last executing test programs: 23m37.892436168s ago: executing program 3 (id=863): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x5502000000000000}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000002a80)=[{&(0x7f0000000080)="c2", 0x1}], 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r3, &(0x7f0000000000), 0xffffff98) vmsplice(r2, &(0x7f0000008ac0)=[{&(0x7f0000007a80)="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", 0xfc0}], 0x1, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x44}], 0x1, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r5, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f7, 0xffffffff, 0xffffffffefffff15, 0x3, 0x4, 0x4, 0x4]}}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 23m36.848795307s ago: executing program 3 (id=869): setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x402) fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) pselect6(0x40, &(0x7f0000000180)={0x6, 0x0, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x7f, 0x104, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) 23m35.934937714s ago: executing program 3 (id=877): keyctl$clear(0x7, 0xfffffffffffffffb) 23m35.775532091s ago: executing program 3 (id=879): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), r0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b2b, &(0x7f0000000040)={'wlan1\x00', @random="010000000002"}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r2, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) 23m35.571359083s ago: executing program 3 (id=883): bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0704230c"], 0xa) 23m35.287746776s ago: executing program 3 (id=886): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000004340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400400c}, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) prlimit64(0x0, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) read$hiddev(0xffffffffffffffff, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x3}, 0x10) close(r0) 23m19.782677926s ago: executing program 32 (id=886): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000004340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400400c}, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) prlimit64(0x0, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) read$hiddev(0xffffffffffffffff, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x3}, 0x10) close(r0) 11m29.728957832s ago: executing program 5 (id=5202): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x101840) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000080)={0xa, 0x0, 0x1, {0xe7ff, 0x1, 0x406, 0x870}}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000000)={0x28, 0x7, r4, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1004000}) ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, &(0x7f0000000140)={0x28, 0x4, r5, r4, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000100)}) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, 0x0) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f00000003c0)={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0xa, 0x4e22, 0xfffffffd, @local}, 0x0, {[0xfffffffd, 0x0, 0x1, 0x0, 0x0, 0x9]}}, 0x5c) r7 = socket$inet6(0xa, 0x400000000001, 0x100) sendto$inet6(r7, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @local, 0x4}, 0x1c) unshare(0x80) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x9}]}) fsopen(0x0, 0x1) close_range(r8, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) 11m28.38085446s ago: executing program 5 (id=5210): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509", 0x2c}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076af", 0x45}, {&(0x7f0000000ac0)="3fe4c8a3288f09", 0x7}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70a1b428c054", 0x38}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a602d6b", 0xb2}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3", 0x5f}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be", 0x84}], 0x6, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {0x0}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 11m28.131815662s ago: executing program 5 (id=5212): r0 = dup(0xffffffffffffffff) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x1) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0xa) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x3, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x0, 0xa9ba, 0xc1f, 0x1, 0x7f5d, 0x3, 0x6, 0xffff, 0x10000, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x0, 0xf, 0xcc, 0x5, 0x80, 0x401, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x4, 0x80000000, 0x1, 0x9, 0x7, 0x0, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x2, 0x1000002, 0x8], [0x2, 0x1, 0x10000, 0x7, 0xb66, 0x2, 0x5, 0x80000001, 0x1, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffb66, 0x80, 0x2, 0x81, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x3, 0x6, 0x525ba681, 0x4f74, 0x4, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x100008b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x7, 0x4, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0xfffffff7, 0xa3, 0x3, 0x0, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x2, 0x0, 0x9, 0x13, 0x0, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x7, 0x47, 0xfa1, 0x0, 0x11, 0x3, 0x1, 0x5, 0x7, 0x8000, 0x7ff, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c], [0x81, 0x3, 0x10, 0x4e26, 0x6, 0x40, 0xfffffff3, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x10001, 0x5, 0xa, 0x79a, 0x40, 0x9, 0x6, 0xc421, 0x80000001, 0x6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x4f, 0x78d, 0x4, 0x1, 0xffffb029, 0xfffffff8, 0x9, 0x7, 0x6, 0x101, 0x3ff, 0x7, 0x4, 0x0, 0xb, 0x400, 0x8, 0x0, 0x8, 0x7, 0x9a33247, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c) read$hiddev(r1, &(0x7f0000000040)=""/117, 0x75) 11m27.195963131s ago: executing program 5 (id=5216): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$video(&(0x7f0000000000), 0xd, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000002c0)={0x1, @pix={0x0, 0x0, 0x42474752, 0x0, 0x0, 0x0, 0x6, 0xfeedcafe, 0x3, 0x0, 0x1, 0x5}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x8, 0x40, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') close(r0) r4 = socket(0x2b, 0x1, 0x1) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x5) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r6, &(0x7f00000011c0)={0xfc, {"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", 0x1000}}, 0xffbc) ioctl$VT_DISALLOCATE(r6, 0x5608) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) prlimit64(0x0, 0x0, 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r7, 0xffffffffffffffff, 0x0) 11m26.353232575s ago: executing program 5 (id=5223): rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x4}, 0x68, 0x0, 0x0) (async) unshare(0x6a040000) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) (async) sendmmsg$inet(r0, &(0x7f0000000040)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000240)="d2a7b3", 0x3}, {&(0x7f0000000400)="e06bd3f745", 0xfcfd}, {&(0x7f0000000500)="86e9a0d8", 0x4}, {&(0x7f00000005c0)="25062456", 0x4}], 0x4}}], 0x1, 0x4000800) (async) io_uring_setup(0xc, &(0x7f0000000040)={0x0, 0xff10, 0xdb00, 0x3, 0x29}) 11m26.145134178s ago: executing program 5 (id=5227): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw-camellia-aesni-avx2\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x400000000010, 0x3, 0x20000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x880, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0xb00) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)={0x1}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x8, 0x0, 0x0, 0x3, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x0, 0x0, 0x2}, {0xeda7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x0, 0x10, 0x0, 0x0, 0x2004cb, 0x3, 0x100000000000000, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2ab, 0x2000000000003ff, 0x2], 0x0, 0x200306}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r5, 0x0, 0x100000500) 11m25.86916211s ago: executing program 33 (id=5227): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw-camellia-aesni-avx2\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x400000000010, 0x3, 0x20000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x880, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0xb00) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)={0x1}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x8, 0x0, 0x0, 0x3, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x0, 0x0, 0x2}, {0xeda7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x0, 0x10, 0x0, 0x0, 0x2004cb, 0x3, 0x100000000000000, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2ab, 0x2000000000003ff, 0x2], 0x0, 0x200306}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r5, 0x0, 0x100000500) 6m26.205433975s ago: executing program 4 (id=6618): syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000085217fe6000000000006e721f863e83f3b50000edf8683c0904001009030006000921000032c5dece9822d23a823a5c4a4200012221b90905810300"], 0x0) (async) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000085217fe6000000000006e721f863e83f3b50000edf8683c0904001009030006000921000032c5dece9822d23a823a5c4a4200012221b90905810300"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) unshare(0x24020400) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e24, 0x2, @empty, 0x83e}}, 0xc, 0x2a}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r4 = syz_io_uring_setup(0x5bf, &(0x7f00000002c0)={0x0, 0xbe40, 0x0, 0x2, 0x7d}, &(0x7f0000000180), &(0x7f00000022c0), &(0x7f0000000000)) exit(0xf) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, &(0x7f00000000c0)={0x1, r4, 0x35, {0x5, 0x1}, 0x1}, 0x1) (async) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, &(0x7f00000000c0)={0x1, r4, 0x35, {0x5, 0x1}, 0x1}, 0x1) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f00000001c0)=0x7) (async) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f00000001c0)=0x7) read(r3, &(0x7f0000001140)=""/4096, 0x48) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0xfffffffd, 0x0, 'syz0\x00', 0x100000}, 0x6, 0x100, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES8=r1, @ANYRES16=r0, @ANYBLOB="01002cbd7000fcdbdf250b0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b0000020000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="200027bd7000fddbdf251c0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00f3400800080001007063690011000200303030303a30303a31302e300000000008000b00ff030000"], 0x60}, 0x1, 0x0, 0x0, 0x24048040}, 0x4044) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) r5 = open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRES16=r5, @ANYRESHEX, @ANYRES64=r1, @ANYBLOB=',group_id=', @ANYRESHEX]) read$FUSE(r6, &(0x7f0000000200)={0x2020}, 0x2020) (async) read$FUSE(r6, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f0000002280)='./file1\x00', 0x5482, 0x0) write$FUSE_INIT(r6, &(0x7f0000002300)={0x50, 0xfffffffffffffffc, r7, {0x7, 0x9, 0x0, 0x2, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2, 0xfffffffd}}, 0x50) read$FUSE(r5, &(0x7f0000002440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r6, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r8}, 0x10) (async) write$FUSE_INTERRUPT(r6, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r8}, 0x10) r9 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0) dup3(r9, r6, 0x0) (async) dup3(r9, r6, 0x0) close(0x3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) 6m25.950645113s ago: executing program 4 (id=6622): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c010000130001010000000000000000640101020000000000000000000000000000ffffffffffffff80ffff7f0000010000000d040000090a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000300000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000001000000000000feffffff0000000000000000000000008400050020010000000000000000000000000001000000002b0000000a000000ac1414aa00000000000000000000000000000000fc0200"], 0x13c}}, 0x0) 6m25.880593008s ago: executing program 4 (id=6623): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000980)=""/194, 0xc2}, {&(0x7f0000000a80)=""/172, 0xac}, {&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000001b40)=""/12, 0xc}], 0x4, &(0x7f0000001bc0)=""/165, 0xa5}, 0x1f}, {{0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000001c80)=""/113, 0xb}, {&(0x7f0000001d00)=""/200, 0xc8}, {&(0x7f0000001e00)=""/214, 0xd6}, {&(0x7f0000001f00)=""/221, 0xdd}], 0x4, &(0x7f0000002040)=""/232, 0xe8}, 0x200}], 0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x10000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000180)={0x0, 0x10d000}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sync_file_range(r4, 0x7fff, 0x5, 0xf) r5 = socket(0x8000000010, 0x2, 0x0) write(r5, &(0x7f0000000440)="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", 0xfc) r6 = add_key$keyring(&(0x7f0000000780), &(0x7f00000007c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r6, &(0x7f0000000280), 0xfe00) r7 = socket(0x840000000002, 0x3, 0x100) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r7, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r8, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @multicast1}}) syz_open_dev$loop(0x0, 0x4, 0x863e42) r9 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b00000009040000"], 0x0) syz_usb_control_io$cdc_ncm(r9, 0x0, 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r10, 0x0) write$P9_RWRITE(r10, &(0x7f00000001c0)={0xb, 0x77, 0x2, 0x10000000}, 0xb) syz_usb_control_io$printer(r9, &(0x7f0000000680)={0x14, &(0x7f0000000540)={0x40, 0xe, 0xec, {0x118, 0xb, "435999882dbd8188e1b02e80845a7f28ae27668c47526b00e310d8ad70c783e9f227745aab259fe3c2dde00fd70de4f45176b213ac9dc858b82a61759cc5620bad0aeef0dc78e4091e2119f570c2c21925f9a2478fe5d20d160079c201150e7daef77cb0926568feffc5c54484e379af666b424ed6b3d18b8caa8578147fb2a92091caac7a37c34111a05dc9b816b3f840a8a159706256ad61d40be152a474b36e30cf2c6ee9525f3e6d57e4ee755c7e584117cc3baf16e7f36713bff0645d834f6597912eee1cf1cd2dd3c42e9b87a5a2ae2bbc41592a975f8ac687247c274ff0c1f2727154431b1739"}}, &(0x7f0000000640)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x140a}}}, &(0x7f0000000940)={0x34, &(0x7f00000006c0)={0x40, 0xc, 0x30, "2fff88f38bbd0262acdafe9a6fa248eaa780f7e11bfe7a6ee455e3f754135983807faef19f8b45cb48ad15480c2d0e34"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0xcd}, &(0x7f0000000800)={0x20, 0x0, 0xb8, {0xb6, "ab6cedda4b495f891213a9ca8a5282a95f8f27b9b679bc4963c7c8cf48f5cd6aa01df6a3d223292234c9fbdbe73f3a9d8a343943b0a9e04cf5ab84abb74ce6931d7a52e7a86251ea2116ecfa0d69762f13c4ca58699e7d6848dbf1378a17acbf6208fb407cdde3cbdaa70d940de363e53639700669c4a737a818242eb5df16a4e85e82172b041b39c73da771340b090b82841a43255d37314beaeea54467d48afec14fc4f7524389d1a6d418c5fa5977a1ae90c02b6b"}}, &(0x7f00000008c0)={0x20, 0x1, 0x1, 0x9}, &(0x7f0000000900)={0x20, 0x0, 0x1, 0x9}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x44}, 0x1, 0x2}, 0x40000) 6m22.719744798s ago: executing program 4 (id=6639): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a3000000000140007800800130000000000080012400000000d050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x143000, 0x0) r2 = syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000200)={0x6, 0xfff, 0x2, {0x9, @meta={0x54533343, 0x2ba717ae, 0x979f, 0x42b3, 0x519c7b51}}}) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x208000, 0x0, 0x3d, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000001740)='./file0\x00') r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = gettid() kcmp(r6, r5, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) syz_pidfd_open(r6, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') r7 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) fchdir(r8) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) read$FUSE(r9, &(0x7f00000102c0)={0x2020}, 0x7) r10 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r10, &(0x7f0000c00000/0x400000)=nil) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x0, 0x34a30b42, 0xfffffffffffffffe, 0x1000, 0x4008000, 0x1002, 0x4, 0x80005, 0x8, 0x6, 0x5, 0x8bda, 0xfffffffffffffefe, 0x4, 0x6], 0x25000, 0x316353}) ioctl$KVM_RUN(r11, 0xae80, 0x0) 6m22.357175006s ago: executing program 4 (id=6644): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x2, 0x80805, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000580)=@generic={0x3, 0x8000000000000001, 0x938}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000010000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000001180), &(0x7f00000011c0)=0x30) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') munmap(&(0x7f000000e000/0x3000)=nil, 0x3000) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001140), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000001380)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001340)={&(0x7f0000001240)={0xc4, r4, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xb0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x67}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff0000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8f}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb90}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0xc4}}, 0x40) preadv(r3, &(0x7f0000001200)=[{&(0x7f0000000080)=""/4097, 0x1001}], 0x1, 0x9, 0x6a76) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @empty}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x4040001}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000004c0)={r6, 0x200}, &(0x7f0000000500)=0x8) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x5, 0x4, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010800000000000000000a0000070c"], 0x20}, 0x1, 0x0, 0x0, 0x240c0811}, 0x0) r7 = io_uring_setup(0x526c, &(0x7f0000000440)={0x0, 0xc2a1, 0x400, 0x0, 0x51, 0x0, r0}) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r7, 0x1e, &(0x7f0000000540)={r2}, 0x1) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010027bd7000fddbdf252e00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900000800006100000010009d004000000005004000060000081000b000000300000600050009000c000400460004000101"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x10008808) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r8, 0x89fa, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, @multicast1, 0xc, 0x16}}) 6m22.098651737s ago: executing program 4 (id=6647): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000207d1e512d00000000000109022400010000000009040000010300020009210000000122050009058103"], 0x0) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000240), 0x22242, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001100)={0x34, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0xc, 0xf, 0x0, 0x1, [@typed={0x8, 0x91, 0x0, 0x0, @str='-.