][T17439] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1052.969954][T17439] ALSA: mixer_oss: invalid OSS volume '33' [ 1052.969960][T17439] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1052.969966][T17439] ALSA: mixer_oss: invalid OSS volume '34' [ 1052.969972][T17439] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1052.969979][T17439] ALSA: mixer_oss: invalid OSS volume '35' [ 1052.969985][T17439] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1052.969991][T17439] ALSA: mixer_oss: invalid OSS volume '36' [ 1052.969997][T17439] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1052.970004][T17439] ALSA: mixer_oss: invalid OSS volume '37' [ 1052.970015][T17439] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1052.970026][T17439] ALSA: mixer_oss: invalid OSS volume '38' [ 1052.970038][T17439] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1052.970045][T17439] ALSA: mixer_oss: invalid OSS volume '39' [ 1052.970051][T17439] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1052.970057][T17439] ALSA: mixer_oss: invalid OSS volume '40' [ 1052.970063][T17439] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1052.970070][T17439] ALSA: mixer_oss: invalid OSS volume '41' [ 1052.970076][T17439] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1052.970082][T17439] ALSA: mixer_oss: invalid OSS volume '42' [ 1052.970088][T17439] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1052.970094][T17439] ALSA: mixer_oss: invalid OSS volume '43' [ 1052.970100][T17439] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1052.970106][T17439] ALSA: mixer_oss: invalid OSS volume '44' [ 1052.970113][T17439] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1052.970119][T17439] ALSA: mixer_oss: invalid OSS volume '45' [ 1052.970125][T17439] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1052.970131][T17439] ALSA: mixer_oss: invalid OSS volume '46' [ 1052.970138][T17439] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1052.970144][T17439] ALSA: mixer_oss: invalid OSS volume '47' [ 1052.970150][T17439] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1052.970156][T17439] ALSA: mixer_oss: invalid OSS volume '48' [ 1052.970162][T17439] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1052.970168][T17439] ALSA: mixer_oss: invalid OSS volume '49' [ 1052.970175][T17439] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1052.970181][T17439] ALSA: mixer_oss: invalid OSS volume '50' [ 1052.970187][T17439] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1052.970193][T17439] ALSA: mixer_oss: invalid OSS volume '52' [ 1052.970199][T17439] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1052.970205][T17439] ALSA: mixer_oss: invalid OSS volume '53' [ 1052.970211][T17439] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1052.970217][T17439] ALSA: mixer_oss: invalid OSS volume '54' [ 1052.970224][T17439] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1052.970230][T17439] ALSA: mixer_oss: invalid OSS volume '55' [ 1052.970236][T17439] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1052.970242][T17439] ALSA: mixer_oss: invalid OSS volume '56' [ 1052.970248][T17439] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1052.970254][T17439] ALSA: mixer_oss: invalid OSS volume '57' [ 1052.970261][T17439] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1052.970267][T17439] ALSA: mixer_oss: invalid OSS volume '60' [ 1052.970273][T17439] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1052.970279][T17439] ALSA: mixer_oss: invalid OSS volume '61' [ 1052.970286][T17439] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1052.970292][T17439] ALSA: mixer_oss: invalid OSS volume '62' [ 1052.970298][T17439] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1052.970304][T17439] ALSA: mixer_oss: invalid OSS volume '63' [ 1052.970310][T17439] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1052.970316][T17439] ALSA: mixer_oss: invalid OSS volume '64' [ 1052.970322][T17439] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1052.970328][T17439] ALSA: mixer_oss: invalid OSS volume '65' [ 1052.970334][T17439] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1052.970340][T17439] ALSA: mixer_oss: invalid OSS volume '66' [ 1052.970346][T17439] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1052.970423][T17439] ALSA: mixer_oss: invalid OSS volume '' [ 1053.707913][T17434] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1053.853994][T17440] bond8: (slave gretap6): making interface the new active one [ 1053.880166][T17440] bond8: (slave gretap6): Enslaving as an active interface with an up link [ 1054.559407][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.559444][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.171941][T17463] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3112'. [ 1055.453582][T17425] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3102'. [ 1055.881603][T17468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1055.899970][T17468] 8021q: adding VLAN 0 to HW filter on device team0 [ 1056.456205][T17468] veth1_vlan: left promiscuous mode [ 1056.466149][T17468] veth0_vlan: left promiscuous mode [ 1056.486129][T17468] veth0_vlan: entered promiscuous mode [ 1056.512615][T17468] veth1_vlan: entered promiscuous mode [ 1056.592970][T17468] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1056.606725][T17468] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1056.631433][T17468] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1056.654171][T17468] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1056.685613][T17468] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1056.703703][T17468] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1056.734284][T17468] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1056.750302][T17468] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1056.772412][T17468] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 1056.830453][T15893] bridge0: port 1(bridge_slave_0) entered blocking state [ 1056.830518][T15893] bridge0: port 1(bridge_slave_0) entered listening state [ 1056.860175][T15893] bridge0: port 2(bridge_slave_1) entered blocking state [ 1056.860236][T15893] bridge0: port 2(bridge_slave_1) entered listening state [ 1057.208308][T15893] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.209479][T15893] bond3: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 1057.209737][T15893] bond3: (slave veth3): making interface the new active one [ 1057.274862][T15893] bond3: active interface up! [ 1057.368006][T15880] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.369722][T15882] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.001594][T17506] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 1058.533182][T17505] veth1_macvtap: left promiscuous mode [ 1058.533238][T17505] macsec0: entered allmulticast mode [ 1058.658062][ T8463] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.582764][T17520] vivid-004: ================= START STATUS ================= [ 1060.600873][T17520] vivid-004: RDS Tx I/O Mode: Controls [ 1060.600919][T17520] vivid-004: RDS Program ID: 32904 [ 1060.665978][T17520] vivid-004: RDS Program Type: 3 [ 1060.666007][T17520] vivid-004: RDS PS Name: VIVID-TX [ 1060.666028][T17520] vivid-004: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 1060.667081][T17520] vivid-004: RDS Stereo: true [ 1060.693670][T17520] vivid-004: RDS Artificial Head: false [ 1060.694705][T17520] vivid-004: RDS Compressed: false [ 1060.694724][T17520] vivid-004: RDS Dynamic PTY: false [ 1060.694743][T17520] vivid-004: RDS Traffic Announcement: false [ 1060.694762][T17520] vivid-004: RDS Traffic Program: true [ 1060.696158][T17520] vivid-004: RDS Music: true [ 1060.696181][T17520] vivid-004: ================== END STATUS ================== [ 1061.633813][T17532] deleting an unspecified loop device is not supported. [ 1061.649443][T17532] create_pit_timer: 48 callbacks suppressed [ 1061.649454][T17532] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 1063.783497][T15825] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1063.956483][T15825] usb 6-1: Using ep0 maxpacket: 8 [ 