last executing test programs: 20m57.351987443s ago: executing program 32 (id=2568): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00v\x00\t'], 0x24}, 0x1, 0x5502000000000000}, 0x0) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) close(r0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000080)=ANY=[@ANYRESOCT=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000300)={0xa, 0x4e24, 0x2, @loopback, 0x5}, 0x1c) sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r5, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004090}, 0x40000) socket$kcm(0x2, 0x3, 0x2) syz_usb_connect(0x0, 0x51, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) write$tun(r8, &(0x7f0000000480)={@void, @void, @eth={@multicast, @random, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0x7, 0x5c, 0x6c, 0x4000, 0x7, 0x1, 0x0, @rand_addr=0x64010101, @local}, @redirect={0x5, 0x3, 0x0, @broadcast, {0x10, 0x4, 0x0, 0x4, 0x6, 0x65, 0x1, 0x8, 0x2, 0xf, @loopback, @loopback, {[@generic={0x86, 0x5, "c80842"}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x4, 0xf3, 0x3, 0x8}, @cipso={0x86, 0x1c, 0xfffffffffffffffe, [{0x0, 0x4, "0612"}, {0x7, 0xf, "c43e8c34f8ca4be4cdb6364607"}, {0x1, 0x3, '`'}]}]}}}}}}}}, 0x6e) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000540), 0x3c) ioctl$KIOCSOUND(r3, 0x4b2f, 0x80000000) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x304, 0x3a}, "000000d605000001", "a8ef1a3a33c9e24f977335312dc371290d223808802000", "336819df", "40c1000000008700"}, 0x38) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd70000400000507"], 0x34}}, 0x20) socket$netlink(0x10, 0x3, 0x0) 13m30.799471243s ago: executing program 33 (id=6179): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000800400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000030000007b00100000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6m31.671197589s ago: executing program 34 (id=9234): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x28880, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x28880, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0xfffffff7fffffffd) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xfffffff7fffffffd) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x40000093, 0x0, 0x2}]}) (async) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x40000093, 0x0, 0x2}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_clone3(&(0x7f0000000080)={0x180801600, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3c}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c582a626739b1c83b47dec6359c05eaad4a50fae9f6dcd3292ea54c7be8bbdefb1", 0x24) r6 = accept4(r5, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r6) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r6) pidfd_send_signal(r4, 0x21, 0x0, 0x0) waitid$P_PIDFD(0x3, r4, 0x0, 0x40000004, 0x0) (async) waitid$P_PIDFD(0x3, r4, 0x0, 0x40000004, 0x0) poll(&(0x7f0000000300)=[{r4}], 0x1, 0x6) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0x3f, 0x4a24, 0x5, @empty, 0x2800}}, 0xf, 0x8000, 0x20000, 0x0, 0x9, 0x0, 0x4}, 0x9c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0x3f, 0x4a24, 0x5, @empty, 0x2800}}, 0xf, 0x8000, 0x20000, 0x0, 0x9, 0x0, 0x4}, 0x9c) getgid() bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="e500000000000000711098000000000006000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 5m27.719149132s ago: executing program 5 (id=9648): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xc20022, r2}) syz_emit_ethernet(0x7a, &(0x7f0000000640)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x40, 0x0, 0xff, @private1, @private2, [@hopopts={0x3a}], "f4c638bed6f068cc"}}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fc020000000000000000000000000000fe8000000000003b00000000000000aa"], 0x0) 5m27.674727295s ago: executing program 5 (id=9649): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000104000000000000020000000000", @ANYRES32=0x0, @ANYBLOB="8a450200000000002400128009000100626f6e640000000014000280050001000600000008000200", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x20000044}, 0x40) 5m27.264870051s ago: executing program 5 (id=9652): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x80084) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000304000000009f00000000000004", @ANYRES32=0x0, @ANYBLOB="00a300000000000008000500", @ANYRES32=0x0, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000340)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x34808521, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa4001f7e}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20, 0x0, 0x0, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x8) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r6, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r5, &(0x7f00000000c0)='!', 0xffffff49, 0x3000000000000500}]) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) dup3(r5, r2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x2c}, [@ldst={0x0, 0x0, 0x2}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x200000a, 0x191, 0xffffffffffffffff, 0x0) 5m27.211329851s ago: executing program 2 (id=9653): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000001800)={'#! ', './file1/../file0', [{0x20, '\xd7\x8fL\xa2o\x0f\t\'-\xaf\x006y\xc9 a;\x04\xca\xb2\x9f/5\xb1\xb6i\xff\a\x00\x00\x19\xff\xda\xc3\x8a\x99q\x1e\xd3\xad@\x9f#Mw&\xdf\xab\xfd\xf8\xee\xa0\xff2|\x14\x89\x8a\xf0&Of\xc3\x1d5F\xf6N!\"\xd4|\xa4\xe0\x81\x88\xa3b\xcbZ}O\x84\xaf\xf9\xad\x9e\xaa\r\x85\x9fF\xbbs\x1b\x8e*T\x86\xca'}, {0x20, '`\n\t\xe5[\x19'}, {0x20, '.\\'}, {0x20, '/dev/loop#\x00'}], 0xa, "521299a432289bea0aa53f5db534de379d0418026c1f265a707f7b5008ab99f2c9a997ad079ea398ccfcdc48da03fd070a2913b99836792d5dd5992db64276c3aebed24145776c2f03ce2c7c32dc"}, 0xdd) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000001000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300"}}) 5m27.007077901s ago: executing program 2 (id=9654): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r2, &(0x7f00000066c0)=""/102372, 0x18fe4, 0x7) mmap$binder(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x9) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) write$tun(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="000008000100000000003d00000048f800400000000000f78490783fffffffac1414aa440c670000000004000000030000000005f2250dbb08444b", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x4e) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x80, &(0x7f0000000180)=ANY=[@ANYBLOB="bb6233c1eb870180c200000086dd6410f746004a2f0100000000000000000000ffffffffffffff0200000000000000000000000000010401000904000800010086ddef2f6de0080088be000000041c0930000100000000000003080022eb0000000103915300020000"], 0x0) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000003a00010325bd7000fcffffff0700000038"], 0x14}}, 0x0) r5 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x80081, 0x0) write$uinput_user_dev(r5, &(0x7f0000000840)={'syz0\x00', {0x1, 0x8000, 0x5, 0xac23}, 0x40, [0x10, 0x8000, 0x7, 0x7, 0xffcf, 0x7, 0x8, 0x1ff, 0x3, 0x0, 0x4cc59373, 0x0, 0x8001, 0x1, 0x6, 0x8000, 0x4, 0x1, 0x2, 0x6, 0x3, 0x4, 0x10000, 0x0, 0x4e3, 0x1, 0x7fff, 0x5, 0x0, 0x2, 0x1, 0xe, 0x8000, 0x1, 0x9d, 0x80, 0x7, 0x3, 0xbc49, 0x6b6, 0x5, 0x1, 0xb, 0x7, 0x7, 0x7, 0x2, 0x3, 0x3, 0xff, 0xfffffffd, 0x4, 0x5, 0xffffffff, 0x0, 0x8, 0x7ff, 0x4, 0x1, 0xffffffff, 0x3, 0x100, 0x5, 0xb], [0xa, 0x9d5, 0x80000001, 0x800, 0x3, 0x9, 0x7, 0x8, 0x5, 0x80000001, 0x80008, 0x40, 0x9, 0x8, 0x80000001, 0x4, 0x0, 0xd, 0xfffffff7, 0x3, 0x0, 0x2, 0x2, 0x3, 0x6, 0x66fe, 0x6, 0x5, 0xe03, 0x3ff, 0x10004, 0xfffffc00, 0x1, 0x4, 0x3ff, 0x3, 0x7f, 0x3, 0xd08, 0x1, 0x1, 0x22, 0xfc000000, 0x0, 0x1, 0x4, 0xe37, 0x3, 0x0, 0x1, 0xe8, 0xffff8000, 0x2, 0xb, 0xd7a8, 0x6, 0xbdc, 0x3e6, 0x2, 0x9, 0x0, 0x8, 0x7fffffff, 0x6], [0x1, 0x9, 0x7, 0x590, 0x10000000, 0xb0, 0x8, 0x5, 0x2, 0x4, 0x6, 0x7, 0x3, 0x3, 0x4, 0xe, 0x8001, 0x5, 0x0, 0x9, 0x200, 0xbf1c, 0x79fc, 0x1, 0xf9, 0xffffff26, 0x0, 0xfffffff7, 0x7, 0x1, 0x7, 0x2, 0x8000, 0xffff, 0x5, 0x3, 0x1, 0x80010, 0xb8, 0x6, 0xec5f, 0x8001, 0x7fffffff, 0x1b9, 0x8a7, 0x1, 0x3, 0x3, 0x1, 0x1, 0x4, 0x3, 0x74da, 0xec9, 0x140, 0x6, 0x3, 0x6, 0x1, 0x7fff, 0x100000a, 0x86c, 0x7, 0x1], [0x0, 0x20f, 0x80000001, 0x200, 0x0, 0x10000, 0xb, 0x2, 0xffff, 0x4, 0x9, 0x7fffffff, 0xffff, 0xb7, 0x3a1, 0xfffffff1, 0xffff, 0xc, 0x8000, 0xfffffffe, 0x9, 0x3ff, 0x3, 0xdf76, 0x63, 0xa, 0x7f, 0x100, 0x40, 0x3, 0x2, 0x8, 0x8, 0x7, 0x4, 0x2170, 0x0, 0x2, 0x6b2, 0x9, 0xcd5e, 0x59, 0x9, 0x6, 0x6, 0x5a7fc7b6, 0x5, 0x1, 0x0, 0x4, 0x9, 0x10000006, 0x1, 0x6, 0x2, 0x3, 0x9, 0x1002, 0x5, 0x3, 0x8, 0x1, 0x5, 0x6]}, 0x45c) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) mkdir(&(0x7f0000000040)='./file0\x00', 0x14) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv2(r6, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1f, 0x0, 0x4, 0x8) syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') socket$nl_route(0x10, 0x3, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r7) close(r7) 5m26.295040829s ago: executing program 5 (id=9663): symlink(0x0, &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r0, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000002c0)={0x0, 0x5f8}, &(0x7f00000003c0)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000400)=r2, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) inotify_init1(0x0) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010000e3ddef20501da1604fa1010203010902120001000000000904"], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_SREGS2(r5, 0x4140aecd, &(0x7f0000000140)={{0xffff0000, 0xffff1000, 0xf000, 0x9, 0x7f, 0xe3, 0x81, 0xff, 0x0, 0x84, 0x0, 0xb}, {0xd000, 0xd000, 0x10, 0x3, 0x3, 0x7, 0x6, 0x6, 0x1, 0x4, 0xfa, 0x5}, {0xf000, 0x8000000, 0x4, 0x4, 0x10, 0x81, 0x0, 0x5, 0x5, 0x4, 0x92, 0x9}, {0x10000, 0xeeef0000, 0x1b, 0x7, 0x1, 0x40, 0x2, 0x0, 0xfa, 0x29, 0x9, 0x9}, {0xeeee8000, 0x0, 0xf, 0x9, 0x5, 0x2, 0x7, 0xf1, 0x2, 0x6e, 0x0, 0x8}, {0x4000, 0x1000, 0xe, 0x2, 0xad, 0x2, 0x5, 0x4, 0x1, 0xe, 0x6, 0xa}, {0x10000, 0x10000, 0xc, 0x0, 0xcd, 0x5, 0x5, 0x26, 0xa, 0x6, 0xff, 0x6}, {0x1, 0xeeef0000, 0xd, 0xe, 0x13, 0x3e, 0x3, 0x0, 0x7f, 0x5, 0x0, 0x8}, {0x100000, 0x405}, {0x80a0000, 0xff81}, 0x60000010, 0x0, 0x6000, 0x61, 0x5, 0xa800, 0x800f900, 0x0, [0x6, 0x2, 0x3, 0x1]}) 5m25.343808807s ago: executing program 2 (id=9670): unshare(0x44050400) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='blkio.reset_stats\x00', 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x80, &(0x7f0000000380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @remote, @val={@void}, {@ipv6={0x86dd, @generic={0x5, 0x6, "ad3b43", 0x46, 0x2e, 0x0, @remote, @local, {[@srh={0x3c, 0x2, 0x4, 0x1, 0x70, 0x58, 0xcd9, [@mcast2]}], "53163ea8c641a15dbc26c11143ef0d9c34fc807f7342c4cf37a2a230a4803cc5d653ca931350ecf6c81b406e399d"}}}}}, 0x0) syz_usb_connect$cdc_ecm(0x6, 0x0, 0x0, &(0x7f0000000f40)={0xa, &(0x7f0000000d80)={0xa, 0x6, 0x200, 0x8, 0xc, 0x0, 0xff, 0x3}, 0x45, &(0x7f0000000dc0)={0x5, 0xf, 0x45, 0x4, [@ssp_cap={0x24, 0x10, 0xa, 0x2, 0x6, 0x48f, 0xf00f, 0x400, [0xf0, 0xffc000, 0xc000, 0xff0000, 0x3f00, 0xff3f30]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x3, 0x81, 0x1}, @wireless={0xb, 0x10, 0x1, 0x0, 0x1, 0x3, 0x4e, 0x4, 0x80}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0xb, 0x4, 0x7}]}, 0x2, [{0x0, 0x0}, {0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x340a}}]}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_test', 0x80100, 0x9c) fgetxattr(r3, &(0x7f0000000000)=ANY=[], 0x0, 0x3) ioctl$BLKROGET(r3, 0x125e, 0x0) r4 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000fc0)={0x2, 0x8203, 0xa89, 0x3, r5}, 0x10) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000100)='name', &(0x7f0000000140)='_\x00'/11, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x4c, 0x3, 0x3, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffff595}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x20003}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x64}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1000}, @NFQA_MARK={0xffffffffffffffeb, 0x3, 0x1, 0x0, 0x200}]}, 0x4c}}, 0x20000010) socket$inet_udp(0x2, 0x2, 0x0) fsopen(&(0x7f0000000200)='cgroup2\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000080), 0x12) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0xf5, 0x0) close_range(r4, r2, 0x2) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000240)={0x1000, 0x258, 0x280, 0xf0, 0x7, 0x1, 0x2, 0x0, {0x5, 0xe69, 0x1}, {0x0, 0x5, 0x1}, {0x0, 0x9, 0x1}, {0x823, 0x1000, 0x1}, 0x2, 0x2, 0x8, 0x3, 0x1, 0x1, 0x80000000, 0xfffffffc, 0xc, 0x0, 0x9, 0x1520, 0xc, 0x0, 0x2, 0x5}) write$cgroup_int(r1, &(0x7f0000000100)=0x7ffffffffffffffc, 0x12) 5m24.714919689s ago: executing program 2 (id=9675): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x100, 0x70bd28, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0xfff2}, {0xc, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0xfffffff7}, @TCA_CAKE_NAT={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x881}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x103881, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080)) writev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)="3751f02b82f73ccfc7c431617753f5732f765c975ebce8947e5388c4ff26fa3893119fd147a1576d9456136ab5f15493d175754e4b666e989869d01d418adc376ca22d8077c1b54bea92b5977a41d70ebcc4735ce6c012a5fe5ab7fef98e864216699a235d615ded3292397894b34a794bc14a2edfdc6978c0c97bcb02de69264d", 0x81}, {&(0x7f0000000240)="2857e5671ef0d8e3c39651a014a3a298466c68130e5b77e37f04a5cec22a4cc681c424e649ef28c1bd78afcb20e74b1ad3ac2c75e5c03189383f8e1d3e61a1", 0x3f}], 0x2) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0102000000000000000001000002"], 0x74}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0}, &(0x7f0000000440)=0xc) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0xe, 0x40, 0x47524247, 0x2, 0x9, [{0x3, 0x4}, {0x5, 0x4}, {0x3, 0x3}, {0xbc, 0x6}, {0x8, 0x30000000}, {0xfffffffe, 0x38}, {0xe, 0x2}, {0x80000001, 0x15}], 0x49, 0x6, 0x8, 0x0, 0x4}}) prctl$PR_SCHED_CORE(0x3e, 0x3, r5, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r3, 0xffffffffffffffff, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r6, 0x0) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000680)={0x0, 0xe, 0x1, "02"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r7, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x23) ioctl$KVM_CREATE_PIT2(r8, 0x4040ae77, &(0x7f0000000180)={0x5}) 5m24.422409296s ago: executing program 7 (id=9678): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000090a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 5m24.32692546s ago: executing program 2 (id=9680): socket$pppoe(0x18, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x19, 0x0, &(0x7f0000002b80)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x3ffffffffffff6f, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r4, 0x999, 0x1}, &(0x7f0000000140)=0x10) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600003904000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006900030500000000b00000000000000000000000010002000000"], 0x20}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x20) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='auxv\x00') pread64(r9, &(0x7f0000000300)=""/182, 0xb6, 0x591f) r10 = io_uring_setup(0xd71, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x2, 0x0, 0x0, r9}) io_uring_register$IORING_REGISTER_BUFFERS(r10, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000000)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) 5m24.272669711s ago: executing program 7 (id=9681): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x10}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x3502, 0x0, 0x2}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a0000000210001000000000004000000fc020000000000000000000000000000ffffffff000000000000000000000020000000004e2000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fdffffff0000000050001100ff020000000000000000000000000001560101000000006dd4592306de65d900fc0100000000dd000000000000000001ac1e000100000a0000000000000000003c0000000235"], 0xa0}, 0x1, 0x0, 0x0, 0xe891}, 0x0) 5m24.193453879s ago: executing program 7 (id=9682): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x5, @rand_addr, 0x1}, 0x1c) listen(r0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x40, 0x4) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000180)=0x7c, 0x4) shutdown(r1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r2, &(0x7f00000066c0), 0x0, 0x11142, 0x0) futex_waitv(&(0x7f0000001240)=[{0x1, &(0x7f0000000100)=0x7fff, 0x86}], 0x1, 0x0, 0x0, 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6008843500140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500200089078000080d1a81785ef68093f3d39a23a3235e9c91b93da97369cea8115ff73051c4b154037c1cb54fd48f569f80fc70e1c4af94ba181d502b1439c1161b85846a949f518f22b06e0c7b8bf294047f39e237812eff7777d07514b1aa8548c60e2c996b71f6fe0474119a053e7deb9e8f60005dba560d6275dc7d34b8e088dc6b9ec9766cddf3a2b3a336d8885d5"], 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bond0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) r7 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1211000000000040050bbe1a8b78fc5e000109022400adaaa9fc0b09040000010300038936050a70185d0f2fa42d66c406190058d6284304a0e60e62aba7443d307695afdaed34b2e7a81c8ba4e09b31c745266185e6edfc51feece0be740fc0643e55e25d1b133d2b9de42f981396aff93b69fd12e3c68c30e9000000004e5d3b9e41b59727ee5d028444"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) r8 = socket(0x2, 0x80805, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @private=0xa010101}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000000)={r10}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e22, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xba4}}, 0xe, 0x7}, &(0x7f0000000340)=0x90) syz_usb_control_io$hid(r7, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0xfffffffd, {0x2, 0x0, 0x4, 0x0, 0x4}, [@NHA_OIF={0x8, 0x5, r6}, @NHA_ID={0x8, 0x6, 0x1}, @NHA_OIF={0x8, 0x5, r6}]}, 0x30}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@ipv6_delrule={0x80, 0x21, 0x8, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x0, 0x10, 0x9, 0x0, 0x0, 0x4, 0x2}, [@FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth0_to_batadv\x00'}, @FRA_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @FRA_DST={0x14, 0x1, @local}, @FRA_SRC={0x14, 0x2, @private0}, @FRA_DST={0x14, 0x1, @remote}]}, 0x80}}, 0x0) 5m23.699447812s ago: executing program 6 (id=9683): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xd, 0x8, 0x4, 0x1, 0x0, r0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000080040000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m23.625696862s ago: executing program 6 (id=9685): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x11, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {{}, {0x95, 0x0, 0x4000}}, [@btf_id={0x18, 0x1, 0x3, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m23.518844076s ago: executing program 6 (id=9686): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x10000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000000)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000032b3ed00"/120], 0x78) socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000280)={0x3, &(0x7f0000000440)=[{0x20, 0x4, 0x81, 0xfffff034}, {0x20, 0x10, 0x2, 0xbffff010}, {0x6}]}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000480)=ANY=[@ANYRES32], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) mq_notify(0xffffffffffffffff, &(0x7f0000000340)={0x110c230000, 0x4, 0x3365084d0da8e712}) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x85}, 0x85) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r0, @ANYRES64=0x0], 0x3c}, 0x1, 0x0, 0x0, 0x12f3f749b0a50181}, 0x4004081) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYRES16=r2, @ANYRES32=r4, @ANYBLOB="08000200ac1414aa5714c584b17b580d625b3d81d06495bc31f16e11e3c889166d156c963d4e6dd00c"], 0x20}}, 0x40000c0) socket$inet(0x2, 0x3, 0x2) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000200)={@mcast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x100a, 0x1d}}) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x4) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00', 0x19}) ioctl$UI_SET_LEDBIT(r7, 0x40045569, 0xb) ioctl$UI_DEV_CREATE(r7, 0x5501) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) 5m23.17700068s ago: executing program 5 (id=9690): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000000100)={0x1, 0x1, 0x3, 0xfffffffffffffffe}) fcntl$lock(r0, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x300, 0x5}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x10}, {0xffff, 0x8}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x9, 0x2}}]}}]}, 0x44}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c000900"], 0x4c}}, 0x40000) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x18, &(0x7f0000000400)=@req3={0xc, 0x47, 0x8004, 0x4, 0x3, 0xffffffff, 0xfffe0}, 0x1c) recvmmsg(r2, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000002d40)=[{&(0x7f00000019c0)=""/4096, 0x1000}], 0x1}, 0x9}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0xfc) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000000000040411215500000000000010902240001000000c609040007020300010009210000050122050009058103"], 0x0) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r4, 0x8008563f, &(0x7f0000000180)) syz_usb_control_io$hid(r3, 0x0, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x13c) 5m22.99343676s ago: executing program 6 (id=9691): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="c00000001900674c0000000000000000ff010000000000000000000000000003e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000700000000000002000000000000000008001f0012"], 0xc0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newspdinfo={0x14, 0x24, 0x21}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="b80000001900674c000000000000000000000000000000000000000000000000e000000200000000000000000007000000000000000000000a"], 0xb8}}, 0x0) 5m22.86979792s ago: executing program 6 (id=9692): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='oom_adj\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/36, 0x24}], 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x8848}, 0x24004804) r1 = io_uring_setup(0xbbc, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x0, 0x345}) io_uring_enter(r1, 0x100000, 0x2, 0xf, &(0x7f0000000000), 0x18) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) ioprio_get$pid(0x2, 0xffffffffffffffff) 5m22.724450104s ago: executing program 6 (id=9693): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 32) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) (rerun: 32) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (rerun: 64) r4 = socket(0x200000000000011, 0x4000000000080002, 0x0) bind$packet(r4, &(0x7f0000000280)={0x11, 0x3, r3, 0x1, 0xfc, 0x6, @remote}, 0x14) socket$packet(0x11, 0x2, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) (async) syz_usb_connect(0x4, 0x34, &(0x7f0000000000)=ANY=[], 0x0) io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0xfffffffe, 0xc}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42002, 0x0) (async) syz_usb_connect(0x0, 0x107, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000b2111d40c71b10905336000000010902f50001000000000904"], 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) mbind(&(0x7f00001e7000/0x2000)=nil, 0x2000, 0x8003, &(0x7f0000000000)=0x9, 0x3, 0x2) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) read$FUSE(r5, &(0x7f00000007c0)={0x2020}, 0x2020) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) io_setup(0xffff8c80, &(0x7f00000000c0)) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000001c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000430109029200030172e5000904000000010100000a24010000000201020c0d240700000500006e626805000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r6, @ANYBLOB="05"], 0x0) (async, rerun: 32) syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a92e0c10ba110310d2140102030109021b00020a07e0400904554cac09081504ad00006b506a8c09040307004100ba04"], &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) (rerun: 32) 5m22.48179453s ago: executing program 2 (id=9694): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x107800, 0x0) sendfile(r4, r5, 0x0, 0x201f00) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0xfffffffd, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8090}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, 0x0, 0x0) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r7, 0x0, 0x0, 0x608d850) close(0x3) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000000)='bridge0\x00') sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x8847, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020203600e4109000800ac00060311000000160012000a00ff050000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r8, 0x0, 0x50, 0x0, &(0x7f0000000300)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffe39}]}) r9 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r9, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r9, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000002280)=""/58, 0x3a}], 0x1, &(0x7f0000000400)=""/19, 0x13}, 0x90}], 0x1, 0x40002122, 0x0) sendmsg$tipc(r9, &(0x7f0000000200)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, 0x0}, 0x4800) 5m17.316018912s ago: executing program 4 (id=9696): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004580)={0x1, 0xf, &(0x7f0000004280)=ANY=[@ANYBLOB="1800000000010000000000009f09000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000006000000b70300000000000085000000a4000000bf0900000000000055090100000000009500000000001800bf91000000000000b70200000000000085000000d4000000b70000000064000095"], &(0x7f0000004380)='syzkaller\x00', 0x6, 0x27, &(0x7f0000000140)=""/39, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 