last executing test programs: 3m2.048361987s ago: executing program 0 (id=1): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000380), &(0x7f0000000440)=0x4) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sync_file_range(r2, 0xe, 0x0, 0x5) socket$inet(0x2, 0xa, 0x0) openat$vim2m(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x153, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x7f, 0x40000006}, 0x3c) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) (fail_nth: 1) 3m0.911067061s ago: executing program 0 (id=9): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) 3m0.50040726s ago: executing program 0 (id=11): openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x203a2, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf4a, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4043, 0x8a, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, 0x1}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x10d}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x617d, 0x8, 0x2000, 0x10000004, 0x0, r6}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1, 0x401f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x400, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xffb9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r8 = fcntl$getown(r7, 0x9) wait4(r8, &(0x7f00000000c0), 0x1000000, &(0x7f0000000780)) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000500)={0x0, 0x30b5, 0x0, 0x2, 0x377}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r9, r10, r11, r12, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x6, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) r15 = dup(r14) syz_ublk_setup_queues(r15, r13, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0xfffffffd, 0x32c}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ac7, 0x8000, 0x10000000, 0x546}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xfffffffc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r15, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x3, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 2m59.010445478s ago: executing program 0 (id=14): r0 = socket$tipc(0x1e, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE2(r1, &(0x7f0000001000)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x1d, 0x5, 0x57e, 0x306, 0x3, 0xfffffffc, "05010905a10105091901290a150025017501950a8102950175068103c0"}}, 0x135) syz_usb_connect$midi(0x5, 0x2b, &(0x7f0000000480)=ANY=[@ANYBLOB="12010002000000088c0d0c004000010203010902"], 0x0) write$UHID_INPUT2(r1, &(0x7f00000006c0)={0xc, {0xffffffffffffff1b, "20004c5bf5728f4da8d3b8bc4809003bacc76ed0e2658bde53c03f38f04f0cbdc966a2f9ffffffffffffff8caa5badb5188b0d9625214b26ef050000006974968c291d18b907b63cff836b5f0da56bf961417effa188c8b62b14216ee04e8827e961d796019b01f97320e6f1f2d1889f5ef5bdb4960668a645989dd4595a41489d8847c736a0a7e76e5c1a782ba65ef15d8b8c2f04c6d87c426ee6b79830e4a948ba87792936d3c41e52e7cd532ee6e3263f377f73ddb4a710468e6258a3768385c3e849afc705f23bb46c12935234ee5a1a9b28de11fb390ed85701653816b5c3fbbfc93dccc4158af5b16af1ed26c43f873fa55a9b0c66e6eef0dccfee9b7890a82a6f80733c357e5ae8d1553798673993e5c1509b2a07b9df4489ebb665e357ff852dd639db2c318e652f75173f109b1c73321359a9953adff06af5136095b0bd49dd658944fb615f49c6974613af5c05d2afbcc63f31c14c660cf0452a482756dd3ba8acbee93edf8cc5955183e76f63bf81cbc2995be818ca2470726e6ce02f6d59cfc5966a15e73d98f120fb0f1a0ed0bc0e8afcd8a1e324001076299f660d13570d8c328051a6b48e620853d133335f80e4309d106f5111bb203d8adda5f31e402e20d61d4f7f5f00000000000000000000000046d17a1d379603d4ac51bea0791fc48e3ed5bc3fc0edb0ba519ff50b8fd4965fb353c06c83d1be238b1080882d2850a14cbd764791780c2fcc469c185538691ce6d621bee0d818d634b72a080b4d72eebe5022eb537a83941270b1462e1df7b9274dc558131a96d852a499ad9bc5235ef5"}}, 0x127) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(0xffffffffffffffff, 0x3ba0, &(0x7f00000000c0)={0x48}) sendmsg$tipc(r0, &(0x7f0000002340)={&(0x7f0000000000)=@id={0x1e, 0x3, 0x3, {0x4e22, 0x1}}, 0x10, 0x0}, 0x0) 2m44.911187833s ago: executing program 2 (id=23): unshare(0x36020780) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x100750, 0x2, 0x0, 'queue1\x00', 0x5}) fcntl$setown(r0, 0x8, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x3}}) close(r0) (async) unshare(0x40000000) (async) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0), 0x6481, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3a0) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r4 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000280)={'sit0\x00', 0x0}) (async) sendto$inet6(r3, &(0x7f0000000280)='0', 0xfffd, 0x4000854, &(0x7f0000000300)={0xa, 0x4e21, 0xbe7, @loopback, 0x800000c0}, 0x1c) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000000400)=[{{&(0x7f0000000000)={0xa, 0x0, 0x4, @loopback, 0xffffffff}, 0x1c, &(0x7f0000000700)=[{&(0x7f0000000440)="87", 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0xc}, 0xa}, 0x1c, &(0x7f0000000280)=[{0x0}], 0x1}}], 0x2, 0x48081) (async) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x9, 0x4, 0x81, 0xffffffff, 0xffffffff}) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid_for_children\x00') setns(r6, 0x0) shutdown(r4, 0x1) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000200)={0x0, 0x1}, 0x8) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000040)={0x1d, r8, 0x3, {0x0, 0x0, 0x5}, 0x1}, 0x18) (async) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) 2m43.828413676s ago: executing program 32 (id=14): r0 = socket$tipc(0x1e, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE2(r1, &(0x7f0000001000)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x1d, 0x5, 0x57e, 0x306, 0x3, 0xfffffffc, "05010905a10105091901290a150025017501950a8102950175068103c0"}}, 0x135) syz_usb_connect$midi(0x5, 0x2b, &(0x7f0000000480)=ANY=[@ANYBLOB="12010002000000088c0d0c004000010203010902"], 0x0) write$UHID_INPUT2(r1, &(0x7f00000006c0)={0xc, {0xffffffffffffff1b, "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"}}, 0x127) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(0xffffffffffffffff, 0x3ba0, &(0x7f00000000c0)={0x48}) sendmsg$tipc(r0, &(0x7f0000002340)={&(0x7f0000000000)=@id={0x1e, 0x3, 0x3, {0x4e22, 0x1}}, 0x10, 0x0}, 0x0) 2m42.123952898s ago: executing program 1 (id=29): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) syz_genetlink_get_family_id$mptcp(&(0x7f0000003800), 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 2m41.199435816s ago: executing program 1 (id=32): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x100010, r1, 0xa94000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x8, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x800, 0x5, 0xc000, 0xe, "006203000000000900001f00000c4005090f04"}) r3 = syz_open_pts(r2, 0xea283) r4 = dup3(r3, r2, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000040)='asymmetric\x00', 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0x0) r5 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r6 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r6, 0xc0405610, &(0x7f0000000080)={0xc, 0x5, 0xf497}) openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) read$FUSE(r4, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000940)={0x1e, 0x37, 0x1, {0x0, 0x8000000000000001, 0x0, r7}}, 0x1e) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000020c0), 0x2000413, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="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"/342]) syz_usb_connect$uac2(0x4, 0xb4, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x200c, 0x1018, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa2, 0x3, 0x1, 0x80, 0x0, 0x5, {0x8, 0xb, 0x0, 0x2, 0x1, 0x8, 0x20, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4, 0x6, 0x32}, [@source_unit={0x8, 0x24, 0xa, 0x0, 0x4, 0x5, 0x13, 0x1}, @mixer_unit={0xa, 0x24, 0x4, 0x2, 0x4, "1395841d79"}, @multiply_unit={0x7, 0x24, 0xc, 0x5, 0x2, 0x91, 0x9}, @input_terminal={0x10, 0x24, 0x2, 0x6, 0x405, 0x2, 0x0, 0x1, 0x4, 0x9, 0xa, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x3}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7, 0x15be, 0x9, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xb, 0x7f, 0x1, {0x8, 0x25, 0x1, 0x80, 0x6, 0x0, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x4, 0x9, 0xf, {0x8, 0x25, 0x1, 0x6be299d5efbe112d, 0xf, 0xf, 0x8}}}}}}}}]}}, &(0x7f0000000900)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x201, 0x9, 0xa, 0x8, 0xff, 0xe}, 0x111, &(0x7f00000006c0)={0x5, 0xf, 0x111, 0x6, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x5, 0x4, 0x8000, 0xf00, 0x8001, [0x3f00, 0xc0c0, 0x3f0f, 0x3f00]}, @ss_cap={0xa, 0x10, 0x3, 0xe97a7b44905da69c, 0xf, 0x80, 0xc8, 0xf}, @ptm_cap={0x3}, @generic={0xdd, 0x10, 0xb, "d8f54eef9e7da39ca185ac3866857ef5b2e0ce4c4278267b39dc447d1178fd533d564b10a39d7cb3c1f514fd74392ace15dcb78d88862bd29df659db8c5a43a92b26ad97859bd91219a98ab2d25a36b22ba28dfec7c95cde1b6ff93d221ccba31188ea1b2182fc954196c85be44d75d82b48e462c729de2d36d73097767c95ad5e709a60abb7b1374aed8dc069cd2976294c2f4827f991a99c50881a43a63cc9f467f45510bf36e7f57db67bd2e9ea8ce9eabdb84092fc5bcb40a20586396b3a014556f2f86dfa9f92233d32d08b4a4ba9f46d2bf36ce8dc41f5"}]}, 0x3, [{0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x2809}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x407}}, {0x67, &(0x7f0000000880)=@string={0x67, 0x3, "6f221b2f3bb01930eed1f9b15f503492594d0666a327a52dba4a098dcac275954187561538d12040bf3512329305aa1100859dd908c13a52f82b0ddeca8484e370217a1eaab107f2c45c3b5ea9b758ca1a7c14bb0d5d658b6f4c196b641bb53ce1e6282258"}}]}) syz_fuse_handle_req(r8, &(0x7f000000bb40)="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", 0x2000, &(0x7f00000001c0)={&(0x7f0000000000)={0x50, 0x0, 0x8000000000203, {0x7, 0x29, 0xcf940281, 0x782810a1, 0x1, 0x1a76, 0x4, 0x1801, 0x0, 0x0, 0x2, 0x2000009e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r8, &(0x7f00000042c0)="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", 0x2000, &(0x7f000000dcc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x78, 0x0, 0xa, {0xc, 0x0, 0x0, {0x4, 0x80800000009, 0x5f760000, 0x4, 0x40000000000003, 0xffbffffffffffffe, 0x0, 0x1, 0x0, 0xa593e9c1ca988eda, 0xfffffff8, 0x0, 0x0, 0x3d, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) write$FUSE_NOTIFY_STORE(r8, &(0x7f0000000400)=ANY=[@ANYBLOB="290000000400000000000000000000000100000000000000060000000000000001000000000000"], 0x29) syz_fuse_handle_req(r8, &(0x7f0000007b40)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x0, 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x1) ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000040)={0x7, 0x4, 0x2, 0xfff, 0x16, "e533991cd00ee11a"}) 2m39.263526272s ago: executing program 2 (id=35): r0 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x3d, [0x3, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x2, 0x1, 0x7f, 0xa, 0x4d, 0xfffffbf2, 0x5f, 0x0, 0x0, 0xffff2d37, 0x1dd2, 0x7, 0x7, 0x0, 0x80000001, 0x7, 0x7, 0x8, 0x3c5b, 0x1, 0x4000024, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x3, 0x51e, 0x4, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x0, 0x7, 0x7, 0x103, 0x4000000, 0x5, 0x1, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x4, 0x5, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x1, 0x1, 0x40], [0x10000007, 0x10002, 0x12b, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0xfffffff2, 0x1ff, 0x2, 0x3, 0x5, 0x16c, 0x10000005, 0x2f, 0xe, 0x313, 0xfee, 0xea4, 0xa, 0xd, 0x4, 0x80, 0x5, 0x400, 0x1, 0x8, 0x400001, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x29, 0x6, 0x1000007, 0xd, 0x0, 0x9, 0x8, 0x9, 0x7, 0x5, 0xfffffffd, 0x3, 0x8080, 0xffff, 0x100002, 0x7f, 0x9, 0x8, 0x3, 0x4, 0x1, 0x7, 0x6, 0xb, 0x48c93690, 0x2, 0xff], [0x4, 0x1, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d5, 0x9, 0x5, 0x9, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ee, 0x2, 0xb, 0x86, 0xb, 0x1000000b, 0x3e7, 0x100005, 0x5, 0x4, 0x40002, 0xf, 0x8, 0x84, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0xfffffffd, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x6, 0xba, 0x5, 0x4, 0x54fe12da, 0x0, 0x5, 0x3, 0x400000, 0xfffffff9, 0x8, 0x1, 0x5, 0x3, 0x6, 0xfffffffb, 0x120000, 0x3, 0xdb7e, 0x9, 0x4, 0x2], [0x9, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x938, 0x2, 0xd367, 0x51bf, 0x5, 0xce7, 0x5, 0x6, 0x7, 0x5, 0x3, 0x104, 0x80000000, 0x19a, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x1, 0x1, 0xfffff801, 0x8000014c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000006, 0x5, 0x8, 0xff, 0x3, 0x2, 0xffff, 0xfffffffd, 0x8, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b8e, 0x2, 0x8, 0x9, 0x21, 0x6c09, 0x0, 0x2, 0x1015, 0xb1c, 0x1, 0x7, 0xfff, 0xfff]}, 0x45c) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_io_uring_setup(0x6048, &(0x7f0000000040)={0x0, 0x0, 0x800, 0x0, 0x0, 0x0, r0}, &(0x7f0000000380)=0x0, &(0x7f0000000108)=0x0, &(0x7f0000000110)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1}}) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f00000001c0)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x6, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x10003, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2, 0x202, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x10000, 0x6, 0x1000, 0x5, 0x3d, 0x34, 0xbbe676b2, 0x6], [0x7, 0x1e, 0x3, 0x8000, 0x0, 0x3, 0x0, 0x25, 0x7, 0x5, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0xfffa, 0x6, 0x7ffd, 0x3, 0x3, 0x297, 0x5, 0x0, 0x981, 0x3, 0x0, 0x3ff, 0x2000000, 0xfffffffe, 0x8, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0x800000, 0x6, 0x2000008, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x43, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x80000001, 0x7, 0x200, 0x3], [0xfffffeef, 0x8000c584, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe88, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x10, 0x5, 0x4, 0x5, 0x200003, 0x5, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x80000000, 0x3, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x5, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0x7, 0x8, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x2, 0x5, 0x1000, 0x7f, 0x5, 0x3fa9, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x40, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f513f9, 0x4, 0x20008, 0x8a5, 0x86, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4, 0xfffffffd, 0xa, 0xe, 0x101, 0xf, 0x80, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r8, 0x5501) read(r8, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r10, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) ioctl$SIOCSIFHWADDR(r9, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) syz_usb_connect$uac1(0x3, 0x72, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x2b73, 0x1b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x9, 0x80, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x9, 0x5, 0x7, {0x7, 0x25, 0x1, 0x4, 0x45, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x7, 0x7, 0x6, {0x7, 0x25, 0x1, 0xc, 0x8, 0x6}}}}}}}}]}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="34000000140001002bbd7000fadbdf250a0801ff", @ANYRES32=r12, @ANYBLOB="14000200ff"], 0x34}, 0x1, 0x0, 0x0, 0x4008004}, 0x10080) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x1dcd6500}}) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000300)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) io_uring_enter(r3, 0x6, 0x0, 0x0, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000040)="e2", 0x918) ioctl$UI_DEV_DESTROY(r0, 0x5502) read$FUSE(r0, &(0x7f0000002880)={0x2020}, 0x2020) 2m35.732484328s ago: executing program 1 (id=39): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) write(0xffffffffffffffff, &(0x7f0000000200)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYRESHEX=0x0], 0xa8}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=']) fsetxattr(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='user.'], 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 2m35.682082907s ago: executing program 2 (id=40): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="600000001000010600000000020000000000000000000000000000000000001e0d0003006261726520f5181f4d85681a300012000c00010062617265756470002000020006000100b5120000060002"], 0x60}}, 0x8000) 2m35.089057587s ago: executing program 2 (id=43): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x110) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000000)="ab06500000f33b346f4c1fc1dd256d9b65b9bfad2b69749ab5fc1e81bc5fe53a1343dc20e7522f08143e5de16acf9fcbb4e07b9c97f1eb69b4c20363babfe45a5cfbaf496e45e85a0f899352f8294df406e34d9efc43a88748959224c4375bd17b298cc7d5201e5b4d556358d9014e1d850c68b69544be79b09e64dfb69d4a0d17d0768a894d50f1c7376a740ccac2fb9e89530ba38db46c1600812534a9c3", 0x9f}, {&(0x7f00000001c0)="efffffff", 0x4}, {&(0x7f0000000100)="e4", 0x1}], 0x3) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) chroot(&(0x7f0000000500)='./file0/../file0/../file0/../file0\x00') pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r4 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000500)={0x0, 0x30b5, 0x0, 0x2, 0x377}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x6, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0xfffffffd, 0x32c}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ac7, 0x8000, 0x10000000, 0x546}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xfffffffc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x3, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) 2m34.891241236s ago: executing program 1 (id=44): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x110) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000000)="ab06500000f33b346f4c1fc1dd256d9b65b9bfad2b69749ab5fc1e81bc5fe53a1343dc20e7522f08143e5de16acf9fcbb4e07b9c97f1eb69b4c20363babfe45a5cfbaf496e45e85a0f899352f8294df406e34d9efc43a88748959224c4375bd17b298cc7d5201e5b4d556358d9014e1d850c68b69544be79b09e64dfb69d4a0d17d0768a894d50f1c7376a740ccac2fb9e89530ba38db46c1600812534a9c3", 0x9f}, {&(0x7f00000001c0)="efffffff", 0x4}, {&(0x7f0000000100)="e4", 0x1}], 0x3) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) chroot(&(0x7f0000000500)='./file0/../file0/../file0/../file0\x00') pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r4 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000500)={0x0, 0x30b5, 0x0, 0x2, 0x377}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x6, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0xfffffffd, 0x32c}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ac7, 0x8000, 0x10000000, 0x546}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xfffffffc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x3, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) 2m33.689176289s ago: executing program 3 (id=45): unshare(0x20000400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) socket$kcm(0x11, 0x3, 0x0) socket(0x400000000010, 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x0, 0x1, 0x3}, 0x30, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) syz_open_dev$video(&(0x7f0000000200), 0x4, 0x2) syz_usb_connect(0x3, 0x24, &(0x7f0000000600)={{0x12, 0x1, 0x110, 0xee, 0x3f, 0xb1, 0x40, 0xab4, 0x11, 0xcafb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x95, 0x10, 0x99, "", [{{0x9, 0x4, 0x4f, 0xd, 0x0, 0xf3, 0x1d, 0x63, 0x9}}]}}]}}, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x8000000000003, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r3, 0x10000}}, 0xa) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000002c0)) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5957, 0x10000, 0x1, 0x51}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000080)) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x3a00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 2m33.662339749s ago: executing program 2 (id=46): r0 = memfd_create(&(0x7f0000000bc0)='\xff\x00l\x1e\xa00x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x24, r2, 0x3, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x24}, 0x1, 0x300, 0x0, 0x2400c891}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x3f) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x2, @vifc_lcl_ifindex, @private=0xa010100}, 0x10) 2m31.808037037s ago: executing program 33 (id=49): openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x24, r2, 0x3, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x24}, 0x1, 0x300, 0x0, 0x2400c891}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x3f) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x2, @vifc_lcl_ifindex, @private=0xa010100}, 0x10) 2m31.763659184s ago: executing program 1 (id=51): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2b00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000004c0)={[0x7, 0x80000000000000, 0xa, 0x100000000, 0x101000, 0x5, 0x1002, 0x8, 0x3, 0x88, 0x2, 0x6, 0x8bda, 0x7f, 0x0, 0x7ff], 0x54000, 0xd0347}) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, &(0x7f0000000080)='\x00', 0x1) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000500)={0x0, 0x30b5, 0x80, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x7f, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x2, 0xcb6, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x2}}}, &(0x7f0000000480)=0x0) r9 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r9, 0x13) tkill(r9, 0x12) waitid(0x1, r9, 0x0, 0xe000000a, 0x0) sched_getattr(r9, &(0x7f0000000280)={0x38}, 0x38, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) r12 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000080)) io_uring_enter(r12, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r13 = syz_ublk_setup_io_uring(0x5b7c, &(0x7f0000000580)={0x0, 0xbb6, 0x400, 0x1, 0x36a, 0x0, r4}, &(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)) syz_ublk_setup_queues(r11, r8, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255, 0x0, r12}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x4, 0x2100, 0x100032b0, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x2, 0x100ae, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x800, 0x0, 0x1f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250, 0x0, r4}}], 0x1, &(0x7f0000000340)={0x2e, 0xc, 0x0, r3, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r3, 0x80045515, &(0x7f0000000040)={0xa, 0x1}) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m31.120685518s ago: executing program 34 (id=51): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2b00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000004c0)={[0x7, 0x80000000000000, 0xa, 0x100000000, 0x101000, 0x5, 0x1002, 0x8, 0x3, 0x88, 0x2, 0x6, 0x8bda, 0x7f, 0x0, 0x7ff], 0x54000, 0xd0347}) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, &(0x7f0000000080)='\x00', 0x1) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000500)={0x0, 0x30b5, 0x80, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x7f, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x2, 0xcb6, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x2}}}, &(0x7f0000000480)=0x0) r9 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r9, 0x13) tkill(r9, 0x12) waitid(0x1, r9, 0x0, 0xe000000a, 0x0) sched_getattr(r9, &(0x7f0000000280)={0x38}, 0x38, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) r12 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000080)) io_uring_enter(r12, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r13 = syz_ublk_setup_io_uring(0x5b7c, &(0x7f0000000580)={0x0, 0xbb6, 0x400, 0x1, 0x36a, 0x0, r4}, &(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)) syz_ublk_setup_queues(r11, r8, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255, 0x0, r12}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x4, 0x2100, 0x100032b0, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x2, 0x100ae, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x800, 0x0, 0x1f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250, 0x0, r4}}], 0x1, &(0x7f0000000340)={0x2e, 0xc, 0x0, r3, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r3, 0x80045515, &(0x7f0000000040)={0xa, 0x1}) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m30.443639028s ago: executing program 3 (id=53): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) write(0xffffffffffffffff, &(0x7f0000000200)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYRESHEX=0x0], 0xa8}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=']) fsetxattr(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='user.'], 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 2m30.268459602s ago: executing program 3 (id=54): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x4000) set_mempolicy(0x1, &(0x7f0000000640)=0x9, 