last executing test programs: 14m36.618707043s ago: executing program 1 (id=218): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)={0x6c, r1, 0x1, 0x170bd2b, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}, 0xf8}}, {0x20, 0x2, @in6={0xa, 0x0, 0x5, @mcast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}, 0x1, 0x300}, 0x8000) 14m36.316404191s ago: executing program 1 (id=220): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x1000000) r4 = io_uring_setup(0xadc, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x257}) io_uring_enter(r4, 0x2000000, 0x2, 0xf, &(0x7f0000000000)={[0x100000]}, 0x18) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000200)={0x7, {{0xa, 0x0, 0x3, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e24, 0x2, @loopback}}}, 0x10e) 14m34.675018202s ago: executing program 1 (id=229): futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2000000, 0x0) 14m33.553923713s ago: executing program 1 (id=235): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000440)={0x0, &(0x7f0000000040)}) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0), 0x1c401, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r1, 0x800c5011, &(0x7f0000000180)) socket$pppl2tp(0x18, 0x1, 0x1) socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000000d06010300000000000000000500000905000500030000000500010007000000050001"], 0x2c}, 0x1, 0x0, 0x0, 0x4044}, 0x40000) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e040e4220", @ANYRES16], 0x7) fsetxattr$security_capability(r2, &(0x7f0000000080), &(0x7f0000000100)=@v1={0x1000000, [{0x6, 0x20004}]}, 0xc, 0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) r6 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0, 0x0, {r7}}, 0x58) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000200)=0x0) ioctl$TIOCSPGRP(r7, 0x5410, &(0x7f0000000240)=r8) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r9, r9, &(0x7f0000000000)=0x2eb4, 0x2000007ff) close_range(r0, 0xffffffffffffffff, 0x0) 14m32.01909692s ago: executing program 1 (id=239): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f00000003c0)={r0, &(0x7f0000000140)='/dev/dsp\x00', 0x103a02, &(0x7f0000000300)={@_ha_fsid={[0x7f, 0x4]}, {0x1, 0x9adb, 0x2}}, 0xfffffff9, &(0x7f0000000340)={@_ha_fsid}, &(0x7f0000000380)=0x2}) write$P9_RXATTRWALK(r2, &(0x7f0000000480)={0xf, 0x1f, 0x1, 0x2}, 0xf) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000180)=0x200) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(r1, 0x5016, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) capset(&(0x7f0000000500)={0x20071026, r3}, &(0x7f0000000200)={0x200000, 0x200003, 0x801, 0x3, 0x7, 0x4}) write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) write$dsp(r1, &(0x7f0000000200)="dce480febb0ccd0bcb66ade3495e87b440e5afdc984cc06eb1c91c85a7fec04b2f82e267c1edd1543b79d80c0f949073bdbaa464c040e61ea6e658101100101097a5821b6c0c79d177b96995281707ce6d20a6db", 0x54) write$dsp(r1, &(0x7f0000000080)="cd", 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x400, 0x0, 0x3c9}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000280)=@IORING_OP_BIND=@ipv6={0x38, 0x0, 0x0, r4, 0x1c, &(0x7f00000001c0)={{0xa, 0x4ea2, 0x7, @remote, 0x2}}}) io_uring_enter(r5, 0x1fff, 0x2a7e, 0x8, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) listns(&(0x7f0000000180)={0x20, 0x0, 0x5, 0x44000000, 0x0, 0xffffffffffffffff}, &(0x7f0000001fc0)=[0x0], 0x1, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0xc0000100, 0xec000000}]}) r12 = landlock_create_ruleset(&(0x7f0000000080)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r12, 0x8) 14m31.512825867s ago: executing program 1 (id=244): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x8001, @empty, 0x2}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000540)={0x0, 0x1d, "f341bf4808abdb6375705feb03da68e83c0ca41017828429aa3100270e"}, 0x0) 14m30.998764484s ago: executing program 32 (id=244): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x8001, @empty, 0x2}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000540)={0x0, 0x1d, "f341bf4808abdb6375705feb03da68e83c0ca41017828429aa3100270e"}, 0x0) 11m51.171414742s ago: executing program 0 (id=992): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x4000018}, 0x20000000) sched_setattr(0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000001800)='./file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r4, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000200), 0x4) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d80000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa1400040000000000000000000000ffff0a0101020c00028005000100000000003c0002802c00018014000300fc02000000000000000000000000000014000400fe8000000000000000000000000000aa0c0002800500010000000000080007400000000044000f800800034000000006080002400000000108000340000000ce08000240000000030800034058696a8c0800024000000001080001"], 0xd8}, 0x1, 0x0, 0x0, 0x40c1}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00'], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f0000000980)='#\n$)-.\x02\xcc\xd7\xb2f\xcdY\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\n\x13:\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb|&#\xe9\xa3\'\x91>C\x1bV\x87\xeb\xfe\xda\x89\xb7}@\xab%\xf2\x8f\x97\x18\xce\x92\xc9\xa8\x1c\x9d\\C\xfeI%\xae\x8fKHq\x89\x83\xbb\x9dC\xd6H\x80s\xd66y\xfao\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n=/o\xf3\x96\xaf\b1\x1b48\bu\x01\xab\x90Q\xe8r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\xe495\x12B\x06\xe5\x8f\x83Vb\xf1\xbc\xb9E\x1a\x9bH$\x1f^\x9dX\xd0\xca\xcc\xc9\x86\xaa\x90\x9c\xc0\x82\xabE\xcc{\xcd\xd3\xdb\x97\x1e.y\xb0\x9f\x8f\xefv\x9c\xbd%\x84\xbf\"\xd9\xb4Vm\t.\x15\xf1)\xd6\xd8\x1cb\xc5\xd9=c\xb5<|+K*\x9f\x01u\x00\x00\x00\x00\x00', 0xfeffffff00000000) close_range(r6, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x24088000) syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) 11m50.611202293s ago: executing program 0 (id=996): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f00000005c0)=0x18) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e22, @remote}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0x300, 0x4}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x6, 0x20000000}, 0x27}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x88}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(r6, r6) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@mcast2, 0x4e23, 0xfff8, 0x4e24, 0x8, 0xa, 0x0, 0xa0, 0x4, r4, r6}, {0x9, 0x8000000000000000, 0x5, 0x5, 0x5, 0x40, 0x6, 0xc}, {0x8, 0x0, 0x9, 0xd}, 0x6, 0x6e6bb8, 0x2, 0x0, 0x1}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d4, 0xff}, 0x2, @in6=@private1, 0x3506, 0x1, 0x0, 0x10, 0x1, 0x10, 0x5}}, 0xe8) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='cdg', 0x3) close(r1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) ioctl$PPPIOCSFLAGS1(r8, 0x40047459, &(0x7f0000000180)=0x800000) r9 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={0x0, @dev, @loopback}, &(0x7f0000000100)=0xc) bind$xdp(r9, &(0x7f00000003c0)={0x2c, 0x5, r10, 0x6}, 0x10) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYRES16=r7], 0x7c}, 0x1, 0x0, 0x0, 0x5850}, 0x5cc7b281b1f42a74) 11m50.364098726s ago: executing program 0 (id=1000): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) unshare(0x22020600) r1 = syz_open_dev$ndb(0x0, 0x0, 0x2201) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)=[{0x0, 0x224}], 0x1, 0x0, 0x0, 0x2000a014}, 0x8d2b33bcafc19fd1) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = dup(r2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0xa, 0x0, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x2d7) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x5802, 0x294, 0x0, 0x294, 0x388, 0x325, 0x378, 0x388, 0x378, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x43}, [0x0, 0xff], [0xff, 0xffffffff], 'macvtap0\x00', 'macsec0\x00', {0xff}, {0xff}, 0x33}, 0x0, 0x228, 0x250, 0x52020000, {}, [@common=@inet=@hashlimit2={{0x150}, {'gre0\x00', {0x0, 0x8000004, 0x0, 0x20, 0x2, 0xfffffffd, 0x7fbfffff, 0x0, 0x8}, {0x20000000000}}}, @common=@inet=@dccp={{0x30}, {[0x4e21, 0x4e22], [0x4e20, 0x4e24], 0x8, 0x4, 0x4, 0x23}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x7}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @mcast2, [0xffffffff, 0xff, 0xffffff00, 0xff000000], [0x0, 0xff000000, 0xff000000, 0xff000000], 'erspan0\x00', 'veth1\x00', {0xff}, {0xff}, 0x2f, 0xbc, 0x1, 0x14}, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x3, 0x1, 0x0, 'snmp_trap\x00', 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) dup3(r7, r7, 0x0) 11m49.541843217s ago: executing program 0 (id=1006): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x4000018}, 0x20000000) sched_setattr(0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000001800)='./file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r4, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000200), 0x4) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d80000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa1400040000000000000000000000ffff0a0101020c00028005000100000000003c0002802c00018014000300fc02000000000000000000000000000014000400fe8000000000000000000000000000aa0c0002800500010000000000080007400000000044000f800800034000000006080002400000000108000340000000ce08000240000000030800034058696a8c0800024000000001080001"], 0xd8}, 0x1, 0x0, 0x0, 0x40c1}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00'], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f0000000980)='#\n$)-.\x02\xcc\xd7\xb2f\xcdY\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\n\x13:\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb|&#\xe9\xa3\'\x91>C\x1bV\x87\xeb\xfe\xda\x89\xb7}@\xab%\xf2\x8f\x97\x18\xce\x92\xc9\xa8\x1c\x9d\\C\xfeI%\xae\x8fKHq\x89\x83\xbb\x9dC\xd6H\x80s\xd66y\xfao\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n=/o\xf3\x96\xaf\b1\x1b48\bu\x01\xab\x90Q\xe8r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\xe495\x12B\x06\xe5\x8f\x83Vb\xf1\xbc\xb9E\x1a\x9bH$\x1f^\x9dX\xd0\xca\xcc\xc9\x86\xaa\x90\x9c\xc0\x82\xabE\xcc{\xcd\xd3\xdb\x97\x1e.y\xb0\x9f\x8f\xefv\x9c\xbd%\x84\xbf\"\xd9\xb4Vm\t.\x15\xf1)\xd6\xd8\x1cb\xc5\xd9=c\xb5<|+K*\x9f\x01u\x00\x00\x00\x00\x00', 0xfeffffff00000000) close_range(r6, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x24088000) syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) 11m48.991341041s ago: executing program 0 (id=1009): r0 = syz_ublk_setup_io_uring(0x1e, &(0x7f0000000580)={0x0, 0x9f03, 0x80, 0x6, 0x10001d8}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) r8 = dup(r5) syz_ublk_setup_queues(r8, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4f3f, 0x4, 0x2100, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x2000, 0x1000000, 0x19b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0x2, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 11m48.551603866s ago: executing program 0 (id=1012): r0 = syz_io_uring_setup(0x320, &(0x7f0000001280)={0x0, 0xb70f, 0x800, 0x0, 0x800001}, &(0x7f0000000000), &(0x7f0000001180), &(0x7f0000000000)) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000740)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010002000000fcdbdf25310000000c000180080001"], 0x20}}, 0x4000000) r2 = open(&(0x7f0000000040)='.\x00', 0x8c00, 0x0) getdents64(r2, &(0x7f0000000fc0)=""/224, 0xe0) getdents64(r2, &(0x7f0000000fc0)=""/224, 0xe0) mmap$IORING_OFF_SQ_RING(0x0, 0xa, 0xc, 0x11, r2, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2c, &(0x7f0000001300)={0x0, {{0x2, 0x4e23, @remote}}, {{0x2, 0x4e21, @multicast1}}}, 0x108) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000002300)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x3100) r3 = syz_open_procfs(0x0, &(0x7f0000000480)='fdinfo/3\x00') read$eventfd(r3, &(0x7f0000000280), 0x8) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x140) 11m48.059351529s ago: executing program 33 (id=1012): r0 = syz_io_uring_setup(0x320, &(0x7f0000001280)={0x0, 0xb70f, 0x800, 0x0, 0x800001}, &(0x7f0000000000), &(0x7f0000001180), &(0x7f0000000000)) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000740)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010002000000fcdbdf25310000000c000180080001"], 0x20}}, 0x4000000) r2 = open(&(0x7f0000000040)='.\x00', 0x8c00, 0x0) getdents64(r2, &(0x7f0000000fc0)=""/224, 0xe0) getdents64(r2, &(0x7f0000000fc0)=""/224, 0xe0) mmap$IORING_OFF_SQ_RING(0x0, 0xa, 0xc, 0x11, r2, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2c, &(0x7f0000001300)={0x0, {{0x2, 0x4e23, @remote}}, {{0x2, 0x4e21, @multicast1}}}, 0x108) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000002300)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x3100) r3 = syz_open_procfs(0x0, &(0x7f0000000480)='fdinfo/3\x00') read$eventfd(r3, &(0x7f0000000280), 0x8) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x140) 8m24.831332333s ago: executing program 6 (id=1852): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000007c0), 0x60000, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r0, 0xc0186419, 0x0) syz_clone(0x800080, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="a2126a019884dc446cc2") r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) r2 = socket(0xa, 0x3, 0xff) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x518, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x1, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x80, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000780)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=@ipv4_newroute={0x28, 0x18, 0x8, 0x70bd29, 0x25dfdbfe, {0x2, 0x14, 0x10, 0x1a, 0xfc, 0x7, 0xc8, 0x9, 0x1100}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_HOPLIMIT={0x5, 0x4, 0xfc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c084}, 0x4000) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$inet6(r2, &(0x7f0000000000)={&(0x7f0000000140)={0xa, 0xa, 0x4, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@rthdr={{0x28, 0x29, 0x39, {0x29, 0x2, 0x2, 0x6, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}]}}}], 0x28}, 0x922bac8556bdad8e) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000540)="34c2439b7f4362c75683d77ed514a60ff8ad1cf4d5277098b7b49fd3387bcf0130137f9032730e52fb5e7e2d4b1a14bd3fd838b2afe2333fc9c89479f0a74a80845a99a82d169f32691227895391ea87e42766bb0cc79c748dc227b04d24ed0dbf4916368428bfe405a1d855fd5d14053ddd76fcc57626a38956a792c46b3548c44f3ef634c79b7ca2f9eb9a114f220c03a23dbce743b2e1ad6d00a8e3083ec661b2e50fb5821dd4db7251191ede63739cc7bb51e78678a31c997bee06a3", 0xffffffffffffffe0}], 0x1) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000c00000/0x1000)=nil}) ioctl(r5, 0x4048aec9, &(0x7f0000000100)="01") ioctl(r5, 0x4048aec9, &(0x7f0000000200)="0100000000000000ff") r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096231b26e53f07030000002a900683749e821dab8b9236592b0004000093"], 0x0}, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000600)={'gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x8000, 0x8, 0xb, 0x15c, {{0x6, 0x4, 0x0, 0x1, 0x18, 0x67, 0x0, 0x3, 0x4, 0x0, @empty, @private=0xa010100, {[@end]}}}}}) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@ipv4_newroute={0x2c, 0x18, 0x35f32a6dfa748ddd, 0xfffffffc, 0x25dfdbff, {0x2, 0x20, 0x10, 0x0, 0xfd, 0x0, 0xfe, 0x6, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x1}, @RTA_OIF={0x8, 0x4, r9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400a044}, 0x20004090) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$EVIOCSKEYCODE(r7, 0x40084504, &(0x7f00000000c0)=[0x0, 0x20008]) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x802, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r7, 0x4058587a, &(0x7f00000004c0)={{r8, &(0x7f00000003c0)='A\x80z\xd3Zu:\xfe\xe7\xd0L.\x01\xfd', 0x11f080, &(0x7f0000000140)={@align=0xfff, {0x3, 0x200, 0xd, 0x6}}, 0x4, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000280)=0x8}, {[0x7, 0x5, 0x82, 0x7f]}, 0x7f, 0x101, &(0x7f0000000640)=""/257}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r10, 0xc0189371, &(0x7f0000000540)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) 8m23.052108605s ago: executing program 6 (id=1860): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x181) ioctl$HDIO_GETGEO(r3, 0x301, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4, 0x4002, @private0, 0x6}, 0x1c) syz_open_dev$loop(0x0, 0x75f, 0xa382) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000001c0)) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r5, &(0x7f0000000200)='1', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2002, 0x8) write(r6, &(0x7f0000000180)='1', 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r7, &(0x7f0000000280)='0', 0x1) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x1902) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'ipvlan1\x00', {0x2, 0x4e21, @loopback}}) modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0xffffffffffffffff}, 0x10) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 8m22.957998683s ago: executing program 6 (id=1861): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x2, 0xfd00}, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00'}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x48006) recvfrom$inet6(r0, &(0x7f0000000000)=""/31, 0x39, 0x2002, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000080)={0xa, 0x102, 0x4, {0x80800004, 0x1, 0x65, 0x6}}) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000580)) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f00000001c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0xa, 0x3}]}) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f0000000280)=[{0x6, 0x15, 0x0, 0xd}, {0x8, 0xb, 0x8, 0x65}]}) write$ppp(0xffffffffffffffff, &(0x7f0000000200)="1383cf5b", 0x4) ioctl$BLKGETDISKSEQ(r4, 0x80081280, &(0x7f0000000240)) r5 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUMAUDIO(r5, 0xc0345641, &(0x7f0000000040)={0x3, "531220f1326fd72d37a1f266f201f622b2724917a86e2b0545412039dfd6ce47", 0x3, 0x1}) keyctl$reject(0x13, 0x0, 0x7fff, 0xfffffffffffffff3, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="6c6f616420656372799674667320757365723a6e65742f677063002030303030303724d0e2a3d7e2e5b0003193d06ab7090000000000000030303030303038203237373300"], 0x36, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='s', 0x573, 0x800, 0x0, 0x4b6ae4f95a5de35b) 8m22.889004602s ago: executing program 6 (id=1862): mkdir(&(0x7f0000000300)='./file0\x00', 0x2) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) socket(0x2, 0x80805, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x40080c1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="e00000000a060101000000000000000003000009080009408000000109"], 0x13a}, 0x1, 0x0, 0x0, 0x2000c880}, 0x48884) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) set_mempolicy(0x4000, 0x0, 0x7) ptrace$setregs(0xd, r2, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r2, 0x2, &(0x7f0000000380)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000740)={0x0}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x202020, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x89901) move_mount(r3, &(0x7f0000004200)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) pivot_root(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='./file0\x00') mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0xcc831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x6, 0x8, 0x2) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 8m22.711227483s ago: executing program 6 (id=1863): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40042, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYRESDEC=r0, @ANYRES32=0x0, @ANYRESOCT=r0], 0x34}}, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x40) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000001000)}, 0x400000}) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000080)={0x1, 0x1, 0x2}) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000140)=@userptr={0x0, 0x1, 0x400000, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000401000)}, 0x400000}) ioctl$VIDIOC_STREAMON(r3, 0x40045612, &(0x7f00000001c0)=0x2) ioctl$VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000200)=0x1) close_range(r2, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x800, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x80401, 0x0) syz_usb_connect(0x1, 0x24, &(0x7f0000003c80)={{0x12, 0x1, 0x0, 0x94, 0xb6, 0xd9, 0x8, 0x17cc, 0x4711, 0x374c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x4, 0x20, 0x4, "", [{{0x9, 0x4, 0x92, 0x7, 0x0, 0x72, 0x7a, 0x3, 0xef}}]}}]}}, &(0x7f0000004e40)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) socket(0x2d, 0x2, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f00000001c0)={0x0, 0x3, 0x1, 0x8, 0x0, 0xb, 0x0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) socket(0x11, 0x3, 0x0) 8m22.563098856s ago: executing program 6 (id=1865): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x14, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000940)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8m22.279020486s ago: executing program 34 (id=1865): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x14, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000940)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m5.418655387s ago: executing program 4 (id=3088): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x6}, 0x4) r1 = socket$inet(0x2b, 0x801, 0x0) listen(r1, 0x7f) syz_genetlink_get_family_id$tipc2(&(0x7f0000001bc0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000026c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRESOCT=r1, @ANYRESHEX=r1], 0x60}, 0x1, 0x0, 0x0, 0x2000c899}, 0x80) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r2) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000001940)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001900)={&(0x7f0000000700)={0x11d4, r3, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x60000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x68e}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffb70}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb6}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_NODE={0x1014, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x93b9}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}]}, @TIPC_NLA_BEARER={0x70, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x9, @empty, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e20, @broadcast}}}}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}]}, @TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x11d4}, 0x1, 0x0, 0x0, 0x4}, 0x4020) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'nq\x00', 0x1, 0x10000004, 0x8}, 0x2c) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x14, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7d}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x2c, 0x0, &(0x7f0000000200)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) r8 = socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000140)={{0x84, @private=0xa010100, 0x4e21, 0x3, 'none\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x50}, 0x4e22, 0x2, 0x1cb, 0x32d61, 0x12d58}}, 0x44) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x80}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xd0}}, 0x0) r10 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r10, 0xc2604110, &(0x7f0000000040)={0x0, [[0x10, 0x5, 0x0, 0x0, 0x0, 0xfffffffa], [0x40, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x40, 0x2], [0x7f, 0x0, 0x0, 0x0, 0x0, 0x9]], '\x00', [{0x9}, {}, {}, {0x0, 0x2}, {0x1000, 0x0, 0x0, 0x1}, {0x0, 0x3}, {}, {0x3}], '\x00', 0x1000}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x20, r12, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0x6, 0x15}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) sendmsg$sock(r8, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 3m4.285819386s ago: executing program 4 (id=3090): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}}], 0x40000cf, 0x0) writev(0xffffffffffffffff, &(0x7f0000002840)=[{&(0x7f00000001c0)="b400000600", 0x5}], 0x1) syz_open_dev$video(0x0, 0x8, 0x0) 3m3.785674523s ago: executing program 4 (id=3091): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r1, 0x1, 0x10}, 0x14) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x10008882}, 0x44840) 3m3.167271649s ago: executing program 4 (id=3092): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x4000018}, 0x20000000) sched_setattr(0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000001800)='./file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r4, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000200), 0x4) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d80000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa1400040000000000000000000000ffff0a0101020c00028005000100000000003c0002802c00018014000300fc02000000000000000000000000000014000400fe8000000000000000000000000000aa0c0002800500010000000000080007400000000044000f800800034000000006080002400000000108000340000000ce08000240000000030800034058696a8c0800024000000001080001"], 0xd8}, 0x1, 0x0, 0x0, 0x40c1}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000001010101"], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f0000000980)='#\n$)-.