&\x00'}]}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r2}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000000)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r1, &(0x7f00000000c0)={0x0, 0xfc}, 0x2) close(r1) r3 = syz_open_dev$video(&(0x7f0000000040), 0x7f, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x2, 0x7, 0x32314241, 0x8, 0xfffffff, 0x8, 0xa, 0x9, 0x1, 0x1, 0x2, 0x3}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "6e451fd1"}]}}, 0x0}, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0xb, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x400000000000235, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000840)={0x84, &(0x7f0000000400)={0x0, 0x15, 0x4, '=_in'}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x40, 0x7, 0x2, 0x10}, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x4c000}, 0x4000) 6m21.858812008s ago: executing program 34 (id=6647): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000207d1e512d00000000000109022400010000000009040000010300020009210000000122050009058103"], 0x0) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000240), 0x22242, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001100)={0x34, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0xc, 0xf, 0x0, 0x1, [@typed={0x8, 0x91, 0x0, 0x0, @str='-.&\x00'}]}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r2}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000000)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r1, &(0x7f00000000c0)={0x0, 0xfc}, 0x2) close(r1) r3 = syz_open_dev$video(&(0x7f0000000040), 0x7f, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x2, 0x7, 0x32314241, 0x8, 0xfffffff, 0x8, 0xa, 0x9, 0x1, 0x1, 0x2, 0x3}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "6e451fd1"}]}}, 0x0}, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0xb, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x400000000000235, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000840)={0x84, &(0x7f0000000400)={0x0, 0x15, 0x4, '=_in'}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x40, 0x7, 0x2, 0x10}, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x4c000}, 0x4000) 7.684040483s ago: executing program 0 (id=8776): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0xb0}, @exit], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x4}, 0x94) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="ad5a97"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x440, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20040084) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400fd}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="200103"], 0x0}) 4.468628262s ago: executing program 1 (id=8786): r0 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000001a00), 0x1, 0x800) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000700)={0x3, 0x8, [0x89, 0x3b0f]}) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000002cc0)) r4 = dup(r3) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r4}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000003c0)={0x1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) setpriority(0x2, 0x0, 0xd2f4) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100e2ff80"], 0x50) r8 = socket$packet(0x11, 0x2, 0x300) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="1400000016000b43d27a80648c2594f90924fc60", 0x14}], 0x1, 0x0, 0x0, 0x600}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002bbd7000fddbdf250b00000008000300", @ANYRES32=r12, @ANYBLOB="0400280018005080040004fa070003"], 0x38}, 0x1, 0x0, 0x0, 0xc6552491d85fa764}, 0x800) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x74, r7}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 4.264929763s ago: executing program 0 (id=8788): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0100001300010100000000000000006401010200000000000000000000000000000000000000000000ffff7f0000010000000d040000090a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000400000000000000000000000000000000000000ffffffffffffffff00000000000000000300000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000001000000000000feffffff0000000000000000000000008400050020010000000000000000000000000001000000002b0000000a000000ac1414aa00000000000000000000000000000000fc0200"], 0x13c}}, 0x0) 4.032847073s ago: executing program 1 (id=8791): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, '\x00', '\x00', "0000000000000007ffffff00"}}}}}}, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, '\x00'/100}}}}}}, 0x0) 3.777257408s ago: executing program 0 (id=8792): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="b4000000000000077911b800000000001801000020646c2500000000002020208518f8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000c0000009500740000000000ef5f6082e4a0a52b72bde925efe35e0c28542f1716572a77c3939e085958131eb5d6ab7a69e1a83a4c8354fce7a66fe529cf5d06f6010e13c72fe2174e984706fbb446efe6271a62fc1c495beb391ce3ca6f852a3a36ecf9c5"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x18, &(0x7f000000cf3d)=""/195, 0x0, 0xc, '\x00', 0x0, @fallback=0xd}, 0x59) 3.596550849s ago: executing program 1 (id=8794): socket$rxrpc(0x21, 0x2, 0xa) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001180)=ANY=[@ANYBLOB="400000020007000000217bea6f156b7d471f1703f92e6bc6f8f9c521b3c27f1afc1cd3a8d69c652a430801ed8deefdd9829a79e3c4bb3e5f0ad940ddcc479f103f5a79f6feafa9fa42f8b18f7df4807f3c3ad197dc3f193fc0a15e42d602a7ea120ee19c75f0f242b464aad9210710e8448b7bed06630f4aec4b63089fb6d83821d69a21e478bfd7072204daf9f8ca1a0f813100fcb3b2fff068c95bbcc7d19c77188fa5c66922963a2e5387a23c1649", @ANYRES32=0x0, @ANYBLOB="102002000289000008000300", @ANYRES32=0x0, @ANYBLOB="1800128008000100767469000c00028008000400ac141433"], 0x40}, 0x1, 0xd, 0x0, 0x240480c0}, 0x200400c0) r1 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_GET_SECUREBITS(0x1b) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) syz_usb_connect(0x3, 0x903, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], &(0x7f0000001d40)={0xa, &(0x7f0000001bc0)={0xa, 0x6, 0x300, 0x1, 0x0, 0xb, 0x20, 0xfc}, 0xd4, &(0x7f0000001c00)={0x5, 0xf, 0xd4, 0x3, [@generic={0xb0, 0x10, 0x2, "b3fab64987e601fdd9bcf49005090b41150d0fb9dd105b02641e6299d8a87cc0cb68af93cbf842071df178796a5d1692340c5c69c8b62e09cd4a636fb867ed33ae6b7e20c53bee3409f67ec2bc03bc92196d34e4b98a9e34e31d16cd5c25c248f9c1313042b32a074285e4ca233a0302357e65a9b3fe5eaf514d799f9206108db08138176e32b5d587a9db659306a67c5695442d47386dd329fb984b71eea4395b38f901c42dc221f1abf3a79e"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x10, 0x1, 0x0, 0x6, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "561a30125c6bac55c269e5e521e37262"}]}, 0x1, [{0x4, &(0x7f0000001d00)=@lang_id={0x4, 0x3, 0x43e}}]}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000040)={0xf00, 0x10, 0x10, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {0x400, 0x0, 0x20000}, {0x0, 0x1000}, {0x0, 0x6, 0xfffffffe}, 0x0, 0xd0, 0x0, 0x0, 0x0, 0x10000004, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0xa, 0x16, 0x100, 0x0, 0xa}) socket$kcm(0x29, 0x5, 0x0) syz_io_uring_setup(0x90c, 0x0, &(0x7f0000000740), &(0x7f0000000280), &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x2e288501978821b, 0x80) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001040)=[{{&(0x7f0000000140)=@abs, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000001280)=""/130, 0x82}, {&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000380)=""/4, 0x4}], 0x3, &(0x7f0000000480)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000004c0)=""/87, 0x57}], 0x1, &(0x7f0000000a00)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{&(0x7f00000005c0)=@abs, 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000640)=""/128, 0x80}, {&(0x7f00000006c0)=""/123, 0x7b}, {&(0x7f0000000780)=""/99, 0x63}, {&(0x7f0000000900)=""/211, 0xd3}, {&(0x7f0000000a80)=""/147, 0x93}, {&(0x7f0000000b40)=""/233, 0xe9}], 0x6}}, {{&(0x7f0000000cc0)=@abs, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000d40)=""/67, 0x43}, {&(0x7f0000000dc0)=""/134, 0x86}, {&(0x7f0000000e80)=""/37, 0x25}, {&(0x7f0000000800)=""/62, 0x3e}, {&(0x7f0000000840)=""/43, 0x2b}], 0x5}}, {{&(0x7f0000000f00)=@abs, 0x6e, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}], 0x5, 0x58ca2280, 0x0) 3.569479761s ago: executing program 6 (id=8796): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x8, 0x12, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x58, 0x6, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0xc800}, 0x404) ftruncate(r0, 0x800) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001140)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021ec0700000c0a01030000000000000000070000090900020073797a31000000000900010073797a3000000000c0070380bc0700800800034000000002b0070b802c0001800a0001006c696d69740000001c0002800c00024000000000000000000c0001"], 0x870}}, 0x0) 3.522028977s ago: executing program 0 (id=8797): syz_usb_connect(0x3, 0x24, &(0x7f0000001300)={{0x12, 0x1, 0x310, 0x14, 0x4a, 0x4a, 0x8, 0x1943, 0x2250, 0x1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x1, 0x80, 0xa2, "", [{{0x9, 0x4, 0x4c, 0xf8, 0x0, 0x6a, 0x6, 0x17, 0x4c}}]}}]}}, &(0x7f0000001fc0)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x9, 0x2, 0x200, 0x54, 0x8, 0xfd}, {0x9, 0x5, 0xd, 0x2, 0x0, 0xfc, 0x3, 0x3}, {0x9, 0x5, 0x0, 0x3, 0x40, 0x5, 0x6, 0x8}}}}}}]}}, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700", 0xd) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r2 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x0, 0x0, 0x2000}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0xfffe}}, {0x4}}]}]}, 0x6c}}, 0x0) (async, rerun: 64) r4 = socket(0xa, 0x3, 0x3a) (rerun: 64) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x4e23, 0x0, @empty, 0xfffffffc}, 0x0, {[0xfffffffe, 0x0, 0x0, 0x0, 0x50, 0x5]}}, 0x5c) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x100, 0x28, '\x00', r3, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r5, 0x0) (async, rerun: 32) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000396000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f000020f000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r6 = io_uring_setup(0x5d4c, &(0x7f0000000040)={0x0, 0x3cb1, 0x8, 0xa, 0x69}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r5, 0x0, 0x2400c091) (async, rerun: 32) syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201100300000008f0030400400001020301090224000101022004090400040207010202090501020001ca0403b1eda879665e892708"], &(0x7f00000002c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0xf4, 0x8, 0x7, 0x8f, 0x8}, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x1, [{0x2, &(0x7f00000001c0)=@string={0x2}}]}) (async, rerun: 32) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) (async, rerun: 32) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) (rerun: 32) syz_mount_image$fuse(&(0x7f0000000680), &(0x7f00000006c0)='./file0\x00', 0x1000404, &(0x7f0000000700)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x1, 0x0, 0x0) (async) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r8, 0x8004e500, &(0x7f0000000200)=r7) close(r7) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x4c80, 0x4d97) 3.498772382s ago: executing program 6 (id=8798): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c00000010001fff010000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000440012800b00010067656e6576650000340002800500090000000000050009000100000005000a000000000005000300f90000000500040040000000050004000800000008000a00", @ANYRES32], 0x6c}, 0x1, 0x10000000}, 0x40) 3.320101557s ago: executing program 6 (id=8800): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x430, 0x130, 0x130, 0x98, 0x130, 0x98, 0x398, 0x398, 0x398, 0x398, 0x398, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x90}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0xff, 'macvlan0\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x2, 0x71}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x23}, 0x0, 0xffffffff, 'vlan1\x00', 'nr0\x00', {0xff}}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6tnl0\x00', {0x42, 0x21800000, 0x7fff, 0x1, 0x0, 0x0, 0x101, 0x78, 0x40}, {0x8001}}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x3, {0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x11}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0xc, 0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/mdstat\x00', 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) lseek(r1, 0xfffffffffffffff5, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0xe36bfff1cb3409c6, &(0x7f0000000180)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101901, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x971}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000700)={0x1, 0x0, [{0x7, 0x2, 0x0, 0x0, @adapter={0x9, 0xe327, 0x4, 0x2, 0xc13f}}]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000700000024000180060005004e230000060001000200051b08000300ac1414aa"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) ioctl$VIDIOC_S_AUDIO(r1, 0x40345622, &(0x7f0000000800)={0x9, "743a4c4d67e50834505df68d39b6f89f5e0325cb03fdd845aa7d048ecb8b7c4d", 0x3}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r3) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000010c0)='net/sockstat6\x00') r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f0000000180)={r10, 0x1, 0x6}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x200000a, 0x852, r8, 0x0) r11 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r12 = dup(r11) write$binfmt_elf32(r12, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c464a030103ff070000000000000200030004"], 0x79) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a000007080002400000000209000100"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) 3.148940194s ago: executing program 6 (id=8805): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}}, 0x0) (async) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYRES16=r0, @ANYRES64], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r3, 0x0, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000200)={0x7fffffff, 0x60000000, 0x6, 0x6, 0x3, 0x0, [{0x5, 0xbc, 0xdd3, '\x00', 0x2000}, {0x4, 0xf83, 0x1, '\x00', 0x8a}, {0xae54, 0x7, 0xf86, '\x00', 0x80}]}) (async) write$char_usb(r3, 0x0, 0x0) (async, rerun: 64) syz_usb_disconnect(r1) (rerun: 64) 2.984261328s ago: executing program 2 (id=8809): openat$urandom(0xffffffffffffff9c, &(0x7f0000000340), 0x8000, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffffdff, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000bc0)={{{@in=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0xa, 0x0, 0x0, 0x2}, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x8, 0x4}, {0x4}}, {{@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x80, 0x32}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x8}}, 0xe8) ioctl$PPPIOCGL2TPSTATS(r4, 0x80487436, &(0x7f0000000040)) sendmsg$nl_xfrm(r0, 