0x91d) (async) unshare(0x6a040000) 2m28.076695178s ago: executing program 3 (id=56): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x110) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000000)="ab06500000f33b346f4c1fc1dd256d9b65b9bfad2b69749ab5fc1e81bc5fe53a1343dc20e7522f08143e5de16acf9fcbb4e07b9c97f1eb69b4c20363babfe45a5cfbaf496e45e85a0f899352f8294df406e34d9efc43a88748959224c4375bd17b298cc7d5201e5b4d556358d9014e1d850c68b69544be79b09e64dfb69d4a0d17d0768a894d50f1c7376a740ccac2fb9e89530ba38db46c1600812534a9c3", 0x9f}, {&(0x7f00000001c0)="efffffff", 0x4}, {&(0x7f0000000100)="e4", 0x1}], 0x3) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) chroot(&(0x7f0000000500)='./file0/../file0/../file0/../file0\x00') pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r4 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000500)={0x0, 0x30b5, 0x0, 0x2, 0x377}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x6, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0xfffffffd, 0x32c}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ac7, 0x8000, 0x10000000, 0x546}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xfffffffc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x3, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) 2m27.404340286s ago: executing program 3 (id=57): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000140)={{0x2, 0x4e22, @empty}, {0x6, @broadcast}, 0x60, {0x2, 0x4e22, @private=0xa010102}, 'veth1_virt_wifi\x00'}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0xe00000, 0x4) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x2) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a0001970000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r1], 0x24}}, 0x0) 2m27.085445287s ago: executing program 3 (id=61): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) fcntl$setstatus(r1, 0x4, 0x800) preadv(r1, &(0x7f0000000b80)=[{&(0x7f0000000a40)=""/70, 0x4a}], 0x1, 0x8, 0x101) 2m26.606609265s ago: executing program 35 (id=61): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) fcntl$setstatus(r1, 0x4, 0x800) preadv(r1, &(0x7f0000000b80)=[{&(0x7f0000000a40)=""/70, 0x4a}], 0x1, 0x8, 0x101) 2m9.304506288s ago: executing program 7 (id=95): socket$alg(0x26, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7c, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xc}}}, 0x24}}, 0x4004004) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) r1 = socket$inet(0x2, 0x80001, 0x84) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="1632800e", 0x4}], 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m8.118141932s ago: executing program 7 (id=98): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x7fffffe, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x4001, 0x3, 0x1e0, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x3a0, 0x206, 0x240, 0x3a0, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0x70, 0x98, 0x0, {0x390, 0x8f00}}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0xff, {0x9184}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x240) 2m7.719250179s ago: executing program 7 (id=101): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000060000000800000008"], 0x50) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000080)={'ip_vti0\x00', 0x0, 0x8, 0x7800, 0x0, 0x6, {{0x6, 0x4, 0x2, 0x15, 0x18, 0x67, 0x0, 0x5, 0x4, 0x0, @broadcast, @multicast2, {[@end]}}}}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) bind$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x100, 0x399}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x121002, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)="fe82345824de1b94", 0x5b}], 0x1) io_uring_enter(r3, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@getchain={0x2c, 0x66, 0xfcd66a900070b35b, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r1, {0xb, 0x1}, {0xffe0, 0xf}, {0x6, 0xc}}, [{0x6, 0xb, 0x800}]}, 0x2c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x18, 0x15, 0x301, 0x70bd26, 0x25dfdbfb, {0xc}, [@typed={0x4, 0x4, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x24004080}, 0x4000000) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)={0x28, 0x14, 0x119, 0x0, 0x0, {0x10}}, 0x28}, 0x1, 0x2c}, 0x0) creat(&(0x7f0000000000)='./file1\x00', 0x14) remap_file_pages(&(0x7f00009a6000/0x1000)=nil, 0x1000, 0x9, 0x9, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x58}}]}, &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2}]}, 0x6c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x70}}, 0x0) lstat(0x0, 0x0) 2m3.60892954s ago: executing program 7 (id=115): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x110) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000000)="ab06500000f33b346f4c1fc1dd256d9b65b9bfad2b69749ab5fc1e81bc5fe53a1343dc20e7522f08143e5de16acf9fcbb4e07b9c97f1eb69b4c20363babfe45a5cfbaf496e45e85a0f899352f8294df406e34d9efc43a88748959224c4375bd17b298cc7d5201e5b4d556358d9014e1d850c68b69544be79b09e64dfb69d4a0d17d0768a894d50f1c7376a740ccac2fb9e89530ba38db46c1600812534a9c3", 0x9f}, {&(0x7f00000001c0)="efffffff", 0x4}, {&(0x7f0000000100)="e4", 0x1}], 0x3) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r5 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000500)={0x0, 0x30b5, 0x0, 0x2, 0x377}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x6, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0xfffffffd, 0x32c}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ac7, 0x8000, 0x10000000, 0x546}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xfffffffc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r11, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x3, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) 2m2.808909586s ago: executing program 7 (id=121): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$fuseblk(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x175c80, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x6}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x326d}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad38002", 0x4, 0x4041, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000040)="8950e6674265e7a94352c17f3ad21eeefee6c7fddf4a8a7709162699e2e8e0", 0x1f, 0x8015, &(0x7f00000000c0)={0xa, 0x0, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x1}, 0x20) 2m2.364348884s ago: executing program 7 (id=124): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x39) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10, r0, 0x674a5000) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="400000001400b5952cbd7000ffdbdf250a180000", @ANYRES32=r4, @ANYBLOB="14000600010000000100000001000000feffffff1400020000000000000000000000ff"], 0x40}, 0x1, 0x0, 0x0, 0x20048814}, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbff, {0xa, 0x8, 0x0, 0xff, r6}, [@IFA_LOCAL={0x14, 0x2, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044040}, 0x41) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f00000000c0)=0x101) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00') lseek(r8, 0x3, 0x1) lseek(r8, 0x3, 0x0) timer_gettime(r7, &(0x7f00000000c0)) readv(r1, &(0x7f00000006c0)=[{&(0x7f0000002480)=""/4110, 0x48}], 0x1000000000000082) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000140)={{0xbffffffd, 0x1, 0xffffffff, 0xfffffff8, 'syz1\x00', 0x20}, 0x2, 0x2, 0x5, 0x0, 0x0, 0x4ff, 'syz0\x00', 0x0}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x39) (async) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10, r0, 0x674a5000) (async) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) socket(0x10, 0x803, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00'}) (async) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="400000001400b5952cbd7000ffdbdf250a180000", @ANYRES32=r4, @ANYBLOB="14000600010000000100000001000000feffffff1400020000000000000000000000ff"], 0x40}, 0x1, 0x0, 0x0, 0x20048814}, 0x0) (async) socket(0x10, 0x803, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'lo\x00'}) (async) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbff, {0xa, 0x8, 0x0, 0xff, r6}, [@IFA_LOCAL={0x14, 0x2, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044040}, 0x41) (async) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f00000000c0)=0x101) (async) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000040)) (async) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00') (async) lseek(r8, 0x3, 0x1) (async) lseek(r8, 0x3, 0x0) (async) timer_gettime(r7, &(0x7f00000000c0)) (async) readv(r1, &(0x7f00000006c0)=[{&(0x7f0000002480)=""/4110, 0x48}], 0x1000000000000082) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000140)={{0xbffffffd, 0x1, 0xffffffff, 0xfffffff8, 'syz1\x00', 0x20}, 0x2, 0x2, 0x5, 0x0, 0x0, 0x4ff, 'syz0\x00', 0x0}) (async) 2m0.925897353s ago: executing program 36 (id=124): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x39) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10, r0, 0x674a5000) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="400000001400b5952cbd7000ffdbdf250a180000", @ANYRES32=r4, @ANYBLOB="14000600010000000100000001000000feffffff1400020000000000000000000000ff"], 0x40}, 0x1, 0x0, 0x0, 0x20048814}, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbff, {0xa, 0x8, 0x0, 0xff, r6}, [@IFA_LOCAL={0x14, 0x2, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044040}, 0x41) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f00000000c0)=0x101) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00') lseek(r8, 0x3, 0x1) lseek(r8, 0x3, 0x0) timer_gettime(r7, &(0x7f00000000c0)) readv(r1, &(0x7f00000006c0)=[{&(0x7f0000002480)=""/4110, 0x48}], 0x1000000000000082) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000140)={{0xbffffffd, 0x1, 0xffffffff, 0xfffffff8, 'syz1\x00', 0x20}, 0x2, 0x2, 0x5, 0x0, 0x0, 0x4ff, 'syz0\x00', 0x0}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x39) (async) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10, r0, 0x674a5000) (async) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) socket(0x10, 0x803, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00'}) (async) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="400000001400b5952cbd7000ffdbdf250a180000", @ANYRES32=r4, @ANYBLOB="14000600010000000100000001000000feffffff1400020000000000000000000000ff"], 0x40}, 0x1, 0x0, 0x0, 0x20048814}, 0x0) (async) socket(0x10, 0x803, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'lo\x00'}) (async) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbff, {0xa, 0x8, 0x0, 0xff, r6}, [@IFA_LOCAL={0x14, 0x2, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044040}, 0x41) (async) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f00000000c0)=0x101) (async) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000040)) (async) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00') (async) lseek(r8, 0x3, 0x1) (async) lseek(r8, 0x3, 0x0) (async) timer_gettime(r7, &(0x7f00000000c0)) (async) readv(r1, &(0x7f00000006c0)=[{&(0x7f0000002480)=""/4110, 0x48}], 0x1000000000000082) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000140)={{0xbffffffd, 0x1, 0xffffffff, 0xfffffff8, 'syz1\x00', 0x20}, 0x2, 0x2, 0x5, 0x0, 0x0, 0x4ff, 'syz0\x00', 0x0}) (async) 11.095800223s ago: executing program 5 (id=429): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x2b28d, 0x55025}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x12, {0x7, 0x4ca}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0xc051}, 0x48880) 10.952033753s ago: executing program 5 (id=430): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="495300000000000000006700000008000300", @ANYRES32=0x0, @ANYBLOB="10001d01"], 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0100, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r2, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETLINK(r2, 0x400454cd, 0x7) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e21, 0x80000000, @private2, 0x10001}, 0x1c) 10.14077521s ago: executing program 8 (id=433): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x800, 0x3) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, 0x26, 0x101, 0x70bd25, 0x25dfdbfb, {0x11}, [@typed={0x7, 0x167, 0x0, 0x0, @binary="17462d"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x24008080) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00', 0x0, 0x0, 0x73}, {@loopback, 0x11, 0x0, 0x1}}, 0x44) setsockopt(r1, 0x0, 0x488, &(0x7f0000000500)="060000007f00000100150000000000006d6800000000000000000000000000000000000000000000000000007f000001001500"/68, 0x44) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x3) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r2, &(0x7f0000000c80)={0x2020}, 0x2020) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05400000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a01040000000000000000010000002400048020000180080001006f736600140002800500020000000000080001400000001408000b40000000000900010073797a300000000014000000110001"], 0xd4}}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a5f000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) ptrace(0x10, 0x1) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f00000006c0)={{r2, &(0x7f00000001c0)='%+#^&\x00', 0x20202, &(0x7f0000000280)={@_ha_fsid={[0x9]}, {0x10, 0x7, 0xe, 0x5}}, 0x2, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000300)}, 0x0, &(0x7f0000000680)}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r4, 0x0, 0x92, 0x0, &(0x7f00000004c0)="5351e31d94c9f8291396b461802305624443ed3373010000000182d7c68e785968cb15539ab8469f765b4762f07aaa4b460c5f1b3a0000986919d5d5fe00c6fd6ef8526b41ed0000000000000100ee936390009c5bbdae29298f294846a2dc6144cfdcac5f5fa03524a008d7b748247a69dbbacb78def6177a0d840900000057ac3e69e56703a5c68368a0dfe5c9584d2ff5", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403}, 0x50) r5 = syz_usb_connect_ath9k(0x3, 0x87, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0xc, &(0x7f0000000f40)={[{0x8, 0x4e00, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}) r6 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$FIBMAP(r6, 0x1, &(0x7f0000000000)=0xff) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) 10.099060579s ago: executing program 5 (id=434): openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) socket$packet(0x11, 0xa, 0x300) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x9c}]}) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x40}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000140), 0x103001, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010c001ddf8208c007121522300000000109021b0001000000010904010001faf48d00090582"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r3, &(0x7f00000006c0)="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", 0xfffffffffffffffb) ioctl$HIDIOCGRDESC(r3, 0x4008c002, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000002c0)) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x20040080) r5 = io_uring_setup(0x3d3f, &(0x7f00000000c0)={0x0, 0xb1e1, 0x80, 0x2000003, 0x22c, 0x0, r2}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000048882, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r7, 0x5dba6000) io_uring_register$IORING_REGISTER_RING_FDS(r5, 0x13, &(0x7f0000003b40)=[{0x1280, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000180)=""/34, 0x22}, {&(0x7f00000004c0)=""/189, 0xaf}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/4096, 0x1000}]}, {0x401, 0x0, &(0x7f0000002a80)=[{&(0x7f0000002a00)=""/122, 0xd4}]}, {0x80, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000002ac0)=""/6, 0x6}, {&(0x7f0000002b00)=""/195, 0xc3}, {&(0x7f0000002c00)=""/28, 0x1c}, {&(0x7f0000002c40)=""/39, 0x27}, {&(0x7f0000002c80)=""/38, 0x26}, {&(0x7f0000002cc0)=""/218, 0xda}, {&(0x7f0000002dc0)=""/178, 0xb2}, {&(0x7f0000000280)=""/62, 0x3e}]}, {0x6, 0x0, &(0x7f0000003300)=[{&(0x7f0000002f40)=""/34, 0x22}, {&(0x7f0000002f80)=""/3, 0x3}, {&(0x7f0000002fc0)=""/168, 0xa8}, {&(0x7f0000003080)=""/253, 0xfd}, {&(0x7f0000000440)=""/112, 0x67}, {&(0x7f0000003200)=""/221, 0xdd}]}, {0x13f7, 0x0, &(0x7f0000003680)=[{&(0x7f0000003380)=""/95, 0x5f}, {&(0x7f0000003400)=""/87, 0x57}, {&(0x7f0000003480)=""/126, 0x7e}, {&(0x7f0000003500)=""/49, 0x31}, {&(0x7f0000003540)=""/247, 0xf7}, {&(0x7f0000003640)=""/33, 0x21}]}, {0x9, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003700)=""/114, 0x72}, {&(0x7f0000003780)=""/144, 0x90}, {&(0x7f0000003840)=""/148, 0x94}, {&(0x7f0000003900)=""/22, 0x16}, {&(0x7f0000003940)=""/94, 0x5e}, {&(0x7f00000039c0)=""/198, 0xc6}]}], 0x6) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) openat$sequencer(0xffffffffffffff9c, 0x0, 0x8300, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r8 = socket(0x11, 0x3, 0x100) connect$inet(r8, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r8, &(0x7f0000005240), 0x4000095, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 9.657618719s ago: executing program 6 (id=437): socket$inet6_sctp(0xa, 0x1, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) socket$kcm(0x11, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) socket(0x400000000010, 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x0, 0x1, 0x3}, 0x30, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) syz_open_dev$video(&(0x7f0000000200), 0x4, 0x2) syz_usb_connect(0x3, 0x24, &(0x7f0000000600)={{0x12, 0x1, 0x110, 0xee, 0x3f, 0xb1, 0x40, 0xab4, 0x11, 0xcafb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x95, 0x10, 0x99, "", [{{0x9, 0x4, 0x4f, 0xd, 0x0, 0xf3, 0x1d, 0x63, 0x9}}]}}]}}, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x8000000000003, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0x10000}}, 0xa) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) (fail_nth: 8) 7.729911829s ago: executing program 4 (id=439): r0 = socket$inet6(0xa, 0x3, 0x103) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0xd0, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x7, 0x5a0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x80000, 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f00000006c0)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xdd9f83, 0x1, 0x2f, 0xf3, 0x2, 0x8, 0x722, 0x6, 0x10007, 0x7f, 0x27, 0x31, {0x0, 0x6fd8e86b}, 0x3, 0xed}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48811}, 0x4000000) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0xfc, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0xd0, 0x4, 0x0, 0x1, [{0xcc, 0x1, 0x0, 0x1, @match={{0xa}, @val={0xbc, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_MATCH_INFO={0xa0, 0x3, "06275c852770226714b06026799504d26462d0f7a66ead44d6899e1445d97832ad457d06138b69af69d529be95f1911eab1846eb51bda151a6b0736302fdfb9f2c903fa06bb26b5a1ce76b17878e8174d345499079f1da597f0326854d62b1f5d97f2de35a9cb60da0764d08dbaf74939de34af914a3ea3f02ca57df07e9ed10aecb90bdbabcfcdd62e3ef6913b29a63fd42d9276dc54b68f9bc26a0"}, @NFTA_MATCH_NAME={0xe, 0x1, 'conntrack\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x124}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 7.463187755s ago: executing program 8 (id=440): syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800000000eaffffff00", @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000082}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$rds(0x15, 0x5, 0x0) close(0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x2f, 0x5, 0x8, 0xffff, 0x11, @ipv4={'\x00', '\xff\xff', @loopback}, @local, 0x8, 0x1, 0x7, 0xffffffff}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x10000, 0x0, 0x0, 0x41100, 0x65, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400900}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c00000007060108e8ffdcb0f3bd06376a250000050001fe3fe9416e37e454032a56faf649d05886fd1f4f760e78cff8800c1960c67c8a56cd192f89f6b847839497033edfb04cb6cfc53137c024e29059bd26d63bbc0702b721935cc7a3e40a84fdfbde64a30735063e8fd373e5a91f1d61157aca16"], 0x1c}, 0x1, 0x0, 0x0, 0x40854}, 0x0) r3 = syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x2, 0x3010, 0x6, 0x3}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_modify_offsets$generic(r4, r5, 0x2c, 0x8) r7 = eventfd(0x3) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f00000001c0)=r7, 0x1) syz_io_uring_submit$UBLK(r4, r5, r6, &(0x7f0000000980)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207506, 0x0, 0x0, 0x0, 0x1, 0x8000000000000000}) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000440)={0x2e, 0x7f, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000400)=@any_dev={0x2, 0x927, 0x0, 0x0, 0x1000, 0x1d6, 0xffffffffffffffff, 0x0, 0x18d}}}, 0x0) io_uring_enter(r3, 0x6516, 0x6d93, 0x8, 0x0, 0x0) 7.399737373s ago: executing program 4 (id=441): openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x203a2, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf4a, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4043, 0x8a, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, 0x1}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x10d}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x617d, 0x8, 0x2000, 0x10000004, 0x0, r6}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1, 0x401f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x400, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xffb9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r8 = fcntl$getown(r7, 0x9) wait4(r8, &(0x7f00000000c0), 0x1000000, &(0x7f0000000780)) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000500)={0x0, 0x30b5, 0x0, 0x2, 0x377}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r9, r10, r11, r12, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x6, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) r15 = dup(r14) syz_ublk_setup_queues(r15, r13, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0xfffffffd, 0x32c}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ac7, 0x8000, 0x10000000, 0x546}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xfffffffc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r15, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x3, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 6.948717881s ago: executing program 6 (id=442): mlockall(0x2) mmap(&(0x7f0000361000/0x2000)=nil, 0x2000, 0x300000a, 0x769f00b363895638, 0xffffffffffffffff, 0xbe010000) 6.86551751s ago: executing program 9 (id=443): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CAP_HYPERV_SYNIC(r2, 0x4068aea3, &(0x7f0000000180)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0x804, 0x7, 0xf, 0x120000, 0x5, 0x0, 0x8, 0x8000000000000001, 0x2, 0xfffffffffffffffe, 0x101, 0x3, 0x1], 0x8000000, 0x141200}) ioctl$KVM_RUN(r2, 0xae80, 0x400000000000000) 6.483822326s ago: executing program 6 (id=444): socket$tipc(0x1e, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000202505a1a4400000000101090248000101006015090400001a02020000052406000005240004000d240f01800000000100fcff500424020209058103ff03000306090582020000020d0309050302", @ANYRES64=r0], 0x0) (async) syz_usb_connect$cdc_ecm(0x5, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000202505a1a4400000000101090248000101006015090400001a02020000052406000005240004000d240f01800000000100fcff500424020209058103ff03000306090582020000020d0309050302", @ANYRES64=r0], 0x0) 6.456943998s ago: executing program 8 (id=445): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000bc0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x19) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x1, 0x0, 0x40, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x6, &(0x7f00002ba000/0x3000)=nil) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='file0\x00', 0x42, 0x1ff) write(r3, &(0x7f0000000080)='/sys/kernel/config', 0x12) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='file0\x00', 0x0, 0x0) read(r4, &(0x7f0000000000), 0x12) symlink(&(0x7f0000000000), &(0x7f0000000100)='my_configfs\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='my_configfs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000940)=[{{&(0x7f0000000440)=@sco, 0x80, &(0x7f0000000640)=[{&(0x7f00000004c0)=""/3, 0x3}, {&(0x7f0000000500)=""/131, 0x83}, {&(0x7f00000005c0)=""/96, 0x60}], 0x3, &(0x7f0000000680)=""/125, 0x7d}, 0x3}, {{&(0x7f0000000700), 0x80, &(0x7f0000000840)=[{&(0x7f0000000780)=""/104, 0x68}, {&(0x7f0000000800)=""/55, 0x37}], 0x2, &(0x7f0000000880)=""/190, 0xbe}, 0x3}], 0x2, 0x3, &(0x7f0000000a00)) fsopen(&(0x7f0000000200)='adfs\x00', 0x1) statx(r5, &(0x7f0000000000)='./file0\x00', 0x1000, 0x200, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r6, 0x0, 0x23, 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000180)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x8}, @void, {@llc_tr={0x11, {@llc={0x8e, 