last executing test programs: 12.01253008s ago: executing program 4 (id=3211): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0xa, 0x8000, 0x0, 0xd, 0x8, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x24040001}, 0x4811) getdents(0xffffffffffffffff, &(0x7f00000003c0)=""/191, 0x76) syz_open_dev$dri(0x0, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000004c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x104) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000180)={0x0, {{0xa, 0x4e21, 0x6ef, @mcast1, 0xfffffffd}}, {{0xa, 0x4e24, 0x1e, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffe01}}}, 0x104) r1 = io_uring_setup(0x10d7, &(0x7f00000000c0)={0x0, 0xbfff, 0x1, 0x2, 0x1d}) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000280)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0x1}], 0x10, 0x7000000}, 0xf401}], 0x1, 0x0) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x10, 0x110, 0x1}], 0x10, 0x7000000}, 0xf401}], 0x1, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) io_setup(0x1, &(0x7f00000016c0)) syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a300000e0ff0900030073797a32000000002c000000060a010400000000000000000100000008000b40000000000900010073797a300000000004000740"], 0xa0}, 0x1, 0x0, 0x0, 0x2004c899}, 0x0) 10.856715199s ago: executing program 2 (id=3215): r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x15473c0b, 0x0, 0x9, 0x0, 0x6, 0x8, 0xffffffff}, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket(0x2a, 0x2, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r7, 0x114, 0xa, &(0x7f0000000000)=0x1, 0x4) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000055a6070100000000100000", @ANYRES32=r9, @ANYRES32=r9, @ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r10, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r11 = getpgrp(0xffffffffffffffff) sched_setattr(r11, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x40000019) r12 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r13 = socket(0x1, 0x803, 0x0) getsockname$packet(r13, 0x0, &(0x7f00000000c0)) sendmsg$nl_route(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001400b59527bd", @ANYRES32, @ANYBLOB="1400020000000000000000000000ffff00000000080008000001"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) 10.412522087s ago: executing program 4 (id=3217): socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0xa, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x5) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000700)='./file0/../file0\x00', &(0x7f0000000740)='system.posix_acl_default\x00', &(0x7f0000000a40)=ANY=[@ANYBLOB="020000000100010000000000040002000000000010000400000000002000010000000000"], 0x24, 0x2) socket$igmp(0x2, 0x3, 0x2) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab70102030109021200010000000009040000"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) 9.7307378s ago: executing program 0 (id=3218): bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket(0x1, 0x803, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x13c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000c40)=ANY=[], 0x8) socket$inet6(0xa, 0x80000, 0x8000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000780)={{0x3, 0x5, 0x1, 0x0, 'syz0\x00'}, 0x2, 0x20000000, 0x4, 0x0, 0x0, 0x100001, 'syz1\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0xb4, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x80, 0x2, [@TCA_MATCHALL_ACT={0x7c, 0x2, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @local}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x0, 0x5, 0x7fff, 0x7}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) r10 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') r11 = socket(0x2, 0xa, 0x0) sendfile(r11, r10, 0x0, 0x8) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r12, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="ca4034a4a033c023", 0x8}], 0x2}, 0x5) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r2, 0x4008941a, 0x0) 9.482155586s ago: executing program 2 (id=3219): sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1", 0x13, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000080)=[@ioring_restriction_register_op={0x0, 0x1d}], 0x1) r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffdf, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) openat$fuse(0xffffff9c, &(0x7f0000000440), 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x1e4, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x2f0, 0x20a, 0x278, 0x2f0, 0x278, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @empty, [0x0, 0xffffff00], [0x0, 0x0, 0x0, 0xffffffff], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x188, 0x1e4, 0x0, {}, [@common=@unspec=@state={{0x24}, {0x2}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de6d767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0xa}}]}, @common=@inet=@HMARK={0x5c, 'HMARK\x00', 0x0, {@ipv6=@local, [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 0x4e21, 0x4e21, 0x4e23, 0x4e20, 0x2, 0x2, 0x2, 0x8, 0x6e}}}, {{@ipv6={@loopback, @mcast2, [0x0, 0x0, 0xff000000], [], 'veth1_to_hsr\x00', 'pim6reg1\x00', {}, {}, 0x67, 0x1}, 0x0, 0xa4, 0x10c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x20, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x414) r5 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2}, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVid8\xc4e', 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r5, 0x40045731, &(0x7f0000000300)) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xa0}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x7, 0x2}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002240)=@newqdisc={0x274, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x280, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x6, 0x5, 0x1000, 0x7, 0xc, 0xf, 0x1}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0xffffff81, 0x7, 0x2, 0x0, 0x3, 0x17, 0x5}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x7}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x274}}, 0x4000) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_GET_PIN_FILE(r6, 0x8004f50e, &(0x7f0000000480)) sendmsg$IPCTNL_MSG_EXP_GET(r11, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x20, 0x1, 0x2, 0x401, 0x0, 0x0, {0x1}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_MASTER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x810}, 0x10) 9.270506753s ago: executing program 0 (id=3221): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x3, &(0x7f0000001080)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000100)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f0000001140)=r4) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone3(&(0x7f0000001540)={0x300002c00, &(0x7f0000001340), 0x0, &(0x7f00000013c0), {0x6}, &(0x7f0000001400)=""/207, 0xcf, &(0x7f0000001600)=""/216, &(0x7f0000001500)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) setsockopt(r5, 0x84, 0x82, &(0x7f0000000000)="0004000003000000", 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r7 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000140)=""/4078, 0xfee}], 0x1, 0xf2, 0x207fff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r8 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000017c0), 0x2, 0x0) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r9, &(0x7f0000000540)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000240)=""/17, 0x11, 0x2, 0x4, 0x9, 0x4, 0xc08}}, 0x120) write$apparmor_current(r8, &(0x7f0000001940)=@hat={'changehat ', 0x3, 0x5e, ['!*{\x00']}, 0x21) r10 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r10, 0x40146f2c, &(0x7f00000000c0)={0x100, 0x0, 0x0, 0x5, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r10, 0x40146f2c, &(0x7f0000000040)={0x4, 0x0, 0x0, 0xb, 0x4}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) 9.181503285s ago: executing program 2 (id=3222): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x4, 0x7ffe, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfffffffe, 0xffffffff}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x22102, 0x0) getsockopt$sock_buf(r1, 0x1, 0x0, &(0x7f0000000480)=""/235, &(0x7f0000000000)=0xeb) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r2, 0xc008aec1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x40) r4 = syz_open_dev$vim2m(0x0, 0x5, 0x2) shutdown(0xffffffffffffffff, 0x1) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, 0x0) socket$nl_generic(0x10, 0x3, 0x10) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) sendfile(r5, r5, 0x0, 0x200000) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0x200009, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x80000001}}], [{@fowner_gt={'fowner>', 0xee01}}, {@fsname={'fsname', 0x3d, '/dev/autofs\x00'}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@subj_role={'subj_role', 0x3d, '-(@'}}, {@dont_measure}, {@euid_eq}]}}, 0x0, 0x0, &(0x7f0000000580)="5b390962c9fdbbd4088a5003c31442fbcd924fa8fb3c67dd19ebcc088743473d65c77933b0b0cddf6dc2da2f8638b1a58567f2486796ad26bc5de7294cf30d50f2700363e2e8e860003bf46c4be7ada143b6aa3fe939759299f436cbaa6b0544f1acce9f383825177e63266d25bd41b96d8795") r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="000000002000010014003500776c616e300000001bd8d66f6c982a9f9c1ee2af1bf4000090dbba00"], 0x40}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = openat$autofs(0xffffff9c, &(0x7f0000000100), 0x80040, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r8, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0xe16}}, './file0\x00'}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r9, @ANYBLOB="06001500070000000c001680080001", @ANYRES64=r7], 0x38}}, 0x10) 8.568721684s ago: executing program 1 (id=3224): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='syscall\x00') r2 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r5, 0x11b, 0x6, &(0x7f0000000000)=0x40000008, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x2, 0x6}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) unshare(0xe060400) r6 = memfd_create(&(0x7f0000000240)='%\x00', 0x3) fsetxattr$system_posix_acl(r6, &(0x7f0000000180)='system.posix_acl_access\x00', 0x0, 0x24, 0x3) unshare(0x2c060000) r7 = gettid() clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) rt_sigqueueinfo(r7, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f0000000100)={0x40000000, 0x100, "2712db36b3c964c0cdd688498e2bcadd18b12f0b3f0eb00fc8a12fd500025269", 0x0, 0xfffffffffffffffb, 0x84a10875b, 0x0, 0x0, 0xf, 0x7fff, 0x105, [0x0, 0x9, 0x7, 0x9ae]}) socket(0x10, 0x803, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x94, 0x6, 0x47314356, 0x33565348, 0x6, [{0x9, 0x9}, {0x5, 0x7f75}, {0x0, 0x2001}, {0x89d, 0x2b5}, {0x6, 0x3}, {0x80000001, 0x200}, {0xffffff01, 0x8005}, {0x1, 0x4}], 0x8, 0x8, 0x8, 0x0, 0x6}}) write$UHID_INPUT(r1, &(0x7f0000001900)={0x8, {"88915b3c0a626235f113496c00d27ace93c6c2d3867074827a5acbce9e6bb78f572d1beb14bf620da0341b12cc385ef206ba508339210db1257c4696e55cfa67834052a91dbe7bf5f430fd75f7b5b10718d8e0a11fc78126b73ab3142d85a49b82cfca4b2e362ab8c3dd6627bb704de5cf7d777c14bd1f1a79087c3f5d78f98f29ca06dba015acec038c2e5d8dce8088fe021393c41db31803ace6fec52780b22d067ebc650f7b9ed4d82d30e2bd384ff56a4addd8f2f888d290d12369c87911ac00f40692134a85075a659bea3560672c0f113c72ce011642ea12898aed98237a6a4300bb2c05c011f161bb59a17afd1d32b85598d95f2befae461cc3c59be78d8af09bb9d96f1e25c74e8ff7f92d2ab152c33c55100cb6ce4a2ecf46626529c58fbb72737ce248e4d25d97683d0e81802483bc1b353a376d21bc8d0e5256617b4493b12b2669befab6c6c134a32d350e34e09a391db57cdcc7a6f6c6fff44c092c80401d7165f605ec12d3c584a4c56f2198eabfc87856a060b0b39315d639ce3f93cec77b854dba90f380ffe60e37e70acaafac652631406afff859e473fc89c77519ecb61e92351a1ca3f4727fad1ace6a06c0a1555d7df20b3f27b2d543a5ce8e2e426e56aa263deabfbd158131590fb657cce8c1b93c74fd54bfe81664ff13b903d413cecfa45336c44de0347dcba317909d0bac2d0ba63e1bdde5046b8d9fa93699f3104c10fe7244902d64d104612393dea05195347b21af6afe717cb58cd35ef5ef104006365fbf338507fbe95ceeef4b0592880fa2f7a0bce6f2e988c7376fda8bde6b2a3a37b686cd447c677894436b80a865c953f1df37cf1fb6c66a70ebfc9b52a68f2633a6c840ce8713cb0007b092f4df50d0bbb03f7c13fcf28b0daca922d6198bbb737decf207dcf31fc3cdf0d42caac90127d8dcfa4e917739b3e76e275b1b613de0f7ad0aec8cd56a6894e06eddd6cce92e4928980d027de419993deb59193be31ac6af7598a5c01c4aa2ec6288d0b2a27c4737b6a4abfc60eb576d79d5c4468bd18b224071156713a77d20882cd27b8a52fcebcd9362834a607c9f18aa810538d620d81634fad5d87d8229897ce3dce121db0c0a3f10d1f868b5a7292659f099160be5ca659d8bc6c9452df705532a19bfeaaccca982662d5da91c51c6a379705e504236e3101b401dd04939b6ce1a7057fa7c22b4d20758144d1ddb9ece2c18e3e9d865f9d0098aa7c6fb095220f1bdf579092e699316ce3e738393dbd9b2ad6824ee4efe9420764728e1e459433a474981cf4353822187d0eff3599327618fc35b7b0a305cc657d4ec0423a437e20834a6f6a256f5b855ab86064664e2c3debcf3cecd5d7d2315ced861b642fa79eb97addc85ae67e453ea111d71af4361a5227c2e45ed8bb5c61097bc93aa152e45842b70963dfbdcdc2c93333f1a61ec972d466e6a7bad30ed51211df57528741177fed3ae59d9c86306c0f17f34a220c6a1def18e3b98208850349e68e362cdeeeed6f3fc2f65b144ca9d59fcc6aaa661dd0dcae14974257dbdfab5c97fd149b88b3b3647a171afc577aec35a85c7cd8db4e728e0f3b9332aebf2ed6f70d24a4ec74ee84ae1ae5cdce89cb50b495857507d29ff112a53f005be8a79151bea7ca94d240be037865c58e621b4c050837e71fed04e14c0bafbb5ca3c6f9cbf5c7b536efa2b9ac1f6c73642d18857ca335e16aefde7c4296ac1b95c5b19fb26b5b37e8efc70e2c9500831c278fa38cfcdb6ec68839fe361a186a821dbe64a1c7945887dff767cd765c569ad7ebf18af0c530f3d31355c22126544710d021116e74b1be156de7c6df89249878e0d760eb10b8ed826736c5319f61206f3237a50e6459d0ed995953937f90bdfbdae732c29ed9f7910176411967858c2eb2585ce4134f95dc8da5d43ccbf86f95d125f4b840a20d864516a4176492d48a038403d62a8ee68c1f168f1c4b29be0921c13c8616c6159ad184ee86d7525221593bb5e7372173a29f5a89390814dafdbdb3fb8955adaf9905beff152c779282f5a00000000d66c7af203e6c7120f03e7170e6aec745f3d475f246aca806efd3edadb78bbf1538fb82c51584038ff2ddfeff4d5d8621ca37d4a6f76eac64f59a45d547c0a15ff6d38c6f2668329569714347a727e0808e4f90aa6d99dbd9955b2a1634f911588b533d48c52db6810cb785467f4d9c5070faf233cf9910e6122e8454f71879ca33cb4ac22d3386de1242365d3bdb18c68193d1f8321effd09a29c5159895b6f71cae9a7555fed73a5ecf62b40e7bad9623fcc33560a73ba10a717528888c096821eac12ab440ad950ed39206ce25e294acd59502d00114c02d07ffbff75964f5b384ca948b399b140c37b11596505d54f24040b3e1db90d3e4864a55b11024de6162fd7fc60a1183f28ec8ae0325cf7a9be955ae5bc1af2fe02f15688e1b53a3cad269241d3c7a7690ab24a2334d00c6e7d8fc956a54945f789a6f40bde5181b040ae5d81f5d342ad700d64add8fb7c13cfbc4c86ad6238f39307b1f4d6edd277030f94cb9da0d4006bde0a6b96ada8c4869df8fdf61494c46ce5737a1ca75854047f91ed8c02c2d0da1c21141d27740526db980ec459e08ebc0b6e814c033a0a6790b9f7e8e758ab8861b40166dd6aaca30046c968c532e4b3ef07412732d6bab91e48a04f9cbd429eb48e6039944e6ea9921865c43b1ddf4410b3715327fb382463ef8a64fa1c2cc07ef228296235c96b4fb1bade2cf2742be901e09b9afe3217ff624e0bdc3f079c5ac4f0e01c22264a689a1872aace60e0602cc742db4b606ab0fd4caa6eb6d2911f041eea4e1693e9c5747aae48edca7f9e6ea997a6e8469772385ce72697f5d365e6ada0392b7b409b9d4fd4bd4d6adcca78f417ccd1e98ec1bf334ec0713cdbab161ce04b4c10bf6334ff961e0ed13e45ba83278701387cb2ee513e2f13c1a45cd948527fc3fbd14eee08d753511b7437709e1f3326e23dedcefe91edb078a2f185e000550b1f0372369394a681ae5e29c404927b6520e0778c99a5d0d6fe5c0756fb1aed39e56add5a42315dfedf2ae404ffe8d6378b2355b4eb9e311d4103a9e47123e08f157543e611796203bfc812d77c8398d400b313a511a851d2de6a5629e89b74fc3eff4a566cc2c6ede61feee64cb0769e41d25d13df234cfbbc9a01cd0e256c2519babbddfe5df77186518c1f7ab53aa94ee0920d28146088b14591f7d3ae6cf50c4ba2b15515f565df5978c0f7afed1f42aa1898fef0edfc755666abaa510f758f7ee8a67c4d40be742d3234f8d11a87f93652a407c63d8719848968ee5333f67ec74509939a83279d689967b89ad42f04aa2fcfe4dc1900c128d9e448999b46e59e8a747c60c9e1448054e55ccdd3cd0f2f973ed43369a6ec8d68955bb23a3febbdd97483ad399543e3d08173a372423e64fccae644f32ed8fb4cf821265cdb5e66bb6378457fbfd94d722a30745deaf7a52e3acff8d20e8c217d133d59ee457701fadc0dd6db3685cd7197511a712eb65d48eaa5097f088c9bae4f1ce0ffe547d3ebc3d71a402c3fcd4d72213621a4497ca94542f97a23310544b448ddea03159e924dec5406d4b49b4771926ead9f0c0cadf1bc3254fc01391e68a014d2136aaa45300ba9bf4dddd6832eed859d6fe03f7c3550eb03124f9332511f46e7ae71bfabcc5250b40707b7f33200943b798ef1ffa1f0ba3279fa024e4607f1c54f70a0487fa4a22984dd8ca1cefc156a84d5b75ebec33cd205bcef9670c6a81ae38d726396d4f2423be53147ecbce2b473bb9eac2ab2b2c1fb399fbc19d4f2676e148c5305a139960fa20f6cea18544c3f194c35baf466f5f762cbd3522b85807dee69dbc2cf7579816db5e681a5b9be0f26ee8d9481ddadd9938c246db23e54569993b78a1c03085e33709fad37f2178a089c88d76109378230e8b1bf9501c536198d63bbbfa5fd3aec43ddc038e1b1ebb72843a3f63e26e43e0ac42f0c066bec9f57631ab3831f3b1cf01c6b1917b213e6c7bd245357a47ce7dea491545aabb6299c1d7b92475c8a64dcb3ac0659f0368e04cdd3e0b2d9664d98afc7e16c8948c531a255b6e51f11d372c346f6f51107f98839476f919e9edb43374b1f0b8bfa03bd5dda0c03fb4733ef248f41e130131adf166a5d127a5bc06e9a353ff0d9323a01a73fc536d95e63d30775b3a8226c18435c37e1bb3a58377cf4b584b39b42dea4c0b11abe473978b6b13020fe538fac85a8b0f5391c650ed64b4134e0f8aacdff631142bb73f0bc640e9711258092bb955d9ecf0f31e05a8068c1d494ce76f1c3ff011ce0c811cfa213e234f3ecbddb48c733b492b3895b69561b19272728ecb1055179d174abb2b0a216497e352149e7410824338babd6ca3f384c19fcf9e7d28a953e9384e4493550c6c775fef433d3e15f740d6b8e90a990fb8af15c05d52052b928e7868d01950a41358f0c965573225f880be2214bf1db645ac8097bb23eb944f02fdf7b755e7225d1bc7b6c3a80f2aec610164ada654043d6298fa1d3c5ab69bb121a8113b3a19aca7a6a67243aa297f9f7afd460b2190f6679f7930d61c300d90a3f17e4d84af0caef3770f93c6384eeedc404290f2677d83ae1e0020f1c7ce853b448792a15c303b7ad8f797de28a7893941e0e9affd8661ed4f0c76a811621d3e7c2267df46712d82bdca3f53e67b471da27b70a97a92d13203e41ebfcd4d8364d177a45872f27aa0838d71d55549ed4ceb401725d0b2c92bf1c7578762a64a304956fa9ec9e7615b4cdfbf5e6c88dac1781978fa004714757d16e69c8dd3cdd132e19c448f74fccc598c6c41648a07babedb88ed6e2a846fe11675cf57b0cdcf04370630d9c95abc65a19efc67f7c73a40857fb85f6229b7a268d12479cc6601ea5a0988c1b9478681ac27a820754c32f98c690597d1909834624f90f047881f11b4688339278a91a5b1c246afc56e93b2e57176f87e934f7f34d9e6758084efbbf187a798e1d94356f318c01f8fd1b8eb5efb8ef4c9d621b8097ee318aade5acd87b467bba12be5650e47cee34b263b28c83d898b2af4b51e18dd3153dbb441d60cf6700d0c59322f68a821fddcd82034d7a8b8743a217666c466f2e7ad4309064129f426d3d0dec3f85374c0bf8da95c89571c5cd6787e557e0dd29dab44b875f49ca4332b8faa3c1288983ef0565c9c5346a3e196cfb7e753bdc0e957ec2c5932fc0b20a6e541cc850a0a90e7806c3c2cd05a2a12079f5fcaae0b73c7e70a678e9b66f9362b02b24b7899d38f9cc353ff859c173a22279fd2404b01213eb18a3ba2518645f3a5574228854d80ef33430d58a986271f41e78cd42f52677c223bb2106dd7f9d330f5c34917491e8aa21c16b82358ca99fa7e910cb567c62643fc95887b2e7fc72c2cd9aa654ab8240f20d9b7c2086fa29a32f9bd547de6c235deeef07c68676b374600705ac501f9b462d7c4b0a3845c62a78b893a7073182cb7c77904f8bfa4fa7dfea28f9a70e694f9ffe1278a88c11fdb4aa064d6ddfe09cbc468ad8d8a69264894c1f45dd4b8f723f6ae0747046d939e4ac255e5b26537c440bbc9965c4743356929030ac694d77c6058dccdf9c2d709240c7ca0db27d9c336bbaa418b7d547f0f191a845e895f23e078abbe1dab982998d7f67d9150dfb4f044051103f68ba3fc13b4c508ebfd8d0319107c0aa5d4bbcd1170361b4fe36a493e2262e0e3800", 0xfffffffffffffdcc}}, 0x1006) 7.795952774s ago: executing program 2 (id=3235): memfd_create(&(0x7f0000000000)='-&:{-\xaa]{\x00', 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x48805) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8916, &(0x7f0000000040)={'veth1_macvtap\x00', @random="0200ac7f7f00"}) r3 = memfd_create(&(0x7f0000000440)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz\x03\x00\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92 \x00*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\f\xc9\xc5H\x0f;\xd3\xe2\at\x9bJ\xe6\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xee\xdc\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)\xdeA\x1ed\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97\xf6\xb8\xebN\xe2\x18\x04[\xabW}\xb1\xffo\xae~=\x9dd\x9f\x92\xd2[\xb8\xb6\x1a\x02c\xa1\xd1H\xb7@\x06\x96s\xef\xee\x92\xfaC\x15+\x84%h1O\xe2\xb8\xd3\x19R\x00\f\n\x1cpEn\xad\xa7IRf\xc65\x15<}\xb8\x05\xe4\xb7\x9e\xf3\xda\xdavzB\xf8qj\x9e\xe4\xbd\x05\xcfx\xb5\x12\t\xe0\xf2\'f\xf4+\xb3\xdeA6\x10O\xdd\x9c\xf7B', 0x7) ioctl$FS_IOC_RESVSP(r3, 0x40305839, &(0x7f0000000040)={0x0, 0x4, 0x9, 0x800000000000000, 0x4000}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000500)={0x0, 0x2, 0x10}, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0x20) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$uac2(0x5, 0x87, &(0x7f0000000400)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x46d, 0x8f6, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x3, 0x1, 0x4, 0x40, 0x7f, {0x8, 0xb, 0x1, 0x0, 0x1, 0xa, 0x20, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x7, 0x6, 0x9, 0xb2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x1, 0x2, 0x0, "7a74a4", "a2"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x6, 0x99, 0x80, {0x8, 0x25, 0x1, 0x1, 0x18, 0x1e}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xe, 0x4, 0x52, {0x8, 0x25, 0x1, 0x4, 0xf, 0x44, 0x3ce}}}}}}}}]}}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x1, [{0xac, &(0x7f0000000780)=ANY=[@ANYBLOB="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"]}]}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a000000000000000400040012f6b8fb58c7c84a0fa956be152b63aa45ac097d330644c02d7cbc1fde7b00776f369ae385c094b43051c528546ba0eaf735ad020f87be7dad83f2"], 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="3c0000005800010029bd70989df0151d2f8dd671a36d774a00fedbdf250008000b00fd66a42e999d688dc16fc437b35f6097f7462a75eb742ee5e6930265666c63a2a3f4345d29fc20a358c4e25bf3e7dfc9adc583c6dc5585173398a4e7e06d829cfb0b1a229ab54009d0253dcbe0ec2a3b020fcf9ca819f5fb0e51500305261c692b7cc047e0e8c0729b816dca0e5279441b23f87ec6efe91224c17ea5dcf3e64c801a67037bd2edc5c2643bdd25fb3e9534d2ae855946294939f549cec1ac8d4a56797dfc5048799592f468a905b66b2560c4c394", @ANYRES32=r5, @ANYBLOB="080001000000000008000200", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r5, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00'], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 7.553815029s ago: executing program 3 (id=3226): r0 = fsopen(&(0x7f0000000200)='9p\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x1}, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0x80000000, 0x0, 0x2, 0xb71}, 0x10) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfd, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0xc080) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000000000000000\x00\x00093\x00'], 0x2a, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) r7 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r7, 0x40146f2c, &(0x7f00000000c0)={0x100, 0x0, 0x0, 0x5, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r7, 0x40146f2c, &(0x7f0000000040)={0x4, 0x0, 0x0, 0xb, 0x4}) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000002000000080003", @ANYRES32=r0], 0x40}}, 0x0) socket(0x10, 0x803, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='.