5m17.062261822s ago: executing program 5 (id=9697): unshare(0x28000600) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r1, 0x1, 0x0, 0x0, {0x3d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x82}, {0x5, 0x87}}]}, 0x4c}}, 0x0) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r3 = socket(0x10, 0x3, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r4, 0x0, &(0x7f0000000240)) write(r3, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) r5 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000010c0)=@raw={'raw\x00', 0x8, 0x3, 0x310, 0x0, 0xe138, 0x198, 0x1c0, 0x198, 0x278, 0x358, 0x358, 0x278, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0xc}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffffd, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xfffd, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x370) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x5, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, [@cb_func={0x18, 0x7, 0x4, 0x0, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xff5, &(0x7f0000001840)=""/4085}, 0x94) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x4e20, 0xffff, @dev={0xfe, 0x80, '\x00', 0x37}, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000580)='vegas', 0x5) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 5m16.962981135s ago: executing program 7 (id=9698): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004580)={0x1, 0x1f, &(0x7f0000000100)=ANY=[@ANYBLOB="1800200000010000000000009f09002318170000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000200000008500000086000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000060000008500000006000000bf91000000000000b70200000000000085000000d4000000b70000000064000095"], &(0x7f0000004380)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 5m16.461123338s ago: executing program 7 (id=9699): r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(r0, 0x40046103, &(0x7f0000000300)={0x0, 0x6, 0xfffffff9, 0x9, 0x5, 0x1, 0xf7, 0x7f, 0x3, 0x1, 0x5, "f7d9d17d2756a832754d2db7a81004bd6b122e1a46766bc2f771d8be1f6c41e1"}) r1 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) close_range(r0, r0, 0x0) ioctl$XFS_IOC_BULKSTAT(r1, 0x8040587f, &(0x7f0000000240)={{0x1000, 0x6, 0x0, 0x1, 0x9}, &(0x7f0000000040)=[{}, {}]}) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000640)={0x1, 0x0, @pic={0x2, 0x9e, 0x0, 0x45, 0x3, 0x9, 0x6, 0x6, 0xfc, 0xff, 0x3, 0xf8, 0x0, 0x3, 0x4, 0xfc}}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000240)={[0xa, 0xfffffffffffffff7, 0x10, 0x0, 0x400000007f, 0x1, 0xa, 0x20000000003, 0x10000000000009, 0x189040bf, 0xffff, 0x400000000004, 0x8396, 0x206, 0x80009, 0x10000000f], 0x0, 0x26d307}) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000400)={0x1, 0x0, @pic={0x7, 0x5, 0xb, 0xd, 0xb8, 0x8, 0x6, 0x8, 0x9, 0x6, 0x3, 0x7, 0x3e, 0x6, 0x5, 0x10}}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r2, 0xc018aec0, &(0x7f0000000740)={0x10200, 0x1c0, 0x240, &(0x7f0000000340)=[0x3ff, 0x1f, 0x6, 0x7, 0x3, 0x81, 0xfffffffffffffffe, 0x6, 0x9, 0xe, 0x5, 0xf, 0xc6, 0x2, 0x7, 0x4, 0x2, 0x3, 0xffffffffffffffff, 0x6a8, 0x7fffffff, 0x8, 0x100, 0x0, 0x1, 0x3, 0x3, 0x9, 0x5, 0xa, 0x5, 0x8, 0xffffffffffffffff, 0x3, 0x6, 0x10001, 0x5, 0x2, 0x2c, 0x2, 0x2, 0x6, 0x0, 0xffffffffffff8000, 0x1ff, 0x3ff, 0x7, 0x80000000, 0xb, 0x4, 0x10, 0x66, 0x2, 0x7, 0x10000, 0x5, 0x4, 0x9, 0x4, 0x7ff, 0x8, 0xfffffffffffffd00, 0x4, 0x5, 0xc, 0xcf7, 0xa6, 0x5, 0x3, 0xb9, 0x6, 0x5, 0x7833, 0x9, 0x7, 0x0, 0x6, 0x8, 0x3224, 0x3a8e, 0x401, 0x8000000000000001, 0x6f, 0x1, 0x0, 0x5, 0x24, 0x10000, 0x10000000000000, 0x8, 0x6, 0x2, 0x3800000000000000, 0x6, 0xcc, 0x9, 0x4a, 0x4, 0xfff, 0x0, 0x3, 0x81, 0x5, 0x1000, 0x2, 0xde46, 0x401, 0x7, 0xd, 0x30e6, 0x100, 0x5, 0x1000, 0x40, 0x5, 0x852, 0x7fffffff, 0x5, 0x1, 0x7fffffff, 0x9, 0x7f, 0x8000, 0x9, 0x6, 0x5, 0xfffffffffffc0000, 0xb]}) 5m16.217463431s ago: executing program 4 (id=9700): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e0000002000000000000000000000000000000000000000000000000000000004e220000000000000a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000ffffffffffffffff8100000000000000ffffff7f000000000000000000000000fbffffffffffffff0000000000000000000000000000000030000000"], 0xb8}}, 0x2c000010) 5m14.82295477s ago: executing program 7 (id=9701): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x4) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card1/oss_mixer\x00', 0x100602, 0x0) socket$kcm(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x16) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0xffffffffffffffe5, 0x5, 0x8, 0x8001, 0x0, 0x200009, 0x3ff, 0x6, 0xfa11, 0xffffffff}, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000340)={@rc={0x1f, @any, 0xcb}, {&(0x7f00000001c0)=""/74, 0x4a}, &(0x7f0000000240), 0x61}, 0xa0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000100), 0x3, 0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x800}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xee8, 0x1c, 0x800, 0x8}, {0x7, 0x2, 0x7, 0x1003, 0x5, 0x20000007}, 0x6db6312a, 0x7, 0x1257}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x111}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d800000025"], 0xd8}, 0x1, 0x0, 0x0, 0x4004041}, 0x20004440) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000400)=0x0) syz_open_procfs(r10, &(0x7f0000000440)='net/igmp6\x00') ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/stat\x00', 0x0, 0x0) accept4$vsock_stream(r11, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x800) 5m14.729439579s ago: executing program 4 (id=9702): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000400000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000040000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m14.514095529s ago: executing program 4 (id=9703): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000001800)={'#! ', './file1/../file0', [{0x20, '\xd7\x8fL\xa2o\x0f\t\'-\xaf\x006y\xc9 a;\x04\xca\xb2\x9f/5\xb1\xb6i\xff\a\x00\x00\x19\xff\xda\xc3\x8a\x99q\x1e\xd3\xad@\x9f#Mw&\xdf\xab\xfd\xf8\xee\xa0\xff2|\x14\x89\x8a\xf0&Of\xc3\x1d5F\xf6N!\"\xd4|\xa4\xe0\x81\x88\xa3b\xcbZ}O\x84\xaf\xf9\xad\x9e\xaa\r\x85\x9fF\xbbs\x1b\x8e*T\x86\xca'}, {0x20, '`\n\t\xe5[\x19'}, {0x20, '.\\'}, {0x20, '/dev/loop#\x00'}], 0xa, "521299a432289bea0aa53f5db534de379d0418026c1f265a707f7b5008ab99f2c9a997ad079ea398ccfcdc48da03fd070a2913b99836792d5dd5992db64276c3aebed24145776c2f03ce2c7c32dc"}, 0xdd) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300"}}) 5m13.978955532s ago: executing program 4 (id=9704): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a0300000000000000000c0a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 5m13.739683435s ago: executing program 4 (id=9705): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4d, 0xc, 0x5, 0x6, 0x2, 0xf, 0x80, 0x7f, 0x59, 0x3, [0x1, 0xfffffffa, 0xe, 0x4, 0x7, 0x3, 0x2f, 0x1003]}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000001f0000", @ANYRES32=0x0, @ANYRES32=r0, @ANYRES64=r0], 0x50) prctl$PR_GET_TIMERSLACK(0x1e) r2 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r2, 0xc2604110, &(0x7f00000001c0)={0x0, [[0xffffffff, 0x0, 0x1, 0x8, 0x0, 0x6804, 0x0, 0xffffffff], [0x80, 0x100001], [0x91, 0x0, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x1000]], '\x00', [{0xfffffffc, 0xfffffffe}, {}, {}, {0x9, 0x4}, {}, {}, {0x10}, {0x0, 0x6}, {}, {0x0, 0x4}, {0x200}], '\x00', 0x305}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x11, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@btf_id={0x18, 0x1, 0x3, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m6.867512471s ago: executing program 35 (id=9694): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x107800, 0x0) sendfile(r4, r5, 0x0, 0x201f00) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0xfffffffd, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8090}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, 0x0, 0x0) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r7, 0x0, 0x0, 0x608d850) close(0x3) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000000)='bridge0\x00') sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x8847, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020203600e4109000800ac00060311000000160012000a00ff050000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r8, 0x0, 0x50, 0x0, &(0x7f0000000300)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffe39}]}) r9 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r9, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r9, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000002280)=""/58, 0x3a}], 0x1, &(0x7f0000000400)=""/19, 0x13}, 0x90}], 0x1, 0x40002122, 0x0) sendmsg$tipc(r9, &(0x7f0000000200)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, 0x0}, 0x4800) 5m6.532235635s ago: executing program 36 (id=9693): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 32) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) (rerun: 32) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (rerun: 64) r4 = socket(0x200000000000011, 0x4000000000080002, 0x0) bind$packet(r4, &(0x7f0000000280)={0x11, 0x3, r3, 0x1, 0xfc, 0x6, @remote}, 0x14) socket$packet(0x11, 0x2, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) (async) syz_usb_connect(0x4, 0x34, &(0x7f0000000000)=ANY=[], 0x0) io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0xfffffffe, 0xc}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42002, 0x0) (async) syz_usb_connect(0x0, 0x107, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000b2111d40c71b10905336000000010902f50001000000000904"], 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) mbind(&(0x7f00001e7000/0x2000)=nil, 0x2000, 0x8003, &(0x7f0000000000)=0x9, 0x3, 0x2) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) read$FUSE(r5, &(0x7f00000007c0)={0x2020}, 0x2020) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) io_setup(0xffff8c80, &(0x7f00000000c0)) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000001c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000430109029200030172e5000904000000010100000a24010000000201020c0d240700000500006e626805000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r6, @ANYBLOB="05"], 0x0) (async, rerun: 32) syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a92e0c10ba110310d2140102030109021b00020a07e0400904554cac09081504ad00006b506a8c09040307004100ba04"], &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) (rerun: 32) 5m1.644810801s ago: executing program 37 (id=9697): unshare(0x28000600) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r1, 0x1, 0x0, 0x0, {0x3d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x82}, {0x5, 0x87}}]}, 0x4c}}, 0x0) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r3 = socket(0x10, 0x3, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r4, 0x0, &(0x7f0000000240)) write(r3, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) r5 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000010c0)=@raw={'raw\x00', 0x8, 0x3, 0x310, 0x0, 0xe138, 0x198, 0x1c0, 0x198, 0x278, 0x358, 0x358, 0x278, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0xc}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffffd, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xfffd, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x370) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x5, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, [@cb_func={0x18, 0x7, 0x4, 0x0, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xff5, &(0x7f0000001840)=""/4085}, 0x94) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x4e20, 0xffff, @dev={0xfe, 0x80, '\x00', 0x37}, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000580)='vegas', 0x5) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 4m59.165154764s ago: executing program 38 (id=9701): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x4) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card1/oss_mixer\x00', 0x100602, 0x0) socket$kcm(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x16) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0xffffffffffffffe5, 0x5, 0x8, 0x8001, 0x0, 0x200009, 0x3ff, 0x6, 0xfa11, 0xffffffff}, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000340)={@rc={0x1f, @any, 0xcb}, {&(0x7f00000001c0)=""/74, 0x4a}, &(0x7f0000000240), 0x61}, 0xa0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000100), 0x3, 0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x800}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xee8, 0x1c, 0x800, 0x8}, {0x7, 0x2, 0x7, 0x1003, 0x5, 0x20000007}, 0x6db6312a, 0x7, 0x1257}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x111}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d800000025"], 0xd8}, 0x1, 0x0, 0x0, 0x4004041}, 0x20004440) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000400)=0x0) syz_open_procfs(r10, &(0x7f0000000440)='net/igmp6\x00') ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/stat\x00', 0x0, 0x0) accept4$vsock_stream(r11, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x800) 4m58.288424068s ago: executing program 39 (id=9705): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4d, 0xc, 0x5, 0x6, 0x2, 0xf, 0x80, 0x7f, 0x59, 0x3, [0x1, 0xfffffffa, 0xe, 0x4, 0x7, 0x3, 0x2f, 0x1003]}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000001f0000", @ANYRES32=0x0, @ANYRES32=r0, @ANYRES64=r0], 0x50) prctl$PR_GET_TIMERSLACK(0x1e) r2 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r2, 0xc2604110, &(0x7f00000001c0)={0x0, [[0xffffffff, 0x0, 0x1, 0x8, 0x0, 0x6804, 0x0, 0xffffffff], [0x80, 0x100001], [0x91, 0x0, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x1000]], '\x00', [{0xfffffffc, 0xfffffffe}, {}, {}, {0x9, 0x4}, {}, {}, {0x10}, {0x0, 0x6}, {}, {0x0, 0x4}, {0x200}], '\x00', 0x305}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x11, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@btf_id={0x18, 0x1, 0x3, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m5.759360095s ago: executing program 9 (id=11163): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000104000000000000020000000000", @ANYRES32=0x0, @ANYBLOB="8a4502f0ffffff002400128009000100626f6e640000000014000280050001000600000008000200", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x20000044}, 0x40) 1m5.342769865s ago: executing program 9 (id=11167): read$FUSE(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sg(0x0, 0x1000000000000004, 0x53cef56e9e47687d) syz_open_dev$sndctrl(0x0, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = fsopen(0x0, 0x0) read(r2, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000180)={0x1}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20a40, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc1b}, 0x28) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6, 0xe, 0x4, 0x4, 0x4, 0x1000, 0xf1, 0x0, 0x7fffffffffffb, 0x6, 0x0, 0x101, 0x0, 0x5, 0x0, 0xbde], 0x1000, 0x3c4210}) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000040)={0x10200, 0x80, 0xc0, &(0x7f0000000340)=[0x5, 0x800000, 0xe, 0x80, 0x2000000000000000, 0x100000001, 0xfffffffffffffffa, 0x2, 0x8, 0x2, 0x2, 0x700000000000000, 0x9, 0xfffe, 0x3, 0x7, 0x80000002, 0x5, 0xc3e2, 0x9880, 0x4000000000080, 0x6, 0x8, 0x2, 0x3, 0x20000000009, 0x2, 0x1fd, 0x80008, 0x0, 0x7, 0x5, 0x5, 0x2, 0x501, 0x1fe, 0xfffffffffffffff5, 0x4, 0x7fffffff, 0x7d, 0x0, 0x6, 0x7ff, 0x5, 0x101, 0x6, 0x8000000000000001, 0xfffffffffffffff9, 0x4100000002, 0xfffffffffffffffd, 0x8, 0x9, 0x7fff, 0xec, 0x8000000000000000, 0x4, 0x94f, 0x7, 0x7fffffffffffffff, 0x8, 0xffffffffffffffff, 0xd, 0x11, 0xa, 0x5, 0xa8, 0x1, 0x2000000000000007, 0x7fffffffffffffff, 0x38c, 0x7, 0x7, 0xae8f, 0x8, 0xa, 0x0, 0x24000008, 0xdac, 0xe96, 0x7, 0xfffffffffffffffc, 0xa7, 0x3, 0x0, 0x9, 0x0, 0x7, 0x100, 0x4, 0xe, 0xffffff7ffffffff9, 0x3, 0x5, 0x21, 0xfffffffffffffc02, 0xfffffffffffffffd, 0x401, 0x3, 0x1e4b, 0x2, 0x79, 0xf, 0x10002, 0xe, 0x3, 0x3, 0x3, 0xfffffffffffffff9, 0x0, 0x4, 0xa, 0x40000001, 0x9, 0x8fc3, 0xfff, 0x80, 0x3, 0xd, 0x1, 0x9, 0xfffd, 0x1, 0x50, 0x1, 0x2, 0x7, 0xea7, 0x1]}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40408d6}, 0x24000010) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000100)="66b813010f00d8b805000000b94a9a00000f01c166ba4300ed0f01c8c4a2fd05a53edd0000f2440f233766410f38825a0066b893000f00d08f89809aed66b80c008ec8", 0x43}], 0x1, 0x4498bda7e2139f37, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x5, 0x40, 0x40, 0x0, 0x3, 0x2004cb, 0x4000000000000000, 0x2, 0x3, 0x0, 0x1, 0x0, 0x2, 0x9, 0x1], 0x80a0000, 0x450}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1m4.33861548s ago: executing program 8 (id=11173): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000001a80)={'#! ', './file1/../file0', [{0x20, '\xeb)\'-!'}, {0x20, '-*.\x1f'}, {0x20, '!\\\\\'#'}, {0x20, '.\\'}, {0x20, '%^\\\x93\xca\xe9[\x04\fu\xd3\x10.\xee\\Q$e\xa9=B\x19I\xd2Le\x14P\x86\xd3\xe5b\x93y\xdf\xfb\x17B7\a\x9c\xb5?\x0f\xc8\x9b\x9aol)\x87Z\xcc\xa5\xc2\xffb\xb8\x00\xbb\n\xcb\xb1\xdaa\x18\xacG\t\x8e\x00*\xf8R\xa9\x8e\xaaUw\xc0!\x1fa\xf5\xecf\x14B\xd4\xd4\r\x143Y=\xa6!\x94P\xdb\x81vr\x8c\xfd/6\x16\xd8&\x96\xb0o\xae'}, {0x20, '/dev/loop#\x00'}, {0x20, '/dev/loop#\x00'}, {0x20, '&/&'}], 0xa, "521299a432289bea0aa53f5db534de379d0418026c1f265a707f7b5008ab99f2c9a997ad079ea398ccfcdc48da03fd070a2913b99836792d5dd5992db64276c3aebed24145776c2f03ce2c7c32dcc548e812fc6d1fcf7eb1a83bb758906829d202684e3551a80e9430c0adb159c97647cdf2"}, 0x129) write$binfmt_script(r1, &(0x7f0000001800)={'#! ', './file1/../file0', [{0x20, '\xce/i\xd9\xa1\x93\x17o\x8e\xb1\xb3\xee\xec\x1dev\x1e?kvm\xae3\x9eO?\xbcE\'\xb9\xc6\xc5\x85\x99\xbd\xdaMG2\xb7\x01\xe8\xa9\xb9\x83\xe4\x86\xd1+!\x98q\x1f\x01m\xa8\xf9h8m\xf0\xf1r`\xecX7\x0f\xc5\xd4\xb9\xbc\x89\xf7\x1a\x10\xf7\xcftU\xd6\xab\xf4\xd7\x91o\xc6~\x05\xc3(\x80\xfd\b\xa9(\x1ep'}, {0x20, 'f\xce\x01\x00\xc7\xbb\xb5\xb7\x01\xfb\x03\x92\xa7,x\x9f\xfc4(\xa4\x7f@\xdc\x0f\xbe\x0fs\xea6\xe4\xbf\\\x12\x19pnm;\xcfM\x00\x00\x00\x00\x7f|7\xf7\x10\x93\x85\x18S\xa0x\xc0\xcf>\xad\xf6c\x0f\x0f\x03\f\x15\x1c\xb3ei\\5>1\xe2\x03O|S[\xfe\x8c\xe0.\x84\x12P\xba5\x15\xeft\x19\x11\xf1\xffF\xc1\v|{K\x1b\xdb\xbe\\\xb8\xc7S\x14\xa1\xfe\xca\xb7\x82$\x03\x96\x84\xed\xc6\xfdT\xda\x9b\xa434\x8f\tq\xcb-\x92e\x88\xfa\x1a\xa4<\x10\x1e\xd9\xaa\xa0\x01\xa6@)\x9b\xe9:\xe0\xaa#\xf5\x02\xd9\xf1C\xd6\x97fLx\x7f\xb5\x1d\xe1>.\xb7\xe0s\xeb=\x84'}], 0xa, "0002784148b29e7bcaf3e29c2593b929f38d08de9a57967d49c269445df5a02a484a4fff1f05bbd60b043247a4e7"}, 0x157) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300"}}) 1m4.131944057s ago: executing program 8 (id=11174): unshare(0x44050400) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='blkio.reset_stats\x00', 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x80, &(0x7f0000000380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @remote, @val={@void}, {@ipv6={0x86dd, @generic={0x5, 0x6, "ad3b43", 0x46, 0x2e, 0x0, @remote, @local, {[@srh={0x3c, 0x2, 0x4, 0x1, 0x70, 0x58, 0xcd9, [@mcast2]}], "53163ea8c641a15dbc26c11143ef0d9c34fc807f7342c4cf37a2a230a4803cc5d653ca931350ecf6c81b406e399d"}}}}}, 0x0) syz_usb_connect$cdc_ecm(0x6, 0x0, 0x0, &(0x7f0000000f40)={0xa, &(0x7f0000000d80)={0xa, 0x6, 0x200, 0x8, 0xc, 0x0, 0xff, 0x3}, 0x45, &(0x7f0000000dc0)={0x5, 0xf, 0x45, 0x4, [@ssp_cap={0x24, 0x10, 0xa, 0x2, 0x6, 0x48f, 0xf00f, 0x400, [0xf0, 0xffc000, 0xc000, 0xff0000, 0x3f00, 0xff3f30]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x3, 0x81, 0x1}, @wireless={0xb, 0x10, 0x1, 0x0, 0x1, 0x3, 0x4e, 0x4, 0x80}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0xb, 0x4, 0x7}]}, 0x2, [{0x0, 0x0}, {0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x340a}}]}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_test', 0x80100, 0x9c) fgetxattr(r3, &(0x7f0000000000)=ANY=[], 0x0, 0x3) ioctl$BLKROGET(r3, 0x125e, 0x0) r4 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000fc0)={0x2, 0x8203, 0xa89, 0x3, r5}, 0x10) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000100)='name', &(0x7f0000000140)='_\x00'/11, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x4c, 0x3, 0x3, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffff595}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x20003}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x64}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1000}, @NFQA_MARK={0xffffffffffffffeb, 0x3, 0x1, 0x0, 0x200}]}, 0x4c}}, 0x20000010) socket$inet_udp(0x2, 0x2, 0x0) fsopen(&(0x7f0000000200)='cgroup2\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000080), 0x12) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x900000000000000) close_range(r4, r2, 0x2) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000240)={0x1000, 0x258, 0x280, 0xf0, 0x7, 0x1, 0x2, 0x0, {0x5, 0xe69, 0x1}, {0x0, 0x5, 0x1}, {0x0, 0x9, 0x1}, {0x823, 0x1000, 0x1}, 0x2, 0x2, 0x8, 0x3, 0x1, 0x1, 0x80000000, 0xfffffffc, 0xc, 0x0, 0x9, 0x1520, 0xc, 0x0, 0x2, 0x5}) write$cgroup_int(r1, &(0x7f0000000100)=0x7ffffffffffffffc, 0x12) 1m4.04678386s ago: executing program 9 (id=11175): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400000103000000092105"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000240)={0x14, 0x15, 0x1, 0x70bd2c, 0x25dfdbfb, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x400c087}, 0x4004104) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000940)={0x4c, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x69, 0xb, 0x8}, {0x6, 0x11, 0xa}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x10) syz_usb_control_io(r0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r7 = syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x80, 0xf0, "", [{{0x9, 0x4, 0x0, 0xd0, 0x2, 0x7, 0x1, 0x1, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x9e, 0x7, 0xfc}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x4, 0x4, 0x2}}]}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x40, 0x5, 0x7, 0x30, 0x6}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x9, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xc01}}, {0x7f, &(0x7f00000001c0)=@string={0x7f, 0x3, "39939ab3cdb8faf6d0dd1b11c7d1008b8235b7fc29eed8752c5f557ae503bdb7dbc2bfe451d839c64e6d23d224261ad5e21a2bcae27f1e0cf8d359be191afd60b9e4afe99f1698ff4945451bea0f67ff991be41dcb11ebf09df9a371d969c034308ad6263831fef5f49e2d1e54b02fa657401665b6ab87f684ae327d00"}}, {0x81, &(0x7f0000000240)=@string={0x81, 0x3, "ebce99192389fd1919f2203c381959db2373b0b2b0cc390bf228b9ecc9c4203c51648c6bdbb808741eef342acd94ef583b13d6cb462e6b27a0d978f89a2a73a2282aefe01f2f6046b87b425e829a7a6d9135f485a5d817a5b71af488226e82bb0bb6f68d13e3d1a982bbcf47fb217ba42a20d04c97694a361767a43ace7dbf"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44e}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x140a}}, {0xf, &(0x7f0000000380)=@string={0xf, 0x3, "55f504cec12e0b3ff48b108e25"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x814}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x427}}, {0x7f, &(0x7f0000000500)=@string={0x7f, 0x3, "fde21408f2031981d89aadec40a28b8bc0f284a515d6aff5679f3e376944e8037c783407688ebc59cd65e159425b5e9c5152ee0e491848dffd4c85b29c0bae2777e77ed15ca5f80b9acb499aa8d5204141bd2300379430db065d8baa7ddf58c1b5c5e1b57747a40384deb721e876119b74991270b18c2cb7e330f2daa7"}}]}) syz_usb_control_io$printer(r7, &(0x7f0000000740)={0x14, &(0x7f0000000640)={0x0, 0x21, 0x8e, {0x8e, 0x7, "0d3700b2702413460b0d89ba943c1d16bbeac492cf031b1b6f9f8d2625d27dddecf8c735bae9497480edd500802db6df3abbadbac796963aa843eddc0d64117091c1c6e6333a6f951571a3d39256ff74b62a33327514755c810f582a4c098db320b8b83a04a7ae000fd2089b563cb335ad6d240d7f03753a6df124159978c3196e04fbd808a71f216e310840"}}, &(0x7f0000000700)={0x0, 0x3, 0x12, @string={0x12, 0x3, "3748e908534754afe5b17d5a2237de01"}}}, &(0x7f0000000a40)={0x34, &(0x7f0000000c00)=ANY=[@ANYBLOB="0017a3000000b60b114c1e8bfa0171d135a8c26cc2040197190230f0f2f04bda22d82fbaa1d6bbabec876f284aa1110d287630d02ed3a7ce38e0e526286df38902851f5924b21e7b96404cb1b827cc80b5da52b2aee55e13181b5609009d9cf600c96f58229c9a34ff3aca7411a4a04be8888cb881da8a49afff03000035c9c6bae70f2ed245f4832af393abe92bec5246480f90e3be6317443355b5b56c33c3878cce9c4b58ee537898141dde522aa1c7c65f241d75d67d0bd1c443e568890baf39a939c8906dc6f42afb057a69e490d120ecc0bc9acb"], &(0x7f0000000840)={0x0, 0xa, 0x1, 0xfb}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000008c0)={0x20, 0x0, 0xeb, {0xe9, "dfdd613d497767c1fabefb960d7628cd815fa2c4686760cad584d0ff9a394d800af2085b4d3fc6b56a9223c66725b7ada68fe9c824cb986aa96de24514b000011d67b48905a7bb3db07979d75b25a3d8fe3ce268df32461d4e954d078dd65f11452e2e295ec495fa351711b05ab53ad494fc1739e2f60acdb3bd861bfb4361476cde0c143e21500775c8b4673a73bbaa4bb114ec8eb62a4c566767789b7f11babce92f5bfad070ab7e015f054fb994858b001c6d53a6c17af2ede535dcd45a0bb6cec7a1827cb867bede6634c68f091a2edf177e3e018b13b3b1fc166ba1042e20823e5d04d275c774"}}, &(0x7f00000009c0)={0x20, 0x1, 0x1, 0x5}, &(0x7f0000000a00)={0x20, 0x0, 0x1, 0x7}}) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000b00)={'ip6tnl0\x00', &(0x7f0000000a80)={'syztnl2\x00', 0x0, 0x29, 0x7, 0x4, 0x3, 0x4c, @private1={0xfc, 0x1, '\x00', 0xbe}, @loopback, 0x700, 0xf800, 0x0, 0x97}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000bc0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x28, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10008811}, 0x1) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000000)="90") 1m4.046388514s ago: executing program 3 (id=11176): socket$inet_sctp(0x2, 0x5, 0x84) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) syz_clone(0x81000000, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0xc17a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000000c0)={@hyper}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(r0, 0x0, 0x80) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = syz_open_dev$sndpcmc(&(0x7f0000000340), 0x1, 0x80) ioctl$SNDRV_PCM_IOCTL_UNLINK(r3, 0x4161, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 1m3.458174822s ago: executing program 8 (id=11178): setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000040)={0x4e, 