0x0, '\f', "7260eed0b78eb121a8bf7e633f2a977cb73265eda19bd06f7e1f33c244ff487ac71012948d4e89150d2778fca3f22eebc83c08d74d03bfdd2c59f3932320be82ba"}}}}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x1, 0x0, @rand_addr=0x1c101002, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @loopback}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c101002, @empty=0xe00003a4, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) syz_emit_ethernet(0x3e, &(0x7f0000000a80)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000208004500003000000020fc0190781c101003e00003000306907800fa000945f4fff600650005010400030a0101027f000001021c66765efb9e5b36d00788c97a8e1b5769670c237aebb27b338314838b3e1a87d39386ebf2993094c0285d35fcd3be2e3899ea2b45d3464731354cff6db1225fe0d4cc877532d31e60c0ed794cb075f9c35dac9fac1f69493c42da84e91112786ede74aedb98b17c16eca11247d5f1a33c893bfa7f73b9a7aa99275dfacb111396c3b96d68d13eb059c972067784b8a11766a56b531803348f2c276ae5c770148b6d2892baf807307fea478128c1402b55aded131d3d11fa02dfe8ee44367a455792828b644174b227c33e723e72cf8964dce492c2d1eeadeadb4f788e7e46b5"], 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000300)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x1, 0x0, @rand_addr=0x1c101004, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @loopback}}}}}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000340)=ANY=[@ANYBLOB="0180c2000003ffffffffffff28004500003000000020fc0190781c101005e00003000306907800fa000945f4fff600650005010400030a0101027f000001"], 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c101005, @empty=0xe00003a4, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000240)) 6.172392202s ago: executing program 9 (id=446): r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x8, &(0x7f00000001c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}}, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x82) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_deladdr={0x18, 0x15, 0x1, 0x70bd25, 0x25dfdbff, {0xa, 0x20, 0x90, 0xc8}}, 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0x4040080) r11 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0xc0010141, 0x0, 0x10001}]}) ioctl$KVM_SET_MSRS(r11, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000a80)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x24, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x20}}}, &(0x7f0000000300)=0x0) dup(0xffffffffffffffff) syz_ublk_setup_queues(r3, r12, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xffbffffe, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x67b5, 0x8, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffff8, 0x1000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x20, 0x1, 0x2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x3ffff, 0x8ca}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x3, 0x5, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$can_bcm(0x1d, 0x2, 0x2) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) 6.114019762s ago: executing program 4 (id=447): close(0xffffffffffffffff) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340), 0x214141, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000540)={'ip6gretap0\x00', 0x1000}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r2, 0xfffffffb) syz_emit_ethernet(0x5a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e2263a5e6947fc72721de51b208ebb6638c3b250642ab9e6f9f40d87aee76904e08aabe5fac7677958a8c7e5273a79e95bdd6daf0e9713fb3b6d87275c3c9f4ed51ae532236c38196f028d08600"/146, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="94c20000907800001e102006060000000000000040000000"], 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = syz_open_dev$mtd(&(0x7f0000000080), 0x0, 0x80) ioctl$MEMERASE(r3, 0x40084d02, 0x0) capset(0x0, &(0x7f0000000040)={0x0, 0x5, 0xfffffffd}) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil) mremap(&(0x7f0000580000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r5 = add_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000140)="47181f988989f25fff7f0000", 0xc, 0xffffffffffffffff) ioctl$VIDIOC_G_AUDOUT(r0, 0x80345631, &(0x7f0000000440)) keyctl$chown(0x4, r5, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x2}}, 0x20) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) dup(r6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) fcntl$getflags(r7, 0x40a) 5.257301258s ago: executing program 4 (id=448): r0 = timerfd_create(0x7, 0x80000) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r0, &(0x7f0000000240)) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000440)='ns/ipc\x00') setns(r1, 0x8000000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x3, 0x0, 0x0, 0x1, 0x4408}}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) 4.832658248s ago: executing program 9 (id=449): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002f40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xcc}}, 0x4000840) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') fcntl$getflags(r1, 0x1) 4.771220781s ago: executing program 6 (id=450): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x800, 0x3) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, 0x26, 0x101, 0x70bd25, 0x25dfdbfb, {0x11}, [@typed={0x7, 0x167, 0x0, 0x0, @binary="17462d"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x24008080) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00', 0x0, 0x0, 0x73}, {@loopback, 0x11, 0x0, 0x1}}, 0x44) setsockopt(r1, 0x0, 0x488, &(0x7f0000000500)="060000007f00000100150000000000006d6800000000000000000000000000000000000000000000000000007f000001001500"/68, 0x44) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x3) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r2, &(0x7f0000000c80)={0x2020}, 0x2020) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05400000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a01040000000000000000010000002400048020000180080001006f736600140002800500020000000000080001400000001408000b40000000000900010073797a300000000014000000110001"], 0xd4}}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a5f000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) ptrace(0x10, 0x1) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f00000006c0)={{r2, &(0x7f00000001c0)='%+#^&\x00', 0x20202, &(0x7f0000000280)={@_ha_fsid={[0x9]}, {0x10, 0x7, 0xe, 0x5}}, 0x2, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000300)}, 0x0, &(0x7f0000000680)}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r4, 0x0, 0x92, 0x0, &(0x7f00000004c0)="5351e31d94c9f8291396b461802305624443ed3373010000000182d7c68e785968cb15539ab8469f765b4762f07aaa4b460c5f1b3a0000986919d5d5fe00c6fd6ef8526b41ed0000000000000100ee936390009c5bbdae29298f294846a2dc6144cfdcac5f5fa03524a008d7b748247a69dbbacb78def6177a0d840900000057ac3e69e56703a5c68368a0dfe5c9584d2ff5", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403}, 0x50) r5 = syz_usb_connect_ath9k(0x3, 0x87, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0xc, &(0x7f0000000f40)={[{0x8, 0x4e00, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}) r6 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$FIBMAP(r6, 0x1, &(0x7f0000000000)=0xff) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) 4.721157549s ago: executing program 4 (id=451): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x8240, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0xff, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x59, 0xfe}}}}}]}}]}}, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000340)={0x53, 0xfffffffffffffffe, 0xb2, 0x3b, @buffer={0x0, 0xd7, &(0x7f0000000100)=""/215}, &(0x7f0000000200)="a5ebb0c99774a2f778eda6e4cbc11ea2ea4b7709e610ffb28eb816c1d3a4478238fed01e39ba2bc42ef256aa1249528fcb6cca96013df43cf18cb2a661d4ac83eb8bdb3880753fdcf703f5b3328cff059acc76dec49ff91f262036c98fb74eb599c98318dd7271ccdce08e478eb7d01410eef1471948175a6043f448f72efada32dcf2f195131f8a84dedcdfd056f08cfc9a1b00e0abb449032cd6dba7c9ea45d33bc060b7f2e4a3fbebc34c24194ff21002", &(0x7f00000002c0)=""/39, 0x3, 0x1, 0x0, &(0x7f0000000300)}) r1 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r2 = socket$inet_udp(0x2, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) unshare(0x400) r3 = socket$inet(0xa, 0x801, 0x84) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000002380)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000023c0)={{r4, r5+10000000}, {0x77359400}}, &(0x7f0000002400)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0x20040084) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r6, 0xc0c0128e, &(0x7f0000000240)={0x2000, 0x1000000}) r7 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x20000008, 0xa2600) r8 = epoll_create(0xe) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000040)={0x80002019}) syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$OCFS2_IOC_MOVE_EXT(r7, 0x40406f06, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0) r9 = openat2(r2, &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)={0x10040, 0x1e5, 0x3c}, 0x18) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r9, 0x0, 0x0) accept4(r3, 0x0, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) bind$alg(r1, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000900)={0x24, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x22, 0x18, {[@local=@item_4={0x3, 0x2, 0x9, "62ce46a7"}, @global=@item_4={0x3, 0x1, 0x1}, @global=@item_012={0x0, 0x1, 0x3}, @main=@item_4={0x3, 0x0, 0xc, "0199d362"}, @main=@item_4={0x3, 0x0, 0x9, "2c1f5fcd"}, @local=@item_012={0x2, 0x2, 0x7, "9179"}]}}, 0x0}, 0x0) 3.615867333s ago: executing program 9 (id=452): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048014) r2 = syz_open_dev$vim2m(&(0x7f0000000280), 0x6, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x7, 0x4, 0x806, 0x4}, 0x2, 0x4017, &(0x7f00000021c0)={{0x3, 0x2, 0x9, 0x4c}}, 0x3317, 0x0, 0x8}}) r3 = socket$inet6(0xa, 0x3, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90f24fc60", 0x14}], 0x1}, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x1c, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x1, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRESDEC, @ANYRES8=r0, @ANYRES16, @ANYRES64=r0, @ANYRES8=r3], 0x1c}, 0x1, 0x0, 0x0, 0x4801d}, 0x20000804) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x30004084) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x2000) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r6, 0xc03064ca, &(0x7f0000000140)={0x0, 0x0}) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @local, 0x4e1f, 0xfffffffe, 'sh\x00', 0x11, 0x10000004, 0x8}, 0x2c) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[], 0x18}}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000032073797a6b616c6c65723000001800128008000100767266000c000280080001"], 0x48}, 0x1, 0x0, 0x0, 0x20044040}, 0x0) select(0x40, &(0x7f0000000340)={0xdb, 0x8, 0xf6, 0x3184aa8f, 0x200, 0x1, 0x0, 0x1}, &(0x7f0000000380)={0x4, 0x1ff, 0x7f, 0x4, 0xc83, 0x100000000, 0x9, 0x3}, &(0x7f00000003c0)={0x2, 0x3, 0x5, 0x6, 0xb229, 0x4, 0xd31, 0x2}, &(0x7f0000000400)={0x77359400}) ioctl$sock_inet_udp_SIOCINQ(r8, 0x541b, &(0x7f00000000c0)) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0xfc) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x430, &(0x7f00000007c0)={@local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0xb, 0x6, "a3c4b4", 0x3fa, 0x2f, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private2={0xfc, 0x2, '\x00', 0x1}, {[@hopopts={0x2f, 0x2b, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x3, 0x7, 0x0, 0x6, [0x9, 0x7, 0x8000000000000001, 0x6, 0x9, 0x3]}}, @ra={0x5, 0x2, 0x6}, @generic={0xb, 0x95, "1a1731e14193915358ea07e4f491b5868c8ddd04c9b73c0f59cb17c3c00062a7ccf0abe5859e9d1c6f98f3d9acb1a67e4d033c803c432c98473219b183d9500b60370d8ed57fdc48e7c7aa542b51553e8e58d3d9f47d88d7c3fb343d568f07cbed1123860717b518cc420d9dcb82e9998a574fb518ab9162e0c9ee85978cba421d0cd7671bc20a50072ac28676916e2d29ccd7ed93"}, @pad1, @enc_lim={0x4, 0x1, 0xe}, @enc_lim={0x4, 0x1, 0x6}, @enc_lim={0x4, 0x1, 0x1}]}, @srh={0x32, 0x10, 0x4, 0x8, 0x37, 0x60, 0x7, [@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2e}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast1, @dev={0xfe, 0x80, '\x00', 0x4}, @local]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x76, 0x2, [0x7, 0x0], "4b6e976047e76686aff37d5aa7bbb84400effc7845e184af5f6361e36f897d9a718211bb64a222b4bac96bee8725a8e44f29f4819c834fbd774f86e169c5f3ae8970e7d759efb7665090513775615eae0b27b4bf8ebb60e3d2b497c2f506f70acfaac3cf3908beb0e85e1ba7c5ee832f3b03a6a82729"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [], "c9b9a97092953779e7df6e3d9dcc789bfd73fbd4efbc751a22caa601a2bc93739ae799"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x2, 0x5], "5dab0bd38ec8d3bc17ff56305450fab51d767718d816a036a5ef4a4549b4d23904e8541c8af74135f193b8d4667de52ced3d5e8cd0d78dc89953398329431debfcc20dbe2710f80f93a0b012cac0b7910f2a8be97c3a948ce7b6a7cd7133d9edeebc35bc64070572347e46f9bb322a80a8da8e748f3d5efc1b6c021e6706395702a7d597817184116a39d55cf17b71a96d9d289f912369ff13527645044cce11fb806faf8948b6cad2986edcc5"}, {0x8, 0x88be, 0x1, {{0xf, 0x1, 0x5, 0x0, 0x1, 0x3, 0x0, 0x15}}}, {0x8, 0x22eb, 0x1, {{0x7, 0x2, 0x8, 0x3, 0x1, 0x3, 0x4, 0x3}, 0x2, {0x4, 0x6, 0x2, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x3, "369c63236d9d4fc3398a34c406e285011a3bacb21a46e16b1776ebc416d746c10ef85f8799d0480bc9e924ab3465067d75c18a9fcd124523c37c405277334f25c8643c661942c5e89595d5b5f8284093a262f8bdf3a9cb81bdc3772a6426c844e457d52458fb8c9758cab4ac3272dfeff82c24b939dc8efc"}}}}}}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) 3.572519157s ago: executing program 5 (id=453): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'tunl0\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000000c0)=0x40000000, 0x4) (async) sendto$packet(r1, &(0x7f0000000140)='?', 0x1, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@private=0xa010101, @in6=@dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x400, 0x1000, 0x0, 0x2, 0x20, 0x10, 0x84}, {0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x1, 0x4000000000000}}}, 0xb8}}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}, 0x1, 0x300}, 0x0) 2.972574508s ago: executing program 5 (id=454): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000001300)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000013c0)={0x8, 0x0, &(0x7f0000001340)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1a8}, 0x1, 0x0, 0x0, 0x4000805}, 0x4000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="6800000042000100000000000000000003010000061400002600010000112233445566778899aabb0800450000140000000001170000010203040506070800000c00020006000600080000000c0003"], 0x68}}, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000380)={[0x3ff]}, 0x8, 0x80800) statx(r4, 0x0, 0x1000, 0x0, &(0x7f00000005c0)) read$FUSE(r3, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}}, 0x50) r7 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22801, 0x0) write$FUSE_ENTRY(r7, &(0x7f00000004c0)={0x90, 0xfffffffffffffff5, r5, {0x5, 0x1, 0x6, 0x800, 0x6, 0x4, {0x3, 0x0, 0x6, 0x8000000000000000, 0x4, 0x101, 0xcd, 0x3, 0xee, 0xa000, 0x8, 0x0, r6, 0x2, 0x3}}}, 0x90) r8 = syz_mount_image$fuse(&(0x7f0000002040), &(0x7f00000020c0)='./file0\x00', 0x0, &(0x7f0000004300)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r6}}, 0x0, 0x0, 0x0) syz_fuse_handle_req(r2, &(0x7f000000b180)="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", 0x2000, &(0x7f0000002140)={&(0x7f0000001580)={0x50, 0xffffffffffffffda, 0x7, {0x7, 0x29, 0x80, 0x62108103, 0x8d4, 0x3, 0xb, 0xa7fff, 0x0, 0x0, 0x91, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000000000)="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", 0x2000, &(0x7f0000004b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000022c0)={0x20, 0x0, 0x7, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents(r8, 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002200), 0xc0041, 0x0) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r3, 0xc0205866, &(0x7f0000002280)={&(0x7f0000002300)=0xa1, 0x3, &(0x7f0000002ac0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000002a80)}) 2.425048514s ago: executing program 6 (id=455): syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800000000eaffffff00", @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000082}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$rds(0x15, 0x5, 0x0) close(0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x2f, 0x5, 0x8, 0xffff, 0x11, @ipv4={'\x00', '\xff\xff', @loopback}, @local, 0x8, 0x1, 0x7, 0xffffffff}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x10000, 0x0, 0x0, 0x41100, 0x65, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400900}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c00000007060108e8ffdcb0f3bd06376a250000050001fe3fe9416e37e454032a56faf649d05886fd1f4f760e78cff8800c1960c67c8a56cd192f89f6b847839497033edfb04cb6cfc53137c024e29059bd26d63bbc0702b721935cc7a3e40a84fdfbde64a30735063e8fd373e5a91f1d61157aca16"], 0x1c}, 0x1, 0x0, 0x0, 0x40854}, 0x0) r3 = syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x2, 0x3010, 0x6, 0x3}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_modify_offsets$generic(r4, r5, 0x2c, 0x8) r7 = eventfd(0x3) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f00000001c0)=r7, 0x1) syz_io_uring_submit$UBLK(r4, r5, r6, &(0x7f0000000980)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207506, 0x0, 0x0, 0x0, 0x1, 0x8000000000000000}) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000440)={0x2e, 0x7f, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000400)=@any_dev={0x2, 0x927, 0x0, 0x0, 0x1000, 0x1d6, 0xffffffffffffffff, 0x0, 0x18d}}}, 0x0) io_uring_enter(r3, 0x6516, 0x6d93, 0x8, 0x0, 0x0) 2.270948368s ago: executing program 5 (id=456): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x6) futex(&(0x7f000000cffc)=0x2, 0x0, 0x4, 0x0, 0x0, 0x3) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) futex(&(0x7f000000cffc), 0xb, 0x0, 0x0, &(0x7f0000048000)=0x1, 0x0) futex(&(0x7f000000cffc)=0xfffffffd, 0xb, 0x1, 0x0, &(0x7f0000048000)=0x40008, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2481, 0x0) close(0xffffffffffffffff) r1 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280), &(0x7f0000000300)=0x0) syz_ublk_add_dev(r1, r2, 0x0, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x2, 0x29b, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x8}}}, &(0x7f0000000480)) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00008ba000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000b1e000/0x4000)=nil, &(0x7f00004ff000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x17}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r4, 0x2219, 0x7721, 0x33, 0x0, 0x0) r5 = syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002c10db287"], 0x0) syz_usb_control_io(r5, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000a40)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000340)={0x0, 0x10, 0x1, "c4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000200)={0x1, 0x87, 0x5, &(0x7f00000000c0)={0x10, "8105d6c721100f00000000400000a8267d87000200"}}) syz_usb_control_io$uac2(r5, 0x0, &(0x7f0000000940)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="404807000000010100000000fe79806284e537b8814600"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x0, 0x0}) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r7 = syz_open_dev$video(0x0, 0x8, 0x0) ioctl$VIDIOC_STREAMOFF(r7, 0x40045613, &(0x7f0000000100)=0xc97) socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.111895592s ago: executing program 4 (id=457): connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) (async) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r0 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x800, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) write(r1, &(0x7f0000000100)="6000000041000901020000000000000001010000000000002c000100100004000000000000000000000000000600060080350000100007000101010102020202060040001c000200180003001400100008000200010101010500040040000000", 0x60) (async) write(r1, &(0x7f0000000100)="6000000041000901020000000000000001010000000000002c000100100004000000000000000000000000000600060080350000100007000101010102020202060040001c000200180003001400100008000200010101010500040040000000", 0x60) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3a) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) (async) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newneigh={0x30, 0x1c, 0x1, 0x0, 0xfffffffd, {0xa, 0x0, 0x0, r4, 0x0, 0x8}, [@NDA_DST_IPV6={0x14, 0x1, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl0\x00', r4, 0x80, 0x40, 0x6, 0x3, {{0x1f, 0x4, 0x0, 0x21, 0x7c, 0x65, 0x0, 0x7, 0x4, 0x0, @rand_addr=0x64010102, @private=0xa010101, {[@lsrr={0x83, 0x1b, 0xbd, [@multicast2, @loopback, @rand_addr=0x64010100, @multicast2, @multicast2, @local]}, @ssrr={0x89, 0xb, 0x37, [@dev={0xac, 0x14, 0x14, 0x3b}, @local]}, @timestamp={0x44, 0x8, 0xef, 0x0, 0x0, [0x6]}, @end, @ssrr={0x89, 0x7, 0xb0, [@multicast2]}, @generic={0x7, 0x7, "96e9838708"}, @cipso={0x86, 0x29, 0xaf1f2a3757bab57b, [{0x0, 0xc, "143ddba65333a18b2ab0"}, {0x6, 0x11, "d8e2107a7e5168cd8445b5e44cb817"}, {0x0, 0x6, "fdb3d978"}]}]}}}}}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x8) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000140)='ext3\x00', 0x0) (async) r6 = fsopen(&(0x7f0000000140)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x9c, r7, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8d}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f00000000c0)={[{0x4, 0x200, 0x8, 0x84, 0x0, 0x7, 0xc4, 0x1, 0x0, 0x9, 0xf, 0x8, 0x4000000000009}, {0x8, 0xaef3, 0xa, 0x7, 0xc, 0x1, 0x9, 0x3, 0x4, 0x13, 0x1, 0x20, 0x12005}, {0x2, 0x7, 0xa, 0xf, 0x1, 0x14, 0x0, 0xfb, 0x72, 0xfb, 0x1, 0x3, 0x2}], 0x9}) msgctl$IPC_RMID(0x0, 0x0) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r0, 0xc004ae0a, &(0x7f0000000000)={0x1, [0x0]}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000200)={[0x1, 0x6, 0xfffffffffffffffd, 0x0, 0x8000000000010004, 0xfffffffffffffffd, 0x4002004c3, 0x1000, 0x0, 0xfff, 0x10, 0x4, 0x0, 0x0, 0x8, 0x3], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r9, 0xae80, 0x0) 2.053003168s ago: executing program 8 (id=458): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0xd0, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x7, 0x5a0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) syz_emit_ethernet(0x52, &(0x7f0000000a40)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60000005001c0640fc010000000000000000000000000000ff0200000000000000000000000000014e224e22", @ANYRES32=0x1000, @ANYRES32=0x41424344, @ANYBLOB="7002"], 0x0) 1.261626501s ago: executing program 8 (id=459): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'tunl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x10, 0x8000, 0xf, 0x2, {{0x5, 0x4, 0x2, 0x0, 0x14, 0x67, 0x0, 0x5, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}}}}) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x4001, 0x3, 0x510, 0x1f0, 0x0, 0x148, 0x1f0, 0x148, 0x478, 0x240, 0x240, 0x478, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0xff000000, 'ip6tnl0\x00', 'wlan1\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0x190, 0x1f0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xffffff00, 0xffffff00, 0x0, 0xffffff00], 0x4e22, 0x4e22, 0x4e20, 0x4e23, 0x8, 0x2, 0x5f4a, 0x100, 0x2}}}, {{@ip={@remote, @multicast1, 0xff000000, 0xffffff00, 'wlan0\x00', 'pimreg1\x00', {}, {0xff}, 0x84, 0x0, 0x60}, 0x0, 0x260, 0x288, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x9, 0x1, 0x1, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x8000000, 0x1, 0x1, 'syz1\x00', 0x5}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000080)={0xb, @pix={0x38305543, 0x7, 0x38414261, 0x4, 0x5, 0x2, 0x8, 0x3, 0x0, 0x3, 0x1, 0x4}}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V4(r3, 0x8070587c, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x5) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) r5 = signalfd(r3, &(0x7f0000000180)={[0x807]}, 0x8) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f00000001c0), &(0x7f0000000200)=0x4) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c09102f28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) landlock_create_ruleset(&(0x7f00000000c0)={0x2040, 0x1, 0x1, 0x0, 0x1}, 0x30, 0x2) 1.137268492s ago: executing program 6 (id=460): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x5, 0x248, &(0x7f0000000440)=ANY=[], 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000700), 0x80000, 