0x0, 0x4000) r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd32c020ff7a3b78b, 0x31, 0xffffffffffffffff, 0x7c5c6000) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000000)=0x8004000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x6000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xa, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f00004bf000/0x1000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) syz_open_dev$vim2m(&(0x7f00000000c0), 0x4, 0x2) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x400080, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) 1.637219145s ago: executing program 2 (id=8812): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c00000010001fff010000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000440012800b00010067656e6576650000340002800500090000000000050009000100000005000a000000000005000300f90000000500040040000000050004000800000008000a00", @ANYRES32], 0x6c}, 0x1, 0x12000000}, 0x40) 1.535935858s ago: executing program 2 (id=8813): r0 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000001a00), 0x1, 0x800) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000700)={0x3, 0x8, [0x89, 0x3b0f]}) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000002cc0)) r4 = dup(r3) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r4}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000003c0)={0x1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) setpriority(0x2, 0x0, 0xd2f4) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100e2ff80"], 0x50) r8 = socket$packet(0x11, 0x2, 0x300) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="1400000016000b43d27a80648c2594f90924fc60", 0x14}], 0x1, 0x0, 0x0, 0x600}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002bbd7000fddbdf250b00000008000300", @ANYRES32=r12, @ANYBLOB="0400280018005080040004fa070003"], 0x38}, 0x1, 0x0, 0x0, 0xc6552491d85fa764}, 0x800) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x74, r7}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 1.422564649s ago: executing program 2 (id=8814): r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "ae4086bd84d434ef9756787407e8df3accc022b46bd882136835cf6b1526d0febf368bc2cad91a32a75913b1c88860bb5575ea043a21fdaba3b9bf4b5d1a3c43", 0x23}, 0x48, 0xfffffffffffffffd) r1 = geteuid() r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents(r3, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000480)={r5, @in={{0x2, 0x4e24, @private=0xa010101}}, 0x0, 0x1}, 0x90) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000080)={0x50, 0x0, r6, {0x7, 0x29, 0x9, 0xffffffff90acedc6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9, 0x4}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0xc8, 0x0, 0xfffffffffffffff9, [{{0xffffffffffffffff, 0x0, 0xfffffffffffffffa, 0x4, 0x6, 0x807, {0x5, 0x8000000000000000, 0x2, 0x1000, 0xd6b, 0x2, 0xd, 0x670, 0x5175, 0xc000, 0x5, r7, r8, 0x8f56, 0x3}}, {0x6, 0xfffffffffffffffc, 0x20, 0xe, ':-(\\\xc9\x80\x00\x00\x00\xc3\x00$\r\xa4a\xb6\x02E\x89\x13;\x00G\x00\x00\x00\x00\x00\x00\x00\x00\x00'}}]}, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r0, r1, r8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1}, 0x1ff}, {{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f00000001c0)=""/177, 0xb1}, {&(0x7f0000002b40)=""/4101, 0x1005}, {&(0x7f0000002840)=""/122, 0x7a}, {&(0x7f00000028c0)=""/89, 0x59}, {&(0x7f0000002940)=""/131, 0x83}, {&(0x7f0000002a00)=""/31, 0x1f}, {&(0x7f0000002a40)=""/31, 0x1f}, {&(0x7f0000002a80)=""/28, 0x1c}], 0x8}, 0x1}, {{0x0, 0x0, 0x0}, 0x7f}, {{0x0, 0x0, 0x0}, 0x404}], 0x4, 0x20, 0x0) 767.780762ms ago: executing program 7 (id=8817): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000180)=@ethtool_cmd={0x3d, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, 0x0, 0x1, [0x79e8]}}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r5 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000001300)={0x0, 0x7, 0x9}, 0x8) r6 = syz_open_dev$dri(&(0x7f0000000f00), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f0000000240)={&(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0], 0x1, r4, 0xc0c0c0c0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000340)={&(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, r1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f00000004c0)={&(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[{}], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x8, 0x5}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000800)={&(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0], 0x7, 0x1, 0x4}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000c00)={&(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000b80)=[0x0], &(0x7f0000000bc0)=[0x0, 0x0, 0x0], 0xa, 0x1, 0x8}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000c00)={&(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000b80)=[0x0], &(0x7f0000000bc0)=[0x0, 0x0, 0x0], 0xa, 0x1, 0x8}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000e40)={&(0x7f0000000c80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000cc0)=[{}, {}], &(0x7f0000000d80)=[0x0, 0x0, 0x0], &(0x7f0000000e00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x3, 0x9}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000f80)={&(0x7f0000000ec0)=[0x0, 0x0, 0x0], &(0x7f0000000f40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, r4, 0xb0b0b0b0}) r14 = socket(0x10, 0x3, 0x0) syz_80211_inject_frame(&(0x7f0000001100)=@broadcast, &(0x7f0000001380)=ANY=[@ANYBLOB="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"], 0x10a) r15 = io_uring_setup(0x14b6, &(0x7f0000000040)={0x0, 0x8017, 0x800, 0x1, 0x37f}) syz_open_dev$hiddev(&(0x7f0000001340), 0x1, 0x101002) (async) syz_open_dev$hiddev(&(0x7f0000001340), 0x1, 0x101002) io_uring_register$IORING_REGISTER_BUFFERS2(r15, 0xf, &(0x7f0000000580)={0x4, 0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000002c0)=""/69, 0x45}, {&(0x7f0000000400)=""/150, 0xfffffffffffffee4}, {&(0x7f00000004c0)=""/137, 0x89}], &(0x7f0000000200)=[0x7, 0x1, 0x0]}, 0x20) (async) io_uring_register$IORING_REGISTER_BUFFERS2(r15, 0xf, &(0x7f0000000580)={0x4, 0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000002c0)=""/69, 0x45}, {&(0x7f0000000400)=""/150, 0xfffffffffffffee4}, {&(0x7f00000004c0)=""/137, 0x89}], &(0x7f0000000200)=[0x7, 0x1, 0x0]}, 0x20) write$ublk_bdev(0xffffffffffffffff, &(0x7f0000001280)="8cf4e63250fb25c65f14306bd39e37b5024da5c87648ec1674cd808e214c939a865bba1c3f530318270a5d1ed8b1b127ba2fbce4ce209f5d433ead57e7b9370dd51fe3fb7d332023cf4e16c487c76cf0f0dc24d11423b7edd36174e696b60521e886cf2dfb2f070a66164a6b05761da0bc8897e97b19ea1c9f3d055bf9f8", 0x7e) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r16, {}, {0xffff, 0xffff}, {0xe, 0xfff1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x1b, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x5}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x6, 0x5, 0xa, 0x0, 0x6, 0x6}}, {0x4}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010) (async) sendmsg$nl_route_sched(r14, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r16, {}, {0xffff, 0xffff}, {0xe, 0xfff1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x1b, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x5}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x6, 0x5, 0xa, 0x0, 0x6, 0x6}}, {0x4}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000001080)={0x1, 0x8, &(0x7f0000000040)=[r4, r1, r4, r1, r4, 0x0, r4, r1], &(0x7f0000000180)=[0x8001, 0x8, 0xb7], &(0x7f0000000fc0)=[r7, r8, r9, 0x0, r10, 0x0, r11, r12, r13], &(0x7f0000001000)=[0x8, 0x40, 0x5, 0x8, 0x0, 0x7fffffffffffffff, 0x5, 0x77, 0x5]}) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000001080)={0x1, 0x8, &(0x7f0000000040)=[r4, r1, r4, r1, r4, 0x0, r4, r1], &(0x7f0000000180)=[0x8001, 0x8, 0xb7], &(0x7f0000000fc0)=[r7, r8, r9, 0x0, r10, 0x0, r11, r12, r13], &(0x7f0000001000)=[0x8, 0x40, 0x5, 0x8, 0x0, 0x7fffffffffffffff, 0x5, 0x77, 0x5]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r4, 0xeeeeeeee}) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r4, 0xeeeeeeee}) pipe2(&(0x7f00000010c0), 0x80) (async) pipe2(&(0x7f00000010c0), 0x80) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f00000002c0)={0x4, r17, r4}) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f00000002c0)={0x4, r17, r4}) 661.761652ms ago: executing program 7 (id=8818): getpid() (async) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card1/oss_mixer\x00', 0x1, 0x0) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$alg(0x26, 0x5, 0x0) (async, rerun: 64) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async, rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1978, &(0x7f0000000040)={0x0, 0xca72, 0x1cc90, 0x0, 0x20002fb}) (async, rerun: 32) r3 = socket$inet(0x2, 0x80001, 0x84) (rerun: 32) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x130, 0x0, 0x4}}) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async, rerun: 32) writev(r1, &(0x7f00000028c0)=[{&(0x7f0000002600)='u', 0x4000}, {0x0, 0x2}], 0x2) (async, rerun: 32) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000da4100002771e3f0f41453a6ee9782b90000040000000000"], 0x50) (async) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x77, 0x4) (async) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) r6 = fcntl$dupfd(r5, 0x406, r5) write$binfmt_elf64(r6, &(0x7f0000000f80)=ANY=[], 0x540) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r6) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) (async) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r8, r7, &(0x7f0000002080)=0x9c, 0x23b) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x1a, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x5c18}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_idx_val={0x18, 0xb, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='syzkaller\x00', 0x100, 0x6e, &(0x7f00000003c0)=""/110, 0x41000, 0x51, '\x00', 0x0, 0x25, r7, 0x8, &(0x7f0000000440)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x2, 0x7, 0x0, 0x7}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff76}, 0x94) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000040)=0x1) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 32) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (rerun: 32) close_range(r9, 0xffffffffffffffff, 0x0) 577.155152ms ago: executing program 7 (id=8819): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, '\x00', '\x00', "00000000b000"}}}}}}, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, '\x00'/100}}}}}}, 0x0) 503.129355ms ago: executing program 7 (id=8820): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x8, 0x12, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x58, 0x6, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0xc800}, 0x404) ftruncate(r0, 0x800) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001140)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021ec0700000c0a01030000000000000000070000090900020073797a31000000000900010073797a3000000000c0070380bc0700800800034000000002b0070b802c0001800a0001006c696d69740000001c0002800c00024000000000000000000c0001"], 0x870}}, 0x0) 448.767033ms ago: executing program 2 (id=8821): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="e500000000000000711098000000000006000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 448.12965ms ago: executing program 0 (id=8822): r0 = socket(0x10, 0x3, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x80, 0x2, 0x27e}, &(0x7f0000000000)=0x0, &(0x7f0000000f00)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000980)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000440)={0x2e, 0x11, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000180)=@new_dev={0x1, 0x4f4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x20}}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x14, r6, 0x1, 0x0, 0x25dfdbfd, {0x54}}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00'}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r7, 0x29, 0x35, 0x0, &(0x7f0000000140)) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$TUNGETFILTER(r9, 0x801054db, &(0x7f0000000280)=""/16) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r13 = socket(0x400000000010, 0x3, 0x0) r14 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r15, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0x0, 0x6, 0x0, 0x2}, 0x10, 0xff}, [{0x4, 0xfff, 0x100, 0x7, 0x8, 0x1b2b}, {0x6, 0x7, 0x8c, 0x4, 0x0, 0x6}, {0x7, 0xffffffff, 0x10000, 0x1, 0x6, 0x1}, {0xffffffff, 0x8, 0x7, 0x6, 0x2}, {0x0, 0x9a, 0x8, 0x6, 0x0, 0x9}, {0x5, 0x4, 0x3, 0x101, 0x7}, {0x47, 0xfffffff8, 0x7, 0x100, 0xc, 0x401}, {0xc5, 0x0, 0x5, 0x7, 0x3, 0x7fff}, {0x6, 0x9, 0x4000000, 0x5, 0xa057, 0x3ff}, {0x1, 0x6, 0x8, 0x5, 0x2, 0x8e}, {0xfffffffb, 0x7, 0xfff, 0x8, 0xffffff85, 0x4}, {0x6, 0x9, 0x4, 0x0, 0x7, 0x4}, {0x81, 0x80000001, 0x9, 0x43a, 0x8, 0x1000}, {0x7, 0xa, 0x1, 0x2, 0x0, 0xf}, {0xf, 0x401, 0xf0, 0x9, 0xffff, 0x4}, {0x7fffffff, 0x7, 0x5, 0x0, 0x7ff, 0x7}, {0x92, 0x9, 0x6, 0xe, 0xc3, 0xb}, {0x9, 0x9, 0x2, 0x1, 0x5, 0x400}, {0x4, 0xcc, 0x300000, 0x4, 0x3, 0x7}, {0x4, 0xffffffff, 0x9, 0x9, 0x3, 0xf}, {0x9, 0x8, 0x0, 0xa0, 0x468, 0x400}, {0xffffffff, 0xfffffff9, 0x0, 0x2c, 0x7fffffff, 0x8001}, {0x5, 0x8001, 0x8e27, 0x8, 0x2000000, 0x2}, {0x4, 0x4, 0x3, 0x9, 0x8, 0xeb43}, {0xb, 0x5, 0x401, 0x56, 0xcb7}, {0xef, 0x3, 0x1, 0x8001, 0x7fffffff}, {0x0, 0x10, 0xdaf1, 0x1, 0x1, 0x2}, {0xffff, 0x9, 0x3fed, 0x1, 0x80000000, 0x5}, {0xfffffff8, 0x81, 0x5, 0xfffffffe, 0x3, 0x4}, {0x1, 0x91, 0x800, 0x7, 0x5, 0xf}, {0x4, 0x2, 0xff6f, 0xe, 0xfffffffe, 0x4}, {0x53, 0x4, 0x401, 0x8, 0x5, 0x9}, {0x10001, 0xee, 0xaea, 0xfffffffe, 0x76be, 0x8}, {0x1000, 0x4, 0xd5b, 0x4, 0xe, 0x3ff}, {0x5, 0xed, 0x9, 0x3ff, 0x200, 0xffffffff}, {0x2, 0xff33, 0x9, 0x0, 0x0, 0x66d2}, {0x2a, 0xf2, 0x5, 0x1, 0xc7, 0xfffff3d6}, {0x2dc57e6, 0x5, 0x8, 0x0, 0x7, 0xfffffffc}, {0x51, 0x2, 0x8, 0x8, 0x3, 0x6}, {0x0, 0x101c, 0x40, 0x4, 0x8001, 0xc}, {0x54b, 0x7, 0xf51, 0x0, 0x9, 0x2}, {0xffffffff, 0x2, 0xfffffffc, 0x6, 0x5, 0xe}, {0x5, 0x5ed4f39, 0x0, 0x7ff, 0x81, 0xfffffff8}, {0xbe4, 0xffffffff, 0x6, 0xd4a, 0x7ff}, {0x0, 0x9, 0x8, 0xfff, 0x3, 0x4}, {0xda, 0x0, 0x2, 0x3, 0xfffff1fb}, {0xffffff42, 0x81c, 0x9, 0x3, 0x8, 0x1}, {0x3, 0xfffffff8, 0x8, 0x4, 0x54, 0x200}, {0x9, 0x8, 0x1ff, 0x52800, 0x80, 0x1}, {0x0, 0x5, 0xe8, 0x2, 0x0, 0x1}, {0x7, 0xffffff01, 0x1000, 0x8, 0x0, 0x7}, {0x0, 0x80, 0xc00, 0x200, 0x3, 0xfffffffc}, {0x1000, 0x3, 0x1, 0xff, 0xffff, 0x80000000}, {0xfffffffc, 0x2, 0x40, 0x8, 0xcb87, 0x45b5}, {0x4, 0x0, 0xc09, 0x1, 0x8, 0x7ff}, {0x401, 0x2, 0x9, 0x678, 0x6c, 0xffff}, {0xfffffffe, 0x4, 0x4, 0xfffffffe, 0x3ff, 0xf}, {0x100, 0x2, 0x9, 0x2, 0x6, 0x5b8b}, {0x4, 0xfffffffb, 0x24, 0x5, 0x31c1, 0x2}, {0x6, 0x6, 0x1e1c, 0x4, 0x6, 0x1ff}, {0x1, 0x4, 0x4, 0xd1bd, 0x0, 0x5}, {0x4, 0xfffffffa, 0xfffffffb, 0x7, 0x101, 0x1}, {0x8, 0x7, 0xd2, 0xff, 0x3, 0xcc7e}, {0x7, 0x3, 0xd65c, 0x1, 0x8, 0x4}, {0x2, 0x40, 0x9, 0x5, 0x7}, {0x858, 0xfff, 0x200, 0x9, 0x7ff, 0x9}, {0x4c07e81, 0x8a55, 0x35a, 0x3, 0xffff, 0x10001}, {0x3, 0x3, 0x0, 0x3, 0x8}, {0x2, 0x10001, 0x60000, 0x7, 0x7, 0x9}, {0x4, 0x863a, 0xffffffff, 0x7fffffff, 0x7f, 0x8}, {0x3, 0x1, 0x8, 0x98a, 0x9, 0x89}, {0x3, 0x2, 0x40, 0x9, 0x7, 0x8}, {0x4, 0x6, 0x6, 0x6, 0x3}, {0x4c, 0x0, 0x1, 0x8, 0x80000001, 0xfffffffe}, {0x3, 0x9, 0x9, 0x40, 0x80, 0x12a2}, {0x80000000, 0x1, 0x100, 0x800, 0x3, 0x8baf}, {0x2, 0xc, 0x8, 0x80000000, 0xb8, 0x60f}, {0x3, 0x5, 0x6, 0x5380, 0x7f, 0x7517}, {0x647, 0xffffffdc, 0x4, 0xffff, 0x1, 0x401}, {0xfffffff8, 0xa29, 0xf, 0x3, 0x5, 0xffff2f56}, {0x200, 0x8, 0x3b6, 0x9, 0x100, 0x7}, {0x2, 0x4, 0x81, 0x4, 0x80, 0x1}, {0x5, 0x21e7, 0xa8a5, 0x7ff, 0x6, 0xd}, {0x13, 0x7fffffff, 0x6, 0x5696cd1, 0x4a, 0x6}, {0x9, 0x1000000, 0x0, 0xfff}, {0x5, 0x40, 0xc05, 0x5, 0x8, 0x2}, {0x3, 0x6, 0x5, 0x6, 0xb, 0x8}, {0x400, 0x80000000, 0x101, 0x0, 0x8, 0x9}, {0xb, 0xf9, 0xfffffff7, 0x0, 0x9}, {0x1e9e, 0x0, 0xb8e, 0x9, 0x9, 0xfff}, {0x3, 0x6, 0x24ab, 0x6, 0x1, 0x1}, {0x1, 0x9, 0x3, 0xa0000, 0x5, 0x8}, {0x0, 0xee5, 0x0, 0x5, 0x27, 0x8}, {0xfffffffc, 0x8e7, 0x7, 0x3ff, 0x5, 0x1}, {0x400, 0x10000, 0x4, 0x3, 0x9}, {0x4, 0x4, 0x9, 0x4, 0x0, 0x800}, {0x2, 0x1, 0x74, 0xfffffff9, 0x1, 0x5}, {0x3, 0x1fe0, 0x8, 0x8, 0x3, 0x2}, {0x6, 0x80, 0x700, 0x1, 0x7, 0x9}, {0x4, 0xa, 0x2, 0x3, 0x4000, 0x7}, {0xd, 0x2, 0x0, 0x3, 0x0, 0x5}, {0x10001, 0x7fff, 0x4, 0x9, 0x4, 0x400}, {0x7, 0x6, 0x5, 0x8, 0x20, 0x7ae2}, {0x5, 0x9, 0x1, 0x80000001, 0xd1, 0xffffff80}, {0x9, 0x81, 0x242, 0x7}, {0x9a, 0x0, 0x2, 0xd3ef, 0x9, 0x3}, {0x6, 0x7fff, 0xd6f, 0x7fffffff, 0xb2f8, 0x81}, {0x2, 0x3, 0x0, 0x12b, 0x5, 0xffffff80}, {0x7edc, 0x44cf, 0x9, 0x7ff, 0x7, 0x8}, {0x0, 0x46, 0x80, 0x7fffffff, 0x7, 0x9566}, {0x9, 0x5, 0x8, 0xfffff8de, 0x2, 0x6}, {0x1, 0x2, 0xe, 0x37, 0x2, 0x10}, {0x3, 0xc0, 0xa, 0x1, 0x7, 0x9}, {0x4d5, 0x0, 0x1, 0x0, 0x3, 0x3}, {0x180127ed, 0x45, 0x6, 0x52, 0x6, 0xfffffff3}, {0xfffffffb, 0x9, 0x4, 0x3, 