0x40, 0x5, 0x80, 0x7c, 0x80, 0x9, 0x40, 0x7f, 0x7, 0x9, 0x40, 0x9e, 0x8}, 0xe) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000000)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x8001000000000000, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0x0, 0x11, 0x148, 0x1b0, 0x0, 0x1b0, 0x2a8, 0x2a8, 0x1b0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x4, 0x4, 0xd, 0x0, 0x9]}, {0x0, [0x2, 0x188, 0x40000, 0x6, 0x2], 0x3}}}}, {{@ip={@loopback, @multicast1, 0xff000000, 0xffffffff, 'geneve1\x00', 'veth0_macvtap\x00', {0xff}, {0xff}, 0x6c, 0x0, 0x9}, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x2f}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe, 0x0, &(0x7f0000000540)="00000000000000008a7e84d67aa8", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_connect(0x2, 0x24, &(0x7f0000000080)=ANY=[], 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000540)={&(0x7f00000004c0)=[{0x3ff, 0x3a11, 0x0, 0x0}, {0x0, 0x9a00, 0x0, 0x0}], 0x10000000000000bf}) 1m3.016984224s ago: executing program 3 (id=11181): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7\x04\x00e&1\xfd\xea\xb0\xb0', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r3, 0xffffffffffffffff, 0xe, 0x0, @void}, 0xe) r4 = userfaultfd(0x80800) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0xfffffffffffffdc9, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14782ab1321c56dd42edd0d321bbb085c9e9ca8cbe2e7af4eaf55f2c5f8c53c9f6390497d3f0a7fd78382dde4568bfd43cc3cc568d6b2c7a5d907e74ee48df05cda9ad8df31c8545363915b5caf4a7e735aa0008de3a0d3bd28b3ab27a67cc2420bf47ad2a4c68a8d86d1142143a4d58b0842032c8947f8f664166a38a7269ef82d2863941a9f68b1ed8a04848909129a1d7812684"], 0x44}}, 0x8000000) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x27e}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x20004c84) close(0x3) r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x208001, 0x0) writev(r7, &(0x7f0000000580)=[{&(0x7f0000000300)="0984535c54d9d63568fea8338594da9d1ade63ad5612d94e94b36247ae5fa7449b5cece74ffb783c3bf4306484b5deb73309b29958e947829e1aab9973221b106f3e034eb24520b643cd5982f0cabcb0bf15deb928250d668b205499caf31d0e6579966fa7888a7c03a13b208dd20b3c1e35f0aba4e3", 0x76}, {&(0x7f0000000480)="9c3307b4ac5508b01c0afd17b791087c1fed6d48d58793642952844525b78fa97fd486e19df0acef5d6cd9c2e06f45346e20b1cbdfa05afff5642258ebd1b101eeba01b9bf693456434b21395b069323e35925ec36c01878f6b6749480bc2d4f5edc4d7ee6437dc0f7c29a0df51882ca9efb37d7fdd7d720afeeb9b6f5a08b419b1f03e607437127819fe27eb90dd9ad63adec38bc6482ba20ffe7aefc1066ccabc66e7bbe2012874acbf2d8a215dc2bdc7b3b53119430e9f8a9b40a28bdbd01a61a5bfe0831f2afaaaa56a471e4d2ea048bc5b5d5efadfbc8790672d986d6000e41049303", 0xe5}], 0x2) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000180)=0x6f) r8 = dup2(r6, r6) ioctl$SNDCTL_DSP_SPEED(r8, 0xc0045002, &(0x7f00000001c0)=0x2) read$FUSE(r8, &(0x7f00000063c0)={0x2020}, 0x2020) 1m1.934713839s ago: executing program 1 (id=11184): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x470, 0x310, 0x168, 0x0, 0x310, 0x98, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x98}}, {{@ip={@remote, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}}}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@common=@unspec=@pkttype={{0x28}}]}, @ECN={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) 1m1.911589953s ago: executing program 0 (id=11185): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="0801000016000100000000000000000064010100000000000000000000000000000000000000000000000000000000010000000000030000000080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe80000000000000000000000000002c000004d633000000fc0200000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffedffffffffffffff03000000000000000800000000000000000000000000000000000000000000000200000000000000fefffffffffffbff0000000000000000960700002dbd70000000000000000002be0000000000000000000000b1a001000800d8"], 0x108}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 1m1.892873978s ago: executing program 1 (id=11186): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) r2 = socket(0x1000000000000010, 0x80802, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r3) r5 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_ifreq(r5, 0x8948, &(0x7f0000000040)={'wg2\x00', @ifru_mtu=0x7ba}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r4, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x80) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r4, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x78aa}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040890}, 0x48000) sendmsg(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00080008001100080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20642383656d4d2449155037", 0x55}], 0x1}, 0x0) r8 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r8, 0x0) landlock_restrict_self(r8, 0x0) landlock_restrict_self(r8, 0x0) r9 = syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) landlock_restrict_self(r8, 0x8) landlock_restrict_self(r8, 0xc) r10 = landlock_create_ruleset(&(0x7f00000001c0)={0x2fbd, 0x1}, 0x18, 0x0) landlock_restrict_self(r10, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file3\x00', r9, &(0x7f0000000400)='./file1/file3\x00', 0x2) r11 = socket$inet_udp(0x2, 0x2, 0x0) r12 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r12, 0xc0145608, &(0x7f0000000080)={0x4, 0x2, 0x2, 0x0, 0x5}) setsockopt$sock_int(r11, 0x1, 0x3c, &(0x7f00000000c0)=0x15ef47ae, 0x4) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x90b6, 0x4) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8257060000009168da95b2867a010000", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a0e53b6e901b9ff2f518c78042fb542080005000000000024010880f000008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691ca400098028000080060001000a00000014000200000000000000000000000000000000010500030000000000a0000080060001000a0000001400020000000000000000000000000000000000050003000100000028000080060001000a00000014000200fe880000000000000000000000000001050003000300000028000080060001000a00000014000200fc020000000000000000000000000000050003000100000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b30000080080003000100000024000100d1"], 0x178}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) 1m1.766805316s ago: executing program 0 (id=11187): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, 0x3c, 0x301, 0x70bd23, 0xfffffffc, {0x6}, [@typed={0x8, 0x3, 0x0, 0x0, @u32=0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000873}, 0x0) pselect6(0x40, &(0x7f0000000000)={0x9}, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000e40)=@filter={'filter\x00', 0x4, 0x4, 0x360, 0xffffffff, 0x0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @loopback, [0xffffffff, 0xffffff00, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0x0, 0xffffff00], 'geneve0\x00', 'sit0\x00', {}, {0xff}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x3, 0x3}, {0xffffffffffffffff, 0x3, 0x1}, 0x9, 0xfffeffff}}}, {{@ipv6={@private2, @dev={0xfe, 0x80, '\x00', 0x23}, [0x0, 0x0, 0x0, 0xffffffff], [0xffffffff, 0x0, 0xff000000, 0x1ffffff01], 'sit0\x00', 'batadv_slave_1\x00', {0xff}, {}, 0x34}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x20, 0x0, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x3, 0x2}, {0x0, 0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {r1, 0x7fffffff, 0x12, 0x0, 0x0, @ib={0x1b, 0x8, 0x6, {"78c36cbe7e38dade0099fe4e9d908e9b"}, 0xffff, 0x1ff, 0xfffffffeffffffff}, @in6={0xa, 0x4e22, 0x2, @local, 0x2}}}, 0x118) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m1.757816051s ago: executing program 1 (id=11188): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x19, &(0x7f000001f700)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb88a8000088a80000a8a800000e"], 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x5, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x7fffffff, 0x6361, 0x9, 0xffffffff, 0x407}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x101}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) vmsplice(0xffffffffffffffff, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x7ffff000}], 0x1, 0x0) syz_clone3(&(0x7f0000000680)={0x1000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) (async) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x208802, 0x0) close(r7) (async) unshare(0x1c000000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="000000001400000024001280090001007d6f6e6400000000140002800500130d0000000008001e"], 0x44}, 0x1, 0x2000000000000000}, 0x0) (async) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') pread64(r9, &(0x7f0000000480)=""/154, 0x9a, 0xd5) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r9, 0x6, 0x14, &(0x7f0000000140), 0x4) (async) socket(0x400000000010, 0x3, 0x0) (async) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) shutdown(r0, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000340)=[@in={0x2, 0x4e21, @broadcast}]}, &(0x7f0000000300)=0x10) 1m1.73845089s ago: executing program 8 (id=11189): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000001a80)={'#! ', './file1/../file0', [{0x20, '\xeb)\'-!'}, {0x20, '-*.\x1f'}, {0x20, '!\\\\\'#'}, {0x20, '.\\'}, {0x20, '%^\\\x93\xca\xe9[\x04\fu\xd3\x10.\xee\\Q$e\xa9=B\x19I\xd2Le\x14P\x86\xd3\xe5b\x93y\xdf\xfb\x17B7\a\x9c\xb5?\x0f\xc8\x9b\x9aol)\x87Z\xcc\xa5\xc2\xffb\xb8\x00\xbb\n\xcb\xb1\xdaa\x18\xacG\t\x8e\x00*\xf8R\xa9\x8e\xaaUw\xc0!\x1fa\xf5\xecf\x14B\xd4\xd4\r\x143Y=\xa6!\x94P\xdb\x81vr\x8c\xfd/6\x16\xd8&\x96\xb0o\xae'}, {0x20, '/dev/loop#\x00'}, {0x20, '/dev/loop#\x00'}, {0x20, '&/&'}], 0xa, "521299a432289bea0aa53f5db534de379d0418026c1f265a707f7b5008ab99f2c9a997ad079ea398ccfcdc48da03fd070a2913b99836792d5dd5992db64276c3aebed24145776c2f03ce2c7c32dcc548e812fc6d1fcf7eb1a83bb758906829d202684e3551a80e9430c0adb159c97647cdf2"}, 0x129) write$binfmt_script(r1, &(0x7f0000001800)={'#! ', './file1/../file0', [{0x20, '\xce/i\xd9\xa1\x93\x17o\x8e\xb1\xb3\xee\xec\x1dev\x1e?kvm\xae3\x9eO?\xbcE\'\xb9\xc6\xc5\x85\x99\xbd\xdaMG2\xb7\x01\xe8\xa9\xb9\x83\xe4\x86\xd1+!\x98q\x1f\x01m\xa8\xf9h8m\xf0\xf1r`\xecX7\x0f\xc5\xd4\xb9\xbc\x89\xf7\x1a\x10\xf7\xcftU\xd6\xab\xf4\xd7\x91o\xc6~\x05\xc3(\x80\xfd\b\xa9(\x1ep'}, {0x20, 'f\xce\x01\x00\xc7\xbb\xb5\xb7\x01\xfb\x03\x92\xa7,x\x9f\xfc4(\xa4\x7f@\xdc\x0f\xbe\x0fs\xea6\xe4\xbf\\\x12\x19pnm;\xcfM\x00\x00\x00\x00\x7f|7\xf7\x10\x93\x85\x18S\xa0x\xc0\xcf>\xad\xf6c\x0f\x0f\x03\f\x15\x1c\xb3ei\\5>1\xe2\x03O|S[\xfe\x8c\xe0.\x84\x12P\xba5\x15\xeft\x19\x11\xf1\xffF\xc1\v|{K\x1b\xdb\xbe\\\xb8\xc7S\x14\xa1\xfe\xca\xb7\x82$\x03\x96\x84\xed\xc6\xfdT\xda\x9b\xa434\x8f\tq\xcb-\x92e\x88\xfa\x1a\xa4<\x10\x1e\xd9\xaa\xa0\x01\xa6@)\x9b\xe9:\xe0\xaa#\xf5\x02\xd9\xf1C\xd6\x97fLx\x7f\xb5\x1d\xe1>.\xb7\xe0s\xeb=\x84'}], 0xa, "0002784148b29e7bcaf3e29c2593b929f38d08de9a57967d49c269445df5a02a484a4fff1f05bbd60b043247a4e7"}, 0x157) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000000000000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300"}}) 1m1.342900554s ago: executing program 1 (id=11190): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 1m1.342712148s ago: executing program 8 (id=11191): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="020d0000100000000000000000000000080012000200020000000000000000001200320002030000000000000000000000000000000000000000000000000000fc020000000000003fff000000000000030005000000000002000000ac1414aa00000000fa000000030006000000000002"], 0x80}}, 0x0) 1m1.268597474s ago: executing program 3 (id=11192): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000104000000000000020000000000", @ANYRES32=0x0, @ANYBLOB="8a450200210000002400128009000100626f6e640000000014000280050001000600000008000200", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x20000044}, 0x40) 1m1.230520855s ago: executing program 1 (id=11193): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000060018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007baaf8ff00000000b5090800000000007baaf0ff00000000bf8700000000000007070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf98000000000000b5080000000000008500000007000000be0000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m1.140997771s ago: executing program 8 (id=11194): socket$inet_udp(0x2, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x800) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x2, 0x6}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$igmp(0x2, 0x3, 0x2) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e0000001000000000000000000000000ff020000000000000000000000000001000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000001d00000000000004d632000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000090000000000000001000000ffffffff0000000000000000010000800000000043050000000000000400000000000000ffffffffffffff7f000000000000000001000000000000000000000000000000000000002cbd70000035000002000000500000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060000000210466d385", @ANYBLOB="04"], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc4c85513, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4000, 0xffffffff, @empty}, {0xa, 0x0, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x800083}, r4}}, 0x48) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000002600)=ANY=[@ANYBLOB="2c0008006e9cd7256a3c7db20a006d8f8776f66ce0000001"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x10) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000000), 0x0, 0x480) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 1m0.984669533s ago: executing program 1 (id=11195): socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000001c0)={0x10}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @loopback={0xffffffffffff0000}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="600000001000110427bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="9d05070014460400380012800900010069706970000000002800028005000400090000000400130008000100", @ANYRES32=0x0, @ANYBLOB='\b\x00', @ANYRES32=0x0, @ANYBLOB="060012004e23000008001f0005080000"], 0x60}, 0x1, 0x0, 0x0, 0x2aec1bde69326bcb}, 0x20048000) 1m0.976347106s ago: executing program 9 (id=11196): sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x4b6b9d28c5b9a46b, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev={0xac, 0x14, 0x14, 0x31}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000000800000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000e1214400001400030076657468305f766972745f776966690008000a00", @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007ba0f8ff00000000bfa20400000ffe863200000007020000f8ffffffb70300fd03"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000540)={0x3, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) syz_io_uring_setup(0x17, &(0x7f0000000140)={0x0, 0xb9c4, 0x21000, 0x3, 0x361}, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000140)={0x14f, @tick=0x7}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x1bc, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x4}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x8000}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0x16a, 0x2a, [@mesh_chsw={0x76, 0x6, {0x7, 0x5, 0x2a, 0xfff}}, @rann={0x7e, 0x15, {{0x0, 0x68}, 0x6, 0x4, @device_b, 0xa0ee, 0x200, 0xc0000}}, @channel_switch={0x25, 0x3, {0x0, 0x78, 0xfe}}, @random={0x1, 0xb8, "a065dc27d22c8845acb9a6202a65510ebb7989a2152206a2f36a4a44149a99aca561730bea3cca5472f5ab827d5a61eaac2b390d6420fc2297d5e731c09e793c6eae1202ca106284a9711f913b84c107d83e0b85649e4d5317b299c551d8ec071319d75979185929c523ed7155832593bccada8e2d71fbd440e0e3d985e29fe81d6501d559ce71d02ee62ceeba3f5f36300fafb0dcdb537acd1b2a001265db1edd4a0ed00ff732bf66f0489ca5aa19bafd3f1eba5627745f"}, @fast_bss_trans={0x37, 0x86, {0x5, 0x4, "0af15798042fed83b3543242147043bb", "3d93536595a60e8e0d3cd672eb8b75e746d1ca6f42866956d649261bc959a4c4", "4236c144d16b19c95ce21b96e0378aee885118b667694970e6186a169ef7c222", [{0x2, 0x1, 'e'}, {0x4, 0x3, "1f0d04"}, {0x2, 0x27, "e385670a50402b87cb29318167a032a1bca2b76cec204c5f81a3d7b8c40956e388b3143afa4223"}, {0x1, 0x1, "0f"}]}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x41}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002ec0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CAP_DIRTY_LOG_RING(r5, 0x4068aea3, &(0x7f0000000080)={0xc0, 0x0, 0x1000}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000100)={"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"}) ioctl$KVM_RUN(r6, 0xae80, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000480), &(0x7f00000004c0)=0xe) 1m0.891136689s ago: executing program 0 (id=11197): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x300000000000000}, 0x0) 1m0.777577703s ago: executing program 3 (id=11198): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x208802, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x1, 0x3, [0x4, 0x1, 0xe]}, &(0x7f0000000240)=0xe) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000300)={r8, 0x6}, &(0x7f0000000380)=0x8) close(r7) socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0xe, 0xb}, {0xfff1, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x8000}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x6}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m0.701675297s ago: executing program 0 (id=11199): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000040)=0x40000, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02ffffff8000000000000000000001"], 0xfdef) 1m0.259375044s ago: executing program 9 (id=11200): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x2458a}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000040) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="6000000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="00000000010000003000128009000100766c616e00000000200002800c0002001600000090ff000006000100fc0f00000600050088a8000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x60}}, 0x8000) 1m0.259108561s ago: executing program 0 (id=11201): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) fchdir(0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) r2 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x18d03e, 0x0) r4 = open(&(0x7f00000004c0)='./bus\x00', 0xc2802, 0x100) ftruncate(r4, 0x2008002) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r3, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f0000000240)=""/6, 0x6}], 0x1, &(0x7f0000000140), 0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x400001) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmmsg$alg(r1, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048b19e9b9ab33d3004a55520e5157a35c9fc9d79128a8bd08e1ac82a8ba3b31a262d524b97d8933916fa58cd0f218fb11a88597ab381d6b8867ef78dfdb807ed85f17c8e310651efeebcc37596427eaf287c5d6ceca6fe3e672104c64c471cc4eb057a6e74a7de0b008f4438673919779f887dd0b187a9b1be5fb8c3e0c3", 0xca}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80", 0x63}], 0x2, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000000c0)=""/7, 0x7}, {&(0x7f0000001580)=""/185, 0xb9}], 0x2}, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x28400) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000000)={0x53, 0xfffffffffffffffc, 0x6, 0xb4, @buffer={0x0, 0x0, 0x0}, &(0x7f00000002c0)="58fea682efe0", 0x0, 0x2, 0x10003, 0xfffffffd, 0x0}) 1m0.199317954s ago: executing program 3 (id=11202): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 59.997559401s ago: executing program 3 (id=11203): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x4}, 0x50) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x6, 0x8, 0x4, 0xfa11, 0xffffffff}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x587182, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x7, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8aca, 0x0, 0x0, 0x0, 0x12}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x3}]}, &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) close(r3) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000300), &(0x7f0000000340)=0x4) getpid() r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_ifreq(r4, 0x89f0, &(0x7f0000000040)={'nicvf0\x00', @ifru_names='wlan0\x00'}) syz_80211_join_ibss(&(0x7f0000000200)='wlan1\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r5, 0x1, 0x1, &(0x7f0000000380)=0xfffff272, 0x4) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xfe, 0x0, 0x0, 0xfffffff8, 0x3c, 0x0, 0x0, 0x0, 0x0, 0xff, 0x40, 0x0, 0x0, 0x480000, 0x0, 0x2}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000500)={"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"}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000600)={0x0, 0x80000001, 0x1000}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000001880)={{r2}, 0x0, 0x2, @unused=[0xe9, 0x8, 0x4, 0x200], @devid=r6}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, 0x4, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x400) 59.891630138s ago: executing program 9 (id=11204): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x1e) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1b) close(0x3) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) socket$netlink(0x10, 0x3, 0xa) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x1000002d, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) readv(r5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000014}, 0x8084) r6 = syz_open_dev$vim2m(&(0x7f0000000100), 0xa7e, 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000006800010003041000fdffff7f000762302b770000000000000c00020001000000150000000c00000000f7000000260000060003000122ee4ba35f4c60d35f69ef"], 0x38}, 0x1, 0x0, 0x0, 0x2404c05d}, 0x4000080) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) r8 = socket$tipc(0x1e, 0x7, 0x0) bind$tipc(r8, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000040)={0x8000042, 0x4, 0x3}, 0x10) pidfd_send_signal(r0, 0x1, &(0x7f0000000340)={0x835, 0x9, 0xffffffff}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0), 0x0) 59.864832682s ago: executing program 0 (id=11205): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = fanotify_init(0x202, 0x0) fanotify_mark(r0, 0x1, 0x4800003e, 0xffffffffffffffff, 0x0) r1 = dup2(r0, 0xffffffffffffffff) syz_usb_connect(0x6, 0x0, 0x0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="1003ae6977f1f0787de342df58a8fe1c"]}]}) r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0x6c2, 0x80) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000c40)) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000002000)={0x0, &(0x7f0000001f80)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00'}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x2b8, 0x24, 0x100, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x3, "208b7f0ee1ea2750baf97badd919b8dd"}}}, @qdisc_kind_options=@q_taprio={{0xb}, {0x44, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x80}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1000}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x6}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0xffff}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x5}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x8}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x4}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1ff}, @qdisc_kind_options=@q_fq_pie={{0xb}, {0x2c, 0x2, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x7}, @TCA_FQ_PIE_BETA={0x8, 0x6, 0xe}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0xfffff1ef}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x3}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8}]}}, @qdisc_kind_options=@q_atm={0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_STAB={0x184, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x0, 0x9, 0x1000, 0x0, 0x1, 0x7, 0x3}}, {0xa, 0x2, [0x3, 0x3ff, 0x0]}}, {{0x1c, 0x1, {0x4, 0x4, 0x9, 0x8, 0x2, 0x9, 0x5bac, 0x2}}, {0x8, 0x2, [0x80, 0x2]}}, {{0x1c, 0x1, {0xfa, 0xb9, 0x6, 0xfffffffe, 0x2, 0x9, 0xff, 0x9}}, {0x16, 0x2, [0x1, 0x7, 0x4d41, 0x326d, 0x2bc, 0x8, 0x6, 0x0, 0x1]}}, {{0x1c, 0x1, {0x4, 0x8, 0x2, 0xffff, 0x0, 0xffffffff, 0x80000001, 0x6}}, {0x10, 0x2, [0x3, 0x0, 0x4, 0x8, 0x8000, 0x4]}}, {{0x1c, 0x1, {0x1, 0x7, 0xf02d, 0xa, 0x1, 0x101, 0xfff, 0x2}}, {0x8, 0x2, [0x9, 0xa4c9]}}, {{0x1c, 0x1, {0x0, 0x1, 0x4, 0x5, 0x1, 0x9, 0x3, 0x5}}, {0xe, 0x2, [0x5dd, 0x5, 0x1bc4, 0x2, 0xadbd]}}, {{0x1c, 0x1, {0x2, 0xeb, 0x0, 0x20, 0x2, 0x8, 0x7fffffff, 0x5}}, {0xe, 0x2, [0x6, 0x5, 0x0, 0x0, 0xff1]}}, {{0x1c, 0x1, {0x1, 0x9, 0x1000, 0xffffffff, 0x2, 0x9, 0x7, 0x5}}, {0xe, 0x2, [0x1, 0x1c00, 0xf7d7, 0x7, 0x5]}}, {{0x1c, 0x1, {0x2, 0x4, 0x10, 0x9, 0x2, 0x7, 0x0, 0x6}}, {0x10, 0x2, [0x0, 0x1, 0x4, 0x5, 0x6, 0xd27]}}]}, @TCA_STAB={0x4c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0x10, 0x1, 0x101, 0x0, 0xff, 0x80000000, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0xd, 0x80, 0x3, 0x6, 0x2, 0x5, 0x4000, 0x2}}, {0x8, 0x2, [0x5, 0x1]}}]}]}, 0x2b8}}, 0x20000000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x4c8380) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) fsetxattr$trusted_overlay_upper(r6, &(0x7f0000000440), &(0x7f0000000e40)={0x0, 0xfb, 0x69, 0x2, 0xd, "03ba5e06f9da81554411edd914376063", "74bdb78a3022929ef2db6de94a26a6f0785618aa876c5f93d62cd2e37068e8909c824e23ea4c6558b16b6e3669be196d29a9ebd5c12decd1efd7a9629ba963051e455ad1e23b12c00fab4dbb0ceef1a69780c5b0"}, 0x69, 0x1) setsockopt$inet6_int(r8, 0x29, 0x4b, &(0x7f0000000400)=0x9, 0x4) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000b80)={0x0, 0x1, 0xe, 0xd, 0xb1, &(0x7f0000000780)="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"}) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r7, 0xc2604110, &(0x7f00000001c0)={0x0, [[0xffffffff, 0x0, 0xfffffff9, 0x8, 0x7, 0x6804, 0x0, 0xffffffff], [0xfffffffd, 0x20000ed, 0x1000, 0x2], [0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000]], '\x00', [{0xfffffffc, 0xfffffffe}, {}, {0x0, 0x1}, {0x9, 0x4}, {0x4, 0x1}, {}, {}, {0x0, 0x100}, {}, {0x0, 0x4}, {0x200, 0x2}], '\x00', 