0x0) syz_usb_control_io(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="38000000100003042bbd7000fedbdf2500000300", @ANYRES32=0x0, @ANYBLOB="2110000000000000180012800b00010067656e65766500"], 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x814) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x600) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000640)={0x84, &(0x7f0000000240)=ANY=[@ANYBLOB="02171a00000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x0, 0x4c, 0x1a, 0x0, 0x73, 0x2e8, 0x258, 0x258, 0x2e8, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'dvmrp1\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x6c4, 0x7, 0x1, 'snmp_trap\x00', 'syz1\x00', {0x4}}}}, {{@uncond, 0x0, 0x120, 0x168, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@multiport={{0x50}, {0x1, 0x4, [0x4e22, 0x4e20, 0x4e24, 0x8, 0x4e20, 0x4e22, 0x4e23, 0x4e21, 0x4e22, 0x4e23, 0x4e22, 0x4e20, 0x4e23, 0x4e21, 0x4e24], [0x1, 0x0, 0x11, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1], 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x81, 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x418) r4 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e68ad01002040080b0201012130c60904000000010130000a2401040900ff0f0000132403050001020602028000000100101302000d240902021a000322db"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x37}) syz_usb_control_io$uac3(r4, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="201400000100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x388, 0x0, 0x111, 0x4b4, 0x1f0, 0xd4feffff, 0x2b8, 0x20a, 0x278, 0x2b8, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0xffffffff, 0xffffff00, 0xffffff00], [], 'ipvlan0\x00', 'caif0\x00', {}, {0xff}, 0x6, 0xfe}, 0x0, 0x190, 0x1f0, 0x0, {}, [@common=@hl={{0x28}, {0x8dde9cf0fcc298ce, 0x6}}, @common=@unspec=@string={{0xc0}, {0x0, 0xfffd, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x59, 0x0, {0xfff}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [0x0, 0xff, 0xff], 0x4e20, 0x4e23, 0x4e21, 0x4e24, 0x4917, 0x0, 0x4, 0x9, 0x9}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000240)={0x2c, r7, 0x1, 0x0, 0xfffffffc, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_usb_control_io$uac3(r4, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="c4"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r8, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xc8, 0xa, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x10}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_HANDLE={0x0, 0x10, 0x1, 0x0, 0x3}, @NFTA_SET_DATA_LEN={0x0, 0x7, 0x1, 0x0, 0x2b}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x6}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xfffffffffffffeaa, 0x1, 0x1, 0x0, 0x101}]}}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x8000}, 0x40010) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x20, 0x22, 0x6e, {0x6e, 0xb, "839d470c0916debed5b37d3c92de173b7bf4ff3b195eb579206feb6ea232331b6453b7a5b5d1ec4d1e3672592889d5065ca2a4ef5991c3a1bebcaee98065ec05b3cf168c711e16fd7a12f7ce972992ded869470075996f609353c397f2a4a0a89285451b3acb5c5bf3894ca6"}}, &(0x7f0000000180)={0x0, 0x3, 0x66, @string={0x66, 0x3, "d0dec248b8f14bd4019fd19d90b8786504279829094523d7443934cbe00861f4071a05e1b84d4095c6666acd543ddc61a7805ce2345022e54d5b0828e38f14af159af99301932ef9ef1de61327d93d31755324ab8d91137142f87aff4b749167ff4c7eb2"}}}, &(0x7f0000000540)={0x44, &(0x7f0000000280)={0x40, 0xa, 0x47, "e7167247c84e985c6bdb305e0ccc63762872abfea607e84bda008fc51af7ad40017d5c3661d4ae2c012087ab9f917d6e1ccd1443cb44a4f538c505048d7364e5ba5e45e83e8741"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xa3}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0xd}, &(0x7f0000000380)={0x20, 0x81, 0x3, "51e570"}, &(0x7f00000003c0)={0x20, 0x82, 0x3, "f087d2"}, &(0x7f0000000480)={0x20, 0x83, 0x3, 'qOk'}, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000000000002"], &(0x7f0000000500)={0x20, 0x85, 0x3, "52c39a"}}) 562.724959ms ago: executing program 9 (id=461): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000041000501010000000000000003010000000000001c0001000600060008000000100007007f0000017f00000184"], 0x48}, 0x1, 0x0, 0x0, 0x20048001}, 0xc000) socket$l2tp6(0xa, 0x2, 0x73) 74.505388ms ago: executing program 8 (id=462): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = gettid() fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5, r1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) listen(r0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x51, 0xffffffff}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, &(0x7f0000000340)}}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000240)={0xffffffffffffffff}) sendfile(r3, r3, &(0x7f0000000080)=0x1, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x80000000, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = fsopen(&(0x7f0000000040)='udf\x00', 0x1) r8 = fcntl$dupfd(r7, 0x406, r7) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000080), 0x0) connect$unix(r5, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r6, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) fsmount(0xffffffffffffffff, 0x0, 0x0) listen(r0, 0x802) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x1260, &(0x7f0000000380)={0x0, {}, 0x2000000000000000, {}, 0xdb03, 0x5, 0xc, 0x4, "edf0c98dd46e2f433e157c11b61fd76e031f98e8aad01ccba893d22c6ca42d0e22404919797d9893631da439ace17384471651e41baa61a7fc47257802d43f31", "feb09f79899ce11f40e6932779d1f45df1ae19f87439dac78295c165d48aff1f", [0x3, 0x6]}) 0s ago: executing program 9 (id=463): syz_usb_connect(0x5, 0x27, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b75c7f40470501026411010203010902120001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000000c0)={&(0x7f0000000440)=[{0x6, 0x4200, 0x1, &(0x7f0000000300)="b7"}, {0x2, 0x1, 0x0, 0x0}], 0x2}) (fail_nth: 9) kernel console output (not intermixed with test programs): 4][ T31] audit: type=1326 audit(1790969712.310:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7272 comm="syz.6.279" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58f59e159 code=0x7ffc0000 [ 203.924643][ T31] audit: type=1326 audit(1790969712.310:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7272 comm="syz.6.279" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58f59e159 code=0x7ffc0000 [ 204.077070][ T31] audit: type=1326 audit(1790969712.450:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7272 comm="syz.6.279" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc58f59e159 code=0x7ffc0000 [ 204.077124][ T31] audit: type=1326 audit(1790969712.460:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7272 comm="syz.6.279" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58f59e159 code=0x7ffc0000 [ 204.077169][ T31] audit: type=1326 audit(1790969712.460:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7272 comm="syz.6.279" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58f59e159 code=0x7ffc0000 [ 204.162938][ T31] audit: type=1326 audit(1790969712.550:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7272 comm="syz.6.279" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc58f59e159 code=0x7ffc0000 [ 204.163001][ T31] audit: type=1326 audit(1790969712.550:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7272 comm="syz.6.279" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58f59e159 code=0x7ffc0000 [ 204.217694][ T5679] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 204.230669][ T191] peak_usb 6-1:1.0 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 204.230692][ T191] peak_usb 6-1:1.0: unable to read PCAN-USB serial number (err -22) [ 204.326102][ T7277] netlink: 28 bytes leftover after parsing attributes in process `syz.8.280'. [ 204.377922][ T5679] usb 5-1: Using ep0 maxpacket: 32 [ 204.380901][ T191] peak_usb 6-1:1.0: probe with driver peak_usb failed with error -22 [ 204.382765][ T5679] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 204.385904][ T5679] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 204.385930][ T5679] usb 5-1: config 0 has no interface number 0 [ 204.385972][ T5679] usb 5-1: config 0 interface 12 has no altsetting 0 [ 204.443975][ T191] usb 6-1: USB disconnect, device number 16 [ 204.457443][ T5679] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.457474][ T5679] usb 5-1: Product: syz [ 204.457489][ T5679] usb 5-1: Manufacturer: syz [ 204.457505][ T5679] usb 5-1: SerialNumber: syz [ 204.492227][ T5679] usb 5-1: config 0 descriptor?? [ 205.474780][ T191] usb 10-1: USB disconnect, device number 3 [ 205.546138][ T191] legousbtower 10-1:14.228: LEGO USB Tower #-160 now disconnected [ 205.615853][ T7293] FAULT_INJECTION: forcing a failure. [ 205.615853][ T7293] name failslab, interval 1, probability 0, space 0, times 0 [ 205.615889][ T7293] CPU: 1 UID: 0 PID: 7293 Comm: syz.8.283 Not tainted syzkaller #0 PREEMPT(full) [ 205.615913][ T7293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 205.615926][ T7293] Call Trace: [ 205.615934][ T7293] [ 205.615943][ T7293] dump_stack_lvl+0xe8/0x150 [ 205.615980][ T7293] should_fail_ex+0x410/0x560 [ 205.616012][ T7293] should_failslab+0xa8/0x100 [ 205.616043][ T7293] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 205.616070][ T7293] ? kasprintf+0xe2/0x140 [ 205.616096][ T7293] ? kasprintf+0xe2/0x140 [ 205.616130][ T7293] kvasprintf+0xeb/0x1a0 [ 205.616156][ T7293] ? sock_sendmsg_nosec+0x13a/0x180 [ 205.616179][ T7293] ? ____sys_sendmsg+0x54e/0x850 [ 205.616208][ T7293] ? ___sys_sendmsg+0x2a5/0x360 [ 205.616238][ T7293] ? __pfx_kvasprintf+0x10/0x10 [ 205.616284][ T7293] kasprintf+0xe2/0x140 [ 205.616320][ T7293] ? __pfx_kasprintf+0x10/0x10 [ 205.616362][ T7293] nf_tables_set_alloc_name+0x10e/0x710 [ 205.616385][ T7293] ? trace_kmalloc+0x2a/0xf0 [ 205.616411][ T7293] ? nf_tables_newset+0x134a/0x2570 [ 205.616439][ T7293] ? __kmalloc_noprof+0x1ab/0x720 [ 205.616461][ T7293] ? __pfx_nf_tables_set_alloc_name+0x10/0x10 [ 205.616484][ T7293] ? nla_strdup+0xb8/0x140 [ 205.616523][ T7293] nf_tables_newset+0x13aa/0x2570 [ 205.616578][ T7293] ? __pfx_nf_tables_newset+0x10/0x10 [ 205.616612][ T7293] ? lock_acquire+0x115/0x350 [ 205.616648][ T7293] ? __nla_parse+0x40/0x60 [ 205.616679][ T7293] nfnetlink_rcv+0x1288/0x28c0 [ 205.616741][ T7293] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 205.616793][ T7293] ? ref_tracker_free+0x689/0x830 [ 205.616841][ T7293] ? skb_clone+0x246/0x3a0 [ 205.616874][ T7293] ? __netlink_deliver_tap+0x811/0x860 [ 205.616904][ T7293] ? netlink_deliver_tap+0x2e/0x1b0 [ 205.616925][ T7293] ? netlink_deliver_tap+0x2e/0x1b0 [ 205.616951][ T7293] netlink_unicast+0x7bd/0x940 [ 205.616992][ T7293] netlink_sendmsg+0x813/0xb40 [ 205.617022][ T7293] ? __pfx_netlink_sendmsg+0x10/0x10 [ 205.617052][ T7293] ? apparmor_socket_sendmsg+0x98/0x360 [ 205.617080][ T7293] ? __pfx_netlink_sendmsg+0x10/0x10 [ 205.617097][ T7293] sock_sendmsg_nosec+0x13a/0x180 [ 205.617123][ T7293] ____sys_sendmsg+0x54e/0x850 [ 205.617175][ T7293] ? __pfx_____sys_sendmsg+0x10/0x10 [ 205.617217][ T7293] ? import_iovec+0x73/0xa0 [ 205.617249][ T7293] ___sys_sendmsg+0x2a5/0x360 [ 205.617280][ T7293] ? __lock_acquire+0x747/0x2de0 [ 205.617307][ T7293] ? __pfx____sys_sendmsg+0x10/0x10 [ 205.617375][ T7293] ? __fget_files+0x2a/0x420 [ 205.617404][ T7293] ? __fget_files+0x3a2/0x420 [ 205.617445][ T7293] __x64_sys_sendmsg+0x1b1/0x290 [ 205.617487][ T7293] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 205.617541][ T7293] do_syscall_64+0x166/0x520 [ 205.617569][ T7293] ? trace_irq_disable+0x3b/0x140 [ 205.617611][ T7293] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.617635][ T7293] ? clear_bhb_loop+0x70/0xc0 [ 205.617662][ T7293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.617685][ T7293] RIP: 0033:0x7fb01099e159 [ 205.617707][ T7293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.617726][ T7293] RSP: 002b:00007fb011798028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 205.617799][ T7293] RAX: ffffffffffffffda RBX: 00007fb010c25fa0 RCX: 00007fb01099e159 [ 205.617817][ T7293] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 205.617831][ T7293] RBP: 00007fb011798090 R08: 0000000000000000 R09: 0000000000000000 [ 205.617846][ T7293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.617859][ T7293] R13: 00007fb010c26038 R14: 00007fb010c25fa0 R15: 00007fb010d4fa48 [ 205.617904][ T7293] [ 206.094634][ T5679] f81534 5-1:0.12: f81534_set_register: reg: 1003 data: c0 failed: -71 [ 206.094704][ T5679] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 206.094718][ T5679] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 206.094779][ T5679] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 206.162520][ T5679] usb 5-1: USB disconnect, device number 19 [ 206.611606][ T5615] Bluetooth: hci1: command 0x0406 tx timeout [ 208.152973][ T7327] netlink: 8 bytes leftover after parsing attributes in process `syz.5.290'. [ 208.175712][ T7327] netlink: 8 bytes leftover after parsing attributes in process `syz.5.290'. [ 208.175782][ T7327] FAULT_INJECTION: forcing a failure. [ 208.175782][ T7327] name failslab, interval 1, probability 0, space 0, times 0 [ 208.175804][ T7327] CPU: 1 UID: 0 PID: 7327 Comm: syz.5.290 Not tainted syzkaller #0 PREEMPT(full) [ 208.175821][ T7327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 208.175831][ T7327] Call Trace: [ 208.175837][ T7327] [ 208.175844][ T7327] dump_stack_lvl+0xe8/0x150 [ 208.175870][ T7327] should_fail_ex+0x410/0x560 [ 208.175893][ T7327] should_failslab+0xa8/0x100 [ 208.175914][ T7327] ? skb_clone+0x212/0x3a0 [ 208.175939][ T7327] kmem_cache_alloc_noprof+0xa1/0x600 [ 208.175967][ T7327] ? skb_clone+0x212/0x3a0 [ 208.175996][ T7327] skb_clone+0x212/0x3a0 [ 208.176029][ T7327] __netlink_deliver_tap+0x413/0x860 [ 208.176053][ T7327] ? netlink_deliver_tap+0x2e/0x1b0 [ 208.176071][ T7327] netlink_deliver_tap+0x19c/0x1b0 [ 208.176088][ T7327] netlink_sendskb+0x68/0x140 [ 208.176114][ T7327] netlink_rcv_skb+0x2a4/0x4a0 [ 208.176130][ T7327] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 208.176153][ T7327] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 208.176178][ T7327] ? netlink_deliver_tap+0x2e/0x1b0 [ 208.176194][ T7327] ? netlink_deliver_tap+0x2e/0x1b0 [ 208.176214][ T7327] netlink_unicast+0x7bd/0x940 [ 208.176246][ T7327] netlink_sendmsg+0x813/0xb40 [ 208.176269][ T7327] ? __pfx_netlink_sendmsg+0x10/0x10 [ 208.176291][ T7327] ? apparmor_socket_sendmsg+0x98/0x360 [ 208.176313][ T7327] ? __pfx_netlink_sendmsg+0x10/0x10 [ 208.176329][ T7327] sock_sendmsg_nosec+0x13a/0x180 [ 208.176349][ T7327] ____sys_sendmsg+0x54e/0x850 [ 208.176376][ T7327] ? __pfx_____sys_sendmsg+0x10/0x10 [ 208.176406][ T7327] ? import_iovec+0x73/0xa0 [ 208.176430][ T7327] ___sys_sendmsg+0x2a5/0x360 [ 208.176452][ T7327] ? __lock_acquire+0x747/0x2de0 [ 208.176473][ T7327] ? __pfx____sys_sendmsg+0x10/0x10 [ 208.176500][ T7327] ? kstrtouint+0x6e/0xe0 [ 208.176536][ T7327] ? __fget_files+0x2a/0x420 [ 208.176559][ T7327] ? __fget_files+0x3a2/0x420 [ 208.176590][ T7327] __sys_sendmmsg+0x273/0x4d0 [ 208.176617][ T7327] ? __pfx___sys_sendmmsg+0x10/0x10 [ 208.176647][ T7327] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 208.176681][ T7327] ? ksys_write+0x242/0x270 [ 208.176702][ T7327] ? __pfx_ksys_write+0x10/0x10 [ 208.176722][ T7327] __x64_sys_sendmmsg+0xa0/0xc0 [ 208.176747][ T7327] do_syscall_64+0x166/0x520 [ 208.176768][ T7327] ? trace_irq_disable+0x3b/0x140 [ 208.176785][ T7327] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.176802][ T7327] ? clear_bhb_loop+0x70/0xc0 [ 208.176821][ T7327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.176837][ T7327] RIP: 0033:0x7ffbb5f9e159 [ 208.176851][ T7327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.176864][ T7327] RSP: 002b:00007ffbb6e7c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 208.176880][ T7327] RAX: ffffffffffffffda RBX: 00007ffbb6225fa0 RCX: 00007ffbb5f9e159 [ 208.176892][ T7327] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000004 [ 208.176903][ T7327] RBP: 00007ffbb6e7c090 R08: 0000000000000000 R09: 0000000000000000 [ 208.176913][ T7327] R10: 000000000000fff0 R11: 0000000000000246 R12: 0000000000000001 [ 208.176923][ T7327] R13: 00007ffbb6226038 R14: 00007ffbb6225fa0 R15: 00007ffbb634fa48 [ 208.176947][ T7327] [ 208.986400][ T30] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 209.000117][ T30] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 209.032931][ T31] kauditd_printk_skb: 16 callbacks suppressed [ 209.032952][ T31] audit: type=1326 audit(1790969717.410:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7332 comm="syz.4.291" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccab19e159 code=0x7ffc0000 [ 209.033004][ T31] audit: type=1326 audit(1790969717.410:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7332 comm="syz.4.291" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccab19e159 code=0x7ffc0000 [ 209.078081][ T31] audit: type=1326 audit(1790969717.440:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7332 comm="syz.4.291" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fccab19e159 code=0x7ffc0000 [ 209.146329][ T31] audit: type=1326 audit(1790969717.440:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7332 comm="syz.4.291" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccab19e159 code=0x7ffc0000 [ 209.146368][ T31] audit: type=1326 audit(1790969717.530:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7332 comm="syz.4.291" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7fccab19e159 code=0x7ffc0000 [ 209.146398][ T31] audit: type=1326 audit(1790969717.530:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7332 comm="syz.4.291" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccab19e159 code=0x7ffc0000 [ 209.146427][ T31] audit: type=1326 audit(1790969717.530:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7332 comm="syz.4.291" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccab19e159 code=0x7ffc0000 [ 209.342710][ T7339] FAULT_INJECTION: forcing a failure. [ 209.342710][ T7339] name failslab, interval 1, probability 0, space 0, times 0 [ 209.342747][ T7339] CPU: 1 UID: 0 PID: 7339 Comm: syz.9.294 Not tainted syzkaller #0 PREEMPT(full) [ 209.342772][ T7339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 209.342786][ T7339] Call Trace: [ 209.342795][ T7339] [ 209.342804][ T7339] dump_stack_lvl+0xe8/0x150 [ 209.342840][ T7339] should_fail_ex+0x410/0x560 [ 209.342872][ T7339] should_failslab+0xa8/0x100 [ 209.342903][ T7339] __kmalloc_noprof+0xfe/0x720 [ 209.342928][ T7339] ? __memcg_list_lru_alloc+0x1d9/0x760 [ 209.342952][ T7339] ? __memcg_list_lru_alloc+0x1d9/0x760 [ 209.342985][ T7339] __memcg_list_lru_alloc+0x1d9/0x760 [ 209.343020][ T7339] ? __pfx___memcg_list_lru_alloc+0x10/0x10 [ 209.343063][ T7339] __memcg_slab_post_alloc_hook+0x3c3/0xd90 [ 209.343092][ T7339] ? __memcg_slab_post_alloc_hook+0x202/0xd90 [ 209.343133][ T7339] kmem_cache_alloc_lru_noprof+0x351/0x5f0 [ 209.343156][ T7339] ? kmem_cache_alloc_lru_noprof+0x153/0x5f0 [ 209.343179][ T7339] ? alloc_inode+0xb8/0x1b0 [ 209.343205][ T7339] ? alloc_inode+0xb8/0x1b0 [ 209.343240][ T7339] alloc_inode+0xb8/0x1b0 [ 209.343270][ T7339] path_from_stashed+0x205/0x580 [ 209.343303][ T7339] open_namespace_file+0x97/0x140 [ 209.343337][ T7339] ? __pfx_open_namespace_file+0x10/0x10 [ 209.343374][ T7339] ? do_raw_spin_unlock+0xf5/0x200 [ 209.343412][ T7339] open_new_namespace+0x1fb/0xd90 [ 209.343565][ T7339] ? vfs_open_tree+0x32d/0x3d0 [ 209.343596][ T7339] ? __pfx_open_new_namespace+0x10/0x10 [ 209.343628][ T7339] ? do_getname+0x151/0x250 [ 209.343658][ T7339] vfs_open_tree+0x32d/0x3d0 [ 209.343685][ T7339] ? __pfx_vfs_open_tree+0x10/0x10 [ 209.343720][ T7339] __x64_sys_open_tree+0x96/0x110 [ 209.343753][ T7339] do_syscall_64+0x166/0x520 [ 209.343784][ T7339] ? trace_irq_disable+0x3b/0x140 [ 209.343807][ T7339] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.343830][ T7339] ? clear_bhb_loop+0x70/0xc0 [ 209.343866][ T7339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.343889][ T7339] RIP: 0033:0x7f10d2d9e159 [ 209.343909][ T7339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.343929][ T7339] RSP: 002b:00007f10d3c58028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 209.343952][ T7339] RAX: ffffffffffffffda RBX: 00007f10d3025fa0 RCX: 00007f10d2d9e159 [ 209.343969][ T7339] RDX: 0000000000001902 RSI: 0000200000000640 RDI: ffffffffffffff9c [ 209.343985][ T7339] RBP: 00007f10d3c58090 R08: 0000000000000000 R09: 0000000000000000 [ 209.343999][ T7339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.344013][ T7339] R13: 00007f10d3026038 R14: 00007f10d3025fa0 R15: 00007f10d314fa48 [ 209.344048][ T7339] [ 209.969157][ T7342] netlink: 44 bytes leftover after parsing attributes in process `syz.5.293'. [ 210.275634][ T7347] FAULT_INJECTION: forcing a failure. [ 210.275634][ T7347] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.275661][ T7347] CPU: 0 UID: 0 PID: 7347 Comm: syz.9.296 Not tainted syzkaller #0 PREEMPT(full) [ 210.275678][ T7347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 210.275688][ T7347] Call Trace: [ 210.275693][ T7347] [ 210.275700][ T7347] dump_stack_lvl+0xe8/0x150 [ 210.275727][ T7347] should_fail_ex+0x410/0x560 [ 210.275750][ T7347] _copy_from_user+0x2d/0xb0 [ 210.275772][ T7347] kstrtouint_from_user+0xd6/0x180 [ 210.275791][ T7347] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 210.275814][ T7347] ? lock_acquire+0x115/0x350 [ 210.275835][ T7347] proc_fail_nth_write+0x8e/0x210 [ 210.275851][ T7347] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 210.275873][ T7347] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 210.275889][ T7347] vfs_write+0x296/0xba0 [ 210.275909][ T7347] ? __pfx_vfs_write+0x10/0x10 [ 210.275935][ T7347] ? __fget_files+0x2a/0x420 [ 210.275960][ T7347] ? __fget_files+0x3a2/0x420 [ 210.275982][ T7347] ? __fget_files+0x2a/0x420 [ 210.276010][ T7347] ksys_write+0x150/0x270 [ 210.276026][ T7347] ? __pfx_ksys_write+0x10/0x10 [ 210.276049][ T7347] do_syscall_64+0x166/0x520 [ 210.276070][ T7347] ? trace_irq_disable+0x3b/0x140 [ 210.276086][ T7347] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.276102][ T7347] ? clear_bhb_loop+0x70/0xc0 [ 210.276121][ T7347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.276137][ T7347] RIP: 0033:0x7f10d2d5e98e [ 210.276151][ T7347] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 210.276165][ T7347] RSP: 002b:00007f10d3c57fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 210.276181][ T7347] RAX: ffffffffffffffda RBX: 00007f10d3c586c0 RCX: 00007f10d2d5e98e [ 210.276192][ T7347] RDX: 0000000000000001 RSI: 00007f10d3c580a0 RDI: 0000000000000004 [ 210.276202][ T7347] RBP: 00007f10d3c58090 R08: 0000000000000000 R09: 0000000000000000 [ 210.276212][ T7347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.276221][ T7347] R13: 00007f10d3026038 R14: 00007f10d3025fa0 R15: 00007f10d314fa48 [ 210.276245][ T7347] [ 210.547849][ T10] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 210.717673][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 210.723053][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 210.723113][ T10] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 210.725979][ T10] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 210.726008][ T10] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 210.726029][ T10] usb 5-1: config 14 has no interface number 0 [ 210.726047][ T10] usb 5-1: config 14 has no interface number 1 [ 210.726119][ T10] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 210.726138][ T10] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 210.726156][ T10] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 210.726175][ T10] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 210.726195][ T10] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 210.726215][ T10] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 210.726234][ T10] usb 5-1: config 14 interface 57 has no altsetting 0 [ 210.726247][ T10] usb 5-1: config 14 interface 228 has no altsetting 0 [ 210.884948][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.884980][ T10] usb 5-1: Product: syz [ 210.884997][ T10] usb 5-1: Manufacturer: syz [ 210.885013][ T10] usb 5-1: SerialNumber: syz [ 210.987232][ T7350] capability: warning: `syz.6.297' uses deprecated v2 capabilities in a way that may be insecure [ 210.999253][ T7350] tmpfs: Unknown parameter 'n‹' [ 211.550768][ T7333] netlink: 'syz.8.292': attribute type 1 has an invalid length. [ 211.878631][ T7333] 8021q: adding VLAN 0 to HW filter on device bond1 [ 211.897351][ T10] legousbtower 