\\\x00', &(0x7f00000002c0)='/dev/dvb/adapter#/demux#\x00', 0x0) pipe2(&(0x7f0000000100), 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x24000840) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 7.308318049s ago: executing program 0 (id=3227): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x48, 0x0, 0x0, 0x1, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x1, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0xfffffffffffffffc}) r2 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c) r3 = getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000100)={0x2, r3}) fcntl$notify(r2, 0x402, 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x0) ftruncate(r4, 0x6000000) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, 0x0) ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, &(0x7f00000012c0)={0x18}) fsopen(0x0, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4010000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x2c, r8, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x2c}}, 0x18) syz_usb_connect(0x4, 0x36, 0xffffffffffffffff, 0x0) 7.273154128s ago: executing program 1 (id=3228): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x4, 0x7ffe, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfffffffe, 0xffffffff}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x22102, 0x0) getsockopt$sock_buf(r1, 0x1, 0x0, &(0x7f0000000480)=""/235, &(0x7f0000000000)=0xeb) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r2, 0xc008aec1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x40) r4 = syz_open_dev$vim2m(0x0, 0x5, 0x2) shutdown(0xffffffffffffffff, 0x1) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, 0x0) socket$nl_generic(0x10, 0x3, 0x10) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) sendfile(r5, r5, 0x0, 0x200000) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0x200009, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x80000001}}], [{@fowner_gt={'fowner>', 0xee01}}, {@fsname={'fsname', 0x3d, '/dev/autofs\x00'}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@subj_role={'subj_role', 0x3d, '-(@'}}, {@dont_measure}, {@euid_eq}]}}, 0x0, 0x0, &(0x7f0000000580)="5b390962c9fdbbd4088a5003c31442fbcd924fa8fb3c67dd19ebcc088743473d65c77933b0b0cddf6dc2da2f8638b1a58567f2486796ad26bc5de7294cf30d50f2700363e2e8e860003bf46c4be7ada143b6aa3fe939759299f436cbaa6b0544f1acce9f383825177e63266d25bd41b96d8795") r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="000000002000010014003500776c616e300000001bd8d66f6c982a9f9c1ee2af1bf4000090dbba00"], 0x40}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = openat$autofs(0xffffff9c, &(0x7f0000000100), 0x80040, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r8, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0xe16}}, './file0\x00'}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r9, @ANYBLOB="06001500070000000c001680080001", @ANYRES64=r7], 0x38}}, 0x10) 6.350330101s ago: executing program 3 (id=3229): r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x15473c0b, 0x0, 0x9, 0x0, 0x6, 0x8, 0xffffffff}, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket(0x2a, 0x2, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r7, 0x114, 0xa, &(0x7f0000000000)=0x1, 0x4) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000055a6070100000000100000", @ANYRES32=r9, @ANYRES32=r9, @ANYBLOB="0000000000000000b7020000030000008500000086000000bf91000000000000000000000000000000000000000000007c1da55e7e9e17b0176305757b89728ceb9fc0cf3a861370d383a1cd7a5ffc13302297396b467210e2e5f043dab07ea1e71b372c1636df338b99fa246ec2b12d5fc4ea17882d10aa927481bdfa7589e51140253d941e2658eefdcbea099405474c4ce8ba5408595062097ff806d3bb34e9512efc274fbd7c13d13cd2a6356a1f679dd43ad61ee8f0d96dbb0ad62fc2e1cdf6a2d55b86920abd95a35b0d3e8e69f29fbb69d2f50ec062f0bcea73a8df5b071da9bb6f94ef9e30e2720ae1eabfbcbeed93c4d664af52d12578517f59e14c110295acfdfc4a3498fb79bad44f13270fd30b96e2d7e90c20eb1ad3541aaa3e05205dd62caa015f67bbed3f14e09bc3ea8f86b645"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r10, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r11 = getpgrp(0xffffffffffffffff) sched_setattr(r11, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x40000019) r12 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r13 = socket(0x1, 0x803, 0x0) getsockname$packet(r13, 0x0, &(0x7f00000000c0)) sendmsg$nl_route(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001400b59527bd", @ANYRES32, @ANYBLOB="1400020000000000000000000000ffff00000000080008000001"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) 6.135980236s ago: executing program 4 (id=3230): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x4, 0x7ffe, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfffffffe, 0xffffffff}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x22102, 0x0) getsockopt$sock_buf(r1, 0x1, 0x0, &(0x7f0000000480)=""/235, &(0x7f0000000000)=0xeb) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r2, 0xc008aec1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x40) r4 = syz_open_dev$vim2m(0x0, 0x5, 0x2) shutdown(0xffffffffffffffff, 0x1) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, 0x0) socket$nl_generic(0x10, 0x3, 0x10) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) sendfile(r5, r5, 0x0, 0x200000) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0x200009, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x80000001}}], [{@fowner_gt={'fowner>', 0xee01}}, {@fsname={'fsname', 0x3d, '/dev/autofs\x00'}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@subj_role={'subj_role', 0x3d, '-(@'}}, {@dont_measure}, {@euid_eq}]}}, 0x0, 0x0, &(0x7f0000000580)="5b390962c9fdbbd4088a5003c31442fbcd924fa8fb3c67dd19ebcc088743473d65c77933b0b0cddf6dc2da2f8638b1a58567f2486796ad26bc5de7294cf30d50f2700363e2e8e860003bf46c4be7ada143b6aa3fe939759299f436cbaa6b0544f1acce9f383825177e63266d25bd41b96d8795") r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="000000002000010014003500776c616e300000001bd8d66f6c982a9f9c1ee2af1bf4000090dbba00"], 0x40}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = openat$autofs(0xffffff9c, &(0x7f0000000100), 0x80040, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r8, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0xe16}}, './file0\x00'}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r9, @ANYBLOB="06001500070000000c001680080001", @ANYRES64=r7], 0x38}}, 0x10) 5.430590234s ago: executing program 3 (id=3231): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000001740)=ANY=[@ANYBLOB="180200000000000000000000000100008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050000008500000071000000950000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x2f, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r2 = syz_open_procfs$pagemap(0x0, 0x0) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001d0001000000000000f7ff0007000000", @ANYRES32=r5, @ANYBLOB="000096040a000200aaaaaaaaaa0c00000600050001000000"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) pipe(0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setregid(0xee00, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000240)=[{&(0x7f0000000100)="eb", 0x1}], 0x1, 0x0) prlimit64(r6, 0x2, 0x0, 0x0) r8 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r8, 0x40086603, &(0x7f0000000040)) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xe) 5.345075768s ago: executing program 1 (id=3232): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_open_dev$cec(0x0, 0x0, 0x0) ioctl$CEC_S_MODE(r3, 0x40046109, &(0x7f0000000040)=0x20) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_IOC_READY(r4, 0x541b, 0x20000000) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000f80)=@mangle={'mangle\x00', 0x2, 0x6, 0x5c0, 0x0, 0x190, 0x260, 0x420, 0x260, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {0xff}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0xff000000, 0xffffffff, 0x0, 0xffffff00], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e21, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'sit0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@empty, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x50, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') rename(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$SOUND_MIXER_READ_DEVMASK(r6, 0x80044dfe, &(0x7f0000000180)) sendmsg$nl_route(r5, &(0x7f0000000740)={0x0, 0x21, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="280300001300010029bd7010e6964439ca9448ff", @ANYRES32=0x0, @ANYBLOB="0004000091f90000140003006272696467655f736c6176655f310000880018800400018080000180070002002cf4000008000100000000000800010004000000140004006938bfe7c3b8ae42240b16c0ed6b8768140004000c9b73b021b79fd2025f27082114a6d0140004009feccbb316587f1fafb7dbd8e9ed8d8d14000400f33646b47b166d68a8a26e25f05ece0a130002006272696467655f736c6176655f31000005002700060000000a000100c28360e46eb900000a0002009aec062e663b00002c0216"], 0x328}, 0x1, 0x0, 0x0, 0x4040010}, 0x400c010) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcda) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32=r7, @ANYBLOB="08000500", @ANYRES32=r7, @ANYBLOB="1c0012800b0001006970766c616e00000c000280060001000200000018ba67142bd854a83c7358a84c47772638d206d7ca129dfbcf71e48b4df5bc8c5359cf0aa672ef31f003f2fb0505c510184fc7bd3f8cb35cdcce18610a18a93e4b9f1f343b3105344a359cfc884b315d0f9c3a58e9f4692ad771e17a261abcf8fbdafbaa39014724c575f106679b8a68951d5b1bae6d870d7f59985199fefda6e8ec670d01e0a992c264bc69a57f47cd08e0134b044620f28f3f28fdc4a64b26d17ecfb929cd4a6087fce2e6517221776601245e35cf97b08f72916b7ecdf8891470785d2596c630a7b606397993fa"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x40050) 5.087774262s ago: executing program 4 (id=3233): syz_open_dev$video4linux(&(0x7f0000000000), 0x103, 0x20000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/63, 0x3f}], 0x1}, 0x0) sendmmsg$alg(r4, &(0x7f0000000e80)=[{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000380)="3f702616eb388e0a5d6b09251e093b63ba258a9cd25c972b2482d355b10919e264343c02f2071c8767c6b89ef92159", 0x2f}], 0x1, 0x0, 0x0, 0x24040850}], 0x1, 0x8000) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000040)={0x8, 0x9, 0x4, {0x2, @vbi={0x9, 0x1, 0x7, 0x34565559, [0x34565348, 0xb22], [0xb], 0x1}}, 0x8}) r6 = socket(0x1d, 0x3, 0x26) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000000240)={0x0, 0xf, "a025d225c24ec6ea253157afa04406"}, &(0x7f00000002c0)=0x17) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000200)=0x20022a, 0x4) lsm_get_self_attr(0x68, 0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) syz_open_dev$evdev(0x0, 0x1, 0x80000) r7 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r7, 0x10e, 0x2, &(0x7f0000000040)=0x12, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x1, 0x50) io_setup(0x4fe, &(0x7f00000009c0)) 4.682393464s ago: executing program 2 (id=3234): r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x15473c0b, 0x0, 0x9, 0x0, 0x6, 0x8, 0xffffffff}, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket(0x2a, 0x2, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r7, 0x114, 0xa, &(0x7f0000000000)=0x1, 0x4) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000055a6070100000000100000", @ANYRES32=r9, @ANYRES32=r9, @ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r10, 0xfca804a0, 0x8, 0x0, &(0x7f00000002c0)="b800000500000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r11 = getpgrp(0xffffffffffffffff) sched_setattr(r11, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000140)=0x1) ioctl$TIOCSETD(r3, 0x5423, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r13 = socket(0x1, 0x803, 0x0) getsockname$packet(r13, 0x0, &(0x7f00000000c0)) sendmsg$nl_route(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001400b59527bd", @ANYRES32, @ANYBLOB="1400020000000000000000000000ffff00000000080008000001"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) 4.478118017s ago: executing program 3 (id=3236): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x4, 0x7ffe, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfffffffe, 0xffffffff}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x22102, 0x0) getsockopt$sock_buf(r1, 0x1, 0x0, &(0x7f0000000480)=""/235, &(0x7f0000000000)=0xeb) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r2, 0xc008aec1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x40) r4 = syz_open_dev$vim2m(0x0, 0x5, 0x2) shutdown(0xffffffffffffffff, 0x1) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, 0x0) socket$nl_generic(0x10, 0x3, 0x10) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) sendfile(r5, r5, 0x0, 0x200000) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0x200009, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x80000001}}], [{@fowner_gt={'fowner>', 0xee01}}, {@fsname={'fsname', 0x3d, '/dev/autofs\x00'}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@subj_role={'subj_role', 0x3d, '-(@'}}, {@dont_measure}, {@euid_eq}]}}, 0x0, 0x0, &(0x7f0000000580)="5b390962c9fdbbd4088a5003c31442fbcd924fa8fb3c67dd19ebcc088743473d65c77933b0b0cddf6dc2da2f8638b1a58567f2486796ad26bc5de7294cf30d50f2700363e2e8e860003bf46c4be7ada143b6aa3fe939759299f436cbaa6b0544f1acce9f383825177e63266d25bd41b96d8795") r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="000000002000010014003500776c616e300000001bd8d66f6c982a9f9c1ee2af1bf4000090dbba00"], 0x40}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = openat$autofs(0xffffff9c, &(0x7f0000000100), 0x80040, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r8, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0xe16}}, './file0\x00'}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r9, @ANYBLOB="06001500070000000c001680080001", @ANYRES64=r7], 0x38}}, 0x10) 4.097777489s ago: executing program 0 (id=3237): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @local}) bind$l2tp6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0xb91e9c5a8444a131, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r4, &(0x7f0000000100)=@in4={0x21, 0x80, 0x2, 0x10, {0x2, 0x8003, @multicast2}}, 0x24) sendmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="100000001001000001000000"], 0x10, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r4, &(0x7f0000002940)=[{{0x0, 0xffffffffffffff0a, 0x0}, 0x2}], 0xf000, 0x10002, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x40281, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r5, 0xc0045009, &(0x7f0000000000)=0x1) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x8854) unshare(0x6020400) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000940), &(0x7f0000000980)=0x8) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) 3.844948725s ago: executing program 1 (id=3238): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x4, 0x7ffe, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfffffffe, 0xffffffff}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x22102, 0x0) getsockopt$sock_buf(r1, 0x1, 0x0, &(0x7f0000000480)=""/235, &(0x7f0000000000)=0xeb) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r2, 0xc008aec1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x40) r4 = syz_open_dev$vim2m(0x0, 0x5, 0x2) shutdown(0xffffffffffffffff, 0x1) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, 0x0) socket$nl_generic(0x10, 0x3, 0x10) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) sendfile(r5, r5, 0x0, 0x200000) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0x200009, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x80000001}}], [{@fowner_gt={'fowner>', 0xee01}}, {@fsname={'fsname', 0x3d, '/dev/autofs\x00'}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@subj_role={'subj_role', 0x3d, '-(@'}}, {@dont_measure}, {@euid_eq}]}}, 0x0, 0x0, &(0x7f0000000580)="5b390962c9fdbbd4088a5003c31442fbcd924fa8fb3c67dd19ebcc088743473d65c77933b0b0cddf6dc2da2f8638b1a58567f2486796ad26bc5de7294cf30d50f2700363e2e8e860003bf46c4be7ada143b6aa3fe939759299f436cbaa6b0544f1acce9f383825177e63266d25bd41b96d8795") r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="000000002000010014003500776c616e300000001bd8d66f6c982a9f9c1ee2af1bf4000090dbba00"], 0x40}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r7 = openat$autofs(0xffffff9c, &(0x7f0000000100), 0x80040, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r7, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0xe16}}, './file0\x00'}) socket$nl_route(0x10, 0x3, 0x0) 2.965935589s ago: executing program 4 (id=3239): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x400) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000300)={{0x3, 0x0, 0x1, 0x1, 0x1}, 0xfffffffb, 0x25, 'id1\x00', 'timer1\x00', 0x0, 0xb, 0x200, 0x38e41e62, 0x64}) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r2 = syz_open_dev$video4linux(&(0x7f0000003900), 0x2, 0x2200) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f0000003e80)={0x0, @bt={0x3, 0x5, 0x0, 0x0, 0x2, 0xffff, 0x7f5, 0x5, 0x0, 0x1, 0xda9, 0x5cd3959f, 0xac, 0x3, 0x13, 0x72, {0x7, 0x7ff}, 0x0, 0xfa}}) close_range(r1, 0xffffffffffffffff, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x40c, 0xd8, 0x0, 0x148, 0xd8, 0x148, 0x378, 0x240, 0x240, 0x378, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@connlabel={{0x24}, {0x7, 0x2}}, @inet=@rpfilter={{0x24}, {0x1}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @multicast1, 0xff000000, 0xff000000, 'tunl0\x00', 'pimreg1\x00', {}, {0xff}, 0x84, 0x0, 0x60}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0xa, 0x9, 0x0, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf4}, {0x4, 0x3, 0x1, 0x1, 'syz1\x00', 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0xbb04, 0x2b, 0x10, 'syz1\x00', {0x6182}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x468) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)={0x14, 0x1e, 0x301, 0x20000002, 0x0, {0x1c}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4004000) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000540), 0x4) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0xa02, 0x0) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a440000000010109023b000101000000090400001202060000052406000005240000000d240f01000000000000000000090582020002001e00090503020002000000"], 0x0) bind$l2tp6(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0xb91e9c5a8444a131, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 2.96484526s ago: executing program 2 (id=3249): openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@loopback={0xff00000000000000, 0x777fe6a4b23f}, 0x10, 0x2, 0x1, 0x10, 0x9, 0x20, 0x5}, 0xfe82) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f727400001f000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x5c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) syz_usb_connect$uac1(0x3, 0xa2, 0x0, 0x0) r7 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r7, 0x80045530, &(0x7f0000000340)=""/90) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[], 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r4) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r8, 0x84, 0xd, &(0x7f0000003140)=""/4111, &(0x7f0000000000)=0x4) 2.958795439s ago: executing program 3 (id=3240): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000001c40)) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000140)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000000c0)=0x1) preadv2(r3, &(0x7f0000003500)=[{0x0, 0x4800}, {&(0x7f0000000580)=""/72, 0x48}], 0x2, 0x0, 0x7e, 0x10) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x18, r2, 0x4c1dad3e3d6a7499, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000040), 0x22a7, 0x20001) pselect6(0x40, &(0x7f0000000280)={0x5, 0x5, 0x7, 0x6, 0xbd, 0x8000000000000000, 0x56, 0x1}, &(0x7f0000000300)={0xc, 0x3, 0x2, 0x1, 0x9, 0x80000001, 0x1, 0xd}, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xac, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x84, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x4c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x1c, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "52f14aa7d20600000020c78f44e3a3f401"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x120}, 0x1, 0x0, 0x0, 0x200c0}, 0x40) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x185042, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000180), 0x800000000000006, 