\x02\xcc\xd7\xb2f\xcdY\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\n\x13:\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb|&#\xe9\xa3\'\x91>C\x1bV\x87\xeb\xfe\xda\x89\xb7}@\xab%\xf2\x8f\x97\x18\xce\x92\xc9\xa8\x1c\x9d\\C\xfeI%\xae\x8fKHq\x89\x83\xbb\x9dC\xd6H\x80s\xd66y\xfao\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n=/o\xf3\x96\xaf\b1\x1b48\bu\x01\xab\x90Q\xe8r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\xe495\x12B\x06\xe5\x8f\x83Vb\xf1\xbc\xb9E\x1a\x9bH$\x1f^\x9dX\xd0\xca\xcc\xc9\x86\xaa\x90\x9c\xc0\x82\xabE\xcc{\xcd\xd3\xdb\x97\x1e.y\xb0\x9f\x8f\xefv\x9c\xbd%\x84\xbf\"\xd9\xb4Vm\t.\x15\xf1)\xd6\xd8\x1cb\xc5\xd9=c\xb5<|+K*\x9f\x01u\x00\x00\x00\x00\x00', 0xfeffffff00000000) close_range(r6, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x24088000) syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) 3m1.983253295s ago: executing program 4 (id=3096): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000002b00)=ANY=[@ANYBLOB="12011001000000084c052f0400000000000109022400010000000009040000020300000009210000ff012218000905810300000000fe7d44f055c32cd2cced855e76293016cbd2eb9c11f8ad82cd1a161e3b7c43243f710e5c1e4f05c9cbbcddae5742df663c6b57a1379080bcbadd6f1c3002cec6e6ef6910b11c1168f13bc50f0c417810e93b751ce941c22c502e543ba97a8a2a4c03c8dd2f85b0ab369ffed8789f34ac58b186a235275479316949bbf39d33f2c856380f9dd0e1fa9dade321b8768a1b9627ea277cd9b605130b62"], 0x0) r1 = syz_open_dev$dri(&(0x7f0000000380), 0x73d, 0x281) renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x5) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064d0, &(0x7f0000000140)={0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRES16=r1], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2001110000002249135315fbc31ef413ca2cf58f7a1221456f57a73e4e03f8faeddce85a90cea2060fa88f74987bae7979cf2084560bdedf6a7f59b4cc821a63ba508550a5275d472ada2d072e9af17e152209fcb8fdde7c3607955b471a0c0585659ffe60d036f04baca5bcdc04057dcdf9f3e63f29a91189c5109cc619a6c4c805000000"], 0x0}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/power/freeze_filesystems', 0x502, 0x146) r3 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r3) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x44}, 0x48, r3) keyctl$read(0xb, r3, &(0x7f0000001940)=""/4105, 0x1009) ioctl$RTC_WIE_ON(r2, 0x700f) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f0000003ec0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x2, 0xb45, 0x9, 0x0, 0x80000000, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x3f00) r6 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.swap.events\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_SET(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000002ec0)=ANY=[@ANYBLOB="fcbcec91079bc71b7700cc7be5c81f8384fd3cc0786edc1c0f80172464fedea3fff3e255e938beedb5809bd3418322dead6c4668518563cdec4d3d3809cf0c780fbaff29ac5c08f4a7b67262c98acfba10c501a697e2051fbaf691ab2d3d5c8117da09695958ba9ddba85d3736a922e72a6ebed612b81ffc8ef296730b922b2fe0241c4fdfc8efb2d7b4d833ef705dd2b20fca54e82046a92b7902c053d4661da8d49482b6be96e4dfd5fe066ddc1c8b181ee3691d50c0b25302fbdf854e88341d1a2ac8d97e5e147fbec1f67f402daead6e12eb38e68a7c889dd8e2a57f80dda90880e07c37d79fce", @ANYRES16=r5], 0x64}, 0x1, 0x0, 0x0, 0x2000c004}, 0x4000000) r8 = openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff) close(r8) 3m1.632467789s ago: executing program 4 (id=3099): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004e40)=@newchain={0x64, 0x1e, 0x1, 0x0, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x4, 0x1}, {0x10, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x38, 0x2, [@TCA_U32_ACT={0x34, 0x7, [@m_police={0x30, 0x17, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x811}, 0x4044004) 3m0.340534219s ago: executing program 35 (id=3099): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004e40)=@newchain={0x64, 0x1e, 0x1, 0x0, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x4, 0x1}, {0x10, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x38, 0x2, [@TCA_U32_ACT={0x34, 0x7, [@m_police={0x30, 0x17, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x811}, 0x4044004) 7.269199206s ago: executing program 5 (id=3877): sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x17) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket(0xa, 0x3, 0x3a) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000200)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000180)={@hyper}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000005c0)=ANY=[], 0x44}}, 0x800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x600000, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000c400)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000a00)}, {&(0x7f0000000a80)="2242cffaf92c57b02b679d1c2282415c2191be37d4d2480f5a067e593c3a8c2b8409306ff909b3150d01d0ca82dffd1c0ff22eacdf2d644c7204d62a54fdf43e93eba236d522e80c5a72e52cc535dbe363514aa22598795207f474b74733ddc0781a492319a2f3dbcfc05427663d07d92d5ba6b2c213c8e01bba0fe542ed727ca50c446d7f09b7bfae25aca40f4a150c4643c9e9f9050b19760bd57c5d979ef7d9a8b3e510e653d88ff336e83aae60b52c4102aab0558219007a8852781285c68a423f165f26ccd1947d8c4bb6b7", 0xce}], 0x2, &(0x7f0000000880)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64=r5, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r5, @ANYBLOB="0038ba00"], 0x58, 0x4080}}, {{0x0, 0x0, &(0x7f0000005f00), 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1c000000000000000100000002000000bd68a0edee1d07a38a6e23a7b20d00000000000000c34ae59845d71c47fb16a6f9838aa327d8be7f697b61e625b95b17414761adddcdcf68069e6060ad000baed274b297617b3ebba12a85dc9d0a87dbd5a870185122b16b6bbc3bd79d81ee089397fe7beae0923e83922158af170f56ce99317225bf29209a73ca0bb8a83abe625886edcd88472365e7d0d446ba8e6b6bac95e38b5ce36b26ef983ce70f96fe0546805a6fd21067b7994b00d18e512cb82101c91a817219fa4b9118ff2bcb5a5cbe6e17b1d9c4cda1a619ce4115", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000100000001000000", @ANYRES32=r4, @ANYRES16=0x0, @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYRES32=r6, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa0, 0x8000}}], 0x2, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r7, r6, 0x0, 0x1002000ff) r8 = fcntl$dupfd(r7, 0x0, r7) close_range(0xffffffffffffffff, r8, 0x2) ioctl$UI_END_FF_UPLOAD(r8, 0x406855c9, &(0x7f00000003c0)={0xa, 0x6, {0x55, 0x1000, 0x7, {0x2, 0xa}, {0x6920, 0xc1a}, @const={0x8d, {0xf, 0x2, 0x0, 0x8}}}, {0x53, 0x3, 0x1, {0xfff6, 0xd2a}, {0x9, 0x4}, @const={0x2, {0x7, 0x36, 0x1, 0x6}}}}) bind$l2tp6(r8, &(0x7f0000000500)={0xa, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9c47}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106, 0x42f4ef72bc5f97b4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f0000000280)={0x14, 0x88, 0xfa00, {r9, 0x1c, 0x0, @in={0x2, 0x4e22, @broadcast}}}, 0x90) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000100)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000040)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r3, 0x7a5, &(0x7f0000000140)={{@hyper}, 0x1, 0x8}) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x1, r10}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="33330000000100112233445586dd6000000000003b4020010db8000000000000000000000001ff0e"], 0x0) r11 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_buf(r11, 0x29, 0xcc, &(0x7f0000000100)="0a00000000000000fe8000000000000000000000000000bb000000000a00000000000000ff0e000000000000000000000000123400000000000000000200"/92, 0x5c) 6.650410576s ago: executing program 5 (id=3880): socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000040)=0x3f5, 0x4) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$MEMERASE64(r1, 0x40104d14, &(0x7f0000000200)={0x5, 0x9}) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) io_setup(0x7e3b, &(0x7f00000000c0)=0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4810}, 0x8000) io_submit(r3, 0x1, &(0x7f0000000440)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x1, r2, &(0x7f0000000100)="653de841f0", 0x5, 0x8000}]) r4 = memfd_create(&(0x7f0000000480)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\x10s\xb9k\xbd\x96b\xf5\x7f+o\xf0\xe7:\xc4\xb1\xa2\x1c\xffC;\x94Q\xa3\xdfyJ\xa2\xf3F\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\x99I\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x10Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xee\x01\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x00_\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\x93j\xe8\xcfOKC\x0f\xef\x0e\xafe\xb5*\x89\x18\xb2w\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xd1\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xbf\xe8\xb9\x02\xdaYQ<\xf2\xad\xe7\xd3\x95\xf5-,-Lh\xf7H\xd3\x86\x0e\x90\xe4\x18\xa5\xf0?\x11\f=\rk\xaa\x00\xed\x92\xf9\x98\x8e\xde|\xaa\x9a\xf5\x9d\x99Y\x1c\x15\x88O\xb3\x9a\xe3\xb2\x9f\x80/\xf7\xfe\x964\xd2\xf8W1\xc8\\\x16\x87\xf0w\xb4\x04\x05\x92\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8cz\xd1n\x1cl\xf4\x1ai4\xa1\xe3E\xbd\xcci\xbe\xe4! \xfd\x85\a\xab\x82', 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xe, 0x12, r4, 0x0) syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904"], 0x0) 6.215110416s ago: executing program 8 (id=3885): unshare(0x64000600) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) (async) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0x439, 0x0, 0xfffffffe, {0x0, 0x0, 0xe403, 0x0, 0x5280}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @sit={{0x8}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x6, 0x8, 0x19}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @private=0xa010100}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e22}, @IFLA_IPTUN_PMTUDISC={0x5}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x3596}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000844}, 0x8880) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newchain={0x34, 0x64, 0x800, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x5, 0xffff}, {0x7, 0x7}, {0x4, 0x4}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x3}}, @TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 5.777717952s ago: executing program 5 (id=3887): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[], 0x9}, 0x218}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000580)="9d", 0x1}], 0x1, &(0x7f0000003880)=[{0x10, 0x1, 0x5}], 0x10}}], 0x2, 0x4040084) 5.467368788s ago: executing program 5 (id=3889): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001700)=ANY=[@ANYBLOB="38000000100003042bbd7000fedbdf2500000300", @ANYRES32=0x0, @ANYBLOB="21100000000000001800080002800400100000000000000000000000000000a0867ca166d60a5f2d0436f76df19f858aaea40f809b784ad1efd6620b027957b2359800000d74bcf99985c0f2a1f1c728595fcb284d5dca70a45d39bf44a4ba9ce6"], 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x20000814) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r0, r0, 0x0, 0x2020000005) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x0, 0x1429, 0x400, 0x1, 0x15}, &(0x7f0000000400)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc748, 0x6f8cb3653bd65dc1, 0x0, 0x2bc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd9b7, 0x400, 0x1, 0x296}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa164, 0x4, 0x3, 0x397}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa4df, 0x800, 0x1, 0x3b3}, 0xffffffffffffffff}], 0x4, &(0x7f0000001680)={0x2e, 0x0, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x1}, 0x0, 0x0, '\x00', {0x2000, 0xa5e, 0x0, &(0x7f0000000680)=@buf_4k="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"}}, &(0x7f0000000240)) r4 = io_uring_setup(0x8, &(0x7f00000001c0)={0x0, 0x0, 0x1000, 0x0, 0x17b, 0x0, r3}) io_uring_register$IORING_REGISTER_NAPI(r4, 0x1b, &(0x7f0000000080)={0x3e8, 0x0, 0x0, '\x00', 0x1}, 0x1) io_uring_register$IORING_REGISTER_NAPI(r4, 0x1b, &(0x7f0000000100)={0x100, 0x0, 0x1, '\x00', 0xa}, 0x1) io_uring_enter(r4, 0x0, 0x3f, 0x9, &(0x7f0000000180), 0x18) r5 = userfaultfd(0x80001) mmap(&(0x7f000010d000/0x4000)=nil, 0x4000, 0x200000b, 0x50, 0xffffffffffffffff, 0x1e964000) ioctl$UFFDIO_UNREGISTER(r5, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x98}) ioctl$UFFDIO_WAKE(r5, 0x8010aa02, &(0x7f00000003c0)={&(0x7f0000000000/0x800000)=nil, 0x800000}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x1d, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x0, 0x4}, 0x4}}, 0x10) 4.611643876s ago: executing program 8 (id=3890): sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x17) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket(0xa, 0x3, 0x3a) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000200)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000180)={@hyper}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000005c0)=ANY=[], 0x44}}, 0x800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x600000, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000c400)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000a00)}, {&(0x7f0000000a80)="2242cffaf92c57b02b679d1c2282415c2191be37d4d2480f5a067e593c3a8c2b8409306ff909b3150d01d0ca82dffd1c0ff22eacdf2d644c7204d62a54fdf43e93eba236d522e80c5a72e52cc535dbe363514aa22598795207f474b74733ddc0781a492319a2f3dbcfc05427663d07d92d5ba6b2c213c8e01bba0fe542ed727ca50c446d7f09b7bfae25aca40f4a150c4643c9e9f9050b19760bd57c5d979ef7d9a8b3e510e653d88ff336e83aae60b52c4102aab0558219007a8852781285c68a423f165f26ccd1947d8c4bb6b7", 0xce}], 0x2, &(0x7f0000000880)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64=r5, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r5, @ANYBLOB="0038ba00"], 0x58, 0x4080}}, {{0x0, 0x0, &(0x7f0000005f00), 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1c000000000000000100000002000000bd68a0edee1d07a38a6e23a7b20d00000000000000c34ae59845d71c47fb16a6f9838aa327d8be7f697b61e625b95b17414761adddcdcf68069e6060ad000baed274b297617b3ebba12a85dc9d0a87dbd5a870185122b16b6bbc3bd79d81ee089397fe7beae0923e83922158af170f56ce99317225bf29209a73ca0bb8a83abe625886edcd88472365e7d0d446ba8e6b6bac95e38b5ce36b26ef983ce70f96fe0546805a6fd21067b7994b00d18e512cb82101c91a817219fa4b9118ff2bcb5a5cbe6e17b1d9c4cda1a619ce4115", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000100000001000000", @ANYRES32=r4, @ANYRES16=0x0, @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYRES32=r6, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa0, 0x8000}}], 0x2, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r7, r6, 0x0, 0x1002000ff) r8 = fcntl$dupfd(r7, 0x0, r7) close_range(0xffffffffffffffff, r8, 0x2) ioctl$UI_END_FF_UPLOAD(r8, 0x406855c9, &(0x7f00000003c0)={0xa, 0x6, {0x55, 0x1000, 0x7, {0x2, 0xa}, {0x6920, 0xc1a}, @const={0x8d, {0xf, 0x2, 0x0, 0x8}}}, {0x53, 0x3, 0x1, {0xfff6, 0xd2a}, {0x9, 0x4}, @const={0x2, {0x7, 0x36, 0x1, 0x6}}}}) bind$l2tp6(r8, &(0x7f0000000500)={0xa, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9c47}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106, 0x42f4ef72bc5f97b4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f0000000280)={0x14, 0x88, 0xfa00, {r9, 0x1c, 0x0, @in={0x2, 0x4e22, @broadcast}}}, 0x90) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000100)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000040)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r3, 0x7a5, &(0x7f0000000140)={{@hyper}, 0x1, 0x8}) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x1, r10}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="33330000000100112233445586dd6000000000003b4020010db8000000000000000000000001ff0e"], 0x0) r11 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_buf(r11, 0x29, 0xcc, &(0x7f0000000100)="0a00000000000000fe8000000000000000000000000000bb000000000a00000000000000ff0e000000000000000000000000123400000000000000000200"/92, 0x5c) 4.375180958s ago: executing program 7 (id=3891): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@tclass={{0x14, 0x29, 0x43, 0x1ff}}], 0x18}, 0x40) 4.174823494s ago: executing program 2 (id=3893): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/24, 0x18) r1 = accept(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x40, 0x1405, 0x400, 0x70bd2d, 0x10, "", [{{0x8}, {0x8}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x2}, {0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x100) 4.079435379s ago: executing program 7 (id=3894): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000ffdbdf253500000008000300"], 0x3c}}, 0x22044804) 3.927194995s ago: executing program 3 (id=3895): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @loopback, 0x10000bff}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8ed50f638facd57de629163"}, 0x8000000000000001, 0x2, 0x3}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r2, 0x4734}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r2}}, 0x18) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x1, 0xc0, 0x10, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x30, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x10000}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x9, 0xd4, 0x84, {0xa, 0x25, 0x25, 0x0, 0x1, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x210, 0xfc, 0xa, 0x2, {0xa, 0x25, 0x25, 0x80000000, 0x5, 0x9}}}}}}}}]}}, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000180)={0xa, @pix_mp={0x0, 0x407, 0x32314d4e, 0x7, 0x0, [{0x0, 0xfffffffe}, {0x0, 0x10}, {0x4}, {}, {}, {0x5, 0x4}, {0x0, 0x1411}], 0x4e, 0x38, 0x6}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r5, @ANYBLOB="101000000000000008000d7fff000000e4031680e00301800c00070000", @ANYRES32=r5, @ANYBLOB="eb91"], 0x40c}}, 0x0) 3.797562554s ago: executing program 5 (id=3896): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = socket(0x2, 0x80805, 0x0) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) r1 = socket$inet(0x2, 0x80001, 0x84) close(0x3) socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x8, 0x1, 0x200, 0x3, 0x2, 0x7ff, 0xfff, 0x6e4c8f, r3}, 0x20) 3.708360713s ago: executing program 2 (id=3897): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000008c0)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14140e05251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x3e}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_open_dev$loop(&(0x7f0000000200), 0x5, 0x86100) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000005c0)={r4, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1c, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f00", "90be8b1c5512406c7f00", [0x4, 0xa]}}) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x20048841) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r5, 0x0, 0x31, 0x0, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x40240) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000001280)={r3, 0x0, {0x2a12, 0x80010000, 0x0, 0xffff, 0x4, 0x0, 0x0, 0xe, 0x14, "fee8a2ab78fc179fd1f809000000aca7ca64c6a4b4e00d9683dda1af01000000deff1200100000000000000000000000000800", "2809e8dbe1b22d0000b420a1a93c7540f476779e0117613dd4070000ebff08000000000000000000020000000800000000faffffff00", "e7460000102000000000e4440000002000000000000000000000008bd02800", [0xde, 0x8000]}}) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r3) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x25}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f0000000100)) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r7, 0x4008af25, 0x0) 3.682363196s ago: executing program 5 (id=3898): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[], 0xac}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r5, &(0x7f00000000c0)=ANY=[], 0xffffff6a) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r6, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r4, r8, 0xfffffffffffffc01, 0x0) tee(r4, r8, 0x60000000000, 0x8) read$FUSE(r7, &(0x7f0000001080)={0x2020}, 0x2020) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x1d, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280) sendmsg$BATADV_CMD_GET_NEIGHBORS(r8, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)={0x24, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x78c}]}, 0x24}, 0x1, 0x0, 0x0, 0x890}, 0x20000080) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc0009058502"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r10 = memfd_create(&(0x7f0000000680)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\v\xf5-\xa1\xa8\xf0\xe0g#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xcd\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81', 0x0) fsetxattr(r10, &(0x7f0000000280)=@known='user.incfs.size\x00', 0x0, 0x0, 0x0) fgetxattr(r10, &(0x7f0000000040)=@known='user.incfs.size\x00', 0x0, 0xde) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x6, 0x6, 0x2) r12 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000000380)={'lo\x00', &(0x7f0000000280)=@ethtool_eeprom={0x48, 0x80000001, 0x10001}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000600)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000500)="c96dc46e1494817cc9868c9f5fdac55a20b5a646d546fd690dd1a314e77d9afbd0abb1a8e92ca718ddcbccd8074f5a47fee69354d307a64be4d4ed0d690592aa19bcf56cca26a8a0c244feec27f5f662724123beae7532303eedf8c918da10d9b60f0e3960f0e8060820a18b1118039f066e94f9d8a313beb8c4cb82d041", 0x7e, r2}, 0x68) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r11, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x10) 3.680899447s ago: executing program 7 (id=3899): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x14) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x0, 0x111, 0x4b4, 0x130, 0xd4feffff, 0x270, 0x20a, 0x278, 0x270, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @remote, [], [0x0, 0x0, 0x0, 0xffffff00], 'dvmrp0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x4e20, 0x4e23], [0x4e20, 0x4e22], 0x3, 0x8, 0x80, 0x7}}, @common=@inet=@tcp={{0x30}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@ipv6header={{0x28}}, @common=@ipv6header={{0x28}, {0x4, 0x11, 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x8ba4, 0x0, 0x80000001, '\x00', {0x10000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000040)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000340)=0x8000, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f00000000c0)={'syzkaller1\x00'}) 3.591125592s ago: executing program 8 (id=3900): socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x230, 0x0, 0xa, 0x148, 0xe8, 0x60, 0x1c0, 0x2a8, 0x2a8, 0x1c0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x98, 0xc0, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@ecn={{0x28}, {0x33, 0x31, 0x4, 0x2}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x100, 0xce3e}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x8, 0x4, 0x1, 0xd8cb, 'netbios-ns\x00', 'syz1\x00', {0xa000000000000000}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x290) r0 = syz_io_uring_setup(0x29d7, &(0x7f0000000540)={0x0, 0x8550, 0xc00, 0x1, 0xf}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_WAITID={0x32, 0x51, 0x0, 0x7, &(0x7f0000000780)={0x10, 0x8, 0xa}, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}}) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001580)={0x48, 0x2, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x17}}]}]}, 0x48}}, 0x8000) io_uring_enter(r0, 0x1, 0x1, 0x61, 0x0, 0x0) r6 = syz_pidfd_open(r4, 0x0) process_mrelease(r6, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_ublk_setup_io_uring(0x20, 0x0, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r8, r9, &(0x7f0000000980)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r7, 0x0, 0x0, 0x0, 0x40000000}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'netdevsim0\x00'}) r10 = io_uring_setup(0x1195, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r10, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0xfffff000, 0x7, 0x0, &(0x7f0000000300)="882f1242a03c3f", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r11, &(0x7f0000000080)='syz0\x00', 0x1ff) openat$cgroup(r11, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) 3.489954389s ago: executing program 2 (id=3901): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x31, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00') r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000280)=""/256, 0x100}, {&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f0000000140)=""/36, 0x24}, {&(0x7f00000018c0)=""/162, 0xa2}], 0x4}, 0x60}, {{0x0, 0x0, 0x0}, 0x100040}], 0x2, 0x22, 0x0) sendmmsg$inet6(r2, &(0x7f0000000e40)=[{{&(0x7f0000000240)={0xa, 0x4e1f, 0x61, @private0, 0x3}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}], 0x1, 0x931766f6319eed40) r4 = openat(0xffffffffffffffff, 0x0, 0x0, 0xbf) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c00"], 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00'}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00"], 0x30}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0xd, 0x401d031, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000200)={r6, r6, r6}, &(0x7f0000000040)=""/59, 0x3b, &(0x7f0000000000)={&(0x7f0000000280)={'wp384\x00'}}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x10) shutdown(r2, 0x1) write$binfmt_script(r4, &(0x7f0000019140)={'#! ', '', [{0x20, '^'}, {0x20, '/dev/kvm\x00'}, {0x20, '\x00'}], 0xa, "1fe8be24fabdf31e2a332b77af90429943aad6e546709557f6036fc152ee3b82ef7341eac87f889e961fe56442efe8ed395775bfc64ba99759895814d47b4dda2e889216a238f796d816ec66e1476aede39e4ed0fa9e7785f26f699b6c20d87c10bc9d96a3567d383e27c7af9341ca66ddf4bf6bb91e5f9b2126ca6154758917291cd25e7bf2bdd9d8ba6e9b8069c532d554d1defe31790dacf066062d61dba75ca6daf7f9080110c4b04f807f1d00a175a8a21cab13b5adea8d1c409f9a3653b5d3b76ebe37ae81e6"}, 0xdb) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt(r8, 0x8, 0x80, &(0x7f0000000040)="00001e00000823fcf86fe1f49745d9a102", 0x10005) pread64(r1, &(0x7f0000000080)=""/102356, 0x18fd4, 0x1c) 3.112911387s ago: executing program 8 (id=3902): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_mount_image$fuse(&(0x7f0000000100), &(0x7f0000000180)='./file0\x00', 0x20000, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x3, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = socket$unix(0x1, 0x5, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc05, {0x0, 0x0, 0x0, r11, {0x0, 0xfff3}, {0xffff, 0xb}, {0x4, 0x4}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x1}}]}, 0x40}}, 0x4894) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xc, 0xfffc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x8001, 0x5, 0xfffffdff, 0x4006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0x9, 0x8, 0x96, 0xb, 0x9}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r13 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r13, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',']) syz_mount_image$fuse(0x0, 0x0, 0x80000, 0x0, 0x1, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x81001) 2.711205696s ago: executing program 7 (id=3903): syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) syz_open_dev$dvb_frontend(0x0, 0x0, 0x882) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000140)={0xf123, 0x30383653, 0x3, @discrete={0x2, 0x8}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0xc2, 0x2c9, 0x32314752, 0x0, 0x100000ff, 0xc, 0x0, 0x6, 0x1, 0x6, 0x2, 0x3}}) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x1, 0x2242) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r4) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRESOCT=r4, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@deltaction={0x1d8, 0x31, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x48, 0x1, [{0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffb}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf207}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x400}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @TCA_ACT_TAB={0x54, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xba}}]}, @TCA_ACT_TAB={0x60, 0x1, [{0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4b3}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @TCA_ACT_TAB={0x54, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x14, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x40054}, 0x4804) lseek(r1, 0x952e, 0x3) sched_setattr(0x0, &(0x7f0000000100)={0xffdb, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x100000000000009, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = eventfd2(0xe5c, 0x80000) r9 = eventfd2(0x42000006, 0x801) ioctl$KVM_IRQFD(r7, 0x4020ae76, &(0x7f0000000240)={r9, 0x3, 0x2, r8}) ioctl$KVM_IRQFD(r7, 0x4020ae76, &(0x7f0000000080)={r8, 0x1, 0x2, r9}) ioctl$KVM_IRQFD(r7, 0x4020ae76, &(0x7f0000000000)={r9, 0x7, 0x1}) memfd_create(&(0x7f0000000480)='\xecO\xdd\xbd\xfc\xfa\xe1\xea\xea\x00\xb0\xd8Y\x03\x00\x00\x00\x00\x00\x00\x7f.