5-1:14.57: interrupt endpoints not found [ 212.012308][ T5679] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 212.081561][ T7373] bond1: (slave geneve2): making interface the new active one [ 212.123439][ T7373] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 212.208272][ T5679] usb 7-1: Using ep0 maxpacket: 16 [ 212.217809][ T5679] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 212.226003][ T5679] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 212.235452][ T5679] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.235608][ T5679] usb 7-1: Product: syz [ 212.235658][ T5679] usb 7-1: Manufacturer: syz [ 212.235687][ T5679] usb 7-1: SerialNumber: syz [ 212.304108][ T5679] usb 7-1: config 0 descriptor?? [ 212.346159][ T5679] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 212.347409][ T5679] usb 7-1: Detected FT232R [ 212.440074][ T10] legousbtower 5-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 212.458533][ T10] legousbtower 5-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 212.736474][ T5679] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 212.736834][ T5679] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 212.737224][ T5679] ftdi_sio 7-1:0.0: GPIO initialisation failed: -71 [ 212.792320][ T5679] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 212.812730][ T5679] usb 7-1: USB disconnect, device number 9 [ 212.916414][ T5679] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 212.934345][ T5679] ftdi_sio 7-1:0.0: device disconnected [ 213.057768][ T7359] usb 5-1: LEGO USB Tower reset control request failed [ 214.544145][ T7394] netlink: 14 bytes leftover after parsing attributes in process `syz.8.303'. [ 214.753231][ T30] usb 5-1: USB disconnect, device number 20 [ 214.796340][ T30] legousbtower 5-1:14.228: LEGO USB Tower #-160 now disconnected [ 216.185060][ T7417] Context (ID=0x0) not attached to queue pair (handle=0x4db:0x0) [ 216.901526][ T7427] netlink: 132 bytes leftover after parsing attributes in process `syz.5.308'. [ 217.171917][ T7439] netlink: 24 bytes leftover after parsing attributes in process `syz.6.311'. [ 217.217369][ T7436] netlink: 24 bytes leftover after parsing attributes in process `syz.6.311'. [ 218.175014][ T7449] syzkaller1: entered promiscuous mode [ 218.175040][ T7449] syzkaller1: entered allmulticast mode [ 218.750230][ T30] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 218.898110][ T30] usb 5-1: Using ep0 maxpacket: 32 [ 218.900647][ T30] usb 5-1: unable to get BOS descriptor or descriptor too short [ 218.900684][ T30] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 218.901709][ T30] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 218.901736][ T30] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 218.901763][ T30] usb 5-1: config 14 has no interface number 0 [ 218.901775][ T30] usb 5-1: config 14 has no interface number 1 [ 218.901818][ T30] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 218.901835][ T30] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 218.901854][ T30] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 218.901873][ T30] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 218.901893][ T30] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 218.901912][ T30] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 218.901932][ T30] usb 5-1: config 14 interface 57 has no altsetting 0 [ 218.901946][ T30] usb 5-1: config 14 interface 228 has no altsetting 0 [ 218.906978][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.906999][ T30] usb 5-1: Product: syz [ 218.907010][ T30] usb 5-1: Manufacturer: syz [ 218.907020][ T30] usb 5-1: SerialNumber: syz [ 218.968068][ T5679] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 219.175210][ T5679] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 219.196109][ T5679] usb 10-1: config index 0 descriptor too short (expected 23569, got 27) [ 219.196166][ T5679] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.234829][ T5679] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 219.234894][ T5679] usb 10-1: Manufacturer: syz [ 219.281242][ T5679] usb 10-1: config 0 descriptor?? [ 219.625735][ T5679] rc_core: IR keymap rc-hauppauge not found [ 219.625755][ T5679] Registered IR keymap rc-empty [ 219.646605][ T5679] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 219.685954][ T5679] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input19 [ 219.911549][ T30] legousbtower 5-1:14.57: interrupt endpoints not found [ 220.073228][ T5679] usb 10-1: USB disconnect, device number 4 [ 220.237590][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 220.298288][ T5702] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 220.315654][ T30] legousbtower 5-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 220.334083][ T30] legousbtower 5-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 220.926054][ T7469] usb 5-1: LEGO USB Tower reset control request failed [ 221.543931][ T7510] input: syz0 as /devices/virtual/input/input20 [ 221.728257][ T191] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 221.932232][ T191] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 221.935326][ T191] usb 10-1: config index 0 descriptor too short (expected 39, got 27) [ 221.935380][ T191] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 221.935407][ T191] usb 10-1: config 0 interface 0 has no altsetting 0 [ 221.943801][ T191] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 221.943886][ T191] usb 10-1: Product: syz [ 221.943930][ T191] usb 10-1: Manufacturer: syz [ 221.943973][ T191] usb 10-1: SerialNumber: syz [ 222.028937][ T191] usb 10-1: config 0 descriptor?? [ 222.057457][ T191] hub 10-1:0.0: bad descriptor, ignoring hub [ 222.057479][ T191] hub 10-1:0.0: probe with driver hub failed with error -5 [ 222.105860][ T191] usb 10-1: selecting invalid altsetting 0 [ 222.227261][ T7508] IPVS: set_ctl: invalid protocol: 2316 172.20.20.170:19999 [ 222.542843][ T5702] usb 5-1: USB disconnect, device number 21 [ 222.725776][ T5702] legousbtower 5-1:14.228: LEGO USB Tower #-160 now disconnected [ 223.214784][ T5702] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 223.378232][ T5702] usb 5-1: Using ep0 maxpacket: 32 [ 223.378886][ T5702] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 223.379660][ T5702] usb 5-1: config 0 has no interfaces? [ 223.385013][ T5702] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.385041][ T5702] usb 5-1: Product: syz [ 223.385057][ T5702] usb 5-1: Manufacturer: syz [ 223.385073][ T5702] usb 5-1: SerialNumber: syz [ 223.437462][ T5702] usb 5-1: config 0 descriptor?? [ 223.629856][ T191] usb 10-1: reset high-speed USB device number 5 using dummy_hcd [ 224.141097][ T191] usb 10-1: failed to restore interface 0 altsetting 251 (error=-71) [ 224.181275][ T191] usb 10-1: USB disconnect, device number 5 [ 224.340787][ T5679] usb 5-1: USB disconnect, device number 22 [ 224.701815][ T7551] netlink: 24 bytes leftover after parsing attributes in process `syz.6.329'. [ 224.719086][ T5629] udevd[5629]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 224.774356][ T7551] netlink: 28 bytes leftover after parsing attributes in process `syz.6.329'. [ 224.774395][ T7551] netlink: 28 bytes leftover after parsing attributes in process `syz.6.329'. [ 224.892216][ T7553] netlink: 28 bytes leftover after parsing attributes in process `syz.6.329'. [ 224.892256][ T7553] netlink: 28 bytes leftover after parsing attributes in process `syz.6.329'. [ 225.039814][ T7550] FAULT_INJECTION: forcing a failure. [ 225.039814][ T7550] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.039840][ T7550] CPU: 1 UID: 0 PID: 7550 Comm: syz.4.330 Not tainted syzkaller #0 PREEMPT(full) [ 225.039858][ T7550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 225.039868][ T7550] Call Trace: [ 225.039875][ T7550] [ 225.039881][ T7550] dump_stack_lvl+0xe8/0x150 [ 225.039913][ T7550] should_fail_ex+0x410/0x560 [ 225.039936][ T7550] _copy_from_iter+0x3b0/0x1660 [ 225.039962][ T7550] ? rcu_is_watching+0x16/0xb0 [ 225.039989][ T7550] ? __pfx__copy_from_iter+0x10/0x10 [ 225.040006][ T7550] ? trace_kmalloc+0x2a/0xf0 [ 225.040023][ T7550] ? bcm_tx_setup+0xdf6/0x1c00 [ 225.040040][ T7550] ? __kmalloc_noprof+0x38c/0x720 [ 225.040063][ T7550] bcm_tx_setup+0xe97/0x1c00 [ 225.040090][ T7550] bcm_sendmsg+0x50d/0x7a0 [ 225.040116][ T7550] ? __pfx_bcm_sendmsg+0x10/0x10 [ 225.040148][ T7550] ? apparmor_socket_sendmsg+0x98/0x360 [ 225.040170][ T7550] ? __pfx_bcm_sendmsg+0x10/0x10 [ 225.040192][ T7550] sock_sendmsg_nosec+0x13a/0x180 [ 225.040213][ T7550] ____sys_sendmsg+0x54e/0x850 [ 225.040240][ T7550] ? __pfx_____sys_sendmsg+0x10/0x10 [ 225.040270][ T7550] ? import_iovec+0x73/0xa0 [ 225.040293][ T7550] ___sys_sendmsg+0x2a5/0x360 [ 225.040315][ T7550] ? __lock_acquire+0x747/0x2de0 [ 225.040335][ T7550] ? __pfx____sys_sendmsg+0x10/0x10 [ 225.040384][ T7550] ? __fget_files+0x2a/0x420 [ 225.040406][ T7550] ? __fget_files+0x3a2/0x420 [ 225.040436][ T7550] __x64_sys_sendmsg+0x1b1/0x290 [ 225.040462][ T7550] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 225.040503][ T7550] do_syscall_64+0x166/0x520 [ 225.040525][ T7550] ? trace_irq_disable+0x3b/0x140 [ 225.040542][ T7550] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.040558][ T7550] ? clear_bhb_loop+0x70/0xc0 [ 225.040578][ T7550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.040594][ T7550] RIP: 0033:0x7fccab19e159 [ 225.040608][ T7550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.040622][ T7550] RSP: 002b:00007fccac138028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 225.040639][ T7550] RAX: ffffffffffffffda RBX: 00007fccab425fa0 RCX: 00007fccab19e159 [ 225.040651][ T7550] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 225.040661][ T7550] RBP: 00007fccac138090 R08: 0000000000000000 R09: 0000000000000000 [ 225.040671][ T7550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.040680][ T7550] R13: 00007fccab426038 R14: 00007fccab425fa0 R15: 00007fccab54fa48 [ 225.040704][ T7550] [ 225.614428][ T7559] netlink: 4 bytes leftover after parsing attributes in process `syz.9.331'. [ 225.657668][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 227.261537][ T31] audit: type=1326 audit(1790969735.650:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7590 comm="syz.4.337" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fccab19e159 code=0x0 [ 227.608621][ T191] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 227.759695][ T191] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 227.766146][ T191] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.802638][ T191] usb 6-1: config 0 descriptor?? [ 227.846445][ T191] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 228.246838][ T191] gspca_cpia1: usb_control_msg 03, error -32 [ 228.374686][ T191] gspca_cpia1: usb_control_msg 03, error -71 [ 228.379348][ T191] gspca_cpia1: usb_control_msg 01, error -71 [ 228.379402][ T191] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0) [ 228.427165][ T191] usb 6-1: USB disconnect, device number 18 [ 228.503372][ T7612] syzkaller0: entered promiscuous mode [ 228.503401][ T7612] syzkaller0: entered allmulticast mode [ 228.589278][ T7612] 0: reclassify loop, rule prio 0, protocol 700 [ 229.351628][ T989] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 229.539053][ T989] usb 10-1: Using ep0 maxpacket: 32 [ 229.568957][ T989] usb 10-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 229.610737][ T989] usb 10-1: config 0 has an invalid interface number: 12 but max is 0 [ 229.610774][ T989] usb 10-1: config 0 has no interface number 0 [ 229.610826][ T989] usb 10-1: config 0 interface 12 has no altsetting 0 [ 229.643048][ T989] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.643075][ T989] usb 10-1: Product: syz [ 229.643086][ T989] usb 10-1: Manufacturer: syz [ 229.643097][ T989] usb 10-1: SerialNumber: syz [ 229.676621][ T989] usb 10-1: config 0 descriptor?? [ 230.784395][ T989] f81534 10-1:0.12: f81534_set_register: reg: 1003 data: c0 failed: -71 [ 230.784437][ T989] f81534 10-1:0.12: f81534_find_config_idx: read failed: -71 [ 230.784450][ T989] f81534 10-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 230.784506][ T989] f81534 10-1:0.12: probe with driver f81534 failed with error -71 [ 230.787721][ T191] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 230.854490][ T989] usb 10-1: USB disconnect, device number 6 [ 230.921054][ T191] usb 5-1: device descriptor read/64, error -71 [ 230.947518][ T7654] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 231.178353][ T191] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 231.308667][ T191] usb 5-1: device descriptor read/64, error -71 [ 231.348986][ T31] audit: type=1800 audit(1790969739.730:449): pid=7662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.348" name="/" dev="fuse" ino=1 res=0 errno=0 [ 231.419041][ T191] usb usb5-port1: attempt power cycle [ 231.758215][ T191] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 231.782578][ T191] usb 5-1: device descriptor read/8, error -71 [ 231.848417][ T7671] gre1: entered promiscuous mode [ 231.876461][ T12] IPVS: starting estimator thread 0... [ 231.942208][ T7674] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[5830] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ      rr @  @       rr s     & %½p ûÛß% \x07 gF- [ 231.957680][ T7677] IPVS: using max 40 ests per chain, 96000 per kthread [ 232.133110][ T191] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 232.157667][ T191] usb 5-1: device descriptor read/8, error -71 [ 232.189387][ T10] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 232.266749][ T7668] xt_CT: You must specify a L4 protocol and not use inversions on it [ 232.269082][ T191] usb usb5-port1: unable to enumerate USB device [ 232.361957][ T10] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 232.389003][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.389066][ T10] usb 6-1: Product: syz [ 232.389084][ T10] usb 6-1: Manufacturer: syz [ 232.389100][ T10] usb 6-1: SerialNumber: syz [ 232.634580][ T10] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 233.270207][ T7674] program syz.5.352 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 233.339667][ T7698] syz.8.355 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 233.339721][ T7698] CPU: 1 UID: 0 PID: 7698 Comm: syz.8.355 Not tainted syzkaller #0 PREEMPT(full) [ 233.339747][ T7698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 233.339762][ T7698] Call Trace: [ 233.339771][ T7698] [ 233.339782][ T7698] dump_stack_lvl+0xe8/0x150 [ 233.339821][ T7698] dump_header+0xd3/0x4b0 [ 233.339854][ T7698] oom_kill_process+0x3ab/0x9e0 [ 233.339897][ T7698] out_of_memory+0x1064/0x1480 [ 233.339928][ T7698] ? try_charge_memcg+0xc32/0x15e0 [ 233.339971][ T7698] ? __pfx_out_of_memory+0x10/0x10 [ 233.340000][ T7698] ? do_raw_spin_unlock+0xf5/0x200 [ 233.340053][ T7698] try_charge_memcg+0xcdf/0x15e0 [ 233.340105][ T7698] ? __pfx_try_charge_memcg+0x10/0x10 [ 233.340143][ T7698] ? percpu_ref_tryget+0x15/0x180 [ 233.340184][ T7698] ? __obj_cgroup_charge+0x36/0x2c0 [ 233.340214][ T7698] __obj_cgroup_charge+0x1fd/0x2c0 [ 233.340233][ T7698] ? __obj_cgroup_charge+0x36/0x2c0 [ 233.340278][ T7698] __memcg_slab_post_alloc_hook+0x766/0xd90 [ 233.340327][ T7698] __kmalloc_cache_noprof+0x366/0x600 [ 233.340352][ T7698] ? __kmalloc_cache_noprof+0x14d/0x600 [ 233.340373][ T7698] ? alloc_mnt_ns+0xb3/0x2c0 [ 233.340407][ T7698] ? alloc_mnt_ns+0xb3/0x2c0 [ 233.340434][ T7698] alloc_mnt_ns+0xb3/0x2c0 [ 233.340485][ T7698] open_new_namespace+0x1ca/0xd90 [ 233.340524][ T7698] ? __pfx_open_new_namespace+0x10/0x10 [ 233.340549][ T7698] ? strncpy_from_user+0x150/0x2c0 [ 233.340669][ T7698] ? do_getname+0x151/0x250 [ 233.340706][ T7698] vfs_open_tree+0x32d/0x3d0 [ 233.340735][ T7698] ? __pfx_vfs_open_tree+0x10/0x10 [ 233.340782][ T7698] __x64_sys_open_tree+0x96/0x110 [ 233.340819][ T7698] do_syscall_64+0x166/0x520 [ 233.340842][ T7698] ? trace_irq_disable+0x3b/0x140 [ 233.340881][ T7698] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.340905][ T7698] ? clear_bhb_loop+0x70/0xc0 [ 233.340934][ T7698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.340957][ T7698] RIP: 0033:0x7fb01099e159 [ 233.341027][ T7698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.341096][ T7698] RSP: 002b:00007fb011798028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 233.341127][ T7698] RAX: ffffffffffffffda RBX: 00007fb010c25fa0 RCX: 00007fb01099e159 [ 233.341145][ T7698] RDX: 0000000000001902 RSI: 0000200000000640 RDI: ffffffffffffff9c [ 233.341162][ T7698] RBP: 00007fb010a3506b R08: 0000000000000000 R09: 0000000000000000 [ 233.341177][ T7698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 233.341191][ T7698] R13: 00007fb010c26038 R14: 00007fb010c25fa0 R15: 00007fb010d4fa48 [ 233.341228][ T7698] [ 233.345116][ T7698] memory: usage 0kB, limit 0kB, failcnt 101 [ 233.345137][ T7698] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 233.345151][ T7698] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 233.345164][ T7698] Memory cgroup stats for /syz8/test [ 233.737187][ T7701] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[6505] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ      rr @  @       rr s     & %½p ûÛß% \x07 gF- [ 233.776837][ T7698] : [ 233.776955][ T7698] cache 0 [ 233.776965][ T7698] rss 0 [ 233.776973][ T7698] rss_huge 0 [ 233.776981][ T7698] shmem 0 [ 233.776989][ T7698] mapped_file 0 [ 233.776997][ T7698] dirty 0 [ 233.777005][ T7698] writeback 0 [ 233.777013][ T7698] workingset_refault_anon 0 [ 233.777021][ T7698] workingset_refault_file 0 [ 233.777030][ T7698] swap 0 [ 233.777038][ T7698] swapcached 0 [ 233.777046][ T7698] pgpgin 0 [ 233.777053][ T7698] pgpgout 0 [ 233.777061][ T7698] pgfault 11 [ 233.777069][ T7698] pgmajfault 0 [ 233.777076][ T7698] inactive_anon 0 [ 233.777085][ T7698] active_anon 0 [ 233.777092][ T7698] inactive_file 0 [ 233.777101][ T7698] active_file 0 [ 233.777108][ T7698] unevictable 0 [ 233.777117][ T7698] hierarchical_memory_limit 0 [ 233.777125][ T7698] hierarchical_memsw_limit 9223372036854771712 [ 233.777135][ T7698] total_cache 0 [ 233.777143][ T7698] total_rss 0 [ 233.777151][ T7698] total_rss_huge 0 [ 233.777159][ T7698] total_shmem 0 [ 233.777167][ T7698] total_mapped_file 0 [ 233.777188][ T7698] total_dirty 0 [ 233.777195][ T7698] total_writeback 0 [ 233.777203][ T7698] total_workingset_refault_anon 0 [ 233.777212][ T7698] total_workingset_refault_file 0 [ 233.777221][ T7698] total_swap 0 [ 233.777228][ T7698] total_swapcached 0 [ 233.777236][ T7698] total_pgpgin 0 [ 233.777244][ T7698] total_pgpgout 0 [ 233.777251][ T7698] total_pgfault 11 [ 233.777259][ T7698] total_pgmajfault 0 [ 233.777267][ T7698] total_inactive_anon 0 [ 233.777275][ T7698] total_active_anon 0 [ 233.777283][ T7698] total_inactive_file 0 [ 233.777291][ T7698] total_active_file 0 [ 233.777299][ T7698] total_unevictable 0 [ 233.777307][ T7698] anon_cost 0 [ 233.777314][ T7698] file_cost 0 [ 233.777323][ T7698] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz8/test,task_memcg=/syz8/test,task=syz.8.355,pid=7696,uid=0 [ 233.779013][ T7698] Memory cgroup out of memory: Killed process 7696 (syz.8.355) total-vm:102516kB, anon-rss:1444kB, file-rss:23700kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 233.785451][ T10] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 233.785779][ T10] ath9k_htc: Failed to initialize the device [ 234.864726][ T5679] usb 6-1: USB disconnect, device number 19 [ 234.875298][ T5679] usb 6-1: ath9k_htc: USB layer deinitialized [ 235.027642][ T989] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 235.218895][ T989] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 235.270804][ T989] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.270834][ T989] usb 10-1: Product: syz [ 235.270848][ T989] usb 10-1: Manufacturer: syz [ 235.270862][ T989] usb 10-1: SerialNumber: syz [ 235.555679][ T989] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 235.657766][ T5687] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 235.814859][ T5687] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 235.827831][ T5687] usb 7-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 235.827897][ T5687] usb 7-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 235.879978][ T5687] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.880008][ T5687] usb 7-1: Product: syz [ 235.880023][ T5687] usb 7-1: Manufacturer: syz [ 235.880039][ T5687] usb 7-1: SerialNumber: syz [ 235.991664][ T7701] program syz.9.356 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 235.997043][ T5679] usb 10-1: USB disconnect, device number 7 [ 236.064027][ T5687] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 236.382145][ T5702] usb 7-1: USB disconnect, device number 10 [ 236.720389][ T989] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 236.720525][ T989] ath9k_htc: Failed to initialize the device [ 236.754312][ T5679] usb 10-1: ath9k_htc: USB layer deinitialized [ 236.939768][ T31] audit: type=1326 audit(1790969745.330:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7727 comm="syz.9.361" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f10d2d5a5ac code=0x7ffc0000 [ 236.939812][ T31] audit: type=1326 audit(1790969745.330:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7727 comm="syz.9.361" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f10d2d5a60e code=0x7ffc0000 [ 236.939842][ T31] audit: type=1326 audit(1790969745.330:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7727 comm="syz.9.361" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f10d2d9e159 code=0x7ffc0000 [ 236.939872][ T31] audit: type=1326 audit(1790969745.330:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7727 comm="syz.9.361" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10d2d9e159 code=0x7ffc0000 [ 237.069960][ T31] audit: type=1326 audit(1790969745.460:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7727 comm="syz.9.361" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10d2d9e159 code=0x7ffc0000 [ 237.070014][ T31] audit: type=1326 audit(1790969745.460:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7727 comm="syz.9.361" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10d2d9e159 code=0x7ffc0000 [ 237.073641][ T31] audit: type=1326 audit(1790969745.460:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7727 comm="syz.9.361" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10d2d9e159 code=0x7ffc0000 [ 237.168114][ T5687] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 237.168301][ T5687] ath9k_htc: Failed to initialize the device [ 237.168856][ T31] audit: type=1326 audit(1790969745.550:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7727 comm="syz.9.361" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f10d2d5aebb code=0x7ffc0000 [ 237.168924][ T31] audit: type=1326 audit(1790969745.550:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7727 comm="syz.9.361" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10d2d9e159 code=0x7ffc0000 [ 237.168967][ T31] audit: type=1326 audit(1790969745.560:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7727 comm="syz.9.361" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10d2d9e159 code=0x7ffc0000 [ 237.169593][ T5702] usb 7-1: ath9k_htc: USB layer deinitialized [ 237.344957][ T5619] Bluetooth: hci5: command 0x0406 tx timeout [ 237.407655][ T5679] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 237.608363][ T5679] usb 10-1: New USB device found, idVendor=110a, idProduct=1150, bcdDevice=55.9e [ 237.615996][ T5679] usb 10-1: config 0 has an invalid interface number: 70 but max is 0 [ 237.616027][ T5679] usb 10-1: config 0 has no interface number 0 [ 237.616071][ T5679] usb 10-1: config 0 interface 70 altsetting 5 has a duplicate endpoint with address 0x6, skipping [ 237.616103][ T5679] usb 10-1: config 0 interface 70 altsetting 5 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 237.616130][ T5679] usb 10-1: config 0 interface 70 altsetting 5 endpoint 0x83 has invalid maxpacket 42809, setting to 64 [ 237.616158][ T5679] usb 10-1: config 0 interface 70 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 237.616186][ T5679] usb 10-1: config 0 interface 70 has no altsetting 0 [ 237.668126][ T5702] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 237.710698][ T5679] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.710729][ T5679] usb 10-1: Product: syz [ 237.710746][ T5679] usb 