0x8000}, {0xfffffff9, 0xffff932d, 0x101, 0x3, 0x10000, 0x2}, {0x1000, 0x200, 0x5901, 0x8, 0x724, 0x2d3}, {0xfffffff7, 0x1, 0xfffffff8, 0x1, 0x30, 0x8}, {0x0, 0x8, 0x3, 0x3, 0x1, 0xd453}, {0x5, 0x4, 0x1, 0x7, 0x2, 0x8001}, {0x878b, 0xfffffff9, 0x2, 0x73fe, 0x0, 0x9}, {0x4c735734, 0x5, 0xfffff8dc, 0x4, 0x5, 0x3}, {0x5af8, 0x8, 0x5, 0x5, 0x4, 0xd}, {0x2, 0x1, 0x1, 0x3ff, 0x8}, {0x0, 0xc, 0x80, 0x9, 0x6, 0xfffffffc}, {0x1, 0x1ff, 0x9, 0xf0000000, 0xad82, 0xfed}, {0x8, 0x4e9, 0x7f, 0x6, 0xffff, 0x5}], [{0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x7}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {}, {}, {0x5, 0x1}, {0x2}, {0x6c920e8d29de5635, 0x1}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x5}, {0x2}, {0x5, 0x1}, {0x438236dffaa15198}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x5fa8a67979573ac}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x5}, {}, {0x6, 0x1}, {0x3}, {0x2, 0x1}, {0x1}, {0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x6}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x5}, {0x3}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x5}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0x1, 0x1}, {0x5, 0x3}, {0x2}, {0x7}, {0x3}, {0x2}, {0x3}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {0x5, 0x1}, {0x4}, {}, {0x3}, {}, {0x1}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x2}, {}, {0x4}, {0x2}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r17 = socket$nl_generic(0x10, 0x3, 0x10) r18 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r17, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r17, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r18, @ANYBLOB="010014000000150000000200000008000300", @ANYRES32=r19, @ANYBLOB="8708ed201c0b5a71f0133d742e840d54a3ac9f8d5a32d9b3f58caca076d6a37755dcde936deef77fb811b47c75390905adb5dcbacb3a9a588f756e87d49a219749e2e455023637a30682bf941ea10f1b6ce232e0c5b7cabcc9193cecf3182a4a9db69f8f26d69e986c805d65bf31ca4caa701d240e0f12e572e54472e17ed47be9c4286e421718704c8de9c01d7399dc3edf5f1ca839f8f4006d51c184d03aacd55fb6ddf60425e67202b5ba491ebb667908ab3c2e1bd51be44b1436b16dd7e6a9b0fe84"], 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x38, r8, 0x4, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r16}, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r19}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x15}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x4}]}]}, 0x38}}, 0x20000010) 344.792453ms ago: executing program 2 (id=8823): r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f0000000140)=0x10) statx(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x400, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x13}, @in=@rand_addr=0x64010102, 0x8, 0x4, 0x4e24, 0x5, 0xa, 0x0, 0x80, 0x62, 0x0, r1}, {0x6035772a, 0xe93, 0x3, 0x46e4, 0x92d, 0x10, 0x7, 0x7}, {0x0, 0x6, 0xffffffffffff0001, 0xffffffff00000001}, 0x3, 0x6e6bb5, 0x1, 0x1, 0x2, 0x2}, {{@in=@empty, 0x4d6, 0x3c}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x4, 0x1, 0x92, 0x7, 0x0, 0x9}}, 0xe8) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB='fd=', @ANYRES32=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r4, @ANYBLOB="2c2ad408e867726f75705f69643d54126c2583735d9e370dd37ad664a05937632af27f017ab178ffe1672c8225ba02cd11b474d24549c2a5e4dc390d9f6cf2cb7331d119f3bbb0c242eae6b4ffe003bb826bb3264fd953881fe3fa1ca813898b01000000010000009a7bbb7c164bfe91e8889ed76aeabdb80a033e71312f2e5fe57fc8f77e71182721e876653c4b5188f2629906314bb7fbc51a840feceae0b63d2110e562cecb7e7b84f378d338826af43eb6965748d18284762d8a609aeb9b230cbf33f8e6a0c1a37200d6df0487933dd6ac2f9f5c3e79ee4cabdb1a6d8ccd617ce911bb1985f9ffe62c17336e864bb2426657a9a32d191e6018", @ANYRES8=r2]) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r7, &(0x7f0000000200)='m', 0x1) r8 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r8, 0x40045532, &(0x7f0000000100)) r9 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r9, &(0x7f0000000200)="a3", 0x1) ioctl$SNDRV_PCM_IOCTL_DRAIN(r9, 0x4144, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x4, 0x8, 0x80}, 0x0, &(0x7f00000002c0)={0x3ff, 0x30e3, 0x0, 0x3, 0x8, 0x8000000000, 0x80000001, 0xfffffffffffffffc}, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r9, 0x40084146, &(0x7f0000000140)=0xfff) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r10, 0x0) preadv(r10, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r11 = syz_usb_connect(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002", @ANYRES64=r5], 0x0) syz_usb_control_io$uac1(r11, 0x0, 0x0) syz_usb_control_io$printer(r11, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000680)=ANY=[@ANYBLOB="400b1500000004820697c4f1620de9f3f4edc62b86993c814601244c997342eea110d4be123efdbf891bee9760863ce80f052d98c7b7da24cd51321d28908f4ce3ba3b9743ba6ec0616dbc923db09206eae6aaf7221c342a7d7ab212c07ba033efd99294efd625fde9d29bf68de75eef2be06061b9135a80e6260401cede6ab0a3b6f0b0e5479833de3e40ce89505b0057eae5a5db7c636014cb3af051f22e10e66e3a29ae1c5f1c6c42c265b7fc349b", @ANYBLOB="39e44938f55a044730eebe5a7fa07fb5775a4a1ba621e765c4123a027e9e4ff6c69d61c42fd5c31de2d795bcc33e680f384aea906e9152dbd1ea919bca0d32c9c0bd99db001dab31e08a16a9c0016d4f2f5746648fc155986238f92acc6211ff7221279d6d7f23f534ecd34bb661b258700a3831b12853608c3652ed6334705064cae7390f913d1e2834ee43e5429041f523da4f38b04c8daf966fb595d9f36d49709d56e7c766f5c287dc143a7964f9aaaf9c1438b4287aee767a1497837ca38b04d97e1d76ce2f2e3659", @ANYRES32=r2, @ANYRES8=r6, @ANYRES64, @ANYRESOCT=r3], 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00'}) 332.239472ms ago: executing program 1 (id=8824): r0 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000001a00), 0x1, 0x800) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000700)={0x3, 0x8, [0x89, 0x3b0f]}) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000002cc0)) r4 = dup(r3) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r4}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000003c0)={0x1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) setpriority(0x2, 0x0, 0xd2f4) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100e2ff80"], 0x50) r8 = socket$packet(0x11, 0x2, 0x300) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="1400000016000b43d27a80648c2594f90924fc60", 0x14}], 0x1, 0x0, 0x0, 0x600}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002bbd7000fddbdf250b00000008000300", @ANYRES32=r12, @ANYBLOB="0400280018005080040004fa070003"], 0x38}, 0x1, 0x0, 0x0, 0xc6552491d85fa764}, 0x800) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x74, r7}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 270.157628ms ago: executing program 7 (id=8825): r0 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xcd\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81', 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) fsetxattr$security_capability(r0, &(0x7f0000000080), 0x0, 0x0, 0x1) fsetxattr(r0, &(0x7f0000000280)=@known='user.incfs.size\x00', 0x0, 0x0, 0x0) flistxattr(r0, &(0x7f0000000000)=""/112, 0x70) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f00000000c0), &(0x7f0000000100)=0x10) 171.935167ms ago: executing program 1 (id=8826): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0100001300010100000000000000006401010200000000000000000000000000000000000000000000ffff7f0000010000000d040000090a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000000000001000000000000000000000000000000ffffffffffffffff00000000000000000300000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000001000000000000feffffff0000000000000000000000008400050020010000000000000000000000000001000000002b0000000a000000ac1414aa00000000000000000000000000000000fc0200"], 0x13c}}, 0x0) 116.864634ms ago: executing program 7 (id=8827): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x2da8}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) link(&(0x7f0000000140)='.\x00', &(0x7f0000000180)='./file0\x00') r2 = socket$kcm(0x10, 0x2, 0x10) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x9c, 0xb, 0x0, 0x1, 0x5392, 0xb, 0x9, {0x0, @in6={{0xa, 0x4e60, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10}}, 0x81, 0x3, 0xc, 0x4b, 0x9}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840) r3 = socket$xdp(0x2c, 0x3, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000000340)=0x1) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) r4 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x2087, 0x703, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x19, 0xc0, 0x43, "", [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x1, 0x0, 0x1, {0x9, 0x21, 0x0, 0x7f, 0x1, {0x22, 0x791}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x8, 0x6, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x8, 0x0, 0xa}}]}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x350, 0x5, 0x1, 0x2, 0x20, 0x4}, 0x35, &(0x7f00000003c0)={0x5, 0xf, 0x35, 0x6, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x6, 0x0, 0x1}, @wireless={0xb, 0x10, 0x1, 0x4, 0x69, 0x2, 0xf0, 0x7f, 0x80}, @wireless={0xb, 0x10, 0x1, 0x4, 0x10, 0xf9, 0x3, 0x3, 0xf}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x6, 0xff, 0x7}]}, 0x5, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x41a}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x409}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x409}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x458}}, {0xf3, &(0x7f0000000500)=@string={0xf3, 0x3, "d60fe23a7ccde6ab7f2bf9dd73706888895c93170a70f68c633720e5dfa2126368ff417c06c32a9ab3d421d26c38698030ea66a0137b3a394933278730179c6478bc5efc02a36cb952954b1ee57a03df5d77ec899b0878b4c9c06359cce1a0c673f867be7eac5e4b2c9c0568ffe7bb777883151997037552fbf127b79e8799ce1b8ae16ab15b3a09c7da1bc08a8836b8c5bb711ea8573e36b39d526afb0329e2fc77f2e5c01fa6cfcf4d352ab3165bc6da8659cc8e84215e6bf908e671be95efc66df7423a7a4124660075a3afc365a51f260c306af13d7d2a87e453ee778887c275df3ac67a299ee3d11ff3afa9f98831"}}]}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)) syncfs(r5) syz_usb_disconnect(r4) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5, 0x12, r3, 0x180000000) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) syz_clone(0x4001000, 0x0, 0x0, &(0x7f0000019100), 0x0, 0x0) 69.809161ms ago: executing program 6 (id=8828): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="020320001900000000000000000000000400030000000000000000000000000000000000000000010000000000000000030006000000000002004e207f00000100000000000000000400040000000000feffffffffffffff0000000000000000000000fffffffb0002000100000000000000000600000000030005000000000002004e21ffffffff00a849000000000005000700000000000a004e2200000005fc01000000000000000000000000000000000000000000000200", @ANYRESDEC], 0xc8}}, 0x0) 2.653224ms ago: executing program 1 (id=8829): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f0000000ac0)="cdac5d65cb148c524f0c679c94e49148503da8704c343f857adcd38f182037a5c0de8c118ab35504f21f135318e4e4e39248d2f8ee17216d5c350b8e7f0d13af5223a81a89fd610389158cabc93ae4c5438e118f205639ac3874c8d711097e7dacd3f0712bd8a217eaa60cec6ce69002f12b4a8c32a9347d086eaafa032db1b8b7f5cd6561a5551a00016833461b6dded08de5cba524bc01730b38c1a163ceb197a02529ad6c380405d9dac7ca33d0", 0xaf, 0xfffffffffffffff9) r1 = request_key(&(0x7f0000000b80)='.dead\x00', &(0x7f0000000bc0)={'syz', 0x0}, &(0x7f0000000c00)='@\x00', 0xfffffffffffffffa) r2 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0), 0x0, 0xfffffffffffffffe) r3 = add_key$user(0x0, &(0x7f00000005c0), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r2, r3, r3}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) keyctl$dh_compute(0x17, &(0x7f0000000c40)={r0, r1, r3}, &(0x7f0000000c80)=""/82, 0x52, &(0x7f0000000e00)={&(0x7f0000000d00)={'blake2s-128-x86\x00'}, &(0x7f0000000d40)="5f20234161366513a424bc4a59637821808ad5891144c00e911068ea0fa6039eaac0e9af6fc7cb2a8aed2985c739fbd5b80ff78c3ac66d8d59f813b39cc7a7af57e8aba54f84e5ed872e9f523071319dda090ed1dd1156d995f501f2f7b9699938eecd0ad82980fc3d5bc16c4a15a38f4c7b47fd5c5f1ce90cf99f4b89d48ca54594fa016c4dc64c43198a5a400ea8e52d357fa36c0f1ee5b0dbc31b5f", 0x9d}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) io_uring_enter(r4, 0x0, 0x1adf, 0x16, 0x0, 0x2014) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r4, 0x4048587b, &(0x7f0000000a40)={{r4, &(0x7f0000000000)='GPL\x00', 0xe0100, &(0x7f0000000140)={@align=0xaf01, {0x4, 0xffec, 0x5, 0xcf}}, 0x9, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0x2}, 0x7, &(0x7f0000000940)=[{0x0, 0xff, &(0x7f0000000200)='\x00', &(0x7f0000000380)="76175f519d370ba651fd3524cc5cb320e188835a42fc0dbbbe39b354aa503277ae5600dc93c4ff22231a8311b33ed3ceda8046a97689af6ac5733309c05f40d77690b126b196d71cc495f79a174d721f4935cf77d355b5d281d7f017517e6a75dc5aec905d4b363c16ddb11c5b98eee11755c2d3125ec030907fec411680fd66873e20a2ddbe464c7cd8d30e69184d3669a82bf533aa192cbdb50c5969fbc40a21c9ecb9b23caa8008776958e0403bba5252b505bff14c1df1bc889268e3225ec002c59ab601", 0xc6, 0x3a}, {0x2, 0x3cf6f90a, &(0x7f0000000480)='\x00', &(0x7f00000004c0)="257774eeefc869c7eb6e223c7587048f4d83abac8f1ff4f8cb43ca75dcf23082815c18155c4ce49e1e000b6f855b8855f899f35332e00eb54af43cc51b24bc282127f8db98b403583199df2df033bb0a759222efa89c53910792fe11a4cd4858ffc292321a28e7c0455694e243a909ec24321a43c733f0c962213644653d906720d43dcbf8db04c2a2c10f8a72def82e3ae2e9e04f4caf3043d60bf8026f58aee33213a2484771296351ba52c4072b40c7676585", 0xb4, 0x30}, {0x3, 0x3, &(0x7f0000000580)='@\x00', &(0x7f00000005c0)="cc568be9444235e37197cc04e530030da7120afcf33273d7d68f52fbb7df7e5ea855de4ba5189767075eb46ab5b02b314c4e4ada5c2716911eccf508591aa70d9740b675c663", 0x46, 0x8}, {0x3, 0x3, &(0x7f0000000640)='GPL\x00', &(0x7f0000000680)="d96498291ba318bde48e291c6bba413bec1cf0047aa9f947bcc57e5b370527342c060e38d88a746a037113259e491b823bb7e357af007b80555c2dc0f11cfa012eb90156e5c3c22a063cfeb300bcad", 0x4f, 0x8}, {0x1, 0xd8e, &(0x7f0000000700)='\x00', &(0x7f0000000740)="2559889175480e7c71f9c2eb1d37de1b525465fa938d1f7e0bc41db56e8b1fc27357661c62a887489ff402e1035bdf47055d5eff9cf01d023763841fb059397c6f658afb6548a40bee8bdf", 0x4b, 0x20}, {0x1, 0x80, &(0x7f00000007c0)='\x00', &(0x7f0000000800)="92f73e09b3703d5dce729d959dc4aa242eb2590f31e49d7006e05fe85a445e09045734c622da9b3f95e1c20c56518e9fb81fcda6a3f5dfc4", 0x38, 0xf53b40b3d1c902d0}, {0x2, 0xe, &(0x7f0000000840)=']\x00', &(0x7f0000000880)="df338980839eae370131e0d7bfdffb41584c0d67764fde05fad49610aa5e8cafebdff260db8f66358aa4782d6a5b3e4dff2b02ec4db5e9e83dcba495f48767451f431b994a989fdbae42cb3b4108cfae4930759a201fda3105e8b1c1b5428b6b731e35204678a13f155127b31fd94154ad74430d97e71f271109d5c183b6e41f85058980454a69cc9f34d6458a0d47047920", 0x92, 0xa}]}) r5 = syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000e40)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x0, 0x4, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x3, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x648, 0x1, 0x8, 0xbd}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x4, 0xbc}}]}}}]}}]}}, &(0x7f0000001180)={0xa, &(0x7f0000000e80)={0xa, 0x6, 0x250, 0x3, 0x7, 0x3, 0x20, 0x9}, 0x15b, &(0x7f0000000ec0)={0x5, 0xf, 0x15b, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "bcc14eedc256b6a928c69509ed8486f0"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x2, 0x9, 0x2}, @generic={0x96, 0x10, 0x2, "24060a0b3c32aab5d053e1bed1b849958fe7c1996e80ce84aff7d62e6da7f3866c0966301d690b2f834c381fc3b514c2144eb4cf3791213666184d09624c9eafd2953e8cbf2c1628cd9e58623a8e956e7d5e63af1b0813565b13565155d09c39b20c4b14a57f2a95ba6a4ba20f37b32926234397971fa6c3a31cd5beb650449b31ba0554c7ff77f9519ba224cb90000004edb5"}, @ssp_cap={0x10, 0x10, 0xa, 0x4, 0x1, 0x3ffc00, 0xf00, 0x0, [0xfffff0]}, @generic={0x8b, 0x10, 0x3, "5908800842826549898a3cc6e65f831df6fd7bff63258c0d526e86e41e0e26b90e9738b1ee8a2276daea89fcfa1c92a8423a9ad28c2ae74a504f1e6f2e29f61c3ca20040c3627453af19b100ef3094f865b872efcb299acdc944845cfd741a9182346b4b57a62e16184d420a51f6ee5ebcbb3ba0b4ea1328d287f1d36b274ac5388318efcfb285f7"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x4, 0x9, 0x9}]}, 0x4, [{0x4, &(0x7f0000001040)=@lang_id={0x4, 0x3, 0xc0c}}, {0x4, &(0x7f0000001080)=@lang_id={0x4}}, {0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0xc0a}}, {0x61, &(0x7f0000001100)=@string={0x61, 0x3, "2fd96aa4635079d88eda1f384408f3725b3b0560dde046726c381b7c9d1aba157d72ace5c5e714676fbeb7dd9319418e527f0a7af4796bba8a9329798fd702fdeb540ce6a6c8faa0bc5adf3ce581237b204b1387f30eaa426927d49151edb4"}}]}) syz_usb_control_io$printer(r5, &(0x7f0000001340)={0x14, &(0x7f0000001200)={0x20, 0x9, 0xbe, {0xbe, 0xd, "16ed657041e3ae5f4ffd510d89fa33480f75cd55bc2fc8fbfe058e5484183fcdc8c35f248297bce51d552bbda5e81297550e9e554c25883cd4e450d6b63531673dccdc514a234e407ddb357e4d4483580ead5cd73edfe24cf7d57cdea02ccf44077565d935fdf40d3876fc02b5d243ddba6178ee3a697a7de35dceaf923669b4202fff5c27171bd88e32b6f0773f029401162644d9d63e11ecaa76f7385e5cb7dd82132eec50ef6ded133f859391a11dade64292101c0ab0ba29dae6"}}, &(0x7f0000001300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x443}}}, &(0x7f0000001540)={0x34, &(0x7f0000001380)=ANY=[@ANYBLOB="004625000000da1dd045cf3c56c34636c4a37c8128800f763148d73153fb8002807c194222e3ee305db1c5"], &(0x7f00000013c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000001400)={0x0, 