\x14\x89|cW\x11\x0e$]7\x99\x11\xfd\xbe/6&\xe6\x97\x1e\xfbon\'\x0f<;\xbe\xa5`\"E]\xda]\xb9\xeb>\xe9\xf2\x99\xa8\xbeOA\xf8\\\xeb[\xd7:{\r\x91.\xdbxn\x1b\x17\xccMz\x1dc\x1d5\x9fe/\xb7k}\xd7\xa6\xd1\xcf\x1f\xf3\xae\x9e\xd6\x040\x19\x88\xa7:OYw\xfe\xaf\xdf\x16\x88\xfe\xd3\x13\x9f!\xd7\xcf\x86\x9f\xe8)\x01\x01\x00\x00\x06^\xb4', 0x0) 2.519752922s ago: executing program 2 (id=3904): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000000440)={&(0x7f00000002c0)={0xa, 0x4e24, 0x5, @mcast2, 0x7}, 0x1c, 0x0}, 0x40) 2.451802979s ago: executing program 2 (id=3905): recvmmsg(0xffffffffffffffff, &(0x7f0000007280)=[{{0x0, 0x0, 0x0}, 0xe9}, {{0x0, 0x0, 0x0}, 0x20e8bd}], 0x2, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r2, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="033f000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000240)={0x0, 'veth1_virt_wifi\x00', {0x2}, 0x10}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) timerfd_create(0x0, 0x80800) ioctl$KVM_SET_XSAVE(r3, 0x5000aea5, &(0x7f00000005c0)={[0x4, 0x3, 0xfffffffd, 0x1, 0x1506, 0x4, 0x2, 0x9, 0x4, 0x10001, 0x0, 0x44e8, 0x0, 0x4, 0x38, 0x200, 0x0, 0xea03, 0x200, 0x9, 0x2b9f, 0x0, 0x7, 0x0, 0x2, 0xf61, 0x4, 0xca8b, 0x9, 0x0, 0x8, 0x410, 0x0, 0x491, 0x1, 0x0, 0x80000001, 0x9, 0x3, 0x7ff, 0xffffffff, 0x101, 0xf2, 0x2, 0xb669, 0x7, 0x7, 0xaf, 0x3, 0x6, 0x5, 0x0, 0x10000, 0x9, 0xffffffff, 0xc, 0x3, 0xffff, 0x5, 0xff, 0x5, 0x7, 0xfffffff5, 0x1, 0x850, 0x433, 0x7, 0x5, 0xa, 0x7, 0xf, 0x6, 0x6, 0x4, 0x6, 0x8, 0xfff, 0x4, 0x7, 0x3, 0x7f, 0x9, 0x100, 0x8, 0x7, 0xef56, 0x3a, 0x4, 0x400, 0x6, 0x0, 0x4, 0x9, 0xabb, 0x6, 0xb, 0x3, 0x0, 0xfff, 0x149f, 0x3, 0x3, 0x400000, 0xf, 0x2, 0x10, 0x6554e51e, 0x5, 0x0, 0x4, 0xff, 0x8, 0x77b, 0x263, 0x0, 0xf3b000, 0x8, 0x1, 0x85, 0x147, 0x7, 0x0, 0x2, 0x0, 0x7fff, 0x81, 0x7, 0x15e, 0x9, 0x7e1, 0x3, 0x8, 0x100, 0xfffffffa, 0xf, 0x10, 0x2, 0x5, 0xf, 0x7, 0x0, 0xa, 0x2, 0xffff, 0x0, 0x400, 0x3, 0x7, 0x171, 0x3, 0x7fffffff, 0xa, 0x6, 0x8, 0x7, 0x400, 0x697, 0x6, 0xfffeffff, 0x7, 0xf, 0x3, 0x3, 0x7, 0x1000, 0xfe, 0x7, 0x101, 0x7, 0x800, 0x82a, 0xffffcee8, 0x5, 0x7, 0x9, 0x6, 0xd4, 0x3, 0x9, 0x62, 0x4, 0x9, 0xa3, 0x3, 0x8, 0x9, 0x3, 0x0, 0xc, 0xe66551b3, 0x3, 0x4, 0x4, 0x9, 0x6d179704, 0x4, 0x6, 0x3, 0x4, 0x1, 0x6, 0x11d7e712, 0x1, 0xd, 0x5, 0x5, 0x7, 0xb84, 0x1, 0xfffffffc, 0x101, 0x2, 0xffffffff, 0x2, 0x5, 0x401, 0x0, 0xffff, 0x9, 0x6, 0x8001, 0x3, 0x1, 0x5, 0x3, 0x0, 0xa, 0x3, 0x0, 0x2, 0xfd7, 0x9, 0x6, 0x5, 0xd, 0xf, 0x1, 0x7, 0x7fff, 0x8, 0x10001, 0x8000, 0x8, 0x800, 0x0, 0x4, 0xd, 0xce, 0x6, 0x800, 0x2, 0x8, 0x7, 0x6, 0x5, 0x100, 0x9, 0xa64, 0x2, 0xcf5, 0x7, 0x7, 0xd430, 0xab59, 0x0, 0x7f, 0x101, 0x3af3, 0x4, 0x8000, 0x101, 0x5, 0x9, 0xf, 0xc, 0xb, 0x3, 0x9, 0x8, 0x6, 0xf819, 0x9, 0x0, 0x9, 0x1, 0x2, 0x0, 0x4, 0x0, 0x3, 0x9, 0x7, 0x8, 0x8, 0x5, 0x400, 0x5, 0x7ff, 0x6, 0x7, 0x7, 0x5, 0x1, 0xdf, 0x4, 0x7, 0x9, 0x8, 0x10001, 0x9, 0x4, 0x8, 0x0, 0x5d800000, 0x4, 0xd, 0x81, 0x927a, 0x9, 0x3ff, 0x8, 0x8, 0x3c, 0x40, 0x8, 0x1, 0x1, 0x2, 0x3, 0x7, 0x8, 0x1000, 0x10000, 0x3, 0x401, 0x0, 0x400, 0x3e, 0x8001, 0x2, 0x29, 0x3, 0x7f, 0x81, 0x0, 0x3, 0x30, 0x8, 0x51, 0x8, 0x6, 0x2, 0x3869ba35, 0x3800000, 0xbd0d, 0x0, 0x5, 0xd31, 0x6, 0x2, 0x7, 0x1, 0x70baf11b, 0x8001, 0x0, 0xb, 0x5, 0x1000, 0x3, 0x681f, 0x1, 0xc, 0x9, 0x2, 0x8, 0xfff, 0xffffff01, 0x9, 0x7fffffff, 0x1, 0x9, 0x800, 0xfff, 0x7, 0x7, 0xfffffff9, 0x0, 0xffff, 0x80000000, 0x40, 0xe8c4, 0x5, 0x8, 0x1ff, 0x401, 0x7, 0x0, 0x8, 0x0, 0x71c5676c, 0x4, 0xfff, 0x28000000, 0xda, 0xcd, 0x69, 0x7, 0x9, 0x7b97, 0x10001, 0x529d, 0x10001, 0x0, 0x7, 0x8, 0x1, 0x5, 0x3, 0xa90b, 0x1, 0x3, 0xf, 0x52b, 0x8, 0x3, 0x8, 0x9fcd, 0x8, 0x9, 0xcb, 0x9, 0x1, 0x7, 0x1, 0xffffffff, 0xf, 0x9, 0x1, 0x0, 0x1000, 0x1, 0x7, 0x400, 0x40, 0x6, 0x607, 0x10001, 0xffffffff, 0x9, 0x7, 0x8, 0x7, 0x9, 0x6, 0xc0, 0x5, 0x40, 0x1, 0xd4010000, 0x200, 0x2, 0x1, 0x8001, 0x0, 0x2, 0x4be28601, 0x5, 0xf, 0x385f, 0x1, 0x2, 0x5, 0x100, 0x1, 0x4296, 0x7f, 0x2, 0x100, 0x1, 0x2, 0x4, 0x4, 0xe4, 0x40, 0x6, 0x9e, 0x0, 0x5, 0x3, 0x2b, 0x81, 0x7ff, 0xad89, 0x4, 0x45, 0x7, 0x2, 0x7, 0x5, 0x5, 0x4, 0x0, 0x4, 0x940, 0x1, 0x2, 0x8, 0x6, 0xd9, 0x800, 0x100, 0x75, 0x81, 0x6, 0x71e, 0x4, 0x5, 0x0, 0xd, 0x7, 0x8, 0xd, 0x8001, 0x9, 0x2, 0x7, 0xa66, 0x52189e72, 0x37, 0x7, 0x72, 0x100, 0x64c, 0xa9a, 0x7, 0xfffffffa, 0xfffffff7, 0x25, 0x4d, 0x1, 0x4, 0x1, 0x80000001, 0x6, 0xbd, 0x7c, 0x1, 0xfff, 0xfffff817, 0x0, 0x5, 0x3, 0x64af, 0xffffffff, 0x1, 0x10001, 0xff, 0x7, 0x6e, 0x7, 0x8, 0x2, 0x7, 0x92, 0x3, 0xff, 0x1, 0x63, 0x80000001, 0x4d7, 0x4, 0x4, 0xfffffffe, 0x799, 0xfffffffd, 0x571e5907, 0x5, 0x6, 0x6fad, 0x2, 0x3, 0x2, 0x3, 0x5, 0x5, 0x2, 0x80000001, 0x2, 0x401, 0x3, 0xffffffff, 0x6, 0x2, 0x624, 0x0, 0x3, 0xa19a, 0x5, 0x6, 0x9, 0xf9c, 0x9, 0x20, 0x9, 0xfffffffc, 0x7, 0x5, 0x5, 0x10, 0x1, 0x1e2, 0x4, 0x2, 0x3, 0x20000000, 0xb, 0x6, 0x1200000, 0x6, 0x401, 0xdfad, 0x2, 0x7, 0x2, 0xe69f, 0x9afc, 0x374, 0x400, 0x2, 0x3, 0x4, 0x7, 0x0, 0x2, 0x1, 0x42a5, 0x1, 0x80000000, 0x3, 0x6, 0x8, 0x3, 0x6, 0x400, 0x0, 0x5, 0xfffffff6, 0x3, 0x5, 0xc, 0xc000000, 0x6, 0x7, 0x0, 0xe8, 0x0, 0x6f85, 0xc, 0x7, 0x0, 0xf5, 0xfffffffb, 0x8, 0x5, 0x5, 0x800, 0xb141, 0x40b, 0x5, 0x9, 0x1, 0x9, 0x2, 0x4, 0x1, 0x0, 0x5, 0x0, 0xd82, 0x4, 0x1, 0x5, 0x3, 0xfffff800, 0x8, 0x1, 0x8, 0x0, 0x9, 0x10, 0x3, 0x10, 0x8001, 0x154a, 0x7f, 0x400, 0x1, 0x5f6, 0x6, 0x1ff, 0xeb, 0x7fff, 0x73, 0x5, 0x7, 0x800, 0x7, 0x6, 0x0, 0x6, 0x8, 0x20e4, 0x200, 0xf, 0x9, 0x8, 0x93d, 0x1, 0x1, 0x8, 0xef1, 0x3, 0x6, 0xfc, 0x2, 0xe8, 0x465a, 0x1, 0x4, 0x963, 0x1, 0x8, 0xe, 0x1, 0x100, 0x188f, 0x56, 0x7fffffff, 0x5, 0x3, 0x5, 0x1, 0x8, 0x0, 0x221aa277, 0x2, 0xdd, 0x0, 0x1a1bd922, 0xfc6, 0x3, 0x4, 0x9, 0x7, 0x2, 0x4, 0x30, 0x1, 0xeeff, 0x5, 0x6, 0x7, 0x7, 0xd64a, 0x1, 0x2, 0xffffffff, 0x1, 0x9, 0xffffffff, 0x6, 0x7, 0x4, 0x36, 0x7, 0x1000, 0x10001, 0x3, 0x8, 0x7, 0x41, 0x4, 0x8, 0x5, 0x0, 0x8, 0x939f, 0x9, 0x4, 0x1, 0x5, 0x3, 0x101, 0x2, 0x7, 0x8, 0x9, 0x1, 0x2, 0x62, 0x3, 0x2, 0x6, 0x8000, 0xc, 0x6, 0x80000000, 0x8, 0x1, 0x80, 0x0, 0x8, 0x3ff, 0xfff, 0xf, 0x0, 0x7, 0x9, 0x9, 0x6, 0x1ff, 0x9, 0x8001, 0x1ff, 0x6, 0x2, 0x39, 0x3, 0xd, 0x6, 0x2, 0xa, 0x3, 0x2, 0xdde000, 0x8, 0xff, 0x0, 0x2, 0x7f, 0x7, 0x7f, 0x6, 0xc4, 0x7, 0x5, 0x3, 0x1, 0x7, 0x7fffffff, 0x6, 0xfffffffe, 0xb, 0x506, 0x7, 0x133c44e4, 0x2, 0x6, 0x40, 0xd, 0x6, 0x101, 0x4, 0x96, 0x9, 0x9, 0x3, 0x4, 0x81, 0x7, 0xd, 0x0, 0x4, 0x5, 0x101, 0x200, 0x20, 0x5, 0x7ff, 0x0, 0x5, 0x0, 0x9, 0x9, 0xd04, 0x2, 0x7, 0x8, 0x8, 0x4, 0x1ff, 0x4, 0x4, 0x7, 0x10, 0x6, 0x800, 0xa8a, 0x3, 0xeb, 0x8001, 0xeae9, 0x1, 0x3, 0x9, 0x3, 0x7, 0x7, 0x7, 0x185, 0x7, 0x3, 0x10, 0x3, 0x8de5, 0x1, 0xc1, 0xf, 0x4, 0x3, 0x10001, 0x81, 0x80000000, 0xfffffff9, 0x401, 0x7f, 0xa, 0x400, 0x3, 0x34d, 0x2, 0x5, 0x3, 0x1, 0x1, 0x4, 0x3f74, 0x3, 0x40, 0x0, 0x8, 0x3, 0x6, 0x9, 0x400, 0xfffffe01, 0xfffffffe, 0x8, 0x6, 0x86, 0x1000, 0x3, 0xfffffffa, 0x4, 0x5c, 0xe, 0x13, 0x7fffffff, 0xfffffff9, 0x5, 0x1, 0x6, 0x9, 0x10001, 0x2, 0x5, 0x6, 0x2463, 0x9, 0x8, 0x0, 0x40, 0xffff, 0x3, 0x1, 0x6, 0x101, 0x40, 0x4, 0x45, 0x80000001, 0x6, 0x6, 0x3, 0x9, 0x4, 0x1, 0x5, 0x0, 0x9, 0x9, 0x1, 0xa50, 0x6, 0xc23c, 0x100, 0x7fff, 0x2, 0x6, 0x4, 0x2, 0xcb85, 0xffffff81, 0x4eee, 0x6, 0x5, 0x2, 0x6, 0x9e1d, 0x18, 0x8, 0x7, 0xff, 0xffffff10, 0x48000, 0x0, 0xff, 0x7, 0x7ff, 0x401, 0x81, 0x0, 0x4]}) 2.275721541s ago: executing program 7 (id=3906): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001700)=ANY=[@ANYBLOB="38000000100003042bbd7000fedbdf2500000300", @ANYRES32=0x0, @ANYBLOB="21100000000000001800080002800400100000000000000000000000000000a0867ca166d60a5f2d0436f76df19f858aaea40f809b784ad1efd6620b027957b2359800000d74bcf99985c0f2a1f1c728595fcb284d5dca70a45d39bf44a4ba9ce6"], 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x20000814) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r0, r0, 0x0, 0x2020000005) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x0, 0x1429, 0x400, 0x1, 0x15}, &(0x7f0000000400)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc748, 0x6f8cb3653bd65dc1, 0x0, 0x2bc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd9b7, 0x400, 0x1, 0x296}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa164, 0x4, 0x3, 0x397}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa4df, 0x800, 0x1, 0x3b3}, 0xffffffffffffffff}], 0x4, &(0x7f0000001680)={0x2e, 0x0, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x1}, 0x0, 0x0, '\x00', {0x2000, 0xa5e, 0x0, &(0x7f0000000680)=@buf_4k="c8a01765efd0bb655b295cd4c50f7280059b277e6ac8c46eba305006587207df0dac5f8cb7825ecb287b41e47019847c58993877e1576c96ad83f96324528d2df76d8fe8bcc1f012ee794446bdc4d426678f2b9c528a6dedacb384077face3d7ada4ffea7b80c248103cfa5750f05cf5d2398bd1c5d94be947771b6cede75bf4a65b3b12d07ff1d7adf209bb174f1dfd43f295b64bb02932c43df467011a22420a819b0f7822968a4f9f09f5c39ede19fa0dee5603ec18c5f545622b34bd5f3a12a01ad5bce805ddace7eeb1c3eb341dbdc4401bf4e8ac576e12a586f5873393d3190c7729b1c45c900a4a0b91a28933b927568b3c64df8d4c8b46002ecfe7d65b184425965facc790082906459f9265011926945f3bd45790df57a6415ee810efab18384efe36a5b030007102bbb377f1533fc45b426dbb48802364f8dfd374acd106386b264cd3d4da936473b7fc2dfefdb1dc304820e03a5064c26639791b585558305432d365571688fbb8bdc3223baad87c23c162831045273c0b8cbd76b8da17cf7c44a27d03dde4db3fc7ed2da01614c9ebee71c1a2620abec911ef04ef1d382a3ca2bbba82d8a92592186fd7dc66133ac7222984eff73907909a5d270999aa9a7842c4ce08c8bb2697ea8002b3e3c91d73751bf50a7d7e58925596fc6e57c72bc26619e7b6d5c29ab8c8bdc826f3f2f4261523b8c6aca9c463e9d77868f8fa22977b0b222ad939c1aaad753158dc1c41dfa148c5f76463947c79608059af0818ba15d0e784487a25f1fb5b1358a6a247532dadd813d671a2d38301261ebc527c71687b711504764576eae5a49eeffa802aefdf84394e0f4190a5d4c4cd1662a0adecad7c0a96252ad2d8ba7eb67fd4c3f819a18d96a81ce06ec09dd0cf9b3790ff818c8bff522a975690091610f151f827e9da5001fc40082dccf5e49b2ffed18adb005f3be6a8c7829d3757931aba8ab5a990686d07df28d275ef1c7cdb508fbb8a6b3ac1e94f8af7ec902f60946a7074c42b0c462335a90df2de265deff6999d644cc9e8133995a7b053daee030e13dcec99dd24aa3dc3b5da0ac84ac2036a17bca07358d0a26c624102d186564ffe0eb04101688c046d7e0ae888d173b1d929e57ff4ade6162680b0961d4599cafd00676d3efa2ace70ac248f2e2c641ecbf917893ee35ee202455cb7bb4e75488fe050f5c7fc5b04a4145ec140bde31491dfd7b7708d635454e1220bd6def4abc2dc82433e5b613d6789bbe9a929cfb822c12ebe52bd961a1f9c22378e240e6093d26c3cd50b22b722772905b5e81629bd1f74bdaf2a9461b4c02af9f4e24c0c2f19abbc3bb0a0a80f00fcb88fadec4a0ebd890fe77ef60398e696982bc7545874501d0e7c7fe8255b17b46349097764e7b416422fe92afe7471fa207f3d72b8e2870e26ee2bf2d202a797b442f7262e4ab597a61cb6ced0cfdc24b2e72e5dfdcb8c40418f6b92d73207bf680b6b31f1c740d37e49ca24b39c57ff0c9c6b9a91244e45da8a722b3ea87c16ac05750cc58d631a4e2313bdc486386aedb6211e5944e11dd050ea8c2245ec1cd51fb34997df0aec7320a0361daf528a8f1a1dd924f433279cafd4f0f7d0ce41a36585e70d65d7ac6ac787d5862f63e4ce4150cc170b506f07d2282f39eda29d49564b768ad1fc4ddd52d981682e0c5dcea3a4e29654adfff8f6fd39d6f25995efc70a44edb91bc727c6d1d6cb7be8bb7b6f0f81af43275e16a5909bd67158846667c7ffe557f5dda80ecea9807cec20cb733a5b708bd08f66442c2a332c4166dfbcae3b4343bd876e62d5d3ba55a0deee475cb1b0e3f446ff142396f7a244cb412ec27fecb955f87b0379ba1dce1e97efc9a0d5a1658c6cdfc56dffcdc08e36266a8b62332e899b0ec29eabc1e658cff09b08831fa279fdf772ce518179614332377924897001819029208cf98586efee5c760247a5904beddbada5a49cb93a12608dcfb24ed9b31c4a95ea177881655fe8fe50e40ecc45eb64f255453353f213fba66e981023d9adea310a327e4a595897cb93056b22f214daaede267c8ccd9e8b87b974762b656f8659528eb714656bcebcb607ca3c5e0683280f3d5436d165a43ec7a47171e6b1d43baaba739490138b752792b7c431b2b43186ccf8a5f1d5b38a641990ff8e3e91d88edef3573b5bc108ba6b5dee7ac31e027ee3bb51596e9b34a6c06d6c032e7e0a262ede38dcf709831bf33dd66374fbec9f16348382e0f84004bd567cce9cc9ef6c733fbaafb563dd4444bb3cb08a39b570ae687e0d11e8c137ced5392019ae419e205d9e132a619577f016b14211fbbbf7be0045effb598d67ca88780f95b7ff6041fc9bc6d67efb1ff30193b43d8e75d493948e2e6ad4f5c4dd48281b68ff22b6dc7e9d40a9351affb3792df329987653501f9b20790ce0637310589512b510cb8d78061be8bb65abada89dc814447651235df8b8caf1b5c91bde77a6268d59ae3ea0390513b57155d2f4e079b8d90474985d10dde65e0200f88e04a2848c3599b4d85674957a9521b8c78ff8843ccaae80388847026506f6748624164195f4cdf9cb76ccc97d1de3e9e8cc83a8be19e19887629f43be086873e81b7f7143a56c1b02544ef51b54b18f8ee5e213c8f32298b5a5996b649f21870243ab125f0d6fc64f476c546e99721bc21c39343d4438406529e042ece18230450e2d458bb6d8c6dd9834b89c2f2fcd57f558d402b7cd21d032c13062e02e4d7d9da277db3a37bbeb637fc9735815665745208d3750a3303ec1d078235aa370b4fbbe1d4a2470d9d60e897cef0f2809035c4671c05ab46847b2187c758a18fa875bb912aa2e8ec9a4c258a1c94199d8e824620b18e39ee292934d00ba240966f5ce8e63eae436f2e2b76975b2f2086c1a81187d326a5b1541a6f4ff1c330a97e42cfe7ede8e5966959df415bf1b0dc0b0e42a9969a432222f9ddb710745c2555bce7d58e369d4542c17752ab9e69b20371acd33a2c97165c1f32a027f7f6d418f1c2474eb56d216f0f0015a741e0a7e767d06c914ddf02a17a8b50889145ae088c54ab83e637216794221e9c608d4bf07a98228312acc0d4a5f792df9a0ec8549259121c36e2b0cdb7fe8240da625e98a2d27dc2c4ce89f39f875678baa27eba0775fceced57101ce51eb320d9a4ab922f70db9d841e3701ec60ae30957dab08213f1fd70219bb0030e899777957e198e3b9848887ec22258d22d2c968d1ee100038c612dcebf1d7fd33c821abad78393e9f826da3d34558d02307656166518c4b093cd8efef8d41c5c8eb064c8e1b235ac4142f530b1b65f4d67e5ca8937ec37560bb8f218e3d25c34b190e25d17b635d587575d5801316409fed42db9df2a24da9f5a693b7e49bb3589a497a03834d187a1603e9ad70b9e38f366606a9290a28cbe9bbee2d7bca1e47133266cfe42ac0c6d08d21ffbfa781886e0f22f7bbdda861ac5cd9e46cf6199559581aa307a6a2c395a14e607e0b275ea4dc32f2e272c353f87e99c1237e7a64de300fec6e907daab9c120716d62aae94d8138fca8fc74f3d9870b108c109537ea612392431a5dae7f4b53e426be3c53eeb78a6e2fbb630b37382bf39ae86d79ca085acf475272091c4b2d1fffdde504b60dcbd2a8b7e5206424b4a170b64177e1f857e1f69750a21542842663f8734d8043a7cc2690defbfeb7183fa5679b7ee3026646120109a61239b91fa7666a9356bb5ecc30d85c438713b934be3e8ce7eb1c63525f9ab3d57d1c4c551bff0af35a5d8a2381c61d00680ef98016ca8934db3826e2b4275cd262840f105075a7c567978e8c15a102a645171a6742711ee433fc68e4fb3d8a8babd8f3e0407c28c9bd515eeecc0978fa025b1e7fdf8d1b3d05e6bceada5a533ff5465dac72ae09dafd6f85ade4eaf5192ea00851d90184b985be0e84fd23849776fc23dbf522183807847ffbe6e5737fbab63e04a1eebccea4c929d906d29de0ce0bf6b5f73a7fb3e274bac9795ed87ee609a23d2cd4fca8359fa26764d828b0bdf842fbb35d16ffa8877602fa17c67089275c3f36a4d10cc5099b99650a5a537476a33a65228a7e385be454661249dfb8ff25aae7a49a32b4f268d6f57f77deb13af70e9d9e51844d5c82b4eeaaa3f0be5cfbd996d1c7f609a6dba546dc9a312fbb1a14f60ba1078183cba5a63998086194023c4623c0c0d39d6909ff72f9781c1a972d7d83110c271f9a5b9738e780324f90d88bf3d4b3133764d23bd4838efdfbf88f29c30c51a31c9fe5e503263cebe373c97680e52d0d543f79d8b5a1d5a640afb7f96a99e2b8b8a5ca62a59530f450d090c21ec76180123787a299a909110926ac0fd93d519ad7bc0c5bca26865f67cd2a24619f4df3f2511969f6f98230167b0fafc7ce4a296e8c5b63e9dc0237c918cf0c58850160cc19b91d57b645bbdd0b82fd72f8cfb44f67cb54d805819b906a4e12c2ac4486832b3ba6d82b561ae60f1588dcb9503080d5118eea9febf365ec67c4ef06438ca53e794c4f4cb94332836fc20a2f5839a172f24625c888f847fabf7c817a9419f7c9dda6afdfba421ab3b9a2a0b7178c2269a9e25bc6809bd55f456c0a7b0c289a71f9f64b1e649c7e94bcc786f72f10ad5ae6a858e4eb8df77c1f59b2f7d789c9ff441d41e588c0eaf3c43f2e465cb49be0551adb5bf6fcc0b7e239085ecdef21ada107fd314119e831210cfad874b2ef00f3811b83bb543f78f6292b06334857c29656af0a1bdcad044fc83e3c8cbd89a046045f00283238685411348153f837f3897ef88142fe6b950df114809c85e0c800ae80c770fbe9d1bd61aa419d98ee186e9de2b8d38d9246517892868ec9315c948a7f47116fbd132bfa7574eeefe2f839e9b79b5dd44651afc4ebeeaedaf2a8389112bfd5d09f71ca04a306e451d53ad80c90894d0f9b825fe2070fb2f00e4c2fffe07f98a977c59b5e4ce37c09e4f95f295a2a77bb82e3fce3cd9ec858ab4f50949a4bccb198483b8e9f8cf0c5ec52a1c3428a0496a80c621afaba795b457f957da55a472cc32739e7ffef29fa2da5efd80453780193ee35755a1485ed797d34e9ef7d6380bac0cd24d1bdebbc27b14cd804aa81a75cbea2b9357cb95fd84db7998cebe60f40767ac0bd5b49e0fcf378fba634b678d1f051beab274a0cadf2562f042975a3defc671cb87610aecd686a9a4789e87a1295e1869f0bdc7554ea7438c479083b5abc7ac307d08a712a5ab69b84018727daccc2f3b8cfae5d7c3e5c23b5b9d326fd056df859fd4f7ae4bbc58057587ba2ec226f4cfd72cb33b9a08fb0021214ed69e9a5128e5b86461b39f2f81b469a7ea89d4e78179d140cdef68849c9362deda7faa8dbea012b6d97249b9fe1438eff44f81a35bde7b6a238ee98d79bdb725c815788f3859ec461151326454d6fac61d08cc9eaaf176b4c53d7883b9e94ef4d60e95a3fe0563d105f73638ff84409e2256798541c00ce89070e6995bcf03879136c1855a10cf6834f1c5af98f05acc0f304a599170a0fe5c1520e44579d217720b4396a0d69066baa4efa435045436dd4f00951f53d38ffafb0f9762e02de27e318cf1c9cd2443437eb411332e045b53f9a84b90f949e0421606f059bac33cf902eddf7751cb7d640f5ad44a508b84ecbfb067288e6832042f55a4657c85455849984198e9b1ba94c283e7268e5afb723cb5237991d14c792bfb4724f3ca64791d487c3fcf67cf6f518e04fe5271a643f47cf84ba98dc2e15c"}}, &(0x7f0000000240)) r4 = io_uring_setup(0x8, &(0x7f00000001c0)={0x0, 0x0, 0x1000, 0x0, 0x17b, 0x0, r3}) io_uring_register$IORING_REGISTER_NAPI(r4, 0x1b, &(0x7f0000000080)={0x3e8, 0x0, 0x0, '\x00', 0x1}, 0x1) io_uring_register$IORING_REGISTER_NAPI(r4, 0x1b, &(0x7f0000000100)={0x100, 0x0, 0x1, '\x00', 0xa}, 0x1) io_uring_enter(r4, 0x0, 0x3f, 0x9, &(0x7f0000000180), 0x18) r5 = userfaultfd(0x80001) mmap(&(0x7f000010d000/0x4000)=nil, 0x4000, 0x200000b, 0x50, 0xffffffffffffffff, 0x1e964000) ioctl$UFFDIO_UNREGISTER(r5, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x98}) ioctl$UFFDIO_WAKE(r5, 0x8010aa02, &(0x7f00000003c0)={&(0x7f0000000000/0x800000)=nil, 0x800000}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x1d, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x0, 0x4}, 0x4}}, 0x10) 2.260993186s ago: executing program 3 (id=3907): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/24, 0x18) r1 = accept(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x40, 0x1405, 0x400, 0x70bd2d, 0x10, "", [{{0x8}, {0x8}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x2}, {0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x100) 2.067740241s ago: executing program 3 (id=3908): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = socket(0x2, 0x80805, 0x0) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) r1 = socket$inet(0x2, 0x80001, 0x84) close(0x3) socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x8, 0x1, 0x200, 0x3, 0x2, 0x7ff, 0xfff, 0x6e4c8f, r3}, 0x20) 1.971660208s ago: executing program 2 (id=3909): socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@allocspi={0xf8, 0x16, 0x1, 0x70bd2b, 0x25dfdbfe, {{{@in=@private=0xa010101, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0x0, 0x4e22, 0x0, 0xa, 0x80, 0x20, 0x1d}, {@in6=@local, 0x4d5, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x10}, {0x8, 0x7b5, 0x0, 0x6, 0x9, 0xfffffffffffffffa, 0xffffffff, 0x80000000000003}, {0x6, 0x3, 0x1, 0xfffffffffffffffa}, {0x0, 0x10001, 0x7}, 0x70bd2a, 0x0, 0x0, 0x0, 0x6, 0x1}, 0x353d, 0x74f}}, 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0xdc3c, 0x0) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0x40015b19, &(0x7f0000000000)={0xffffffff, 0xfffffffe, 0x7, 0xff, 0x1}) 1.759209524s ago: executing program 3 (id=3910): sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x17) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket(0xa, 0x3, 0x3a) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000200)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000180)={@hyper}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000005c0)=ANY=[], 0x44}}, 0x800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x600000, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000c400)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000a00)}, {&(0x7f0000000a80)="2242cffaf92c57b02b679d1c2282415c2191be37d4d2480f5a067e593c3a8c2b8409306ff909b3150d01d0ca82dffd1c0ff22eacdf2d644c7204d62a54fdf43e93eba236d522e80c5a72e52cc535dbe363514aa22598795207f474b74733ddc0781a492319a2f3dbcfc05427663d07d92d5ba6b2c213c8e01bba0fe542ed727ca50c446d7f09b7bfae25aca40f4a150c4643c9e9f9050b19760bd57c5d979ef7d9a8b3e510e653d88ff336e83aae60b52c4102aab0558219007a8852781285c68a423f165f26ccd1947d8c4bb6b7", 0xce}], 0x2, &(0x7f0000000880)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64=r5, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r5, @ANYBLOB="0038ba00"], 0x58, 0x4080}}, {{0x0, 0x0, &(0x7f0000005f00), 0x0, &(0x7f0000000bc0)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000100000001000000", @ANYRES32=r4, @ANYRES16=0x0, @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYRES32=r6, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa0, 0x8000}}], 0x2, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r7, r6, 0x0, 0x1002000ff) r8 = fcntl$dupfd(r7, 0x0, r7) close_range(0xffffffffffffffff, r8, 0x2) ioctl$UI_END_FF_UPLOAD(r8, 0x406855c9, &(0x7f00000003c0)={0xa, 0x6, {0x55, 0x1000, 0x7, {0x2, 0xa}, {0x6920, 0xc1a}, @const={0x8d, {0xf, 0x2, 0x0, 0x8}}}, {0x53, 0x3, 0x1, {0xfff6, 0xd2a}, {0x9, 0x4}, @const={0x2, {0x7, 0x36, 0x1, 0x6}}}}) bind$l2tp6(r8, &(0x7f0000000500)={0xa, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9c47}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106, 0x42f4ef72bc5f97b4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f0000000280)={0x14, 0x88, 0xfa00, {r9, 0x1c, 0x0, @in={0x2, 0x4e22, @broadcast}}}, 0x90) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000100)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000040)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r3, 0x7a5, &(0x7f0000000140)={{@hyper}, 0x1, 0x8}) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x1, r10}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="33330000000100112233445586dd6000000000003b4020010db8000000000000000000000001ff0e"], 0x0) r11 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_buf(r11, 0x29, 0xcc, &(0x7f0000000100)="0a00000000000000fe8000000000000000000000000000bb000000000a00000000000000ff0e000000000000000000000000123400000000000000000200"/92, 0x5c) 1.617303322s ago: executing program 8 (id=3911): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000008c0)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14140e05251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x3e}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_open_dev$loop(&(0x7f0000000200), 