0x128202) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000001ac0)={r5, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0xe, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f54016d1a85a056f5d759ded130e04d528539f3d328973747a75d1f3d000017deb7d6193b3e7772fd29f35239d200000000008000", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x6]}}) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r7, 0x0) madvise(&(0x7f0000049000/0x3000)=nil, 0x3011, 0x16) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r8, &(0x7f000000a900)={0x0, 0x0, &(0x7f000000a8c0)={&(0x7f0000000140)={0x2c, 0x2, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @private=0xa010101}}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x80) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r9, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x1, 0x4, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x5}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004000}, 0x2000) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) syz_open_dev$char_usb(0xc, 0xb4, 0x6) 2.836111566s ago: executing program 1 (id=3241): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r3 = fsopen(&(0x7f0000000200)='adfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) close(r2) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2) ioctl$SNDRV_TIMER_IOCTL_INFO(r4, 0x80e85411, &(0x7f0000000400)) r5 = getpid() socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(r5, &(0x7f0000000340)={0x38, 0x0, 0x1000002d, 0x12000, 0x299c0, 0x7, 0x395400000000000, 0xfc5, 0x3, 0x5507}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010400000000000000000200e704050001000700000030692b5aebac0cd17186e7779be9ab9e218cc6ca0af0bd83226a6865a9f66727"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x8f}]}) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SET_FEATURES(r8, 0x40309439, &(0x7f0000000100)={0x2, 0x2, 0x4}) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="170928bd70000000e5a302becabf8460070000000000080009000100000008000a0000000000060002000100000008001700", @ANYRES32, @ANYBLOB], 0x3c}, 0x1, 0x620b}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) 2.818243077s ago: executing program 0 (id=3242): r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x15473c0b, 0x0, 0x9, 0x0, 0x6, 0x8, 0xffffffff}, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket(0x2a, 0x2, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r7, 0x114, 0xa, &(0x7f0000000000)=0x1, 0x4) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000055a6070100000000100000", @ANYRES32=r9, @ANYRES32=r9, @ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r10, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r11 = getpgrp(0xffffffffffffffff) sched_setattr(r11, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x40000019) r12 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r13 = socket(0x1, 0x803, 0x0) getsockname$packet(r13, 0x0, &(0x7f00000000c0)) sendmsg$nl_route(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001400b59527bd", @ANYRES32, @ANYBLOB="1400020000000000000000000000ffff00000000080008000001"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) 575.180129ms ago: executing program 1 (id=3243): socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000011c0)=ANY=[@ANYBLOB="580000000206050b000000000000000000000001050001000700000011000300686173683a61702c706f7274000000000900020073797a320000000005000400010000000c0007800500ff0700000000000005000a000000"], 0x58}, 0x1, 0x0, 0x0, 0x10000080}, 0x42) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x118}}, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r4, r4, 0x0, 0x200000) cachestat(r4, &(0x7f0000000000)={0x9}, &(0x7f0000000040), 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$can_raw(r5, &(0x7f0000000000)={&(0x7f00000000c0)={0x1d, r6}, 0x10, &(0x7f0000000100)={0x0, 0x56}, 0x2, 0x0, 0x0, 0x1}, 0x4040005) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r8 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, &(0x7f0000000100)={0x20004, r7, 0x80000}) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') preadv(r9, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r10 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r10, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000d00)="27050200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9d9bf1174bbf47ef74d55a99ad39d207cb572bb63dfc8f6098e3251eb181ebb55a0e82b5aa114e78f51a1e0eec04a10c2897204a66afab94dd8de001923467692f87653809bdac2ecd596160bec5c8869a08ecc5bf1561bb7ebf3468a2a212c7107d3c03418321ff77586b723dbfb3f03212aaf9150914bb989ef324957cea1707943a287afd6aa759a30e50f215292e54ebadd", 0xcb}, {&(0x7f0000001240)="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", 0x1b5}], 0x2}, 0x9cdc2384056b48b8) 573.834897ms ago: executing program 4 (id=3244): r0 = socket$kcm(0x10, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r1 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r1) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x18004, 0x0, 0x3, 0x0, 0xfffffe0000000001, 0xfa11, 0x224}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020}, 0x2020) creat(&(0x7f0000000240)='./file0\x00', 0x122) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000400)=@v3={0x3000000, [{0xb, 0x1}, {0x0, 0x3d9b}]}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r4 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_current(r4, &(0x7f0000000180)=ANY=[@ANYBLOB='permprofile && \r'], 0xff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000840)={0x60, r6, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x2c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x4}]}, 0x60}}, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x5) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffdd5}, 0x94) syz_emit_ethernet(0x8a, &(0x7f0000000380)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x54, 0x2c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[@hopopts={0x3a}], @pkt_toobig={0x2, 0x0, 0x0, 0x4, {0x8, 0x6, "cd85b5", 0x7, 0x84, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, [], "aad25a7f302d4579b298392ccf95e1e48f10658b1a1c7edc1ffd13d9"}}}}}}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)="d80000001400810c4e81f782db44b9040a1d080211000000040000a118000200ff05140100000e1208000f010081a7390e0401a80016ea1f000840042e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb0900073905a2b4f76c70cbc981e700001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d1601000000eb4edbb57a5025ccca9e00360d8bcc00400040", 0xbd}], 0x1, 0x0, 0x0, 0x7400}, 0x2040) 572.966853ms ago: executing program 0 (id=3254): r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x15473c0b, 0x0, 0x9, 0x0, 0x6, 0x8, 0xffffffff}, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket(0x2a, 0x2, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r7, 0x114, 0xa, &(0x7f0000000000)=0x1, 0x4) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000055a6070100000000100000", @ANYRES32=r9, @ANYRES32=r9, @ANYBLOB="0000000000000000b7020000030000008500000086000000bf91000000000000000000000000000000000000000000007c1da55e7e9e17b0176305757b89728ceb9fc0cf3a861370d383a1cd7a5ffc13302297396b467210e2e5f043dab07ea1e71b372c1636df338b99fa246ec2b12d5fc4ea17882d10aa927481bdfa7589e51140253d941e2658eefdcbea099405474c4ce8ba5408595062097ff806d3bb34e9512efc274fbd7c13d13cd2a6356a1f679dd43ad61ee8f0d96dbb0ad62fc2e1cdf6a2d55b86920abd95a35b0d3e8e69f29fbb69d2f50ec062f0bcea73a8df5b071da9bb6f94ef9e30e2720ae1eabfbcbeed93c4d664af52d12578517f59e14c110295acfdfc4a3498fb79bad44f13270fd30b96e2d7e90c20eb1ad3541aaa3e05205dd62caa015f67bbed3f14e09bc3ea8f86b645"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r10, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r11 = getpgrp(0xffffffffffffffff) sched_setattr(r11, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000140)=0x1) ioctl$TIOCSETD(r3, 0x5423, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r13 = socket(0x1, 0x803, 0x0) getsockname$packet(r13, 0x0, &(0x7f00000000c0)) sendmsg$nl_route(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001400b59527bd", @ANYRES32, @ANYBLOB="1400020000000000000000000000ffff00000000080008000001"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) 0s ago: executing program 3 (id=3245): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x180) fcntl$getownex(r2, 0x10, &(0x7f0000000040)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000b"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0x8800) mknod$loop(0x0, 0xfff, 0x0) execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/cgroup\x00') r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x3, 0x0, 0x0) getpid() ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000500)={0xc52, 0x2, 0x9, 0x6, 0x0, 0x10000, "5debca561a5fbf61048955f6f876b2ff", 0x9, 0x0, 0xfd}) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r7 = openat$6lowpan_control(0xffffff9c, &(0x7f0000000240), 0x2, 0x0) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008e88052086800095d893010203010902120001"], 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, &(0x7f0000000440)={0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$6lowpan_control(r7, &(0x7f0000000340)='connect aa:aa:aa:aa:aa:11 1', 0x1b) keyctl$dh_compute(0x17, &(0x7f0000000800)={r6, r6, r6}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES64=r4, @ANYRES8=r5], 0x48}}, 0x4000) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r10, 0x84, 0x81, &(0x7f0000000200)="1a000f488b6498aae203223d137302000000", 0x12) sendto$inet6(r10, &(0x7f0000000300)="cd", 0x1, 0x8804, &(0x7f0000000580)={0xa, 0x4e1f, 0x80, @loopback, 0xfffffffe}, 0x1c) kernel console output (not intermixed with test programs): [ 1052.708965][ T1240] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1052.738967][ T1240] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1052.767031][ T1240] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1052.785929][ T1240] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1052.810048][ T1240] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1052.826497][ T1240] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1052.847687][ T1240] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1052.867362][ T1240] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1052.885650][ T1240] input input84: Timeout waiting for response from device. [ 1052.913127][ T1240] usb 2-1: USB disconnect, device number 85 [ 1053.299552][T18565] netlink: 'syz.4.2680': attribute type 10 has an invalid length. [ 1053.313095][T18566] netlink: 'syz.3.2678': attribute type 1 has an invalid length. [ 1053.386616][T18566] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1053.407233][T18566] bond0: (slave bond1): making interface the new active one [ 1053.436569][T18566] bond0: (slave bond1): Enslaving as an active interface with an up link [ 1053.469557][T18578] bond0: (slave gretap1): Enslaving as a backup interface with an up link [ 1053.491447][T18581] netlink: 'syz.2.2677': attribute type 4 has an invalid length. [ 1053.566116][ T808] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1053.581338][T18582] fuse: Bad value for 'fd' [ 1053.587698][T11266] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1053.597683][T18566] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2678'. [ 1053.620505][T18582] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2682'. [ 1053.694229][T18583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1053.718629][T18583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1053.778009][ T808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1053.797923][ T808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1053.817044][T11266] usb 5-1: Using ep0 maxpacket: 16 [ 1053.829797][T11266] usb 5-1: too many configurations: 123, using maximum allowed: 8 [ 1053.846602][ T808] usb 2-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 1053.868834][T11266] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1053.880640][ T808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.925105][ T808] usb 2-1: config 0 descriptor?? [ 1053.981583][T11266] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1054.090853][T11266] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1054.135228][T11266] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1054.153645][T11266] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1054.166795][T11266] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1054.196657][ T29] kauditd_printk_skb: 124 callbacks suppressed [ 1054.196668][ T29] audit: type=1326 audit(1782087824.340:1678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18568 comm="syz.1.2681" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f0ec code=0x7ffc0000 [ 1054.231905][T11266] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1054.264664][ T29] audit: type=1326 audit(1782087824.340:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18568 comm="syz.1.2681" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f0ec code=0x7ffc0000 [ 1054.347187][ T29] audit: type=1326 audit(1782087824.340:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18568 comm="syz.1.2681" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f0ec code=0x7ffc0000 [ 1054.381662][ T29] audit: type=1326 audit(1782087824.340:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18568 comm="syz.1.2681" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=30 compat=1 ip=0xf709f0ec code=0x7ffc0000 [ 1054.408098][T11266] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1054.419471][ T808] playstation 0003:054C:0BA0.0023: item fetching failed at offset 0/7 [ 1054.428451][ T808] playstation 0003:054C:0BA0.0023: Parse failed [ 1054.438133][ T808] playstation 0003:054C:0BA0.0023: probe with driver playstation failed with error -22 [ 1054.480983][T11266] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1054.503895][T11266] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 1054.513396][ T29] audit: type=1326 audit(1782087824.340:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18568 comm="syz.1.2681" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f0ec code=0x7ffc0000 [ 1054.563885][T11266] usb 5-1: SerialNumber: syz [ 1054.590468][T11266] usb 5-1: config 0 descriptor?? [ 1054.604162][ T29] audit: type=1326 audit(1782087824.340:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18568 comm="syz.1.2681" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f0ec code=0x7ffc0000 [ 1054.658509][T18569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1054.677714][T18569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1054.709918][T11266] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input85 [ 1054.827075][ T29] audit: type=1326 audit(1782087824.340:1684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18568 comm="syz.1.2681" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f0ec code=0x7ffc0000 [ 1054.874983][ T29] audit: type=1326 audit(1782087824.340:1685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18568 comm="syz.1.2681" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf709f0ec code=0x7ffc0000 [ 1054.876040][T18565] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2680'. [ 1054.995175][ T29] audit: type=1326 audit(1782087824.340:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18568 comm="syz.1.2681" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf709f0ec code=0x7ffc0000 [ 1055.115442][ T29] audit: type=1326 audit(1782087824.350:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18568 comm="syz.1.2681" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71d71eb code=0x7ffc0000 [ 1055.202479][ T808] usb 2-1: USB disconnect, device number 86 [ 1056.028630][ T4977] bcm5974 5-1:0.0: could not read from device [ 1056.043314][T11266] usb 5-1: USB disconnect, device number 97 [ 1056.050464][ T4977] bcm5974 5-1:0.0: could not read from device [ 1056.058363][ T4977] bcm5974 5-1:0.0: could not read from device [ 1056.761256][T18622] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 1056.770185][T18622] PKCS7: Only support pkcs7_signedData type [ 1056.787316][T18620] kAFS: unable to lookup cell '' [ 1057.530199][T18626] fuse: Bad value for 'fd' [ 1057.540976][T18626] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2696'. [ 1058.230298][T18630] qrtr: Invalid version 0 [ 1058.242046][T18629] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2690'. [ 1058.365073][T18630] syzkaller1: entered promiscuous mode [ 1058.380865][T18630] syzkaller1: entered allmulticast mode [ 1058.902463][T18639] binder: 18635:18639 ioctl c0306201 800003c0 returned -14 [ 1059.344550][T18647] usb usb8: usbfs: process 18647 (syz.3.2693) did not claim interface 0 before use [ 1059.863949][T18658] syzkaller0: entered promiscuous mode [ 1059.875862][T18658] syzkaller0: entered allmulticast mode [ 1060.350934][T18663] fuse: Bad value for 'fd' [ 1060.357445][T18663] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2695'. [ 1061.072466][T18674] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2700'. [ 1061.096621][T18674] syzkaller0: entered promiscuous mode [ 1061.108251][T18674] syzkaller0: entered allmulticast mode [ 1061.189978][T18683] netlink: 'syz.0.2697': attribute type 4 has an invalid length. [ 1061.311165][T18686] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2708'. [ 1061.421118][T18688] fuse: Bad value for 'fd' [ 1061.438045][T18688] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2701'. [ 1061.585733][ T24] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1061.793320][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 1061.834178][ T24] usb 1-1: config 0 has no interfaces? [ 1061.857598][ T24] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1061.911060][ T24] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1061.964151][ T24] usb 1-1: Manufacturer: syz [ 1062.022493][ T24] usb 1-1: config 0 descriptor?? [ 1062.605698][ T24] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1062.658582][T18706] fuse: Bad value for 'fd' [ 1062.674536][T18706] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2713'. [ 1062.743433][T18703] binder: 18696:18703 ioctl c0306201 0 returned -14 [ 1062.797735][ T24] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1062.811200][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1062.830687][ T24] usb 2-1: config 0 descriptor?? [ 1063.050275][T18699] batman_adv: batadv0: Adding interface: macvtap1 [ 1063.061648][T18699] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1063.092437][T18699] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 1063.166870][ T24] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1063.181409][ T24] [drm:udl_init] *ERROR* Selecting channel failed [ 1063.216496][ T24] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 1063.236399][ T24] [drm] Initialized udl on minor 2 [ 1063.245035][T18708] batman_adv: batadv0: Removing interface: macvtap1 [ 1063.268333][T18703] binder: BINDER_SET_CONTEXT_MGR already set [ 1063.279374][T18703] binder: 18696:18703 ioctl 4018620d 80000100 returned -16 [ 1063.298908][ T24] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1063.336049][ T24] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1063.367394][ T1240] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1063.381043][ T24] usb 2-1: USB disconnect, device number 87 [ 1063.392674][ T1240] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1063.693473][T18718] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2705'. [ 1064.026705][T18724] netlink: 'syz.4.2706': attribute type 10 has an invalid length. [ 1064.046375][T18724] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1064.060713][T18724] team0: Port device netdevsim1 added [ 1064.103438][T18724] netlink: 'syz.4.2706': attribute type 10 has an invalid length. [ 1064.112710][ T5704] usb 1-1: USB disconnect, device number 84 [ 1064.214506][T18724] team0: Port device netdevsim1 removed [ 1064.487694][T18734] fuse: Bad value for 'fd' [ 1064.519683][T18734] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2709'. [ 1064.592904][T18735] fuse: Bad value for 'fd' [ 1064.599005][T18735] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2707'. [ 1065.103510][T18739] kAFS: unable to lookup cell '' [ 1065.401017][T18747] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 1065.463334][T18747] PKCS7: Only support pkcs7_signedData type [ 1066.767623][T18754] netlink: 'syz.1.2715': attribute type 10 has an invalid length. [ 1066.778547][T18754] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2715'. [ 1066.794605][T18754] team0: Port device geneve1 added [ 1066.996135][ T5704] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1067.010439][T18762] fuse: Bad value for 'fd' [ 1067.017019][T18762] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2716'. [ 1067.045646][ T808] usb 2-1: new full-speed USB device number 88 using dummy_hcd [ 1067.177927][ T5704] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1067.219641][ T5704] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.239377][ T808] usb 2-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1067.268111][ T5704] usb 1-1: config 0 descriptor?? [ 1067.273106][ T808] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1067.321040][ T808] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1067.378566][ T808] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1067.388307][ T808] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1067.397213][ T808] usb 2-1: Product: syz [ 1067.401751][ T808] usb 2-1: Manufacturer: syz [ 1067.407592][ T808] usb 2-1: SerialNumber: syz [ 1067.420521][ T808] usb 2-1: config 0 descriptor?? [ 1067.429899][ T808] usb 2-1: selecting invalid altsetting 0 [ 1067.510241][ T5704] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1067.522557][ T5704] [drm:udl_init] *ERROR* Selecting channel failed [ 1067.533443][ T5704] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 1067.541309][ T5704] [drm] Initialized udl on minor 2 [ 1067.551839][ T5704] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1067.576863][ T5704] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1067.584423][ T808] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1067.592765][ T808] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1067.619707][ T5704] usb 1-1: USB disconnect, device number 85 [ 1067.706109][ T1240] usb 2-1: USB disconnect, device number 88 [ 1067.935007][T18769] netlink: 'syz.4.2718': attribute type 1 has an invalid length. [ 1068.047907][T18769] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1068.056445][T18769] bond1: (slave bond2): making interface the new active one [ 1068.068800][T18769] bond1: (slave bond2): Enslaving as an active interface with an up link [ 1068.083061][T18777] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 1068.150014][T18769] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2718'. [ 1068.497551][T18788] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2721'. [ 1068.889175][T18789] binder: 18783:18789 ioctl c0306201 0 returned -14 [ 1068.924322][T18789] binder: BINDER_SET_CONTEXT_MGR already set [ 1068.931040][T18789] binder: 18783:18789 ioctl 4018620d 80000100 returned -16 [ 1069.465682][T18803] fuse: Bad value for 'fd' [ 1069.480341][T18803] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2722'. [ 1069.491398][T18805] fuse: Bad value for 'fd' [ 1069.504450][T18805] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2723'. [ 1069.600623][T18806] netlink: 'syz.4.2725': attribute type 7 has an invalid length. [ 1069.609309][T18806] netlink: 'syz.4.2725': attribute type 8 has an invalid length. [ 1069.633217][T18806] netlink: 'syz.4.2725': attribute type 13 has an invalid length. [ 1069.816731][T18808] kAFS: unable to lookup cell '' [ 1069.959945][ T29] kauditd_printk_skb: 123 callbacks suppressed [ 1069.959956][ T29] audit: type=1326 audit(1782087840.070:1811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18807 comm="syz.0.2726" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 1070.002341][ T29] audit: type=1326 audit(1782087840.070:1812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18807 comm="syz.0.2726" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 1070.028646][ T29] audit: type=1326 audit(1782087840.070:1813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18807 comm="syz.0.2726" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 1070.053542][ T29] audit: type=1326 audit(1782087840.070:1814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18807 comm="syz.0.2726" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 1070.081797][ T29] audit: type=1326 audit(1782087840.070:1815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18807 comm="syz.0.2726" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=233 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 1070.110571][ T29] audit: type=1326 audit(1782087840.070:1816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18807 comm="syz.0.2726" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 1070.170365][ T808] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1070.179414][ T29] audit: type=1326 audit(1782087840.070:1817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18807 comm="syz.0.2726" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 1070.245346][ T29] audit: type=1326 audit(1782087840.070:1818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18807 comm="syz.0.2726" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 1070.353761][ T29] audit: type=1326 audit(1782087840.070:1819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18807 comm="syz.0.2726" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 1070.379476][ T808] usb 1-1: Using ep0 maxpacket: 16 [ 1070.387176][ T808] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 167, changing to 11 [ 1070.405875][ T808] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 41299, setting to 1024 [ 1070.450478][ T808] usb 1-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 1070.464977][ T808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1070.491040][ T29] audit: type=1326 audit(1782087840.070:1820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18807 comm="syz.0.2726" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 1070.523108][ T808] usb 1-1: Product: syz [ 1070.531897][ T808] usb 1-1: Manufacturer: syz [ 1070.560658][ T808] usb 1-1: SerialNumber: syz [ 1070.584991][ T808] usb 1-1: config 0 descriptor?? [ 1070.619379][ T808] hub 1-1:0.0: bad descriptor, ignoring hub [ 1070.632018][ T808] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1070.675199][ T808] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1070.863802][T18818] fuse: Bad value for 'fd' [ 1070.880702][T18818] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2728'. [ 1070.954741][ T808] usb 1-1: USB disconnect, device number 86 [ 1071.025790][T18820] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2729'. [ 1071.071355][T18808] input: syz1 as /devices/virtual/input/input86 [ 1072.118722][T18836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2732'. [ 1072.909394][T18843] Invalid argument reading file caps for ./file0 [ 1072.982271][T18847] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2735'. [ 1073.442880][T18861] fuse: Bad value for 'fd' [ 1073.462185][T18861] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2737'. [ 1074.003725][T18866] fuse: Bad value for 'fd' [ 1074.009741][T18866] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2738'. [ 1074.416193][ T808] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1074.577531][ T808] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1074.577563][ T808] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1074.580211][ T808] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1074.580240][ T808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1074.580256][ T808] usb 2-1: Product: syz [ 1074.580280][ T808] usb 2-1: Manufacturer: syz [ 1074.580294][ T808] usb 2-1: SerialNumber: syz [ 1074.582615][ T808] cdc_mbim 2-1:1.0: skipping garbage [ 1074.793440][T18869] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1074.919264][T18889] fuse: Bad value for 'fd' [ 1074.938670][T18889] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2742'. [ 1075.423161][T18869] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1075.464547][ T808] cdc_mbim 2-1:1.0: setting tx_max = 16384 [ 1075.493611][ T808] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 1075.529875][ T808] wwan wwan0: port wwan0mbim0 attached [ 1075.562970][ T808] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 6e:3c:b6:0d:a1:3f [ 1075.827417][T18869] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1075.842548][T18895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2743'. [ 1075.882177][T18869] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1076.066405][T18869] gtp0: left promiscuous mode [ 1076.071514][T18869] gtp0: left allmulticast mode [ 1076.115830][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1076.126432][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1076.146396][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1076.361351][ C0] wdm_int_callback: 105 callbacks suppressed [ 1076.361374][ C0] cdc_mbim 2-1:1.0: nonzero urb status received: -71 [ 1076.374045][ C0] wdm_int_callback: 105 callbacks suppressed [ 1076.374069][ C0] cdc_mbim 2-1:1.0: wdm_int_callback - 0 bytes [ 1076.387372][ C0] cdc_mbim 2-1:1.0: nonzero urb status received: -71 [ 1076.394047][ C0] cdc_mbim 2-1:1.0: wdm_int_callback - 0 bytes [ 1076.400451][ C0] cdc_mbim 2-1:1.0: nonzero urb status received: -71 [ 1076.407124][ C0] cdc_mbim 2-1:1.0: wdm_int_callback - 0 bytes [ 1076.413449][ C0] cdc_mbim 2-1:1.0: nonzero urb status received: -71 [ 1076.420115][ C0] cdc_mbim 2-1:1.0: wdm_int_callback - 0 bytes [ 1076.426811][ C0] cdc_mbim 2-1:1.0: nonzero urb status received: -71 [ 1076.433550][ C0] cdc_mbim 2-1:1.0: wdm_int_callback - 0 bytes [ 1076.439857][ C0] cdc_mbim 2-1:1.0: nonzero urb status received: -71 [ 1076.446518][ C0] cdc_mbim 2-1:1.0: wdm_int_callback - 0 bytes [ 1076.452939][ C0] cdc_mbim 2-1:1.0: nonzero urb status received: -71 [ 1076.459619][ C0] cdc_mbim 2-1:1.0: wdm_int_callback - 0 bytes [ 1076.466229][ C0] cdc_mbim 2-1:1.0: nonzero urb status received: -71 [ 1076.472890][ C0] cdc_mbim 2-1:1.0: wdm_int_callback - 0 bytes [ 1076.479221][ C0] cdc_mbim 2-1:1.0: nonzero urb status received: -71 [ 1076.485886][ C0] cdc_mbim 2-1:1.0: wdm_int_callback - 0 bytes [ 1076.492207][ C0] cdc_mbim 2-1:1.0: nonzero urb status received: -71 [ 1076.498869][ C0] cdc_mbim 2-1:1.0: wdm_int_callback - 0 bytes [ 1076.570660][ T24] usb 2-1: USB disconnect, device number 89 [ 1076.604895][ T24] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 1076.702055][ T24] wwan wwan0: port wwan0mbim0 disconnected [ 1076.737591][T18928] netlink: 'syz.2.2745': attribute type 10 has an invalid length. [ 1076.820674][T18930] netlink: 'syz.2.2745': attribute type 10 has an invalid length. [ 1076.832199][T18928] bond0: (slave netdevsim1): Releasing backup interface [ 1076.881496][T18928] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1076.903713][T18928] team0: Port device netdevsim1 added [ 1076.922658][T18930] team0: Port device netdevsim1 removed [ 1076.939708][T18930] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1076.965249][T18930] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1077.710879][T18953] netlink: 'syz.1.2758': attribute type 1 has an invalid length. [ 1077.724803][T18953] netlink: 'syz.1.2758': attribute type 2 has an invalid length. [ 1078.384448][T18964] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2749'. [ 1079.046573][T18970] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2748'. [ 1079.184913][T18975] fuse: Bad value for 'fd' [ 1079.212957][T18975] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2751'. [ 1079.290025][T18969] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1079.301160][T18969] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1079.618537][ T3341] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.631481][ T3341] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.676721][ T3341] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.967313][T18986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1079.983343][T18986] 8021q: adding VLAN 0 to HW filter on device team0 [ 1080.008744][T18986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1080.112719][T18986] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1080.140630][T18986] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1080.191285][T18986] veth1_vlan: left promiscuous mode [ 1080.218854][T18986] veth0_vlan: left promiscuous mode [ 1080.246841][T18986] veth0_vlan: entered promiscuous mode [ 1080.291321][T18986] veth1_vlan: entered promiscuous mode [ 1080.335298][T18986] veth1_macvtap: left promiscuous mode [ 1080.353711][T18986] veth0_macvtap: left promiscuous mode [ 1080.414521][T18986] veth0_macvtap: entered promiscuous mode [ 1080.464267][T18986] veth1_macvtap: entered promiscuous mode [ 1080.503922][T18986] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1080.510716][T18994] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2756'. [ 1080.540974][T18986] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1080.586930][T18986] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1080.609630][T18986] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1080.640057][T18986] A link change request failed with some changes committed already. Interface veth1_to_bod may have been left with an inconsistent configuration, please check. [ 1080.727776][T18990] vlan2: entered promiscuous mode [ 1080.762523][T18990] hsr0: entered promiscuous mode [ 1080.783265][T18990] vlan2: entered allmulticast mode [ 1080.808380][T18990] hsr0: entered allmulticast mode [ 1080.820515][T18990] hsr_slave_0: entered allmulticast mode [ 1080.837144][T18990] hsr_slave_1: entered allmulticast mode [ 1080.880310][ T64] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1080.893979][ T64] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1080.919469][T18994] hsr_slave_0: left promiscuous mode [ 1080.935341][T18994] hsr_slave_1: left promiscuous mode [ 1081.002186][ T64] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.014558][T19002] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 1081.021100][T19002] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1081.034540][T19002] vhci_hcd vhci_hcd.0: Device attached [ 1081.295594][ T24] usb 38-1: SetAddress Request (2) to port 0 [ 1081.312142][ T24] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1081.392041][T19010] netlink: 'syz.0.2759': attribute type 13 has an invalid length. [ 1081.606092][ T808] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1081.627923][T19004] vhci_hcd: connection reset by peer [ 1081.667224][ T53] vhci_hcd vhci_hcd.2: stop threads [ 1081.682550][ T53] vhci_hcd vhci_hcd.2: release socket [ 1081.691497][ T53] vhci_hcd vhci_hcd.2: disconnect device [ 1082.178328][T19013] ptrace attach of "ci-upstream-kasan-gce-386/syz-executor exec"[5638] was attempted by "ci-upstream-kasan-gce-386/syz-executor exec"[19013] [ 1082.537509][ T5697] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1082.648614][T19022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1082.660659][T19022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1082.865553][ T5697] usb 5-1: new low-speed USB device number 98 using dummy_hcd [ 1083.017436][ T5697] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1083.030169][ T5697] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1083.044547][ T5697] usb 5-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 1083.055959][ T5697] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1083.074487][ T5697] usb 5-1: config 0 descriptor?? [ 1084.023528][T19039] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2765'. [ 1084.228746][T19045] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2766'. [ 1084.606034][T19050] fuse: Bad value for 'fd' [ 1084.636444][T19050] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2767'. [ 1085.064514][T19055] fuse: Bad value for 'fd' [ 1085.084054][T19055] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2768'. [ 1085.103733][T19057] netlink: 'syz.1.2769': attribute type 10 has an invalid length. [ 1085.415798][T11266] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1085.610327][T11266] usb 2-1: Using ep0 maxpacket: 16 [ 1085.660863][T19071] netlink: 'syz.2.2771': attribute type 1 has an invalid length. [ 1085.669492][T19071] netlink: 'syz.2.2771': attribute type 2 has an invalid length. [ 1085.699459][T11266] usb 2-1: too many configurations: 123, using maximum allowed: 8 [ 1085.728220][T11266] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1085.773185][T11266] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1085.812948][T11266] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1085.853480][T11266] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1085.889295][T11266] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1085.913429][T11266] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1085.929768][T11266] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1085.942496][T11266] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1085.954680][T11266] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1085.964491][T11266] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 1085.974772][T11266] usb 2-1: SerialNumber: syz [ 1085.987357][T11266] usb 2-1: config 0 descriptor?? [ 1086.008892][T11266] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input87 [ 1086.234482][T19057] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2769'. [ 1086.283147][T19057] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1086.364486][T19057] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1086.437391][T19057] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 1086.456068][ T24] usb 38-1: device descriptor read/8, error -110 [ 1086.516466][T19057] bond0 (unregistering): Released all slaves [ 1086.876523][ T24] usb usb38-port1: attempt power cycle [ 1087.446687][ T24] usb usb38-port1: unable to enumerate USB device [ 1087.572561][T19091] netlink: 'syz.3.2783': attribute type 1 has an invalid length. [ 1087.595545][T19091] netlink: 'syz.3.2783': attribute type 2 has an invalid length. [ 1087.825053][T19096] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 1087.831614][T19096] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1087.880841][T19096] vhci_hcd vhci_hcd.0: Device attached [ 1088.158176][ T4977] bcm5974 2-1:0.0: could not read from device [ 1088.165131][ T4977] bcm5974 2-1:0.0: could not read from device [ 1088.195965][T11266] usb 2-1: USB disconnect, device number 90 [ 1088.202226][ T4977] bcm5974 2-1:0.0: could not read from device [ 1088.265081][ T4977] bcm5974 2-1:0.0: could not read from device [ 1088.391437][T19097] vhci_hcd: connection closed [ 1088.391734][ T177] vhci_hcd vhci_hcd.4: stop threads [ 1088.417750][ T177] vhci_hcd vhci_hcd.4: release socket [ 1088.432573][ T177] vhci_hcd vhci_hcd.4: disconnect device [ 1088.536290][ T5697] usbhid 5-1:0.0: can't add hid device: -32 [ 1088.542305][ T5697] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 1090.072198][T19129] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2779'. [ 1090.510180][T19136] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2780'. [ 1091.350828][T19150] ptrace attach of "ci-upstream-kasan-gce-386/syz-executor exec"[5635] was attempted by "ci-upstream-kasan-gce-386/syz-executor exec"[19150] [ 1092.524873][T19162] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2786'. [ 1092.780402][T19173] kAFS: unable to lookup cell '' [ 1092.821886][T19173] kAFS: unable to lookup cell '(,c' [ 1092.832473][T19175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1092.843640][T19175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1092.858847][T19175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2789'. [ 1092.879096][T19175] tipc: Enabled bearer , priority 0 [ 1092.887830][T19175] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1092.965780][ T5697] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1092.980440][T19177] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2790'. [ 1093.135765][ T5697] usb 1-1: Using ep0 maxpacket: 16 [ 1093.142526][ T5697] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1093.155599][ T5697] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1093.185616][ T5697] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1093.206900][ T5697] usb 1-1: config 0 descriptor?? [ 1093.236153][ T808] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1093.398978][ T808] usb 2-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1093.430390][ T808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1093.474152][ T808] usb 2-1: Product: syz [ 1093.497136][ T808] usb 2-1: Manufacturer: syz [ 1093.519696][ T808] usb 2-1: SerialNumber: syz [ 1093.550808][ T808] usb 2-1: config 0 descriptor?? [ 1093.574521][ T808] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 1093.624585][ T5697] mcp2221 0003:04D8:00DD.0024: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 1094.033301][T19189] netdevsim netdevsim1: Firmware load for '../file0/file0' refused, path contains '..' component [ 1094.044321][T19185] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1094.082436][T19185] tipc: Resetting bearer [ 1094.092715][T19185] vlan2: left promiscuous mode [ 1094.100348][ T808] input: sonixb as /devices/platform/dummy_hcd.1/usb2/2-1/input/input88 [ 1094.100644][T19185] hsr0: left promiscuous mode [ 1094.114456][T19185] vlan2: left allmulticast mode [ 1094.122690][T19185] hsr0: left allmulticast mode [ 1094.130522][T19185] hsr_slave_0: left allmulticast mode [ 1094.145637][T19185] hsr_slave_1: left allmulticast mode [ 1094.270175][T19194] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2794'. [ 1094.386928][ T808] usb 2-1: USB disconnect, device number 91 [ 1095.697183][ T808] usb 1-1: USB disconnect, device number 87 [ 1095.728743][T19207] fuse: Bad value for 'fd' [ 1095.741889][T19207] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2796'. [ 1096.120269][T19217] fuse: Bad value for 'fd' [ 1096.134295][T19217] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2799'. [ 1096.419107][T19223] syz_tun: entered allmulticast mode [ 1096.794055][T19224] dvmrp8: entered allmulticast mode [ 1096.957819][T19228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1096.984307][T19228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1097.157429][T19232] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2802'. [ 1097.183013][T19234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1097.240670][T19234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1097.361534][T19219] syz_tun: left allmulticast mode [ 1098.453711][T19253] netlink: 'syz.0.2804': attribute type 10 has an invalid length. [ 1098.506592][T19253] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1098.522695][T19253] team0: Port device netdevsim1 added [ 