0x8, 0x1}, &(0x7f0000001440)={0x20, 0x0, 0x69, {0x67, "8c4b655ebe615ed97a6aeb1af0aa956e3dcfafb6c52d7d80e9419f577ca1045ec462b8472f9bae5c4420a3ee6fb9caa9d9227d5c502d8b09cb4984c526f15419bb5727e088ec6e9b580146d33235948cc9da2ec0d1076c4fa395431686f572e3302337c2c8dbdc"}}, &(0x7f00000014c0)={0x20, 0x1, 0x1, 0x80}, &(0x7f0000001500)={0x20, 0x0, 0x1, 0x6}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18040000ffffffff0000000000000000540201000000000095"], &(0x7f0000000040)='GPL\x00'}, 0x94) 1.751036ms ago: executing program 6 (id=8830): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x10004, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000200)={0x100, r2}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x70bd29, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0x0, 0x70000}, [@IFAL_LABEL={0x8, 0x2, 0x3}, @IFAL_ADDRESS={0x14, 0x1, @remote}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4004050) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000600)=0x3) ioctl$PPPIOCSNPMODE(r4, 0x4008744b, &(0x7f0000000100)={0x21}) ioctl$DRM_IOCTL_MAP_BUFS(0xffffffffffffffff, 0xc0186419, &(0x7f0000000e00)={0x9, &(0x7f0000000640)=""/189, &(0x7f0000000d00)=[{0x4, 0x6c, 0x3ff, &(0x7f0000000700)=""/108}, {0x7f, 0x93, 0x7, &(0x7f0000000780)=""/147}, {0x1, 0x66, 0x0, &(0x7f0000000840)=""/102}, {0x8, 0xba, 0x100, &(0x7f00000008c0)=""/186}, {0x1, 0x13, 0x3, &(0x7f0000000980)=""/19}, {0x6, 0x9d, 0x7, &(0x7f00000009c0)=""/157}, {0x8, 0xfa, 0xe8, &(0x7f0000000b40)=""/250}, {0xffff9c4c, 0x65, 0x8, &(0x7f0000000c40)=""/101}, {0xa, 0x3e, 0x0, &(0x7f0000000cc0)=""/62}]}) r5 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f0000000000)={0x3, 0x0, 0x84, 0x1ff, "b75fc47f994d6d4056b9b835c0a50300000000000000f007512701d3987e5821"}) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000e80)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x2}, {0xffff, 0xffff}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r2}, 0x8) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xa, &(0x7f0000000ec0)=ANY=[@ANYRES32=0x0, @ANYRES32=r2, @ANYRES8=r7, @ANYRES8, @ANYRESOCT=r8, @ANYRES64=r0, @ANYBLOB="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", @ANYBLOB="6c2edd392aa715610fed22b28970c45f2ed71b7406035694355e0382bf28880cf6c660aed5134db2d9d3e7b394aaa502f2b779e393b14d722cad3a1787a47a68f3fefdbf4537e07a2065a6c41e93a452e71be338b6d951b6491372d018b4135e2b9bd2674be873977ccd5dab9a29db67ca7810fd4c1af071df7191c66bcd782aac0091a72974e217e6382aaf6f5acfa5fb49618ca3025b0389071c992384e9bce8db89d75deb31d90f807812e8dc07326b3f56a15561ca6b6d1477c3db1722a58bc51cfd5fb9ba0862a5f6bbef6fff6677e6469c4426f0cdb086a83add5c5eef093b4b5c88706cdb200bd40c31f61c48053b34224773cc2f", @ANYRESDEC, @ANYRESOCT=0x0], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r8, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x445b}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r9, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f0000000300)=[0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x16, &(0x7f0000000400)=[{}, {}, {}], 0x18, 0x0, 0x0, 0x0, 0x0, 0x43, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) close(r2) umount2(&(0x7f0000000080)='./file0\x00', 0x3) 0s ago: executing program 0 (id=8831): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$inet6(r1, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x0, 0xc, @empty, 0xe2dc}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x33, 0x2, 0x2, 0x40, 0x0, [@mcast1]}}}], 0x28}, 0x20040040) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x20402) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x4) write$evdev(r2, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x14, 0xa, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r0, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1}, 0x1ff}, {{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f00000001c0)=""/177, 0xb1}, {&(0x7f0000002b40)=""/4101, 0x1005}, {&(0x7f0000002840)=""/122, 0x7a}, {&(0x7f00000028c0)=""/89, 0x59}, {&(0x7f0000001440)=""/131, 0x83}, {&(0x7f0000002a00)=""/31, 0x1f}, {&(0x7f0000002a40)=""/31, 0x1f}, {&(0x7f0000002a80)=""/28, 0x1c}], 0x8}, 0x1}, {{0x0, 0x0, 0x0}, 0x7f}, {{0x0, 0x0, 0x0}, 0x404}], 0x4, 0x20, 0x0) kernel console output (not intermixed with test programs): eed USB device number 91 using dummy_hcd [ 1648.816890][ T5618] usb 8-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1648.827304][ T5618] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1648.834022][ T5618] usb 8-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 1648.843287][ T5618] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1648.853875][ T5618] usb 8-1: config 0 descriptor?? [ 1649.266197][ T5618] corsair-psu 0003:1B1C:1C09.004F: unknown main item tag 0x0 [ 1649.274049][ T5618] corsair-psu 0003:1B1C:1C09.004F: unknown main item tag 0x0 [ 1649.281861][ T5618] corsair-psu 0003:1B1C:1C09.004F: unknown main item tag 0x0 [ 1649.289772][ T5618] corsair-psu 0003:1B1C:1C09.004F: unknown main item tag 0x0 [ 1649.297696][ T5618] corsair-psu 0003:1B1C:1C09.004F: unknown main item tag 0x0 [ 1649.308842][ T5618] corsair-psu 0003:1B1C:1C09.004F: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.7-1/input0 [ 1649.386500][ T5618] corsair-psu 0003:1B1C:1C09.004F: unable to initialize device (-38) [ 1649.397293][ T5618] corsair-psu 0003:1B1C:1C09.004F: probe with driver corsair-psu failed with error -38 [ 1649.471478][ T347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1649.481595][ T347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1649.499278][ T347] netlink: 'syz.7.8394': attribute type 46 has an invalid length. [ 1649.564581][T26908] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1649.576107][ T5618] usb 8-1: USB disconnect, device number 91 [ 1649.724275][T26908] usb 3-1: Using ep0 maxpacket: 16 [ 1649.731891][T26908] usb 3-1: config 127 has an invalid interface number: 27 but max is 1 [ 1649.740505][T26908] usb 3-1: config 127 contains an unexpected descriptor of type 0x1, skipping [ 1649.750496][T26908] usb 3-1: config 127 has an invalid interface number: 140 but max is 1 [ 1649.759195][T26908] usb 3-1: config 127 has an invalid interface number: 76 but max is 1 [ 1649.767583][T26908] usb 3-1: config 127 contains an unexpected descriptor of type 0x1, skipping [ 1649.776519][T26908] usb 3-1: config 127 has 3 interfaces, different from the descriptor's value: 2 [ 1649.786859][T26908] usb 3-1: config 127 has no interface number 0 [ 1649.793171][T26908] usb 3-1: config 127 has no interface number 1 [ 1649.799489][T26908] usb 3-1: config 127 has no interface number 2 [ 1649.805826][T26908] usb 3-1: config 127 interface 27 altsetting 10 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 1649.817111][T26908] usb 3-1: config 127 interface 27 altsetting 10 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 1649.828297][T26908] usb 3-1: config 127 interface 27 altsetting 10 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 1649.839558][T26908] usb 3-1: config 127 interface 27 altsetting 10 has a duplicate endpoint with address 0x6, skipping [ 1649.850627][T26908] usb 3-1: config 127 interface 27 altsetting 10 bulk endpoint 0xB has invalid maxpacket 64 [ 1649.861026][T26908] usb 3-1: config 127 interface 27 altsetting 10 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 1649.872421][T26908] usb 3-1: config 127 interface 27 altsetting 10 has a duplicate endpoint with address 0xB, skipping [ 1649.883407][T26908] usb 3-1: config 127 interface 27 altsetting 10 has an endpoint descriptor with address 0x36, changing to 0x6 [ 1649.895395][T26908] usb 3-1: config 127 interface 27 altsetting 10 has a duplicate endpoint with address 0x6, skipping [ 1649.906521][T26908] usb 3-1: config 127 interface 27 altsetting 10 has 10 endpoint descriptors, different from the interface descriptor's value: 12 [ 1649.920459][T26908] usb 3-1: too many endpoints for config 127 interface 140 altsetting 22: 217, using maximum allowed: 30 [ 1649.931978][T26908] usb 3-1: config 127 interface 140 altsetting 22 has an endpoint descriptor with address 0x2E, changing to 0xE [ 1649.944248][T26908] usb 3-1: config 127 interface 140 altsetting 22 has a duplicate endpoint with address 0xE, skipping [ 1649.955486][T26908] usb 3-1: config 127 interface 140 altsetting 22 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 1649.967141][T26908] usb 3-1: config 127 interface 140 altsetting 22 has 3 endpoint descriptors, different from the interface descriptor's value: 217 [ 1649.980880][T20559] misc userio: Buffer overflowed, userio client isn't keeping up [ 1649.989415][T26908] usb 3-1: config 127 interface 76 altsetting 4 has a duplicate endpoint with address 0xE, skipping [ 1650.003874][T26908] usb 3-1: config 127 interface 76 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 1650.014849][T26908] usb 3-1: config 127 interface 76 altsetting 4 has a duplicate endpoint with address 0xC, skipping [ 1650.025828][T26908] usb 3-1: config 127 interface 76 altsetting 4 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 1650.036862][T26908] usb 3-1: config 127 interface 76 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 1650.048390][T26908] usb 3-1: config 127 interface 76 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 1650.059873][T26908] usb 3-1: config 127 interface 76 altsetting 4 has a duplicate endpoint with address 0x1, skipping [ 1650.071486][T26908] usb 3-1: config 127 interface 76 altsetting 4 has a duplicate endpoint with address 0xF, skipping [ 1650.083224][T26908] usb 3-1: config 127 interface 27 has no altsetting 0 [ 1650.090259][T26908] usb 3-1: config 127 interface 140 has no altsetting 0 [ 1650.097478][T26908] usb 3-1: config 127 interface 76 has no altsetting 0 [ 1650.106553][T26908] usb 3-1: Dual-Role OTG device on HNP port [ 1650.113073][T26908] usb 3-1: New USB device found, idVendor=19d2, idProduct=ff45, bcdDevice=43.87 [ 1650.122241][T26908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1650.130394][T26908] usb 3-1: Product: syz [ 1650.134761][T26908] usb 3-1: Manufacturer: syz [ 1650.139418][T26908] usb 3-1: SerialNumber: syz [ 1650.148531][ T350] raw-gadget.26 gadget.2: fail, usb_ep_enable returned -22 [ 1650.236637][ T361] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8399'. [ 1650.350507][ T362] bond3: option min_links: invalid value (18446744073709551608) [ 1650.358460][ T362] bond3: option min_links: allowed values 0 - 2147483647 [ 1650.371589][ T362] bond3 (unregistering): Released all slaves [ 1651.005298][ T29] audit: type=1800 audit(1781308666.663:3340): pid=374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.8401" name="SYSV00000000" dev="hugetlbfs" ino=5 res=0 errno=0 [ 1651.112938][T20559] input: PS/2 Generic Mouse as /devices/serio5/input/input294 [ 1651.354267][T20559] psmouse serio5: Failed to enable mouse on [ 1652.367220][T26908] option 3-1:127.27: GSM modem (1-port) converter detected [ 1652.370468][ T398] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1652.418558][T26908] usb 3-1: USB disconnect, device number 9 [ 1652.449603][T26908] option 3-1:127.27: device disconnected [ 1652.611976][ T29] audit: type=1800 audit(1781308668.263:3341): pid=407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.8413" name="SYSV00000000" dev="hugetlbfs" ino=7 res=0 errno=0 [ 1652.879446][ T418] netlink: 'syz.2.8416': attribute type 15 has an invalid length. [ 1652.902794][ T418] netlink: 666 bytes leftover after parsing attributes in process `syz.2.8416'. [ 1652.934877][ T418] netlink: 'syz.2.8416': attribute type 1 has an invalid length. [ 1652.958091][ T422] program syz.0.8419 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1652.999397][ T29] audit: type=1326 audit(1781308668.653:3342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=425 comm="syz.1.8421" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaf019ce59 code=0x7ffc0000 [ 1653.027950][ T29] audit: type=1326 audit(1781308668.653:3343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=425 comm="syz.1.8421" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaf019ce59 code=0x7ffc0000 [ 1653.053355][ T29] audit: type=1326 audit(1781308668.653:3344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=425 comm="syz.1.8421" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaf019ce59 code=0x7ffc0000 [ 1653.079826][ T29] audit: type=1326 audit(1781308668.653:3345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=425 comm="syz.1.8421" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7fcaf019ce59 code=0x7ffc0000 [ 1653.104546][ T29] audit: type=1326 audit(1781308668.653:3346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=425 comm="syz.1.8421" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaf019ce59 code=0x7ffc0000 [ 1653.129814][ T29] audit: type=1326 audit(1781308668.653:3347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=425 comm="syz.1.8421" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaf019ce59 code=0x7ffc0000 [ 1653.154536][ T29] audit: type=1326 audit(1781308668.653:3348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=425 comm="syz.1.8421" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaf019ce59 code=0x7ffc0000 [ 1653.182569][ T29] audit: type=1326 audit(1781308668.653:3349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=425 comm="syz.1.8421" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaf019ce59 code=0x7ffc0000 [ 1653.233424][ T427] could not allocate digest TFM handle sha3-224-ce [ 1653.277251][ T433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1653.293429][ T433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1653.855553][ T449] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8428'. [ 1653.890132][ T449] ip6tnl4: entered promiscuous mode [ 1654.274268][T30036] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1654.416669][ T462] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 1654.423281][ T462] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1654.438623][T30036] usb 3-1: Using ep0 maxpacket: 8 [ 1654.453030][T30036] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1654.462939][T30036] usb 3-1: config 4 has an invalid interface number: 163 but max is 0 [ 1654.471893][T30036] usb 3-1: config 4 has no interface number 0 [ 1654.479306][T30036] usb 3-1: config 4 interface 163 has no altsetting 0 [ 1654.489973][ T462] vhci_hcd vhci_hcd.0: Device attached [ 1654.498603][T30036] usb 3-1: New USB device found, idVendor=106c, idProduct=caa3, bcdDevice=49.b0 [ 1654.508232][T30036] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1654.516749][T30036] usb 3-1: Product: syz [ 1654.521325][T30036] usb 3-1: Manufacturer: syz [ 1654.526378][T30036] usb 3-1: SerialNumber: syz [ 1654.704342][T26908] usb 8-1: new high-speed USB device number 92 using dummy_hcd [ 1654.724224][ T5618] usb 47-1: new low-speed USB device number 2 using vhci_hcd [ 1654.741965][T30036] qmi_wwan 3-1:4.163: bogus CDC Union: master=0, slave=0 [ 1654.755419][T30036] qmi_wwan 3-1:4.163: probe with driver qmi_wwan failed with error -22 [ 1654.773490][T30036] usb 3-1: USB disconnect, device number 10 [ 1654.864187][T26908] usb 8-1: Using ep0 maxpacket: 8 [ 1654.869615][ T467] syzkaller0: entered promiscuous mode [ 1654.871101][T26908] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 1654.878310][ T467] syzkaller0: entered allmulticast mode [ 1654.883487][T26908] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1654.901050][T26908] usb 8-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 1654.910493][T26908] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1654.919685][T26908] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1654.952527][ T467] tipc: Enabled bearer , priority 0 [ 1654.967372][ T466] tipc: Resetting bearer [ 1655.025160][ T466] tipc: Disabling bearer [ 1655.172178][ T463] usbip_core: unknown command [ 1655.173752][T30036] usb 8-1: USB disconnect, device number 92 [ 1655.177147][ T463] vhci_hcd: unknown pdu 3992977411 [ 1655.190169][ T463] usbip_core: unknown command [ 1655.202742][T30878] vhci_hcd vhci_hcd.7: stop threads [ 1655.208722][T30878] vhci_hcd vhci_hcd.7: release socket [ 1655.214469][T30878] vhci_hcd vhci_hcd.7: disconnect device [ 1656.024317][T30036] usb 8-1: new high-speed USB device number 93 using dummy_hcd [ 1656.048525][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 1656.048543][ T29] audit: type=1800 audit(1781308671.703:3400): pid=481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.8437" name="SYSV00000000" dev="hugetlbfs" ino=9 res=0 errno=0 [ 1656.083707][ T484] input: syz0 as /devices/virtual/input/input295 [ 1656.177494][T30036] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1656.190365][T30036] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1656.205065][T30036] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1656.214694][T30036] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1656.232097][ T478] raw-gadget.14 gadget.7: fail, usb_ep_enable returned -22 [ 1656.251424][T30036] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1656.438075][ T490] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1656.473679][ T478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1656.495784][ T478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1656.718156][ T478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1656.755781][ T478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1656.769953][ T496] hsr0: entered promiscuous mode [ 1656.789742][ T478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1656.794797][ T495] hsr0: left promiscuous mode [ 1656.817181][ T478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1657.016160][T26908] usb 8-1: USB disconnect, device number 93 [ 1657.665929][ T29] audit: type=1800 audit(1781308673.323:3401): pid=516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.8449" name="SYSV00000000" dev="hugetlbfs" ino=6 res=0 errno=0 [ 1657.724333][T30037] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1657.877530][T30037] usb 3-1: Using ep0 maxpacket: 16 [ 1657.889001][T30037] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1657.899665][T30037] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1657.913709][T30037] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1657.923568][T30037] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1657.933465][T30037] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1657.948649][T30037] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1657.961215][T30037] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1657.969353][T30037] usb 3-1: Manufacturer: syz [ 1657.976822][T30037] usb 3-1: config 0 descriptor?? [ 1658.101818][ T529] netlink: 68 bytes leftover after parsing attributes in process `syz.7.8454'. [ 1658.244180][T30037] rc_core: IR keymap rc-hauppauge not found [ 1658.250238][T30037] Registered IR keymap rc-empty [ 1658.257223][T30037] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1658.284261][T30037] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1658.304870][T30037] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1658.317884][T30037] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input296 [ 1658.332608][T30037] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1658.354271][T30037] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1658.354276][T26908] usb 8-1: new high-speed USB device number 94 using dummy_hcd [ 1658.384224][T30037] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1658.404239][T30037] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1658.424410][T30037] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1658.440190][ T532] netlink: 272 bytes leftover after parsing attributes in process `syz.2.8446'. [ 1658.453219][T30037] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1658.474268][T30037] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1658.483081][ T508] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.8446'. [ 1658.495242][T30037] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1658.508786][ T508] veth0_to_bond: default FDB implementation only supports local addresses [ 1658.518952][T26908] usb 8-1: Using ep0 maxpacket: 8 [ 1658.525861][T30037] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1658.533609][T26908] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 1658.543121][T26908] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1658.544272][T30037] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1658.553315][T26908] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1658.570390][T26908] usb 8-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1658.576788][T30037] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 1658.590564][T26908] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1658.595787][T30037] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1658.603856][T26908] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1658.622906][T26908] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1658.641202][T26908] usbtmc 8-1:16.0: bulk endpoints not found [ 1658.966824][T30037] usb 3-1: USB disconnect, device number 11 [ 1659.216023][ T538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1659.226341][ T538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1659.874245][ T5618] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 1659.919116][ T29] audit: type=1800 audit(1781308675.573:3402): pid=550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.8460" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 1660.924303][T26908] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1660.980786][ T29] audit: type=1326 audit(1781308676.633:3403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=566 comm="syz.1.8467" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaf019ce59 code=0x7ffc0000 [ 1661.009308][ T29] audit: type=1326 audit(1781308676.663:3404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=566 comm="syz.1.8467" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaf019ce59 code=0x7ffc0000 [ 1661.035429][ T29] audit: type=1326 audit(1781308676.683:3405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=566 comm="syz.1.8467" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fcaf019ce59 code=0x7ffc0000 [ 1661.050541][ T563] hsr0: entered promiscuous mode [ 1661.059886][ T29] audit: type=1326 audit(1781308676.693:3406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=566 comm="syz.1.8467" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaf019ce59 code=0x7ffc0000 [ 1661.089452][T26908] usb 3-1: device descriptor read/64, error -71 [ 1661.095999][ T29] audit: type=1326 audit(1781308676.693:3407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=566 comm="syz.1.8467" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaf019ce59 code=0x7ffc0000 [ 1661.121009][ T29] audit: type=1326 audit(1781308676.693:3408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=566 comm="syz.1.8467" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcaf015d68e code=0x7ffc0000 [ 1661.147741][ T29] audit: type=1326 audit(1781308676.693:3409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=566 comm="syz.1.8467" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcaf019caeb code=0x7ffc0000 [ 1661.172042][ T29] audit: type=1326 audit(1781308676.803:3410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=566 comm="syz.1.8467" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcaf019caeb code=0x7ffc0000 [ 1661.177520][ T560] hsr0: left promiscuous mode [ 1661.196444][ T567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1661.197878][ T567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1661.220053][ T29] audit: type=1326 audit(1781308676.873:3411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=566 comm="syz.1.8467" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaf019ce59 code=0x7ffc0000 [ 1661.245809][ T29] audit: type=1326 audit(1781308676.903:3412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=566 comm="syz.1.8467" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaf019ce59 code=0x7ffc0000 [ 1661.270200][ T29] audit: type=1326 audit(1781308676.903:3413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=566 comm="syz.1.8467" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcaf019ce59 code=0x7ffc0000 [ 1661.296192][ T29] audit: type=1326 audit(1781308676.903:3414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=566 comm="syz.1.8467" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaf019ce59 code=0x7ffc0000 [ 1661.320760][ T29] audit: type=1326 audit(1781308676.903:3415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=566 comm="syz.1.8467" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcaf019ce59 code=0x7ffc0000 [ 1661.341201][ T5618] usb 8-1: USB disconnect, device number 94 [ 1661.354751][T26908] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1661.419942][ T571] netlink: 32 bytes leftover after parsing attributes in process `syz.7.8468'. [ 1661.438826][ T571] ip6tnl3: entered promiscuous mode [ 1661.484675][T26908] usb 3-1: device descriptor read/64, error -71 [ 1661.594826][T26908] usb usb3-port1: attempt power cycle [ 1661.784489][ T5618] usb 8-1: new high-speed USB device number 95 using dummy_hcd [ 1661.935531][T26908] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1661.936072][ T5618] usb 8-1: config index 0 descriptor too short (expected 3133, got 61) [ 1661.953343][ T5618] usb 8-1: config 0 has an invalid interface number: 156 but max is 1 [ 1661.955395][T26908] usb 3-1: device descriptor read/8, error -71 [ 1661.961736][ T5618] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1661.978942][ T5618] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1661.988328][ T5618] usb 8-1: config 0 has no interface number 0 [ 1661.994720][ T5618] usb 8-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1662.005190][ T5618] usb 8-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1662.016300][ T5618] usb 8-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1662.026527][ T5618] usb 8-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1662.039808][ T5618] usb 8-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1662.048936][ T5618] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1662.059816][ T5618] usb 8-1: config 0 descriptor?? [ 1662.082401][ T5618] gspca_main: spca561-2.14.0 probing abcd:cdee [ 1662.207658][T26908] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1662.234858][T26908] usb 3-1: device descriptor read/8, error -71 [ 1662.301348][ T587] netlink: 'syz.1.8474': attribute type 15 has an invalid length. [ 1662.309793][ T587] netlink: 666 bytes leftover after parsing attributes in process `syz.1.8474'. [ 1662.323032][ T587] netlink: 'syz.1.8474': attribute type 1 has an invalid length. [ 1662.333355][ T5618] spca561 8-1:0.156: probe with driver spca561 failed with error -22 [ 1662.344599][T26908] usb usb3-port1: unable to enumerate USB device [ 1662.355445][ T5618] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1662.362592][ T5618] usb 8-1: MIDIStreaming interface descriptor not found [ 1662.456316][ T5618] usb 8-1: USB disconnect, device number 95 [ 1663.124337][T26908] usb 8-1: new high-speed USB device number 96 using dummy_hcd [ 1663.170157][ T601] hsr0: entered promiscuous mode [ 1663.177057][ T600] hsr0: left promiscuous mode [ 1663.254283][T26908] usb 8-1: device descriptor read/64, error -71 [ 1663.281692][ T604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1663.291532][ T604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1663.494416][T26908] usb 8-1: new high-speed USB device number 97 using dummy_hcd [ 1663.637625][T26908] usb 8-1: device descriptor read/64, error -71 [ 1663.755564][T26908] usb usb8-port1: attempt power cycle [ 1663.986270][T20559] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1664.028715][ T615] netlink: 'syz.1.8483': attribute type 12 has an invalid length. [ 1664.104323][T26908] usb 8-1: new high-speed USB device number 98 using dummy_hcd [ 1664.120398][ T616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1664.129843][ T616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1664.139755][T26908] usb 8-1: device descriptor read/8, error -71 [ 1664.155365][T20559] usb 3-1: Using ep0 maxpacket: 16 [ 1664.165365][T20559] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 1664.173868][T20559] usb 3-1: config 0 has no interface number 0 [ 1664.180417][T20559] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1664.192160][T20559] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 33022, setting to 1024 [ 1664.206406][T20559] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1664.216507][T20559] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1664.225127][T20559] usb 3-1: Product: syz [ 1664.229749][T20559] usb 3-1: SerialNumber: syz [ 1664.242361][T20559] usb 3-1: config 0 descriptor?? [ 1664.253693][T20559] cm109 3-1:0.8: invalid payload size 1024, expected 4 [ 1664.272806][T20559] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input297 [ 1664.384213][T26908] usb 8-1: new high-speed USB device number 99 using dummy_hcd [ 1664.414865][T26908] usb 8-1: device descriptor read/8, error -71 [ 1664.524600][T26908] usb usb8-port1: unable to enumerate USB device [ 1664.557266][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1664.557661][ T5618] usb 3-1: USB disconnect, device number 16 [ 1664.564265][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1664.599517][ T5618] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1665.179139][ T624] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8485'. [ 1665.190599][ T624] syzkaller0: entered promiscuous mode [ 1665.196455][ T624] syzkaller0: entered allmulticast mode [ 1665.614265][T26908] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 1665.776146][T26908] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1665.788174][T26908] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1665.799546][T26908] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1665.809095][T26908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1665.821497][ T626] raw-gadget.12 gadget.2: fail, usb_ep_enable returned -22 [ 1665.829472][ T626] raw-gadget.12 gadget.2: fail, usb_ep_enable returned -22 [ 1665.840358][T26908] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1665.958219][ T630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1665.969927][ T630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1666.077777][ T5618] usb 3-1: USB disconnect, device number 17 [ 1666.344230][T26908] usb 8-1: new high-speed USB device number 100 using dummy_hcd [ 1666.494219][T26908] usb 8-1: Using ep0 maxpacket: 32 [ 1666.501192][T26908] usb 8-1: config 1 has an invalid descriptor of length 238, skipping remainder of the config [ 1666.512047][T26908] usb 8-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1666.525513][T26908] usb 8-1: config 1 interface 0 has no altsetting 0 [ 1666.534761][T26908] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1666.544316][T26908] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1666.552678][T26908] usb 8-1: Product: syz [ 1666.556959][T26908] usb 8-1: Manufacturer: syz [ 1666.561905][T26908] usb 8-1: SerialNumber: syz [ 1666.772697][T26908] cdc_ether 8-1:1.0: skipping garbage [ 1666.781246][T26908] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -22 [ 1666.793883][T26908] usb 8-1: USB disconnect, device number 100 [ 1667.139457][ T29] kauditd_printk_skb: 123 callbacks suppressed [ 1667.139474][ T29] audit: type=1800 audit(1781308682.793:3539): pid=647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.8493" name="SYSV00000000" dev="hugetlbfs" ino=12 res=0 errno=0 [ 1667.297653][ T29] audit: type=1326 audit(1781308682.953:3540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=653 comm="syz.0.8495" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6209d9ce59 code=0x7ffc0000 [ 1667.324434][ T29] audit: type=1326 audit(1781308682.983:3541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=653 comm="syz.0.8495" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6209d9ce59 code=0x7ffc0000 [ 1667.353933][ T29] audit: type=1326 audit(1781308683.013:3542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=653 comm="syz.0.8495" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f6209d9ce59 code=0x7ffc0000 [ 1667.379712][ T29] audit: type=1326 audit(1781308683.013:3543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=653 comm="syz.0.8495" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6209d9ce59 code=0x7ffc0000 [ 1667.409582][ T29] audit: type=1326 audit(1781308683.013:3544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=653 comm="syz.0.8495" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6209d9ce59 code=0x7ffc0000 [ 1667.434919][ T29] audit: type=1326 audit(1781308683.043:3545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=653 comm="syz.0.8495" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6209d5d68e code=0x7ffc0000 [ 1667.461389][ T29] audit: type=1326 audit(1781308683.063:3546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=653 comm="syz.0.8495" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6209d9caeb code=0x7ffc0000 [ 1667.486912][ T29] audit: type=1326 audit(1781308683.063:3547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=653 comm="syz.0.8495" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6209d9caeb code=0x7ffc0000 [ 