0x5, 0x86100) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000005c0)={r4, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1c, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f00", "90be8b1c5512406c7f00", [0x4, 0xa]}}) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x20048841) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r5, 0x0, 0x31, 0x0, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x40240) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000001280)={r3, 0x0, {0x2a12, 0x80010000, 0x0, 0xffff, 0x4, 0x0, 0x0, 0xe, 0x14, "fee8a2ab78fc179fd1f809000000aca7ca64c6a4b4e00d9683dda1af01000000deff1200100000000000000000000000000800", "2809e8dbe1b22d0000b420a1a93c7540f476779e0117613dd4070000ebff08000000000000000000020000000800000000faffffff00", "e7460000102000000000e4440000002000000000000000000000008bd02800", [0xde, 0x8000]}}) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r3) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x25}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f0000000100)) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r7, 0x4008af25, 0x0) 1.369045171s ago: executing program 7 (id=3912): sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000140), 0x10, 0x0, 0x1, 0x0, 0x0, 0x84844}, 0x20004001) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0}}], 0x1, 0x4880) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x3ffe, 0x1, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x3f}, 0x1c) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000040)=@gcm_128={{0x304}, "33e275106ce797ba", "afc000", "1f991d9c", "d570f648c0ec6f65"}, 0x28) r1 = syz_usb_connect(0x0, 0x4b, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000200000040480b051000010102000109023900020100803209040000000000000009040100000000000009040101030000800007050102400000070581024000150705821a525d6d2da67a52c56faf5252166f8939e7e73fbd1a85533faee37415aebfcf557e96ebd8cc55a7b0e16a0495854b67668a642763a397477cfd09c9e437f34cd7dee08b0ef99860113748344fe4aac7"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00008f7000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000280)=0x1) r2 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r2, 0x2219, 0xcf74, 0x16, 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000070000000900010073797a300000000038000000200a01010000000000000000070000050900010073797a30000000000c00038008000240000000080c0005"], 0xb78}}, 0x0) write$binfmt_script(r4, 0x0, 0x0) write$UHID_INPUT(r4, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$SNDRV_TIMER_IOCTL_CREATE(r4, 0xc02054a5, &(0x7f0000000180)={0x9, r2, 'id0\x00'}) mount$fuseblk(&(0x7f0000000140), &(0x7f0000000240)='./cgroup/cgroup.procs\x00', 0x0, 0xb070c0, 0x0) writev(r6, &(0x7f0000000480)=[{&(0x7f0000000200)="7188cd98ecb7efee595f5af2afefdf5ec050a701a1883982bdb093966ec15be69e0651", 0x23}, {&(0x7f0000000400)="ffd3ed6519ad07e4feb0bb974006a0a30e7eff7de03e35143e5cf928fa474696ab6dd248050f19a043d87c6cdc1310252a3b10570f33d5590586c3a8d7c1c8713446a24ba045a9a02d42b55986f403014002e446dc92bb8f99f29608b6273fae87237de6c3758f80b86b12aa65385fe4004c81fb", 0x74}], 0x2) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1f, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) r7 = syz_open_dev$dvb_demux(&(0x7f0000000200), 0x1, 0x2) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r7, 0x40146f2c, &(0x7f0000000300)={0x100, 0x0, 0x1, 0x14, 0x4}) 583.411775ms ago: executing program 3 (id=3913): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x30, r1, 0x1, 0x70bd25, 0x25dfdbff, {{}, {0x0, 0x4107}, {0x14, 0x18, {0x300, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4880}, 0x40090) (fail_nth: 11) 343.986528ms ago: executing program 8 (id=3914): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x800003fffffffffe, 0xffffffffffffffff}) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r2, 0x410, &(0x7f0000000200)={0x1, 0x3, 0x1000000000000001, 0x9b}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x3, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x280000d, 0x204031, r1, 0xb320a000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x7fbc00, 0x1ca) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) renameat(r4, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f00000002c0)='./file1\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000000, 0x1010, r3, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$XFS_IOC_FSGETXATTRA(r0, 0x801c582d, &(0x7f0000000100)) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl(r7, 0x4048aecb, &(0x7f0000000100)) ioctl(r7, 0xc048aeca, &(0x7f0000000200)) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0x7c}], 0x1, 0x400000, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_j1939(r9, &(0x7f0000000180)={0x1d, r10, 0x0, {0x1, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r9, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) 0s ago: executing program 3 (id=3915): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000000440)={&(0x7f00000002c0)={0xa, 0x4e24, 0x5, @mcast2, 0x7}, 0x1c, 0x0}, 0x40) kernel console output (not intermixed with test programs): sys_socket+0x7a/0x90 [ 921.208128][T18149] do_syscall_64+0x166/0x520 [ 921.208163][T18149] ? trace_irq_disable+0x3b/0x140 [ 921.208189][T18149] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.208214][T18149] ? clear_bhb_loop+0x70/0xc0 [ 921.208244][T18149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.208268][T18149] RIP: 0033:0x7ff89b59e199 [ 921.208291][T18149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 921.208312][T18149] RSP: 002b:00007ff89c446028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 921.208351][T18149] RAX: ffffffffffffffda RBX: 00007ff89b826090 RCX: 00007ff89b59e199 [ 921.208369][T18149] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000002d [ 921.208385][T18149] RBP: 00007ff89b6358e0 R08: 0000000000000000 R09: 0000000000000000 [ 921.208399][T18149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 921.208414][T18149] R13: 00007ff89b826128 R14: 00007ff89b826090 R15: 00007ff89b94fa48 [ 921.208450][T18149] [ 921.215942][T18149] memory: usage 8kB, limit 8kB, failcnt 111 [ 921.215995][T18149] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 921.216045][T18149] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 921.216079][T18149] Memory cgroup stats for /syz8/test: [ 921.216424][T18149] cache 0 [ 921.216454][T18149] rss 0 [ 921.216475][T18149] rss_huge 0 [ 921.216496][T18149] shmem 0 [ 921.216517][T18149] mapped_file 0 [ 921.216540][T18149] dirty 0 [ 921.216561][T18149] writeback 0 [ 921.216582][T18149] workingset_refault_anon 0 [ 921.216609][T18149] workingset_refault_file 0 [ 921.216632][T18149] swap 0 [ 921.216654][T18149] swapcached 0 [ 921.225033][T18149] pgpgin 0 [ 921.225066][T18149] pgpgout 0 [ 921.225105][T18149] pgfault 1 [ 921.225127][T18149] pgmajfault 0 [ 921.225148][T18149] inactive_anon 0 [ 921.225170][T18149] active_anon 0 [ 921.225192][T18149] inactive_file 0 [ 921.225223][T18149] active_file 0 [ 921.225251][T18149] unevictable 0 [ 921.225281][T18149] hierarchical_memory_limit 8192 [ 921.225310][T18149] hierarchical_memsw_limit 9223372036854771712 [ 921.225348][T18149] total_cache 0 [ 921.225370][T18149] total_rss 0 [ 921.228369][T18149] total_rss_huge 0 [ 921.228399][T18149] total_shmem 0 [ 921.228421][T18149] total_mapped_file 0 [ 921.228450][T18149] total_dirty 0 [ 921.228471][T18149] total_writeback 0 [ 921.238628][T18149] total_workingset_refault_anon 0 [ 921.238643][T18149] total_workingset_refault_file 0 [ 921.238654][T18149] total_swap 0 [ 921.238663][T18149] total_swapcached 0 [ 921.238672][T18149] total_pgpgin 0 [ 921.238681][T18149] total_pgpgout 0 [ 921.238691][T18149] total_pgfault 1 [ 921.238807][T18149] total_pgmajfault 0 [ 921.238818][T18149] total_inactive_anon 0 [ 921.238828][T18149] total_active_anon 0 [ 921.238837][T18149] total_inactive_file 0 [ 921.238847][T18149] total_active_file 0 [ 921.238856][T18149] total_unevictable 0 [ 921.238865][T18149] anon_cost 0 [ 921.238874][T18149] file_cost 0 [ 921.238884][T18149] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz8/test,task_memcg=/syz8/test,task=syz.8.3445,pid=18147,uid=0 [ 921.239021][T18149] Memory cgroup out of memory: Killed process 18147 (syz.8.3445) total-vm:102524kB, anon-rss:1960kB, file-rss:23124kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 922.015716][T18151] __nla_validate_parse: 1 callbacks suppressed [ 922.015768][T18151] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3446'. [ 922.029247][T18152] netlink: 83 bytes leftover after parsing attributes in process `syz.5.3446'. [ 922.340499][ T5695] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 922.510604][ T5695] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 922.516946][ T5695] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.516975][ T5695] usb 3-1: Product: syz [ 922.516993][ T5695] usb 3-1: Manufacturer: syz [ 922.517011][ T5695] usb 3-1: SerialNumber: syz [ 922.616633][ T5688] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 923.357139][T18154] netlink: 'syz.2.3447': attribute type 18 has an invalid length. [ 923.679571][ T5688] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 923.679878][ T5688] ath9k_htc: Failed to initialize the device [ 923.781919][ T5688] usb 3-1: ath9k_htc: USB layer deinitialized [ 924.447357][ T31] audit: type=1326 audit(1791282285.200:13009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18180 comm="syz.7.3455" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17c7f9e199 code=0x7ffc0000 [ 924.511089][ T31] audit: type=1326 audit(1791282285.200:13010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18180 comm="syz.7.3455" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17c7f9e199 code=0x7ffc0000 [ 924.511147][ T31] audit: type=1326 audit(1791282285.270:13011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18180 comm="syz.7.3455" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f17c7f9e199 code=0x7ffc0000 [ 924.511223][ T31] audit: type=1326 audit(1791282285.270:13012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18180 comm="syz.7.3455" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17c7f9e199 code=0x7ffc0000 [ 924.634008][ T31] audit: type=1326 audit(1791282285.280:13013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18180 comm="syz.7.3455" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17c7f9e199 code=0x7ffc0000 [ 924.634051][ T31] audit: type=1326 audit(1791282285.380:13014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18180 comm="syz.7.3455" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f17c7f9e199 code=0x7ffc0000 [ 924.634102][ T31] audit: type=1326 audit(1791282285.380:13015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18180 comm="syz.7.3455" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17c7f9e199 code=0x7ffc0000 [ 924.634134][ T31] audit: type=1326 audit(1791282285.380:13016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18180 comm="syz.7.3455" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17c7f9e199 code=0x7ffc0000 [ 924.634164][ T31] audit: type=1326 audit(1791282285.380:13017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18180 comm="syz.7.3455" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f17c7f9e199 code=0x7ffc0000 [ 924.634196][ T31] audit: type=1326 audit(1791282285.380:13018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18180 comm="syz.7.3455" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17c7f9e199 code=0x7ffc0000 [ 925.413923][T18185] FAULT_INJECTION: forcing a failure. [ 925.413923][T18185] name failslab, interval 1, probability 0, space 0, times 0 [ 925.452480][ T5716] usb 3-1: USB disconnect, device number 14 [ 925.596771][T18184] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3456'. [ 925.671707][T18186] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3456'. [ 925.999067][ T5688] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 926.059133][ T7894] usb 8-1: new high-speed USB device number 80 using dummy_hcd [ 926.150923][ T5688] usb 9-1: Using ep0 maxpacket: 8 [ 926.153038][ T5688] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 926.158982][ T5688] usb 9-1: config index 0 descriptor too short (expected 74, got 45) [ 926.159039][ T5688] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 926.159070][ T5688] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 926.159098][ T5688] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 926.159128][ T5688] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 926.159154][ T5688] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 926.159201][ T5688] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.250997][ T7894] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 926.277910][ T7894] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 926.277961][ T7894] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 926.315557][ T7894] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 926.315620][ T7894] usb 8-1: SerialNumber: syz [ 926.503297][ T5688] usb 9-1: usb_control_msg returned -32 [ 926.503351][ T5688] usbtmc 9-1:16.0: can't read capabilities [ 926.540542][ T8044] bridge_slave_1: left allmulticast mode [ 926.540612][ T8044] bridge_slave_1: left promiscuous mode [ 926.543617][ T8044] bridge0: port 2(bridge_slave_1) entered disabled state [ 926.597193][ T8044] bridge_slave_0: left allmulticast mode [ 926.597221][ T8044] bridge_slave_0: left promiscuous mode [ 926.597474][ T8044] bridge0: port 1(bridge_slave_0) entered disabled state [ 926.815676][ T7894] usb 8-1: 0:2 : does not exist [ 926.914443][ T7894] usb 8-1: USB disconnect, device number 80 [ 927.058342][T16986] udevd[16986]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 927.125268][T18206] socket: no more sockets [ 927.297499][ T8044] gretap0 (unregistering): left promiscuous mode [ 927.575514][ T8044] bond1 (unregistering): Released all slaves [ 927.719214][ T5716] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 927.771392][ T8044] ovs-dp0: left promiscuous mode [ 927.870540][ T8044] : left promiscuous mode [ 927.871846][ T5716] usb 4-1: Using ep0 maxpacket: 32 [ 927.874182][ T5716] usb 4-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e [ 927.901872][ T5716] usb 4-1: config 0 interface 0 has no altsetting 0 [ 927.901991][ T5716] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.954926][ T5716] usb 4-1: config 0 descriptor?? [ 927.989623][ T5716] usb 4-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state [ 928.011412][ T5716] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 928.012302][ T5716] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+) [ 928.012398][ T5716] usb 4-1: media controller created [ 928.056103][ T8044] tipc: Disabling bearer [ 928.056226][ T8044] tipc: Left network mode [ 928.071546][ T5716] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 928.815725][ T983] usb 9-1: USB disconnect, device number 8 [ 929.115504][T18210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 929.118288][T18210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 930.573791][T18243] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 930.603534][ T8044] veth1_to_team: left promiscuous mode [ 930.641565][ T8044] bond_slave_1: left promiscuous mode [ 930.742952][ T8044] hsr_slave_0: left promiscuous mode [ 930.762241][ T8044] hsr_slave_1: left promiscuous mode [ 930.785930][ T5716] set interface failed [ 930.786815][ T5716] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 930.807396][ T5716] error writing reg: 0xff, val: 0x00 [ 931.259564][ T5716] dvb_usb_mxl111sf 4-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 931.316290][ T5716] usb 4-1: USB disconnect, device number 65 [ 931.604330][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.604461][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.841091][T18272] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3483'. [ 932.841139][T18272] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3483'. [ 932.841166][T18272] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3483'. [ 933.478634][ T8044] IPVS: stop unused estimator thread 0... [ 933.727160][T18282] binder_alloc: 18281: binder_alloc_buf, no vma [ 933.801613][T18288] binder: 18281:18288 ioctl 80049370 200000000300 returned -22 [ 933.855290][T18284] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3489'. [ 934.001106][T18284] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3489'. [ 934.380855][T18304] ip_tables: iptables: counters copy to user failed while replacing table [ 934.440482][ T983] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 934.582049][T18312] Failed to get privilege flags for destination (handle=0x0:0x0) [ 934.591012][ T983] usb 6-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 934.602369][ T983] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 934.602547][ T983] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.606529][T18312] syz_tun: entered allmulticast mode [ 934.619034][ T5695] usb 8-1: new high-speed USB device number 81 using dummy_hcd [ 934.665042][ T983] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 934.770316][ T5695] usb 8-1: Using ep0 maxpacket: 32 [ 934.773294][ T5695] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 934.775323][ T5695] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 934.775353][ T5695] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 934.800996][ T5695] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 934.801071][ T5695] usb 8-1: Product: syz [ 934.801139][ T5695] usb 8-1: Manufacturer: syz [ 934.801179][ T5695] usb 8-1: SerialNumber: syz [ 934.819731][ T5716] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 934.865415][ T5695] usb 8-1: config 0 descriptor?? [ 934.876315][ T5695] hub 8-1:0.0: bad descriptor, ignoring hub [ 934.876357][ T5695] hub 8-1:0.0: probe with driver hub failed with error -5 [ 934.949300][ T5716] usb 4-1: device descriptor read/64, error -71 [ 935.138276][T18301] ip_tables: iptables: counters copy to user failed while replacing table [ 935.201191][ T5716] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 935.207857][T18304] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3493'. [ 935.339513][ T5716] usb 4-1: device descriptor read/64, error -71 [ 935.450633][ T5716] usb usb4-port1: attempt power cycle [ 935.554541][T18307] syz_tun: left allmulticast mode [ 935.671558][ T983] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 935.671584][ T983] stv0680 6-1:4.0: STV(e): camera ping failed!! [ 935.672916][ T983] stv0680 6-1:4.0: last error: 0, command = 0x0 [ 935.773452][T18323] TC_ACT_REPEAT abuse ? [ 935.799251][ T5716] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 935.820856][ T5716] usb 4-1: device descriptor read/8, error -71 [ 935.881838][ T5745] usb 6-1: USB disconnect, device number 88 [ 936.068952][ T5716] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 936.100305][ T5716] usb 4-1: device descriptor read/8, error -71 [ 936.142277][T18331] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3505'. [ 936.209520][ T5716] usb usb4-port1: unable to enumerate USB device [ 936.731675][T18341] FAULT_INJECTION: forcing a failure. [ 936.731675][T18341] name failslab, interval 1, probability 0, space 0, times 0 [ 937.209285][ T5688] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 937.364077][ T5688] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 937.379744][ T5688] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.379775][ T5688] usb 6-1: Product: syz [ 937.379793][ T5688] usb 6-1: Manufacturer: syz [ 937.379810][ T5688] usb 6-1: SerialNumber: syz [ 937.405588][ T5688] usb 6-1: config 0 descriptor?? [ 937.407235][ T5695] usb 8-1: USB disconnect, device number 81 [ 937.440003][T18365] ucma_write: process 1014 (syz.7.3516) changed security contexts after opening file descriptor, this is not allowed. [ 937.465588][ T5688] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 937.511827][ T5688] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 937.514486][ T5688] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 937.514543][ T5688] usb 6-1: media controller created [ 937.613758][ T5688] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 937.687952][T18352] fuse: Unknown parameter '' [ 937.865174][ T5688] DVB: Unable to find symbol mt352_attach() [ 937.976697][T18352] netlink: 116 bytes leftover after parsing attributes in process `syz.5.3512'. [ 938.007503][T18352] dvb-usb: bulk message failed: -22 (7/0) [ 938.022065][T18371] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 938.095436][ T5688] DVB: Unable to find symbol nxt6000_attach() [ 938.095457][ T5688] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 938.127860][ T5688] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input61 [ 938.158421][ T5688] dvb-usb: schedule remote query interval to 1000 msecs. [ 938.158444][ T5688] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 938.158462][ T5688] dvb-usb: bulk message failed: -22 (7/0) [ 938.158477][ T5688] dvb-usb: bulk message failed: -22 (7/0) [ 938.200590][T18364] bridge_slave_0: left allmulticast mode [ 938.200617][T18364] bridge_slave_0: left promiscuous mode [ 938.200836][T18364] bridge0: port 1(bridge_slave_0) entered disabled state [ 938.207513][ T5688] usb 6-1: USB disconnect, device number 89 [ 938.333386][T18364] bridge_slave_1: left promiscuous mode [ 938.333828][T18364] bridge0: port 2(bridge_slave_1) entered disabled state [ 938.480404][T18364] bond0: (slave bond_slave_0): Releasing backup interface [ 938.482504][ T5688] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 938.611344][T18364] bond0: (slave bond_slave_1): Releasing backup interface [ 938.804105][T18364] team0: Port device team_slave_0 removed [ 938.816434][ T5617] Bluetooth: hci2: command 0x0406 tx timeout [ 938.910393][T18364] team0: Port device team_slave_1 removed [ 938.924647][T18364] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 938.924675][T18364] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 938.945451][T18364] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 938.945470][T18364] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 938.983441][T18364] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 939.286927][T18389] FAULT_INJECTION: forcing a failure. [ 939.286927][T18389] name failslab, interval 1, probability 0, space 0, times 0 [ 939.287018][T18389] ERROR: Out of memory at tomoyo_realpath_from_path. [ 939.701943][ T5616] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 939.852606][ T5616] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 939.857590][ T5616] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 939.857621][ T5616] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 939.857643][ T5616] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 939.857692][ T5616] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 939.867904][ T5616] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 939.867981][ T5616] usb 4-1: Product: syz [ 939.868025][ T5616] usb 4-1: Manufacturer: syz [ 939.977240][ T5616] cdc_wdm 4-1:1.0: skipping garbage [ 939.977266][ T5616] cdc_wdm 4-1:1.0: skipping garbage [ 940.014412][ T5616] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 940.014446][ T5616] cdc_wdm 4-1:1.0: Unknown control protocol [ 940.184928][ T5695] usb 4-1: USB disconnect, device number 70 [ 940.538234][T18400] trusted_key: encrypted_key: key user:syz not found [ 940.542792][T18404] FAULT_INJECTION: forcing a failure. [ 940.542792][T18404] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 940.542868][T18404] CPU: 0 UID: 0 PID: 18404 Comm: syz.7.3526 Tainted: G L syzkaller #0 PREEMPT(full) [ 940.542902][T18404] Tainted: [L]=SOFTLOCKUP [ 940.542912][T18404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 940.542932][T18404] Call Trace: [ 940.542942][T18404] [ 940.542952][T18404] dump_stack_lvl+0xe8/0x150 [ 940.542990][T18404] should_fail_ex+0x410/0x560 [ 940.543024][T18404] prepare_alloc_pages+0x223/0x600 [ 940.543058][T18404] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 940.543090][T18404] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 940.543135][T18404] ? __pfx_policy_nodemask+0x10/0x10 [ 940.543163][T18404] ? __get_vm_area_node+0x155/0x2f0 [ 940.543193][T18404] ? __vmalloc_node_range_noprof+0x343/0x1540 [ 940.543232][T18404] ? __vmalloc_noprof+0xd2/0x120 [ 940.543253][T18404] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 940.543293][T18404] ? bpf_prog_alloc+0x3c/0x1a0 [ 940.543318][T18404] ? __sys_bpf+0xd0d/0xd90 [ 940.543342][T18404] ? __x64_sys_bpf+0xba/0xd0 [ 940.543363][T18404] ? do_syscall_64+0x166/0x520 [ 940.543394][T18404] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.543422][T18404] alloc_pages_mpol+0x21e/0x390 [ 940.543457][T18404] alloc_pages_noprof+0xb1/0x2b0 [ 940.543490][T18404] get_free_pages_noprof+0xf/0x80 [ 940.543517][T18404] __kasan_populate_vmalloc+0x38/0x1c0 [ 940.543542][T18404] ? do_raw_spin_unlock+0xf5/0x200 [ 940.543579][T18404] alloc_vmap_area+0xd1a/0x1420 [ 