0x305}) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902120001000000000904"], 0x0) r9 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0xae00) ioctl$I2C_RDWR(r9, 0x707, &(0x7f0000000080)={&(0x7f00000002c0)=[{0x0, 0x5800, 0x4e, &(0x7f0000000100)="53ec6252b7148220a6adad7f309abdbdc2c189d44ebbb2e92251152103a2db41a47023614f4f4f37d1e80d9fa47c2943f25c60bad96ab61461536e230902ed29baf71b66c4d868e62a43b8caebae"}], 0x1}) sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x20, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x20}}, 0x20}}, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x3d) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) 0s ago: executing program 40 (id=11194): socket$inet_udp(0x2, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x800) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x2, 0x6}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$igmp(0x2, 0x3, 0x2) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e0000001000000000000000000000000ff020000000000000000000000000001000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000001d00000000000004d632000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000090000000000000001000000ffffffff0000000000000000010000800000000043050000000000000400000000000000ffffffffffffff7f000000000000000001000000000000000000000000000000000000002cbd70000035000002000000500000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060000000210466d385", @ANYBLOB="04"], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc4c85513, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4000, 0xffffffff, @empty}, {0xa, 0x0, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x800083}, r4}}, 0x48) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000002600)=ANY=[@ANYBLOB="2c0008006e9cd7256a3c7db20a006d8f8776f66ce0000001"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x10) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000000), 0x0, 0x480) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): 5985] ? __lock_acquire+0x6b5/0x2cf0 [ 1551.220096][ T5985] ? __pfx____sys_sendmsg+0x10/0x10 [ 1551.220147][ T5985] ? __fget_files+0x2a/0x420 [ 1551.220167][ T5985] ? __fget_files+0x3a0/0x420 [ 1551.220193][ T5985] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1551.220219][ T5985] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1551.220251][ T5985] ? __pfx_ksys_write+0x10/0x10 [ 1551.220283][ T5985] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1551.220303][ T5985] do_syscall_64+0x15f/0xf80 [ 1551.220324][ T5985] ? trace_irq_disable+0x3b/0x140 [ 1551.220350][ T5985] ? clear_bhb_loop+0x40/0x90 [ 1551.220373][ T5985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1551.220391][ T5985] RIP: 0033:0x7f7ff559cdd9 [ 1551.220408][ T5985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1551.220422][ T5985] RSP: 002b:00007f7ff6370028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1551.220441][ T5985] RAX: ffffffffffffffda RBX: 00007f7ff5815fa0 RCX: 00007f7ff559cdd9 [ 1551.220454][ T5985] RDX: 0000000000040054 RSI: 0000200000000540 RDI: 0000000000000004 [ 1551.220465][ T5985] RBP: 00007f7ff6370090 R08: 0000000000000000 R09: 0000000000000000 [ 1551.220476][ T5985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1551.220486][ T5985] R13: 00007f7ff5816038 R14: 00007f7ff5815fa0 R15: 00007f7ff593fa48 [ 1551.220514][ T5985] [ 1551.855413][ T5990] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10663'. [ 1552.126218][ T6001] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10668'. [ 1552.232085][ T6005] macvtap2: entered promiscuous mode [ 1552.253335][ T6005] macvtap2: entered allmulticast mode [ 1552.263827][ T6005] veth1_vlan: entered allmulticast mode [ 1552.281901][ T6005] team0: Device macvtap2 failed to register rx_handler [ 1552.307718][ T6005] veth1_vlan: left allmulticast mode [ 1552.372466][ T6010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1552.393860][ T6010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1552.870017][ T6022] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10674'. [ 1552.949900][ T6014] IPVS: length: 24 != 312 [ 1553.174435][ T6026] macvtap1: entered promiscuous mode [ 1553.187695][ T6026] macvtap1: entered allmulticast mode [ 1553.221934][ T6026] team0: Device macvtap1 failed to register rx_handler [ 1553.696556][ T6032] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10678'. [ 1553.735281][ T6034] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10679'. [ 1554.943406][ T6061] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10687'. [ 1554.962048][ T6063] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10689'. [ 1555.017198][ T5630] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 1555.167841][ T5630] usb 10-1: Using ep0 maxpacket: 16 [ 1555.188129][ T5630] usb 10-1: too many configurations: 129, using maximum allowed: 8 [ 1555.228335][ T5630] usb 10-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1555.240571][ T5630] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1555.263990][ T5630] usb 10-1: Product: syz [ 1555.279501][ T5630] usb 10-1: Manufacturer: syz [ 1555.297068][ T5630] usb 10-1: SerialNumber: syz [ 1555.332135][ T5630] r8152-cfgselector 10-1: Unknown version 0x0000 [ 1555.352444][ T5630] r8152-cfgselector 10-1: config 0 descriptor?? [ 1555.377088][ T1987] usb 9-1: new full-speed USB device number 35 using dummy_hcd [ 1555.531022][ T1987] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1555.550120][ T1987] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1555.580629][ T1987] usb 9-1: Product: syz [ 1555.593501][ T1987] usb 9-1: Manufacturer: syz [ 1555.616197][ T1987] usb 9-1: SerialNumber: syz [ 1555.659505][ T1987] usb 9-1: config 0 descriptor?? [ 1555.887405][ T6067] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10691'. [ 1555.939302][ T1987] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1556.782607][ T6084] snd_dummy snd_dummy.0: control 3:5:3:syz1:9 is already present [ 1556.870990][ T1987] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1556.902361][ T1987] usb 9-1: USB disconnect, device number 35 [ 1557.087092][ T1972] usb 1-1: new full-speed USB device number 122 using dummy_hcd [ 1557.237358][ T1972] usb 1-1: device descriptor read/64, error -71 [ 1557.489250][ T1972] usb 1-1: new full-speed USB device number 123 using dummy_hcd [ 1557.525006][ T6093] macvtap1: entered promiscuous mode [ 1557.553741][ T6093] macvtap1: entered allmulticast mode [ 1557.583157][ T6093] veth1_vlan: entered allmulticast mode [ 1557.599038][ T6093] team0: Device macvtap1 failed to register rx_handler [ 1557.615185][ T6093] veth1_vlan: left allmulticast mode [ 1557.627200][ T1972] usb 1-1: device descriptor read/64, error -71 [ 1557.633973][ T6078] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10690'. [ 1557.737397][ T1972] usb usb1-port1: attempt power cycle [ 1557.788974][ T6078] hsr_slave_0: left promiscuous mode [ 1557.815068][ T5630] r8152-cfgselector 10-1: Unknown version 0x0000 [ 1557.839217][ T5630] r8152-cfgselector 10-1: No union descriptors [ 1557.872148][ T6078] hsr_slave_1: left promiscuous mode [ 1557.889877][ T5630] r8152-cfgselector 10-1: USB disconnect, device number 28 [ 1558.107886][ T1972] usb 1-1: new full-speed USB device number 124 using dummy_hcd [ 1558.159917][ T1972] usb 1-1: device descriptor read/8, error -71 [ 1558.217941][ T6097] macvtap2: entered promiscuous mode [ 1558.223350][ T6097] macvtap2: entered allmulticast mode [ 1558.275678][ T6103] bond2: entered promiscuous mode [ 1558.325476][ T6108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1558.385098][ T6108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1558.412968][ T6111] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10703'. [ 1558.427086][ T1972] usb 1-1: new full-speed USB device number 125 using dummy_hcd [ 1558.434919][ T6111] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10703'. [ 1558.457862][ T1972] usb 1-1: device descriptor read/8, error -71 [ 1558.567843][ T1972] usb usb1-port1: unable to enumerate USB device [ 1558.577971][ T6113] loop5: detected capacity change from 0 to 7 [ 1558.601228][ T6113] Dev loop5: unable to read RDB block 7 [ 1558.607196][ T6113] loop5: unable to read partition table [ 1558.613589][ T6113] loop5: partition table beyond EOD, truncated [ 1558.625339][ T6113] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1558.682197][ T6120] loop8: detected capacity change from 0 to 8 [ 1558.692257][ T6120] Dev loop8: unable to read RDB block 8 [ 1558.705356][ T6120] loop8: unable to read partition table [ 1558.721248][ T6120] loop8: partition table beyond EOD, truncated [ 1558.731202][ T6120] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1558.863216][ T6129] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10709'. [ 1558.941230][ T6135] bond3: (slave bond_slave_1): Device is not our slave [ 1558.950265][ T6135] bond3: option active_slave: invalid value (bond_slave_1) [ 1558.958989][ T6135] bond3 (unregistering): Released all slaves [ 1559.108208][ T2183] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 1559.139495][T27657] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1559.267267][ T2183] usb 10-1: Using ep0 maxpacket: 32 [ 1559.275765][ T2183] usb 10-1: config 0 has an invalid interface number: 188 but max is 0 [ 1559.286360][T27657] usb 2-1: device descriptor read/64, error -71 [ 1559.292966][ T2183] usb 10-1: config 0 has no interface number 0 [ 1559.302443][ T2183] usb 10-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1559.315730][ T2183] usb 10-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1559.331842][ T2183] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1559.344369][ T2183] usb 10-1: Product: syz [ 1559.351419][ T2183] usb 10-1: Manufacturer: syz [ 1559.363944][ T2183] usb 10-1: SerialNumber: syz [ 1559.373943][ T2183] usb 10-1: config 0 descriptor?? [ 1559.386043][ T6132] raw-gadget.3 gadget.9: fail, usb_ep_enable returned -22 [ 1559.547203][T27657] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 1559.645118][ T6132] raw-gadget.3 gadget.9: fail, usb_ep_enable returned -22 [ 1559.697107][T27657] usb 2-1: device descriptor read/64, error -71 [ 1559.810630][T27657] usb usb2-port1: attempt power cycle [ 1559.868832][ T6145] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10715'. [ 1559.897129][ T6145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10715'. [ 1559.965927][ T6149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10717'. [ 1559.977390][ T6149] netlink: 'syz.0.10717': attribute type 1 has an invalid length. [ 1559.986918][ T6149] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10717'. [ 1560.046407][ T6152] netlink: 'syz.8.10716': attribute type 13 has an invalid length. [ 1560.055912][ T6152] netlink: 'syz.8.10716': attribute type 27 has an invalid length. [ 1560.122529][ T2183] asix 10-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1560.159674][ T2183] asix 10-1:0.188: probe with driver asix failed with error -71 [ 1560.170930][T27657] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1560.194583][ T2183] usb 10-1: USB disconnect, device number 29 [ 1560.205295][T27657] usb 2-1: device descriptor read/8, error -71 [ 1560.277500][ T8901] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 1560.316897][ T6159] FAULT_INJECTION: forcing a failure. [ 1560.316897][ T6159] name failslab, interval 1, probability 0, space 0, times 0 [ 1560.349458][ T6159] CPU: 0 UID: 0 PID: 6159 Comm: syz.9.10719 Tainted: G L syzkaller #0 PREEMPT(full) [ 1560.349479][ T6159] Tainted: [L]=SOFTLOCKUP [ 1560.349483][ T6159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1560.349490][ T6159] Call Trace: [ 1560.349495][ T6159] [ 1560.349501][ T6159] dump_stack_lvl+0xe8/0x150 [ 1560.349518][ T6159] should_fail_ex+0x412/0x560 [ 1560.349535][ T6159] should_failslab+0xa8/0x100 [ 1560.349552][ T6159] __kmalloc_noprof+0xe8/0x760 [ 1560.349566][ T6159] ? __pfx_nft_data_init+0x10/0x10 [ 1560.349582][ T6159] ? nft_set_elem_init+0xa8/0x7e0 [ 1560.349593][ T6159] ? nf_msecs_to_jiffies64+0xfc/0x170 [ 1560.349607][ T6159] nft_set_elem_init+0xa8/0x7e0 [ 1560.349623][ T6159] nf_tables_newsetelem+0x22f3/0x4340 [ 1560.349635][ T6159] ? is_bpf_text_address+0x26/0x2b0 [ 1560.349665][ T6159] ? __pfx_nf_tables_newsetelem+0x10/0x10 [ 1560.349676][ T6159] ? stack_depot_save_flags+0x33/0x810 [ 1560.349694][ T6159] ? nla_validate_array+0xfc/0x260 [ 1560.349726][ T6159] ? __pfx___nla_validate_parse+0x10/0x10 [ 1560.349755][ T6159] ? nfnetlink_rcv+0x8bc/0x27b0 [ 1560.349783][ T6159] ? nfnl_pernet+0x23/0x240 [ 1560.349798][ T6159] ? nfnl_pernet+0x23/0x240 [ 1560.349814][ T6159] ? __nla_parse+0x40/0x60 [ 1560.349830][ T6159] nfnetlink_rcv+0x123e/0x27b0 [ 1560.349859][ T6159] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1560.349878][ T6159] ? ref_tracker_free+0x693/0x840 [ 1560.349905][ T6159] ? __netlink_deliver_tap+0x807/0x850 [ 1560.349923][ T6159] ? netlink_deliver_tap+0x2e/0x1b0 [ 1560.349936][ T6159] ? netlink_deliver_tap+0x2e/0x1b0 [ 1560.349951][ T6159] netlink_unicast+0x75c/0x8e0 [ 1560.349968][ T6159] netlink_sendmsg+0x813/0xb40 [ 1560.349986][ T6159] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1560.350000][ T6159] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1560.350014][ T6159] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1560.350031][ T6159] ____sys_sendmsg+0x972/0x9f0 [ 1560.350045][ T6159] ? __might_fault+0xaf/0x130 [ 1560.350061][ T6159] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1560.350079][ T6159] ? import_iovec+0x73/0xa0 [ 1560.350096][ T6159] ___sys_sendmsg+0x2a5/0x360 [ 1560.350125][ T6159] ? __lock_acquire+0x6b5/0x2cf0 [ 1560.350149][ T6159] ? __pfx____sys_sendmsg+0x10/0x10 [ 1560.350186][ T6159] ? __fget_files+0x2a/0x420 [ 1560.350197][ T6159] ? __fget_files+0x3a0/0x420 [ 1560.350214][ T6159] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1560.350229][ T6159] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1560.350247][ T6159] ? __pfx_ksys_write+0x10/0x10 [ 1560.350266][ T6159] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1560.350276][ T6159] do_syscall_64+0x15f/0xf80 [ 1560.350289][ T6159] ? trace_irq_disable+0x3b/0x140 [ 1560.350304][ T6159] ? clear_bhb_loop+0x40/0x90 [ 1560.350316][ T6159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1560.350327][ T6159] RIP: 0033:0x7fa913d9cdd9 [ 1560.350337][ T6159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1560.350346][ T6159] RSP: 002b:00007fa914c6e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1560.350358][ T6159] RAX: ffffffffffffffda RBX: 00007fa914015fa0 RCX: 00007fa913d9cdd9 [ 1560.350367][ T6159] RDX: 0000000000000000 RSI: 0000200000009b40 RDI: 0000000000000004 [ 1560.350374][ T6159] RBP: 00007fa914c6e090 R08: 0000000000000000 R09: 0000000000000000 [ 1560.350381][ T6159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1560.350387][ T6159] R13: 00007fa914016038 R14: 00007fa914015fa0 R15: 00007fa91413fa48 [ 1560.350402][ T6159] [ 1560.767113][T27657] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1560.802528][ T8901] usb 1-1: Using ep0 maxpacket: 16 [ 1560.809578][T27657] usb 2-1: device descriptor read/8, error -71 [ 1560.817894][ T8901] usb 1-1: config 1 has an invalid interface number: 58 but max is 0 [ 1560.826080][ T8901] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1560.836423][ T8901] usb 1-1: config 1 has no interface number 0 [ 1560.908176][ T8901] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0126, bcdDevice=bd.e4 [ 1560.920355][T27657] usb usb2-port1: unable to enumerate USB device [ 1560.927493][ T8901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1560.935638][ T8901] usb 1-1: Product: syz [ 1560.939863][ T8901] usb 1-1: Manufacturer: syz [ 1560.944479][ T8901] usb 1-1: SerialNumber: syz [ 1561.091435][ T6163] loop8: detected capacity change from 0 to 8 [ 1561.099835][ T6163] Dev loop8: unable to read RDB block 8 [ 1561.105445][ T6163] loop8: unable to read partition table [ 1561.111887][ T6163] loop8: partition table beyond EOD, truncated [ 1561.118411][ T6163] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1561.201416][ T6149] syzkaller0: entered promiscuous mode [ 1561.220732][ T6149] syzkaller0: entered allmulticast mode [ 1561.383877][ T6170] loop8: detected capacity change from 0 to 1 [ 1561.400590][ T6170] Dev loop8: unable to read RDB block 1 [ 1561.419099][ T6170] loop8: unable to read partition table [ 1561.438539][ T6170] loop8: partition table beyond EOD, truncated [ 1561.444952][ T6170] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1561.534542][ T8901] kvaser_usb 1-1:1.58: error -ENODEV: Cannot get usb endpoint(s) [ 1561.569332][ T8901] usb 1-1: USB disconnect, device number 126 [ 1561.588849][ T6175] macvtap1: entered promiscuous mode [ 1561.603839][ T6175] macvtap1: entered allmulticast mode [ 1561.711048][ T6182] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10729'. [ 1561.906474][ T6186] netlink: 20 bytes leftover after parsing attributes in process `syz.8.10730'. [ 1561.927496][ T8901] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 1561.971399][ T6190] FAULT_INJECTION: forcing a failure. [ 1561.971399][ T6190] name failslab, interval 1, probability 0, space 0, times 0 [ 1561.988535][ T6190] CPU: 1 UID: 0 PID: 6190 Comm: syz.1.10732 Tainted: G L syzkaller #0 PREEMPT(full) [ 1561.988567][ T6190] Tainted: [L]=SOFTLOCKUP [ 1561.988574][ T6190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1561.988585][ T6190] Call Trace: [ 1561.988593][ T6190] [ 1561.988601][ T6190] dump_stack_lvl+0xe8/0x150 [ 1561.988627][ T6190] should_fail_ex+0x412/0x560 [ 1561.988655][ T6190] should_failslab+0xa8/0x100 [ 1561.988684][ T6190] __kmalloc_noprof+0xe8/0x760 [ 1561.988708][ T6190] ? __pfx_nft_data_init+0x10/0x10 [ 1561.988734][ T6190] ? nft_set_elem_init+0xa8/0x7e0 [ 1561.988756][ T6190] ? nf_msecs_to_jiffies64+0xfc/0x170 [ 1561.988781][ T6190] nft_set_elem_init+0xa8/0x7e0 [ 1561.988812][ T6190] nf_tables_newsetelem+0x22f3/0x4340 [ 1561.988833][ T6190] ? is_bpf_text_address+0x26/0x2b0 [ 1561.988888][ T6190] ? __pfx_nf_tables_newsetelem+0x10/0x10 [ 1561.988907][ T6190] ? stack_depot_save_flags+0x33/0x810 [ 1561.988937][ T6190] ? nla_validate_array+0xfc/0x260 [ 1561.988981][ T6190] ? __pfx___nla_validate_parse+0x10/0x10 [ 1561.989009][ T6190] ? nfnetlink_rcv+0x8bc/0x27b0 [ 1561.989038][ T6190] ? nfnl_pernet+0x23/0x240 [ 1561.989061][ T6190] ? nfnl_pernet+0x23/0x240 [ 1561.989091][ T6190] ? __nla_parse+0x40/0x60 [ 1561.989120][ T6190] nfnetlink_rcv+0x123e/0x27b0 [ 1561.989175][ T6190] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1561.989213][ T6190] ? ref_tracker_free+0x693/0x840 [ 1561.989272][ T6190] ? __netlink_deliver_tap+0x807/0x850 [ 1561.989304][ T6190] ? netlink_deliver_tap+0x2e/0x1b0 [ 1561.989327][ T6190] ? netlink_deliver_tap+0x2e/0x1b0 [ 1561.989355][ T6190] netlink_unicast+0x75c/0x8e0 [ 1561.989387][ T6190] netlink_sendmsg+0x813/0xb40 [ 1561.989420][ T6190] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1561.989447][ T6190] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1561.989472][ T6190] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1561.989500][ T6190] ____sys_sendmsg+0x972/0x9f0 [ 1561.989524][ T6190] ? __might_fault+0xaf/0x130 [ 1561.989553][ T6190] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1561.989586][ T6190] ? import_iovec+0x73/0xa0 [ 1561.989613][ T6190] ___sys_sendmsg+0x2a5/0x360 [ 1561.989637][ T6190] ? __lock_acquire+0x6b5/0x2cf0 [ 1561.989661][ T6190] ? __pfx____sys_sendmsg+0x10/0x10 [ 1561.989719][ T6190] ? __fget_files+0x2a/0x420 [ 1561.989740][ T6190] ? __fget_files+0x3a0/0x420 [ 1561.989771][ T6190] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1561.989799][ T6190] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1561.989833][ T6190] ? __pfx_ksys_write+0x10/0x10 [ 1561.989866][ T6190] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1561.989887][ T6190] do_syscall_64+0x15f/0xf80 [ 1561.989909][ T6190] ? trace_irq_disable+0x3b/0x140 [ 1561.989935][ T6190] ? clear_bhb_loop+0x40/0x90 [ 1561.989957][ T6190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1561.989976][ T6190] RIP: 0033:0x7f6bb199cdd9 [ 1561.989992][ T6190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1561.990008][ T6190] RSP: 002b:00007f6bb279b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1561.990031][ T6190] RAX: ffffffffffffffda RBX: 00007f6bb1c15fa0 RCX: 00007f6bb199cdd9 [ 1561.990044][ T6190] RDX: 0000000000000000 RSI: 0000200000009b40 RDI: 0000000000000004 [ 1561.990056][ T6190] RBP: 00007f6bb279b090 R08: 0000000000000000 R09: 0000000000000000 [ 1561.990068][ T6190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1561.990080][ T6190] R13: 00007f6bb1c16038 R14: 00007f6bb1c15fa0 R15: 00007f6bb1d3fa48 [ 1561.990111][ T6190] [ 1562.410482][ T6193] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10733'. [ 1562.419795][ T8901] usb 10-1: Using ep0 maxpacket: 32 [ 1562.429032][ T8901] usb 10-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1562.460526][ T8901] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1562.487131][ T8901] usb 10-1: Product: syz [ 1562.509139][ T8901] usb 10-1: Manufacturer: syz [ 1562.528879][ T8901] usb 10-1: SerialNumber: syz [ 1562.556884][ T8901] usb 10-1: config 0 descriptor?? [ 1562.571997][ T8901] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1562.587647][ T6200] loop8: detected capacity change from 0 to 8 [ 1562.594769][ T6200] Dev loop8: unable to read RDB block 8 [ 1562.600644][ T6200] loop8: unable to read partition table [ 1562.606669][ T6200] loop8: partition table beyond EOD, truncated [ 1562.613548][ T6200] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1562.692947][ T6201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1562.704601][ T6201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1563.089037][ T8901] gspca_ov534_9: reg_w failed -71 [ 1563.130397][ T6225] bond5: entered promiscuous mode [ 1563.246588][ T6230] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1563.257234][ T5630] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1563.398045][ T5630] usb 2-1: device descriptor read/64, error -71 [ 1563.452489][ T8901] gspca_ov534_9: Unknown sensor 0000 [ 1563.452587][ T8901] ov534_9 10-1:0.0: probe with driver ov534_9 failed with error -22 [ 1563.493303][ T8901] usb 10-1: USB disconnect, device number 30 [ 1563.647985][ T5630] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1563.728464][ T6251] trusted_key: encrypted_key: insufficient parameters specified [ 1563.752197][ T6252] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1563.817275][ T5630] usb 2-1: device descriptor read/64, error -71 [ 1563.928332][ T5630] usb usb2-port1: attempt power cycle [ 1564.186900][ T6261] __nla_validate_parse: 4 callbacks suppressed [ 1564.193727][ T6261] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10756'. [ 1564.203959][ T6261] netlink: 20 bytes leftover after parsing attributes in process `syz.8.10756'. [ 1564.380981][ T5630] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1564.409846][ T5630] usb 2-1: device descriptor read/8, error -71 [ 1564.647079][ T5630] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1564.668102][ T5630] usb 2-1: device descriptor read/8, error -71 [ 1564.777359][ T5630] usb usb2-port1: unable to enumerate USB device [ 1564.797106][ T5692] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 1564.957434][ T5692] usb 1-1: Using ep0 maxpacket: 8 [ 1564.968463][ T5692] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 1564.985338][ T5692] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1565.006861][ T5692] usb 1-1: config 0 has no interface number 0 [ 1565.023509][ T5692] usb 1-1: config 0 interface 52 has no altsetting 0 [ 1565.031198][ T5692] usb 1-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 1565.033055][ T6282] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10762'. [ 1565.040344][ T5692] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1565.049679][ T5692] usb 1-1: config 0 descriptor?? [ 1565.457044][ T1972] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 1565.475523][ T6274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1565.487561][ T6274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1565.555010][ T8901] usb 1-1: USB disconnect, device number 127 [ 1565.624492][ T1972] usb 9-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1565.652777][ T1972] usb 9-1: config 2 has 1 interface, different from the descriptor's value: 3 [ 1565.676818][ T1972] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=bd.95 [ 1565.680726][ T6295] tipc: Started in network mode [ 1565.694698][ T6295] tipc: Node identity , cluster identity 4711 [ 1565.697104][ T1972] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1565.701597][ T6295] tipc: Failed to obtain node identity [ 1565.710440][ T1972] usb 9-1: Product: syz [ 1565.715209][ T6295] tipc: Enabling of bearer rejected, failed to enable media [ 1565.719146][ T1972] usb 9-1: Manufacturer: syz [ 1565.741521][ T1972] usb 9-1: SerialNumber: syz [ 1565.764135][ T6296] syzkaller0: entered promiscuous mode [ 1565.769765][ T6296] syzkaller0: entered allmulticast mode [ 1565.942673][ T6304] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10768'. [ 1565.980968][ T1972] usb 9-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1566.005108][ T1972] dvb_usb_af9015 9-1:2.0: probe with driver dvb_usb_af9015 failed with error -22 [ 1566.028271][ T1972] usb 9-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1566.061656][ T1972] dvb_usb_af9035 9-1:2.0: probe with driver dvb_usb_af9035 failed with error -22 [ 1566.104495][ T1972] usb 9-1: USB disconnect, device number 36 [ 1566.993658][ T6328] netlink: 28 bytes leftover after parsing attributes in process `syz.8.10776'. [ 1567.587072][T27657] usb 10-1: new full-speed USB device