1098.550260][T19254] netlink: 'syz.0.2804': attribute type 10 has an invalid length. [ 1098.636615][T19254] team0: Port device netdevsim1 removed [ 1099.301225][T19264] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2807'. [ 1100.380104][T19283] netlink: 'syz.3.2811': attribute type 10 has an invalid length. [ 1100.665601][T11266] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1100.815610][T11266] usb 4-1: Using ep0 maxpacket: 16 [ 1100.824716][T11266] usb 4-1: too many configurations: 123, using maximum allowed: 8 [ 1100.839151][T11266] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1100.855101][T11266] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1100.873322][T11266] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1100.893597][T11266] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1100.905848][T11266] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1100.928002][T11266] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1100.951357][T11266] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1100.976368][T11266] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1100.989838][T11266] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1100.999037][T11266] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 1101.009035][T11266] usb 4-1: SerialNumber: syz [ 1101.036047][T11266] usb 4-1: config 0 descriptor?? [ 1101.068516][T11266] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input89 [ 1101.277351][T19283] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2811'. [ 1101.296877][T19293] syz_tun: entered allmulticast mode [ 1102.297357][T19298] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2815'. [ 1102.391656][ T4977] bcm5974 4-1:0.0: could not read from device [ 1102.460052][ T4977] bcm5974 4-1:0.0: could not read from device [ 1102.467319][T19287] syz_tun: left allmulticast mode [ 1102.513841][ T4977] bcm5974 4-1:0.0: could not read from device [ 1102.523422][T11266] usb 4-1: USB disconnect, device number 68 [ 1102.541655][ T4977] bcm5974 4-1:0.0: could not read from device [ 1102.724959][T19307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2818'. [ 1102.787874][T19307] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2818'. [ 1102.807268][T19311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1102.816454][T19311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1102.848014][T19312] fuse: Bad value for 'fd' [ 1102.854191][T19312] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2816'. [ 1102.969643][ T5697] usb 1-1: new full-speed USB device number 88 using dummy_hcd [ 1103.137542][ T5697] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 1103.150502][ T5697] usb 1-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1103.188715][ T5697] usb 1-1: config 0 has no interface number 0 [ 1103.234611][ T5697] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 12336, setting to 64 [ 1103.282386][ T5697] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1103.301469][T19318] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2820'. [ 1103.338434][ T5697] usb 1-1: config 0 interface 52 has no altsetting 0 [ 1103.371935][ T5697] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1103.410232][ T5697] usb 1-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 1103.435968][ T5697] usb 1-1: Manufacturer: syz [ 1103.458171][ T5697] usb 1-1: config 0 descriptor?? [ 1103.484596][ T5697] hub 1-1:0.52: bad descriptor, ignoring hub [ 1103.502413][ T5697] hub 1-1:0.52: probe with driver hub failed with error -5 [ 1104.331244][T19327] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2831'. [ 1104.378185][T19328] netlink: 'syz.3.2821': attribute type 10 has an invalid length. [ 1104.397460][T19328] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1104.426967][T19328] team0: Port device netdevsim1 added [ 1104.458524][T19329] netlink: 'syz.3.2821': attribute type 10 has an invalid length. [ 1104.489445][T19329] team0: Port device netdevsim1 removed [ 1104.576402][ T5697] usb 1-1: Can not set alternate setting to 1, error: -71 [ 1104.597334][ T5697] synaptics_usb 1-1:0.52: probe with driver synaptics_usb failed with error -71 [ 1104.669867][ T5697] usb 1-1: USB disconnect, device number 88 [ 1105.266055][ T5697] usb 1-1: new full-speed USB device number 89 using dummy_hcd [ 1105.441444][ T5697] usb 1-1: config 8 has an invalid interface number: 177 but max is 0 [ 1105.450156][ T5697] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1105.462463][T19351] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2836'. [ 1105.492227][ T5697] usb 1-1: config 8 has no interface number 0 [ 1105.507576][ T5697] usb 1-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1105.548809][ T5697] usb 1-1: config 8 interface 177 has no altsetting 0 [ 1105.581314][ T5697] usb 1-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1105.757639][T19354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1105.766315][ T5697] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1105.807462][T19354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1105.843866][T19354] dlm: no locking on control device [ 1105.938186][ T5697] ir_toy 1-1:8.177: required endpoints not found [ 1106.613920][T19365] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2839'. [ 1107.829401][T19378] syz_tun: entered allmulticast mode [ 1107.863939][ T5697] usb 1-1: USB disconnect, device number 89 [ 1108.186702][T11350] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1108.348340][T11350] usb 4-1: config 0 has an invalid interface number: 74 but max is 0 [ 1108.369654][T11350] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1108.396141][T11350] usb 4-1: config 0 has no interface number 0 [ 1108.407704][T11350] usb 4-1: config 0 interface 74 has no altsetting 0 [ 1108.416209][T11350] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 1108.427137][T11350] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.445402][T11350] usb 4-1: config 0 descriptor?? [ 1108.474906][T11350] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1108.847619][T19400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1108.899789][T19400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1109.078032][T19372] syz_tun: left allmulticast mode [ 1109.504002][ T53] usb 4-1: Failed to submit usb control message: -110 [ 1109.545200][ T53] usb 4-1: unable to send the bmi data to the device: -110 [ 1109.562566][ T53] usb 4-1: unable to get target info from device [ 1109.580558][ T53] usb 4-1: could not get target info (-110) [ 1109.614208][ T53] usb 4-1: could not probe fw (-110) [ 1109.644057][T19413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1109.679401][T19413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1109.815234][T19414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1109.900578][T19414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1110.115031][T19419] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2838'. [ 1110.697257][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 1110.703684][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 1111.577439][T19432] kAFS: unable to lookup cell '' [ 1111.659845][T19433] kAFS: unable to lookup cell '(,c' [ 1112.454102][ T5697] usb 4-1: USB disconnect, device number 69 [ 1114.305800][T11266] usb 4-1: new full-speed USB device number 70 using dummy_hcd [ 1114.488027][T11266] usb 4-1: config 8 has an invalid interface number: 177 but max is 0 [ 1114.504137][T11266] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1114.530725][T11266] usb 4-1: config 8 has no interface number 0 [ 1114.553775][T11266] usb 4-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1114.612793][T11266] usb 4-1: config 8 interface 177 has no altsetting 0 [ 1114.637875][T11266] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1114.660329][T11266] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1114.699262][T11266] ir_toy 4-1:8.177: required endpoints not found [ 1114.835558][T11350] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1114.999084][T11350] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1115.033280][T11350] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1115.053707][T11350] usb 2-1: Product: syz [ 1115.061412][T11350] usb 2-1: Manufacturer: syz [ 1115.066933][T11350] usb 2-1: SerialNumber: syz [ 1115.074747][T11350] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1115.107316][T11266] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1116.136317][T11266] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1116.186754][T11266] ath9k_htc: Failed to initialize the device [ 1116.239997][T11266] usb 2-1: ath9k_htc: USB layer deinitialized [ 1116.858706][ T5697] usb 4-1: USB disconnect, device number 70 [ 1116.942134][T19485] syz_tun: entered allmulticast mode [ 1116.959186][T19485] dvmrp8: entered allmulticast mode [ 1117.471997][ T808] usb 2-1: USB disconnect, device number 92 [ 1118.756762][T19482] syz_tun: left allmulticast mode [ 1118.922940][T19506] fuse: Invalid rootmode [ 1118.959481][T19509] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2867'. [ 1118.989349][T19511] program syz.2.2854 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1119.516430][T19529] syz_tun: entered allmulticast mode [ 1121.016873][T19515] syz_tun: left allmulticast mode [ 1121.697927][T19555] vlan2: entered promiscuous mode [ 1121.703106][T19555] hsr0: entered promiscuous mode [ 1121.708470][T19555] vlan2: entered allmulticast mode [ 1121.714462][T19555] hsr0: entered allmulticast mode [ 1121.720391][T19555] hsr_slave_0: entered allmulticast mode [ 1121.726911][T19555] hsr_slave_1: entered allmulticast mode [ 1121.775270][T19555] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2864'. [ 1121.804955][T19555] hsr_slave_0: left promiscuous mode [ 1121.852784][T19555] hsr_slave_1: left promiscuous mode [ 1121.903629][T19568] fuse: Bad value for 'fd' [ 1121.923630][T19568] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2876'. [ 1121.993469][T19569] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2865'. [ 1122.339177][T19579] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2866'. [ 1122.806124][T19582] netlink: 'syz.2.2868': attribute type 3 has an invalid length. [ 1122.870383][T19582] netlink: 'syz.2.2868': attribute type 10 has an invalid length. [ 1124.874014][T19605] tipc: Resetting bearer [ 1124.987697][T19600] fuse: Invalid rootmode [ 1125.776931][T19620] fuse: Bad value for 'fd' [ 1125.782366][T19620] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2886'. [ 1126.743772][T19637] syz_tun: entered allmulticast mode [ 1127.095959][ T808] usb 2-1: new full-speed USB device number 93 using dummy_hcd [ 1127.273117][ T808] usb 2-1: config 8 has an invalid interface number: 177 but max is 0 [ 1127.329288][ T808] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1127.412123][ T808] usb 2-1: config 8 has no interface number 0 [ 1127.457959][ T808] usb 2-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1127.560169][ T808] usb 2-1: config 8 interface 177 has no altsetting 0 [ 1127.598579][ T808] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1127.658619][ T808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.764096][ T808] ir_toy 2-1:8.177: required endpoints not found [ 1128.036070][T19624] syz_tun: left allmulticast mode [ 1128.328036][T19648] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2893'. [ 1129.014407][T19656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2882'. [ 1129.040641][T19656] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2882'. [ 1129.097653][T19656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1129.127313][T19656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1130.229124][T19673] fuse: Bad value for 'fd' [ 1130.291324][T19676] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2898'. [ 1130.335164][ T808] usb 2-1: USB disconnect, device number 93 [ 1130.516511][T19680] program syz.1.2884 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1130.580479][T19680] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2884'. [ 1130.729558][T19686] netlink: 'syz.1.2884': attribute type 7 has an invalid length. [ 1130.948737][T19693] 8021q: adding VLAN 0 to HW filter on device team0 [ 1130.963309][T19693] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1130.997114][T19695] fuse: Bad value for 'fd' [ 1131.014846][T19695] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2902'. [ 1131.037060][T19693] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1131.054228][T19693] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1131.142854][T19693] veth1_vlan: left promiscuous mode [ 1131.312482][T19693] veth0_vlan: left promiscuous mode [ 1131.321043][T19693] veth0_vlan: entered promiscuous mode [ 1131.335567][T19693] veth1_vlan: entered promiscuous mode [ 1131.348822][T19693] veth1_macvtap: left promiscuous mode [ 1131.362949][T19693] veth0_macvtap: left promiscuous mode [ 1131.375724][T19693] veth0_macvtap: entered promiscuous mode [ 1131.388454][T19693] veth1_macvtap: entered promiscuous mode [ 1131.408741][T19693] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1131.424826][T19693] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1131.441407][T19693] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1131.454539][T19693] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1131.482641][T19693] A link change request failed with some changes committed already. Interface veth1_to_bod may have been left with an inconsistent configuration, please check. [ 1131.549965][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1131.587632][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1131.610510][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1131.836223][T19709] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2892'. [ 1132.291910][T19715] fuse: Bad value for 'fd' [ 1132.303901][T19715] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2906'. [ 1132.785223][T19721] ptrace attach of "ci-upstream-kasan-gce-386/syz-executor exec"[5637] was attempted by "ci-upstream-kasan-gce-386/syz-executor exec"[19721] [ 1133.837321][T19739] binder: 19723:19739 ioctl c0306201 800003c0 returned -14 [ 1133.949462][T19745] fuse: Bad value for 'fd' [ 1133.958272][T19745] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2909'. [ 1134.817534][T19749] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 1134.826438][T19749] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 1134.834343][T19749] tipc: Resetting bearer [ 1134.858932][T19754] fuse: Bad value for 'fd' [ 1134.895981][T19754] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2913'. [ 1135.355624][T11350] usb 2-1: new full-speed USB device number 94 using dummy_hcd [ 1135.518866][T11350] usb 2-1: config 8 has an invalid interface number: 177 but max is 0 [ 1135.545639][T11350] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1135.581011][T11350] usb 2-1: config 8 has no interface number 0 [ 1135.599935][T11350] usb 2-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1135.636473][T11350] usb 2-1: config 8 interface 177 has no altsetting 0 [ 1135.661759][T11350] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1135.680191][T11350] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.716359][T11350] ir_toy 2-1:8.177: required endpoints not found [ 1136.390414][T19773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1136.407889][T19773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1136.959745][T19787] netlink: 'syz.3.2908': attribute type 10 has an invalid length. [ 1136.986148][T19787] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1137.015421][T19787] team0: Port device netdevsim1 added [ 1137.016031][T19789] netlink: 'syz.3.2908': attribute type 10 has an invalid length. [ 1137.070598][T19789] team0: Port device netdevsim1 removed [ 1137.099539][T19788] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2910'. [ 1137.477724][T19794] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2912'. [ 1138.623753][ T808] usb 2-1: USB disconnect, device number 94 [ 1139.643671][T19828] fuse: Bad value for 'fd' [ 1139.677277][T19828] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2918'. [ 1139.807630][T19831] netlink: 'syz.4.2919': attribute type 3 has an invalid length. [ 1139.820703][T19831] netlink: 'syz.4.2919': attribute type 10 has an invalid length. [ 1139.844484][T19833] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1139.881063][T19833] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1139.913160][T19833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1139.973262][T19839] ptrace attach of "ci-upstream-kasan-gce-386/syz-executor exec"[5636] was attempted by "ci-upstream-kasan-gce-386/syz-executor exec"[19839] [ 1140.020595][T19838] binder: 19814:19838 ioctl c0306201 800003c0 returned -14 [ 1140.841015][T19841] qrtr: Invalid version 0 [ 1141.448968][T19859] fuse: Bad value for 'fd' [ 1141.461116][T19859] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2924'. [ 1143.493344][T19865] program syz.4.2927 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1143.518763][T19865] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2927'. [ 1143.585328][T19874] netlink: 'syz.4.2927': attribute type 7 has an invalid length. [ 1143.640722][T19879] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2936'. [ 1145.505053][T19898] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2930'. [ 1145.862119][T19903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1145.898708][T19903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1146.066026][T19915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1146.106899][T19915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1146.174837][T19917] ptrace attach of "ci-upstream-kasan-gce-386/syz-executor exec"[5634] was attempted by "ci-upstream-kasan-gce-386/syz-executor exec"[19917] [ 1147.321922][T19925] vlan0: entered promiscuous mode [ 1147.334710][T19925] hsr0: entered promiscuous mode [ 1147.346839][T19925] vlan0: entered allmulticast mode [ 1147.357204][T19925] hsr0: entered allmulticast mode [ 1147.374271][T19925] hsr_slave_0: entered allmulticast mode [ 1147.393123][T19925] hsr_slave_1: entered allmulticast mode [ 1147.542835][T19929] fuse: Bad value for 'fd' [ 1147.547046][T19927] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2933'. [ 1147.670256][T19927] hsr_slave_0: left promiscuous mode [ 1147.677860][T19927] hsr_slave_1: left promiscuous mode [ 1148.017847][T19945] netlink: 'syz.1.2937': attribute type 3 has an invalid length. [ 1148.046605][T19945] netlink: 'syz.1.2937': attribute type 10 has an invalid length. [ 1148.987484][T19954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2939'. [ 1149.377357][T19971] fuse: Bad value for 'fd' [ 1149.391634][T19971] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2941'. [ 1151.213091][T19989] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2948'. [ 1151.768382][T20001] fuse: Bad value for 'fd' [ 1151.774012][T20001] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2951'. [ 1152.104030][T20006] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2952'. [ 1153.122522][ T29] kauditd_printk_skb: 95 callbacks suppressed [ 1153.122538][ T29] audit: type=1326 audit(1782087923.270:1916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20015 comm="syz.3.2954" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc30ec code=0x7ffc0000 [ 1153.172370][ T29] audit: type=1326 audit(1782087923.310:1917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20015 comm="syz.3.2954" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc30ec code=0x7ffc0000 [ 1153.225153][T20020] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2964'. [ 1153.250023][ T29] audit: type=1326 audit(1782087923.310:1918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20015 comm="syz.3.2954" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fc30ec code=0x7ffc0000 [ 1153.303811][ T29] audit: type=1326 audit(1782087923.310:1919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20015 comm="syz.3.2954" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc30ec code=0x7ffc0000 [ 1153.345971][ T29] audit: type=1326 audit(1782087923.310:1920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20015 comm="syz.3.2954" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc30ec code=0x7ffc0000 [ 1153.414200][ T29] audit: type=1326 audit(1782087923.310:1921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20015 comm="syz.3.2954" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fc30ec code=0x7ffc0000 [ 1153.447302][ T29] audit: type=1326 audit(1782087923.310:1922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20015 comm="syz.3.2954" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc30ec code=0x7ffc0000 [ 1153.486687][ T29] audit: type=1326 audit(1782087923.310:1923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20015 comm="syz.3.2954" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc30ec code=0x7ffc0000 [ 1153.580758][ T29] audit: type=1326 audit(1782087923.310:1924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20015 comm="syz.3.2954" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7fc30ec code=0x7ffc0000 [ 1153.649537][ T29] audit: type=1326 audit(1782087923.310:1925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20015 comm="syz.3.2954" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc30ec code=0x7ffc0000 [ 1153.751672][T20029] fuse: Bad value for 'fd' [ 1153.763672][T20029] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2955'. [ 