10-1: Manufacturer: syz [ 237.710761][ T5679] usb 10-1: SerialNumber: syz [ 237.744929][ T5679] usb 10-1: config 0 descriptor?? [ 237.757525][ T7731] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 237.918993][ T5702] usb 7-1: device descriptor read/64, error -71 [ 237.985636][ T5679] ti_usb_3410_5052 10-1:0.70: TI USB 3410 1 port adapter converter detected [ 238.031525][ T5679] usb 10-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0 [ 238.082773][ T5679] usb 10-1: USB disconnect, device number 8 [ 238.125808][ T5679] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0 [ 238.141727][ T5679] ti_usb_3410_5052 10-1:0.70: device disconnected [ 238.157676][ T5702] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 238.306367][ T5702] usb 7-1: device descriptor read/64, error -71 [ 238.407935][ T5702] usb usb7-port1: attempt power cycle [ 238.976319][ T7754] netlink: 'syz.8.365': attribute type 3 has an invalid length. [ 238.976337][ T7754] netlink: 56 bytes leftover after parsing attributes in process `syz.8.365'. [ 239.080561][ T7762] netlink: 'syz.8.365': attribute type 3 has an invalid length. [ 239.080600][ T7762] netlink: 56 bytes leftover after parsing attributes in process `syz.8.365'. [ 239.177803][ T989] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 239.331710][ T989] usb 10-1: Using ep0 maxpacket: 32 [ 239.340000][ T989] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 239.352268][ T989] usb 10-1: config index 0 descriptor too short (expected 156, got 27) [ 239.352383][ T989] usb 10-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 239.352485][ T989] usb 10-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 239.352558][ T989] usb 10-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 239.352636][ T989] usb 10-1: config 0 interface 0 has no altsetting 0 [ 239.468966][ T989] usb 10-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 239.468999][ T989] usb 10-1: Product: syz [ 239.469015][ T989] usb 10-1: Manufacturer: syz [ 239.469049][ T989] usb 10-1: SerialNumber: syz [ 239.515762][ T989] usb 10-1: config 0 descriptor?? [ 239.548068][ T989] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 239.556392][ T989] ldusb 10-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 239.911066][ T7759] ldusb 10-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 239.916770][ T5754] usb 10-1: USB disconnect, device number 9 [ 239.916856][ C1] ldusb 10-1:0.0: usb_submit_urb failed (-19) [ 240.047093][ T5754] ldusb 10-1:0.0: LD USB Device #0 now disconnected [ 240.248013][ T191] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 240.357837][ T5679] usb 9-1: new full-speed USB device number 17 using dummy_hcd [ 240.418552][ T191] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 240.419836][ T191] usb 5-1: config index 0 descriptor too short (expected 63186, got 210) [ 240.419863][ T191] usb 5-1: config 0 has an invalid interface number: 106 but max is 0 [ 240.419885][ T191] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.419906][ T191] usb 5-1: config 0 has no interface number 0 [ 240.419946][ T191] usb 5-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 240.419971][ T191] usb 5-1: config 0 interface 106 altsetting 0 has an endpoint descriptor with address 0xC7, changing to 0x87 [ 240.419997][ T191] usb 5-1: config 0 interface 106 altsetting 0 endpoint 0x87 has invalid maxpacket 25401, setting to 64 [ 240.420025][ T191] usb 5-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 240.420067][ T191] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.551929][ T5679] usb 9-1: unable to get BOS descriptor or descriptor too short [ 240.555585][ T5679] usb 9-1: not running at top speed; connect to a high speed hub [ 240.555622][ T5679] usb 9-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice= e.3d [ 240.584188][ T5679] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 240.586840][ T5679] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.586861][ T5679] usb 9-1: Product: syz [ 240.586873][ T5679] usb 9-1: Manufacturer: syz [ 240.586884][ T5679] usb 9-1: SerialNumber: syz [ 240.690438][ T191] usb 5-1: config 0 descriptor?? [ 240.750097][ T191] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 240.836988][ T7790] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[6505] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ      rr @  @       rr s     & %½p ûÛß% \x07 gF- [ 241.045356][ T5679] peak_usb 9-1:1.0 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 241.045392][ T5679] peak_usb 9-1:1.0: unable to read PCAN-USB serial number (err -22) [ 241.158206][ T5754] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 241.231109][ T7787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.234206][ T7787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.278007][ T7787] netlink: 240 bytes leftover after parsing attributes in process `syz.4.370'. [ 241.339613][ T5679] peak_usb 9-1:1.0: probe with driver peak_usb failed with error -22 [ 241.358134][ T5679] usb 9-1: USB disconnect, device number 17 [ 241.387946][ T10] usb 5-1: USB disconnect, device number 27 [ 241.396541][ T1194] usb 5-1: Failed to submit usb control message: -71 [ 241.396579][ T1194] usb 5-1: unable to send the bmi data to the device: -71 [ 241.396598][ T1194] usb 5-1: unable to get target info from device [ 241.396629][ T1194] usb 5-1: could not get target info (-71) [ 241.396657][ T1194] usb 5-1: could not probe fw (-71) [ 241.437248][ T5754] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 241.484647][ T5754] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.484680][ T5754] usb 10-1: Product: syz [ 241.484697][ T5754] usb 10-1: Manufacturer: syz [ 241.484713][ T5754] usb 10-1: SerialNumber: syz [ 241.770288][ T989] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 242.244200][ T7790] program syz.9.371 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 242.290018][ T5679] usb 10-1: USB disconnect, device number 10 [ 242.367835][ T10] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 242.524195][ T10] usb 9-1: unable to get BOS descriptor or descriptor too short [ 242.524253][ T10] usb 9-1: New USB device found, idVendor=05ac, idProduct=0263, bcdDevice=72.cc [ 242.526978][ T10] usb 9-1: config index 0 descriptor too short (expected 8768, got 18) [ 242.526998][ T10] usb 9-1: invalid descriptor for config index 0: type = 0x2, length = 3 [ 242.527020][ T10] usb 9-1: can't read configurations, error -22 [ 242.587987][ T7810] netlink: 8 bytes leftover after parsing attributes in process `syz.5.375'. [ 242.588064][ T7810] netlink: 4 bytes leftover after parsing attributes in process `syz.5.375'. [ 242.697830][ T10] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 242.726333][ T7813] netlink: 4 bytes leftover after parsing attributes in process `syz.5.375'. [ 242.797223][ T7810] netlink: 4 bytes leftover after parsing attributes in process `syz.5.375'. [ 242.812469][ T7810] syzkaller0: entered promiscuous mode [ 242.812487][ T7810] syzkaller0: entered allmulticast mode [ 242.863974][ T10] usb 9-1: unable to get BOS descriptor or descriptor too short [ 242.864036][ T10] usb 9-1: New USB device found, idVendor=05ac, idProduct=0263, bcdDevice=72.cc [ 242.886230][ T10] usb 9-1: config index 0 descriptor too short (expected 8768, got 18) [ 242.886252][ T10] usb 9-1: invalid descriptor for config index 0: type = 0x2, length = 3 [ 242.886274][ T10] usb 9-1: can't read configurations, error -22 [ 242.911319][ T10] usb usb9-port1: attempt power cycle [ 242.928183][ T989] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 242.928368][ T989] ath9k_htc: Failed to initialize the device [ 242.930136][ T5679] usb 10-1: ath9k_htc: USB layer deinitialized [ 243.278932][ T10] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 243.322488][ T10] usb 9-1: unable to get BOS descriptor or descriptor too short [ 243.322525][ T10] usb 9-1: New USB device found, idVendor=05ac, idProduct=0263, bcdDevice=72.cc [ 243.324856][ T10] usb 9-1: config index 0 descriptor too short (expected 8768, got 18) [ 243.324876][ T10] usb 9-1: invalid descriptor for config index 0: type = 0x2, length = 3 [ 243.324897][ T10] usb 9-1: can't read configurations, error -22 [ 243.457707][ T10] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 243.496559][ T10] usb 9-1: unable to get BOS descriptor or descriptor too short [ 243.496617][ T10] usb 9-1: New USB device found, idVendor=05ac, idProduct=0263, bcdDevice=72.cc [ 243.514856][ T10] usb 9-1: config index 0 descriptor too short (expected 8768, got 18) [ 243.514884][ T10] usb 9-1: invalid descriptor for config index 0: type = 0x2, length = 3 [ 243.514916][ T10] usb 9-1: can't read configurations, error -22 [ 243.524248][ T10] usb usb9-port1: unable to enumerate USB device [ 245.453680][ T7853] nvme_fabrics: unknown parameter or missing value 'ctrl_loss_tmo=1©÷' in ctrl creation request [ 245.728762][ T7846] syz.9.380 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=1, oom_score_adj=1000 [ 245.728792][ T7846] CPU: 0 UID: 0 PID: 7846 Comm: syz.9.380 Not tainted syzkaller #0 PREEMPT(full) [ 245.728810][ T7846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 245.728828][ T7846] Call Trace: [ 245.728834][ T7846] [ 245.728841][ T7846] dump_stack_lvl+0xe8/0x150 [ 245.728869][ T7846] dump_header+0xd3/0x4b0 [ 245.728892][ T7846] out_of_memory+0x10d4/0x1480 [ 245.728912][ T7846] ? try_charge_memcg+0xc32/0x15e0 [ 245.728943][ T7846] ? __pfx_out_of_memory+0x10/0x10 [ 245.728962][ T7846] ? do_raw_spin_unlock+0xf5/0x200 [ 245.728993][ T7846] try_charge_memcg+0xcdf/0x15e0 [ 245.729027][ T7846] ? __pfx_try_charge_memcg+0x10/0x10 [ 245.729052][ T7846] ? percpu_ref_tryget+0x15/0x180 [ 245.729081][ T7846] ? __obj_cgroup_charge+0x36/0x2c0 [ 245.729101][ T7846] __obj_cgroup_charge+0x1fd/0x2c0 [ 245.729118][ T7846] ? __obj_cgroup_charge+0x36/0x2c0 [ 245.729137][ T7846] __memcg_slab_post_alloc_hook+0x766/0xd90 [ 245.729174][ T7846] __kmalloc_cache_noprof+0x366/0x600 [ 245.729192][ T7846] ? __kmalloc_cache_noprof+0x14d/0x600 [ 245.729207][ T7846] ? mem_cgroup_css_alloc+0x6be/0x1970 [ 245.729225][ T7846] ? mem_cgroup_css_alloc+0x6be/0x1970 [ 245.729251][ T7846] mem_cgroup_css_alloc+0x6be/0x1970 [ 245.729277][ T7846] cgroup_apply_control_enable+0x5bb/0xda0 [ 245.729310][ T7846] cgroup_mkdir+0xd2c/0xf90 [ 245.729337][ T7846] ? __pfx_cgroup_mkdir+0x10/0x10 [ 245.729385][ T7846] kernfs_iop_mkdir+0x213/0x360 [ 245.729420][ T7846] vfs_mkdir+0x40c/0x620 [ 245.729445][ T7846] filename_mkdirat+0x285/0x510 [ 245.729467][ T7846] ? __pfx_filename_mkdirat+0x10/0x10 [ 245.729488][ T7846] ? do_getname+0x151/0x250 [ 245.729511][ T7846] __se_sys_mkdirat+0x35/0x150 [ 245.729531][ T7846] do_syscall_64+0x166/0x520 [ 245.729552][ T7846] ? trace_irq_disable+0x3b/0x140 [ 245.729568][ T7846] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.729584][ T7846] ? clear_bhb_loop+0x70/0xc0 [ 245.729603][ T7846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.729619][ T7846] RIP: 0033:0x7f10d2d9e159 [ 245.729633][ T7846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.729647][ T7846] RSP: 002b:00007f10d3c58028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 245.729665][ T7846] RAX: ffffffffffffffda RBX: 00007f10d3025fa0 RCX: 00007f10d2d9e159 [ 245.729677][ T7846] RDX: 0000000000000020 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 245.729687][ T7846] RBP: 00007f10d2e3506b R08: 0000000000000000 R09: 0000000000000000 [ 245.729697][ T7846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 245.729707][ T7846] R13: 00007f10d3026038 R14: 00007f10d3025fa0 R15: 00007f10d314fa48 [ 245.729732][ T7846] [ 246.133741][ T7846] memory: usage 0kB, limit 0kB, failcnt 19 [ 246.133765][ T7846] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 246.133780][ T7846] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 246.133793][ T7846] Memory cgroup stats for /syz9/test: [ 246.133950][ T7846] cache 0 [ 246.133960][ T7846] rss 0 [ 246.133968][ T7846] rss_huge 0 [ 246.133976][ T7846] shmem 0 [ 246.133982][ T7846] mapped_file 0 [ 246.133990][ T7846] dirty 0 [ 246.133997][ T7846] writeback 0 [ 246.134004][ T7846] workingset_refault_anon 0 [ 246.134013][ T7846] workingset_refault_file 0 [ 246.134021][ T7846] swap 0 [ 246.134028][ T7846] swapcached 0 [ 246.134035][ T7846] pgpgin 0 [ 246.134043][ T7846] pgpgout 0 [ 246.134050][ T7846] pgfault 0 [ 246.134057][ T7846] pgmajfault 0 [ 246.134064][ T7846] inactive_anon 0 [ 246.134072][ T7846] active_anon 0 [ 246.134080][ T7846] inactive_file 0 [ 246.134087][ T7846] active_file 0 [ 246.134095][ T7846] unevictable 0 [ 246.134102][ T7846] hierarchical_memory_limit 0 [ 246.134110][ T7846] hierarchical_memsw_limit 9223372036854771712 [ 246.134120][ T7846] total_cache 0 [ 246.134127][ T7846] total_rss 0 [ 246.134135][ T7846] total_rss_huge 0 [ 246.134142][ T7846] total_shmem 0 [ 246.134150][ T7846] total_mapped_file 0 [ 246.134157][ T7846] total_dirty 0 [ 246.134165][ T7846] total_writeback 0 [ 246.134173][ T7846] total_workingset_refault_anon 0 [ 246.134181][ T7846] total_workingset_refault_file 0 [ 246.134190][ T7846] total_swap 0 [ 246.134197][ T7846] total_swapcached 0 [ 246.134205][ T7846] total_pgpgin 0 [ 246.134212][ T7846] total_pgpgout 0 [ 246.134220][ T7846] total_pgfault 0 [ 246.134227][ T7846] total_pgmajfault 0 [ 246.134235][ T7846] total_inactive_anon 0 [ 246.134243][ T7846] total_active_anon 0 [ 246.134251][ T7846] total_inactive_file 0 [ 246.134259][ T7846] total_active_file 0 [ 246.134267][ T7846] total_unevictable 0 [ 246.134274][ T7846] anon_cost 0 [ 246.134282][ T7846] file_cost 0 [ 246.134290][ T7846] Out of memory and no killable processes... [ 246.357751][ T5754] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 246.523518][ T5754] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 246.527447][ T5754] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.605538][ T5754] usb 9-1: config 0 descriptor?? [ 246.865559][ T5754] udl 9-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 247.206652][ T5754] [drm] Initialized udl 0.0.1 for 9-1:0.0 on minor 1 [ 247.206682][ T5754] [drm] Initialized udl on minor 1 [ 247.567836][ T5615] Bluetooth: hci0: command 0x0406 tx timeout [ 248.372319][ T7882] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[5830] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ      rr @  @       rr s     & %½p ûÛß% \x07 gF- [ 248.627678][ T5709] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 248.794931][ T5709] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 248.815993][ T5709] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.816014][ T5709] usb 6-1: Product: syz [ 248.816025][ T5709] usb 6-1: Manufacturer: syz [ 248.816036][ T5709] usb 6-1: SerialNumber: syz [ 249.005374][ T989] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 249.417099][ T7882] program syz.5.387 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 249.468900][ T5679] usb 6-1: USB disconnect, device number 20 [ 250.129351][ T989] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 250.129505][ T989] ath9k_htc: Failed to initialize the device [ 250.136571][ T5679] usb 6-1: ath9k_htc: USB layer deinitialized [ 250.305478][ T31] kauditd_printk_skb: 44 callbacks suppressed [ 250.305500][ T31] audit: type=1326 audit(1790969758.690:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7900 comm="syz.5.390" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbb5f9e159 code=0x7ffc0000 [ 250.349924][ T31] audit: type=1326 audit(1790969758.740:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7900 comm="syz.5.390" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbb5f9e159 code=0x7ffc0000 [ 250.372192][ T31] audit: type=1326 audit(1790969758.760:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7900 comm="syz.5.390" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbb5f9e159 code=0x7ffc0000 [ 250.376558][ T31] audit: type=1326 audit(1790969758.760:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7900 comm="syz.5.390" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ffbb5f9e159 code=0x7ffc0000 [ 250.377375][ T31] audit: type=1326 audit(1790969758.760:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7900 comm="syz.5.390" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbb5f9e159 code=0x7ffc0000 [ 250.396035][ T31] audit: type=1326 audit(1790969758.780:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7900 comm="syz.5.390" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbb5f9e159 code=0x7ffc0000 [ 250.396236][ T31] audit: type=1326 audit(1790969758.780:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7900 comm="syz.5.390" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbb5f9e159 code=0x7ffc0000 [ 250.401652][ T31] audit: type=1326 audit(1790969758.780:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7900 comm="syz.5.390" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbb5f9e159 code=0x7ffc0000 [ 250.404400][ T31] audit: type=1326 audit(1790969758.780:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7900 comm="syz.5.390" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbb5f9e159 code=0x7ffc0000 [ 250.404576][ T31] audit: type=1326 audit(1790969758.790:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7900 comm="syz.5.390" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffbb5f9e159 code=0x7ffc0000 [ 250.425087][ T7901] netlink: 16 bytes leftover after parsing attributes in process `syz.5.390'. [ 250.597308][ T7902] FAULT_INJECTION: forcing a failure. [ 250.597308][ T7902] name failslab, interval 1, probability 0, space 0, times 0 [ 250.597341][ T7902] CPU: 0 UID: 0 PID: 7902 Comm: syz.5.390 Not tainted syzkaller #0 PREEMPT(full) [ 250.597365][ T7902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 250.597379][ T7902] Call Trace: [ 250.597388][ T7902] [ 250.597397][ T7902] dump_stack_lvl+0xe8/0x150 [ 250.597434][ T7902] should_fail_ex+0x410/0x560 [ 250.597465][ T7902] should_failslab+0xa8/0x100 [ 250.597495][ T7902] __kmalloc_cache_noprof+0xa3/0x600 [ 250.597525][ T7902] ? audit_log_d_path+0xb8/0x1a0 [ 250.597553][ T7902] ? audit_log_d_path+0xb8/0x1a0 [ 250.597590][ T7902] audit_log_d_path+0xb8/0x1a0 [ 250.597621][ T7902] audit_log_d_path_exe+0x42/0x70 [ 250.597650][ T7902] audit_log_task+0x2c3/0x3d0 [ 250.597681][ T7902] ? __pfx_audit_log_task+0x10/0x10 [ 250.597722][ T7902] audit_seccomp+0x85/0x190 [ 250.597754][ T7902] __seccomp_filter+0xd14/0x1de0 [ 250.597795][ T7902] ? __pfx___seccomp_filter+0x10/0x10 [ 250.597820][ T7902] ? __mutex_unlock_slowpath+0x731/0x900 [ 250.597855][ T7902] ? __fget_files+0x2a/0x420 [ 250.597887][ T7902] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 250.597918][ T7902] ? __fget_files+0x3a2/0x420 [ 250.597954][ T7902] ? fput+0xa0/0xd0 [ 250.597985][ T7902] ? __pfx_ksys_write+0x10/0x10 [ 250.598011][ T7902] ? __seccomp_permit_syscall+0xe7/0x2b0 [ 250.598043][ T7902] do_syscall_64+0x11f/0x520 [ 250.598071][ T7902] ? trace_irq_disable+0x3b/0x140 [ 250.598094][ T7902] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.598117][ T7902] ? clear_bhb_loop+0x70/0xc0 [ 250.598144][ T7902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.598165][ T7902] RIP: 0033:0x7ffbb5f9e159 [ 250.598186][ T7902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.598204][ T7902] RSP: 002b:00007ffbb6e5b028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 250.598228][ T7902] RAX: ffffffffffffffda RBX: 00007ffbb6226090 RCX: 00007ffbb5f9e159 [ 250.598244][ T7902] RDX: 0000200000000240 RSI: 0000000000000007 RDI: 0000000000000001 [ 250.598266][ T7902] RBP: 00007ffbb6e5b090 R08: 0000000000000000 R09: 0000000000000000 [ 250.598280][ T7902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.598293][ T7902] R13: 00007ffbb6226128 R14: 00007ffbb6226090 R15: 00007ffbb634fa48 [ 250.598325][ T7902] [ 251.149043][ T7915] netlink: 16 bytes leftover after parsing attributes in process `syz.5.394'. [ 251.190282][ T5679] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 251.337808][ T5679] usb 5-1: Using ep0 maxpacket: 32 [ 251.340356][ T5679] usb 5-1: unable to get BOS descriptor or descriptor too short [ 251.340407][ T5679] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 251.343017][ T5679] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 251.343044][ T5679] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 251.343065][ T5679] usb 5-1: config 14 has no interface number 0 [ 251.343081][ T5679] usb 5-1: config 14 has no interface number 1 [ 251.343148][ T5679] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 251.343182][ T5679] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 251.343210][ T5679] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 251.343237][ T5679] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 251.343264][ T5679] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 251.343293][ T5679] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 251.343311][ T5679] usb 5-1: config 14 interface 57 has no altsetting 0 [ 251.343324][ T5679] usb 5-1: config 14 interface 228 has no altsetting 0 [ 251.436212][ T5679] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.436242][ T5679] usb 5-1: Product: syz [ 251.436258][ T5679] usb 5-1: Manufacturer: syz [ 251.436274][ T5679] usb 5-1: SerialNumber: syz [ 252.289942][ T5754] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 252.313577][ T5754] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 252.367881][ T5754] usb 9-1: USB disconnect, device number 22 [ 252.542341][ T5679] legousbtower 5-1:14.57: interrupt endpoints not found [ 252.691742][ T5619] Bluetooth: hci2: command 0x0406 tx timeout [ 252.724469][ T7932] FAULT_INJECTION: forcing a failure. [ 252.724469][ T7932] name failslab, interval 1, probability 0, space 0, times 0 [ 252.724502][ T7932] CPU: 0 UID: 0 PID: 7932 Comm: syz.8.398 Not tainted syzkaller #0 PREEMPT(full) [ 252.724525][ T7932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 252.724538][ T7932] Call Trace: [ 252.724546][ T7932] [ 252.724555][ T7932] dump_stack_lvl+0xe8/0x150 [ 252.724591][ T7932] should_fail_ex+0x410/0x560 [ 252.724620][ T7932] should_failslab+0xa8/0x100 [ 252.724654][ T7932] ? dst_alloc+0x105/0x170 [ 252.724675][ T7932] kmem_cache_alloc_noprof+0xa1/0x600 [ 252.724710][ T7932] ? dst_alloc+0x105/0x170 [ 252.724735][ T7932] dst_alloc+0x105/0x170 [ 252.724760][ T7932] rt_dst_clone+0x52/0x680 [ 252.724783][ T7932] ip_mc_finish_output+0xea/0x2e0 [ 252.724811][ T7932] ip_mc_output+0x254/0x580 [ 252.724837][ T7932] ip_send_skb+0x45/0xc0 [ 252.724860][ T7932] udp_send_skb+0x7ed/0xf70 [ 252.724894][ T7932] udp_sendmsg+0x1971/0x2140 [ 252.724934][ T7932] ? __pfx_udp_sendmsg+0x10/0x10 [ 252.724967][ T7932] ? __lock_acquire+0x747/0x2de0 [ 252.724996][ T7932] ? current_check_autobind_udp_socket+0x271/0x5b0 [ 252.725041][ T7932] ? aa_sock_msg_perm+0xfc/0x210 [ 252.725067][ T7932] ? sock_rps_record_flow+0x19/0x350 [ 252.725111][ T7932] ? inet_sendmsg+0x23e/0x320 [ 252.725131][ T7932] ? apparmor_socket_sendmsg+0x98/0x360 [ 252.725159][ T7932] ? __pfx_inet_sendmsg+0x10/0x10 [ 252.725181][ T7932] sock_sendmsg_nosec+0x10e/0x180 [ 252.725207][ T7932] ____sys_sendmsg+0x54e/0x850 [ 252.725255][ T7932] ? __pfx_____sys_sendmsg+0x10/0x10 [ 252.725292][ T7932] ? import_iovec+0x73/0xa0 [ 252.725321][ T7932] ___sys_sendmsg+0x2a5/0x360 [ 252.725369][ T7932] ? __lock_acquire+0x747/0x2de0 [ 252.725396][ T7932] ? __pfx____sys_sendmsg+0x10/0x10 [ 252.725432][ T7932] ? kstrtouint+0x6e/0xe0 [ 252.725479][ T7932] ? __fget_files+0x2a/0x420 [ 252.725509][ T7932] ? __fget_files+0x3a2/0x420 [ 252.725549][ T7932] __sys_sendmmsg+0x273/0x4d0 [ 252.725587][ T7932] ? __pfx___sys_sendmmsg+0x10/0x10 [ 252.725627][ T7932] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 252.725682][ T7932] ? ksys_write+0x242/0x270 [ 252.725705][ T7932] ? __pfx_ksys_write+0x10/0x10 [ 252.725733][ T7932] __x64_sys_sendmmsg+0xa0/0xc0 [ 252.725766][ T7932] do_syscall_64+0x166/0x520 [ 252.725795][ T7932] ? trace_irq_disable+0x3b/0x140 [ 252.725818][ T7932] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.725840][ T7932] ? clear_bhb_loop+0x70/0xc0 [ 252.725866][ T7932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.725886][ T7932] RIP: 0033:0x7fb01099e159 [ 252.725905][ T7932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.725922][ T7932] RSP: 002b:00007fb011798028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 252.725944][ T7932] RAX: ffffffffffffffda RBX: 00007fb010c25fa0 RCX: 00007fb01099e159 [ 252.725959][ T7932] RDX: 0400000000000284 RSI: 