1064.141283][T15825] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1064.141323][T15825] usb 6-1: New USB device found: idVendor=2b73, idProduct=0013, bcdDevice=1.40 [ 1064.173565][T15825] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1064.173593][T15825] usb 6-1: can't read configurations, error -71 [ 1067.092783][T17580] usb usb8: usbfs: process 17580 (syz.1.3138) did not claim interface 0 before use [ 1070.407869][T15825] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1070.579121][T15825] usb 3-1: Using ep0 maxpacket: 8 [ 1070.584730][T15825] usb 3-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1070.585738][T15825] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1070.585753][T15825] usb 3-1: config 0 has no interface number 0 [ 1070.585785][T15825] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1070.585808][T15825] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1070.644490][T15825] usb 3-1: config 0 descriptor?? [ 1070.675280][T15825] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1071.003695][ T8729] usb 3-1: USB disconnect, device number 31 [ 1071.144125][T17613] syz.6.3153 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1071.144153][T17613] CPU: 0 UID: 0 PID: 17613 Comm: syz.6.3153 Tainted: G L syzkaller #0 PREEMPT(full) [ 1071.144169][T17613] Tainted: [L]=SOFTLOCKUP [ 1071.144173][T17613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1071.144180][T17613] Call Trace: [ 1071.144185][T17613] [ 1071.144190][T17613] dump_stack_lvl+0xe8/0x150 [ 1071.144215][T17613] dump_header+0xd3/0x4b0 [ 1071.144232][T17613] oom_kill_process+0x3ab/0x9e0 [ 1071.144251][T17613] out_of_memory+0xfb1/0x13b0 [ 1071.144263][T17613] ? try_charge_memcg+0xc16/0x15f0 [ 1071.144287][T17613] ? __pfx_out_of_memory+0x10/0x10 [ 1071.144299][T17613] ? do_raw_spin_unlock+0xf5/0x200 [ 1071.144317][T17613] try_charge_memcg+0xccc/0x15f0 [ 1071.144341][T17613] ? __pfx_try_charge_memcg+0x10/0x10 [ 1071.144367][T17613] ? charge_memcg+0x47/0x310 [ 1071.144383][T17613] charge_memcg+0x1dd/0x310 [ 1071.144404][T17613] __mem_cgroup_charge+0x25/0x80 [ 1071.144418][T17613] do_pte_missing+0x175b/0x34b0 [ 1071.144443][T17613] handle_mm_fault+0x1a53/0x3750 [ 1071.144465][T17613] ? handle_mm_fault+0xf1/0x3750 [ 1071.144486][T17613] ? __pfx_handle_mm_fault+0x10/0x10 [ 1071.144500][T17613] ? lock_vma_under_rcu+0x45a/0x500 [ 1071.144529][T17613] do_user_addr_fault+0xb35/0x1480 [ 1071.144551][T17613] ? trace_page_fault_user+0x84/0x1e0 [ 1071.144565][T17613] exc_page_fault+0x6a/0xc0 [ 1071.144582][T17613] asm_exc_page_fault+0x26/0x30 [ 1071.144594][T17613] RIP: 0033:0x7fd9e895c704 [ 1071.144606][T17613] Code: 8d 3c 30 4c 89 de 4c 89 54 24 30 e8 66 2c 04 00 4c 8b 54 24 30 85 c0 0f 85 e1 00 00 00 48 8b 44 24 28 48 89 df 4c 89 54 24 30 <4c> 89 93 98 06 00 00 48 89 83 90 06 00 00 48 8d 83 10 03 00 00 4c [ 1071.144615][T17613] RSP: 002b:00007fd9e8d4f9f0 EFLAGS: 00010246 [ 1071.144626][T17613] RAX: 00007fd9e6bd6000 RBX: 00007fd9e6bf66c0 RCX: 00007fd9e899f357 [ 1071.144634][T17613] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007fd9e6bf66c0 [ 1071.144641][T17613] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 1071.144648][T17613] R10: 0000000000021000 R11: 0000000000000206 R12: 00007fd9e8d4fb40 [ 1071.144655][T17613] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 1071.144673][T17613] [ 1071.433185][T17613] memory: usage 8kB, limit 8kB, failcnt 131 [ 1071.433201][T17613] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 1071.433209][T17613] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 1071.433216][T17613] Memory cgroup stats for /syz6/test: [ 1071.433350][T17613] cache 0 [ 1071.433355][T17613] rss 0 [ 1071.433359][T17613] rss_huge 0 [ 1071.433363][T17613] shmem 0 [ 1071.433367][T17613] mapped_file 0 [ 1071.433371][T17613] dirty 0 [ 1071.433374][T17613] writeback 0 [ 1071.433379][T17613] workingset_refault_anon 0 [ 1071.433383][T17613] workingset_refault_file 0 [ 1071.433387][T17613] swap 0 [ 1071.433391][T17613] swapcached 0 [ 1071.433395][T17613] pgpgin 0 [ 1071.433399][T17613] pgpgout 0 [ 1071.433402][T17613] pgfault 