1154.187701][T20034] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1154.243642][T20034] A link change request failed with some changes committed already. Interface veth1_to_bod may have been left with an inconsistent configuration, please check. [ 1154.726609][T20049] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.2959'. [ 1154.779435][T20049] veth0_to_bond: default FDB implementation only supports local addresses [ 1154.779852][T20050] fuse: Bad value for 'fd' [ 1154.820959][T20050] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2958'. [ 1155.690300][T20058] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2961'. [ 1155.812383][T20057] Invalid argument reading file caps for ./file0 [ 1156.317134][T11350] usb 1-1: new full-speed USB device number 90 using dummy_hcd [ 1156.506883][T11350] usb 1-1: config 8 has an invalid interface number: 177 but max is 0 [ 1156.522375][T11350] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1156.584086][T11350] usb 1-1: config 8 has no interface number 0 [ 1156.623965][T11350] usb 1-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1156.700401][T11350] usb 1-1: config 8 interface 177 has no altsetting 0 [ 1156.745407][T11350] usb 1-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1156.796414][T11350] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1156.845024][T11350] ir_toy 1-1:8.177: required endpoints not found [ 1157.599289][T20091] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2969'. [ 1158.608756][T20105] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2970'. [ 1158.661621][T20108] fuse: Bad value for 'fd' [ 1158.673800][T20108] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2971'. [ 1158.905377][ T808] usb 1-1: USB disconnect, device number 90 [ 1159.248326][T20117] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2974'. [ 1159.431624][T20119] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2974'. [ 1159.716452][T20123] fuse: Bad value for 'fd' [ 1159.751487][T20123] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2975'. [ 1160.361305][T20132] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2979'. [ 1160.442178][T20139] fuse: Bad value for 'fd' [ 1160.479083][T20139] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2987'. [ 1160.564343][T20143] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2976'. [ 1160.587031][T20145] netlink: 'syz.4.2978': attribute type 10 has an invalid length. [ 1160.662608][T20145] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1160.670214][T20148] netlink: 'syz.4.2978': attribute type 10 has an invalid length. [ 1160.713472][T20145] team0: Port device netdevsim1 added [ 1160.841349][T20148] team0: Port device netdevsim1 removed [ 1162.470679][T20178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1162.832977][T20178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1162.981976][T20187] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2986'. [ 1163.003361][T20184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1163.018582][T20184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1163.224868][T20192] fuse: Bad value for 'fd' [ 1163.249926][T20192] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2988'. [ 1163.365113][T20196] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2990'. [ 1164.156999][T20204] fuse: Bad value for 'fd' [ 1164.194557][T20205] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2992'. [ 1165.092645][T20216] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3004'. [ 1165.498536][T20223] kAFS: unable to lookup cell '' [ 1166.279304][T20228] fuse: Bad value for 'fd' [ 1166.295317][T20228] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2996'. [ 1166.528530][T20230] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2997'. [ 1168.502977][T20263] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3003'. [ 1168.626300][T20260] binder: 20250:20260 ioctl c0306201 800003c0 returned -14 [ 1168.640000][T20262] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2999'. [ 1169.409792][T20268] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3005'. [ 1170.401534][T20291] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3007'. [ 1170.464761][T20290] netlink: 'syz.0.3006': attribute type 3 has an invalid length. [ 1170.532805][T20290] netlink: 'syz.0.3006': attribute type 10 has an invalid length. [ 1170.622897][T20289] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1170.674217][T20289] A link change request failed with some changes committed already. Interface veth1_to_bod may have been left with an inconsistent configuration, please check. [ 1171.222558][T20299] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3011'. [ 1171.633717][T20305] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3012'. [ 1171.703406][T20305] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3012'. [ 1172.138654][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 1172.145541][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 1172.896731][T20321] fuse: Bad value for 'fd' [ 1172.907751][T20321] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3014'. [ 1172.975693][T11350] usb 1-1: new full-speed USB device number 91 using dummy_hcd [ 1173.136923][T11350] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1173.175084][T11350] usb 1-1: config 0 has no interface number 0 [ 1173.199928][T11350] usb 1-1: config 0 interface 1 altsetting 149 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1173.262791][T11350] usb 1-1: config 0 interface 1 altsetting 149 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1173.301339][T11350] usb 1-1: config 0 interface 1 altsetting 149 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1173.329382][T11350] usb 1-1: config 0 interface 1 has no altsetting 0 [ 1173.345344][T11350] usb 1-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 1173.379254][T11350] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1173.408234][T11350] usb 1-1: config 0 descriptor?? [ 1173.529204][T20339] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3018'. [ 1174.062673][T20320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1174.123658][T20320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1174.154997][T20344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1174.206289][T20344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1174.279489][T20320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1174.355843][T20320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1174.757826][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 1174.757844][ T29] audit: type=1326 audit(1782087944.880:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20346 comm="syz.1.3021" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f0ec code=0x7ffc0000 [ 1174.806045][ T29] audit: type=1326 audit(1782087944.880:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20346 comm="syz.1.3021" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f0ec code=0x7ffc0000 [ 1174.831114][ T29] audit: type=1326 audit(1782087944.880:1947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20346 comm="syz.1.3021" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf709f0ec code=0x7ffc0000 [ 1174.872528][ T29] audit: type=1326 audit(1782087944.880:1948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20346 comm="syz.1.3021" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f0ec code=0x7ffc0000 [ 1174.941771][ T29] audit: type=1326 audit(1782087944.880:1949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20346 comm="syz.1.3021" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f0ec code=0x7ffc0000 [ 1175.018693][T11350] usbhid 1-1:0.1: can't add hid device: -71 [ 1175.027418][T11350] usbhid 1-1:0.1: probe with driver usbhid failed with error -71 [ 1175.093530][ T29] audit: type=1326 audit(1782087944.880:1950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20346 comm="syz.1.3021" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf709f0ec code=0x7ffc0000 [ 1175.141889][T11350] usb 1-1: USB disconnect, device number 91 [ 1175.243269][ T29] audit: type=1326 audit(1782087944.880:1951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20346 comm="syz.1.3021" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f0ec code=0x7ffc0000 [ 1175.323054][ T29] audit: type=1326 audit(1782087944.880:1952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20346 comm="syz.1.3021" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f0ec code=0x7ffc0000 [ 1175.415292][ T29] audit: type=1326 audit(1782087944.890:1953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20346 comm="syz.1.3021" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf709f0ec code=0x7ffc0000 [ 1175.468500][ T29] audit: type=1326 audit(1782087944.900:1954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20346 comm="syz.1.3021" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f0ec code=0x7ffc0000 [ 1176.631268][T20383] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3027'. [ 1176.666018][T20384] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3035'. [ 1176.716562][T20383] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3027'. [ 1176.745636][ T5704] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1176.927054][ T5704] usb 2-1: Using ep0 maxpacket: 16 [ 1177.103138][ T5704] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 1177.120960][ T5704] usb 2-1: config 0 has no interface number 0 [ 1177.138049][ T5704] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1177.168174][ T5704] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1177.200197][ T5704] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1177.216443][ T5704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1177.238355][ T5704] usb 2-1: Product: syz [ 1177.250569][ T5704] usb 2-1: Manufacturer: syz [ 1177.267516][ T5704] usb 2-1: SerialNumber: syz [ 1177.299731][ T5704] usb 2-1: config 0 descriptor?? [ 1177.309878][T20372] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1177.324439][T20372] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1177.583995][T20372] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1177.606830][T20372] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1177.818948][T20397] fuse: Bad value for 'fd' [ 1177.833332][T20397] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3029'. [ 1177.865324][ T5704] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1177.950038][T20400] qrtr: Invalid version 0 [ 1177.986328][T20400] syzkaller1: entered promiscuous mode [ 1177.992130][T20400] syzkaller1: entered allmulticast mode [ 1178.085890][ T808] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1178.185889][T20401] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3026'. [ 1178.286730][T20372] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3026'. [ 1178.422146][T20401] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3026'. [ 1178.455627][ T808] usb 1-1: Using ep0 maxpacket: 16 [ 1178.505837][ T808] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1178.522303][ T808] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1178.603762][ T808] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1178.633895][ T808] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 1178.669143][ T808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1178.700033][ T808] usb 1-1: config 0 descriptor?? [ 1178.863970][T20413] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3033'. [ 1179.079775][T20418] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3034'. [ 1179.162291][T20395] sctp: [Deprecated]: syz.0.3030 (pid 20395) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1179.162291][T20395] Use struct sctp_sack_info instead [ 1179.729570][ T808] input: HID 05ac:8241 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:05AC:8241.0025/input/input90 [ 1179.794585][T20427] fuse: Bad value for 'fd' [ 1179.816364][T20427] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3036'. [ 1179.904629][ T808] appleir 0003:05AC:8241.0025: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.0-1/input0 [ 1180.363740][ T5704] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1180.377778][ T5704] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1180.403995][ T5704] asix 2-1:0.34: probe with driver asix failed with error -71 [ 1180.428059][ T5704] usb 2-1: USB disconnect, device number 95 [ 1180.667559][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 1180.667576][ T29] audit: type=1326 audit(1782087950.820:1959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20434 comm="syz.2.3038" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 1180.714562][ T29] audit: type=1326 audit(1782087950.850:1960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20434 comm="syz.2.3038" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 1180.743202][ T29] audit: type=1326 audit(1782087950.850:1961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20434 comm="syz.2.3038" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 1180.769332][ T29] audit: type=1326 audit(1782087950.850:1962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20434 comm="syz.2.3038" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 1180.797453][T11266] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1180.814896][ T29] audit: type=1326 audit(1782087950.850:1963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20434 comm="syz.2.3038" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 1180.847836][ T29] audit: type=1326 audit(1782087950.850:1964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20434 comm="syz.2.3038" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 1180.884156][ T29] audit: type=1326 audit(1782087950.850:1965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20434 comm="syz.2.3038" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 1180.946016][ T29] audit: type=1326 audit(1782087950.850:1966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20434 comm="syz.2.3038" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 1180.998974][ T29] audit: type=1326 audit(1782087950.850:1967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20434 comm="syz.2.3038" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 1181.025103][T11266] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1181.036261][ T29] audit: type=1326 audit(1782087950.850:1968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20434 comm="syz.2.3038" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 1181.067346][T11266] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1181.087257][T11266] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1181.122292][T11266] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1181.190691][T11266] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1181.223710][T11266] usb 4-1: config 0 descriptor?? [ 1181.271879][T11266] hdpvr 4-1:0.0: Could not find bulk-in endpoint [ 1181.287184][T11266] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12 [ 1181.534651][T20437] ======================================================= [ 1181.534651][T20437] WARNING: The mand mount option has been deprecated and [ 1181.534651][T20437] and is ignored by this kernel. Remove the mand [ 1181.534651][T20437] option from the mount to silence this warning. [ 1181.534651][T20437] ======================================================= [ 1181.683675][T11266] usb 4-1: USB disconnect, device number 71 [ 1181.737079][T11350] usb 1-1: USB disconnect, device number 92 [ 1181.780837][T20456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1181.810053][T20456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1181.868683][T20459] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3042'. [ 1182.475905][ T808] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1182.645939][ T808] usb 4-1: Using ep0 maxpacket: 16 [ 1182.660255][ T808] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1182.679954][ T808] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1182.694583][ T808] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1182.713887][ T808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1182.728184][ T808] usb 4-1: config 0 descriptor?? [ 1182.890917][T20466] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3043'. [ 1183.154126][ T808] nzxt-smart2 0003:1E71:2009.0026: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 1183.562186][T20479] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3045'. [ 1183.642326][T20470] fuse: Bad value for 'fd' [ 1183.646551][T20465] input: syz1 as /devices/virtual/input/input91 [ 1183.816345][ T1240] usb 4-1: USB disconnect, device number 72 [ 1184.046540][T20483] netlink: 'syz.3.3047': attribute type 12 has an invalid length. [ 1184.078107][T20483] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3047'. [ 1184.110019][T20484] PKCS7: Unknown OID: [4] 0.19 [ 1184.125619][T20484] PKCS7: Only support pkcs7_signedData type [ 1184.159611][T20483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3047'. [ 1184.228621][T20484] pim6reg: entered allmulticast mode [ 1184.251368][T20483] pim6reg: left allmulticast mode [ 1184.405026][T20491] fuse: Bad value for 'fd' [ 1184.416925][T20491] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3049'. [ 1185.174000][T20506] binder: 20493:20506 ioctl c0306201 800003c0 returned -14 [ 1186.126682][T20523] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3055'. [ 1186.973799][T20529] qrtr: Invalid version 0 [ 1187.028936][T20529] syzkaller1: entered promiscuous mode [ 1187.043328][T20529] syzkaller1: entered allmulticast mode [ 1187.118993][T20536] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3057'. [ 1187.136352][T20535] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3067'. [ 1187.343287][T20538] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 1187.359505][T20538] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 1187.387747][T20538] tipc: Resetting bearer [ 1187.438789][T20538] tipc: Resetting bearer [ 1188.418576][T20545] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1188.596703][T20556] fuse: Bad value for 'fd' [ 1188.641443][T20556] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3060'. [ 1189.934219][T20568] loop8: detected capacity change from 0 to 8 [ 1189.941572][T20568] Dev loop8: unable to read RDB block 8 [ 1189.948853][T20568] loop8: unable to read partition table [ 1189.961796][T20568] loop8: partition table beyond EOD, truncated [ 1189.974073][T20568] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1190.066511][T11350] usb 2-1: new full-speed USB device number 96 using dummy_hcd [ 1190.211249][T20569] fuse: Bad value for 'fd' [ 1190.217529][T20569] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3065'. [ 1190.246874][T11350] usb 2-1: config 8 has an invalid interface number: 177 but max is 0 [ 1190.259170][T11350] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1190.282821][T11350] usb 2-1: config 8 has no interface number 0 [ 1190.295401][T11350] usb 2-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1190.340859][T11350] usb 2-1: config 8 interface 177 has no altsetting 0 [ 1190.363065][T11350] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1190.382380][T11350] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1190.429551][T11350] ir_toy 2-1:8.177: required endpoints not found [ 1190.952673][T20576] fuse: Bad value for 'fd' [ 1191.020647][T20576] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3066'. [ 1191.274632][T20582] loop9: detected capacity change from 0 to 7 [ 1191.281688][T20582] Dev loop9: unable to read RDB block 7 [ 1191.290235][T20582] loop9: unable to read partition table [ 1191.297631][T20582] loop9: partition table beyond EOD, truncated [ 1191.310946][T20579] Invalid argument reading file caps for ./file0 [ 1191.313939][T20582] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 1191.707123][T20594] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3072'. [ 1192.322799][T20604] fuse: Bad value for 'fd' [ 1192.356145][T20604] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3074'. [ 1192.794351][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 1192.794450][ T29] audit: type=1326 audit(1782087962.940:2001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20605 comm="syz.2.3075" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 1192.905227][ T29] audit: type=1326 audit(1782087962.980:2002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20605 comm="syz.2.3075" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 1193.037253][ T29] audit: type=1326 audit(1782087962.980:2003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20605 comm="syz.2.3075" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 1193.095856][ T29] audit: type=1326 audit(1782087962.980:2004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20605 comm="syz.2.3075" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 1193.271529][ T29] audit: type=1326 audit(1782087962.980:2005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20605 comm="syz.2.3075" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 1193.329826][ T29] audit: type=1326 audit(1782087962.980:2006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20605 comm="syz.2.3075" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 1193.395582][ T29] audit: type=1326 audit(1782087962.980:2007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20605 comm="syz.2.3075" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 1193.494139][ T29] audit: type=1326 