number 31 using dummy_hcd [ 1567.771342][T27657] usb 10-1: device descriptor read/64, error -71 [ 1568.039057][T27657] usb 10-1: new full-speed USB device number 32 using dummy_hcd [ 1568.217760][T27657] usb 10-1: device descriptor read/64, error -71 [ 1568.327625][T27657] usb usb10-port1: attempt power cycle [ 1568.669718][T27657] usb 10-1: new full-speed USB device number 33 using dummy_hcd [ 1568.707968][T27657] usb 10-1: device descriptor read/8, error -71 [ 1568.987409][T27657] usb 10-1: new full-speed USB device number 34 using dummy_hcd [ 1569.024846][T27657] usb 10-1: device descriptor read/8, error -71 [ 1569.167731][T27657] usb usb10-port1: unable to enumerate USB device [ 1569.326025][ T6335] netlink: 'syz.3.10778': attribute type 21 has an invalid length. [ 1569.334271][ T6335] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10778'. [ 1570.272057][ T6337] loop8: detected capacity change from 0 to 1 [ 1570.301316][ T6337] Dev loop8: unable to read RDB block 1 [ 1570.307020][ T6337] loop8: unable to read partition table [ 1570.333556][ T6337] loop8: partition table beyond EOD, truncated [ 1570.340959][ T6337] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1570.658183][T27657] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 1570.797133][T27657] usb 10-1: device descriptor read/64, error -71 [ 1571.063742][T27657] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 1571.200913][T27657] usb 10-1: device descriptor read/64, error -71 [ 1571.332903][T27657] usb usb10-port1: attempt power cycle [ 1571.710680][T27657] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 1571.755596][T27657] usb 10-1: device descriptor read/8, error -71 [ 1572.008875][T27657] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 1572.053909][T27657] usb 10-1: device descriptor read/8, error -71 [ 1572.172089][T27657] usb usb10-port1: unable to enumerate USB device [ 1572.553082][ T6335] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 1572.635963][ T6341] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10781'. [ 1572.657737][ T6341] netlink: 56 bytes leftover after parsing attributes in process `syz.8.10781'. [ 1572.776577][ T6347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10782'. [ 1572.992797][ T6358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1573.020272][ T6358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1573.114431][ T6358] kvm: pic: non byte write [ 1573.892084][ T6380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1573.916609][ T6380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1574.007066][ T5630] usb 9-1: new low-speed USB device number 37 using dummy_hcd [ 1574.165479][ T6385] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10797'. [ 1574.179112][ T5630] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 1574.187544][ T5630] usb 9-1: config 0 has no interface number 0 [ 1574.197209][ T5630] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1574.231066][ T5630] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1574.262217][ T5630] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1574.306642][ T5630] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1574.333152][ T5630] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1574.362942][ T5630] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1574.394639][ T5630] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1574.414105][ T5630] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1574.445634][ T5630] usb 9-1: config 0 descriptor?? [ 1574.496026][ T6378] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1574.507508][ T6378] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1574.553099][ T5630] ldusb 9-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 1574.578716][ T6391] fuse: Unknown parameter 'd' [ 1574.601808][ T6392] Cannot find add_set index 0 as target [ 1574.736338][ T6378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1574.758426][ T6378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1574.777018][ T6395] tipc: Enabling of bearer rejected, failed to enable media [ 1574.975767][ T6398] loop5: detected capacity change from 0 to 7 [ 1575.002159][ T6398] Dev loop5: unable to read RDB block 7 [ 1575.003458][ T6400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1575.011759][ T6398] loop5: unable to read partition table [ 1575.023588][ T6398] loop5: partition table beyond EOD, truncated [ 1575.031443][ T6400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1575.032582][ T6398] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1575.092303][ T6400] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10802'. [ 1575.125324][ T6400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1575.142833][ T6400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1575.275810][ T29] audit: type=1326 audit(1778121151.938:8816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6403 comm="syz.9.10804" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa913d9cdd9 code=0x0 [ 1575.371629][ T6411] loop8: detected capacity change from 0 to 8 [ 1575.378703][ T6411] Dev loop8: unable to read RDB block 8 [ 1575.384411][ T6411] loop8: unable to read partition table [ 1575.399970][ T6411] loop8: partition table beyond EOD, truncated [ 1575.412883][ T6411] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1575.417192][ T5630] usb 9-1: USB disconnect, device number 37 [ 1575.461725][ T5630] ldusb 9-1:0.55: LD USB Device #1 now disconnected [ 1575.529956][ T6409] bond7: option ad_user_port_key: invalid value (52735) [ 1575.537522][ T6409] bond7: option ad_user_port_key: allowed values 0 - 1023 [ 1575.551402][ T6409] bond7 (unregistering): Released all slaves [ 1575.603207][ T6421] loop8: detected capacity change from 0 to 1 [ 1575.610479][ T6421] Dev loop8: unable to read RDB block 1 [ 1575.622013][ T6421] loop8: unable to read partition table [ 1575.641070][ T6421] loop8: partition table beyond EOD, truncated [ 1575.648939][ T6421] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1575.674368][ T6418] bond3: entered promiscuous mode [ 1575.733818][ T6428] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10811'. [ 1575.844811][ T6433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1575.868534][ T6433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1575.914650][ T6433] netlink: 76 bytes leftover after parsing attributes in process `syz.3.10810'. [ 1575.931886][ T6433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1575.944908][ T6433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1575.956872][ T6439] netlink: 20 bytes leftover after parsing attributes in process `syz.8.10814'. [ 1575.973343][ T6437] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10812'. [ 1576.117053][T27657] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1576.282861][T27657] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1576.303741][T27657] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1576.316219][T27657] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1576.329967][T27657] usb 2-1: Product: syz [ 1576.334273][T27657] usb 2-1: Manufacturer: syz [ 1576.339222][T27657] usb 2-1: SerialNumber: syz [ 1576.353036][T27657] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1576.553815][ T6436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1576.575717][ T6436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1576.805293][T27657] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1576.848754][T27657] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 1576.879332][T27657] usb 2-1: media controller created [ 1576.919348][ T6457] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10818'. [ 1576.932537][T27657] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1577.371047][T27657] usb 2-1: USB disconnect, device number 118 [ 1577.449977][ T2183] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 1577.598076][ T2183] usb 10-1: device descriptor read/64, error -71 [ 1577.727030][T27657] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1577.837217][ T1987] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 1577.846428][ T5692] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1577.847141][ T2183] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 1577.898326][T27657] usb 2-1: too many configurations: 71, using maximum allowed: 8 [ 1577.921308][T27657] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1577.944961][T27657] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1577.961297][T27657] usb 2-1: Product: syz [ 1577.970470][T27657] usb 2-1: Manufacturer: syz [ 1577.980284][T27657] usb 2-1: SerialNumber: syz [ 1578.001786][T27657] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1578.009948][ T5692] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1578.024416][ T5692] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1578.025393][ T2183] usb 10-1: device descriptor read/64, error -71 [ 1578.035803][ T1987] usb 9-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 1578.051642][ T5692] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1578.065771][ T1987] usb 9-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 1578.081425][ T5692] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1578.099575][ T8901] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1578.099943][ T1987] usb 9-1: Product: syz [ 1578.114337][ T5692] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1578.132865][ T5692] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1578.143054][ T1987] usb 9-1: config 0 descriptor?? [ 1578.148144][ T5692] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1578.156566][ T5692] usb 1-1: Product: syz [ 1578.161380][ T5692] usb 1-1: Manufacturer: syz [ 1578.171833][ T1987] ftdi_sio 9-1:0.0: FTDI USB Serial Device converter detected [ 1578.183916][ T1987] usb 9-1: Detected FT232H [ 1578.194045][ T5692] cdc_wdm 1-1:1.0: skipping garbage [ 1578.198225][ T2183] usb usb10-port1: attempt power cycle [ 1578.199476][ T5692] cdc_wdm 1-1:1.0: skipping garbage [ 1578.219401][ T5692] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device [ 1578.225485][ T5692] cdc_wdm 1-1:1.0: Unknown control protocol [ 1578.306887][ T5692] usb 2-1: USB disconnect, device number 119 [ 1578.367822][ T6479] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7) [ 1578.374377][ T6479] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1578.412033][ T6479] vhci_hcd vhci_hcd.0: Device attached [ 1578.432208][ T6493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1578.460289][ T6493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1578.471758][ T6487] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 1578.487662][ T1028] vhci_hcd vhci_hcd.8: stop threads [ 1578.495032][ T6492] netlink: 44 bytes leftover after parsing attributes in process `syz.3.10829'. [ 1578.504259][ T1028] vhci_hcd vhci_hcd.8: release socket [ 1578.513402][ T1028] vhci_hcd vhci_hcd.8: disconnect device [ 1578.539657][ T1987] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1578.549344][ T1987] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1578.567065][ T2183] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 1578.588707][ T2183] usb 10-1: device descriptor read/8, error -71 [ 1578.602628][ T6499] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10831'. [ 1578.612471][ T1987] ftdi_sio 9-1:0.0: GPIO initialisation failed: -71 [ 1578.631216][ T1987] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1578.663332][ T1987] usb 9-1: USB disconnect, device number 38 [ 1578.682130][ T6500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1578.691027][ T1987] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1578.702193][ T1987] ftdi_sio 9-1:0.0: device disconnected [ 1578.711203][ T6500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1578.867743][ T2183] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 1578.897680][ T2183] usb 10-1: device descriptor read/8, error -71 [ 1579.033746][ T2183] usb usb10-port1: unable to enumerate USB device [ 1579.208899][ T8901] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1579.218476][ T8901] ath9k_htc: Failed to initialize the device [ 1579.235370][ T5692] usb 2-1: ath9k_htc: USB layer deinitialized [ 1579.797523][ T8901] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 1579.957074][ T8901] usb 9-1: Using ep0 maxpacket: 16 [ 1579.965831][ T8901] usb 9-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1579.975378][ T8901] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1579.983585][ T8901] usb 9-1: Product: syz [ 1579.987920][ T8901] usb 9-1: Manufacturer: syz [ 1579.992650][ T8901] usb 9-1: SerialNumber: syz [ 1580.000468][ T8901] usb 9-1: config 0 descriptor?? [ 1580.342912][ T6520] FAULT_INJECTION: forcing a failure. [ 1580.342912][ T6520] name failslab, interval 1, probability 0, space 0, times 0 [ 1580.367632][ T6520] CPU: 1 UID: 0 PID: 6520 Comm: syz.1.10838 Tainted: G L syzkaller #0 PREEMPT(full) [ 1580.367664][ T6520] Tainted: [L]=SOFTLOCKUP [ 1580.367671][ T6520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1580.367682][ T6520] Call Trace: [ 1580.367690][ T6520] [ 1580.367698][ T6520] dump_stack_lvl+0xe8/0x150 [ 1580.367724][ T6520] should_fail_ex+0x412/0x560 [ 1580.367753][ T6520] should_failslab+0xa8/0x100 [ 1580.367780][ T6520] __kmalloc_cache_noprof+0x88/0x660 [ 1580.367804][ T6520] ? __sctp_v6_cmp_addr+0x1dc/0x510 [ 1580.367826][ T6520] ? sctp_v6_cmp_addr+0x15/0xd0 [ 1580.367848][ T6520] ? sctp_add_bind_addr+0x8c/0x370 [ 1580.367876][ T6520] sctp_add_bind_addr+0x8c/0x370 [ 1580.367901][ T6520] sctp_copy_local_addr_list+0x314/0x4f0 [ 1580.367928][ T6520] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1580.367959][ T6520] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1580.367985][ T6520] ? sctp_v6_is_any+0x64/0x80 [ 1580.368010][ T6520] ? sctp_copy_one_addr+0x93/0x360 [ 1580.368037][ T6520] sctp_bind_addr_copy+0xb3/0x3c0 [ 1580.368061][ T6520] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1580.368086][ T6520] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1580.368108][ T6520] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1580.368133][ T6520] ? __local_bh_enable_ip+0xd0/0x130 [ 1580.368151][ T6520] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1580.368176][ T6520] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1580.368197][ T6520] sctp_sendmsg+0x1528/0x2c10 [ 1580.368223][ T6520] ? unwind_next_frame+0xa6/0x2550 [ 1580.368262][ T6520] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1580.368292][ T6520] ? aa_sk_perm+0x6d5/0x900 [ 1580.368322][ T6520] ? __pfx_aa_sk_perm+0x10/0x10 [ 1580.368347][ T6520] ? sock_rps_record_flow+0x19/0x350 [ 1580.368374][ T6520] ? inet_sendmsg+0x2f4/0x370 [ 1580.368402][ T6520] ____sys_sendmsg+0x80a/0x9f0 [ 1580.368432][ T6520] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1580.368464][ T6520] ? import_iovec+0x73/0xa0 [ 1580.368492][ T6520] ___sys_sendmsg+0x2a5/0x360 [ 1580.368513][ T6520] ? __lock_acquire+0x6b5/0x2cf0 [ 1580.368535][ T6520] ? __pfx____sys_sendmsg+0x10/0x10 [ 1580.368590][ T6520] ? __fget_files+0x2a/0x420 [ 1580.368611][ T6520] ? __fget_files+0x3a0/0x420 [ 1580.368641][ T6520] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1580.368668][ T6520] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1580.368701][ T6520] ? __pfx_ksys_write+0x10/0x10 [ 1580.368733][ T6520] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1580.368753][ T6520] do_syscall_64+0x15f/0xf80 [ 1580.368775][ T6520] ? trace_irq_disable+0x3b/0x140 [ 1580.368800][ T6520] ? clear_bhb_loop+0x40/0x90 [ 1580.368821][ T6520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1580.368838][ T6520] RIP: 0033:0x7f6bb199cdd9 [ 1580.368855][ T6520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1580.368870][ T6520] RSP: 002b:00007f6bb279b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1580.368889][ T6520] RAX: ffffffffffffffda RBX: 00007f6bb1c15fa0 RCX: 00007f6bb199cdd9 [ 1580.368901][ T6520] RDX: 0000000000040054 RSI: 0000200000000540 RDI: 0000000000000004 [ 1580.368911][ T6520] RBP: 00007f6bb279b090 R08: 0000000000000000 R09: 0000000000000000 [ 1580.368919][ T6520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1580.368928][ T6520] R13: 00007f6bb1c16038 R14: 00007f6bb1c15fa0 R15: 00007f6bb1d3fa48 [ 1580.368964][ T6520] [ 1580.729278][ T6525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1580.738200][ T6525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1580.745066][ T8901] dvb_usb_dtv5100 9-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 1580.757829][ T6509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1580.778915][ T2183] usb 1-1: USB disconnect, device number 2 [ 1580.834806][ T6509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1580.878190][ T5692] usb 9-1: USB disconnect, device number 39 [ 1580.984235][ T6537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10845'. [ 1580.990242][ T6530] bond5: (slave bond_slave_1): Device is not our slave [ 1580.994508][ T6537] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10845'. [ 1581.010793][ T6530] bond5: option active_slave: invalid value (bond_slave_1) [ 1581.032477][ T6530] bond5 (unregistering): Released all slaves [ 1581.218574][ T5630] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 1581.327673][ T6552] IPVS: Error joining to the multicast group [ 1581.347539][ T6552] IPVS: Error joining to the multicast group [ 1581.358373][ T6552] IPVS: Error joining to the multicast group [ 1581.364871][ T6553] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1581.374254][ T5630] usb 10-1: device descriptor read/64, error -71 [ 1581.397032][ T5692] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 1581.505212][ T6561] FAULT_INJECTION: forcing a failure. [ 1581.505212][ T6561] name failslab, interval 1, probability 0, space 0, times 0 [ 1581.518464][ T6561] CPU: 0 UID: 0 PID: 6561 Comm: syz.1.10854 Tainted: G L syzkaller #0 PREEMPT(full) [ 1581.518493][ T6561] Tainted: [L]=SOFTLOCKUP [ 1581.518500][ T6561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1581.518510][ T6561] Call Trace: [ 1581.518518][ T6561] [ 1581.518526][ T6561] dump_stack_lvl+0xe8/0x150 [ 1581.518553][ T6561] should_fail_ex+0x412/0x560 [ 1581.518582][ T6561] should_failslab+0xa8/0x100 [ 1581.518612][ T6561] __kmalloc_cache_noprof+0x88/0x660 [ 1581.518635][ T6561] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 1581.518660][ T6561] ? sctp_add_bind_addr+0x8c/0x370 [ 1581.518687][ T6561] sctp_add_bind_addr+0x8c/0x370 [ 1581.518716][ T6561] sctp_copy_local_addr_list+0x314/0x4f0 [ 1581.518743][ T6561] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1581.518767][ T6561] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1581.518793][ T6561] ? sctp_v6_is_any+0x64/0x80 [ 1581.518816][ T6561] ? sctp_copy_one_addr+0x93/0x360 [ 1581.518841][ T6561] sctp_bind_addr_copy+0xb3/0x3c0 [ 1581.518865][ T6561] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1581.518889][ T6561] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1581.518907][ T6561] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1581.518931][ T6561] ? __local_bh_enable_ip+0xd0/0x130 [ 1581.518948][ T6561] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1581.518972][ T6561] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1581.518994][ T6561] sctp_sendmsg+0x1528/0x2c10 [ 1581.519018][ T6561] ? unwind_next_frame+0xa6/0x2550 [ 1581.519052][ T6561] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1581.519088][ T6561] ? aa_sk_perm+0x6d5/0x900 [ 1581.519118][ T6561] ? __pfx_aa_sk_perm+0x10/0x10 [ 1581.519143][ T6561] ? sock_rps_record_flow+0x19/0x350 [ 1581.519171][ T6561] ? inet_sendmsg+0x2f4/0x370 [ 1581.519200][ T6561] ____sys_sendmsg+0x80a/0x9f0 [ 1581.519235][ T6561] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1581.519269][ T6561] ? import_iovec+0x73/0xa0 [ 1581.519297][ T6561] ___sys_sendmsg+0x2a5/0x360 [ 1581.519320][ T6561] ? __lock_acquire+0x6b5/0x2cf0 [ 1581.519345][ T6561] ? __pfx____sys_sendmsg+0x10/0x10 [ 1581.519407][ T6561] ? __fget_files+0x2a/0x420 [ 1581.519428][ T6561] ? __fget_files+0x3a0/0x420 [ 1581.519459][ T6561] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1581.519487][ T6561] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1581.519520][ T6561] ? __pfx_ksys_write+0x10/0x10 [ 1581.519554][ T6561] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1581.519575][ T6561] do_syscall_64+0x15f/0xf80 [ 1581.519597][ T6561] ? trace_irq_disable+0x3b/0x140 [ 1581.519623][ T6561] ? clear_bhb_loop+0x40/0x90 [ 1581.519646][ T6561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1581.519664][ T6561] RIP: 0033:0x7f6bb199cdd9 [ 1581.519682][ T6561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1581.519697][ T6561] RSP: 002b:00007f6bb279b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1581.519717][ T6561] RAX: ffffffffffffffda RBX: 00007f6bb1c15fa0 RCX: 00007f6bb199cdd9 [ 1581.519730][ T6561] RDX: 0000000000040054 RSI: 0000200000000540 RDI: 0000000000000004 [ 1581.519742][ T6561] RBP: 00007f6bb279b090 R08: 0000000000000000 R09: 0000000000000000 [ 1581.519754][ T6561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1581.519765][ T6561] R13: 00007f6bb1c16038 R14: 00007f6bb1c15fa0 R15: 00007f6bb1d3fa48 [ 1581.519795][ T6561] [ 1581.549375][ T5692] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1581.864087][ T5630] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 1581.872421][ T5692] usb 9-1: config 0 has no interfaces? [ 1581.878631][ T5692] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1581.887786][ T5692] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1581.908996][ T5692] usb 9-1: config 0 descriptor?? [ 1581.950873][ T6576] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10858'. [ 1581.961462][ T6576] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10858'. [ 1582.007783][ T5630] usb 10-1: device descriptor read/64, error -71 [ 1582.070068][ T6586] bond4: (slave bond_slave_1): Device is not our slave [ 1582.078754][ T6586] bond4: option active_slave: invalid value (bond_slave_1) [ 1582.090599][ T6586] bond4 (unregistering): Released all slaves [ 1582.127566][ T5630] usb usb10-port1: attempt power cycle [ 1582.209695][ T5692] usb 9-1: USB disconnect, device number 40 [ 1582.325619][ T6598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1582.338139][ T6598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1582.477263][ T5630] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 1582.507723][ T5630] usb 10-1: device descriptor read/8, error -71 [ 1582.551981][ T6598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1582.563544][ T6598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1582.579000][ T6607] kAFS: unable to lookup cell '' [ 1582.747058][ T5630] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 1582.788259][ T5630] usb 10-1: device descriptor read/8, error -71 [ 1582.897764][ T5630] usb usb10-port1: unable to enumerate USB device [ 1583.727181][T27655] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1583.911070][T27655] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1583.934492][T27655] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1583.959421][T27655] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1583.977872][T27655] usb 1-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1583.987970][T27655] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1584.010151][T27655] usb 1-1: config 0 descriptor?? [ 1584.160399][ T6636] Cannot find add_set index 0 as target [ 1584.233118][T27655] usb 1-1: USB disconnect, device number 4 [ 1584.235774][ T6639] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10882'. [ 1584.290747][ T6642] FAULT_INJECTION: forcing a failure. [ 1584.290747][ T6642] name failslab, interval 1, probability 0, space 0, times 0 [ 1584.309967][ T6642] CPU: 1 UID: 0 PID: 6642 Comm: syz.1.10883 Tainted: G L syzkaller #0 PREEMPT(full) [ 1584.309997][ T6642] Tainted: [L]=SOFTLOCKUP [ 1584.310005][ T6642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1584.310016][ T6642] Call Trace: [ 1584.310024][ T6642] [ 1584.310033][ T6642] dump_stack_lvl+0xe8/0x150 [ 1584.310061][ T6642] should_fail_ex+0x412/0x560 [ 1584.310087][ T6642] should_failslab+0xa8/0x100 [ 1584.310116][ T6642] __kmalloc_cache_noprof+0x88/0x660 [ 1584.310138][ T6642] ? __sctp_v6_cmp_addr+0x1dc/0x510 [ 1584.310158][ T6642] ? sctp_v6_cmp_addr+0x15/0xd0 [ 1584.310177][ T6642] ? sctp_add_bind_addr+0x8c/0x370 [ 1584.310200][ T6642] sctp_add_bind_addr+0x8c/0x370 [ 1584.310221][ T6642] sctp_copy_local_addr_list+0x314/0x4f0 [ 1584.310244][ T6642] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1584.310264][ T6642] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1584.310288][ T6642] ? sctp_v6_is_any+0x64/0x80 [ 1584.310310][ T6642] ? sctp_copy_one_addr+0x93/0x360 [ 1584.310335][ T6642] sctp_bind_addr_copy+0xb3/0x3c0 [ 1584.310355][ T6642] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1584.310376][ T6642] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1584.310394][ T6642] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1584.310414][ T6642] ? __local_bh_enable_ip+0xd0/0x130 [ 1584.310431][ T6642] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1584.310455][ T6642] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1584.310479][ T6642] sctp_sendmsg+0x1528/0x2c10 [ 1584.310502][ T6642] ? unwind_next_frame+0xa6/0x2550 [ 1584.310542][ T6642] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1584.310570][ T6642] ? aa_sk_perm+0x6d5/0x900 [ 1584.310600][ T6642] ? __pfx_aa_sk_perm+0x10/0x10 [ 1584.310625][ T6642] ? sock_rps_record_flow+0x19/0x350 [ 1584.310654][ T6642] ? inet_sendmsg+0x2f4/0x370 [ 1584.310683][ T6642] ____sys_sendmsg+0x80a/0x9f0 [ 1584.310716][ T6642] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1584.310748][ T6642] ? import_iovec+0x73/0xa0 [ 1584.310778][ T6642] ___sys_sendmsg+0x2a5/0x360 [ 1584.310800][ T6642] ? __lock_acquire+0x6b5/0x2cf0 [ 1584.310824][ T6642] ? __pfx____sys_sendmsg+0x10/0x10 [ 1584.310882][ T6642] ? __fget_files+0x2a/0x420 [ 1584.310903][ T6642] ? __fget_files+0x3a0/0x420 [ 1584.310941][ T6642] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1584.310968][ T6642] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1584.311002][ T6642] ? __pfx_ksys_write+0x10/0x10 [ 1584.311035][ T6642] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1584.311054][ T6642] do_syscall_64+0x15f/0xf80 [ 1584.311076][ T6642] ? trace_irq_disable+0x3b/0x140 [ 1584.311102][ T6642] ? clear_bhb_loop+0x40/0x90 [ 1584.311124][ T6642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1584.311143][ T6642] RIP: 0033:0x7f6bb199cdd9 [ 1584.311161][ T6642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1584.311175][ T6642] RSP: 002b:00007f6bb279b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1584.311196][ T6642] RAX: ffffffffffffffda RBX: 00007f6bb1c15fa0 RCX: 00007f6bb199cdd9 [ 1584.311210][ T6642] RDX: 0000000000040054 RSI: 0000200000000540 RDI: 0000000000000004 [ 1584.311222][ T6642] RBP: 00007f6bb279b090 R08: 0000000000000000 R09: 0000000000000000 [ 1584.311233][ T6642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1584.311245][ T6642] R13: 00007f6bb1c16038 R14: 00007f6bb1c15fa0 R15: 00007f6bb1d3fa48 [ 1584.311272][ T6642] [ 1584.696022][ T6647] trusted_key: syz.1.10886 sent an empty control message without MSG_MORE. [ 1584.989256][ T6659] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10891'. [ 1585.017070][T27655] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1585.039454][ T6659] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10891'. [ 1585.057039][ T6659] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10891'. [ 1585.117671][ T5630] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 1585.166046][ T6667] loop5: detected capacity change from 0 to 7 [ 1585.174681][ T6667] Dev loop5: unable to read RDB block 7 [ 1585.177450][T27655] usb 2-1: Using ep0 maxpacket: 32 [ 1585.181793][ T6667] loop5: unable to read partition table [ 1585.192297][ T6667] loop5: partition table beyond EOD, truncated [ 1585.204094][ T6667] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1585.205283][T27655] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 1585.242649][T27655] usb 2-1: config 0 has no interface number 0 [ 1585.256119][T27655] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1585.257383][ T5630] usb 9-1: device descriptor read/64, error -71 [ 1585.304023][T27655] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1585.337334][T27655] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1585.351287][ T6671] FAULT_INJECTION: forcing a failure. [ 1585.351287][ T6671] name failslab, interval 1, probability 0, space 0, times 0 [ 1585.354314][T27655] usb 2-1: Product: syz [ 1585.379256][T27655] usb 2-1: Manufacturer: syz [ 1585.381119][ T6671] CPU: 1 UID: 0 PID: 6671 Comm: syz.0.10897 Tainted: G L syzkaller #0 PREEMPT(full) [ 1585.381147][ T6671] Tainted: [L]=SOFTLOCKUP [ 1585.381154][ T6671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1585.381165][ T6671] Call Trace: [ 1585.381174][ T6671] [ 1585.381181][ T6671] dump_stack_lvl+0xe8/0x150 [ 1585.381208][ T6671] should_fail_ex+0x412/0x560 [ 1585.381236][ T6671] should_failslab+0xa8/0x100 [ 1585.381262][ T6671] __kmalloc_cache_noprof+0x88/0x660 [ 1585.381285][ T6671] ? __sctp_v6_cmp_addr+0x1dc/0x510 [ 1585.381308][ T6671] ? sctp_v6_cmp_addr+0x15/0xd0 [ 1585.381330][ T6671] ? sctp_add_bind_addr+0x8c/0x370 [ 1585.381356][ T6671] sctp_add_bind_addr+0x8c/0x370 [ 1585.381382][ T6671] sctp_copy_local_addr_list+0x314/0x4f0 [ 1585.381409][ T6671] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1585.381431][ T6671] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1585.381456][ T6671] ? sctp_v6_is_any+0x64/0x80 [ 1585.381479][ T6671] ? sctp_copy_one_addr+0x93/0x360 [ 1585.381505][ T6671] sctp_bind_addr_copy+0xb3/0x3c0 [ 1585.381529][ T6671] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1585.381552][ T6671] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1585.381572][ T6671] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1585.381596][ T6671] ? __local_bh_enable_ip+0xd0/0x130 [ 1585.381621][ T6671] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1585.381646][ T6671] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1585.381669][ T6671] sctp_sendmsg+0x1528/0x2c10 [ 1585.381692][ T6671] ? unwind_next_frame+0xa6/0x2550 [ 1585.381726][ T6671] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1585.381755][ T6671] ? aa_sk_perm+0x6d5/0x900 [ 1585.381783][ T6671] ? __pfx_aa_sk_perm+0x10/0x10 [ 1585.381806][ T6671] ? sock_rps_record_flow+0x19/0x350 [ 1585.381834][ T6671] ? inet_sendmsg+0x2f4/0x370 [ 1585.381862][ T6671] ____sys_sendmsg+0x80a/0x9f0 [ 1585.381894][ T6671] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1585.381925][ T6671] ? import_iovec+0x73/0xa0 [ 1585.381953][ T6671] ___sys_sendmsg+0x2a5/0x360 [ 1585.381975][ T6671] ? __lock_acquire+0x6b5/0x2cf0 [ 1585.381997][ T6671] ? __pfx____sys_sendmsg+0x10/0x10 [ 1585.382053][ T6671] ? __fget_files+0x2a/0x420 [ 1585.382073][ T6671] ? __fget_files+0x3a0/0x420 [ 1585.382102][ T6671] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1585.382129][ T6671] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1585.382161][ T6671] ? __pfx_ksys_write+0x10/0x10 [ 1585.382192][ T6671] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1585.382212][ T6671] do_syscall_64+0x15f/0xf80 [ 1585.382233][ T6671] ? trace_irq_disable+0x3b/0x140 [ 1585.382258][ T6671] ? clear_bhb_loop+0x40/0x90 [ 1585.382279][ T6671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1585.382296][ T6671] RIP: 0033:0x7fc06b59cdd9 [ 1585.382314][ T6671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1585.382330][ T6671] RSP: 002b:00007fc06c4ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1585.382349][ T6671] RAX: ffffffffffffffda RBX: 00007fc06b815fa0 RCX: 00007fc06b59cdd9 [ 1585.382362][ T6671] RDX: 0000000000040054 RSI: 0000200000000540 RDI: 0000000000000004 [ 1585.382374][ T6671] RBP: 00007fc06c4ee090 R08: 0000000000000000 R09: 0000000000000000 [ 1585.382385][ T6671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1585.382395][ T6671] R13: 00007fc06b816038 R14: 00007fc06b815fa0 R15: 00007fc06b93fa48 [ 1585.382424][ T6671] [ 1585.449863][ T6673] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10898'. [ 1585.496126][T27655] usb 2-1: SerialNumber: syz [ 1585.558964][ T5630] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 1585.689055][ T5630] usb 9-1: device descriptor read/64, error -71 [ 1585.774255][T27655] usb 2-1: config 0 descriptor?? [ 1585.869320][ T5630] usb usb9-port1: attempt power cycle [ 1585.924158][ T6686] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10904'. [ 1586.012668][T27655] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 1586.028368][T27655] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 1586.045736][T27655] usb 2-1: USB disconnect, device number 120 [ 1586.152062][ T6694] loop5: detected capacity change from 0 to 7 [ 1586.163190][ T6694] Dev loop5: unable to read RDB block 7 [ 1586.169013][ T6694] loop5: unable to read partition table [ 1586.174849][ T6694] loop5: partition table beyond EOD, truncated [ 1586.181224][ T6694] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1586.207097][ T5630] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 1586.248513][ T5630] usb 9-1: device descriptor read/8, error -71 [ 1586.327280][ T5692] usb 10-1: new high-speed USB device number 47 using dummy_hcd [ 1586.479200][ T5692] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1586.491662][ T5630] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 1586.508729][ T5692] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1586.518106][ T5692] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1586.527945][ T5630] usb 9-1: device descriptor read/8, error -71 [ 1586.552823][ T5692] usb 10-1: config 0 descriptor?? [ 1586.571661][ T5692] pwc: Askey VC010 type 2 USB webcam detected. [ 1586.573172][ T6709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10913'. [ 1586.618565][ T6710] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10912'. [ 1586.637642][ T5630] usb usb9-port1: unable to enumerate USB device [ 1586.975107][ T5692] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1586.989882][ T5692] pwc: recv_control_msg error -32 req 02 val 2700 [ 1586.998797][ T5692] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1587.006386][ T5692] pwc: recv_control_msg error -32 req 04 val 1000 [ 1587.014238][ T5692] pwc: recv_control_msg error -32 req 04 val 1300 [ 1587.023039][ T5692] pwc: recv_control_msg error -32 req 04 val 1400 [ 1587.035921][ T6722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10918'. [ 1587.041761][ T5692] pwc: recv_control_msg error -32 req 02 val 2000 [ 1587.059155][ T5692] pwc: recv_control_msg error -32 req 02 val 2100 [ 1587.070246][ T5692] pwc: recv_control_msg error -32 req 04 val 1500 [ 1587.085885][ T5692] pwc: recv_control_msg error -32 req 02 val 2500 [ 1587.095039][ T5692] pwc: recv_control_msg error -32 req 02 val 2400 [ 1587.108271][ T5692] pwc: recv_control_msg error -32 req 02 val 2600 [ 1587.117899][ T5692] pwc: recv_control_msg error -32 req 02 val 2900 [ 1587.328943][ T5692] pwc: recv_control_msg error -71 req 04 val 1100 [ 1587.346682][ T5692] pwc: recv_control_msg error -71 req 04 val 1200 [ 1587.369491][ T5692] pwc: Registered as video103. [ 1587.384707][ T5692] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input193 [ 1587.421621][ T5692] usb 10-1: USB disconnect, device number 47 [ 1587.784558][ T6732] netlink: 'syz.3.10919': attribute type 1 has an invalid length. [ 1587.798645][ T6734] loop8: detected capacity change from 0 to 8 [ 1587.806447][ T6734] Dev loop8: unable to read RDB block 8 [ 1587.813434][ T6734] loop8: unable to read partition table [ 1587.820722][ T6734] loop8: partition table beyond EOD, truncated [ 1587.828198][ T6734] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1587.928433][ T1987] usb 2-1: new full-speed USB device number 121 using dummy_hcd [ 1588.110459][ T1987] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1588.111854][ T6740] kvm: pic: non byte write [ 1588.140539][ T1987] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1588.170912][ T1987] usb 2-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1588.191768][ T1987] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1588.209523][ T1987] usb 2-1: config 0 descriptor?? [ 1588.218371][ T6728] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1588.370379][ T1972] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 1588.480937][ T1828] Bluetooth: hci6: unexpected event for opcode 0x2006 [ 1588.537340][ T1972] usb 9-1: Using ep0 maxpacket: 16 [ 1588.573359][ T1972] usb 9-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 1588.584552][ T1972] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1588.593269][ T1972] usb 9-1: Product: syz [ 1588.598765][ T1972] usb 9-1: Manufacturer: syz [ 1588.603511][ T1972] usb 9-1: SerialNumber: syz [ 1588.665609][ T1987] sony 0003:054C:024B.009D: unknown main item tag 0x0 [ 1588.682121][ T6769] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10932'. [ 1588.696652][ T1987] sony 0003:054C:024B.009D: unknown main item tag 0x0 [ 1588.715370][ T1987] sony 0003:054C:024B.009D: unknown main item tag 0x0 [ 1588.734727][ T1987] sony 0003:054C:024B.009D: unknown main item tag 0x0 [ 1588.755524][ T1987] sony 0003:054C:024B.009D: unknown main item tag 0x0 [ 1588.773500][ T1987] sony 0003:054C:024B.009D: unknown main item tag 0x0 [ 1588.793641][ T1987] sony 0003:054C:024B.009D: unknown main item tag 0x0 [ 1588.831880][ T1987] sony 0003:054C:024B.009D: unknown main item tag 0x0 [ 1588.871468][ T1987] sony 0003:054C:024B.009D: unknown main item tag 0x0 [ 1588.902663][ T1987] sony 0003:054C:024B.009D: unknown main item tag 0x0 [ 1588.959247][ T1987] sony 0003:054C:024B.009D: hiddev1,hidraw0: USB HID v0.08 Device [HID 054c:024b] on usb-dummy_hcd.1-1/input0 [ 1589.012613][ T1987] sony 0003:054C:024B.009D: failed to claim input [ 1589.095633][ T1987] usb 2-1: USB disconnect, device number 121 [ 1589.149299][ T6785] loop8: detected capacity change from 0 to 8 [ 1589.202216][ T6785] Dev loop8: unable to read RDB block 8 [ 1589.230977][ T6785] loop8: unable to read partition table [ 1589.248685][ T6780] fido_id[6780]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1589.270618][ T6785] loop8: partition table beyond EOD, truncated [ 1589.279589][ T6782] bond3: (slave bond_slave_1): Device is not our slave [ 1589.294629][ T6785] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1589.308910][ T6782] bond3: option active_slave: invalid value (bond_slave_1) [ 1589.372090][ T6782] bond3 (unregistering): Released all slaves [ 1589.502221][ T1972] usb 9-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 1589.534095][ T6791] FAULT_INJECTION: forcing a failure. [ 1589.534095][ T6791] name failslab, interval 1, probability 0, space 0, times 0 [ 1589.552382][ T6791] CPU: 0 UID: 0 PID: 6791 Comm: syz.0.10937 Tainted: G L syzkaller #0 PREEMPT(full) [ 1589.552412][ T6791] Tainted: [L]=SOFTLOCKUP [ 1589.552419][ T6791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1589.552430][ T6791] Call Trace: [ 1589.552438][ T6791] [ 1589.552446][ T6791] dump_stack_lvl+0xe8/0x150 [ 1589.552472][ T6791] should_fail_ex+0x412/0x560 [ 1589.552498][ T6791] should_failslab+0xa8/0x100 [ 1589.552526][ T6791] __kmalloc_cache_noprof+0x88/0x660 [ 1589.552549][ T6791] ? __sctp_v6_cmp_addr+0x1dc/0x510 [ 1589.552574][ T6791] ? sctp_v6_cmp_addr+0x15/0xd0 [ 1589.552596][ T6791] ? sctp_add_bind_addr+0x8c/0x370 [ 1589.552624][ T6791] sctp_add_bind_addr+0x8c/0x370 [ 1589.552652][ T6791] sctp_copy_local_addr_list+0x314/0x4f0 [ 1589.552679][ T6791] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1589.552701][ T6791] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1589.552726][ T6791] ? sctp_v6_is_any+0x64/0x80 [ 1589.552750][ T6791] ? sctp_copy_one_addr+0x93/0x360 [ 1589.552777][ T6791] sctp_bind_addr_copy+0xb3/0x3c0 [ 1589.552801][ T6791] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1589.552826][ T6791] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1589.552848][ T6791] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1589.552872][ T6791] ? __local_bh_enable_ip+0xd0/0x130 [ 1589.552891][ T6791] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1589.552916][ T6791] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1589.552938][ T6791] sctp_sendmsg+0x1528/0x2c10 [ 1589.552963][ T6791] ? unwind_next_frame+0xa6/0x2550 [ 1589.552998][ T6791] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1589.553027][ T6791] ? aa_sk_perm+0x6d5/0x900 [ 1589.553057][ T6791] ? __pfx_aa_sk_perm+0x10/0x10 [ 1589.553082][ T6791] ? sock_rps_record_flow+0x19/0x350 [ 1589.553110][ T6791] ? inet_sendmsg+0x2f4/0x370 [ 1589.553138][ T6791] ____sys_sendmsg+0x80a/0x9f0 [ 1589.553172][ T6791] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1589.553204][ T6791] ? import_iovec+0x73/0xa0 [ 1589.553227][ T6791] ___sys_sendmsg+0x2a5/0x360 [ 1589.553246][ T6791] ? __lock_acquire+0x6b5/0x2cf0 [ 1589.553265][ T6791] ? __pfx____sys_sendmsg+0x10/0x10 [ 1589.553311][ T6791] ? __fget_files+0x2a/0x420 [ 1589.553334][ T6791] ? __fget_files+0x3a0/0x420 [ 1589.553359][ T6791] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1589.553380][ T6791] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1589.553407][ T6791] ? __pfx_ksys_write+0x10/0x10 [ 1589.553433][ T6791] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1589.553449][ T6791] do_syscall_64+0x15f/0xf80 [ 1589.553467][ T6791] ? trace_irq_disable+0x3b/0x140 [ 1589.553488][ T6791] ? clear_bhb_loop+0x40/0x90 [ 1589.553507][ T6791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1589.553521][ T6791] RIP: 0033:0x7fc06b59cdd9 [ 1589.553536][ T6791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1589.553548][ T6791] RSP: 002b:00007fc06c4ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1589.553564][ T6791] RAX: ffffffffffffffda RBX: 00007fc06b815fa0 RCX: 00007fc06b59cdd9 [ 1589.553575][ T6791] RDX: 0000000000040054 RSI: 0000200000000540 RDI: 0000000000000004 [ 1589.553585][ T6791] RBP: 00007fc06c4ee090 R08: 0000000000000000 R09: 0000000000000000 [ 1589.553593][ T6791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1589.553602][ T6791] R13: 00007fc06b816038 R14: 00007fc06b815fa0 R15: 00007fc06b93fa48 [ 1589.553625][ T6791] [ 1589.555793][ T1972] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1589.907483][ T1972] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 1589.916141][ T1972] usb 9-1: media controller created [ 1589.934002][ T1972] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1590.085541][ T1972] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1590.216299][ T1972] dvb_usb_gl861 9-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 1590.257846][ T1972] usb 9-1: USB disconnect, device number 45 [ 1590.355698][ T6809] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10941'. [ 1590.457813][ T6807] bond4: entered promiscuous mode [ 1591.326725][ T6829] loop8: detected capacity change from 0 to 8 [ 1591.373096][ T6829] Dev loop8: unable to read RDB block 8 [ 1591.392962][ T6829] loop8: unable to read partition table [ 1591.408573][ T6829] loop8: partition table beyond EOD, truncated [ 1591.442034][ T6829] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1591.724031][ T6831] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10950'. [ 1592.361784][ T6852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1592.408652][ T6852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1592.438347][ T6853] trusted_key: encrypted_key: insufficient parameters specified [ 1593.623917][ T6879] fuse: Unknown parameter '' [ 1593.691652][ T6862] syz.3.10958 (6862): drop_caches: 2 [ 1593.830614][ T6885] fuse: Bad value for 'user_id' [ 1593.840212][ T6885] fuse: Bad value for 'user_id' [ 1593.993862][ T6891] bond3: (slave bond_slave_1): Device is not our slave [ 1594.005435][ T6895] loop5: detected capacity change from 0 to 7 [ 1594.043269][ T6891] bond3: option active_slave: invalid value (bond_slave_1) [ 1594.057956][ T6895] Dev loop5: unable to read RDB block 7 [ 1594.071679][ T6895] loop5: unable to read partition table [ 1594.078753][ T6891] bond3 (unregistering): Released all slaves [ 1594.100438][ T6895] loop5: partition table beyond EOD, truncated [ 1594.129256][ T6895] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1594.441370][ T6905] loop5: detected capacity change from 0 to 7 [ 1594.487929][ T6905] Dev loop5: unable to read RDB block 7 [ 1594.513307][ T6905] loop5: unable to read partition table [ 1594.584587][ T6905] loop5: partition table beyond EOD, truncated [ 1594.631160][ T6910] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10976'. [ 1594.659007][ T6905] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1595.354969][ T6938] ip6gretap0: entered promiscuous mode [ 1595.379811][ T6945] loop5: detected capacity change from 0 to 7 [ 1595.390003][ T6945] Dev loop5: unable to read RDB block 7 [ 1595.395753][ T6945] loop5: unable to read partition table [ 1595.415015][ T6945] loop5: partition table beyond EOD, truncated [ 1595.426551][ T6945] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1595.721615][ T6962] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10994'. [ 1595.771218][ T6964] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10993'. [ 1595.894418][ T6968] tipc: Started in network mode [ 1595.909554][ T6968] tipc: Node identity 00000000000000002d00000000000001, cluster identity 4711 [ 1595.934301][ T6968] tipc: Enabling of bearer rejected, failed to enable media [ 1595.968726][ T1828] Bluetooth: hci3: unexpected event for opcode 0x1009 [ 1596.131521][ T6955] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10991'. [ 1596.143048][ T6978] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10998'. [ 1596.247578][ T8901] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1596.407203][ T8901] usb 1-1: device descriptor read/64, error -71 [ 1596.419478][ T6982] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11000'. [ 1596.667088][ T8901] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1596.766366][ T6990] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11002'. [ 1596.805938][ T8901] usb 1-1: device descriptor read/64, error -71 [ 1596.939929][ T8901] usb usb1-port1: attempt power cycle [ 1597.297589][ T8901] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1597.407029][ T8901] usb 1-1: device descriptor read/8, error -71 [ 1597.697138][ T8901] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1597.778593][ T8901] usb 1-1: device descriptor read/8, error -71 [ 1597.919060][ T8901] usb usb1-port1: unable to enumerate USB device [ 1597.987877][ T7004] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11006'. [ 1598.355581][ T8901] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 1598.585432][ T8901] usb 9-1: config 86 has an invalid interface number: 125 but max is 3 [ 1598.585581][ T8901] usb 9-1: config 86 contains an unexpected descriptor of type 0x1, skipping [ 1598.585602][ T8901] usb 9-1: config 86 has an invalid interface number: 146 but max is 3 [ 1598.585624][ T8901] usb 9-1: config 86 has an invalid interface number: 239 but max is 3 [ 1598.585647][ T8901] usb 9-1: config 86 has an invalid interface number: 233 but max is 3 [ 1598.585667][ T8901] usb 9-1: config 86 has no interface number 0 [ 1598.585683][ T8901] usb 9-1: config 86 has no interface number 1 [ 1598.585697][ T8901] usb 9-1: config 86 has no interface number 2 [ 1598.585714][ T8901] usb 9-1: config 86 has no interface number 3 [ 1598.585773][ T8901] usb 9-1: config 86 interface 125 altsetting 7 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 1598.585800][ T8901] usb 9-1: config 86 interface 125 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 1598.585822][ T8901] usb 9-1: config 86 interface 125 altsetting 7 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 1598.585847][ T8901] usb 9-1: config 86 interface 125 altsetting 7 has a duplicate endpoint with address 0xE, skipping [ 1598.585870][ T8901] usb 9-1: config 86 interface 125 altsetting 7 has a duplicate endpoint with address 0xE, skipping [ 1598.585891][ T8901] usb 9-1: config 86 interface 125 altsetting 7 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 1598.585916][ T8901] usb 9-1: config 86 interface 125 altsetting 7 has a duplicate endpoint with address 0x85, skipping [ 1598.585939][ T8901] usb 9-1: config 86 interface 125 altsetting 7 has a duplicate endpoint with address 0x3, skipping [ 1598.585961][ T8901] usb 9-1: config 86 interface 125 altsetting 7 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 1598.585985][ T8901] usb 9-1: config 86 interface 125 altsetting 7 has a duplicate endpoint with address 0xB, skipping [ 1598.586009][ T8901] usb 9-1: config 86 interface 125 altsetting 7 has a duplicate endpoint with address 0xA, skipping [ 1598.586032][ T8901] usb 9-1: config 86 interface 125 altsetting 7 has 15 endpoint descriptors, different from the interface descriptor's value: 14 [ 1598.586070][ T8901] usb 9-1: config 86 interface 146 altsetting 7 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1598.586105][ T8901] usb 9-1: config 86 interface 146 altsetting 7 has a duplicate endpoint with address 0x5, skipping [ 1598.586130][ T8901] usb 9-1: config 86 interface 146 altsetting 7 has a duplicate endpoint with address 0x6, skipping [ 1598.586152][ T8901] usb 9-1: config 86 interface 146 altsetting 7 has a duplicate endpoint with address 0x3, skipping [ 1598.586175][ T8901] usb 9-1: config 86 interface 146 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 16 [ 1598.586199][ T8901] usb 9-1: config 86 interface 146 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 1598.586220][ T8901] usb 9-1: config 86 interface 146 altsetting 7 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 1598.586246][ T8901] usb 9-1: config 86 interface 146 altsetting 7 has a duplicate endpoint with address 0x1, skipping [ 1598.586269][ T8901] usb 9-1: config 86 interface 146 altsetting 7 has a duplicate endpoint with address 0x4, skipping [ 1598.586292][ T8901] usb 9-1: config 86 interface 146 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 1598.586314][ T8901] usb 9-1: config 86 interface 146 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 1598.586337][ T8901] usb 9-1: config 86 interface 146 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 1598.586361][ T8901] usb 9-1: config 86 interface 146 altsetting 7 has a duplicate endpoint with address 0xC, skipping [ 1598.586398][ T8901] usb 9-1: config 86 interface 239 altsetting 231 has a duplicate endpoint with address 0xE, skipping [ 1598.586421][ T8901] usb 9-1: config 86 interface 239 altsetting 231 has a duplicate endpoint with address 0x8, skipping [ 1598.586444][ T8901] usb 9-1: config 86 interface 239 altsetting 231 has a duplicate endpoint with address 0xA, skipping [ 1598.586468][ T8901] usb 9-1: config 86 interface 239 altsetting 231 has a duplicate endpoint with address 0xE, skipping [ 1598.586492][ T8901] usb 9-1: config 86 interface 239 altsetting 231 has a duplicate endpoint with address 0xE, skipping [ 1598.586514][ T8901] usb 9-1: config 86 interface 239 altsetting 231 has a duplicate endpoint with address 0xB, skipping [ 1598.586552][ T8901] usb 9-1: config 86 interface 239 altsetting 231 endpoint 0x9 has an invalid bInterval 20, changing to 7 [ 1598.586579][ T8901] usb 9-1: config 86 interface 239 altsetting 231 endpoint 0x9 has invalid maxpacket 26176, setting to 1024 [ 1598.586605][ T8901] usb 