1667.512204][ T29] audit: type=1326 audit(1781308683.123:3548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=653 comm="syz.0.8495" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6209d9caeb code=0x7ffc0000 [ 1667.580456][ T656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1667.594222][ T656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1668.263936][ T676] netlink: 'syz.7.8501': attribute type 1 has an invalid length. [ 1668.334985][ T676] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1668.400227][ T681] bond3: (slave veth5): Enslaving as a backup interface with a down link [ 1668.495517][ T684] netlink: 'syz.2.8503': attribute type 12 has an invalid length. [ 1668.751849][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.758299][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.904498][T20559] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1669.064193][T20559] usb 3-1: Using ep0 maxpacket: 32 [ 1669.071438][T20559] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1669.085325][T20559] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1669.097633][T20559] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1669.109371][T20559] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1669.133420][T20559] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1669.144490][T20559] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1669.152543][T20559] usb 3-1: Product: syz [ 1669.157184][T20559] usb 3-1: Manufacturer: syz [ 1669.161804][T20559] usb 3-1: SerialNumber: syz [ 1669.177422][ C1] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1669.187542][T20559] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input298 [ 1669.371626][ T694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1669.385076][ T694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1669.394986][T20559] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1669.403581][T20559] (id 0x00) [ 1669.494266][T20559] rc_core: IR keymap rc-imon-pad not found [ 1669.500358][T20559] Registered IR keymap rc-empty [ 1669.506240][T20559] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1669.517032][T20559] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1669.560516][ T700] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8507'. [ 1669.635481][T20559] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 1669.648698][T20559] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input299 [ 1669.662352][T20559] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:18> initialized [ 1669.697598][ T701] netlink: 36 bytes leftover after parsing attributes in process `syz.7.8507'. [ 1669.768590][ T703] netlink: 27 bytes leftover after parsing attributes in process `syz.6.8508'. [ 1670.139574][ T716] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8513'. [ 1670.363924][ T722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1670.393199][ T722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1671.027929][ T729] hsr0: entered promiscuous mode [ 1671.038849][ T728] hsr0: left promiscuous mode [ 1671.406313][ T5618] usb 3-1: USB disconnect, device number 18 [ 1671.570183][ T756] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8528'. [ 1671.637050][ T763] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8531'. [ 1671.712796][ T764] netlink: 36 bytes leftover after parsing attributes in process `syz.7.8531'. [ 1671.874223][ T5618] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1672.014249][ T5618] usb 3-1: device descriptor read/64, error -71 [ 1672.277575][ T5618] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1672.385471][T29026] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1672.403250][T29026] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1672.417632][T29026] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1672.432453][T29026] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1672.440425][T29026] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1672.454252][ T5618] usb 3-1: device descriptor read/64, error -71 [ 1672.568812][ T5618] usb usb3-port1: attempt power cycle [ 1672.806476][ T771] bridge0: port 1(bridge_slave_0) entered blocking state [ 1672.813826][ T771] bridge0: port 1(bridge_slave_0) entered disabled state [ 1672.821993][ T771] bridge_slave_0: entered allmulticast mode [ 1672.830558][ T771] bridge_slave_0: entered promiscuous mode [ 1672.842409][ T771] bridge0: port 2(bridge_slave_1) entered blocking state [ 1672.850164][ T771] bridge0: port 2(bridge_slave_1) entered disabled state [ 1672.858726][ T771] bridge_slave_1: entered allmulticast mode [ 1672.867067][ T771] bridge_slave_1: entered promiscuous mode [ 1672.912320][ T771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1672.921689][ T5618] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1672.934818][ T771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1672.947200][ T5618] usb 3-1: device descriptor read/8, error -71 [ 1673.045519][ T771] team0: Port device team_slave_0 added [ 1673.053372][ T771] team0: Port device team_slave_1 added [ 1673.079698][ T771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1673.086985][ T771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1673.113335][ T771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1673.126288][ T771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1673.133259][ T771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1673.162979][ T771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1673.203695][ T771] hsr_slave_0: entered promiscuous mode [ 1673.210148][ T771] hsr_slave_1: entered promiscuous mode [ 1673.216506][ T5618] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1673.225364][ T771] debugfs: 'hsr0' already exists in 'hsr' [ 1673.231340][ T771] Cannot create hsr debugfs directory [ 1673.256127][ T5618] usb 3-1: device descriptor read/8, error -71 [ 1673.385565][ T5618] usb usb3-port1: unable to enumerate USB device [ 1673.505050][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 1673.505067][ T29] audit: type=1800 audit(1781308689.163:3564): pid=792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.8538" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 1673.566754][ T792] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8538'. [ 1673.910602][ T771] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1673.921613][ T771] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1673.929733][ T771] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1673.940239][ T771] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1673.948559][ T771] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1673.959527][ T771] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1673.967944][ T771] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1673.978556][ T771] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1674.071478][ T771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1674.094769][ T771] 8021q: adding VLAN 0 to HW filter on device team0 [ 1674.111922][T13543] bridge0: port 1(bridge_slave_0) entered blocking state [ 1674.119200][T13543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1674.133319][T27974] bridge0: port 2(bridge_slave_1) entered blocking state [ 1674.140598][T27974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1674.228800][ T771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1674.268784][ T771] veth0_vlan: entered promiscuous mode [ 1674.279755][ T771] veth1_vlan: entered promiscuous mode [ 1674.310380][ T771] veth0_macvtap: entered promiscuous mode [ 1674.320188][ T771] veth1_macvtap: entered promiscuous mode [ 1674.336747][ T771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1674.352333][ T771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1674.367465][T30878] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1674.378780][T30878] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1674.391296][T30878] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1674.400487][T30878] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1674.505942][T29026] Bluetooth: hci4: command tx timeout [ 1674.622456][T30878] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1674.632753][T30878] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1674.672444][T27968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1674.681163][T27968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1674.700747][ T808] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8541'. [ 1675.015744][ T821] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8543'. [ 1675.087962][ T822] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8543'. [ 1675.146475][ T29] audit: type=1800 audit(1781308690.803:3565): pid=825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.8548" name="SYSV00000000" dev="hugetlbfs" ino=8 res=0 errno=0 [ 1675.174307][T20558] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 1675.346340][T20558] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1675.355574][T20558] usb 2-1: config 1 has no interface number 0 [ 1675.361945][T20558] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1675.374995][T20558] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1675.389016][T20558] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1675.398459][T20558] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1675.410029][T20558] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 65535, setting to 64 [ 1675.426329][T20558] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1675.435849][T20558] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1675.446819][T20558] usb 2-1: Product: syz [ 1675.452412][T20558] usb 2-1: Manufacturer: syz [ 1675.457740][T20558] usb 2-1: SerialNumber: syz [ 1675.472702][ T819] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1675.521455][ T827] macvtap1: entered promiscuous mode [ 1675.541585][ T827] macvtap1: entered allmulticast mode [ 1675.597011][ T827] veth1_vlan: entered allmulticast mode [ 1675.675729][ T831] macvtap2: entered promiscuous mode [ 1675.681132][ T831] macvtap2: entered allmulticast mode [ 1675.689634][ T815] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1675.699635][ T815] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1675.856751][ T841] fuse: Bad value for 'fd' [ 1675.872870][ T29] audit: type=1326 audit(1781308691.523:3566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=840 comm="syz.2.8552" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfc7b9ce59 code=0x7ffc0000 [ 1675.899775][ T29] audit: type=1326 audit(1781308691.553:3567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=840 comm="syz.2.8552" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfc7b9ce59 code=0x7ffc0000 [ 1675.916471][ T815] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1675.926402][ T29] audit: type=1326 audit(1781308691.583:3568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=840 comm="syz.2.8552" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fcfc7b9ce59 code=0x7ffc0000 [ 1675.963221][ T29] audit: type=1326 audit(1781308691.583:3569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=840 comm="syz.2.8552" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfc7b9ce59 code=0x7ffc0000 [ 1675.989519][ T29] audit: type=1326 audit(1781308691.583:3570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=840 comm="syz.2.8552" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfc7b9ce59 code=0x7ffc0000 [ 1676.017868][ T29] audit: type=1326 audit(1781308691.613:3571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=840 comm="syz.2.8552" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcfc7b5d68e code=0x7ffc0000 [ 1676.047611][ T29] audit: type=1326 audit(1781308691.613:3572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=840 comm="syz.2.8552" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcfc7b9caeb code=0x7ffc0000 [ 1676.073121][ T29] audit: type=1326 audit(1781308691.703:3573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=840 comm="syz.2.8552" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcfc7b9caeb code=0x7ffc0000 [ 1676.294542][T20557] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1676.357575][ T815] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1676.366353][ T815] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1676.377730][T20558] cdc_ncm 2-1:1.1: bind() failure [ 1676.466435][T20557] usb 3-1: Using ep0 maxpacket: 16 [ 1676.474230][T20557] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 1676.482579][T20557] usb 3-1: config 0 has no interface number 0 [ 1676.489634][T20557] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1676.501098][T20557] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 33022, setting to 1024 [ 1676.517031][T20557] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1676.526446][T20557] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1676.535866][T20557] usb 3-1: Product: syz [ 1676.540102][T20557] usb 3-1: SerialNumber: syz [ 1676.547647][T20557] usb 3-1: config 0 descriptor?? [ 1676.554330][T30027] usb 8-1: new high-speed USB device number 101 using dummy_hcd [ 1676.561434][T20557] cm109 3-1:0.8: invalid payload size 1024, expected 4 [ 1676.571472][T20557] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input300 [ 1676.586599][T29026] Bluetooth: hci4: command tx timeout [ 1676.609522][T27272] usb 2-1: USB disconnect, device number 67 [ 1676.707815][T30027] usb 8-1: Using ep0 maxpacket: 16 [ 1676.730830][T30027] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1676.772480][T30027] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1676.810507][T30027] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1676.854268][T30027] usb 8-1: New USB device found, idVendor=045e, idProduct=07c2, bcdDevice= 0.00 [ 1676.877830][T30027] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1676.899900][T30027] usb 8-1: config 0 descriptor?? [ 1677.267671][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1677.271354][T20563] usb 3-1: USB disconnect, device number 23 [ 1677.274694][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1677.433343][T20563] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1677.452836][ T848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1677.474718][ T848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1677.491350][ T848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1677.503278][ T848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1677.632570][T30027] usbhid 8-1:0.0: can't add hid device: -71 [ 1677.642425][T30027] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1677.780840][T30027] usb 8-1: USB disconnect, device number 101 [ 1678.217178][ T869] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8560'. [ 1678.334768][ T869] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8560'. [ 1678.417315][ T871] fuse: blksize only supported for fuseblk [ 1678.664231][T29026] Bluetooth: hci4: command tx timeout [ 1679.389263][ T891] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 1679.596388][ T882] netdevsim netdevsim7: Direct firmware load for  failed with error -2 [ 1679.654318][ T882] netdevsim netdevsim7: Falling back to sysfs fallback for:  [ 1679.739659][ T896] fuse: Bad value for 'fd' [ 1679.764055][ T29] kauditd_printk_skb: 53 callbacks suppressed [ 1679.770828][ T29] audit: type=1326 audit(1781308695.413:3627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=895 comm="syz.6.8570" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab7f9ce59 code=0x7ffc0000 [ 1679.797641][ T29] audit: type=1326 audit(1781308695.453:3628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=895 comm="syz.6.8570" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fdab7f9ce59 code=0x7ffc0000 [ 1679.825356][ T29] audit: type=1326 audit(1781308695.483:3629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=895 comm="syz.6.8570" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab7f9ce59 code=0x7ffc0000 [ 1679.849864][ T29] audit: type=1326 audit(1781308695.483:3630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=895 comm="syz.6.8570" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab7f9ce59 code=0x7ffc0000 [ 1679.874937][ T29] audit: type=1326 audit(1781308695.483:3631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=895 comm="syz.6.8570" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdab7f5d68e code=0x7ffc0000 [ 1679.901088][ T29] audit: type=1326 audit(1781308695.483:3632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=895 comm="syz.6.8570" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdab7f9caeb code=0x7ffc0000 [ 1679.926026][ T29] audit: type=1326 audit(1781308695.483:3633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=895 comm="syz.6.8570" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdab7f9caeb code=0x7ffc0000 [ 1679.966160][ T29] audit: type=1326 