8 [ 1071.433406][T17613] pgmajfault 0 [ 1071.433410][T17613] inactive_anon 0 [ 1071.433414][T17613] active_anon 0 [ 1071.433418][T17613] inactive_file 0 [ 1071.433422][T17613] active_file 0 [ 1071.433426][T17613] unevictable 0 [ 1071.433430][T17613] hierarchical_memory_limit 8192 [ 1071.433434][T17613] hierarchical_memsw_limit 9223372036854771712 [ 1071.433439][T17613] total_cache 0 [ 1071.433443][T17613] total_rss 0 [ 1071.433446][T17613] total_rss_huge 0 [ 1071.433450][T17613] total_shmem 0 [ 1071.433454][T17613] total_mapped_file 0 [ 1071.433458][T17613] total_dirty 0 [ 1071.433462][T17613] total_writeback 0 [ 1071.433466][T17613] total_workingset_refault_anon 0 [ 1071.433470][T17613] total_workingset_refault_file 0 [ 1071.433474][T17613] total_swap 0 [ 1071.433478][T17613] total_swapcached 0 [ 1071.433482][T17613] total_pgpgin 0 [ 1071.433486][T17613] total_pgpgout 0 [ 1071.433489][T17613] total_pgfault 8 [ 1071.433493][T17613] total_pgmajfault 0 [ 1071.433497][T17613] total_inactive_anon 0 [ 1071.433502][T17613] total_active_anon 0 [ 1071.433506][T17613] total_inactive_file 0 [ 1071.433510][T17613] total_active_file 0 [ 1071.433514][T17613] total_unevictable 0 [ 1071.433518][T17613] anon_cost 0 [ 1071.433521][T17613] file_cost 0 [ 1071.433526][T17613] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz6,mems_allowed=0-1,oom_memcg=/syz6/test,task_memcg=/syz6/test,task=syz.6.3153,pid=17613,uid=0 [ 1071.435561][T17613] Memory cgroup out of memory: Killed process 17613 (syz.6.3153) total-vm:102412kB, anon-rss:1464kB, file-rss:22804kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 1072.482773][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 1072.483662][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 1073.939158][T17636] [ 1073.941517][T17636] ====================================================== [ 1073.948537][T17636] WARNING: possible circular locking dependency detected [ 1073.955561][T17636] syzkaller #0 Tainted: G L [ 1073.961608][T17636] ------------------------------------------------------ [ 1073.968616][T17636] syz.1.3161/17636 is trying to acquire lock: [ 1073.974685][T17636] ffff88807f7caff0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x101/0xd30 [ 1073.986170][T17636] [ 1073.986170][T17636] but task is already holding lock: [ 1073.993526][T17636] ffff88807f7c8ee0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x24d/0x550 [ 1074.002605][T17636] [ 1074.002605][T17636] which lock already depends on the new lock. [ 1074.002605][T17636] [ 1074.012994][T17636] [ 1074.012994][T17636] the existing dependency chain (in reverse order) is: [ 1074.021996][T17636] [ 1074.021996][T17636] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 1074.029717][T17636] lock_sock_nested+0x41/0x100 [ 1074.035000][T17636] smc_listen_out+0xd4/0x3d0 [ 1074.040171][T17636] smc_listen_work+0x81d/0x1410 [ 1074.045553][T17636] process_scheduled_works+0xc3d/0x1630 [ 1074.051614][T17636] worker_thread+0xa47/0xfb0 [ 1074.056717][T17636] kthread+0x38b/0x480 [ 1074.061295][T17636] ret_from_fork+0x514/0xb70 [ 1074.066390][T17636] ret_from_fork_asm+0x1a/0x30 [ 1074.071666][T17636] [ 1074.071666][T17636] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 1074.081808][T17636] __lock_acquire+0x164c/0x2de0 [ 1074.087173][T17636] lock_acquire+0x115/0x350 [ 1074.092184][T17636] __flush_work+0x7a6/0xd30 [ 1074.097189][T17636] cancel_work_sync+0xb8/0xf0 [ 1074.102379][T17636] smc_clcsock_release+0x60/0xf0 [ 1074.107985][T17636] __smc_release+0x64e/0x7c0 [ 1074.113136][T17636] smc_close_non_accepted+0xd5/0x1f0 [ 1074.119021][T17636] smc_close_active+0xbd8/0x1000 [ 1074.124466][T17636] __smc_release+0x9c/0x7c0 [ 1074.129474][T17636] smc_release+0x2c5/0x550 [ 1074.134393][T17636] __sock_release+0xa0/0x1f0 [ 1074.139575][T17636] sock_close+0x1c/0x30 [ 1074.144235][T17636] __fput+0x408/0xa40 [ 1074.148727][T17636] fput_close_sync+0x11f/0x240 [ 1074.154026][T17636] filp_close_sync+0x6e/0xa0 [ 1074.159123][T17636] __se_sys_close_range+0xa77/0xef0 [ 1074.164828][T17636] do_syscall_64+0x166/0x520 [ 