0000200000004d00 RDI: 0000000000000006 [ 252.725974][ T7932] RBP: 00007fb011798090 R08: 0000000000000000 R09: 0000000000000000 [ 252.725987][ T7932] R10: 0000000000000f00 R11: 0000000000000246 R12: 0000000000000001 [ 252.726000][ T7932] R13: 00007fb010c26038 R14: 00007fb010c25fa0 R15: 00007fb010d4fa48 [ 252.726034][ T7932] [ 253.092080][ T5679] legousbtower 5-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 253.097390][ T5679] legousbtower 5-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 253.368150][ T5754] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 253.441345][ T7938] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[5830] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ      rr @  @       rr s     & %½p ûÛß% \x07 gF- [ 253.519983][ T5754] usb 9-1: Using ep0 maxpacket: 32 [ 253.520699][ T5754] usb 9-1: New USB device found, idVendor=5543, idProduct=0045, bcdDevice= 0.00 [ 253.637739][ T5754] usb 9-1: config 0 has an invalid interface number: 3 but max is 0 [ 253.637761][ T5754] usb 9-1: config 0 has no interface number 0 [ 253.637790][ T5754] usb 9-1: config 0 interface 3 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.637818][ T5754] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.644066][ T5754] usb 9-1: config 0 descriptor?? [ 253.697826][ T989] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 253.703312][ T5754] usbhid 9-1:0.3: couldn't find an input interrupt endpoint [ 253.732112][ T7919] usb 5-1: LEGO USB Tower reset control request failed [ 253.849188][ T989] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 253.857495][ T989] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.866674][ T989] usb 6-1: Product: syz [ 253.866727][ T989] usb 6-1: Manufacturer: syz [ 253.866770][ T989] usb 6-1: SerialNumber: syz [ 253.974444][ T989] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 254.405552][ T7938] program syz.5.400 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 254.979366][ T5754] usb 6-1: USB disconnect, device number 21 [ 255.087829][ T989] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 255.088139][ T989] ath9k_htc: Failed to initialize the device [ 255.088882][ T5754] usb 6-1: ath9k_htc: USB layer deinitialized [ 255.213698][ T5709] usb 5-1: USB disconnect, device number 28 [ 255.272051][ T5709] legousbtower 5-1:14.228: LEGO USB Tower #-160 now disconnected [ 255.692857][ T7953] kvm: requested 5028 ns i8254 timer period limited to 200000 ns [ 255.727335][ T7953] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 255.736613][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.736676][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.769240][ T7953] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 255.769950][ T7953] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 255.770093][ T7953] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 255.770228][ T7953] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 255.770257][ T7953] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 255.770395][ T7953] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 255.770511][ T7953] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 255.770550][ T7953] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 255.895004][ T7960] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 256.217762][ T5709] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 256.358098][ T5702] usb 9-1: USB disconnect, device number 23 [ 256.376037][ T5709] usb 7-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 256.401487][ T5709] usb 7-1: config 0 has an invalid interface number: 83 but max is 0 [ 256.401521][ T5709] usb 7-1: config 0 has an invalid descriptor of length 106, skipping remainder of the config [ 256.401535][ T5709] usb 7-1: config 0 has no interface number 0 [ 256.401562][ T5709] usb 7-1: config 0 interface 83 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 256.476336][ T5709] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.476356][ T5709] usb 7-1: Product: syz [ 256.476368][ T5709] usb 7-1: Manufacturer: syz [ 256.476378][ T5709] usb 7-1: SerialNumber: syz [ 256.525746][ T5709] usb 7-1: config 0 descriptor?? [ 256.565692][ T5709] redrat3 7-1:0.83: Couldn't find all endpoints [ 256.876540][ T7974] syz.8.407 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 256.876570][ T7974] CPU: 0 UID: 0 PID: 7974 Comm: syz.8.407 Not tainted syzkaller #0 PREEMPT(full) [ 256.876588][ T7974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 256.876599][ T7974] Call Trace: [ 256.876605][ T7974] [ 256.876613][ T7974] dump_stack_lvl+0xe8/0x150 [ 256.876640][ T7974] dump_header+0xd3/0x4b0 [ 256.876672][ T7974] oom_kill_process+0x3ab/0x9e0 [ 256.876698][ T7974] out_of_memory+0x1064/0x1480 [ 256.876719][ T7974] ? try_charge_memcg+0xc32/0x15e0 [ 256.876750][ T7974] ? __pfx_out_of_memory+0x10/0x10 [ 256.876769][ T7974] ? do_raw_spin_unlock+0xf5/0x200 [ 256.876801][ T7974] try_charge_memcg+0xcdf/0x15e0 [ 256.876836][ T7974] ? __pfx_try_charge_memcg+0x10/0x10 [ 256.876861][ T7974] ? percpu_ref_tryget+0x15/0x180 [ 256.876891][ T7974] ? __obj_cgroup_charge+0x36/0x2c0 [ 256.876912][ T7974] __obj_cgroup_charge+0x1fd/0x2c0 [ 256.876930][ T7974] ? __obj_cgroup_charge+0x36/0x2c0 [ 256.876950][ T7974] __memcg_slab_post_alloc_hook+0x766/0xd90 [ 256.876983][ T7974] kmem_cache_alloc_lru_noprof+0x351/0x5f0 [ 256.877001][ T7974] ? kmem_cache_alloc_lru_noprof+0x153/0x5f0 [ 256.877016][ T7974] ? __d_alloc+0x37/0x6f0 [ 256.877029][ T7974] ? __d_alloc+0x37/0x6f0 [ 256.877048][ T7974] __d_alloc+0x37/0x6f0 [ 256.877067][ T7974] d_alloc+0x4b/0x190 [ 256.877080][ T7974] ? lookup_one_qstr_excl+0xc4/0x360 [ 256.877108][ T7974] lookup_one_qstr_excl+0xd8/0x360 [ 256.877137][ T7974] __start_renaming+0x185/0x410 [ 256.877160][ T7974] filename_renameat2+0x3a0/0x9a0 [ 256.877194][ T7974] ? __pfx_filename_renameat2+0x10/0x10 [ 256.877229][ T7974] ? do_getname+0x151/0x250 [ 256.877252][ T7974] __se_sys_rename+0x55/0x2c0 [ 256.877276][ T7974] do_syscall_64+0x166/0x520 [ 256.877298][ T7974] ? trace_irq_disable+0x3b/0x140 [ 256.877316][ T7974] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.877332][ T7974] ? clear_bhb_loop+0x70/0xc0 [ 256.877352][ T7974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.877368][ T7974] RIP: 0033:0x7fb01099e159 [ 256.877383][ T7974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.877397][ T7974] RSP: 002b:00007fb00ebf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 256.877415][ T7974] RAX: ffffffffffffffda RBX: 00007fb010c26090 RCX: 00007fb01099e159 [ 256.877427][ T7974] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000200000000a80 [ 256.877437][ T7974] RBP: 00007fb010a3506b R08: 0000000000000000 R09: 0000000000000000 [ 256.877447][ T7974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 256.877457][ T7974] R13: 00007fb010c26128 R14: 00007fb010c26090 R15: 00007fb010d4fa48 [ 256.877482][ T7974] [ 257.164658][ T7974] memory: usage 0kB, limit 0kB, failcnt 209 [ 257.164720][ T7974] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 257.164754][ T7974] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 257.164796][ T7974] Memory cgroup stats for /syz8/test: [ 257.165838][ T7974] cache 0 [ 257.165876][ T7974] rss 0 [ 257.165898][ T7974] rss_huge 0 [ 257.165928][ T7974] shmem 0 [ 257.165949][ T7974] mapped_file 0 [ 257.165973][ T7974] dirty 0 [ 257.166005][ T7974] writeback 0 [ 257.166027][ T7974] workingset_refault_anon 0 [ 257.166049][ T7974] workingset_refault_file 0 [ 257.166071][ T7974] swap 0 [ 257.166092][ T7974] swapcached 0 [ 257.166113][ T7974] pgpgin 0 [ 257.166143][ T7974] pgpgout 0 [ 257.173375][ T7974] pgfault 11 [ 257.173390][ T7974] pgmajfault 0 [ 257.173398][ T7974] inactive_anon 0 [ 257.173405][ T7974] active_anon 0 [ 257.173413][ T7974] inactive_file 0 [ 257.173422][ T7974] active_file 0 [ 257.173430][ T7974] unevictable 0 [ 257.173438][ T7974] hierarchical_memory_limit 0 [ 257.173447][ T7974] hierarchical_memsw_limit 9223372036854771712 [ 257.173457][ T7974] total_cache 0 [ 257.173466][ T7974] total_rss 0 [ 257.173482][ T7974] total_rss_huge 0 [ 257.173514][ T7974] total_shmem 0 [ 257.173536][ T7974] total_mapped_file 0 [ 257.173567][ T7974] total_dirty 0 [ 257.199854][ T7974] total_writeback 0 [ 257.199897][ T7974] total_workingset_refault_anon 0 [ 257.199929][ T7974] total_workingset_refault_file 0 [ 257.200072][ T7974] total_swap 0 [ 257.200095][ T7974] total_swapcached 0 [ 257.200117][ T7974] total_pgpgin 0 [ 257.200148][ T7974] total_pgpgout 0 [ 257.200163][ T7974] total_pgfault 11 [ 257.200178][ T7974] total_pgmajfault 0 [ 257.200208][ T7974] total_inactive_anon 0 [ 257.200230][ T7974] total_active_anon 0 [ 257.200252][ T7974] total_inactive_file 0 [ 257.200268][ T7974] total_active_file 0 [ 257.200297][ T7974] total_unevictable 0 [ 257.200315][ T7974] anon_cost 0 [ 257.200336][ T7974] file_cost 0 [ 257.200359][ T7974] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz8/test,task_memcg=/syz8/test,task=syz.8.407,pid=7969,uid=0 [ 257.206501][ T7974] Memory cgroup out of memory: Killed process 7969 (syz.8.407) total-vm:102384kB, anon-rss:1456kB, file-rss:23188kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 257.688513][ T191] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 257.863909][ T191] usb 5-1: unable to get BOS descriptor or descriptor too short [ 257.864702][ T191] usb 5-1: not running at top speed; connect to a high speed hub [ 257.864736][ T191] usb 5-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice= e.3d [ 257.866056][ T191] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 257.905708][ T191] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.905739][ T191] usb 5-1: Product: syz [ 257.905757][ T191] usb 5-1: Manufacturer: syz [ 257.905773][ T191] usb 5-1: SerialNumber: syz [ 258.028441][ T5678] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 258.165056][ T191] peak_usb 5-1:1.0 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 258.165094][ T191] peak_usb 5-1:1.0: unable to read PCAN-USB serial number (err -22) [ 258.184898][ T5678] usb 10-1: Using ep0 maxpacket: 32 [ 258.195795][ T5678] usb 10-1: unable to get BOS descriptor or descriptor too short [ 258.195850][ T5678] usb 10-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 258.216948][ T5678] usb 10-1: config 14 has an invalid interface number: 57 but max is 1 [ 258.216975][ T5678] usb 10-1: config 14 has an invalid interface number: 228 but max is 1 [ 258.216996][ T5678] usb 10-1: config 14 has no interface number 0 [ 258.217014][ T5678] usb 10-1: config 14 has no interface number 1 [ 258.217076][ T5678] usb 10-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 258.217102][ T5678] usb 10-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 258.217130][ T5678] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 258.217159][ T5678] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 258.217187][ T5678] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 258.217215][ T5678] usb 10-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 258.217243][ T5678] usb 10-1: config 14 interface 57 has no altsetting 0 [ 258.217262][ T5678] usb 10-1: config 14 interface 228 has no altsetting 0 [ 258.321540][ T5678] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.321581][ T5678] usb 10-1: Product: syz [ 258.321597][ T5678] usb 10-1: Manufacturer: syz [ 258.321613][ T5678] usb 10-1: SerialNumber: syz [ 258.430609][ T191] peak_usb 5-1:1.0: probe with driver peak_usb failed with error -22 [ 258.453169][ T191] usb 5-1: USB disconnect, device number 29 [ 258.869471][ T2254] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 258.905485][ T8001] syz.8.415 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 258.905520][ T8001] CPU: 1 UID: 0 PID: 8001 Comm: syz.8.415 Not tainted syzkaller #0 PREEMPT(full) [ 258.905547][ T8001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 258.905558][ T8001] Call Trace: [ 258.905564][ T8001] [ 258.905571][ T8001] dump_stack_lvl+0xe8/0x150 [ 258.905615][ T8001] dump_header+0xd3/0x4b0 [ 258.905646][ T8001] oom_kill_process+0x3ab/0x9e0 [ 258.905682][ T8001] out_of_memory+0x1064/0x1480 [ 258.905711][ T8001] ? try_charge_memcg+0xc32/0x15e0 [ 258.905740][ T8001] ? __pfx_out_of_memory+0x10/0x10 [ 258.905777][ T8001] ? do_raw_spin_unlock+0xf5/0x200 [ 258.905820][ T8001] try_charge_memcg+0xcdf/0x15e0 [ 258.905867][ T8001] ? __pfx_try_charge_memcg+0x10/0x10 [ 258.905892][ T8001] ? percpu_ref_tryget+0x15/0x180 [ 258.905942][ T8001] ? __obj_cgroup_charge+0x36/0x2c0 [ 258.905977][ T8001] __obj_cgroup_charge+0x1fd/0x2c0 [ 258.906002][ T8001] ? __obj_cgroup_charge+0x36/0x2c0 [ 258.906026][ T8001] __memcg_slab_post_alloc_hook+0x766/0xd90 [ 258.906057][ T8001] kmem_cache_alloc_lru_noprof+0x351/0x5f0 [ 258.906096][ T8001] ? kmem_cache_alloc_lru_noprof+0x153/0x5f0 [ 258.906118][ T8001] ? sock_alloc_inode+0x2c/0x1a0 [ 258.906139][ T8001] ? sock_alloc_inode+0x2c/0x1a0 [ 258.906170][ T8001] ? __pfx_sock_alloc_inode+0x10/0x10 [ 258.906187][ T8001] sock_alloc_inode+0x2c/0x1a0 [ 258.906204][ T8001] ? __pfx_sock_alloc_inode+0x10/0x10 [ 258.906232][ T8001] alloc_inode+0x6a/0x1b0 [ 258.906266][ T8001] __sock_create+0x12d/0x9d0 [ 258.906299][ T8001] __sys_socket+0xd6/0x1b0 [ 258.906330][ T8001] __x64_sys_socket+0x7a/0x90 [ 258.906350][ T8001] do_syscall_64+0x166/0x520 [ 258.906371][ T8001] ? trace_irq_disable+0x3b/0x140 [ 258.906404][ T8001] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.906428][ T8001] ? clear_bhb_loop+0x70/0xc0 [ 258.906456][ T8001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.906478][ T8001] RIP: 0033:0x7fb01099e159 [ 258.906499][ T8001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.906518][ T8001] RSP: 002b:00007fb011798028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 258.906541][ T8001] RAX: ffffffffffffffda RBX: 00007fb010c25fa0 RCX: 00007fb01099e159 [ 258.906557][ T8001] RDX: 000000000000000c RSI: 0000000000000003 RDI: 0000000000000010 [ 258.906571][ T8001] RBP: 00007fb010a3506b R08: 0000000000000000 R09: 0000000000000000 [ 258.906586][ T8001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 258.906598][ T8001] R13: 00007fb010c26038 R14: 00007fb010c25fa0 R15: 00007fb010d4fa48 [ 258.906631][ T8001] [ 258.915708][ T8001] memory: usage 0kB, limit 0kB, failcnt 251 [ 258.930709][ T8001] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 258.930767][ T8001] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 258.930801][ T8001] Memory cgroup stats for /syz8/test: [ 258.931180][ T8001] cache 0 [ 258.931210][ T8001] rss 0 [ 258.931224][ T8001] rss_huge 0 [ 258.931251][ T8001] shmem 0 [ 258.931272][ T8001] mapped_file 0 [ 258.931286][ T8001] dirty 0 [ 258.931307][ T8001] writeback 0 [ 258.931328][ T8001] workingset_refault_anon 0 [ 258.931350][ T8001] workingset_refault_file 0 [ 258.931378][ T8001] swap 0 [ 258.931392][ T8001] swapcached 0 [ 258.931413][ T8001] pgpgin 0 [ 258.931433][ T8001] pgpgout 0 [ 258.931459][ T8001] pgfault 12 [ 258.931480][ T8001] pgmajfault 0 [ 258.931502][ T8001] inactive_anon 0 [ 258.931523][ T8001] active_anon 0 [ 258.931544][ T8001] inactive_file 0 [ 258.931565][ T8001] active_file 0 [ 258.931579][ T8001] unevictable 0 [ 258.931600][ T8001] hierarchical_memory_limit 0 [ 258.931621][ T8001] hierarchical_memsw_limit 9223372036854771712 [ 258.931651][ T8001] total_cache 0 [ 258.931671][ T8001] total_rss 0 [ 258.931696][ T8001] total_rss_huge 0 [ 258.931716][ T8001] total_shmem 0 [ 258.931736][ T8001] total_mapped_file 0 [ 258.931757][ T8001] total_dirty 0 [ 258.931776][ T8001] total_writeback 0 [ 258.931797][ T8001] total_workingset_refault_anon 0 [ 258.931818][ T8001] total_workingset_refault_file 0 [ 258.931840][ T8001] total_swap 0 [ 258.931860][ T8001] total_swapcached 0 [ 258.931874][ T8001] total_pgpgin 0 [ 258.931896][ T8001] total_pgpgout 0 [ 258.931916][ T8001] total_pgfault 12 [ 258.931936][ T8001] total_pgmajfault 0 [ 258.931957][ T8001] total_inactive_anon 0 [ 258.931978][ T8001] total_active_anon 0 [ 258.931998][ T8001] total_inactive_file 0 [ 258.932019][ T8001] total_active_file 0 [ 258.932039][ T8001] total_unevictable 0 [ 258.932060][ T8001] anon_cost 0 [ 258.932079][ T8001] file_cost 0 [ 258.932100][ T8001] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/ [ 259.089949][ T2254] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 259.168219][ T2254] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 259.168300][ T2254] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 259.168420][ T2254] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 259.168622][ T2254] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.241256][ T2254] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 259.241336][ T2254] usb 6-1: Product: syz [ 259.241460][ T2254] usb 6-1: Manufacturer: syz [ 259.361834][ T8001] ,mems_allowed=0-1 [ 259.480597][ T2254] cdc_wdm 6-1:1.0: skipping garbage [ 259.480622][ T2254] cdc_wdm 6-1:1.0: skipping garbage [ 259.513414][ T2254] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 259.513452][ T2254] cdc_wdm 6-1:1.0: Unknown control protocol [ 259.542211][ T191] usb 7-1: USB disconnect, device number 14 [ 259.606978][ T8001] ,oom_memcg=/syz8/test,task_memcg=/syz8/test,task=syz.8.415,pid=7999,uid=0 [ 259.607949][ T8001] Memory cgroup out of memory: Killed process 7999 (syz.8.415) total-vm:102384kB, anon-rss:1440kB, file-rss:22756kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 259.691294][ T8006] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[5622] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ      rr @  @       rr s     & %½p ûÛß% \x07 gF- [ 259.696407][ T8001] socket: no more sockets [ 259.697351][ T5702] usb 6-1: USB disconnect, device number 22 [ 259.829785][ T5678] legousbtower 10-1:14.57: interrupt endpoints not found [ 260.060476][ T2254] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 260.210639][ T2254] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 260.215631][ T2254] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.215660][ T2254] usb 5-1: Product: syz [ 260.215676][ T2254] usb 5-1: Manufacturer: syz [ 260.215692][ T2254] usb 5-1: SerialNumber: syz [ 260.257637][ T5702] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 260.262337][ T5679] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 260.287023][ T5678] legousbtower 10-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 260.301867][ T5678] legousbtower 10-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 260.328562][ T5687] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 260.428755][ T5679] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 260.430353][ T5702] usb 7-1: unable to get BOS descriptor or descriptor too short [ 260.430402][ T5702] usb 7-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 260.431454][ T5679] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 260.431480][ T5679] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 260.431501][ T5679] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 260.431602][ T5679] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.432446][ T5702] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 260.432470][ T5702] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 260.432535][ T5702] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 260.435386][ T5679] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 260.435414][ T5679] usb 6-1: Product: syz [ 260.435431][ T5679] usb 6-1: Manufacturer: syz [ 260.438219][ T5702] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.438244][ T5702] usb 7-1: Product: syz [ 260.438258][ T5702] usb 7-1: Manufacturer: syz [ 260.438272][ T5702] usb 7-1: SerialNumber: syz [ 260.595235][ T5679] cdc_wdm 6-1:1.0: skipping garbage [ 260.595258][ T5679] cdc_wdm 6-1:1.0: skipping garbage [ 260.617460][ T5679] cdc_wdm 6-1:1.0: cdc-wdm1: USB WDM device [ 260.617482][ T5679] cdc_wdm 6-1:1.0: Unknown control protocol [ 260.759296][ T8027] netlink: 12 bytes leftover after parsing attributes in process `syz.8.421'. [ 260.817870][ T8006] program syz.4.416 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 260.825405][ T5709] usb 5-1: USB disconnect, device number 30 [ 260.962325][ T7996] usb 10-1: LEGO USB Tower reset control request failed [ 261.289913][ T5702] usb 7-1: incorrect wMaxPacketSize 0x0 for BADD profile [ 261.410477][ T5687] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 261.410771][ T5687] ath9k_htc: Failed to initialize the device [ 261.411615][ T5709] usb 5-1: ath9k_htc: USB layer deinitialized [ 261.461609][ T5679] usb 10-1: USB disconnect, device number 11 [ 261.461674][ C1] usb 10-1: tower_interrupt_in_callback: usb_submit_urb failed (-19) [ 261.551934][ T5679] legousbtower 10-1:14.228: LEGO USB Tower #-160 now disconnected [ 261.592877][ T5702] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 261.617463][ T5702] usb 7-1: USB disconnect, device number 15 [ 261.662057][ T5625] udevd[5625]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 262.315944][ T5679] usb 6-1: USB disconnect, device number 23 [ 262.556775][ T8064] syz.9.428 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 262.556827][ T8064] CPU: 0 UID: 0 PID: 8064 Comm: syz.9.428 Not tainted syzkaller #0 PREEMPT(full) [ 262.556856][ T8064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 262.556867][ T8064] Call Trace: [ 262.556873][ T8064] [ 262.556881][ T8064] dump_stack_lvl+0xe8/0x150 [ 262.556909][ T8064] dump_header+0xd3/0x4b0 [ 262.556932][ T8064] oom_kill_process+0x3ab/0x9e0 [ 262.556959][ T8064] out_of_memory+0x1064/0x1480 [ 262.556979][ T8064] ? try_charge_memcg+0xc32/0x15e0 [ 262.557010][ T8064] ? __pfx_out_of_memory+0x10/0x10 [ 262.557030][ T8064] ? do_raw_spin_unlock+0xf5/0x200 [ 262.557061][ T8064] try_charge_memcg+0xcdf/0x15e0 [ 262.557095][ T8064] ? __pfx_try_charge_memcg+0x10/0x10 [ 262.557121][ T8064] ? percpu_ref_tryget+0x15/0x180 [ 262.557158][ T8064] ? __obj_cgroup_charge+0x36/0x2c0 [ 262.557179][ T8064] __obj_cgroup_charge+0x1fd/0x2c0 [ 262.557197][ T8064] ? __obj_cgroup_charge+0x36/0x2c0 [ 262.557217][ T8064] __memcg_slab_post_alloc_hook+0x766/0xd90 [ 262.557250][ T8064] kmem_cache_alloc_lru_noprof+0x351/0x5f0 [ 262.557268][ T8064] ? kmem_cache_alloc_lru_noprof+0x153/0x5f0 [ 262.557283][ T8064] ? sock_alloc_inode+0x2c/0x1a0 [ 262.557300][ T8064] ? sock_alloc_inode+0x2c/0x1a0 [ 262.557321][ T8064] ? __pfx_sock_alloc_inode+0x10/0x10 [ 262.557342][ T8064] sock_alloc_inode+0x2c/0x1a0 [ 262.557360][ T8064] ? __pfx_sock_alloc_inode+0x10/0x10 [ 262.557376][ T8064] alloc_inode+0x6a/0x1b0 [ 262.557399][ T8064] __sock_create+0x12d/0x9d0 [ 262.557428][ T8064] __sys_socket+0xd6/0x1b0 [ 262.557449][ T8064] __x64_sys_socket+0x7a/0x90 [ 262.557469][ T8064] do_syscall_64+0x166/0x520 [ 262.557491][ T8064] ? trace_irq_disable+0x3b/0x140 [ 262.557508][ T8064] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.557547][ T8064] ? clear_bhb_loop+0x70/0xc0 [ 262.557579][ T8064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.557601][ T8064] RIP: 0033:0x7f10d2d9e159 [ 262.557622][ T8064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.557642][ T8064] RSP: 002b:00007f10d3c58028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 262.557665][ T8064] RAX: ffffffffffffffda RBX: 00007f10d3025fa0 RCX: 00007f10d2d9e159 [ 262.557683][ T8064] RDX: 000000000000000c RSI: 0000000000000003 RDI: 0000000000000010 [ 262.557698][ T8064] RBP: 00007f10d2e3506b R08: 0000000000000000 R09: 0000000000000000 [ 262.557713][ T8064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 262.557725][ T8064] R13: 00007f10d3026038 R14: 00007f10d3025fa0 R15: 00007f10d314fa48 [ 262.557760][ T8064] [ 262.650132][ T5754] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 262.761783][ T8064] memory: usage 0kB, limit 0kB, failcnt 43 [ 262.761846][ T8064] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 262.761882][ T8064] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 262.761923][ T8064] Memory cgroup stats for /syz9/test: [ 262.762268][ T8064] cache 0 [ 262.762291][ T8064] rss 0 [ 262.762312][ T8064] rss_huge 0 [ 262.762333][ T8064] shmem 0 [ 262.762354][ T8064] mapped_file 0 [ 262.762383][ T8064] dirty 0 [ 262.762403][ T8064] writeback 0 [ 262.762432][ T8064] workingset_refault_anon 0 [ 262.762545][ T8064] workingset_refault_file 0 [ 262.762568][ T8064] swap 0 [ 262.762587][ T8064] swapcached 0 [ 262.762609][ T8064] pgpgin 0 [ 262.762623][ T8064] pgpgout 0 [ 262.762655][ T8064] pgfault 0 [ 262.762675][ T8064] pgmajfault 0 [ 262.762696][ T8064] inactive_anon 