audit(1782087962.980:2008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20605 comm="syz.2.3075" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 1193.537062][T20621] fuse: Bad value for 'fd' [ 1193.548222][T20621] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3086'. [ 1193.597695][T20622] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3077'. [ 1193.620656][ T29] audit: type=1326 audit(1782087962.980:2009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20605 comm="syz.2.3075" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 1193.719221][ T29] audit: type=1326 audit(1782087962.980:2010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20605 comm="syz.2.3075" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 1193.893006][ T5704] usb 2-1: USB disconnect, device number 96 [ 1193.981651][T20628] fuse: Bad value for 'fd' [ 1194.027928][T20628] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3078'. [ 1195.029440][T20636] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3080'. [ 1195.069462][T20645] ptrace attach of "ci-upstream-kasan-gce-386/syz-executor exec"[5638] was attempted by "ci-upstream-kasan-gce-386/syz-executor exec"[20645] [ 1195.091415][T20643] loop8: detected capacity change from 0 to 8 [ 1195.200687][T20643] Dev loop8: unable to read RDB block 8 [ 1195.210465][T20643] loop8: unable to read partition table [ 1195.224837][T20643] loop8: partition table beyond EOD, truncated [ 1195.258292][T20643] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1195.365564][ T5704] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1195.606368][ T5704] usb 2-1: Using ep0 maxpacket: 8 [ 1195.635614][ T5704] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1195.657160][ T5704] usb 2-1: config 4 interface 0 has no altsetting 0 [ 1195.857146][ T5704] usb 2-1: string descriptor 0 read error: -22 [ 1195.863411][ T5704] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1195.881406][ T5704] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1195.988399][ T5704] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1196.063622][ T5704] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1196.104098][ T5704] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1196.146428][ T5704] usb 2-1: media controller created [ 1196.187664][ T5704] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1196.333039][T20659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1196.348718][T20659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1196.380237][T20659] input: syz1 as /devices/virtual/input/input92 [ 1196.790020][T20671] fuse: Bad value for 'fd' [ 1196.801987][T20671] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3089'. [ 1196.816820][T20664] bond0: Caught tx_queue_len zero misconfig [ 1197.259453][ T5704] zl10353_read_register: readreg error (reg=127, ret==0) [ 1197.325881][ T5704] usb 2-1: USB disconnect, device number 97 [ 1197.441773][T20674] loop9: detected capacity change from 0 to 7 [ 1197.457043][T20674] Dev loop9: unable to read RDB block 7 [ 1197.465255][T20674] loop9: unable to read partition table [ 1197.490950][T20674] loop9: partition table beyond EOD, truncated [ 1197.500737][T20674] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 1197.806656][T20686] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3093'. [ 1197.826935][T20686] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3093'. [ 1197.852652][T20684] fuse: Bad value for 'fd' [ 1197.883772][T20684] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3091'. [ 1199.261973][T20706] fuse: Bad value for 'fd' [ 1199.288696][T20706] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3095'. [ 1199.348880][T20710] loop8: detected capacity change from 0 to 8 [ 1199.386751][T20710] Dev loop8: unable to read RDB block 8 [ 1199.395889][T20710] loop8: unable to read partition table [ 1199.425027][T20710] loop8: partition table beyond EOD, truncated [ 1199.454592][T20712] batman_adv: batadv0: Interface deactivated: dummy0 [ 1199.601952][T20710] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1199.701463][T20712] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1199.730390][T20712] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1200.239620][T20712] tipc: Resetting bearer [ 1200.343639][ T3341] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1200.353548][ T3341] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1200.384161][ T3341] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1200.768043][T20734] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.3102'. [ 1200.831922][T20732] binder: 20725:20732 ioctl c0306201 800003c0 returned -14 [ 1200.848059][T20734] veth0_to_bond: default FDB implementation only supports local addresses [ 1201.750906][T20743] netlink: 'syz.0.3104': attribute type 12 has an invalid length. [ 1201.750928][T20743] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3104'. [ 1201.762701][T20743] PKCS7: Unknown OID: [4] 0.19 [ 1201.762712][T20743] PKCS7: Only support pkcs7_signedData type [ 1201.789436][T20743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3104'. [ 1201.822096][T20743] pim6reg: entered allmulticast mode [ 1201.835315][T20743] pim6reg: left allmulticast mode [ 1202.768149][T20763] fuse: Bad value for 'fd' [ 1202.789642][T20763] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3106'. [ 1203.106528][T20767] fuse: Bad value for 'fd' [ 1203.143519][T20767] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3107'. [ 1203.982989][T20783] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1204.281198][T20789] fuse: Bad value for 'fd' [ 1204.288656][T20789] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3111'. [ 1204.891363][T20798] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3114'. [ 1205.263135][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 1205.263152][ T29] audit: type=1400 audit(1782087975.410:2047): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=20808 comm="syz.3.3119" [ 1205.311313][T11350] hid-generic 0002:0004:0009.0027: unknown main item tag 0x0 [ 1205.343049][T11350] hid-generic 0002:0004:0009.0027: unknown main item tag 0x0 [ 1205.377024][T11350] hid-generic 0002:0004:0009.0027: unknown main item tag 0x0 [ 1205.399861][T11350] hid-generic 0002:0004:0009.0027: unknown main item tag 0x0 [ 1205.422053][T11350] hid-generic 0002:0004:0009.0027: unknown main item tag 0x0 [ 1205.445295][T11350] hid-generic 0002:0004:0009.0027: unknown main item tag 0x0 [ 1205.465031][T11350] hid-generic 0002:0004:0009.0027: unknown main item tag 0x0 [ 1205.484393][T11350] hid-generic 0002:0004:0009.0027: unknown main item tag 0x0 [ 1205.500313][T11350] hid-generic 0002:0004:0009.0027: unknown main item tag 0x0 [ 1205.528231][T11350] hid-generic 0002:0004:0009.0027: unknown main item tag 0x0 [ 1205.562185][T11350] hid-generic 0002:0004:0009.0027: hidraw0: HID v0.04 Device [syz0] on syz0 [ 1206.276153][ T808] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1206.332538][T20833] fuse: Bad value for 'fd' [ 1206.339514][T20833] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3121'. [ 1206.435603][ T808] usb 2-1: Using ep0 maxpacket: 16 [ 1206.494297][ T808] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1206.552326][ T808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1206.718517][ T808] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1206.887015][ T808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1206.922775][ T808] usb 2-1: Product: syz [ 1206.951754][ T808] usb 2-1: Manufacturer: syz [ 1206.991105][ T808] usb 2-1: SerialNumber: syz [ 1207.023753][ T808] usb 2-1: config 0 descriptor?? [ 1207.076138][ T808] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1207.136407][ T808] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1207.416916][T20850] sctp: [Deprecated]: syz.4.3126 (pid 20850) Use of int in maxseg socket option. [ 1207.416916][T20850] Use struct sctp_assoc_value instead [ 1207.689937][ T808] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1207.697640][ T808] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 1207.795400][T20861] fuse: Bad value for 'fd' [ 1207.814261][T20861] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3128'. [ 1207.940914][T20821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1207.951352][T20821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1208.000194][T20821] syz_tun: entered allmulticast mode [ 1208.039523][T20820] syz_tun: left allmulticast mode [ 1208.060635][ T808] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 1208.080852][ T808] em28xx 2-1:0.0: No AC97 audio processor [ 1208.081578][T20866] fuse: Bad value for 'fd' [ 1208.179134][ T808] usb 2-1: USB disconnect, device number 98 [ 1208.180716][T20866] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3129'. [ 1208.186660][ T808] em28xx 2-1:0.0: Disconnecting em28xx [ 1208.267717][ T808] em28xx 2-1:0.0: Freeing device [ 1208.677373][T20875] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3130'. [ 1208.821493][T20881] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3132'. [ 1209.714987][T20888] misc userio: Invalid payload size [ 1209.767408][T20888] misc userio: No port type given on /dev/userio [ 1209.774328][T20891] fuse: Bad value for 'fd' [ 1209.790515][T20891] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3134'. [ 1209.887325][T20892] sg_write: data in/out 449500/218 bytes for SCSI command 0x0-- guessing data in; [ 1209.887325][T20892] program syz.0.3133 not setting count and/or reply_len properly [ 1209.966233][T20888] misc userio: The device must be registered before sending interrupts [ 1210.348074][T20896] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3135'. [ 1210.760599][T20903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3136'. [ 1211.803977][T20914] fuse: Bad value for 'fd' [ 1211.811528][T20914] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3139'. [ 1212.349914][T20924] fuse: Bad value for 'fd' [ 1212.432324][T20929] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3143'. [ 1212.454456][T20932] fuse: Bad value for 'fd' [ 1212.472686][T20932] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3142'. [ 1212.482372][T20924] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3140'. [ 1213.229565][T20941] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3145'. [ 1213.747799][T20951] fuse: Bad value for 'fd' [ 1213.770980][T20951] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3146'. [ 1213.816364][T11350] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1214.503461][T11350] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 1214.549756][T11350] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 1214.582646][T11350] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1214.658343][T11350] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1214.685574][ T5704] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1214.693435][T11350] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1214.728855][T11350] usb 2-1: Product: syz [ 1214.738140][T20964] RDS: rds_bind could not find a transport for ::ffff:172.20.20.35, load rds_tcp or rds_rdma? [ 1214.760463][T11350] usb 2-1: Manufacturer: syz [ 1214.779531][T11350] usb 2-1: SerialNumber: syz [ 1214.805001][T11350] usb 2-1: config 0 descriptor?? [ 1214.832144][T20948] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1214.890991][ T5704] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1214.997327][ T5704] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1215.078115][ T5704] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1215.100173][T20948] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1215.164636][ T5704] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1215.194165][ T5704] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1215.250192][ T5704] usb 4-1: config 0 descriptor?? [ 1215.751228][ T5704] hid_parser_main: 7 callbacks suppressed [ 1215.751321][ T5704] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 1215.811209][ T5704] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 1215.844439][ T5704] plantronics 0003:047F:FFFF.0028: item fetching failed at offset 2/15 [ 1215.879183][ T5704] plantronics 0003:047F:FFFF.0028: parse failed [ 1215.899579][ T5704] plantronics 0003:047F:FFFF.0028: probe with driver plantronics failed with error -22 [ 1215.920224][T20975] fuse: Bad value for 'fd' [ 1216.332535][T20981] fuse: Bad value for 'fd' [ 1216.341722][T20981] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3154'. [ 1216.526422][T20983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1216.535348][T20983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1216.559515][T11350] usb 2-1: USB disconnect, device number 99 [ 1216.653562][T20988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1216.662485][T20988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1217.005548][ T5704] usb 2-1: new full-speed USB device number 100 using dummy_hcd [ 1217.155621][ T5704] usb 2-1: device descriptor read/64, error -71 [ 1217.403718][ T1240] usb 4-1: USB disconnect, device number 73 [ 1217.406177][ T5704] usb 2-1: new full-speed USB device number 101 using dummy_hcd [ 1217.595578][ T5704] usb 2-1: device descriptor read/64, error -71 [ 1217.670765][T21003] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3159'. [ 1217.741557][ T5704] usb usb2-port1: attempt power cycle [ 1218.095992][ T5704] usb 2-1: new full-speed USB device number 102 using dummy_hcd [ 1218.154149][ T5704] usb 2-1: device descriptor read/8, error -71 [ 1218.405585][ T5704] usb 2-1: new full-speed USB device number 103 using dummy_hcd [ 1218.438114][ T5704] usb 2-1: device descriptor read/8, error -71 [ 1218.521194][T21013] fuse: Bad value for 'fd' [ 1218.531711][T21013] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3162'. [ 1218.571586][ T5704] usb usb2-port1: unable to enumerate USB device [ 1218.792191][T21021] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3164'. [ 1219.578559][T21027] fuse: Bad value for 'fd' [ 1219.609913][T21027] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3165'. [ 1219.883880][T21036] loop8: detected capacity change from 0 to 8 [ 1219.925058][T21036] Dev loop8: unable to read RDB block 8 [ 1219.952636][T21040] netlink: 160 bytes leftover after parsing attributes in process `syz.4.3168'. [ 1219.963018][T21036] loop8: unable to read partition table [ 1220.048809][T21036] loop8: partition table beyond EOD, truncated [ 1220.064873][T21036] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1220.095729][T11266] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1220.296377][T11266] usb 2-1: Using ep0 maxpacket: 32 [ 1220.314946][T11266] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1220.337030][T11266] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1220.363398][T11266] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1220.388052][T11266] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1220.439539][T11266] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1220.451030][T11266] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1220.473486][T11266] usb 2-1: Product: syz [ 1220.483929][T11266] usb 2-1: Manufacturer: syz [ 1220.495579][T11266] usb 2-1: SerialNumber: syz [ 1220.512530][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1220.529060][T11266] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input94 [ 1220.816707][T21048] syzkaller1: entered allmulticast mode [ 1220.836988][T11266] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1220.863666][T11266] (id 0x00) [ 1221.066068][T11266] rc_core: IR keymap rc-imon-pad not found [ 1221.071964][T11266] Registered IR keymap rc-empty [ 1221.079564][T11266] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1221.174884][T21059] fuse: Bad value for 'fd' [ 1221.179936][T11266] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1221.201326][T21059] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3172'. [ 1221.246434][T11266] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 1221.285238][T11266] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input95 [ 1221.314534][T21064] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3174'. [ 1221.321432][T21065] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3173'. [ 1221.341247][T11266] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:104> initialized [ 1221.771990][T21068] IPv4: Oversized IP packet from 127.202.26.0 [ 1221.951218][T21069] netlink: 'syz.3.3175': attribute type 13 has an invalid length. [ 1222.060768][T21069] gretap0: refused to change device tx_queue_len [ 1222.108500][T21069] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1222.277061][T21030] loop6: detected capacity change from 0 to 2640 [ 1222.294771][T21030] buffer_io_error: 11 callbacks suppressed [ 1222.294865][T21030] Buffer I/O error on dev loop6, logical block 0, async page read [ 1222.337384][T21030] Buffer I/O error on dev loop6, logical block 0, async page read [ 1222.358522][T21030] Buffer I/O error on dev loop6, logical block 0, async page read [ 1222.370267][T21030] Buffer I/O error on dev loop6, logical block 0, async page read [ 1222.390316][T21030] Buffer I/O error on dev loop6, logical block 0, async page read [ 1222.402114][T21030] Buffer I/O error on dev loop6, logical block 0, async page read [ 1222.412578][T21030] Buffer I/O error on dev loop6, logical block 0, async page read [ 1222.421961][T21030] Buffer I/O error on dev loop6, logical block 0, async page read [ 1222.431831][T21030] ldm_validate_partition_table(): Disk read failed. [ 1222.447558][T21030] Buffer I/O error on dev loop6, logical block 0, async page read [ 1222.467634][T21030] Buffer I/O error on dev loop6, logical block 0, async page read [ 1222.483491][T21030] Dev loop6: unable to read RDB block 0 [ 1222.508743][T21030] loop6: unable to read partition table [ 1222.521692][T21030] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 1222.588045][T11266] usb 2-1: USB disconnect, device number 104 [ 1222.895592][T11350] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1223.075643][T11350] usb 1-1: Using ep0 maxpacket: 32 [ 1223.082254][T11350] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1223.098422][T11350] usb 1-1: New USB device found, idVendor=05ac, idProduct=0272, bcdDevice= 0.40 [ 1223.142158][T11350] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1223.169709][T11350] usb 1-1: Product: syz [ 1223.180687][T11350] usb 1-1: Manufacturer: syz [ 1223.191266][T11350] usb 1-1: SerialNumber: syz [ 1223.201603][T21082] bridge2: entered promiscuous mode [ 1223.217077][T21082] bridge2: entered allmulticast mode [ 1223.236738][T21082] team0: Port device bridge2 added [ 1223.267366][T21082] bridge0: port 1(team0) entered blocking state [ 1223.284237][T21082] bridge0: port 1(team0) entered disabled state [ 1223.300376][T21082] team0: entered allmulticast mode [ 1223.310901][T21082] team_slave_0: entered allmulticast mode [ 1223.317188][T21082] 2: entered allmulticast mode [ 1223.322436][T21082] geneve1: entered allmulticast mode [ 1223.332596][T21082] team0: entered promiscuous mode [ 1223.341066][T21082] team_slave_0: entered promiscuous mode [ 1223.356292][T21082] 2: entered promiscuous mode [ 1223.361515][T21082] geneve1: entered promiscuous mode [ 1223.433231][T21085] fuse: Bad value for 'fd' [ 1223.443961][T21085] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3179'. [ 1223.594127][T21094] fuse: Bad value for 'fd' [ 1223.654648][T21094] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3180'. [ 1224.812097][T21100] sctp: [Deprecated]: syz.1.3182 (pid 21100) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1224.812097][T21100] Use struct sctp_sack_info instead [ 1224.957837][ T29] audit: type=1326 audit(1782087995.110:2048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21102 comm="syz.4.3183" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f090ec code=0x7ffc0000 [ 1225.053239][ T29] audit: type=1326 audit(1782087995.110:2049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21102 comm="syz.4.3183" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f090ec code=0x7ffc0000 [ 1225.055753][T21112] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3184'. [ 1225.177643][T21113] ptrace attach of "ci-upstream-kasan-gce-386/syz-executor exec"[5637] was attempted by "ci-upstream-kasan-gce-386/syz-executor exec"[21113] [ 1225.217300][ T29] audit: type=1326 audit(1782087995.110:2050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21102 comm="syz.4.3183" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f090ec code=0x7ffc0000 [ 1225.272341][ T29] audit: type=1326 audit(1782087995.110:2051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21102 comm="syz.4.3183" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f090ec code=0x7ffc0000 [ 1225.394715][ T29] audit: type=1326 audit(1782087995.110:2052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21102 comm="syz.4.3183" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f090ec code=0x7ffc0000 [ 1225.481161][ T29] audit: type=1326 audit(1782087995.110:2053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21102 comm="syz.4.3183" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f090ec code=0x7ffc0000 [ 1225.565064][ T29] audit: type=1326 audit(1782087995.140:2054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21102 comm="syz.4.3183" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f090ec code=0x7ffc0000 [ 1225.661598][ T29] audit: type=1326 audit(1782087995.180:2055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21102 