9-1: config 86 interface 239 altsetting 231 has a duplicate endpoint with address 0x4, skipping [ 1598.586630][ T8901] usb 9-1: config 86 interface 239 altsetting 231 has a duplicate endpoint with address 0xF, skipping [ 1598.586652][ T8901] usb 9-1: config 86 interface 239 altsetting 231 has an invalid descriptor for endpoint zero, skipping [ 1598.586674][ T8901] usb 9-1: config 86 interface 239 altsetting 231 has a duplicate endpoint with address 0x6, skipping [ 1598.586698][ T8901] usb 9-1: config 86 interface 239 altsetting 231 has a duplicate endpoint with address 0x7, skipping [ 1598.586720][ T8901] usb 9-1: config 86 interface 239 altsetting 231 has an endpoint descriptor with address 0x7A, changing to 0xA [ 1598.586744][ T8901] usb 9-1: config 86 interface 239 altsetting 231 has a duplicate endpoint with address 0xA, skipping [ 1598.586768][ T8901] usb 9-1: config 86 interface 239 altsetting 231 has a duplicate endpoint with address 0x87, skipping [ 1598.586791][ T8901] usb 9-1: config 86 interface 239 altsetting 231 has a duplicate endpoint with address 0x2, skipping [ 1598.586814][ T8901] usb 9-1: config 86 interface 125 has no altsetting 0 [ 1598.586832][ T8901] usb 9-1: config 86 interface 146 has no altsetting 0 [ 1598.586851][ T8901] usb 9-1: config 86 interface 239 has no altsetting 0 [ 1598.586870][ T8901] usb 9-1: config 86 interface 233 has no altsetting 0 [ 1598.597614][ T8901] usb 9-1: New USB device found, idVendor=2040, idProduct=6502, bcdDevice=c2.5d [ 1598.597644][ T8901] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1598.597665][ T8901] usb 9-1: Product: 袜䨆䥇풭㆝ⶸ杧謬䅳羓俘螫魾욉ꁙ⌵뉄爇쇘翑䲭ᶮ岽省䙼챂⟊馔쑪銣憼䥿ᨁېꁺ뱴眿ᒮ謹೵댇뼉ᱯ൵襇앴䌨鬫詥⊳䄜ቄ㕓㱪汖 [ 1598.597691][ T8901] usb 9-1: Manufacturer: 툷䇙㿣縈陧Ḑ꼈圽虭䖨䄬왫ᒎꉌ褅摗긢夫㊢튮넄ຣ逺玟⯦濊꟤뷽얺쏧ㇽ筅渫荒즧퐕珸꤭贾冪侁㟚ꋽ魼ꍑ洆鼗슣შᎉ迂䉈둵ˈ뮉ﲷ鍖灑 [ 1598.597717][ T8901] usb 9-1: SerialNumber: ⇎쟊鮬썟툆㳊ᣋ䥴ᄌ耔蝣鲠䗐ࡹ컋鮶舢呺쓚㍻ṷ너ꙕ㮲냭ꔣ⼩찟㪑構鷑㱞皽꧵֐솰략㱉譟獖⡮媬綪ꈡ莕뺎ﺩ㈱잾ٸཫ胟餰뎖難駊ⰻ࣢衽涇涶捾մ녈ी톆껕젂ꇶ亚–젝㱎瞥⺿덆㛆ළ䘫羻ㆻ蓤⹙Ꙡ鏦伡렗纄鑄碻匎ᮜ䮑✺& [ 1598.600801][ T8901] usb 9-1: Interface #239 referenced by multiple IADs [ 1598.600930][ T8901] usb 9-1: Interface #233 referenced by multiple IADs [ 1599.133356][ T8901] usb 9-1: USB disconnect, device number 46 [ 1599.198432][ T1972] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1599.845578][ T7038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1599.857760][ T7038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1600.053137][ T7044] SET target dimension over the limit! [ 1600.060540][ T7041] bond3: entered promiscuous mode [ 1600.330298][ T7048] bond3: (slave bond_slave_1): Device is not our slave [ 1600.359736][ T7054] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11022'. [ 1600.369343][ T7048] bond3: option active_slave: invalid value (bond_slave_1) [ 1600.386180][ T7048] bond3 (unregistering): Released all slaves [ 1600.565311][ T7054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11022'. [ 1600.612142][ T7068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1600.638959][ T7068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1600.725664][ T7070] netlink: 'syz.9.11028': attribute type 1 has an invalid length. [ 1600.748055][ T7072] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11027'. [ 1600.792519][ T7064] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11022'. [ 1600.872904][ T7073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1600.893656][ T7073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1601.035965][ T7078] Cannot find add_set index 0 as target [ 1601.255102][ T7086] loop5: detected capacity change from 0 to 7 [ 1601.276192][ T7086] Dev loop5: unable to read RDB block 7 [ 1601.288823][ T7086] loop5: unable to read partition table [ 1601.307640][ T7086] loop5: partition table beyond EOD, truncated [ 1601.323113][ T7086] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1601.358482][ T7089] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1601.468904][ T7096] FAULT_INJECTION: forcing a failure. [ 1601.468904][ T7096] name failslab, interval 1, probability 0, space 0, times 0 [ 1601.474416][ T7091] bond5: entered promiscuous mode [ 1601.492032][ T7096] CPU: 0 UID: 0 PID: 7096 Comm: syz.8.11035 Tainted: G L syzkaller #0 PREEMPT(full) [ 1601.492062][ T7096] Tainted: [L]=SOFTLOCKUP [ 1601.492069][ T7096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1601.492080][ T7096] Call Trace: [ 1601.492088][ T7096] [ 1601.492096][ T7096] dump_stack_lvl+0xe8/0x150 [ 1601.492125][ T7096] should_fail_ex+0x412/0x560 [ 1601.492153][ T7096] should_failslab+0xa8/0x100 [ 1601.492183][ T7096] __kmalloc_cache_noprof+0x88/0x660 [ 1601.492209][ T7096] ? sctp_add_bind_addr+0x8c/0x370 [ 1601.492238][ T7096] sctp_add_bind_addr+0x8c/0x370 [ 1601.492265][ T7096] sctp_copy_local_addr_list+0x314/0x4f0 [ 1601.492294][ T7096] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1601.492317][ T7096] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1601.492343][ T7096] ? sctp_v6_is_any+0x64/0x80 [ 1601.492369][ T7096] ? sctp_copy_one_addr+0x93/0x360 [ 1601.492395][ T7096] sctp_bind_addr_copy+0xb3/0x3c0 [ 1601.492417][ T7096] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1601.492441][ T7096] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1601.492463][ T7096] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1601.492484][ T7096] ? __local_bh_enable_ip+0xd0/0x130 [ 1601.492499][ T7096] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1601.492521][ T7096] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1601.492543][ T7096] sctp_sendmsg+0x1528/0x2c10 [ 1601.492583][ T7096] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1601.492611][ T7096] ? aa_sk_perm+0x6d5/0x900 [ 1601.492642][ T7096] ? __pfx_aa_sk_perm+0x10/0x10 [ 1601.492666][ T7096] ? sock_rps_record_flow+0x19/0x350 [ 1601.492693][ T7096] ? inet_sendmsg+0x2f4/0x370 [ 1601.492721][ T7096] ____sys_sendmsg+0x80a/0x9f0 [ 1601.492752][ T7096] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1601.492784][ T7096] ? import_iovec+0x73/0xa0 [ 1601.492811][ T7096] ___sys_sendmsg+0x2a5/0x360 [ 1601.492833][ T7096] ? __lock_acquire+0x6b5/0x2cf0 [ 1601.492856][ T7096] ? __pfx____sys_sendmsg+0x10/0x10 [ 1601.492918][ T7096] ? __fget_files+0x2a/0x420 [ 1601.492939][ T7096] ? __fget_files+0x3a0/0x420 [ 1601.492968][ T7096] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1601.492993][ T7096] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1601.493025][ T7096] ? __pfx_ksys_write+0x10/0x10 [ 1601.493048][ T7096] ? handle_softirqs+0x715/0x840 [ 1601.493073][ T7096] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1601.493092][ T7096] do_syscall_64+0x15f/0xf80 [ 1601.493116][ T7096] ? clear_bhb_loop+0x40/0x90 [ 1601.493137][ T7096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1601.493155][ T7096] RIP: 0033:0x7f7ff559cdd9 [ 1601.493172][ T7096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1601.493187][ T7096] RSP: 002b:00007f7ff6370028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1601.493206][ T7096] RAX: ffffffffffffffda RBX: 00007f7ff5815fa0 RCX: 00007f7ff559cdd9 [ 1601.493219][ T7096] RDX: 0000000000040054 RSI: 0000200000000540 RDI: 0000000000000004 [ 1601.493231][ T7096] RBP: 00007f7ff6370090 R08: 0000000000000000 R09: 0000000000000000 [ 1601.493242][ T7096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1601.493253][ T7096] R13: 00007f7ff5816038 R14: 00007f7ff5815fa0 R15: 00007f7ff593fa48 [ 1601.493281][ T7096] [ 1601.812961][ T7102] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.11037'. [ 1601.960105][ T7107] Cannot find add_set index 0 as target [ 1602.205915][ T7118] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11043'. [ 1602.226311][ T7118] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11043'. [ 1602.287893][ T7122] loop8: detected capacity change from 0 to 1 [ 1602.348156][ T7122] Dev loop8: unable to read RDB block 1 [ 1602.382254][ T7122] loop8: unable to read partition table [ 1602.389723][ T7122] loop8: partition table beyond EOD, truncated [ 1602.397343][ T7122] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1602.497400][ T5692] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 1602.683683][ T5692] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1602.720415][ T5692] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1602.746792][ T5692] usb 9-1: too many endpoints for config 1 interface 1 altsetting 1: 248, using maximum allowed: 30 [ 1602.790142][ T5692] usb 9-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 248 [ 1602.792672][ T7135] kvm: pic: non byte write [ 1602.840406][ T5692] usb 9-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 1602.862775][ T5692] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1602.880060][ T5692] usb 9-1: Product: syz [ 1602.889768][ T7138] binder: 7134:7138 ioctl 4018620d 0 returned -22 [ 1602.896381][ T5692] usb 9-1: Manufacturer: syz [ 1602.902599][ T5692] usb 9-1: SerialNumber: syz [ 1602.986441][ T7145] netlink: 12 bytes leftover after parsing attributes in process `syz.9.11052'. [ 1603.138789][T27655] hid_parser_main: 28 callbacks suppressed [ 1603.138807][T27655] hid-generic 0000:0000:0000.009E: unknown main item tag 0x0 [ 1603.204693][T27655] hid-generic 0000:0000:0000.009E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1603.438893][ T5692] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1603.509585][ T5692] usb 9-1: USB disconnect, device number 47 [ 1603.614390][ T2216] udevd[2216]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1603.804394][ T7153] Cannot find add_set index 0 as target [ 1604.373721][ T7170] fuse: Unknown parameter '' [ 1604.473730][ T7174] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11061'. [ 1604.745301][ T7180] netlink: 155064 bytes leftover after parsing attributes in process `syz.0.11059'. [ 1604.860891][ T7184] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11065'. [ 1604.875171][ T7184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1604.989152][ T7185] syzkaller0: entered promiscuous mode [ 1605.016530][ T7185] syzkaller0: entered allmulticast mode [ 1605.144172][ T7193] loop8: detected capacity change from 0 to 1 [ 1605.154728][ T7193] Dev loop8: unable to read RDB block 1 [ 1605.166606][ T7193] loop8: unable to read partition table [ 1605.177148][ T7193] loop8: partition table beyond EOD, truncated [ 1605.217466][ T7193] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1605.347135][ T5692] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 1605.518647][ T5692] usb 9-1: Using ep0 maxpacket: 16 [ 1605.556094][ T5692] usb 9-1: config 0 has no interfaces? [ 1605.593662][ T5692] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1605.626678][ T5692] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1605.637477][ T5692] usb 9-1: Manufacturer: syz [ 1605.648831][ T5692] usb 9-1: config 0 descriptor?? [ 1605.761963][ T7201] bond3: (slave bond_slave_1): Device is not our slave [ 1605.769904][ T7201] bond3: option active_slave: invalid value (bond_slave_1) [ 1605.783946][ T7201] bond3 (unregistering): Released all slaves [ 1606.036122][ T7210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1606.071532][ T7210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1606.262642][ T29] audit: type=1326 audit(1778121182.928:8817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7218 comm="syz.0.11075" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc06b59cdd9 code=0x7ffc0000 [ 1606.293664][ T7188] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1606.320582][ T29] audit: type=1326 audit(1778121182.928:8818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7218 comm="syz.0.11075" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc06b59cdd9 code=0x7ffc0000 [ 1606.361699][ T29] audit: type=1326 audit(1778121182.928:8819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7218 comm="syz.0.11075" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc06b55d60e code=0x7ffc0000 [ 1606.390786][ T29] audit: type=1326 audit(1778121182.958:8820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7218 comm="syz.0.11075" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc06b59cdd9 code=0x7ffc0000 [ 1606.433917][ T29] audit: type=1326 audit(1778121182.958:8821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7218 comm="syz.0.11075" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc06b59cdd9 code=0x7ffc0000 [ 1606.437049][ T5692] usb 10-1: new low-speed USB device number 48 using dummy_hcd [ 1606.475367][ T29] audit: type=1326 audit(1778121182.958:8822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7218 comm="syz.0.11075" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc06b59cdd9 code=0x7ffc0000 [ 1606.502827][ T29] audit: type=1326 audit(1778121182.958:8823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7218 comm="syz.0.11075" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc06b59cdd9 code=0x7ffc0000 [ 1606.530039][ T29] audit: type=1326 audit(1778121182.988:8824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7218 comm="syz.0.11075" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fc06b59cdd9 code=0x7ffc0000 [ 1606.597924][ T29] audit: type=1326 audit(1778121182.988:8825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7218 comm="syz.0.11075" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc06b59cdd9 code=0x7ffc0000 [ 1606.626366][ T29] audit: type=1326 audit(1778121182.988:8826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7218 comm="syz.0.11075" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc06b59cdd9 code=0x7ffc0000 [ 1606.697637][ T5692] usb 10-1: Invalid ep0 maxpacket: 9 [ 1606.712993][ T7226] input: syz0 as /devices/virtual/input/input194 [ 1606.838804][ T5692] usb 10-1: new low-speed USB device number 49 using dummy_hcd [ 1606.997044][ T5692] usb 10-1: Invalid ep0 maxpacket: 9 [ 1607.008856][ T5692] usb usb10-port1: attempt power cycle [ 1607.057562][ T7234] loop8: detected capacity change from 0 to 1 [ 1607.074318][ T7234] Dev loop8: unable to read RDB block 1 [ 1607.081207][ T7234] loop8: unable to read partition table [ 1607.105592][ T7234] loop8: partition table beyond EOD, truncated [ 1607.139524][ T7234] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1607.245835][ T7237] netlink: 'syz.3.11080': attribute type 1 has an invalid length. [ 1607.357477][ T5692] usb 10-1: new low-speed USB device number 50 using dummy_hcd [ 1607.388773][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.398652][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.433103][ T5692] usb 10-1: Invalid ep0 maxpacket: 9 [ 1607.461029][ T7243] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11083'. [ 1607.597442][ T5692] usb 10-1: new low-speed USB device number 51 using dummy_hcd [ 1607.627037][T27655] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1607.628653][ T5692] usb 10-1: Invalid ep0 maxpacket: 9 [ 1607.654929][ T5692] usb usb10-port1: unable to enumerate USB device [ 1607.811781][T27655] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1607.835863][T27655] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1607.859010][T27655] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1607.873999][T27655] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1607.887850][ T7257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11089'. [ 1607.892949][T27655] usb 1-1: Manufacturer: syz [ 1607.947906][T27655] usb 1-1: config 0 descriptor?? [ 1608.025817][ T7261] binder_alloc: 7256: pid 7256 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1608.042842][ T7261] binder_alloc: 7256: pid 7256 spamming oneway? 2 buffers allocated for a total size of 5120 [ 1608.056400][ T7261] netlink: 'syz.1.11090': attribute type 10 has an invalid length. [ 1608.132685][ T7263] binder: 7256:7263 ioctl c0186e86 200000000140 returned -22 [ 1608.181485][T27655] pyra 0003:1E7D:2CF6.009F: unknown main item tag 0x0 [ 1608.229348][T27655] pyra 0003:1E7D:2CF6.009F: unknown main item tag 0x0 [ 1608.243668][T27655] pyra 0003:1E7D:2CF6.009F: unknown main item tag 0x0 [ 1608.258759][T27655] pyra 0003:1E7D:2CF6.009F: unknown main item tag 0x0 [ 1608.266768][T27655] pyra 0003:1E7D:2CF6.009F: unknown main item tag 0x0 [ 1608.276241][T27655] pyra 0003:1E7D:2CF6.009F: unknown main item tag 0x0 [ 1608.315098][T27655] pyra 0003:1E7D:2CF6.009F: unknown main item tag 0x0 [ 1608.350945][ T1972] usb 9-1: USB disconnect, device number 48 [ 1608.358263][T27655] pyra 0003:1E7D:2CF6.009F: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 1608.412045][T27655] pyra 0003:1E7D:2CF6.009F: couldn't init struct pyra_device [ 1608.420785][T27655] pyra 0003:1E7D:2CF6.009F: couldn't install mouse [ 1608.428844][ T5692] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1608.446217][T27655] pyra 0003:1E7D:2CF6.009F: probe with driver pyra failed with error -32 [ 1608.480890][ T7266] loop2: detected capacity change from 0 to 7 [ 1608.492810][ T7266] Dev loop2: unable to read RDB block 7 [ 1608.517113][ T7266] loop2: AHDI p1 p2 p3 [ 1608.552751][ T7266] loop2: partition table partially beyond EOD, truncated [ 1608.561618][ T7266] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1608.573433][ T7266] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1608.575861][T27655] usb 1-1: USB disconnect, device number 9 [ 1608.594671][ T5692] usb 2-1: Using ep0 maxpacket: 32 [ 1608.604146][ T5692] usb 2-1: config 144 has an invalid descriptor of length 177, skipping remainder of the config [ 1608.639775][ T5692] usb 2-1: config 144 has 0 interfaces, different from the descriptor's value: 3 [ 1608.664028][ T5692] usb 2-1: New USB device found, idVendor=041e, idProduct=3237, bcdDevice= 0.40 [ 1608.689217][ T7267] fido_id[7267]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1608.691795][ T5692] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1608.747832][ T5692] usb 2-1: Product: syz [ 1608.757291][ T5692] usb 2-1: Manufacturer: syz [ 1608.758833][ T7275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1608.771259][ T5692] usb 2-1: SerialNumber: syz [ 1608.823855][ T5692] usb 2-1: rejected 1 configuration due to insufficient available bus power [ 1608.843042][ T7277] fuse: Unknown parameter 'A勺tY]ɨ&nG$a5+o5*0!h14T5~Uo|痩΍IRP!5Gp @pݽBN0Pc8א' [ 1608.858291][ T5692] usb 2-1: no configuration chosen from 1 choice [ 1608.861635][ T7275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1608.893893][ T7275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1608.917156][ T7275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1608.942065][ T7275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1608.966519][ T7275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1608.985228][ T7275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1609.005816][ T7275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1609.034761][ T7275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1609.046812][ T7275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1609.059507][ T7275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1609.071661][ T7275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1609.317105][T27657] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1609.395533][ T7293] bond4: entered promiscuous mode [ 1609.410404][ T7293] bond4: (slave vlan3): Opening slave failed [ 1609.475718][T27657] usb 1-1: device descriptor read/64, error -71 [ 1609.747033][T27657] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1609.897955][T27657] usb 1-1: device descriptor read/64, error -71 [ 1609.977056][ T5692] usb 10-1: new high-speed USB device number 52 using dummy_hcd [ 1610.022317][T27657] usb usb1-port1: attempt power cycle [ 1610.108289][ T5692] usb 10-1: device descriptor read/64, error -71 [ 1610.369045][ T5692] usb 10-1: new high-speed USB device number 53 using dummy_hcd [ 1610.398038][T27657] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1610.451066][T27657] usb 1-1: device descriptor read/8, error -71 [ 1610.547220][ T5692] usb 10-1: device descriptor read/64, error -71 [ 1610.614778][ T7352] bond3: entered promiscuous mode [ 1610.667436][ T5692] usb usb10-port1: attempt power cycle [ 1610.733990][T27657] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1610.779302][T27657] usb 1-1: device descriptor read/8, error -71 [ 1610.827514][T27655] usb 9-1: new full-speed USB device number 49 using dummy_hcd [ 1610.886058][ T1828] Bluetooth: hci3: unexpected event for opcode 0x0c59 [ 1610.898958][T27657] usb usb1-port1: unable to enumerate USB device [ 1610.921675][ T5630] usb 2-1: USB disconnect, device number 123 [ 1610.998742][T27655] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 1611.025899][T27655] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 1611.037628][ T5692] usb 10-1: new high-speed USB device number 54 using dummy_hcd [ 1611.076264][T27655] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1611.099424][ T5692] usb 10-1: device descriptor read/8, error -71 [ 1611.119973][T27655] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1611.145033][T27655] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1611.161611][T27655] usb 9-1: Product: syz [ 1611.170697][T27655] usb 9-1: Manufacturer: syz [ 1611.179748][T27655] usb 9-1: SerialNumber: syz [ 1611.193697][T27655] usb 9-1: config 0 descriptor?? [ 1611.213085][T27655] usb 9-1: selecting invalid altsetting 0 [ 1611.348946][ T5692] usb 10-1: new high-speed USB device number 55 using dummy_hcd [ 1611.387021][T27657] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1611.411725][ T5692] usb 10-1: device descriptor read/8, error -71 [ 1611.427328][ T7351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1611.438752][ T7351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1611.527666][ T5692] usb usb10-port1: unable to enumerate USB device [ 1611.538898][T27657] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1611.560441][T27657] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1611.616740][T27657] usb 2-1: config 0 descriptor?? [ 1611.635723][T27657] cp210x 2-1:0.0: cp210x converter detected [ 1611.970618][ T7375] netlink: 'syz.0.11119': attribute type 1 has an invalid length. [ 1611.981967][ T7376] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11119'. [ 1612.036551][T27657] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1612.121069][T27657] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1612.263799][ T7386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1612.301765][ T7365] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11115'. [ 1612.324445][ T5692] usb 2-1: USB disconnect, device number 124 [ 1612.343968][ T5692] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1612.353905][ T7386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1612.372579][ T5692] cp210x 2-1:0.0: device disconnected [ 1612.763993][ T7391] netlink: 24 bytes leftover after parsing attributes in process `syz.9.11123'. [ 1612.840336][ T7380] misc userio: Invalid payload size [ 1612.924678][ T7399] vlan2: entered promiscuous mode [ 1612.930029][ T7399] bridge0: entered promiscuous mode [ 1612.950659][ T7401] bridge0: port 2(bridge_slave_1) entered disabled state [ 1612.958461][ T7401] bridge0: port 1(bridge_slave_0) entered disabled state [ 1612.975211][ T7401] bridge0: entered allmulticast mode [ 1613.091897][ T7407] bridge_slave_1: left allmulticast mode [ 1613.101286][ T7407] bridge_slave_1: left promiscuous mode [ 1613.114731][ T7407] bridge0: port 2(bridge_slave_1) entered disabled state [ 1613.130694][ T7407] bridge_slave_0: left allmulticast mode [ 1613.136676][ T7407] bridge_slave_0: left promiscuous mode [ 1613.146429][ T7407] bridge0: port 1(bridge_slave_0) entered disabled state [ 1613.307043][T27657] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1613.568232][T27657] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1613.593711][T27657] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1613.624896][ T8901] usb 9-1: USB disconnect, device number 49 [ 1613.638658][T27657] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1613.655197][T27657] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1613.672272][T27657] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1613.721765][T27657] usb 2-1: config 0 descriptor?? [ 1613.766916][ T7415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1613.814912][ T7415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1613.851522][ T7415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1613.883034][ T7415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1614.002701][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 1614.002725][ T29] audit: type=1400 audit(1778121190.668:8864): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AAE86AD47AA0D9495E6D80F7BDE2D18FFB36CF152AED2D408FB58E305FC8E2F2F7D91F81B621CC4214D4A27E1614FBEE0BEAC8F4A045070B770212D46D4A2DF096B791F2A4BA218E12CB76AA24945B70A7C9DD5EDEAC52B5A876F73CFBE66371A72F11F3D9544D6B59B4A5541DCEF5CBF11FFFF37DFD147CCA3E5098A207BE806EA7167101F8C1B5C8FE41E170FD0C775DBC5BE0B6D3AB625AB702E5B1DC15F9C4B3D09BE812F340E681E0694F5BADF640DA3FDFC2F929B4C2BEB9A592C577287B6021BFEEC24146C7F95608BB60A736207A09D9F47E89C4044EADDE57CDEFD15F25B822D2EAF2205DF0D6B71B63EE0B63CB598F26509AF36983578F6F4198A0843CC1B1BD780015007AB9709CC6211E3B5C685B972B5C5E95F054A7A9FE149282F679C8466B9734E3850EC98419DD0C887715902F9E7802842085BC606F30C2654869E9E3701FD0FC69137FE165592689465EEBD5CAFAD7C29DE2ADADEC42A818D8EE389CA1FE33A1EF23617C89116A3A458B56612E4C36C43A9150D5331ADBB0BEB01A062B1F1349FC2ECEA76CB7C40CDFE378185F3099B1D71414D0FDA5A47F8593260CC0BD723A4CCA81435F0 [ 1614.148657][ T7406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1614.268043][ T7406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1614.291813][T27657] plantronics 0003:047F:FFFF.00A0: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1614.317286][ T1972] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1614.406051][ T5630] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 