940.543626][T18404] ? __pfx_alloc_vmap_area+0x10/0x10 [ 940.543657][T18404] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 940.543684][T18404] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 940.543709][T18404] ? __get_vm_area_node+0x155/0x2f0 [ 940.543746][T18404] __get_vm_area_node+0x200/0x2f0 [ 940.543786][T18404] __vmalloc_node_range_noprof+0x343/0x1540 [ 940.543810][T18404] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 940.543837][T18404] ? __lock_acquire+0x747/0x2de0 [ 940.543886][T18404] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 940.543918][T18404] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 940.543970][T18404] __vmalloc_noprof+0xd2/0x120 [ 940.543992][T18404] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 940.544023][T18404] bpf_prog_alloc_no_stats+0x47/0x560 [ 940.544050][T18404] ? bpf_prog_alloc+0x2a/0x1a0 [ 940.544080][T18404] bpf_prog_alloc+0x3c/0x1a0 [ 940.544110][T18404] bpf_prog_load+0x7f8/0x1c20 [ 940.544150][T18404] ? __pfx_bpf_prog_load+0x10/0x10 [ 940.544204][T18404] __sys_bpf+0xd0d/0xd90 [ 940.544240][T18404] ? __pfx___sys_bpf+0x10/0x10 [ 940.544279][T18404] ? __fget_files+0x2a/0x420 [ 940.544330][T18404] ? ksys_write+0x242/0x270 [ 940.544355][T18404] ? __pfx_ksys_write+0x10/0x10 [ 940.544383][T18404] __x64_sys_bpf+0xba/0xd0 [ 940.544410][T18404] do_syscall_64+0x166/0x520 [ 940.544443][T18404] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.544466][T18404] ? clear_bhb_loop+0x70/0xc0 [ 940.544495][T18404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.544518][T18404] RIP: 0033:0x7f17c7f9e199 [ 940.544539][T18404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 940.544559][T18404] RSP: 002b:00007f17c8df0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 940.544583][T18404] RAX: ffffffffffffffda RBX: 00007f17c8225fa0 RCX: 00007f17c7f9e199 [ 940.544600][T18404] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 940.544616][T18404] RBP: 00007f17c8df0090 R08: 0000000000000000 R09: 0000000000000000 [ 940.544630][T18404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 940.544645][T18404] R13: 00007f17c8226038 R14: 00007f17c8225fa0 R15: 00007f17c834fa48 [ 940.544679][T18404] [ 940.546330][T18404] syz.7.3526: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 940.546480][T18404] CPU: 0 UID: 0 PID: 18404 Comm: syz.7.3526 Tainted: G L syzkaller #0 PREEMPT(full) [ 940.546510][T18404] Tainted: [L]=SOFTLOCKUP [ 940.546518][T18404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 940.546532][T18404] Call Trace: [ 940.546541][T18404] [ 940.546551][T18404] dump_stack_lvl+0xe8/0x150 [ 940.546586][T18404] warn_alloc+0x24d/0x270 [ 940.546613][T18404] ? lockdep_hardirqs_on+0x7b/0x110 [ 940.546648][T18404] ? __pfx_warn_alloc+0x10/0x10 [ 940.546671][T18404] ? kfree+0x1c5/0x650 [ 940.546698][T18404] ? __get_vm_area_node+0x219/0x2f0 [ 940.546739][T18404] __vmalloc_node_range_noprof+0x36b/0x1540 [ 940.546763][T18404] ? __lock_acquire+0x747/0x2de0 [ 940.546811][T18404] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 940.546843][T18404] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 940.546870][T18404] __vmalloc_noprof+0xd2/0x120 [ 940.546892][T18404] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 940.546922][T18404] bpf_prog_alloc_no_stats+0x47/0x560 [ 940.546976][T18404] ? bpf_prog_alloc+0x2a/0x1a0 [ 940.547005][T18404] bpf_prog_alloc+0x3c/0x1a0 [ 940.547034][T18404] bpf_prog_load+0x7f8/0x1c20 [ 940.547072][T18404] ? __pfx_bpf_prog_load+0x10/0x10 [ 940.547125][T18404] __sys_bpf+0xd0d/0xd90 [ 940.547159][T18404] ? __pfx___sys_bpf+0x10/0x10 [ 940.547197][T18404] ? __fget_files+0x2a/0x420 [ 940.547246][T18404] ? ksys_write+0x242/0x270 [ 940.547270][T18404] ? __pfx_ksys_write+0x10/0x10 [ 940.547296][T18404] __x64_sys_bpf+0xba/0xd0 [ 940.547323][T18404] do_syscall_64+0x166/0x520 [ 940.547355][T18404] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.547396][T18404] ? clear_bhb_loop+0x70/0xc0 [ 940.547424][T18404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.547448][T18404] RIP: 0033:0x7f17c7f9e199 [ 940.547468][T18404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 940.547500][T18404] RSP: 002b:00007f17c8df0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 940.547523][T18404] RAX: ffffffffffffffda RBX: 00007f17c8225fa0 RCX: 00007f17c7f9e199 [ 940.547540][T18404] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 940.547555][T18404] RBP: 00007f17c8df0090 R08: 0000000000000000 R09: 0000000000000000 [ 940.547570][T18404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 940.547583][T18404] R13: 00007f17c8226038 R14: 00007f17c8225fa0 R15: 00007f17c834fa48 [ 940.547616][T18404] [ 940.547778][T18404] Mem-Info: [ 940.547807][T18404] active_anon:51066 inactive_anon:0 isolated_anon:0 [ 940.547807][T18404] active_file:83 inactive_file:18856 isolated_file:0 [ 940.547807][T18404] unevictable:0 dirty:441 writeback:0 [ 940.547807][T18404] slab_reclaimable:10533 slab_unreclaimable:108105 [ 940.547807][T18404] mapped:31803 shmem:40935 pagetables:2116 [ 940.547807][T18404] sec_pagetables:1 bounce:0 [ 940.547807][T18404] kernel_misc_reclaimable:0 [ 940.547807][T18404] free:1280122 free_pcp:9682 free_cma:0 [ 940.547905][T18404] Node 0 active_anon:204264kB inactive_anon:0kB active_file:332kB inactive_file:75256kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:127180kB dirty:1764kB writeback:0kB shmem:163740kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14052kB pagetables:8280kB sec_pagetables:4kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 940.548002][T18404] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:168kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:32kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:184kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 940.548105][T18404] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 940.548230][T18404] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 940.548396][T18404] Node 0 DMA32 free:1157768kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:204264kB inactive_anon:0kB active_file:332kB inactive_file:75256kB unevictable:0kB writepending:1764kB zspages:0kB present:3129332kB managed:2546824kB mlocked:0kB bounce:0kB free_pcp:38716kB local_pcp:20520kB free_cma:0kB [ 940.548493][T18404] lowmem_reserve[]: 0 0 0 0 0 [ 940.548571][T18404] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 940.633083][T18404] lowmem_reserve[]: 0 0 0 0 0 [ 940.633207][T18404] Node 1 Normal free:3947360kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:168kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 940.633372][T18404] lowmem_reserve[]: 0 0 0 0 0 [ 940.633483][T18404] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 940.633686][T18404] Node 0 DMA32: 929*4kB (UME) 1709*8kB (UME) 414*16kB (UME) 928*32kB (UME) 450*64kB (UME) 259*128kB (UME) 118*256kB (UME) 40*512kB (UM) 8*1024kB (UME) 4*2048kB (UME) 238*4096kB (UM) = 1157580kB [ 940.633877][T18404] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 940.634007][T18404] Node 1 Normal: 8*4kB (UM) 14*8kB (UM) 13*16kB (UM) 12*32kB (UM) 14*64kB (UM) 8*128kB (UM) 7*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (M) 960*4096kB (M) = 3947360kB [ 940.634186][T18404] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 940.634205][T18404] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 940.634223][T18404] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 940.634242][T18404] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 940.634260][T18404] 59942 total pagecache pages [ 940.634270][T18404] 0 pages in swap cache [ 940.634278][T18404] Free swap = 124996kB [ 940.634287][T18404] Total swap = 124996kB [ 940.634297][T18404] 2097051 pages RAM [ 940.634306][T18404] 0 pages HighMem/MovableOnly [ 940.634314][T18404] 428729 pages reserved [ 940.648492][T18404] 0 pages cma reserved [ 940.708939][ T5716] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 941.022010][ T5716] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 941.191720][ T5716] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 941.191785][ T5716] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 941.191829][ T5716] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 941.191927][ T5716] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 941.349754][ T5716] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 941.349784][ T5716] usb 4-1: Product: syz [ 941.349799][ T5716] usb 4-1: Manufacturer: syz [ 941.464193][ T5716] cdc_wdm 4-1:1.0: skipping garbage [ 941.464214][ T5716] cdc_wdm 4-1:1.0: skipping garbage [ 941.672747][ T5716] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 941.672771][ T5716] cdc_wdm 4-1:1.0: Unknown control protocol [ 941.855425][ T5716] usb 4-1: USB disconnect, device number 71 [ 942.069631][T18414] netlink: 'syz.5.3528': attribute type 7 has an invalid length. [ 942.088890][ T5695] usb 8-1: new high-speed USB device number 82 using dummy_hcd [ 942.168897][ T5616] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 942.172294][T18408] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3528'. [ 942.241529][ T5695] usb 8-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 942.247229][ T5695] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.247262][ T5695] usb 8-1: Product: syz [ 942.247281][ T5695] usb 8-1: Manufacturer: syz [ 942.247300][ T5695] usb 8-1: SerialNumber: syz [ 942.273089][ T5695] usb 8-1: config 0 descriptor?? [ 942.311009][ T5695] i2c-tiny-usb 8-1:0.0: version 6d.cc found at bus 008 address 082 [ 942.331185][ T5616] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 942.337878][ T5616] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 942.362360][ T5616] usb 3-1: config 0 descriptor?? [ 942.580943][ T5616] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 942.871515][ T5616] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 1 [ 942.871548][ T5616] [drm] Initialized udl on minor 1 [ 942.900658][ T5695] (null): failure reading functionality [ 943.218205][ T5695] i2c i2c-1: failure reading functionality [ 943.234791][ T5695] i2c i2c-1: connected i2c-tiny-usb device [ 943.260523][ T5695] usb 8-1: USB disconnect, device number 82 [ 944.268510][T18446] vivid-000: ================= START STATUS ================= [ 944.268533][T18446] vivid-000: Enable Output Cropping: true grabbed [ 944.268610][T18446] vivid-000: Enable Output Composing: true grabbed [ 944.268640][T18446] vivid-000: Enable Output Scaler: true grabbed [ 944.268669][T18446] vivid-000: Tx RGB Quantization Range: Automatic grabbed [ 944.313085][T18446] vivid-000: Transmit Mode: HDMI grabbed [ 944.313115][T18446] vivid-000: Hotplug Present: 0x00000000 [ 944.313139][T18446] vivid-000: RxSense Present: 0x00000000 [ 944.313161][T18446] vivid-000: EDID Present: 0x00000000 [ 944.313184][T18446] vivid-000: ================== END STATUS ================== [ 944.750260][ T5695] usb 4-1: new full-speed USB device number 72 using dummy_hcd [ 944.908004][ T5695] usb 4-1: unable to get BOS descriptor or descriptor too short [ 944.911470][ T5695] usb 4-1: not running at top speed; connect to a high speed hub [ 944.911559][ T5695] usb 4-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 944.939020][ T5695] usb 4-1: config 1 has an invalid descriptor of length 72, skipping remainder of the config [ 944.939079][ T5695] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 944.946664][ T5695] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.946684][ T5695] usb 4-1: Product: syz [ 944.946696][ T5695] usb 4-1: Manufacturer: syz [ 944.946707][ T5695] usb 4-1: SerialNumber: syz [ 945.297766][ T5695] usb 4-1: 3:0: cannot get min/max values for control 4 (id 3) [ 945.312698][ T5695] usb 4-1: 3:0: cannot get min/max values for control 5 (id 3) [ 945.315789][ T5695] usb 4-1: 3:0: cannot get min/max values for control 8 (id 3) [ 945.319585][ T5695] usb 4-1: 3:0: failed to get current value for ch 0 (-71) [ 945.338670][ T5695] usb 4-1: 3:0: cannot get min/max values for control 12 (id 3) [ 945.432758][ T5695] usb 4-1: 3:0: cannot get min/max values for control 5 (id 3) [ 945.495978][ T5695] usb 4-1: USB disconnect, device number 72 [ 945.509211][T18460] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3544'. [ 945.509234][T18460] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3544'. [ 945.537299][ T5745] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 945.617322][T16986] udevd[16986]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 945.708993][ T5745] usb 6-1: Using ep0 maxpacket: 32 [ 945.710633][ T5745] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 945.754861][ T5745] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.754893][ T5745] usb 6-1: Product: syz [ 945.754910][ T5745] usb 6-1: Manufacturer: syz [ 945.754936][ T5745] usb 6-1: SerialNumber: syz [ 945.758545][ T5745] usb 6-1: config 0 descriptor?? [ 945.804573][ T5745] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 946.159308][ T5695] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 946.296759][T18473] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 946.297602][T18473] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 946.317762][ T5695] usb 9-1: Using ep0 maxpacket: 16 [ 946.321504][ T5695] usb 9-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice=27.b1 [ 946.326315][ T5695] usb 9-1: config 3 has an invalid interface number: 20 but max is 0 [ 946.326342][ T5695] usb 9-1: config 3 has no interface number 0 [ 946.326372][ T5695] usb 9-1: config 3 interface 20 has no altsetting 0 [ 946.354121][ T5695] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.354150][ T5695] usb 9-1: Product: syz [ 946.354196][ T5695] usb 9-1: Manufacturer: syz [ 946.354213][ T5695] usb 9-1: SerialNumber: syz [ 946.410752][T18473] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 946.410829][T18473] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 946.414661][T18473] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 946.415109][T18473] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 946.449520][T18473] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 946.453657][T18473] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 946.453744][T18473] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 946.455481][T18473] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 947.248472][ T5745] gspca_stk1135: reg_w 0xf err -71 [ 947.249952][ T5745] gspca_stk1135: serial bus timeout: status=0x00 [ 947.249988][ T5745] gspca_stk1135: Sensor write failed [ 947.250078][ T5745] gspca_stk1135: serial bus timeout: status=0x00 [ 947.250090][ T5745] gspca_stk1135: Sensor write failed [ 947.250209][ T5745] gspca_stk1135: serial bus timeout: status=0x00 [ 947.250221][ T5745] gspca_stk1135: Sensor read failed [ 947.250319][ T5745] gspca_stk1135: serial bus timeout: status=0x00 [ 947.250351][ T5745] gspca_stk1135: Sensor read failed [ 947.250379][ T5745] gspca_stk1135: Detected sensor type unknown (0x0) [ 947.250475][ T5745] gspca_stk1135: serial bus timeout: status=0x00 [ 947.250506][ T5745] gspca_stk1135: Sensor read failed [ 947.250577][ T5745] gspca_stk1135: serial bus timeout: status=0x00 [ 947.250609][ T5745] gspca_stk1135: Sensor read failed [ 947.250699][ T5745] gspca_stk1135: serial bus timeout: status=0x00 [ 947.250712][ T5745] gspca_stk1135: Sensor write failed [ 947.250802][ T5745] gspca_stk1135: serial bus timeout: status=0x00 [ 947.250835][ T5745] gspca_stk1135: Sensor write failed [ 947.251004][ T5745] stk1135 6-1:0.0: probe with driver stk1135 failed with error -71 [ 947.399605][ T5745] usb 6-1: USB disconnect, device number 90 [ 947.711022][ T5695] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:3.20/input/input62 [ 947.727005][ T4970] bcm5974 9-1:3.20: could not read from device [ 947.755854][ T4970] bcm5974 9-1:3.20: could not read from device [ 947.777233][ T4970] bcm5974 9-1:3.20: could not read from device [ 947.802611][ T5695] usb 9-1: USB disconnect, device number 9 [ 947.913937][ T5616] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 947.914411][ T5616] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 947.933238][ T5688] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 947.938127][ T5688] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 947.959003][ T5616] usb 3-1: USB disconnect, device number 15 [ 948.057079][T18487] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3549'. [ 948.083784][ T5688] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 948.308987][ T52] Bluetooth: hci5: command 0x0406 tx timeout [ 948.469907][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 948.470037][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 948.470132][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 948.910007][ T5616] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 949.069540][ T5616] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 949.071660][ T5616] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 949.071707][ T5616] usb 3-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 949.071738][ T5616] usb 3-1: config 2 interface 0 has no altsetting 0 [ 949.075324][ T5616] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.075351][ T5616] usb 3-1: Product: syz [ 949.075368][ T5616] usb 3-1: Manufacturer: syz [ 949.075385][ T5616] usb 3-1: SerialNumber: syz [ 949.432577][T18496] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3553'. [ 949.449864][T18520] netlink: 'syz.5.3559': attribute type 2 has an invalid length. [ 949.507617][ T5616] usb 3-1: USB disconnect, device number 16 [ 949.890892][ T5695] usb 8-1: new high-speed USB device number 83 using dummy_hcd [ 950.020811][ T5695] usb 8-1: device descriptor read/64, error -71 [ 950.259009][ T5695] usb 8-1: new high-speed USB device number 84 using dummy_hcd [ 950.388875][ T5617] Bluetooth: hci5: command 0x0406 tx timeout [ 950.388984][ T5695] usb 8-1: device descriptor read/64, error -71 [ 950.457412][T18530] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3562'. [ 950.499057][ T5695] usb usb8-port1: attempt power cycle [ 950.549189][ T5617] Bluetooth: hci2: command 0x0406 tx timeout [ 950.549233][ T5617] Bluetooth: hci1: command 0x0c1a tx timeout [ 950.549264][ T5617] Bluetooth: hci4: command 0x0c1a tx timeout [ 950.838954][ T5695] usb 8-1: new high-speed USB device number 85 using dummy_hcd [ 950.862963][ T5695] usb 8-1: device descriptor read/8, error -71 [ 950.947147][T18540] Failed to get privilege flags for destination (handle=0x0:0x0) [ 950.973981][T18540] syz_tun: entered allmulticast mode [ 951.099239][ T5695] usb 8-1: new high-speed USB device number 86 using dummy_hcd [ 951.120758][ T5695] usb 8-1: device descriptor read/8, error -71 [ 951.229275][ T5695] usb usb8-port1: unable to enumerate USB device [ 951.913650][T18535] syz_tun: left allmulticast mode [ 952.630534][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 952.630545][ T5617] Bluetooth: hci1: command 0x0c1a tx timeout [ 952.775225][T18568] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3575'. [ 952.808813][ T5695] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 952.963492][ T5695] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 952.978854][ T5695] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.978884][ T5695] usb 3-1: Product: syz [ 952.978901][ T5695] usb 3-1: Manufacturer: syz [ 952.978918][ T5695] usb 3-1: SerialNumber: syz [ 952.987174][ T5695] usb 3-1: config 0 descriptor?? [ 953.211411][T18580] ip_tables: iptables: counters copy to user failed while replacing table [ 953.306437][ T5716] usb 3-1: USB disconnect, device number 17 [ 953.529831][T13882] udevd[13882]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 953.603173][T18585] fuse: fd is not a fuse device [ 953.888523][T18586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 953.917817][T18586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 954.119319][ T5716] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 954.270254][ T5716] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 954.272209][ T5716] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 954.272249][ T5716] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 954.272309][ T5716] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 954.341622][T18594] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 954.361801][ T5716] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 954.531717][ T5745] usb 8-1: new low-speed USB device number 87 using dummy_hcd [ 954.701621][ T5745] usb 8-1: New USB device found, idVendor=17cc, idProduct=4711, bcdDevice=37.4c [ 954.710893][ T5745] usb 8-1: config 0 has an invalid interface number: 146 but max is 0 [ 954.710961][ T5745] usb 8-1: config 0 has no interface number 0 [ 954.711028][ T5745] usb 8-1: config 0 interface 146 has no altsetting 0 [ 954.776301][ T5745] usb 8-1: string descriptor 0 read error: -22 [ 954.776658][ T5745] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.838858][ T5745] usb 8-1: config 0 descriptor?? [ 954.886769][ T5745] snd-usb-caiaq 8-1:0.146: can't set alt interface. [ 954.886834][ T5745] usb 8-1: unable to init card! (ret=-5) [ 954.911864][ T5745] snd-usb-caiaq 8-1:0.146: probe with driver snd-usb-caiaq failed with error -5 [ 955.048581][ T5716] usb 4-1: USB disconnect, device number 73 [ 955.097466][ T5680] usb 8-1: USB disconnect, device number 87 [ 955.687080][T18627] syzkaller0: entered promiscuous mode [ 955.687106][T18627] syzkaller0: entered allmulticast mode [ 955.858822][ T5680] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 956.010105][ T5680] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 956.014492][ T5680] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.014520][ T5680] usb 9-1: Product: syz [ 956.014537][ T5680] usb 9-1: Manufacturer: syz [ 956.014555][ T5680] usb 9-1: SerialNumber: syz [ 956.694548][ T5680] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -EPROTO [ 956.694614][ T5680] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 956.697132][ T5680] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 956.697201][ T5680] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 956.754495][ T5680] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 956.789631][ T5680] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -71 [ 956.813102][ T5680] usb 9-1: USB disconnect, device number 10 [ 956.919379][T18644] kvm: pic: non byte write [ 957.179143][ T5616] usb 8-1: new high-speed USB device number 88 using dummy_hcd [ 957.184461][T18651] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 957.335398][ T5616] usb 8-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 957.368638][ T5616] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.368670][ T5616] usb 8-1: Product: syz [ 957.368887][ T5616] usb 8-1: Manufacturer: syz [ 957.368905][ T5616] usb 8-1: SerialNumber: syz [ 957.397112][ T5616] usb 8-1: config 0 descriptor?? [ 957.409013][ T5616] i2c-tiny-usb 8-1:0.0: version 6d.cc found at bus 008 address 088 [ 958.026981][ T5616] (null): failure reading functionality [ 958.036505][ T5616] i2c i2c-1: failure reading functionality [ 958.095341][ T5616] i2c i2c-1: connected i2c-tiny-usb device [ 958.108549][ T5616] usb 8-1: USB disconnect, device number 88 [ 958.719031][T18679] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3609'. [ 959.481731][T18696] netlink: 'syz.2.3617': attribute type 1 has an invalid length. [ 959.665381][T18697] tipc: Started in network mode [ 959.665418][T18697] tipc: Node identity 227b9a13289c, cluster identity 4711 [ 959.665586][T18697] tipc: Enabled bearer , priority 0 [ 959.667606][T18697] syzkaller0: entered promiscuous mode [ 959.667627][T18697] syzkaller0: entered allmulticast mode [ 959.709204][T18697] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 960.251645][T18704] tipc: Resetting bearer [ 960.468999][ T5716] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 960.592617][T18700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3617'. [ 960.655384][ T5716] usb 4-1: Using ep0 maxpacket: 32 [ 960.655763][T18700] ip6gretap0: entered promiscuous mode [ 960.671285][ T5616] tipc: Node number set to 182950419 [ 960.709842][ T5716] usb 4-1: unable to get BOS descriptor or descriptor too short [ 960.709976][ T5716] usb 4-1: New USB device found, idVendor=0984, idProduct=0301, bcdDevice= 1.28 [ 960.714235][ T5716] usb 4-1: config 148 has an invalid interface number: 178 but max is 0 [ 960.714303][ T5716] usb 4-1: config 148 has no interface number 0 [ 960.714374][ T5716] usb 4-1: config 148 interface 178 has no altsetting 0 [ 960.765364][ T5716] usb 4-1: string descriptor 0 read error: -22 [ 960.766379][ T5716] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.825610][ T5716] usb-storage 4-1:148.178: USB Mass Storage device detected [ 960.851666][ T5716] usb-storage 4-1:148.178: Quirks match for vid 0984 pid 0301: 800000 [ 961.076493][T18695] tipc: Resetting bearer [ 961.183982][ T5716] usb 4-1: USB disconnect, device number 74 [ 961.254833][T18695] tipc: Disabling bearer [ 961.451508][T18718] socket: no more sockets [ 961.472791][T18720] FAULT_INJECTION: forcing a failure. [ 961.472791][T18720] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 