0 [ 262.762731][ T8064] active_anon 0 [ 262.762752][ T8064] inactive_file 0 [ 262.762773][ T8064] active_file 0 [ 262.762793][ T8064] unevictable 0 [ 262.762813][ T8064] hierarchical_memory_limit 0 [ 262.762835][ T8064] hierarchical_memsw_limit 9223372036854771712 [ 262.762873][ T8064] total_cache 0 [ 262.762903][ T8064] total_rss 0 [ 262.762924][ T8064] total_rss_huge 0 [ 262.762945][ T8064] total_shmem 0 [ 262.762965][ T8064] total_mapped_file 0 [ 262.762987][ T8064] total_dirty 0 [ 262.763008][ T8064] total_writeback 0 [ 262.763029][ T8064] total_workingset_refault_anon 0 [ 262.763056][ T8064] total_workingset_refault_file 0 [ 262.763078][ T8064] total_swap 0 [ 262.806746][ T8064] total_swapcached 0 [ 262.806795][ T8064] total_pgpgin 0 [ 262.806816][ T8064] total_pgpgout 0 [ 262.806902][ T8064] total_pgfault 0 [ 262.806930][ T8064] total_pgmajfault 0 [ 262.806950][ T8064] total_inactive_anon 0 [ 262.806971][ T8064] total_active_anon 0 [ 262.806992][ T8064] total_inactive_file 0 [ 262.807012][ T8064] total_active_file 0 [ 262.807034][ T8064] total_unevictable 0 [ 262.807054][ T8064] anon_cost 0 [ 262.807089][ T8064] file_cost 0 [ 262.807097][ T8064] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz9/test,task_memcg=/syz9/test,task=syz.9.428,pid=8062,uid=0 [ 262.807211][ T8064] Memory cgroup out of memory: Killed process 8062 (syz.9.428) total-vm:102384kB, anon-rss:1440kB, file-rss:22756kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 262.920164][ T5754] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 262.926061][ T5754] usb 5-1: config 0 has no interfaces? [ 262.926125][ T5754] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.096048][ T8064] socket: no more sockets [ 263.097113][ T5754] usb 5-1: config 0 descriptor?? [ 263.171137][ T8066] tap0: tun_chr_ioctl cmd 1074025677 [ 263.171236][ T8066] tap0: linktype set to 7 [ 263.489670][ T8069] TC_ACT_REPEAT abuse ? [ 263.517884][ T31] kauditd_printk_skb: 126 callbacks suppressed [ 263.517907][ T31] audit: type=1326 audit(1790969771.900:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8071 comm="syz.5.434" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffbb5f9e159 code=0x0 [ 263.679181][ T8076] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[6065] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ      rr @  @       rr s     & %½p ûÛß% \x07 gF- [ 263.880155][ T5754] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 263.938104][ T30] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 264.027657][ T5754] usb 6-1: Using ep0 maxpacket: 8 [ 264.029382][ T5754] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 264.053485][ T5754] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 264.053511][ T5754] usb 6-1: config 0 has no interface number 0 [ 264.053559][ T5754] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 264.053605][ T5754] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.073541][ T5754] usb 6-1: config 0 descriptor?? [ 264.134049][ T30] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 264.148327][ T5754] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 264.153078][ T30] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.153098][ T30] usb 9-1: Product: syz [ 264.153109][ T30] usb 9-1: Manufacturer: syz [ 264.153120][ T30] usb 9-1: SerialNumber: syz [ 264.278373][ T5702] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 264.517798][ T989] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 264.518160][ T30] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 264.671462][ T989] usb 7-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=ca.fb [ 264.671710][ T30] usb 10-1: Using ep0 maxpacket: 16 [ 264.695415][ T30] usb 10-1: unable to get BOS descriptor or descriptor too short [ 264.695467][ T30] usb 10-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 264.725048][ T30] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 264.725152][ T30] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 264.726777][ T989] usb 7-1: config 2 has an invalid interface number: 79 but max is 0 [ 264.726853][ T989] usb 7-1: config 2 has no interface number 0 [ 264.726883][ T989] usb 7-1: config 2 interface 79 has no altsetting 0 [ 264.794111][ T989] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.794142][ T989] usb 7-1: Product: syz [ 264.794159][ T989] usb 7-1: Manufacturer: syz [ 264.794174][ T989] usb 7-1: SerialNumber: syz [ 264.796514][ T30] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.796538][ T30] usb 10-1: Product: syz [ 264.796599][ T30] usb 10-1: Manufacturer: syz [ 264.796626][ T30] usb 10-1: SerialNumber: syz [ 264.856269][ T8076] program syz.8.433 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 265.043186][ T5754] usb 9-1: USB disconnect, device number 24 [ 265.141320][ T8084] FAULT_INJECTION: forcing a failure. [ 265.141320][ T8084] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 265.141357][ T8084] CPU: 1 UID: 0 PID: 8084 Comm: syz.6.437 Not tainted syzkaller #0 PREEMPT(full) [ 265.141375][ T8084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 265.141385][ T8084] Call Trace: [ 265.141407][ T8084] [ 265.141417][ T8084] dump_stack_lvl+0xe8/0x150 [ 265.141457][ T8084] should_fail_ex+0x410/0x560 [ 265.141494][ T8084] _copy_from_user+0x2d/0xb0 [ 265.141518][ T8084] ucma_write_cm_event+0x143/0x860 [ 265.141545][ T8084] ? __pfx_ucma_write_cm_event+0x10/0x10 [ 265.141625][ T8084] ? lock_acquire+0x115/0x350 [ 265.141670][ T8084] ucma_write+0x24e/0x2f0 [ 265.141693][ T8084] ? common_file_perm+0x20e/0x2b0 [ 265.141731][ T8084] ? __pfx_ucma_write+0x10/0x10 [ 265.141761][ T8084] ? iov_iter_iovec_advance+0x1e0/0x290 [ 265.141794][ T8084] vfs_writev+0x4bb/0x990 [ 265.141823][ T8084] ? __pfx_ucma_write+0x10/0x10 [ 265.141848][ T8084] ? __pfx_vfs_writev+0x10/0x10 [ 265.141898][ T8084] ? __fget_files+0x2a/0x420 [ 265.141933][ T8084] ? __fget_files+0x3a2/0x420 [ 265.141963][ T8084] ? __fget_files+0x2a/0x420 [ 265.141995][ T8084] do_writev+0x154/0x2e0 [ 265.142016][ T8084] ? __pfx_do_writev+0x10/0x10 [ 265.142064][ T8084] do_syscall_64+0x166/0x520 [ 265.142094][ T8084] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.142115][ T8084] ? clear_bhb_loop+0x70/0xc0 [ 265.142143][ T8084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.142159][ T8084] RIP: 0033:0x7fc58f59e159 [ 265.142173][ T8084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.142213][ T8084] RSP: 002b:00007fc5904d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 265.142236][ T8084] RAX: ffffffffffffffda RBX: 00007fc58f825fa0 RCX: 00007fc58f59e159 [ 265.142250][ T8084] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000014 [ 265.142262][ T8084] RBP: 00007fc5904d3090 R08: 0000000000000000 R09: 0000000000000000 [ 265.142275][ T8084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.142286][ T8084] R13: 00007fc58f826038 R14: 00007fc58f825fa0 R15: 00007fc58f94fa48 [ 265.142315][ T8084] [ 265.370569][ T5702] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 265.371432][ T5702] ath9k_htc: Failed to initialize the device [ 265.417082][ T5754] usb 9-1: ath9k_htc: USB layer deinitialized [ 265.493560][ T30] usb 10-1: Audio class v2/v3 interfaces need an interface association [ 265.493943][ T30] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 265.532123][ T989] usb 7-1: USB disconnect, device number 16 [ 265.679431][ T30] usb 10-1: 2:1 : invalid Cluster Descriptor size [ 265.725396][ T5679] usb 5-1: USB disconnect, device number 31 [ 265.928913][ T8098] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 266.005330][ T30] usb 10-1: USB disconnect, device number 12 [ 267.247310][ T8117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.263844][ T8117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.487964][ T191] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 267.513266][ T8121] fuse: Bad value for 'group_id' [ 267.513280][ T8121] fuse: Bad value for 'group_id' [ 267.581521][ T8124] syz_tun: entered allmulticast mode [ 267.647737][ T191] usb 7-1: Using ep0 maxpacket: 32 [ 267.649002][ T191] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 267.652403][ T191] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.652426][ T191] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 267.652441][ T191] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 267.652479][ T191] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 4 [ 267.652495][ T191] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 26 [ 267.736568][ T191] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 267.736588][ T191] usb 7-1: SerialNumber: syz [ 267.758478][ T8116] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 267.762896][ T191] cdc_acm 7-1:1.0: Control and data interfaces are not separated! [ 267.764239][ T191] cdc_acm 7-1:1.0: probe with driver cdc_acm failed with error -12 [ 267.948458][ T8128] ucma_write: process 338 (syz.4.447) changed security contexts after opening file descriptor, this is not allowed. [ 268.028830][ T5754] usb 7-1: USB disconnect, device number 17 [ 268.809074][ T8118] syz_tun: left allmulticast mode [ 268.946234][ T1291] IPVS: starting estimator thread 0... [ 268.995042][ T8137] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[5970] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ      rr @  @       rr s     & %½p ûÛß% \x07 gF- [ 269.047747][ T8138] IPVS: using max 29 ests per chain, 69600 per kthread [ 269.308499][ T191] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 269.427751][ T5754] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 269.488848][ T191] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 269.493213][ T191] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.493241][ T191] usb 7-1: Product: syz [ 269.493257][ T191] usb 7-1: Manufacturer: syz [ 269.493274][ T191] usb 7-1: SerialNumber: syz [ 269.597671][ T5754] usb 5-1: Using ep0 maxpacket: 8 [ 269.613166][ T5754] usb 5-1: New USB device found, idVendor=05ac, idProduct=8240, bcdDevice= 0.00 [ 269.628264][ T5754] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.628300][ T5754] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 269.628344][ T5754] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.713872][ T5754] usb 5-1: config 0 descriptor?? [ 269.770388][ T5679] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 269.838987][ T191] usb 6-1: USB disconnect, device number 24 [ 270.184909][ T8146] netlink: 165 bytes leftover after parsing attributes in process `syz.5.453'. [ 270.238619][ T8137] program syz.6.450 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 270.296099][ T191] usb 7-1: USB disconnect, device number 18 [ 270.427692][ T5754] appleir 0003:05AC:8240.0005: collection stack underflow [ 270.427734][ T5754] appleir 0003:05AC:8240.0005: item 0 4 0 12 parsing failed [ 270.429652][ T5754] appleir 0003:05AC:8240.0005: parse failed [ 270.429733][ T5754] appleir 0003:05AC:8240.0005: probe with driver appleir failed with error -22 [ 270.802399][ T8150] netlink: 8 bytes leftover after parsing attributes in process `syz.5.454'. [ 270.848040][ T5679] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 270.848958][ T5679] ath9k_htc: Failed to initialize the device [ 270.849487][ T191] usb 7-1: ath9k_htc: USB layer deinitialized [ 270.938109][ T5678] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 271.121085][ T5678] usb 10-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 271.152501][ T5678] usb 10-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 271.152521][ T5678] usb 10-1: Product: syz [ 271.152532][ T5678] usb 10-1: SerialNumber: syz [ 271.179390][ T5678] usb 10-1: config 0 descriptor?? [ 271.301490][ T191] usb 5-1: USB disconnect, device number 32 [ 271.624473][ T8159] openvswitch: netlink: Missing key (keys=d0, expected=2000) [ 271.625232][ T8158] openvswitch: netlink: Missing key (keys=d0, expected=2000) [ 271.747835][ T5702] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 271.819721][ T5678] usb 10-1: USB disconnect, device number 13 [ 271.881997][ T8161] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 271.898791][ T5702] usb 6-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 271.900528][ T5702] usb 6-1: config 4 has an invalid interface number: 44 but max is 0 [ 271.900546][ T5702] usb 6-1: config 4 has an invalid descriptor of length 255, skipping remainder of the config [ 271.900560][ T5702] usb 6-1: config 4 has no interface number 0 [ 271.900586][ T5702] usb 6-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 271.938203][ T5702] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.938232][ T5702] usb 6-1: Product: syz [ 271.938248][ T5702] usb 6-1: Manufacturer: syz [ 271.938263][ T5702] usb 6-1: SerialNumber: syz [ 272.540344][ T5702] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 272.598615][ T5702] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 272.625483][ T5702] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 272.625525][ T5702] usb 6-1: media controller created [ 272.627499][ T5702] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 272.841969][ T5702] DVB: Unable to find symbol dib7000p_attach() [ 272.841990][ T5702] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 272.982673][ T8168] xt_recent: hitcount (134217728) is larger than allowed maximum (65535) [ 273.017746][ T989] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 273.152131][ T5702] rc_core: IR keymap rc-dib0700-rc5 not found [ 273.152147][ T5702] Registered IR keymap rc-empty [ 273.152736][ T5702] dvb-usb: could not initialize remote control. [ 273.152744][ T5702] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 273.207627][ T989] usb 7-1: Using ep0 maxpacket: 32 [ 273.208528][ T989] usb 7-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 273.213182][ T989] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.213201][ T989] usb 7-1: Product: syz [ 273.213211][ T989] usb 7-1: Manufacturer: syz [ 273.213221][ T989] usb 7-1: SerialNumber: syz [ 273.255410][ T989] usb 7-1: config 0 descriptor?? [ 273.316362][ T989] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 273.373731][ T8170] netlink: 20 bytes leftover after parsing attributes in process `syz.9.461'. [ 273.373772][ T8170] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 273.527746][ T989] gspca_ov534_9: reg_w failed -71 [ 273.848660][ T5678] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 273.933329][ T989] gspca_ov534_9: Unknown sensor 0000 [ 273.933418][ T989] ov534_9 7-1:0.0: probe with driver ov534_9 failed with error -22 [ 273.956473][ T989] usb 7-1: USB disconnect, device number 19 [ 274.035664][ T5678] usb 10-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 274.068135][ T5678] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.068166][ T5678] usb 10-1: Product: syz [ 274.068181][ T5678] usb 10-1: Manufacturer: syz [ 274.068197][ T5678] usb 10-1: SerialNumber: syz [ 274.119911][ T5678] usb 10-1: config 0 descriptor?? [ 274.159609][ T5678] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 274.268425][ T989] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 274.358434][ T8173] FAULT_INJECTION: forcing a failure. [ 274.358434][ T8173] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 274.358464][ T8173] CPU: 1 UID: 0 PID: 8173 Comm: syz.9.463 Not tainted syzkaller #0 PREEMPT(full) [ 274.358481][ T8173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 274.358491][ T8173] Call Trace: [ 274.358497][ T8173] [ 274.358504][ T8173] dump_stack_lvl+0xe8/0x150 [ 274.358531][ T8173] should_fail_ex+0x410/0x560 [ 274.358554][ T8173] _copy_from_user+0x2d/0xb0 [ 274.358576][ T8173] memdup_user+0x5e/0xd0 [ 274.358595][ T8173] i2cdev_ioctl_rdwr+0x1c6/0x740 [ 274.358621][ T8173] i2cdev_ioctl+0x6a5/0x880 [ 274.358639][ T8173] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 274.358658][ T8173] ? __fget_files+0x3a2/0x420 [ 274.358680][ T8173] ? __fget_files+0x2a/0x420 [ 274.358705][ T8173] ? bpf_lsm_file_ioctl+0x9/0x20 [ 274.358729][ T8173] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 274.358746][ T8173] __se_sys_ioctl+0xfc/0x170 [ 274.358766][ T8173] do_syscall_64+0x166/0x520 [ 274.358788][ T8173] ? trace_irq_disable+0x3b/0x140 [ 274.358805][ T8173] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.358821][ T8173] ? clear_bhb_loop+0x70/0xc0 [ 274.358840][ T8173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.358856][ T8173] RIP: 0033:0x7f10d2d9e159 [ 274.358870][ T8173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.358883][ T8173] RSP: 002b:00007f10d3c58028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 274.358900][ T8173] RAX: ffffffffffffffda RBX: 00007f10d3025fa0 RCX: 00007f10d2d9e159 [ 274.358912][ T8173] RDX: 00002000000000c0 RSI: 0000000000000707 RDI: 0000000000000004 [ 274.358922][ T8173] RBP: 00007f10d3c58090 R08: 0000000000000000 R09: 0000000000000000 [ 274.358932][ T8173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.358949][ T8173] R13: 00007f10d3026038 R14: 00007f10d3025fa0 R15: 00007f10d314fa48 [ 274.358973][ T8173] [ 274.359043][ T8173] ------------[ cut here ]------------ [ 274.359050][ T8173] usb 6-1: BOGUS control dir, pipe 80001980 doesn't match bRequestType c0 [ 274.359066][ T8173] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1057/0x18b0, CPU#1: syz.9.463/8173 [ 274.583187][ T8173] Modules linked in: [ 274.587104][ T8173] CPU: 1 UID: 0 PID: 8173 Comm: syz.9.463 Not tainted syzkaller #0 PREEMPT(full) [ 274.596357][ T8173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 274.606487][ T8173] RIP: 0010:usb_submit_urb+0x1100/0x18b0 [ 274.612279][ T8173] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89 [ 274.632063][ T8173] RSP: 0018:ffffc9000d7ef958 EFLAGS: 00010246 [ 274.638225][ T8173] RAX: 0000000000000000 RBX: ffff888031da3f00 RCX: 0000000080001980 [ 274.646246][ T8173] RDX: ffff888074c45320 RSI: ffffffff8cc533c0 RDI: ffffffff90881860 [ 274.654283][ T8173] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000 [ 274.662408][ T8173] R10: ffffc9000d7efa40 R11: fffff52001afdf54 R12: 1ffff1100435905c [ 274.670453][ T8173] R13: ffff888021ac82e0 R14: ffff888074c45320 R15: 0000000080001980 [ 274.678480][ T8173] FS: 00007f10d3c586c0(0000) GS:ffff888124dc7000(0000) knlGS:0000000000000000 [ 274.687428][ T8173] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 274.694275][ T8173] CR2: 0000001b2fe0fff8 CR3: 000000007b24c000 CR4: 00000000003526f0 [ 274.702297][ T8173] Call Trace: [ 274.705584][ T8173] [ 274.708554][ T8173] usb_start_wait_urb+0x13f/0x5b0 [ 274.713595][ T8173] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 274.719209][ T8173] usb_control_msg+0x234/0x3e0 [ 274.724015][ T8173] dib0700_i2c_xfer+0xbb9/0xf80 [ 274.728926][ T8173] __i2c_transfer+0x7bf/0x1fe0 [ 274.733712][ T8173] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 274.739570][ T8173] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 274.745398][ T8173] ? rt_mutex_lock_nested+0x156/0x1c0 [ 274.750823][ T8173] ? i2c_transfer+0xc7/0x2d0 [ 274.755423][ T8173] i2c_transfer+0x1cb/0x2d0 [ 274.759976][ T8173] i2cdev_ioctl_rdwr+0x460/0x740 [ 274.764933][ T8173] i2cdev_ioctl+0x6a5/0x880 [ 274.769492][ T8173] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 274.774550][ T8173] ? __fget_files+0x3a2/0x420 [ 274.779402][ T8173] ? __fget_files+0x2a/0x420 [ 274.784061][ T8173] ? bpf_lsm_file_ioctl+0x9/0x20 [ 274.789089][ T8173] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 274.794132][ T8173] __se_sys_ioctl+0xfc/0x170 [ 274.798797][ T8173] do_syscall_64+0x166/0x520 [ 274.803409][ T8173] ? trace_irq_disable+0x3b/0x140 [ 274.808486][ T8173] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.814582][ T8173] ? clear_bhb_loop+0x70/0xc0 [ 274.819328][ T8173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.825256][ T8173] RIP: 0033:0x7f10d2d9e159 [ 274.829719][ T8173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.849738][ T8173] RSP: 002b:00007f10d3c58028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 274.858374][ T8173] RAX: ffffffffffffffda RBX: 00007f10d3025fa0 RCX: 00007f10d2d9e159 [ 274.866352][ T8173] RDX: 00002000000000c0 RSI: 0000000000000707 RDI: 0000000000000004 [ 274.874382][ T8173] RBP: 00007f10d3c58090 R08: 0000000000000000 R09: 0000000000000000 [ 274.882418][ T8173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.890428][ T8173] R13: 00007f10d3026038 R14: 00007f10d3025fa0 R15: 00007f10d314fa48 [ 274.898459][ T8173] [ 274.901503][ T8173] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 274.908797][ T8173] CPU: 1 UID: 0 PID: 8173 Comm: syz.9.463 Not tainted syzkaller #0 PREEMPT(full) [ 274.917994][ T8173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 274.928048][ T8173] Call Trace: [ 274.931328][ T8173] [ 274.934262][ T8173] vpanic+0x56d/0xa60 [ 274.938262][ T8173] ? __pfx__printk+0x10/0x10 [ 274.942858][ T8173] ? __pfx_vpanic+0x10/0x10 [ 274.947370][ T8173] ? is_bpf_text_address+0x292/0x2b0 [ 274.952664][ T8173] ? is_bpf_text_address+0x26/0x2b0 [ 274.957896][ T8173] panic+0xc5/0xd0 [ 274.961651][ T8173] ? __pfx_panic+0x10/0x10 [ 274.966097][ T8173] __warn+0x315/0x4c0 [ 274.970114][ T8173] ? usb_submit_urb+0x1057/0x18b0 [ 274.975157][ T8173] ? usb_submit_urb+0x1057/0x18b0 [ 274.980183][ T8173] __report_bug+0x276/0x570 [ 274.984697][ T8173] ? usb_submit_urb+0x1057/0x18b0 [ 274.989724][ T8173] ? __pfx___report_bug+0x10/0x10 [ 274.994754][ T8173] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 275.000585][ T8173] ? kasan_save_track+0x4f/0x80 [ 275.005443][ T8173] report_bug_entry+0x19b/0x290 [ 275.010306][ T8173] ? usb_submit_urb+0x1100/0x18b0 [ 275.015345][ T8173] ? usb_submit_urb+0x1105/0x18b0 [ 275.020383][ T8173] handle_bug+0xce/0x200 [ 275.024638][ T8173] exc_invalid_op+0x1a/0x50 [ 275.029147][ T8173] asm_exc_invalid_op+0x1a/0x20 [ 275.034006][ T8173] RIP: 0010:usb_submit_urb+0x1100/0x18b0 [ 275.039638][ T8173] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89 [ 275.059241][ T8173] RSP: 0018:ffffc9000d7ef958 EFLAGS: 00010246 [ 275.065310][ T8173] RAX: 0000000000000000 RBX: ffff888031da3f00 RCX: 0000000080001980 [ 275.073279][ T8173] RDX: ffff888074c45320 RSI: ffffffff8cc533c0 RDI: ffffffff90881860 [ 275.081251][ T8173] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000 [ 275.089226][ T8173] R10: ffffc9000d7efa40 R11: fffff52001afdf54 R12: 1ffff1100435905c [ 275.097198][ T8173] R13: ffff888021ac82e0 R14: ffff888074c45320 R15: 0000000080001980 [ 275.105195][ T8173] ? usb_submit_urb+0x1091/0x18b0 [ 275.110238][ T8173] usb_start_wait_urb+0x13f/0x5b0 [ 275.115282][ T8173] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 275.120849][ T8173] usb_control_msg+0x234/0x3e0 [ 275.125620][ T8173] dib0700_i2c_xfer+0xbb9/0xf80 [ 275.130494][ T8173] __i2c_transfer+0x7bf/0x1fe0 [ 275.135263][ T8173] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 275.141086][ T8173] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 275.146903][ T8173] ? rt_mutex_lock_nested+0x156/0x1c0 [ 275.152280][ T8173] ? i2c_transfer+0xc7/0x2d0 [ 275.156881][ T8173] i2c_transfer+0x1cb/0x2d0 [ 275.161387][ T8173] i2cdev_ioctl_rdwr+0x460/0x740 [ 275.166340][ T8173] i2cdev_ioctl+0x6a5/0x880 [ 275.170847][ T8173] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 275.175876][ T8173] ? __fget_files+0x3a2/0x420 [ 275.180569][ T8173] ? __fget_files+0x2a/0x420 [ 275.185181][ T8173] ? bpf_lsm_file_ioctl+0x9/0x20 [ 275.190139][ T8173] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 275.195167][ T8173] __se_sys_ioctl+0xfc/0x170 [ 275.199761][ T8173] do_syscall_64+0x166/0x520 [ 275.204355][ T8173] ? trace_irq_disable+0x3b/0x140 [ 275.209382][ T8173] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.215461][ T8173] ? clear_bhb_loop+0x70/0xc0 [ 275.220150][ T8173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.226059][ T8173] RIP: 0033:0x7f10d2d9e159 [ 275.230495][ T8173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.250112][ T8173] RSP: 002b:00007f10d3c58028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 275.258537][ T8173] RAX: ffffffffffffffda RBX: 00007f10d3025fa0 RCX: 00007f10d2d9e159 [ 275.266531][ T8173] RDX: 00002000000000c0 RSI: 0000000000000707 RDI: 0000000000000004 [ 275.274521][ T8173] RBP: 00007f10d3c58090 R08: 0000000000000000 R09: 0000000000000000 [ 275.282498][ T8173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.290471][ T8173] R13: 00007f10d3026038 R14: 00007f10d3025fa0 R15: 00007f10d314fa48 [ 275.298460][ T8173] [ 275.302098][ T8173] Kernel Offset: disabled [ 275.306430][ T8173] Rebooting in 86400 seconds..