1074.169929][T17636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1074.176346][T17636] [ 1074.176346][T17636] other info that might help us debug this: [ 1074.176346][T17636] [ 1074.186565][T17636] Possible unsafe locking scenario: [ 1074.186565][T17636] [ 1074.194000][T17636] CPU0 CPU1 [ 1074.199407][T17636] ---- ---- [ 1074.204769][T17636] lock(sk_lock-AF_SMC/1); [ 1074.209295][T17636] lock((work_completion)(&new_smc->smc_listen_work)); [ 1074.218738][T17636] lock(sk_lock-AF_SMC/1); [ 1074.225781][T17636] lock((work_completion)(&new_smc->smc_listen_work)); [ 1074.232730][T17636] [ 1074.232730][T17636] *** DEADLOCK *** [ 1074.232730][T17636] [ 1074.240856][T17636] locks held by syz.1.3161/17636: 3, last CPU#0: [ 1074.247182][T17636] #0: ffff888080364d00 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 1074.257713][T17636] #1: ffff88807f7c8ee0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x24d/0x550 [ 1074.267137][T17636] #2: ffffffff8ff5a360 (rcu_read_lock){....}-{1:3}, at: __flush_work+0x101/0xd30 [ 1074.276344][T17636] [ 1074.276344][T17636] stack backtrace: [ 1074.282249][T17636] CPU: 0 UID: 0 PID: 17636 Comm: syz.1.3161 Tainted: G L syzkaller #0 PREEMPT(full) [ 1074.293269][T17636] Tainted: [L]=SOFTLOCKUP [ 1074.297580][T17636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1074.307656][T17636] Call Trace: [ 1074.310923][T17636] [ 1074.313840][T17636] dump_stack_lvl+0xe8/0x150 [ 1074.318437][T17636] print_circular_bug+0x2e2/0x300 [ 1074.323451][T17636] check_noncircular+0x12f/0x150 [ 1074.328378][T17636] __lock_acquire+0x164c/0x2de0 [ 1074.333231][T17636] ? do_raw_spin_unlock+0xf5/0x200 [ 1074.338344][T17636] lock_acquire+0x115/0x350 [ 1074.342829][T17636] ? __flush_work+0x101/0xd30 [ 1074.347495][T17636] ? __flush_work+0x101/0xd30 [ 1074.352158][T17636] __flush_work+0x7a6/0xd30 [ 1074.356655][T17636] ? __flush_work+0x101/0xd30 [ 1074.361329][T17636] ? __flush_work+0x101/0xd30 [ 1074.366000][T17636] ? __pfx___flush_work+0x10/0x10 [ 1074.371013][T17636] ? __pfx_wq_barrier_func+0x10/0x10 [ 1074.376377][T17636] ? cancel_work_sync+0x5a/0xf0 [ 1074.381236][T17636] cancel_work_sync+0xb8/0xf0 [ 1074.385911][T17636] smc_clcsock_release+0x60/0xf0 [ 1074.390884][T17636] __smc_release+0x64e/0x7c0 [ 1074.395472][T17636] smc_close_non_accepted+0xd5/0x1f0 [ 1074.400758][T17636] smc_close_active+0xbd8/0x1000 [ 1074.405698][T17636] ? __pfx_sock_def_readable+0x10/0x10 [ 1074.411161][T17636] __smc_release+0x9c/0x7c0 [ 1074.415659][T17636] ? __local_bh_enable_ip+0xd6/0x140 [ 1074.420944][T17636] smc_release+0x2c5/0x550 [ 1074.425382][T17636] __sock_release+0xa0/0x1f0 [ 1074.429975][T17636] ? __pfx_sock_close+0x10/0x10 [ 1074.434828][T17636] sock_close+0x1c/0x30 [ 1074.438993][T17636] __fput+0x408/0xa40 [ 1074.442973][T17636] fput_close_sync+0x11f/0x240 [ 1074.447734][T17636] ? __pfx_fput_close_sync+0x10/0x10 [ 1074.453045][T17636] filp_close_sync+0x6e/0xa0 [ 1074.457642][T17636] __se_sys_close_range+0xa77/0xef0 [ 1074.463003][T17636] ? __pfx___se_sys_close_range+0x10/0x10 [ 1074.468900][T17636] do_syscall_64+0x166/0x520 [ 1074.473523][T17636] ? trace_irq_disable+0x3b/0x140 [ 1074.478538][T17636] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1074.484592][T17636] ? clear_bhb_loop+0x70/0xc0 [ 1074.489254][T17636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1074.495135][T17636] RIP: 0033:0x7f3df3f9f559 [ 1074.499544][T17636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1074.519135][T17636] RSP: 002b:00007f3df434fba8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1074.527536][T17636] RAX: ffffffffffffffda RBX: 00007f3df4227da0 RCX: 00007f3df3f9f559 [ 1074.535493][T17636] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1074.543449][T17636] RBP: 00007f3df4227da0 R08: 00007f3df4226038 R09: 0000000000000000 [ 1074.551420][T17636] R10: 00000000003ffd7c R11: 0000000000000246 R12: 00000000001063e5 [ 1074.559395][T17636] R13: 00007f3df422609c R14: 000000000010613c R15: 00007f3df434fcb0 [ 1074.567378][T17636] [ 1075.871195][T17640] openvswitch: netlink: Flow actions may not be safe on all matching packets.