961.472830][T18720] CPU: 1 UID: 0 PID: 18720 Comm: syz.2.3622 Tainted: G L syzkaller #0 PREEMPT(full) [ 961.472862][T18720] Tainted: [L]=SOFTLOCKUP [ 961.472871][T18720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 961.472885][T18720] Call Trace: [ 961.472896][T18720] [ 961.472906][T18720] dump_stack_lvl+0xe8/0x150 [ 961.472944][T18720] should_fail_ex+0x410/0x560 [ 961.472981][T18720] _copy_from_user+0x2d/0xb0 [ 961.473015][T18720] ucma_listen+0xa0/0x440 [ 961.473041][T18720] ? __pfx_ucma_listen+0x10/0x10 [ 961.473077][T18720] ucma_write+0x24e/0x2f0 [ 961.473111][T18720] ? common_file_perm+0x20e/0x2b0 [ 961.473145][T18720] ? __pfx_ucma_write+0x10/0x10 [ 961.473178][T18720] ? security_file_permission+0x75/0x260 [ 961.473206][T18720] ? rw_verify_area+0x203/0x4c0 [ 961.473248][T18720] vfs_writev+0x4bb/0x990 [ 961.473281][T18720] ? __pfx_ucma_write+0x10/0x10 [ 961.473322][T18720] ? __pfx_vfs_writev+0x10/0x10 [ 961.473368][T18720] ? __fget_files+0x2a/0x420 [ 961.473407][T18720] ? __fget_files+0x3a2/0x420 [ 961.473441][T18720] ? __fget_files+0x2a/0x420 [ 961.473485][T18720] do_writev+0x154/0x2e0 [ 961.473522][T18720] ? __pfx_do_writev+0x10/0x10 [ 961.473571][T18720] do_syscall_64+0x166/0x520 [ 961.473606][T18720] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 961.473631][T18720] ? clear_bhb_loop+0x70/0xc0 [ 961.473659][T18720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 961.473683][T18720] RIP: 0033:0x7f8808d9e199 [ 961.473705][T18720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 961.473726][T18720] RSP: 002b:00007f8809cfb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 961.473752][T18720] RAX: ffffffffffffffda RBX: 00007f8809025fa0 RCX: 00007f8808d9e199 [ 961.473770][T18720] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 000000000000000e [ 961.473785][T18720] RBP: 00007f8809cfb090 R08: 0000000000000000 R09: 0000000000000000 [ 961.473799][T18720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 961.473814][T18720] R13: 00007f8809026038 R14: 00007f8809025fa0 R15: 00007f880914fa48 [ 961.473849][T18720] [ 961.562160][T18718] socket: no more sockets [ 962.065273][ T31] kauditd_printk_skb: 42 callbacks suppressed [ 962.065331][ T31] audit: type=1326 audit(1791282322.820:13061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18725 comm="syz.8.3623" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff89b59e199 code=0x7ffc0000 [ 962.065440][ T31] audit: type=1326 audit(1791282322.820:13062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18725 comm="syz.8.3623" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff89b59e199 code=0x7ffc0000 [ 962.129989][ T31] audit: type=1326 audit(1791282322.870:13063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18725 comm="syz.8.3623" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7ff89b59e199 code=0x7ffc0000 [ 962.130141][ T31] audit: type=1326 audit(1791282322.870:13064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18725 comm="syz.8.3623" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff89b59e199 code=0x7ffc0000 [ 962.130261][ T31] audit: type=1326 audit(1791282322.870:13065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18725 comm="syz.8.3623" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff89b59e199 code=0x7ffc0000 [ 962.136217][ T31] audit: type=1326 audit(1791282322.890:13066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18728 comm="syz.3.3626" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efed439e199 code=0x7ffc0000 [ 962.148781][ T31] audit: type=1326 audit(1791282322.890:13067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18728 comm="syz.3.3626" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efed439e199 code=0x7ffc0000 [ 962.150402][ T31] audit: type=1326 audit(1791282322.890:13068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18725 comm="syz.8.3623" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7ff89b59e199 code=0x7ffc0000 [ 962.150531][ T31] audit: type=1326 audit(1791282322.890:13069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18725 comm="syz.8.3623" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff89b59e199 code=0x7ffc0000 [ 962.150659][ T31] audit: type=1326 audit(1791282322.890:13070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18725 comm="syz.8.3623" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff89b59e199 code=0x7ffc0000 [ 962.480755][ T5716] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 962.576470][T18736] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 962.620609][ T5745] usb 8-1: new high-speed USB device number 89 using dummy_hcd [ 962.644820][ T5716] usb 4-1: Using ep0 maxpacket: 16 [ 962.647438][ T5716] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 962.669757][ T5716] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 962.669822][ T5716] usb 4-1: config 0 has no interfaces? [ 962.678187][ T5716] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.678247][ T5716] usb 4-1: Product: syz [ 962.678282][ T5716] usb 4-1: Manufacturer: syz [ 962.678318][ T5716] usb 4-1: SerialNumber: syz [ 962.735492][ T5716] usb 4-1: config 0 descriptor?? [ 962.809972][ T5745] usb 8-1: Using ep0 maxpacket: 16 [ 962.813156][ T5745] usb 8-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 4.02 [ 962.817096][ T5745] usb 8-1: config 255 has too many interfaces: 236, using maximum allowed: 32 [ 962.817158][ T5745] usb 8-1: config 255 has 1 interface, different from the descriptor's value: 236 [ 962.868274][ T5745] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 962.868340][ T5745] usb 8-1: SerialNumber: syz [ 962.922699][ T5745] ftdi_sio 8-1:255.0: FTDI USB Serial Device converter detected [ 962.938985][ T5745] ftdi_sio ttyUSB0: unknown device type: 0x402 [ 963.199672][T18724] program syz.7.3625 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 963.230045][ T5616] usb 8-1: USB disconnect, device number 89 [ 963.232252][ T5616] ftdi_sio 8-1:255.0: device disconnected [ 963.355122][T18750] netlink: 'syz.2.3632': attribute type 1 has an invalid length. [ 963.415319][T18752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 963.451568][T18752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 964.052811][T18760] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3632'. [ 964.681740][T18772] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[17609] was attempted by "ci-upstream-kasan-gce/syz-executor exec"[18772] [ 965.059020][ T5680] usb 8-1: new high-speed USB device number 90 using dummy_hcd [ 965.101775][ T5616] usb 4-1: USB disconnect, device number 75 [ 965.189036][ T5680] usb 8-1: device descriptor read/64, error -71 [ 965.436365][ T5680] usb 8-1: new high-speed USB device number 91 using dummy_hcd [ 965.568892][ T5680] usb 8-1: device descriptor read/64, error -71 [ 965.679094][ T5680] usb usb8-port1: attempt power cycle [ 966.019055][ T5680] usb 8-1: new high-speed USB device number 92 using dummy_hcd [ 966.040420][ T5680] usb 8-1: device descriptor read/8, error -71 [ 966.279415][ T5680] usb 8-1: new high-speed USB device number 93 using dummy_hcd [ 966.302110][ T5680] usb 8-1: device descriptor read/8, error -71 [ 966.409905][ T5680] usb usb8-port1: unable to enumerate USB device [ 966.946281][T18797] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 966.946313][T18797] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 966.977513][T18797] vhci_hcd vhci_hcd.0: Device attached [ 967.208774][ T5616] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 967.438873][ T5680] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 967.503487][T18798] vhci_hcd: connection reset by peer [ 967.505611][T15789] vhci_hcd vhci_hcd.2: stop threads [ 967.505676][T15789] vhci_hcd vhci_hcd.2: release socket [ 967.505837][T15789] vhci_hcd vhci_hcd.2: disconnect device [ 967.590797][ T5680] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 967.592361][ T5680] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 967.593124][ T5680] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 967.593148][ T5680] usb 4-1: config 220 has no interface number 2 [ 967.593213][ T5680] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 967.593242][ T5680] usb 4-1: config 220 interface 0 has no altsetting 0 [ 967.593263][ T5680] usb 4-1: config 220 interface 76 has no altsetting 0 [ 967.593284][ T5680] usb 4-1: config 220 interface 1 has no altsetting 0 [ 967.596928][ T5680] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.596954][ T5680] usb 4-1: Product: syz [ 967.596971][ T5680] usb 4-1: Manufacturer: syz [ 967.596987][ T5680] usb 4-1: SerialNumber: syz [ 967.984265][T18812] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3649'. [ 968.062783][ T5680] usb 4-1: selecting invalid altsetting 0 [ 968.095099][ T5680] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 968.095137][ T5680] uvcvideo 4-1:220.0: No valid video chain found. [ 968.120545][ T5680] usb 4-1: selecting invalid altsetting 0 [ 968.120574][ T5680] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 968.147030][ T5680] usb 4-1: USB disconnect, device number 76 [ 968.726850][T18821] syzkaller0: entered promiscuous mode [ 968.726876][T18821] syzkaller0: entered allmulticast mode [ 968.775762][T18824] Cannot find add_set index 0 as target [ 968.805423][T18821] tipc: Started in network mode [ 968.818372][T18821] tipc: Node identity a2011b191901, cluster identity 4711 [ 968.846609][T18821] tipc: Enabled bearer , priority 0 [ 968.888035][T18824] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3656'. [ 969.003822][T18830] tipc: Resetting bearer [ 969.133820][ T31] kauditd_printk_skb: 96 callbacks suppressed [ 969.133843][ T31] audit: type=1326 audit(1791282329.890:13167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18823 comm="syz.3.3656" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efed439e199 code=0x7ffc0000 [ 969.134389][ T31] audit: type=1326 audit(1791282329.890:13168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18823 comm="syz.3.3656" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efed439e199 code=0x7ffc0000 [ 969.134864][ T31] audit: type=1326 audit(1791282329.890:13169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18823 comm="syz.3.3656" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efed435e9ce code=0x7ffc0000 [ 969.135762][ T31] audit: type=1326 audit(1791282329.890:13170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18823 comm="syz.3.3656" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efed439e199 code=0x7ffc0000 [ 969.136133][ T31] audit: type=1326 audit(1791282329.890:13171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18823 comm="syz.3.3656" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efed439e199 code=0x7ffc0000 [ 969.238374][ T31] audit: type=1326 audit(1791282329.990:13172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18823 comm="syz.3.3656" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efed439e199 code=0x7ffc0000 [ 969.238559][ T31] audit: type=1326 audit(1791282329.990:13173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18823 comm="syz.3.3656" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efed439e199 code=0x7ffc0000 [ 969.238679][ T31] audit: type=1326 audit(1791282329.990:13174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18823 comm="syz.3.3656" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efed439e199 code=0x7ffc0000 [ 969.388200][T18817] tipc: Resetting bearer [ 969.445998][T18817] tipc: Disabling bearer [ 970.066863][T18844] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3663'. [ 970.383395][T18853] FAULT_INJECTION: forcing a failure. [ 970.383395][T18853] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 970.383436][T18853] CPU: 1 UID: 0 PID: 18853 Comm: syz.3.3666 Tainted: G L syzkaller #0 PREEMPT(full) [ 970.383468][T18853] Tainted: [L]=SOFTLOCKUP [ 970.383486][T18853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 970.383500][T18853] Call Trace: [ 970.383511][T18853] [ 970.383521][T18853] dump_stack_lvl+0xe8/0x150 [ 970.383561][T18853] should_fail_ex+0x410/0x560 [ 970.383596][T18853] _copy_to_user+0x31/0xb0 [ 970.383633][T18853] simple_read_from_buffer+0xe1/0x170 [ 970.383675][T18853] proc_fail_nth_read+0x1bb/0x230 [ 970.383699][T18853] ? common_file_perm+0x20e/0x2b0 [ 970.383734][T18853] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 970.383763][T18853] ? rw_verify_area+0x24a/0x4c0 [ 970.383816][T18853] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 970.383842][T18853] vfs_read+0x213/0xa80 [ 970.383870][T18853] ? __pfx___mutex_lock+0x10/0x10 [ 970.383907][T18853] ? __pfx_vfs_read+0x10/0x10 [ 970.383932][T18853] ? __fget_files+0x2a/0x420 [ 970.383984][T18853] ? __fget_files+0x3a2/0x420 [ 970.384014][T18853] ? __fget_files+0x2a/0x420 [ 970.384055][T18853] ksys_read+0x150/0x270 [ 970.384080][T18853] ? __pfx_ksys_read+0x10/0x10 [ 970.384114][T18853] do_syscall_64+0x166/0x520 [ 970.384144][T18853] ? trace_irq_disable+0x3b/0x140 [ 970.384168][T18853] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.384192][T18853] ? clear_bhb_loop+0x70/0xc0 [ 970.384219][T18853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.384242][T18853] RIP: 0033:0x7efed435e9ce [ 970.384263][T18853] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 970.384282][T18853] RSP: 002b:00007efed523cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 970.384306][T18853] RAX: ffffffffffffffda RBX: 00007efed523d6c0 RCX: 00007efed435e9ce [ 970.384324][T18853] RDX: 000000000000000f RSI: 00007efed523d0a0 RDI: 0000000000000004 [ 970.384337][T18853] RBP: 00007efed523d090 R08: 0000000000000000 R09: 0000000000000000 [ 970.384351][T18853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 970.384366][T18853] R13: 00007efed4626038 R14: 00007efed4625fa0 R15: 00007efed474fa48 [ 970.384404][T18853] [ 970.404427][ T5680] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 970.663601][ T5680] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 970.683142][ T5680] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 970.683181][ T5680] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 970.683210][ T5680] usb 3-1: config 0 interface 0 has no altsetting 0 [ 970.683245][ T5680] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 970.687376][ T5680] usb 3-1: config 0 descriptor?? [ 970.849420][T18851] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 971.073711][T18846] xt_hashlimit: size too large, truncated to 1048576 [ 971.547782][T18874] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 971.578576][T18873] ip_tables: iptables: counters copy to user failed while replacing table [ 971.730693][ T5680] usbhid 3-1:0.0: can't add hid device: -71 [ 971.730803][ T5680] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 971.757782][ T5680] usb 3-1: USB disconnect, device number 18 [ 971.900830][ T5695] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 971.912936][ T5745] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 972.049790][ T5695] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 972.050962][ T5695] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 972.050987][ T5695] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 972.051008][ T5695] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 972.051051][ T5695] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 972.052641][ T5695] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 972.052660][ T5695] usb 6-1: Product: syz [ 972.052672][ T5695] usb 6-1: Manufacturer: syz [ 972.059559][ T5695] cdc_wdm 6-1:1.0: skipping garbage [ 972.059576][ T5695] cdc_wdm 6-1:1.0: skipping garbage [ 972.082140][ T5695] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 972.082223][ T5695] cdc_wdm 6-1:1.0: Unknown control protocol [ 972.144531][ T5745] usb 9-1: Using ep0 maxpacket: 16 [ 972.185884][ T5745] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.00 [ 972.264372][ T5745] usb 9-1: config 254 has an invalid interface number: 235 but max is 0 [ 972.264405][ T5745] usb 9-1: config 254 has no interface number 0 [ 972.264456][ T5745] usb 9-1: config 254 interface 235 altsetting 2 has an endpoint descriptor with address 0xDA, changing to 0x8A [ 972.264483][ T5745] usb 9-1: config 254 interface 235 altsetting 2 endpoint 0x8A has invalid wMaxPacketSize 0 [ 972.264508][ T5745] usb 9-1: config 254 interface 235 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 972.264530][ T5745] usb 9-1: config 254 interface 235 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 972.264554][ T5745] usb 9-1: config 254 interface 235 has no altsetting 0 [ 972.299192][ T5616] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 972.450279][ T5745] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.450311][ T5745] usb 9-1: Product: syz [ 972.450327][ T5745] usb 9-1: Manufacturer: syz [ 972.450344][ T5745] usb 9-1: SerialNumber: syz [ 972.556108][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 972.661880][ T5716] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 972.709093][ T5745] usbtest 9-1:254.235: Linux gadget zero [ 972.709116][ T5745] usbtest 9-1:254.235: high-speed {control in/out bulk-in iso-in} tests (+alt) [ 972.770335][ T5680] usb 6-1: USB disconnect, device number 91 [ 972.966488][ T5716] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 973.175763][T18895] ip_tables: iptables: counters copy to user failed while replacing table [ 973.243498][ T5716] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.243521][ T5716] usb 3-1: Product: syz [ 973.243533][ T5716] usb 3-1: Manufacturer: syz [ 973.243543][ T5716] usb 3-1: SerialNumber: syz [ 973.246658][ T5716] usb 3-1: config 0 descriptor?? [ 973.288806][ T5716] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 019 [ 973.594991][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 973.736022][ T5716] (null): failure reading functionality [ 974.081505][ T5616] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 974.240731][ T5616] usb 6-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 974.243071][ T5716] i2c i2c-1: failure reading functionality [ 974.244915][ T5616] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 252, changing to 7 [ 974.245508][ T5716] i2c i2c-1: connected i2c-tiny-usb device [ 974.248590][ T5616] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.248617][ T5616] usb 6-1: Product: syz [ 974.248633][ T5616] usb 6-1: Manufacturer: syz [ 974.248650][ T5616] usb 6-1: SerialNumber: syz [ 974.320037][ T5716] usb 3-1: USB disconnect, device number 19 [ 974.537145][ T5680] usb 9-1: USB disconnect, device number 11 [ 974.627202][ T5616] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 974.640393][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 974.767713][ T5616] usb 6-1: USB disconnect, device number 92 [ 974.838545][T13883] udevd[13883]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 974.923403][ T5716] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 975.147466][ T5716] usb 3-1: Using ep0 maxpacket: 16 [ 975.187104][ T5716] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 975.352580][T18928] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3684'. [ 975.429103][ T5716] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 975.429135][ T5716] usb 3-1: Product: syz [ 975.429153][ T5716] usb 3-1: Manufacturer: syz [ 975.429170][ T5716] usb 3-1: SerialNumber: syz [ 975.432622][ T5716] usb 3-1: config 0 descriptor?? [ 975.686686][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 975.775972][ T5745] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 975.968492][ T5716] usb 3-1: USB disconnect, device number 20 [ 976.025436][ T5745] usb 4-1: Using ep0 maxpacket: 8 [ 976.066203][ T5745] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 976.190267][T18943] syzkaller0: entered promiscuous mode [ 976.190284][T18943] syzkaller0: entered allmulticast mode [ 976.195306][T18943] tipc: Started in network mode [ 976.195329][T18943] tipc: Node identity 5a378bd1a7d3, cluster identity 4711 [ 976.195507][T18943] tipc: Enabled bearer , priority 0 [ 976.224566][T18943] tipc: Resetting bearer [ 976.253045][T18943] fuse: Unknown parameter '/dev/net/tun' [ 976.269073][ T5695] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 976.328534][ T5745] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.328557][ T5745] usb 4-1: Product: syz [ 976.328568][ T5745] usb 4-1: Manufacturer: syz [ 976.328579][ T5745] usb 4-1: SerialNumber: syz [ 976.331329][ T5745] usb 4-1: config 0 descriptor?? [ 976.383243][ T5745] gspca_main: sq930x-2.14.0 probing 2770:930c [ 976.430292][ T5695] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice= 1.08 [ 976.436386][ T5695] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.436406][ T5695] usb 9-1: Product: syz [ 976.436417][ T5695] usb 9-1: Manufacturer: syz [ 976.436428][ T5695] usb 9-1: SerialNumber: syz [ 976.728375][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 976.770462][T18945] syzkaller0: entered promiscuous mode [ 976.770488][T18945] syzkaller0: entered allmulticast mode [ 976.820420][T18945] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3690'. [ 976.820462][T18945] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3690'. [ 976.868960][T15789] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 976.869008][T15789] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 976.869527][T15782] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 976.869567][T15782] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 976.942095][T18941] tipc: Resetting bearer [ 976.999700][T18941] tipc: Disabling bearer [ 977.058810][ T5616] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 977.213611][ T5616] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 977.217407][ T5616] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.217427][ T5616] usb 3-1: Product: syz [ 977.217438][ T5616] usb 3-1: Manufacturer: syz [ 977.217477][ T5616] usb 3-1: SerialNumber: syz [ 977.313971][ T5616] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 977.359413][T18927] netlink: 'syz.3.3687': attribute type 10 has an invalid length. [ 977.589399][ T5695] ath6kl: Failed to submit usb control message: -110 [ 977.589507][ T5695] ath6kl: unable to send the bmi data to the device: -110 [ 977.589562][ T5695] ath6kl: Unable to send get target info: -110 [ 977.598116][ T5695] ath6kl: Failed to init ath6kl core: -110 [ 977.634432][ T5695] ath6kl_usb 9-1:1.0: probe with driver ath6kl_usb failed with error -110 [ 977.710206][ T5716] usb 9-1: USB disconnect, device number 12 [ 977.730701][ T5745] gspca_sq930x: ucbus_write failed -110 [ 977.730799][ T5745] sq930x 4-1:0.0: probe with driver sq930x failed with error -110 [ 977.835948][ T7899] usb 3-1: USB disconnect, device number 21 [ 978.009989][ T5716] usb 4-1: USB disconnect, device number 77 [ 978.330110][T18960] netlink: NAT attribute type 5 has unexpected length (0 != 2) [ 978.330141][T18960] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 978.338207][T18960] netlink: 160 bytes leftover after parsing attributes in process `syz.7.3698'. [ 978.338232][T18960] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 978.392898][ T5616] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 978.393076][ T5616] ath9k_htc: Failed to initialize the device [ 978.412548][ T7899] usb 3-1: ath9k_htc: USB layer deinitialized [ 978.443259][T18963] socket: no more sockets [ 978.486147][T18963] socket: no more sockets [ 978.511481][T18963] socket: no more sockets [ 978.591426][T18967] netlink: 'syz.2.3701': attribute type 1 has an invalid length. [ 978.807738][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 979.177290][T18983] FAULT_INJECTION: forcing a failure. [ 979.177290][T18983] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 979.177330][T18983] CPU: 1 UID: 0 PID: 18983 Comm: syz.5.3704 Tainted: G L syzkaller #0 PREEMPT(full) [ 979.177359][T18983] Tainted: [L]=SOFTLOCKUP [ 979.177367][T18983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 979.177379][T18983] Call Trace: [ 979.177388][T18983] [ 979.177397][T18983] dump_stack_lvl+0xe8/0x150 [ 979.177432][T18983] should_fail_ex+0x410/0x560 [ 979.177462][T18983] _copy_from_user+0x2d/0xb0 [ 979.177492][T18983] generic_map_update_batch+0x6b1/0xae0 [ 979.177543][T18983] ? __pfx_generic_map_update_batch+0x10/0x10 [ 979.177574][T18983] ? __fget_files+0x2a/0x420 [ 979.177609][T18983] ? __pfx_generic_map_update_batch+0x10/0x10 [ 979.177642][T18983] bpf_map_do_batch+0x391/0x630 [ 979.177674][T18983] __sys_bpf+0xbe5/0xd90 [ 979.177705][T18983] ? __pfx___sys_bpf+0x10/0x10 [ 979.177737][T18983] ? __fget_files+0x2a/0x420 [ 979.177780][T18983] ? ksys_write+0x242/0x270 [ 979.177802][T18983] ? __pfx_ksys_write+0x10/0x10 [ 979.177826][T18983] __x64_sys_bpf+0xba/0xd0 [ 979.177850][T18983] do_syscall_64+0x166/0x520 [ 979.177878][T18983] ? trace_irq_disable+0x3b/0x140 [ 979.177899][T18983] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 979.177919][T18983] ? clear_bhb_loop+0x70/0xc0 [ 979.177942][T18983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 979.177962][T18983] RIP: 0033:0x7f204cb9e199 [ 979.177981][T18983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 979.177999][T18983] RSP: 