comm="syz.4.3183" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f090ec code=0x7ffc0000 [ 1225.761249][ T29] audit: type=1326 audit(1782087995.300:2056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21102 comm="syz.4.3183" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f090ec code=0x7ffc0000 [ 1225.885022][ T29] audit: type=1326 audit(1782087995.300:2057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21102 comm="syz.4.3183" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f090ec code=0x7ffc0000 [ 1226.338418][T11350] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input96 [ 1226.350783][ T4977] bcm5974 1-1:1.0: could not read from device [ 1226.369474][T21123] fuse: Bad value for 'fd' [ 1226.383029][T21123] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3186'. [ 1226.496977][T11266] usb 2-1: new low-speed USB device number 105 using dummy_hcd [ 1226.525430][ T4977] bcm5974 1-1:1.0: could not read from device [ 1226.548681][ T4977] bcm5974 1-1:1.0: could not read from device [ 1226.564425][T11350] usb 1-1: USB disconnect, device number 93 [ 1226.657540][T11266] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1226.683577][T11266] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1226.736769][T11266] usb 2-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 1226.784785][T11266] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1226.815623][T11266] usb 2-1: config 0 descriptor?? [ 1227.235590][ T808] usb 1-1: new full-speed USB device number 94 using dummy_hcd [ 1227.308247][T11266] hid (null): invalid report_size 15360 [ 1227.334887][T11266] aquacomputer_d5next 0003:0C70:F0B6.0029: invalid report_size 15360 [ 1227.351884][T11266] aquacomputer_d5next 0003:0C70:F0B6.0029: item 0 2 1 7 parsing failed [ 1227.370526][T11266] aquacomputer_d5next 0003:0C70:F0B6.0029: probe with driver aquacomputer_d5next failed with error -22 [ 1227.403410][ T808] usb 1-1: New USB device found, idVendor=0c45, idProduct=6280, bcdDevice=d5.fc [ 1227.418548][ T808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1227.445331][ T808] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6280 [ 1227.457861][T21135] fuse: Bad value for 'fd' [ 1227.468194][T21135] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3191'. [ 1227.543166][T21119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1227.555465][T21119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1227.575934][ T5704] usb 2-1: USB disconnect, device number 105 [ 1227.828390][T21143] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3193'. [ 1227.851529][ T808] gspca_sn9c20x: Write register 1001 failed -71 [ 1227.861239][ T808] gspca_sn9c20x: Device initialization failed [ 1227.868000][ T808] gspca_sn9c20x 1-1:252.0: probe with driver gspca_sn9c20x failed with error -71 [ 1227.912973][ T808] usb 1-1: USB disconnect, device number 94 [ 1228.363241][T21148] fuse: Bad value for 'fd' [ 1228.376336][T21148] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3194'. [ 1228.794182][T21154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1228.803920][T21154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1228.814681][T21154] netlink: 212332 bytes leftover after parsing attributes in process `syz.4.3196'. [ 1228.824932][T21154] openvswitch: netlink: Message has 5 unknown bytes. [ 1229.305842][T11266] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1229.478989][T11266] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1229.505242][T11266] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 1229.530408][T11266] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1229.557135][T11266] usb 2-1: Product: syz [ 1229.572222][T11266] usb 2-1: Manufacturer: syz [ 1229.585024][T11266] usb 2-1: SerialNumber: syz [ 1230.019053][T21173] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3201'. [ 1230.272431][T21180] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3203'. [ 1230.330160][T21175] fuse: Bad value for 'fd' [ 1230.337819][T21180] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3203'. [ 1230.349271][T21175] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3202'. [ 1230.418837][T21184] kAFS: unable to lookup cell '' [ 1230.493953][T21180] netlink: 'syz.2.3203': attribute type 4 has an invalid length. [ 1230.522675][T21186] kAFS: unable to lookup cell '(,c' [ 1230.719734][T21165] IPv6: NLM_F_CREATE should be specified when creating new route [ 1230.767910][T21165] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1230.775169][T21165] IPv6: NLM_F_CREATE should be set when creating new route [ 1230.782501][T21165] IPv6: NLM_F_CREATE should be set when creating new route [ 1230.789766][T21165] IPv6: NLM_F_CREATE should be set when creating new route [ 1230.806781][T18439] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1230.821268][T21188] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3199'. [ 1230.968086][T11266] usb 2-1: USB disconnect, device number 106 [ 1230.985642][T18439] usb 4-1: Using ep0 maxpacket: 16 [ 1230.994614][T18439] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1231.042020][T18439] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1231.080712][T18439] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 1231.099414][T18439] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1231.118365][T18439] usb 4-1: SerialNumber: syz [ 1231.134363][T18439] usb 4-1: 0:2 : does not exist [ 1231.256655][T21193] netlink: 'syz.0.3205': attribute type 1 has an invalid length. [ 1231.318662][T21193] netlink: 'syz.0.3205': attribute type 2 has an invalid length. [ 1231.388364][T21194] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3205'. [ 1232.222402][T21204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3208'. [ 1232.289261][T21203] RDS: rds_bind could not find a transport for ::ffff:172.20.20.35, load rds_tcp or rds_rdma? [ 1233.112339][T21214] fuse: Unknown parameter 'user_id00000000000000000000' [ 1233.187033][T21215] fuse: Bad value for 'fd' [ 1233.200859][T21215] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3209'. [ 1233.586800][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 1233.593186][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 1234.253929][T21230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3213'. [ 1234.534669][T21223] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1234.560031][T21223] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1234.639229][T18439] usb 4-1: 5:0: cannot get min/max values for control 4 (id 5) [ 1234.673235][T18439] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1234.681704][T21238] fuse: Bad value for 'fd' [ 1234.767365][T21238] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3214'. [ 1234.810494][T18439] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1234.851540][T21239] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3215'. [ 1234.910959][T18439] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 1234.968613][T18439] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1235.009623][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1235.020635][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1235.072371][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1235.155031][T21250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1235.169087][T18439] usb 4-1: USB disconnect, device number 74 [ 1235.219642][T21250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1235.873264][T21252] syzkaller0: entered promiscuous mode [ 1235.879640][T21256] qrtr: Invalid version 0 [ 1235.889623][T21252] syzkaller0: entered allmulticast mode [ 1235.932532][T21254] netlink: 580 bytes leftover after parsing attributes in process `syz.2.3219'. [ 1235.967597][T21256] syzkaller1: entered promiscuous mode [ 1235.975188][T21256] syzkaller1: entered allmulticast mode [ 1236.462255][ T5704] hid-generic 0002:0004:0009.002A: unknown main item tag 0x0 [ 1236.490143][ T5704] hid-generic 0002:0004:0009.002A: unknown main item tag 0x0 [ 1236.498431][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 1236.498444][ T29] audit: type=1400 audit(1782088006.640:2117): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=21259 comm="syz.0.3221" [ 1236.538499][T21272] fuse: Bad value for 'fd' [ 1236.545286][T21272] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3222'. [ 1236.583141][ T5704] hid-generic 0002:0004:0009.002A: unknown main item tag 0x0 [ 1236.622645][ T5704] hid-generic 0002:0004:0009.002A: unknown main item tag 0x0 [ 1236.671413][ T5704] hid-generic 0002:0004:0009.002A: unknown main item tag 0x0 [ 1236.767389][ T5704] hid-generic 0002:0004:0009.002A: unknown main item tag 0x0 [ 1236.790219][ T5704] hid-generic 0002:0004:0009.002A: unknown main item tag 0x0 [ 1236.811012][ T5704] hid-generic 0002:0004:0009.002A: unknown main item tag 0x0 [ 1236.827946][ T5704] hid-generic 0002:0004:0009.002A: unknown main item tag 0x0 [ 1236.847774][ T5704] hid-generic 0002:0004:0009.002A: unknown main item tag 0x0 [ 1236.878564][ T5704] hid-generic 0002:0004:0009.002A: hidraw0: HID v0.04 Device [syz0] on syz0 [ 1237.659557][T21286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1237.692826][T21286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1238.375804][T18439] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1238.417015][T21300] fuse: Bad value for 'fd' [ 1238.431777][T21300] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3228'. [ 1239.095856][T18439] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1239.130394][T21305] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3229'. [ 1239.365196][T21310] fuse: Bad value for 'fd' [ 1239.376557][T21310] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3230'. [ 1240.340231][T21319] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3232'. [ 1240.537372][T21319] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1240.587345][T21322] ipvlan2: entered allmulticast mode [ 1240.594342][T21322] syz_tun: entered allmulticast mode [ 1240.799847][T21328] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3234'. [ 1241.078722][T21333] fuse: Bad value for 'fd' [ 1241.087082][T21333] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3236'. [ 1241.351945][T21335] syzkaller1: entered allmulticast mode [ 1241.760433][T21344] fuse: Bad value for 'fd' [ 1241.779857][T21344] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3238'. [ 1242.415383][T21348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1242.426387][T21348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1242.624955][T21361] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3242'. [ 1242.675674][T18439] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1242.730777][T21362] sctp: [Deprecated]: syz.2.3249 (pid 21362) Use of int in maxseg socket option. [ 1242.730777][T21362] Use struct sctp_assoc_value instead [ 1242.757021][T21363] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3241'. [ 1242.837794][T18439] usb 4-1: Using ep0 maxpacket: 32 [ 1242.844446][T18439] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1242.921804][T18439] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1242.972111][T18439] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1242.997006][T18439] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1243.051398][T18439] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1243.076680][T18439] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1243.168755][T18439] usb 4-1: Product: syz [ 1243.173723][T18439] usb 4-1: Manufacturer: syz [ 1243.185346][T18439] usb 4-1: SerialNumber: syz [ 1243.260873][ C1] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1243.269404][T18439] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input98 [ 1243.515629][T18439] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1243.528476][T18439] (id 0x00) [ 1243.585612][T18439] rc_core: IR keymap rc-imon-pad not found [ 1243.591581][T18439] Registered IR keymap rc-empty [ 1243.602567][T18439] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1243.635053][T18439] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1243.727494][T18439] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 1243.757208][T18439] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input99 [ 1243.802869][T18439] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:75> initialized [ 1244.316865][T21350] loop6: detected capacity change from 0 to 2640 [ 1244.366374][T21350] buffer_io_error: 11 callbacks suppressed [ 1244.366387][T21350] Buffer I/O error on dev loop6, logical block 0, async page read [ 1244.402749][T21350] Buffer I/O error on dev loop6, logical block 0, async page read [ 1244.422700][T21350] Buffer I/O error on dev loop6, logical block 0, async page read [ 1244.445705][T21350] Buffer I/O error on dev loop6, logical block 0, async page read [ 1244.465970][T21350] Buffer I/O error on dev loop6, logical block 0, async page read [ 1244.475803][T21350] Buffer I/O error on dev loop6, logical block 0, async page read [ 1244.483737][T21350] Buffer I/O error on dev loop6, logical block 0, async page read [ 1244.491897][T21350] Buffer I/O error on dev loop6, logical block 0, async page read [ 1244.500138][T21350] ldm_validate_partition_table(): Disk read failed. [ 1244.507407][T21350] Buffer I/O error on dev loop6, logical block 0, async page read [ 1244.515652][T21350] Buffer I/O error on dev loop6, logical block 0, async page read [ 1244.523819][T21350] Dev loop6: unable to read RDB block 0 [ 1244.530067][T21350] loop6: unable to read partition table [ 1244.539783][T21350] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 1244.639634][T20411] usb 4-1: USB disconnect, device number 75 [ 1244.834950][T21378] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3243'. [ 1244.985446][T21379] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3254'. [ 1245.436562][T21387] netlink: 'syz.3.3245': attribute type 1 has an invalid length. [ 1245.479210][T21387] netlink: 'syz.3.3245': attribute type 2 has an invalid length. [ 1245.736782][ T30] INFO: task kworker/1:0:24 blocked for more than 143 seconds. [ 1245.756183][ T30] Tainted: G L syzkaller #0 [ 1245.765634][T20411] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1245.813558][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1245.848270][ T30] task:kworker/1:0 state:D stack:20264 pid:24 tgid:24 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 1245.884632][ T30] Workqueue: usb_hub_wq hub_event [ 1245.896412][ T30] Call Trace: [ 1245.904736][ T30] [ 1245.914329][ T30] __schedule+0x17d9/0x56c0 [ 1245.926119][T20411] usb 4-1: Using ep0 maxpacket: 32 [ 1245.928649][ T30] ? __pfx___schedule+0x10/0x10 [ 1245.946240][T20411] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1245.954860][ T30] ? rcu_is_watching+0x15/0xb0 [ 1245.967870][ T30] ? rcu_is_watching+0x15/0xb0 [ 1245.978052][ T30] ? lock_release+0x4b/0x3c0 [ 1245.991650][ T30] ? rcu_is_watching+0x15/0xb0 [ 1246.001392][T20411] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1246.006040][ T30] ? schedule+0x90/0x360 [ 1246.032801][T20411] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1246.042420][ T30] ? trace_irq_enable+0x3b/0x140 [ 1246.056138][ T30] schedule+0x164/0x360 [ 1246.057280][T20411] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1246.081927][ T30] schedule_preempt_disabled+0x13/0x30 [ 1246.094295][ T30] __mutex_lock+0x7bf/0x1550 [ 1246.099139][T20411] usb 4-1: Product: syz [ 1246.106519][ T30] ? __mutex_lock+0x5d4/0x1550 [ 1246.116232][ T30] ? hub_event+0x20c9/0x4d30 [ 1246.129326][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1246.140897][ T30] hub_event+0x20c9/0x4d30 [ 1246.150476][ T30] ? do_raw_spin_unlock+0xf5/0x210 [ 1246.159237][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1246.164668][ T30] ? __pfx_hub_event+0x10/0x10 [ 1246.169746][ T30] ? rcu_is_watching+0x15/0xb0 [ 1246.174547][ T30] ? lock_acquire+0x5f/0x350 [ 1246.179477][ T30] ? rcu_is_watching+0x15/0xb0 [ 1246.184326][ T30] ? process_scheduled_works+0xa20/0x14e0 [ 1246.190361][T20411] usb 4-1: Manufacturer: syz [ 1246.190587][ T30] process_scheduled_works+0xa8e/0x14e0 [ 1246.201131][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 1246.208549][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 1246.210871][T20411] usb 4-1: SerialNumber: syz [ 1246.213679][ T30] ? assign_work+0x3cf/0x5d0 [ 1246.223852][ T30] worker_thread+0xa47/0xfb0 [ 1246.230814][ T30] kthread+0x388/0x470 [ 1246.231419][T20411] usb 4-1: config 0 descriptor?? [ 1246.235011][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1246.245781][ T30] ? __pfx_kthread+0x10/0x10 [ 1246.251016][ T30] ret_from_fork+0x514/0xb70 [ 1246.256722][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1246.265302][ T30] ? __switch_to+0xc89/0x1420 [ 1246.270479][ T30] ? __pfx_kthread+0x10/0x10 [ 1246.275215][ T30] ret_from_fork_asm+0x1a/0x30 [ 1246.280757][ T30] [ 1246.286658][ T30] INFO: lockdep is turned off. [ 1246.296329][ T30] NMI backtrace for cpu 1 [ 1246.296370][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1246.296395][ T30] Tainted: [L]=SOFTLOCKUP [ 1246.296401][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1246.296410][ T30] Call Trace: [ 1246.296414][ T30] [ 1246.296419][ T30] dump_stack_lvl+0xe8/0x150 [ 1246.296435][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 1246.296543][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1246.296565][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1246.296578][ T30] sys_info+0x135/0x170 [ 1246.296589][ T30] watchdog+0xfd7/0x1030 [ 1246.296609][ T30] ? watchdog+0x1c7/0x1030 [ 1246.296628][ T30] kthread+0x388/0x470 [ 1246.296646][ T30] ? __pfx_watchdog+0x10/0x10 [ 1246.296668][ T30] ? __pfx_kthread+0x10/0x10 [ 1246.296685][ T30] ret_from_fork+0x514/0xb70 [ 1246.296704][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1246.296715][ T30] ? __switch_to+0xc89/0x1420 [ 1246.296729][ T30] ? __pfx_kthread+0x10/0x10 [ 1246.296738][ T30] ret_from_fork_asm+0x1a/0x30 [ 1246.296752][ T30] [ 1246.296756][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1246.415279][ C0] NMI backtrace for cpu 0 [ 1246.415298][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1246.415320][ C0] Tainted: [L]=SOFTLOCKUP [ 1246.415326][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1246.415335][ C0] RIP: 0010:asm_sysvec_apic_timer_interrupt+0x0/0x20 [ 1246.415387][ C0] Code: b6 49 ae 0a e9 81 06 00 00 90 f3 0f 1e fa 0f 01 ca fc 6a ff e8 31 05 00 00 48 89 c4 48 89 e7 e8 c6 48 ae 0a e9 61 06 00 00 90 0f 1e fa 0f 01 ca fc 6a ff e8 11 05 00 00 48 89 c4 48 89 e7 e8 [ 1246.415406][ C0] RSP: 0018:ffffffff8e607db8 EFLAGS: 00000046 [ 1246.415472][ C0] RAX: ffff888125253000 RBX: ffffffff819a72e0 RCX: 0000000080000001 [ 1246.415483][ C0] RDX: 0000000000000001 RSI: ffffffff8c295480 RDI: ffffffff819a72e0 [ 1246.415493][ C0] RBP: ffffffff8e607eb8 R08: ffff8880b86338db R09: 1ffff110170c671b [ 1246.415504][ C0] R10: dffffc0000000000 R11: ffffed10170c671c R12: 0000000000000000 [ 1246.415515][ C0] R13: 1ffffffff1cd1de8 R14: 1ffffffff1cc0fc4 R15: dffffc0000000000 [ 1246.415526][ C0] FS: 0000000000000000(0000) GS:ffff888125253000(0000) knlGS:0000000000000000 [ 1246.415540][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1246.415551][ C0] CR2: 00000000800ea018 CR3: 0000000074e50000 CR4: 00000000003526f0 [ 1246.415567][ C0] Call Trace: [ 1246.415573][ C0] [ 1246.415580][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1246.415636][ C0] Code: 9c 7a 02 e9 13 05 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 08 1b 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1246.415650][ C0] RSP: 0018:ffffffff8e607de0 EFLAGS: 00000246 [ 1246.415662][ C0] default_idle+0x9/0x20 [ 1246.415679][ C0] default_idle_call+0x72/0xb0 [ 1246.415696][ C0] do_idle+0x2e0/0x540 [ 1246.415717][ C0] ? __pfx_do_idle+0x10/0x10 [ 1246.415730][ C0] ? do_idle+0x15/0x540 [ 1246.415745][ C0] cpu_startup_entry+0x43/0x60 [ 1246.415759][ C0] rest_init+0x2de/0x300 [ 1246.415777][ C0] start_kernel+0x38a/0x3e0 [ 1246.415901][ C0] x86_64_start_reservations+0x24/0x30 [ 1246.415950][ C0] x86_64_start_kernel+0x137/0x1b0 [ 1246.415968][ C0] common_startup_64+0x13e/0x157 [ 1246.415994][ C0] [ 1246.634695][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1246.641577][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1246.652238][ T30] Tainted: [L]=SOFTLOCKUP [ 1246.656549][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1246.666694][ T30] Call Trace: [ 1246.669972][ T30] [ 1246.672887][ T30] vpanic+0x56c/0xa60 [ 1246.676898][ T30] ? __pfx___schedule+0x10/0x10 [ 1246.681756][ T30] ? __pfx_vpanic+0x10/0x10 [ 1246.686264][ T30] panic+0xc5/0xd0 [ 1246.689996][ T30] ? __pfx_panic+0x10/0x10 [ 1246.694415][ T30] ? preempt_schedule_common+0x82/0xd0 [ 1246.699873][ T30] ? preempt_schedule_thunk+0x16/0x40 [ 1246.705261][ T30] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 1246.711427][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1246.717591][ T30] watchdog+0x1030/0x1030 [ 1246.721936][ T30] ? watchdog+0x1c7/0x1030 [ 1246.726350][ T30] kthread+0x388/0x470 [ 1246.730416][ T30] ? __pfx_watchdog+0x10/0x10 [ 1246.735092][ T30] ? __pfx_kthread+0x10/0x10 [ 1246.739707][ T30] ret_from_fork+0x514/0xb70 [ 1246.744313][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1246.749424][ T30] ? __switch_to+0xc89/0x1420 [ 1246.754104][ T30] ? __pfx_kthread+0x10/0x10 [ 1246.758704][ T30] ret_from_fork_asm+0x1a/0x30 [ 1246.763484][ T30] [ 1246.766753][ T30] Kernel Offset: disabled [ 1246.771062][ T30] Rebooting in 86400 seconds..