1614.488160][ T1972] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1614.500604][ T1972] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1614.502530][T27657] usb 2-1: USB disconnect, device number 125 [ 1614.510827][ T1972] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1614.528461][ T1972] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1614.549501][ T7419] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1614.576868][ T1972] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1614.585942][ T5630] usb 9-1: Using ep0 maxpacket: 16 [ 1614.606222][ T5630] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice= 0.40 [ 1614.637332][ T5630] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1614.671387][ T5630] usb 9-1: Product: syz [ 1614.684897][ T5630] usb 9-1: Manufacturer: syz [ 1614.705572][ T5630] usb 9-1: SerialNumber: syz [ 1614.782115][T27655] usb 1-1: USB disconnect, device number 14 [ 1614.943591][ T5630] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1614.976296][ T5630] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 1614.988122][ T5630] usb 9-1: USB disconnect, device number 50 [ 1615.003541][ T2216] udevd[2216]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1615.140816][ T7439] loop8: detected capacity change from 0 to 8 [ 1615.151445][ T7439] Dev loop8: unable to read RDB block 8 [ 1615.158967][ T7439] loop8: unable to read partition table [ 1615.165271][ T7439] loop8: partition table beyond EOD, truncated [ 1615.172380][ T7439] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1615.301407][ T7447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1615.311662][ T7447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1615.382304][ T7449] bond5: entered promiscuous mode [ 1615.439852][ T7453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11146'. [ 1615.451277][ T7453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11146'. [ 1615.614623][ T29] audit: type=1326 audit(1778121192.278:8865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7458 comm="syz.1.11149" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bb199cdd9 code=0x7ffc0000 [ 1615.649198][ T29] audit: type=1326 audit(1778121192.278:8866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7458 comm="syz.1.11149" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bb199cdd9 code=0x7ffc0000 [ 1615.674069][ T29] audit: type=1326 audit(1778121192.318:8867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7458 comm="syz.1.11149" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bb199cdd9 code=0x7ffc0000 [ 1615.698629][ T29] audit: type=1326 audit(1778121192.318:8868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7458 comm="syz.1.11149" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bb199cdd9 code=0x7ffc0000 [ 1615.725459][ T29] audit: type=1326 audit(1778121192.318:8869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7458 comm="syz.1.11149" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6bb199cdd9 code=0x7ffc0000 [ 1615.750041][ T29] audit: type=1326 audit(1778121192.318:8870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7458 comm="syz.1.11149" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bb199cdd9 code=0x7ffc0000 [ 1615.777104][ T29] audit: type=1326 audit(1778121192.318:8872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7458 comm="syz.1.11149" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6bb195d60e code=0x7ffc0000 [ 1615.802074][ T29] audit: type=1326 audit(1778121192.318:8873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7458 comm="syz.1.11149" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bb199cdd9 code=0x7ffc0000 [ 1615.827255][ T29] audit: type=1326 audit(1778121192.318:8874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7458 comm="syz.1.11149" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bb199cdd9 code=0x7ffc0000 [ 1615.917112][T27655] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 1616.073178][ T7467] netlink: 164 bytes leftover after parsing attributes in process `syz.3.11151'. [ 1616.102704][T27655] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1616.112351][T27655] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1616.123970][T27655] usb 9-1: config 1 has no interface number 0 [ 1616.130791][T27655] usb 9-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1616.142870][T27655] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 1616.154237][T27655] usb 9-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 1616.218033][T27655] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 1616.229289][T27657] usb 2-1: new low-speed USB device number 126 using dummy_hcd [ 1616.267267][T27655] usb 9-1: New USB device found, idVendor=17cc, idProduct=1978, bcdDevice= 0.40 [ 1616.278222][T27655] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1616.293782][T27655] usb 9-1: Product: syz [ 1616.303458][T27655] usb 9-1: Manufacturer: syz [ 1616.314744][T27655] usb 9-1: SerialNumber: syz [ 1616.397841][ T7472] bond6: (slave bond_slave_1): Device is not our slave [ 1616.405054][ T7472] bond6: option active_slave: invalid value (bond_slave_1) [ 1616.419810][T27657] usb 2-1: Invalid ep0 maxpacket: 64 [ 1616.435154][ T7472] bond6 (unregistering): Released all slaves [ 1616.561832][T27657] usb 2-1: new low-speed USB device number 127 using dummy_hcd [ 1616.602128][ T7461] syzkaller0: entered promiscuous mode [ 1616.618574][ T7461] syzkaller0: entered allmulticast mode [ 1616.667170][ T7461] netlink: 28 bytes leftover after parsing attributes in process `syz.8.11150'. [ 1616.692047][ T7461] netlink: 28 bytes leftover after parsing attributes in process `syz.8.11150'. [ 1616.840358][T27657] usb 2-1: Invalid ep0 maxpacket: 64 [ 1616.880179][T27657] usb usb2-port1: attempt power cycle [ 1616.893700][ T7478] loop8: detected capacity change from 0 to 8 [ 1616.918552][ T7478] Dev loop8: unable to read RDB block 8 [ 1616.927280][ T7478] loop8: unable to read partition table [ 1616.934633][ T7478] loop8: partition table beyond EOD, truncated [ 1616.941871][ T7478] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1617.247139][T27657] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 1617.272471][T27655] usb 9-1: 1:0 : does not exist [ 1617.284095][T27655] usb 9-1: BAAD SPEAKERPHONE c_chmask mismatch [ 1617.292794][T27657] usb 2-1: Invalid ep0 maxpacket: 64 [ 1617.373397][T27655] snd-usb-audio 9-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 1617.386754][T27655] snd-usb-caiaq 9-1:1.1: can't set alt interface. [ 1617.395504][T27655] usb 9-1: unable to init card! (ret=-5) [ 1617.422755][T27655] snd-usb-caiaq 9-1:1.1: probe with driver snd-usb-caiaq failed with error -5 [ 1617.434477][T27655] snd-usb-caiaq 9-1:1.2: can't set alt interface. [ 1617.441260][T27657] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 1617.450273][T27655] usb 9-1: unable to init card! (ret=-5) [ 1617.456464][T27655] snd-usb-caiaq 9-1:1.2: probe with driver snd-usb-caiaq failed with error -5 [ 1617.471288][T27657] usb 2-1: Invalid ep0 maxpacket: 64 [ 1617.482357][T27655] usb 9-1: USB disconnect, device number 51 [ 1617.495133][T27657] usb usb2-port1: unable to enumerate USB device [ 1617.533074][ T2216] udevd[2216]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1617.758226][ T7484] netlink: 14 bytes leftover after parsing attributes in process `syz.0.11156'. [ 1618.885483][ T7510] bond7: (slave bond_slave_1): Device is not our slave [ 1618.915773][ T7510] bond7: option active_slave: invalid value (bond_slave_1) [ 1618.939571][ T7510] bond7 (unregistering): Released all slaves [ 1618.993687][ T7516] syzkaller0: entered promiscuous mode [ 1619.003862][ T7516] syzkaller0: entered allmulticast mode [ 1619.092504][ T7512] tipc: Enabled bearer , priority 0 [ 1619.207514][ T1972] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 1619.347669][T27655] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1619.389114][ T1972] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 26 [ 1619.407083][ T1972] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1619.427277][ T1972] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1619.446914][ T1972] usb 2-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice=23.00 [ 1619.495560][ T1972] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1619.509712][T27655] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1619.524348][ T1972] usb 2-1: config 0 descriptor?? [ 1619.529812][T27655] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1619.557566][T27655] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1619.583514][T27655] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 1619.612149][ T7507] tipc: Resetting bearer [ 1619.620735][T27655] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 1619.638311][ T7528] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11169'. [ 1619.693559][T27655] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1619.714076][T27655] usb 1-1: config 1 interface 1 has no altsetting 0 [ 1619.722438][ T7507] tipc: Disabling bearer [ 1619.731774][T27655] usb 1-1: string descriptor 0 read error: -22 [ 1619.738373][T27655] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1619.767275][T27655] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1619.987080][ T1972] usbhid 2-1:0.0: can't add hid device: -71 [ 1620.011707][ T1972] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1620.065206][ T1972] usb 2-1: USB disconnect, device number 4 [ 1620.199409][ T7537] loop8: detected capacity change from 0 to 1 [ 1620.217130][ T7537] Dev loop8: unable to read RDB block 1 [ 1620.233975][ T7537] loop8: unable to read partition table [ 1620.249072][ T7537] loop8: partition table beyond EOD, truncated [ 1620.265239][ T7537] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1620.375393][ T7539] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11174'. [ 1620.657036][T27657] usb 10-1: new high-speed USB device number 56 using dummy_hcd [ 1620.740696][ T7547] bond6: (slave bond_slave_1): Device is not our slave [ 1620.747922][ T7547] bond6: option active_slave: invalid value (bond_slave_1) [ 1620.756578][ T7547] bond6 (unregistering): Released all slaves [ 1620.827064][T27657] usb 10-1: Using ep0 maxpacket: 16 [ 1620.877640][T27657] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1620.897176][T27657] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1620.927213][T27657] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1620.941257][T27657] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1620.953392][T27655] usb 1-1: USB disconnect, device number 15 [ 1620.971272][T27657] usb 10-1: config 0 descriptor?? [ 1620.991213][T27657] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 1621.203998][ T7542] netlink: 16 bytes leftover after parsing attributes in process `syz.9.11175'. [ 1621.347141][ T1972] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 1621.477281][ T1987] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1621.508289][ T1972] usb 9-1: Using ep0 maxpacket: 8 [ 1621.515446][ T1972] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1621.527888][ T1972] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1621.544105][ T1972] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1621.558607][ T1972] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1621.581042][ T1972] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1621.594777][ T7562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1621.609406][ T1972] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1621.618288][ T7562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1621.629653][ T1987] usb 2-1: Using ep0 maxpacket: 8 [ 1621.638937][ T1987] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 1621.660981][ T1987] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1621.674454][ T1987] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1621.693066][ T1987] usb 2-1: Product: syz [ 1621.701689][ T1987] usb 2-1: Manufacturer: syz [ 1621.709040][ T1987] usb 2-1: SerialNumber: syz [ 1621.726716][ T1987] usb 2-1: config 0 descriptor?? [ 1621.735059][ T1987] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1621.743642][ T1987] usb 2-1: setting power ON [ 1621.749608][ T1987] dvb-usb: bulk message failed: -22 (2/0) [ 1621.762182][ T1987] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1621.780079][ T1987] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1621.789391][ T1987] usb 2-1: media controller created [ 1621.812759][ T1987] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1621.852344][ T1987] usb 2-1: selecting invalid altsetting 6 [ 1621.860165][ T1972] usb 9-1: GET_CAPABILITIES returned 0 [ 1621.867611][ T1972] usbtmc 9-1:16.0: can't read capabilities [ 1621.878330][ T1987] usb 2-1: digital interface selection failed (-22) [ 1621.892190][ T1987] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1621.902518][ T1987] usb 2-1: setting power OFF [ 1621.907516][ T1987] dvb-usb: bulk message failed: -22 (2/0) [ 1621.921151][ T1987] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1621.949663][ T1987] (NULL device *): no alternate interface [ 1621.990914][ T1987] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1622.016038][ T1987] usb 2-1: USB disconnect, device number 5 [ 1622.114155][ T7567] Cannot find del_set index 0 as target [ 1622.138475][ T7553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1622.148403][ T7553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1622.159906][ T1972] usb 9-1: USB disconnect, device number 52 [ 1622.561098][ T7573] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11185'. [ 1622.608542][ T7575] netlink: 'syz.1.11186': attribute type 15 has an invalid length. [ 1622.750235][ T7580] Cannot find add_set index 0 as target [ 1622.867870][ T7584] loop8: detected capacity change from 0 to 1 [ 1622.894865][ T7584] Dev loop8: unable to read RDB block 1 [ 1622.920221][ T7584] loop8: unable to read partition table [ 1622.942429][ T7584] loop8: partition table beyond EOD, truncated [ 1622.962092][ T7584] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1623.369639][ T7593] bond4: (slave bond_slave_1): Device is not our slave [ 1623.405644][ T7593] bond4: option active_slave: invalid value (bond_slave_1) [ 1623.458424][T27655] usb 10-1: USB disconnect, device number 56 [ 1623.478640][ T7593] bond4 (unregistering): Released all slaves [ 1623.600652][ T7607] netlink: 12 bytes leftover after parsing attributes in process `syz.8.11194'. [ 1623.648513][ T7608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11195'. [ 1623.690124][ T7608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11195'. [ 1623.707599][ T7609] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11196'. [ 1623.804224][ T7609] netlink: 20 bytes leftover after parsing attributes in process `syz.9.11196'. [ 1623.817721][ T7612] tipc: Enabled bearer , priority 0 [ 1623.879818][ T7612] syzkaller0: entered promiscuous mode [ 1623.905335][ T7612] syzkaller0: entered allmulticast mode [ 1623.914239][ T7603] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 1623.960874][ T7612] tipc: Resetting bearer [ 1624.053013][ T7611] tipc: Resetting bearer [ 1624.129192][ T7611] tipc: Disabling bearer [ 1624.262827][ T29] kauditd_printk_skb: 157 callbacks suppressed [ 1624.262839][ T29] audit: type=1800 audit(1778121200.928:9031): pid=7620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.11201" name="bus" dev="tmpfs" ino=1694 res=0 errno=0 [ 1624.384598][ T7618] bond7: entered promiscuous mode [ 1624.753064][ T7632] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11203'. [ 1624.786264][ T7635] netlink: 32 bytes leftover after parsing attributes in process `syz.9.11204'. [ 1625.324978][ T1987] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1625.590575][ T1987] usb 1-1: Using ep0 maxpacket: 32 [ 1625.981859][ T1987] usb 1-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1626.028961][ T1987] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1626.624971][ T1987] usb 1-1: Product: syz [ 1627.242094][ T1987] usb 1-1: Manufacturer: syz [ 1627.246741][ T1987] usb 1-1: SerialNumber: syz [ 1669.667327][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.713328][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.357423][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.370820][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 1777.736956][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1777.743942][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7628/1:b..l [ 1777.752486][ C1] rcu: (detected by 1, t=10503 jiffies, g=333313, q=1209 ncpus=2) [ 1777.760397][ C1] task:syz.9.11204 state:R running task stack:24408 pid:7628 tgid:7628 ppid:1830 task_flags:0x400040 flags:0x00080002 [ 1777.775592][ C1] Call Trace: [ 1777.778878][ C1] [ 1777.781824][ C1] __schedule+0x17b4/0x5680 [ 1777.786371][ C1] ? kernel_text_address+0xa5/0xe0 [ 1777.791497][ C1] ? __pfx___schedule+0x10/0x10 [ 1777.796363][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1777.801312][ C1] preempt_schedule_irq+0x4d/0xa0 [ 1777.806344][ C1] irqentry_exit+0x14f/0x730 [ 1777.810927][ C1] ? trace_irq_disable+0x3b/0x140 [ 1777.815973][ C1] asm_sysvec_call_function_single+0x1a/0x20 [ 1777.821963][ C1] RIP: 0010:page_ext_lookup+0x90/0x180 [ 1777.827440][ C1] Code: 74 0c 48 c7 c7 00 8a 4a 9a e8 fc 7d f4 ff 48 8b 05 15 0d 0e 18 48 85 c0 74 36 4e 8d 34 f0 4c 89 f0 48 c1 e8 03 42 80 3c 28 00 <74> 08 4c 89 f7 e8 d6 7d f4 ff 4d 8b 36 4d 85 f6 74 1b 48 c1 eb 0f [ 1777.847058][ C1] RSP: 0018:ffffc900060a79c8 EFLAGS: 00000246 [ 1777.853151][ C1] RAX: 1ffff11047ffc600 RBX: 0000000000091d66 RCX: ffff88805385bd80 [ 1777.861142][ C1] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000000000000 [ 1777.869132][ C1] RBP: 0000000000000000 R08: ffffffff823abdde R09: ffffffff8e95cd60 [ 1777.877118][ C1] R10: 000000000000000d R11: ffffffff81b0e910 R12: 0000000000091d66 [ 1777.885097][ C1] R13: dffffc0000000000 R14: ffff88823ffe3000 R15: 0000000000001000 [ 1777.893077][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1777.899239][ C1] ? __update_page_owner_free_handle+0x2e/0x470 [ 1777.905496][ C1] ? page_ext_lookup+0x4d/0x180 [ 1777.910347][ C1] ? __update_page_owner_free_handle+0x2e/0x470 [ 1777.916624][ C1] __update_page_owner_free_handle+0x103/0x470 [ 1777.922802][ C1] ? page_ext_put+0x97/0xc0 [ 1777.927324][ C1] __reset_page_owner+0x85/0x1f0 [ 1777.932281][ C1] __free_frozen_pages+0xbc7/0xd30 [ 1777.937408][ C1] ? ___free_pages+0x9a/0x1b0 [ 1777.942107][ C1] vfree+0x1d1/0x2f0 [ 1777.946005][ C1] ? __pfx_vb2_vmalloc_put+0x10/0x10 [ 1777.951283][ C1] vb2_vmalloc_put+0x68/0xb0 [ 1777.955889][ C1] __vb2_buf_mem_free+0x119/0x2d0 [ 1777.960916][ C1] __vb2_queue_free+0x414/0xb00 [ 1777.965783][ C1] vb2_core_queue_release+0x6b/0x150 [ 1777.971066][ C1] vb2_fop_release+0x16e/0x200 [ 1777.975843][ C1] v4l2_release+0x250/0x370 [ 1777.980367][ C1] ? __pfx_v4l2_release+0x10/0x10 [ 1777.985394][ C1] __fput+0x44f/0xa60 [ 1777.989383][ C1] task_work_run+0x1d9/0x270 [ 1777.993993][ C1] ? __pfx_task_work_run+0x10/0x10 [ 1777.999125][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1778.005197][ C1] exit_to_user_mode_loop+0xed/0x480 [ 1778.010474][ C1] ? rcu_is_watching+0x15/0xb0 [ 1778.015248][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1778.021324][ C1] do_syscall_64+0x33e/0xf80 [ 1778.025918][ C1] ? trace_irq_disable+0x3b/0x140 [ 1778.030936][ C1] ? clear_bhb_loop+0x40/0x90 [ 1778.035623][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1778.041525][ C1] RIP: 0033:0x7fa913d9cdd9 [ 1778.045956][ C1] RSP: 002b:00007fa91413fba8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1778.054360][ C1] RAX: 0000000000000000 RBX: 00007fa914017da0 RCX: 00007fa913d9cdd9 [ 1778.062356][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1778.070340][ C1] RBP: 00007fa914017da0 R08: 0000000000000006 R09: 0000000000000000 [ 1778.078327][ C1] R10: 00007fa914017cb0 R11: 0000000000000246 R12: 000000000018cd38 [ 1778.086310][ C1] R13: 00007fa91401627c R14: 000000000018ccce R15: 00007fa914016270 [ 1778.094310][ C1] [ 1778.097340][ C1] rcu: rcu_preempt kthread starved for 7997 jiffies! g333313 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1778.108551][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1778.118530][ C1] rcu: RCU grace-period kthread stack dump: [ 1778.124417][ C1] task:rcu_preempt state:R running task stack:27536 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1778.137880][ C1] Call Trace: [ 1778.141200][ C1] [ 1778.144132][ C1] __schedule+0x17b4/0x5680 [ 1778.148628][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1778.153603][ C1] ? __pfx___schedule+0x10/0x10 [ 1778.158473][ C1] ? schedule+0x90/0x360 [ 1778.162730][ C1] schedule+0x164/0x360 [ 1778.166903][ C1] schedule_timeout+0x158/0x2c0 [ 1778.171765][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1778.177148][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1778.182449][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1778.188267][ C1] ? prepare_to_swait_event+0x340/0x370 [ 1778.193822][ C1] rcu_gp_fqs_loop+0x312/0x11d0 [ 1778.198677][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1778.204853][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1778.210160][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1778.215377][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1778.221202][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 1778.225802][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1778.230989][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1778.236810][ C1] ? __kthread_parkme+0x7a/0x1f0 [ 1778.241763][ C1] ? __kthread_parkme+0x19c/0x1f0 [ 1778.246800][ C1] kthread+0x388/0x470 [ 1778.250885][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1778.256092][ C1] ? __pfx_kthread+0x10/0x10 [ 1778.260683][ C1] ret_from_fork+0x514/0xb70 [ 1778.265286][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1778.270408][ C1] ? __switch_to+0xc79/0x1410 [ 1778.275089][ C1] ? __pfx_kthread+0x10/0x10 [ 1778.279673][ C1] ret_from_fork_asm+0x1a/0x30 [ 1778.284462][ C1] [ 1778.287489][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1778.293814][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1778.299014][ C0] NMI backtrace for cpu 0 [ 1778.299033][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1778.299075][ C0] Tainted: [L]=SOFTLOCKUP [ 1778.299088][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1778.299107][ C0] RIP: 0010:ip6_input+0x16c/0x270 [ 1778.299150][ C0] Code: 3c 2f 00 74 08 48 89 df e8 01 b0 de f7 49 8b 4e 10 bf 01 00 00 00 4c 89 e6 4c 89 f2 49 c7 c0 10 4c 52 8a e8 96 c6 ff ff 89 c5 8f ff 55 01 41 89 c6 31 ff 89 c6 e8 a3 78 73 f7 45 85 f6 74 10 [ 1778.299164][ C0] RSP: 0018:ffffc90000007a80 EFLAGS: 00000246 [ 1778.299178][ C0] RAX: 0000000000000000 RBX: ffff8881ba367150 RCX: ffffffff8e692ec0 [ 1778.299189][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000001 [ 1778.299199][ C0] RBP: 0000000000000000 R08: ffffffff8e692ec0 R09: 0000000000000004 [ 1778.299210][ C0] R10: 0000000000000003 R11: 0000000000000100 R12: ffff888052110000 [ 1778.299220][ C0] R13: dffffc0000000000 R14: ffff8881ba367140 R15: 1ffff1103746ce2a [ 1778.299232][ C0] FS: 0000000000000000(0000) GS:ffff888125290000(0000) knlGS:0000000000000000 [ 1778.299245][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1778.299256][ C0] CR2: 0000555559a374e8 CR3: 00000000614e0000 CR4: 00000000003526f0 [ 1778.299270][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000036 [ 1778.299279][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1778.299289][ C0] Call Trace: [ 1778.299296][ C0] [ 1778.299302][ C0] ? ip6_input+0x23/0x270 [ 1778.299323][ C0] NF_HOOK+0x336/0x3c0 [ 1778.299343][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1778.299362][ C0] ? NF_HOOK+0x9e/0x3c0 [ 1778.299381][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1778.299401][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1778.299425][ C0] ? process_backlog+0x3eb/0x1950 [ 1778.299442][ C0] process_backlog+0x7dd/0x1950 [ 1778.299467][ C0] __napi_poll+0xae/0x340 [ 1778.299482][ C0] ? skb_defer_free_flush+0x233/0x260 [ 1778.299499][ C0] net_rx_action+0x627/0xf70 [ 1778.299523][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1778.299553][ C0] handle_softirqs+0x22a/0x840 [ 1778.299571][ C0] ? __irq_exit_rcu+0xca/0x220 [ 1778.299589][ C0] __irq_exit_rcu+0xca/0x220 [ 1778.299605][ C0] irq_exit_rcu+0x9/0x30 [ 1778.299618][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1778.299637][ C0] [ 1778.299643][ C0] [ 1778.299649][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1778.299665][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1778.299683][ C0] Code: 0b 7e 02 e9 93 f6 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 21 21 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1778.299695][ C0] RSP: 0018:ffffffff8e607dc0 EFLAGS: 00000242 [ 1778.299708][ C0] RAX: 000000000392a275 RBX: ffffffff819a91ea RCX: 0000000080000001 [ 1778.299719][ C0] RDX: 0000000000000001 RSI: ffffffff8dfa5b55 RDI: ffffffff8c28ace0 [ 1778.299729][ C0] RBP: ffffffff8e607eb0 R08: ffff8880b86339db R09: 1ffff110170c673b [ 1778.299740][ C0] R10: dffffc0000000000 R11: ffffed10170c673c R12: 0000000000000000 [ 1778.299751][ C0] R13: 1ffffffff1cd25d8 R14: 0000000000000000 R15: 1ffffffff1cd25d8 [ 1778.299763][ C0] ? do_idle+0x36a/0x5f0 [ 1778.299784][ C0] default_idle+0x9/0x20 [ 1778.299802][ C0] default_idle_call+0x72/0xb0 [ 1778.299822][ C0] do_idle+0x36a/0x5f0 [ 1778.299841][ C0] ? __pfx_do_idle+0x10/0x10 [ 1778.299861][ C0] cpu_startup_entry+0x43/0x60 [ 1778.299878][ C0] rest_init+0x2de/0x300 [ 1778.299893][ C0] start_kernel+0x38a/0x3e0 [ 1778.299964][ C0] x86_64_start_reservations+0x24/0x30 [ 1778.299981][ C0] x86_64_start_kernel+0x143/0x1c0 [ 1778.299997][ C0] common_startup_64+0x13e/0x147 [ 1778.300024][ C0]