002b:00007f204daf3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 979.178021][T18983] RAX: ffffffffffffffda RBX: 00007f204ce25fa0 RCX: 00007f204cb9e199 [ 979.178036][T18983] RDX: 0000000000000038 RSI: 00002000000001c0 RDI: 000000000000001a [ 979.178049][T18983] RBP: 00007f204daf3090 R08: 0000000000000000 R09: 0000000000000000 [ 979.178062][T18983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 979.178074][T18983] R13: 00007f204ce26038 R14: 00007f204ce25fa0 R15: 00007f204cf4fa48 [ 979.178105][T18983] [ 979.599616][T18975] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3701'. [ 979.747284][T18991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 979.757781][T18991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 980.014672][ T7899] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 980.186530][ T5716] usb 8-1: new high-speed USB device number 94 using dummy_hcd [ 980.316431][T19012] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3711'. [ 980.350892][ T7899] usb 9-1: Using ep0 maxpacket: 8 [ 980.436361][ T7899] usb 9-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 980.530950][ T5716] usb 8-1: Using ep0 maxpacket: 32 [ 980.615208][ T5716] usb 8-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 980.616261][ T7899] usb 9-1: config index 0 descriptor too short (expected 36, got 27) [ 980.616296][ T7899] usb 9-1: config 0 interface 0 altsetting 168 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 980.616316][ T7899] usb 9-1: config 0 interface 0 has no altsetting 0 [ 980.616341][ T7899] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.618738][ T7899] usb 9-1: config 0 descriptor?? [ 980.628865][T19015] syzkaller0: entered promiscuous mode [ 980.628886][T19015] syzkaller0: entered allmulticast mode [ 980.726962][ T7899] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 980.817217][ T5716] usb 8-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 980.817254][ T5716] usb 8-1: config 0 interface 0 has no altsetting 0 [ 980.817290][ T5716] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.820089][ T5716] usb 8-1: config 0 descriptor?? [ 980.969000][T18998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 980.969294][T18998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 980.970070][T18998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 980.970364][T18998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 980.971018][T18998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 980.971294][T18998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 980.971972][T18998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 980.972259][T18998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 981.407518][T18994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 981.407862][T18994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 981.470947][ T5716] corsair-cpro 0003:1B1C:0C10.0018: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.7-1/input0 [ 981.628368][T19015] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3712'. [ 981.930612][ T5680] usb 9-1: USB disconnect, device number 13 [ 982.413301][T19036] FAULT_INJECTION: forcing a failure. [ 982.413301][T19036] name failslab, interval 1, probability 0, space 0, times 0 [ 982.413351][T19036] ERROR: Out of memory at tomoyo_realpath_from_path. [ 982.886070][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 983.014489][T19056] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3726'. [ 983.211479][T19064] Failed to get privilege flags for destination (handle=0x0:0x0) [ 983.212274][T19064] syz_tun: entered allmulticast mode [ 983.238877][ T5680] usb 6-1: new full-speed USB device number 93 using dummy_hcd [ 983.253715][ T5716] corsair-cpro 0003:1B1C:0C10.0018: probe with driver corsair-cpro failed with error -71 [ 983.265881][ T5716] usb 8-1: USB disconnect, device number 94 [ 983.427287][ T5680] usb 6-1: unable to get BOS descriptor or descriptor too short [ 983.431599][ T5680] usb 6-1: not running at top speed; connect to a high speed hub [ 983.431634][ T5680] usb 6-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 983.472167][ T5680] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 983.472196][ T5680] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 983.520485][ T5680] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.520516][ T5680] usb 6-1: Product: syz [ 983.520533][ T5680] usb 6-1: Manufacturer: syz [ 983.520550][ T5680] usb 6-1: SerialNumber: syz [ 983.822654][T19058] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 983.896898][T19074] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 984.294352][T19061] syz_tun: left allmulticast mode [ 984.535684][T19088] syzkaller0: entered promiscuous mode [ 984.535710][T19088] syzkaller0: entered allmulticast mode [ 984.565009][T19088] tipc: Enabled bearer , priority 0 [ 984.596160][T19088] tipc: Resetting bearer [ 984.607254][ T5680] usb 6-1: 3:0: cannot get min/max values for control 2 (id 3) [ 984.607286][ T5680] usb 6-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 984.607306][ T5680] usb 6-1: [3] FU [LFE Playback Volume] ch = 1, val = 0/1/1 [ 984.616881][ T5680] usb 6-1: 3:0: cannot get min/max values for control 4 (id 3) [ 984.645949][ T5680] usb 6-1: 3:0: cannot get min/max values for control 4 (id 3) [ 984.655738][ T5680] usb 6-1: 3:0: failed to get current value for ch 1 (-71) [ 984.666830][ T5680] usb 6-1: 3:0: cannot get min/max values for control 8 (id 3) [ 984.668550][ T5680] usb 6-1: 3:0: failed to get current value for ch 0 (-71) [ 984.712433][T19094] fuse: Bad value for 'fd' [ 984.775622][ T5680] usb 6-1: USB disconnect, device number 93 [ 984.862248][T16986] udevd[16986]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 984.890803][T19098] bridge0: port 3(vlan2) entered blocking state [ 984.891003][T19098] bridge0: port 3(vlan2) entered disabled state [ 984.891143][T19098] vlan2: entered allmulticast mode [ 984.891161][T19098] geneve0: entered allmulticast mode [ 984.893255][T19098] vlan2: entered promiscuous mode [ 984.893274][T19098] geneve0: entered promiscuous mode [ 984.949455][T19098] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3739'. [ 985.228808][ T5616] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 985.280189][T19084] tipc: Resetting bearer [ 985.324541][T19084] tipc: Disabling bearer [ 985.378797][ T5616] usb 3-1: Using ep0 maxpacket: 16 [ 985.380545][ T5616] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 985.382348][ T5616] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 985.382381][ T5616] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 985.385685][ T5616] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.385718][ T5616] usb 3-1: Product: syz [ 985.385731][ T5616] usb 3-1: Manufacturer: syz [ 985.385742][ T5616] usb 3-1: SerialNumber: syz [ 985.388338][ T5616] usb 3-1: config 0 descriptor?? [ 985.444928][ T7894] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 985.474648][ T5616] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 985.474687][ T5616] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 986.093153][T19123] netlink: 964 bytes leftover after parsing attributes in process `syz.3.3746'. [ 986.242392][ T7894] usb 6-1: unable to get BOS descriptor or descriptor too short [ 986.242452][ T7894] usb 6-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40 [ 986.304742][ T7899] usb 9-1: new low-speed USB device number 14 using dummy_hcd [ 986.462871][ T7894] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 36, changing to 7 [ 986.465038][T19124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 986.465539][T19124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 986.854356][ T5616] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 986.854809][ T5616] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 986.856435][ T5616] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 986.856459][ T5616] em28xx 3-1:0.0: No AC97 audio processor [ 986.885689][ T7894] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.885723][ T7894] usb 6-1: Product: syz [ 986.885742][ T7894] usb 6-1: Manufacturer: syz [ 986.885761][ T7894] usb 6-1: SerialNumber: syz [ 986.965072][ T5616] usb 3-1: USB disconnect, device number 22 [ 986.967808][ T5616] em28xx 3-1:0.0: Disconnecting em28xx [ 986.978148][ T5616] em28xx: Freeing device [ 987.199407][T19140] ip_tables: iptables: counters copy to user failed while replacing table [ 987.235055][T19142] kvm [19102]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0x0 [ 987.330219][ T7894] usb 6-1: 1:1 : sample bitwidth 62 in over sample bytes 2 [ 987.330287][ T7894] usb 6-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 987.438981][ T5616] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 987.484633][ T7894] usb 6-1: unit 2 not found! [ 987.484661][ T7894] usb 6-1: unit 236 not found! [ 987.563553][ T7894] usb 6-1: USB disconnect, device number 94 [ 987.588776][ T5616] usb 4-1: Using ep0 maxpacket: 32 [ 987.589677][ T5616] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 987.591934][ T5616] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 987.591962][ T5616] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 987.604660][ T5616] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 987.604688][ T5616] usb 4-1: Product: syz [ 987.604705][ T5616] usb 4-1: Manufacturer: syz [ 987.604721][ T5616] usb 4-1: SerialNumber: syz [ 987.743217][T15986] udevd[15986]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 987.782463][ T5616] usb 4-1: config 0 descriptor?? [ 987.800178][ T5616] hub 4-1:0.0: bad descriptor, ignoring hub [ 987.800206][ T5616] hub 4-1:0.0: probe with driver hub failed with error -5 [ 988.005735][T19149] blktrace: Concurrent blktraces are not allowed on sg0 [ 988.050582][T19139] ip_tables: iptables: counters copy to user failed while replacing table [ 988.156778][T19153] Failed to get privilege flags for destination (handle=0x0:0x0) [ 988.157279][T19153] syz_tun: entered allmulticast mode [ 988.267126][T19155] fuse: Unknown parameter '0x000000000000000400000000000000000000' [ 988.910080][T19150] syz_tun: left allmulticast mode [ 989.001523][T19163] IPVS: set_ctl: invalid protocol: 115 172.30.1.6:20001 [ 989.152788][T19170] netlink: 80 bytes leftover after parsing attributes in process `syz.8.3756'. [ 989.343178][T19179] xt_CT: You must specify a L4 protocol and not use inversions on it [ 989.579887][ T7894] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 990.126735][ T7894] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 990.279707][ T5616] usb 4-1: USB disconnect, device number 78 [ 990.416789][T19187] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 990.461399][T19193] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 990.696968][T19208] Failed to get privilege flags for destination (handle=0x0:0x0) [ 990.697504][T19208] syz_tun: entered allmulticast mode [ 990.754748][ T7894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.754781][ T7894] usb 3-1: Product: syz [ 990.754799][ T7894] usb 3-1: Manufacturer: syz [ 990.754816][ T7894] usb 3-1: SerialNumber: syz [ 990.761960][ T7894] usb 3-1: config 0 descriptor?? [ 990.876349][ T7894] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 023 [ 991.049132][T19213] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3774'. [ 991.049825][T19213] fuse: Unknown parameter '' [ 991.133871][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 991.251369][T19215] netlink: 'syz.7.3775': attribute type 13 has an invalid length. [ 991.273114][T19215] vxlan0: entered promiscuous mode [ 991.273139][T19215] vxlan0: entered allmulticast mode [ 991.294761][T15784] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 991.340026][T15784] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 991.342833][T15784] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 991.342878][T15784] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 991.416751][ T7894] (null): failure reading functionality [ 991.435378][T19201] syz_tun: left allmulticast mode [ 991.738071][T19223] ip_tables: iptables: counters copy to user failed while replacing table [ 991.855605][ T5716] usb 8-1: new high-speed USB device number 95 using dummy_hcd [ 992.065616][ T5745] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 992.112427][ T5617] Bluetooth: hci5: unexpected event for opcode 0x1408 [ 992.136144][T19229] openvswitch: netlink: Message has 4 unknown bytes. [ 992.136184][T19229] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 992.337707][ T7894] i2c i2c-1: failure reading functionality [ 992.339964][ T7894] i2c i2c-1: connected i2c-tiny-usb device [ 992.341923][ T7894] usb 3-1: USB disconnect, device number 23 [ 992.349334][ T5716] usb 8-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 992.499163][ T5745] usb 6-1: Using ep0 maxpacket: 32 [ 992.553441][ T5716] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 992.556465][ T5716] usb 8-1: config 0 descriptor?? [ 992.616399][ T5745] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 992.670696][ T5716] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 992.812061][ T5745] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 992.812094][ T5745] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 992.913277][T19164] Set syz0 is full, maxelem 65536 reached [ 992.997514][T19215] bond2 (unregistering): Released all slaves [ 993.075614][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.075677][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.221045][ T5745] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 993.221068][ T5745] usb 6-1: Product: syz [ 993.221079][ T5745] usb 6-1: Manufacturer: syz [ 993.221091][ T5745] usb 6-1: SerialNumber: syz [ 993.223448][ T5745] usb 6-1: config 0 descriptor?? [ 993.223761][ T5716] gp8psk: usb in 128 operation failed. [ 993.265520][ T5716] gp8psk: usb in 137 operation failed. [ 993.265538][ T5716] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 993.311130][ T5745] hub 6-1:0.0: bad descriptor, ignoring hub [ 993.311150][ T5745] hub 6-1:0.0: probe with driver hub failed with error -5 [ 993.314570][ T5716] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 993.314608][ T5716] usb 8-1: media controller created [ 993.323039][ T5716] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 993.474563][ T7897] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 993.477776][ T5716] gp8psk_fe: Frontend attached [ 993.477831][ T5716] usb 8-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 993.478060][ T5716] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 993.570531][T19221] ip_tables: iptables: counters copy to user failed while replacing table [ 993.571771][T19248] Failed to get privilege flags for destination (handle=0x0:0x0) [ 993.752857][T19251] syz_tun: entered allmulticast mode [ 993.846706][ T5716] gp8psk: usb in 138 operation failed. [ 993.846730][ T5716] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 993.846746][ T5716] gp8psk: found Genpix USB device pID = 203 (hex) [ 993.848961][ T5716] usb 8-1: USB disconnect, device number 95 [ 994.054566][ T5716] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 994.074289][ T7897] usb 9-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 0.00 [ 994.152776][T19256] FAULT_INJECTION: forcing a failure. [ 994.152776][T19256] name failslab, interval 1, probability 0, space 0, times 0 [ 994.287531][ T7897] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 994.287570][ T7897] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 994.415670][T19246] syz_tun: left allmulticast mode [ 994.687262][ T7897] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.687294][ T7897] usb 9-1: Product: syz [ 994.687310][ T7897] usb 9-1: Manufacturer: syz [ 994.687326][ T7897] usb 9-1: SerialNumber: syz [ 994.689927][ T5745] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 994.741062][T19239] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 994.787521][ T7897] ums_eneub6250 9-1:1.0: USB Mass Storage device detected [ 994.867286][ T7897] scsi host1: usb-storage 9-1:1.0 [ 994.986050][ T5716] usb 6-1: USB disconnect, device number 95 [ 995.063106][T19276] FAULT_INJECTION: forcing a failure. [ 995.063106][T19276] name failslab, interval 1, probability 0, space 0, times 0 [ 995.106879][ T5745] usb 4-1: Using ep0 maxpacket: 32 [ 995.246261][ T5745] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 995.265957][T19239] syzkaller0: entered promiscuous mode [ 995.265982][T19239] syzkaller0: entered allmulticast mode [ 995.353036][ T5716] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 995.355440][ T7897] ums_eneub6250 9-1:1.0: probe with driver ums_eneub6250 failed with error 3 [ 995.443040][ T5745] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 995.443070][ T5745] usb 4-1: config 0 has no interface number 0 [ 995.652297][ T7894] usb 9-1: USB disconnect, device number 15 [ 995.695648][T19286] netlink: Failed to add helper -22 [ 995.695709][T19286] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 995.711117][T19288] sctp: [Deprecated]: syz.2.3799 (pid 19288) Use of int in max_burst socket option. [ 995.711117][T19288] Use struct sctp_assoc_value instead [ 995.760776][ T5716] usb 6-1: Using ep0 maxpacket: 8 [ 995.801523][T19290] fuse: Unknown parameter '0x000000000000000400000000000000000000' [ 995.839893][ T5745] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.839923][ T5745] usb 4-1: Product: syz [ 995.839940][ T5745] usb 4-1: Manufacturer: syz [ 995.839957][ T5745] usb 4-1: SerialNumber: syz [ 995.842902][ T5745] usb 4-1: config 0 descriptor?? [ 995.843210][ T5716] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 995.951894][ T5745] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 995.951999][ T5745] usb 4-1: selecting invalid altsetting 1 [ 995.952019][ T5745] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 995.954924][ T5745] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 995.955269][ T5745] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 995.955318][ T5745] usb 4-1: media controller created [ 995.967627][ T5745] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 996.076195][ T5716] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 996.076505][ T5716] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 996.076523][ T5716] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 996.076541][ T5716] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 996.076557][ T5716] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 996.076574][ T5716] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 996.076606][ T5716] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 996.149880][ T7897] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 996.203764][ T5716] usbtmc 6-1:16.0: probe with driver usbtmc failed with error -22 [ 996.259345][ T5745] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 996.259415][ T5745] zl10353_read_register: readreg error (reg=127, ret==-71) [ 996.276350][T15784] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 996.276498][T15784] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 996.276587][T15784] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 996.276688][T15784] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 996.328417][ T5745] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 996.385077][ T5745] usb 4-1: USB disconnect, device number 79 [ 996.442364][T19275] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3795'. [ 996.442388][T19275] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3795'. [ 996.489126][ T5616] usb 8-1: new low-speed USB device number 96 using dummy_hcd [ 996.524342][T19297] Failed to get privilege flags for destination (handle=0x0:0x0) [ 996.524848][T19297] syz_tun: entered allmulticast mode [ 996.649523][ T7897] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 996.699177][ T5616] usb 8-1: New USB device found, idVendor=17cc, idProduct=4711, bcdDevice=37.4c [ 996.700182][ T5616] usb 8-1: config 0 has an invalid interface number: 146 but max is 0 [ 996.700208][ T5616] usb 8-1: config 0 has no interface number 0 [ 996.700239][ T5616] usb 8-1: config 0 interface 146 has no altsetting 0 [ 996.703656][ T5616] usb 8-1: string descriptor 0 read error: -22 [ 996.703787][ T5616] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 996.734077][ T5616] usb 8-1: config 0 descriptor?? [ 996.774702][ T5616] snd-usb-caiaq 8-1:0.146: can't set alt interface. [ 996.774726][ T5616] usb 8-1: unable to init card! (ret=-5) [ 996.775095][ T5616] snd-usb-caiaq 8-1:0.146: probe with driver snd-usb-caiaq failed with error -5 [ 996.866718][ T7897] usb 3-1: config 0 has an invalid interface number: 145 but max is 0 [ 996.866751][ T7897] usb 3-1: config 0 has no interface number 0 [ 996.866784][ T7897] usb 3-1: too many endpoints for config 0 interface 145 altsetting 126: 90, using maximum allowed: 30 [ 996.866824][ T7897] usb 3-1: config 0 interface 145 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 90 [ 996.866855][ T7897] usb 3-1: config 0 interface 145 has no altsetting 0 [ 996.866894][ T7897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 996.869850][ T7897] usb 3-1: config 0 descriptor?? [ 997.033934][ T5716] usb 8-1: USB disconnect, device number 96 [ 997.251492][T19294] syz_tun: left allmulticast mode [ 997.309155][T19312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 997.309640][T19312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 997.409597][T19319] socket: no more sockets [ 997.505906][T19304] socket: no more sockets [ 997.508524][T19321] ip_tables: iptables: counters copy to user failed while replacing table [ 997.537184][ T7897] usb 3-1: string descriptor 0 read error: -71 [ 997.538147][ T7897] cp210x 3-1:0.145: cp210x converter detected [ 997.591234][ T7897] cp210x 3-1:0.145: failed to get vendor val 0x370b size 1: -71 [ 997.591317][ T7897] cp210x 3-1:0.145: querying part number failed [ 997.611200][ T7897] usb 3-1: cp210x converter now attached to ttyUSB0 [ 997.649782][ T7897] usb 3-1: USB disconnect, device number 24 [ 997.659467][ T7897] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 997.660027][ T7897] cp210x 3-1:0.145: device disconnected [ 997.841922][ T5745] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 998.228265][ T5745] usb 9-1: Using ep0 maxpacket: 32 [ 998.327227][ T5745] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 998.512974][ T5745] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 998.512998][ T5745] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 998.544088][T19345] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3811'. [ 998.737955][T19351] syzkaller0: entered promiscuous mode [ 998.737973][T19351] syzkaller0: entered allmulticast mode [ 998.754242][T19351] tipc: Enabled bearer , priority 0 [ 998.776827][T19351] tipc: Resetting bearer [ 998.906857][ T5745] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 998.906897][ T5745] usb 9-1: Product: syz [ 998.906913][ T5745] usb 9-1: Manufacturer: syz [ 998.906932][ T5745] usb 9-1: SerialNumber: syz [ 998.909259][ T5745] usb 9-1: config 0 descriptor?? [ 999.027904][ T5745] hub 9-1:0.0: bad descriptor, ignoring hub [ 999.027936][ T5745] hub 9-1:0.0: probe with driver hub failed with error -5 [ 999.168554][T19358] Failed to get privilege flags for destination (handle=0x0:0x0) [ 999.169093][T19358] syz_tun: entered allmulticast mode [ 999.225015][ T5680] usb 6-1: USB disconnect, device number 96 [ 999.258160][T19320] ip_tables: iptables: counters copy to user failed while replacing table [ 999.505908][T19346] tipc: Resetting bearer [ 999.553620][T19346] tipc: Disabling bearer [ 999.977813][T19356] syz_tun: left allmulticast mode [ 1000.010680][T19369] netlink: 'syz.3.3818': attribute type 21 has an invalid length. [ 1000.010711][T19369] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3818'. [ 1000.010737][T19369] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 1000.326148][T19380] netlink: 'syz.7.3823': attribute type 2 has an invalid length. [ 1000.328845][T19380] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1000.590250][ T5745] usb 9-1: USB disconnect, device number 16 [ 1000.594579][ T7897] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1000.841537][T19387] pimreg: entered allmulticast mode [ 1001.052599][ T7897] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1001.290071][ T5745] usb 9-1: new full-speed USB device number 17 using dummy_hcd [ 1001.450305][T19400] Failed to get privilege flags for destination (handle=0x0:0x0) [ 1001.455563][T19400] syz_tun: entered allmulticast mode [ 1001.532717][ T7897] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1001.532750][ T7897] usb 4-1: Product: syz [ 1001.532768][ T7897] usb 4-1: SerialNumber: syz [ 1001.534880][ T7897] usb 4-1: config 0 descriptor?? [ 1001.779697][ T5745] usb 9-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 1001.943652][ T7897] usb 4-1: USB disconnect, device number 80 [ 1001.976574][ T5745] usb 9-1: config 0 has an invalid interface number: 52 but max is 0 [ 1001.976597][ T5745] usb 9-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1001.976611][ T5745] usb 9-1: config 0 has no interface number 0 [ 1001.976640][ T5745] usb 9-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1001.976660][ T5745] usb 9-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1001.976680][ T5745] usb 9-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1001.976700][ T5745] usb 9-1: config 0 interface 52 has no altsetting 0 [ 1002.206610][T19398] syz_tun: left allmulticast mode [ 1002.422333][ T5745] usb 9-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 1002.422357][ T5745] usb 9-1: Product: syz [ 1002.422368][ T5745] usb 9-1: SerialNumber: syz [ 1002.424430][ T5745] usb 9-1: config 0 descriptor?? [ 1002.441324][T19406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3832'. [ 1002.441360][T19406] netlink: 'syz.2.3832': attribute type 30 has an invalid length. [ 1002.509919][T19409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3832'. [ 1002.509950][T19409] netlink: 'syz.2.3832': attribute type 30 has an invalid length. [ 1002.514623][T19406] vxlan0: entered promiscuous mode [ 1002.514639][T19406] vxlan0: entered allmulticast mode [ 1002.515751][T15781] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1002.515903][T15781] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1002.515944][T15781] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1002.515973][T15781] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1002.689431][T19404] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3832'. [ 1002.776147][T19404] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1002.920716][ T5745] input: syz (Stick) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.52/input/input63 [ 1003.209301][ T5680] usb 9-1: USB disconnect, device number 17 [ 1003.209417][ C1] synaptics_usb 9-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 1003.387326][T19422] netlink: 'syz.3.3837': attribute type 2 has an invalid length. [ 1003.453042][T19420] ip_tables: iptables: counters copy to user failed while replacing table [ 1003.768838][ T5616] usb 8-1: new high-speed USB device number 97 using dummy_hcd [ 1003.949175][ T5616] usb 8-1: Using ep0 maxpacket: 32 [ 1003.950774][ T5616] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1003.953070][ T5616] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1003.953100][ T5616] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 1003.955762][ T5616] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1003.955791][ T5616] usb 8-1: Product: syz [ 1003.955809][ T5616] usb 8-1: Manufacturer: syz [ 1003.955826][ T5616] usb 8-1: SerialNumber: syz [ 1004.034885][ T5616] usb 8-1: config 0 descriptor?? [ 1004.056997][ T5616] hub 8-1:0.0: bad descriptor, ignoring hub [ 1004.057028][ T5616] hub 8-1:0.0: probe with driver hub failed with error -5 [ 1004.262567][T19420] ip_tables: iptables: counters copy to user failed while replacing table [ 1004.360856][ T5616] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1004.523413][T19440] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1004.550883][ T5616] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1004.556834][ T5616] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.556853][ T5616] usb 3-1: Product: syz [ 1004.556883][ T5616] usb 3-1: Manufacturer: syz [ 1004.556894][ T5616] usb 3-1: SerialNumber: syz [ 1004.615513][ T5616] usb 3-1: config 0 descriptor?? [ 1004.627646][ T5616] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 025 [ 1004.754782][T19447] Failed to get privilege flags for destination (handle=0x0:0x0) [ 1005.184484][ T5616] (null): failure reading functionality [ 1005.189375][ T5616] i2c i2c-1: failure reading functionality [ 1005.205782][ T5616] i2c i2c-1: connected i2c-tiny-usb device [ 1005.229074][ T5616] usb 3-1: USB disconnect, device number 25 [ 1005.313111][T16986] udevd[16986]: setting mode of /dev/bus/usb/003/025 to 020664 failed: No such file or directory [ 1005.313261][T16986] udevd[16986]: setting owner of /dev/bus/usb/003/025 to uid=0, gid=0 failed: No such file or directory [ 1005.672718][ T7897] usb 6-1: new full-speed USB device number 97 using dummy_hcd [ 1005.874811][T19458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3848'. [ 1005.874848][T19458] netlink: 'syz.2.3848': attribute type 11 has an invalid length. [ 1005.878926][ T5616] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1006.068940][ T5616] usb 4-1: Using ep0 maxpacket: 8 [ 1006.069692][ T5616] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1006.070697][ T5616] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1006.070748][ T5616] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1006.070773][ T5616] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1006.070800][ T5616] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1006.070825][ T5616] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1006.070851][ T5616] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1006.070895][ T5616] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.079642][ T5616] usbtmc 4-1:16.0: probe with driver usbtmc failed with error -22 [ 1006.200170][ T7897] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1006.292546][T19461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3849'. [ 1006.292573][T19461] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3849'. [ 1006.327480][ T5616] usb 8-1: USB disconnect, device number 97 [ 1006.337696][ T31] audit: type=1326 audit(1791282367.070:13175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19468 comm="syz.2.3852" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8808d9e199 code=0x7ffc0000 [ 1006.339460][ T31] audit: type=1326 audit(1791282367.070:13176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19468 comm="syz.2.3852" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8808d9e199 code=0x7ffc0000 [ 1006.339848][ T31] audit: type=1326 audit(1791282367.070:13177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19468 comm="syz.2.3852" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f8808d9e199 code=0x7ffc0000 [ 1006.341483][ T31] audit: type=1326 audit(1791282367.070:13178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19468 comm="syz.2.3852" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8808d9e199 code=0x7ffc0000 [ 1006.458652][ T7897] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1006.458689][ T7897] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1006.458735][ T7897] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.481788][ T31] audit: type=1326 audit(1791282367.220:13179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19468 comm="syz.2.3852" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8808d9e199 code=0x7ffc0000 [ 1006.481846][ T31] audit: type=1326 audit(1791282367.220:13180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19468 comm="syz.2.3852" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8808d9e199 code=0x7ffc0000 [ 1006.487352][ T31] audit: type=1326 audit(1791282367.220:13181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19468 comm="syz.2.3852" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8808d9e199 code=0x7ffc0000 [ 1006.487404][ T31] audit: type=1326 audit(1791282367.220:13182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19468 comm="syz.2.3852" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8808d9e199 code=0x7ffc0000 [ 1006.920418][T19490] Failed to get privilege flags for destination (handle=0x0:0x0) [ 1006.920908][T19490] syz_tun: entered allmulticast mode [ 1006.953200][ T7897] usb 6-1: usb_control_msg returned -32 [ 1006.953249][ T7897] usbtmc 6-1:16.0: can't read capabilities [ 1007.294171][ T7894] usb 6-1: USB disconnect, device number 97 [ 1007.647541][T19501] FAULT_INJECTION: forcing a failure. [ 1007.647541][T19501] name failslab, interval 1, probability 0, space 0, times 0 [ 1007.770180][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1007.793634][T19486] syz_tun: left allmulticast mode [ 1007.989736][T19510] Cannot find set identified by id 0 to match [ 1008.001514][T19513] netlink: 'syz.7.3867': attribute type 2 has an invalid length. [ 1008.001577][T19513] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3867'. [ 1008.080736][T19513] : entered promiscuous mode [ 1008.144163][T19517] ip_tables: iptables: counters copy to user failed while replacing table [ 1008.512703][ T7897] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1008.579083][ T5695] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 1008.849245][ T5695] usb 6-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1008.854574][ T5695] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.854604][ T5695] usb 6-1: Product: syz [ 1008.854621][ T5695] usb 6-1: Manufacturer: syz [ 1008.854638][ T5695] usb 6-1: SerialNumber: syz [ 1008.857968][ T5695] usb 6-1: config 0 descriptor?? [ 1008.901029][ T5695] i2c-tiny-usb 6-1:0.0: version 6d.cc found at bus 006 address 098 [ 1008.970958][ T7897] usb 3-1: Using ep0 maxpacket: 32 [ 1009.091829][ T7897] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1009.131697][T19533] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3875'. [ 1009.131820][ T7894] usb 4-1: USB disconnect, device number 81 [ 1009.323754][ T5695] (null): failure reading functionality [ 1009.365604][ T7897] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1009.365638][ T7897] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 1009.503271][ T5745] usb 8-1: new high-speed USB device number 98 using dummy_hcd [ 1009.881809][ T7897] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1009.881841][ T7897] usb 3-1: Product: syz [ 1009.881859][ T7897] usb 3-1: Manufacturer: syz [ 1009.881876][ T7897] usb 3-1: SerialNumber: syz [ 1009.884826][ T7897] usb 3-1: config 0 descriptor?? [ 1009.971667][ T5745] usb 8-1: Using ep0 maxpacket: 8 [ 1009.994923][ T5695] i2c i2c-1: failure reading functionality [ 1009.997609][ T5695] i2c i2c-1: connected i2c-tiny-usb device [ 1010.036985][ T7897] hub 3-1:0.0: bad descriptor, ignoring hub [ 1010.037020][ T7897] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1010.038193][ T5695] usb 6-1: USB disconnect, device number 98 [ 1010.147491][ T5745] usb 8-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 1010.349393][T19512] ip_tables: iptables: counters copy to user failed while replacing table [ 1010.405029][ T5745] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 1010.405090][ T5745] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1010.405120][ T5745] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 30, changing to 8 [ 1010.405148][ T5745] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1010.501269][T19546] Failed to get privilege flags for destination (handle=0x0:0x0) [ 1010.502035][T19546] syz_tun: entered allmulticast mode [ 1010.626270][T19546] syz_tun: left allmulticast mode [ 1010.782741][T19555] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3882'. [ 1010.894156][T19558] FAULT_INJECTION: forcing a failure. [ 1010.894156][T19558] name failslab, interval 1, probability 0, space 0, times 0 [ 1010.894187][T19558] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1010.946585][ T5745] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1010.946617][ T5745] usb 8-1: Product: syz [ 1010.946634][ T5745] usb 8-1: Manufacturer: syz [ 1010.946651][ T5745] usb 8-1: SerialNumber: syz [ 1010.949657][ T5745] usb 8-1: config 0 descriptor?? [ 1011.019423][T19533] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22 [ 1011.344736][T19533] loop3: detected capacity change from 0 to 7 [ 1011.346059][T19533] Dev loop3: unable to read RDB block 7 [ 1011.346169][T19533] loop3: AHDI p3 p4 [ 1011.346206][T19533] loop3: partition table partially beyond EOD, truncated [ 1011.346415][T19533] loop3: p3 start 1702000233 is beyond EOD, truncated [ 1011.454813][ T5745] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 1011.457296][ T5745] input: Griffin SoundKnob as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input64 [ 1011.784583][ T7897] usb 3-1: USB disconnect, device number 26 [ 1011.939252][T19570] ip_tables: iptables: counters copy to user failed while replacing table [ 1011.957358][ T5695] usb 8-1: USB disconnect, device number 98 [ 1011.983632][ C0] powermate: config urb returned -71 [ 1011.983691][ C0] powermate: usb_submit_urb(config) failed [ 1013.215972][T19587] Failed to get privilege flags for destination (handle=0x0:0x0) [ 1013.216489][T19587] syz_tun: entered allmulticast mode [ 1013.343254][T19591] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3894'. [ 1013.639317][T19599] netlink: 'syz.2.3897': attribute type 2 has an invalid length. [ 1013.657845][T19587] syz_tun: left allmulticast mode [ 1013.681970][ T5695] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1013.889621][ T5695] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1013.899186][ T5695] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 252, changing to 7 [ 1013.922791][ T5695] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1013.922813][ T5695] usb 4-1: Product: syz [ 1013.922824][ T5695] usb 4-1: Manufacturer: syz [ 1013.922839][ T5695] usb 4-1: SerialNumber: syz [ 1013.967467][T19611] ip_tables: iptables: counters copy to user failed while replacing table [ 1014.220550][T19595] netlink: 976 bytes leftover after parsing attributes in process `syz.3.3895'. [ 1014.231549][T19614] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3901'. [ 1014.295899][ T7897] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 1014.327971][ T5695] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1014.356862][T19609] xt_TCPMSS: Only works on TCP SYN packets [ 1014.412065][ T5695] usb 4-1: USB disconnect, device number 82 [ 1014.437353][T19618] syzkaller0: entered promiscuous mode [ 1014.437376][T19618] syzkaller0: entered allmulticast mode [ 1014.469062][T19618] tipc: Enabled bearer , priority 0 [ 1014.487589][T15986] udevd[15986]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1014.526105][T19618] tipc: Resetting bearer [ 1014.681821][ T7897] usb 6-1: Using ep0 maxpacket: 32 [ 1014.803311][ T7897] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1014.888986][T19625] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3905'. [ 1014.889013][T19625] netlink: 'syz.2.3905': attribute type 30 has an invalid length. [ 1014.891302][T19625] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3905'. [ 1014.891337][T19625] netlink: 'syz.2.3905': attribute type 30 has an invalid length. [ 1015.063102][ T7897] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1015.063137][ T7897] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 1015.224646][T19615] tipc: Resetting bearer [ 1015.513518][T19615] tipc: Disabling bearer [ 1015.621722][ T7897] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1015.621754][ T7897] usb 6-1: Product: syz [ 1015.621770][ T7897] usb 6-1: Manufacturer: syz [ 1015.621786][ T7897] usb 6-1: SerialNumber: syz [ 1015.624691][ T7897] usb 6-1: config 0 descriptor?? [ 1015.738645][T19640] Failed to get privilege flags for destination (handle=0x0:0x0) [ 1015.823140][ T7897] hub 6-1:0.0: bad descriptor, ignoring hub [ 1015.823170][ T7897] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1015.892695][ T7899] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1015.928058][T19642] netlink: 'syz.8.3911': attribute type 2 has an invalid length. [ 1016.065472][T19605] ip_tables: iptables: counters copy to user failed while replacing table [ 1016.199368][ T5616] usb 8-1: new high-speed USB device number 99 using dummy_hcd [ 1016.328576][ T7899] usb 3-1: Using ep0 maxpacket: 8 [ 1016.380292][ T5616] usb 8-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 1016.381473][ T5616] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 64 [ 1016.381505][ T5616] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 64 [ 1016.381532][ T5616] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 23890, setting to 1024 [ 1016.381562][ T5616] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1016.383279][ T5616] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1016.383304][ T5616] usb 8-1: Product: syz [ 1016.383321][ T5616] usb 8-1: Manufacturer: syz [ 1016.475168][ T7899] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1016.663325][T19644] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 1016.663472][T19644] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 1016.663610][T19644] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 1016.710796][ T5616] dvb_ttusb_budget: ttusb_init_controller: error [ 1016.710817][ T5616] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1016.721008][ T7899] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 1016.721065][ T7899] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1016.721095][ T7899] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1016.721122][ T7899] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1016.721151][ T7899] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1016.721177][ T7899] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1016.721224][ T7899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.930263][ T5616] DVB: Unable to find symbol cx22700_attach() [ 1016.970020][T19649] FAULT_INJECTION: forcing a failure. [ 1016.970020][T19649] name failslab, interval 1, probability 0, space 0, times 0 [ 1017.069968][ T5616] DVB: Unable to find symbol tda10046_attach() [ 1017.069988][ T5616] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1017.075722][T19651] loop8: detected capacity change from 0 to 7 [ 1017.095880][T19651] Dev loop8: unable to read RDB block 7 [ 1017.096031][T19651] loop8: unable to read partition table [ 1017.096583][T19651] loop8: partition table beyond EOD, truncated [ 1017.096684][T19651] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1017.192655][ T7899] usb 3-1: usb_control_msg returned -32 [ 1017.192693][ T7899] usbtmc 3-1:16.0: can't read capabilities [ 1017.251406][T19651] ------------[ cut here ]------------ [ 1017.251424][T19651] usb 8-1: BOGUS urb flags, 202 --> 200 [ 1017.251446][T19651] WARNING: drivers/usb/core/urb.c:533 at usb_submit_urb+0xc9d/0x18b0, CPU#1: syz.7.3912/19651 [ 1017.274342][T19651] Modules linked in: [ 1017.278846][T19651] CPU: 1 UID: 0 PID: 19651 Comm: syz.7.3912 Tainted: G L syzkaller #0 PREEMPT(full) [ 1017.290102][T19651] Tainted: [L]=SOFTLOCKUP [ 1017.295252][T19651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1017.306813][T19651] RIP: 0010:usb_submit_urb+0xd28/0x18b0 [ 1017.312757][T19651] Code: e8 2d 92 c8 fa 4c 89 f7 4d 8b 6d 00 41 0f b6 04 2c 84 c0 48 8b 54 24 18 0f 85 97 07 00 00 8b 0a 48 8b 34 24 4c 89 ea 45 89 f8 <67> 48 0f b9 3a 4c 8b 6c 24 08 4c 89 ef 48 c7 c6 e0 50 b0 8f e8 3f [ 1017.332571][T19651] RSP: 0018:ffffc90004e1fab8 EFLAGS: 00010246 [ 1017.339066][T19651] RAX: 0000000000000000 RBX: ffff888078098800 RCX: 0000000000000202 [ 1017.347071][T19651] RDX: ffff88801c380a20 RSI: ffffffff8cc53540 RDI: ffffffff90881c00 [ 1017.355150][T19651] RBP: dffffc0000000000 R08: 0000000000000200 R09: 0000000000000004 [ 1017.363211][T19651] R10: 0000000000000003 R11: 0000000000000002 R12: 1ffff1100f01310b [ 1017.371262][T19651] R13: ffff88801c380a20 R14: ffff88807fd4e100 R15: 0000000000000200 [ 1017.379323][T19651] FS: 00007f17c8dcf6c0(0000) GS:ffff888124dc6000(0000) knlGS:0000000000000000 [ 1017.388313][T19651] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1017.397375][T19651] CR2: 00007efed45f34b8 CR3: 0000000045dce000 CR4: 00000000003526f0 [ 1017.406165][T19651] Call Trace: [ 1017.409520][T19651] [ 1017.412503][T19651] ttusb_start_feed+0xe19/0x1770 [ 1017.417514][T19651] ? __pfx_ttusb_start_feed+0x10/0x10 [ 1017.423101][T19651] dmx_ts_feed_start_filtering+0x129/0x220 [ 1017.429062][T19651] dvb_dmxdev_filter_start+0x434/0x10d0 [ 1017.434682][T19651] dvb_demux_do_ioctl+0x48b/0x540 [ 1017.440136][T19651] dvb_usercopy+0x199/0x2e0 [ 1017.444688][T19651] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1017.450317][T19651] ? __pfx_dvb_usercopy+0x10/0x10 [ 1017.455403][T19651] ? __fget_files+0x3a2/0x420 [ 1017.460198][T19651] ? __fget_files+0x2a/0x420 [ 1017.464823][T19651] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 1017.470196][T19651] dvb_demux_ioctl+0x29/0x40 [ 1017.474832][T19651] __se_sys_ioctl+0xfc/0x170 [ 1017.479507][T19651] do_syscall_64+0x166/0x520 [ 1017.484127][T19651] ? trace_irq_disable+0x3b/0x140 [ 1017.489694][T19651] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1017.497197][T19651] ? clear_bhb_loop+0x70/0xc0 [ 1017.502654][T19651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1017.508598][T19651] RIP: 0033:0x7f17c7f9e199 [ 1017.513943][T19651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1017.533814][T19651] RSP: 002b:00007f17c8dcf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1017.542353][T19651] RAX: ffffffffffffffda RBX: 00007f17c8226090 RCX: 00007f17c7f9e199 [ 1017.550419][T19651] RDX: 0000200000000300 RSI: 0000000040146f2c RDI: 0000000000000008 [ 1017.558437][T19651] RBP: 00007f17c80358e0 R08: 0000000000000000 R09: 0000000000000000 [ 1017.566512][T19651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1017.574574][T19651] R13: 00007f17c8226128 R14: 00007f17c8226090 R15: 00007f17c834fa48 [ 1017.583198][T19651] [ 1017.586274][T19651] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1017.593600][T19651] CPU: 1 UID: 0 PID: 19651 Comm: syz.7.3912 Tainted: G L syzkaller #0 PREEMPT(full) [ 1017.604571][T19651] Tainted: [L]=SOFTLOCKUP [ 1017.608919][T19651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1017.619023][T19651] Call Trace: [ 1017.622339][T19651] [ 1017.625295][T19651] vpanic+0x56d/0xa60 [ 1017.629346][T19651] ? __pfx__printk+0x10/0x10 [ 1017.633972][T19651] ? __pfx_vpanic+0x10/0x10 [ 1017.638518][T19651] ? is_bpf_text_address+0x292/0x2b0 [ 1017.643842][T19651] ? is_bpf_text_address+0x26/0x2b0 [ 1017.649078][T19651] panic+0xc5/0xd0 [ 1017.652819][T19651] ? __pfx_panic+0x10/0x10 [ 1017.657262][T19651] __warn+0x315/0x4c0 [ 1017.661280][T19651] ? usb_submit_urb+0xc9d/0x18b0 [ 1017.666225][T19651] ? usb_submit_urb+0xc9d/0x18b0 [ 1017.671180][T19651] __report_bug+0x276/0x570 [ 1017.675696][T19651] ? usb_submit_urb+0xc9d/0x18b0 [ 1017.680637][T19651] ? __pfx___report_bug+0x10/0x10 [ 1017.685677][T19651] ? ttusb_cmd+0x305/0x440 [ 1017.690108][T19651] report_bug_entry+0x19b/0x290 [ 1017.694971][T19651] ? usb_submit_urb+0xd28/0x18b0 [ 1017.699914][T19651] ? usb_submit_urb+0xd2d/0x18b0 [ 1017.704859][T19651] handle_bug+0xce/0x200 [ 1017.709159][T19651] exc_invalid_op+0x1a/0x50 [ 1017.713698][T19651] asm_exc_invalid_op+0x1a/0x20 [ 1017.718584][T19651] RIP: 0010:usb_submit_urb+0xd28/0x18b0 [ 1017.724171][T19651] Code: e8 2d 92 c8 fa 4c 89 f7 4d 8b 6d 00 41 0f b6 04 2c 84 c0 48 8b 54 24 18 0f 85 97 07 00 00 8b 0a 48 8b 34 24 4c 89 ea 45 89 f8 <67> 48 0f b9 3a 4c 8b 6c 24 08 4c 89 ef 48 c7 c6 e0 50 b0 8f e8 3f [ 1017.743825][T19651] RSP: 0018:ffffc90004e1fab8 EFLAGS: 00010246 [ 1017.749926][T19651] RAX: 0000000000000000 RBX: ffff888078098800 RCX: 0000000000000202 [ 1017.757923][T19651] RDX: ffff88801c380a20 RSI: ffffffff8cc53540 RDI: ffffffff90881c00 [ 1017.765919][T19651] RBP: dffffc0000000000 R08: 0000000000000200 R09: 0000000000000004 [ 1017.773922][T19651] R10: 0000000000000003 R11: 0000000000000002 R12: 1ffff1100f01310b [ 1017.781923][T19651] R13: ffff88801c380a20 R14: ffff88807fd4e100 R15: 0000000000000200 [ 1017.789946][T19651] ? usb_submit_urb+0xce1/0x18b0 [ 1017.794936][T19651] ttusb_start_feed+0xe19/0x1770 [ 1017.799930][T19651] ? __pfx_ttusb_start_feed+0x10/0x10 [ 1017.805362][T19651] dmx_ts_feed_start_filtering+0x129/0x220 [ 1017.811245][T19651] dvb_dmxdev_filter_start+0x434/0x10d0 [ 1017.816851][T19651] dvb_demux_do_ioctl+0x48b/0x540 [ 1017.821919][T19651] dvb_usercopy+0x199/0x2e0 [ 1017.826469][T19651] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1017.832043][T19651] ? __pfx_dvb_usercopy+0x10/0x10 [ 1017.837092][T19651] ? __fget_files+0x3a2/0x420 [ 1017.841787][T19651] ? __fget_files+0x2a/0x420 [ 1017.846406][T19651] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 1017.851725][T19651] dvb_demux_ioctl+0x29/0x40 [ 1017.856361][T19651] __se_sys_ioctl+0xfc/0x170 [ 1017.860991][T19651] do_syscall_64+0x166/0x520 [ 1017.865643][T19651] ? trace_irq_disable+0x3b/0x140 [ 1017.870698][T19651] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1017.876806][T19651] ? clear_bhb_loop+0x70/0xc0 [ 1017.881517][T19651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1017.887435][T19651] RIP: 0033:0x7f17c7f9e199 [ 1017.891879][T19651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1017.911514][T19651] RSP: 002b:00007f17c8dcf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1017.919973][T19651] RAX: ffffffffffffffda RBX: 00007f17c8226090 RCX: 00007f17c7f9e199 [ 1017.927972][T19651] RDX: 0000200000000300 RSI: 0000000040146f2c RDI: 0000000000000008 [ 1017.935977][T19651] RBP: 00007f17c80358e0 R08: 0000000000000000 R09: 0000000000000000 [ 1017.943986][T19651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1017.951990][T19651] R13: 00007f17c8226128 R14: 00007f17c8226090 R15: 00007f17c834fa48 [ 1017.960014][T19651] [ 1017.963683][T19651] Kernel Offset: disabled [ 1017.968041][T19651] Rebooting in 86400 seconds..