audit(1781308695.613:3634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=895 comm="syz.6.8570" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdab7f9caeb code=0x7ffc0000 [ 1679.991875][ T29] audit: type=1326 audit(1781308695.613:3635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=895 comm="syz.6.8570" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdab7f9caeb code=0x7ffc0000 [ 1680.744307][T29026] Bluetooth: hci4: command tx timeout [ 1680.884278][T30027] usb 8-1: new high-speed USB device number 102 using dummy_hcd [ 1681.028525][ T910] netlink: 'syz.1.8575': attribute type 2 has an invalid length. [ 1681.044220][T30027] usb 8-1: Using ep0 maxpacket: 32 [ 1681.056683][T30027] usb 8-1: config 0 has an invalid interface number: 146 but max is 0 [ 1681.071465][T30027] usb 8-1: config 0 has no interface number 0 [ 1681.078788][T30027] usb 8-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1681.093060][T30027] usb 8-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1681.106467][T30027] usb 8-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1681.118782][T30027] usb 8-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1681.131353][ T912] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8576'. [ 1681.141558][T30027] usb 8-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1681.153599][T30027] usb 8-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1681.164933][T30027] usb 8-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1681.175959][T30027] usb 8-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 29440, setting to 1024 [ 1681.187460][T30027] usb 8-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1681.198189][T30027] usb 8-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1681.213896][T30027] usb 8-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1681.224719][T30027] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1681.233095][T30027] usb 8-1: Product: syz [ 1681.237676][T30027] usb 8-1: Manufacturer: syz [ 1681.242597][T30027] usb 8-1: SerialNumber: syz [ 1681.248054][ T912] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8576'. [ 1681.250704][T30027] usb 8-1: config 0 descriptor?? [ 1681.270743][ T908] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 1681.279557][ T908] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 1681.289524][T30027] usb 8-1: will this work? Response EP is not usually 3 [ 1681.296736][T30027] usb 8-1: will this work? Image data EP is not usually 2 [ 1681.308873][T30027] scsi host1: microtekX6 [ 1681.784868][T30027] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1681.966170][T30027] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1681.977487][T30027] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1681.987527][T30027] usb 2-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1681.996808][T30027] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1682.007784][T30027] usb 2-1: config 0 descriptor?? [ 1682.436284][T30027] sony 0003:054C:024B.0050: unknown main item tag 0x0 [ 1682.454465][T30027] sony 0003:054C:024B.0050: unknown main item tag 0x0 [ 1682.461705][T30027] sony 0003:054C:024B.0050: unknown main item tag 0x0 [ 1682.469335][T30027] sony 0003:054C:024B.0050: unknown main item tag 0x0 [ 1682.477195][T30027] sony 0003:054C:024B.0050: unknown main item tag 0x0 [ 1682.484058][T30027] sony 0003:054C:024B.0050: unknown main item tag 0x0 [ 1682.491306][T30027] sony 0003:054C:024B.0050: unknown main item tag 0x0 [ 1682.499854][T30027] sony 0003:054C:024B.0050: unknown main item tag 0x0 [ 1682.512081][T30027] sony 0003:054C:024B.0050: unknown main item tag 0x0 [ 1682.519555][T30027] sony 0003:054C:024B.0050: unknown main item tag 0x0 [ 1682.535981][T30027] sony 0003:054C:024B.0050: collection stack underflow [ 1682.543087][T30027] sony 0003:054C:024B.0050: item 0 0 0 12 parsing failed [ 1682.551541][T30027] sony 0003:054C:024B.0050: parse failed [ 1682.557597][T30027] sony 0003:054C:024B.0050: probe with driver sony failed with error -22 [ 1682.668365][T20557] usb 2-1: USB disconnect, device number 68 [ 1682.834567][T30027] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1683.006100][T30027] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 1683.015150][T30027] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1683.025842][T30027] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1683.036269][T30027] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1683.047467][T30027] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1683.056186][T30027] usb 3-1: Product: syz [ 1683.060526][T30027] usb 3-1: Manufacturer: syz [ 1683.066397][T30027] usb 3-1: SerialNumber: syz [ 1683.074443][T30027] usb 3-1: config 0 descriptor?? [ 1683.087127][T30027] hub 3-1:0.0: bad descriptor, ignoring hub [ 1683.093226][T30027] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1683.105205][T30027] usb 3-1: selecting invalid altsetting 0 [ 1683.413758][ T29] audit: type=1326 audit(1781308699.063:3636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=948 comm="syz.0.8584" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6209d9ce59 code=0x7ffc0000 [ 1683.508283][T20559] usb 3-1: USB disconnect, device number 24 [ 1683.614330][T20558] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1683.828395][T30037] usb 8-1: USB disconnect, device number 102 [ 1683.883070][ T964] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8587'. [ 1683.993408][ T966] netlink: 36 bytes leftover after parsing attributes in process `syz.7.8587'. [ 1684.044417][T20559] usb 3-1: new low-speed USB device number 25 using dummy_hcd [ 1684.195802][T20559] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 1684.204731][T20559] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 1684.214338][T20559] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1684.223686][T20559] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1684.244250][T20559] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x5D, changing to 0xD [ 1684.263595][T20559] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 10 [ 1684.294477][T20559] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1684.314146][T20559] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1684.376418][T20559] usb 3-1: string descriptor 0 read error: -22 [ 1684.388746][T20559] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1684.411784][ T973] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1684.424184][T20559] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1684.457221][T20559] usb 3-1: config 0 descriptor?? [ 1684.472923][T20559] hub 3-1:0.0: bad descriptor, ignoring hub [ 1684.495684][T20559] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1684.696591][ T957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1684.708089][ T957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1684.847614][T30037] usb 3-1: USB disconnect, device number 25 [ 1684.967646][T30697] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1684.994002][T30697] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1685.026107][T30697] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1685.038170][T30697] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1685.052531][T30697] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1685.680950][ T988] bridge0: port 1(bridge_slave_0) entered blocking state [ 1685.690929][ T988] bridge0: port 1(bridge_slave_0) entered disabled state [ 1685.699372][ T988] bridge_slave_0: entered allmulticast mode [ 1685.711542][ T988] bridge_slave_0: entered promiscuous mode [ 1685.871909][ T988] bridge0: port 2(bridge_slave_1) entered blocking state [ 1685.919433][ T988] bridge0: port 2(bridge_slave_1) entered disabled state [ 1685.927075][ T988] bridge_slave_1: entered allmulticast mode [ 1685.936928][ T988] bridge_slave_1: entered promiscuous mode [ 1686.029487][ T1018] geneve2: entered promiscuous mode [ 1686.036348][ T1018] geneve2: entered allmulticast mode [ 1686.076694][ T988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1686.089681][ T988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1686.120066][ T988] team0: Port device team_slave_0 added [ 1686.128350][ T988] team0: Port device team_slave_1 added [ 1686.175660][ T988] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1686.182739][ T988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1686.209642][ T988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1686.222700][ T988] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1686.229743][ T988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1686.256765][ T988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1686.282093][ T1023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8602'. [ 1686.472051][ T1026] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8602'. [ 1686.537916][ T988] hsr_slave_0: entered promiscuous mode [ 1686.545726][ T988] hsr_slave_1: entered promiscuous mode [ 1686.552229][ T988] debugfs: 'hsr0' already exists in 'hsr' [ 1686.558406][ T988] Cannot create hsr debugfs directory [ 1686.838174][ T1034] netlink: 'syz.0.8603': attribute type 12 has an invalid length. [ 1687.173036][T29026] Bluetooth: hci3: command tx timeout [ 1687.553977][ T988] netdevsim netdevsim6 netdevsim0 (unregistering): left allmulticast mode [ 1687.867852][T16108] bridge_slave_1: left allmulticast mode [ 1687.888508][T16108] bridge_slave_1: left promiscuous mode [ 1687.895664][T16108] bridge0: port 2(bridge_slave_1) entered disabled state [ 1687.910886][T16108] bridge_slave_0: left allmulticast mode [ 1687.950617][T16108] bridge_slave_0: left promiscuous mode [ 1687.958172][T16108] bridge0: port 1(bridge_slave_0) entered disabled state [ 1687.977930][T16108] pimreg: left allmulticast mode [ 1687.982998][T16108] dvmrp6: left allmulticast mode [ 1688.445967][T16108] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 1688.464459][T16108] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1688.475129][T16108] .` (unregistering): Released all slaves [ 1688.487274][T16108] bond1 (unregistering): Released all slaves [ 1688.508636][ T1055] geneve2: entered promiscuous mode [ 1688.523043][ T1055] geneve2: entered allmulticast mode [ 1688.770732][T16108] tipc: Left network mode [ 1688.930570][ T988] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1688.947138][ T988] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1688.954456][T30037] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1688.975101][ T988] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1689.001961][ T988] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1689.019776][ T988] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1689.033984][ T988] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1689.042548][ T988] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1689.066247][ T988] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1689.141768][T30037] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1689.154324][T30037] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1689.156040][ T1061] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8613'. [ 1689.164954][T30037] usb 2-1: Product: syz [ 1689.204850][T30037] usb 2-1: Manufacturer: syz [ 1689.215745][T30037] usb 2-1: SerialNumber: syz [ 1689.225572][T29026] Bluetooth: hci3: command tx timeout [ 1689.246794][T30037] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1689.267285][T30027] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1689.386392][ T988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1689.410009][ T988] 8021q: adding VLAN 0 to HW filter on device team0 [ 1689.423187][T27968] bridge0: port 1(bridge_slave_0) entered blocking state [ 1689.430547][T27968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1689.447503][T13543] bridge0: port 2(bridge_slave_1) entered blocking state [ 1689.454957][T13543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1689.542699][ T988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1689.585338][ T988] veth0_vlan: entered promiscuous mode [ 1689.601411][ T988] veth1_vlan: entered promiscuous mode [ 1689.635828][ T988] veth0_macvtap: entered promiscuous mode [ 1689.646370][ T988] veth1_macvtap: entered promiscuous mode [ 1689.668443][ T988] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1689.689039][ T988] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1689.691265][ T1057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1689.717661][T30881] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1689.721338][ T1061] netlink: 36 bytes leftover after parsing attributes in process `syz.7.8613'. [ 1689.730836][T30881] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1689.748874][ T1057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1689.759721][T30881] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1689.760612][T26908] usb 2-1: USB disconnect, device number 70 [ 1689.775834][T30881] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1689.993270][T16108] hsr_slave_0: left promiscuous mode [ 1690.008167][T16108] hsr_slave_1: left promiscuous mode [ 1690.027718][T16108] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1690.056711][T16108] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1690.359793][T30027] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1690.369301][T30027] ath9k_htc: Failed to initialize the device [ 1690.379991][T26908] usb 2-1: ath9k_htc: USB layer deinitialized [ 1690.487197][T16108] team0 (unregistering): Port device team_slave_1 removed [ 1690.525443][T16108] team0 (unregistering): Port device team_slave_0 removed [ 1690.693811][T13543] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1690.710087][T13543] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1690.725623][ T1090] FAULT_INJECTION: forcing a failure. [ 1690.725623][ T1090] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1690.755406][T30878] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1690.767534][T30878] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1690.814273][T26908] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1690.817345][ T1090] CPU: 0 UID: 0 PID: 1090 Comm: syz.7.8617 Tainted: G L syzkaller #0 PREEMPT(full) [ 1690.817377][ T1090] Tainted: [L]=SOFTLOCKUP [ 1690.817384][ T1090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1690.817394][ T1090] Call Trace: [ 1690.817402][ T1090] [ 1690.817409][ T1090] dump_stack_lvl+0xe8/0x150 [ 1690.817437][ T1090] should_fail_ex+0x40c/0x560 [ 1690.817461][ T1090] _copy_from_user+0x2d/0xb0 [ 1690.817484][ T1090] ___sys_recvmsg+0x173/0x590 [ 1690.817508][ T1090] ? __pfx____sys_recvmsg+0x10/0x10 [ 1690.817538][ T1090] ? __fget_files+0x2a/0x420 [ 1690.817586][ T1090] do_recvmmsg+0x329/0x810 [ 1690.817611][ T1090] ? __pfx_do_recvmmsg+0x10/0x10 [ 1690.817638][ T1090] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1690.817677][ T1090] __x64_sys_recvmmsg+0x198/0x250 [ 1690.817698][ T1090] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1690.817723][ T1090] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1690.817742][ T1090] do_syscall_64+0x174/0x580 [ 1690.817758][ T1090] ? trace_irq_disable+0x3b/0x140 [ 1690.817783][ T1090] ? clear_bhb_loop+0x40/0x90 [ 1690.817805][ T1090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1690.817822][ T1090] RIP: 0033:0x7f5e1639ce59 [ 1690.817843][ T1090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1690.817858][ T1090] RSP: 002b:00007f5e171dd028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1690.817878][ T1090] RAX: ffffffffffffffda RBX: 00007f5e16616090 RCX: 00007f5e1639ce59 [ 1690.817891][ T1090] RDX: 0400000000000043 RSI: 0000200000003440 RDI: 0000000000000003 [ 1690.817904][ T1090] RBP: 00007f5e171dd090 R08: 0000000000000000 R09: 0000000000000000 [ 1690.817915][ T1090] R10: 0000000040012032 R11: 0000000000000246 R12: 0000000000000001 [ 1690.817926][ T1090] R13: 00007f5e16616128 R14: 00007f5e16616090 R15: 00007f5e1673fa48 [ 1690.817954][ T1090] [ 1691.077692][T30037] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1691.202562][T26908] usb 2-1: Using ep0 maxpacket: 32 [ 1691.214251][T30037] usb 3-1: device descriptor read/64, error -71 [ 1691.241963][T26908] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1691.252813][T26908] usb 2-1: config 16 has an invalid interface number: 119 but max is 0 [ 1691.262349][T26908] usb 2-1: config 16 has no interface number 0 [ 1691.300445][T26908] usb 2-1: config 16 interface 119 has no altsetting 0 [ 1691.307562][T29026] Bluetooth: hci3: command tx timeout [ 1691.336939][T26908] usb 2-1: New USB device found, idVendor=12d1, idProduct=1c23, bcdDevice=2b.c7 [ 1691.353601][T16108] IPVS: stop unused estimator thread 0... [ 1691.362418][T26908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1691.374537][T26908] usb 2-1: Product: syz [ 1691.378864][T26908] usb 2-1: Manufacturer: syz [ 1691.383469][T26908] usb 2-1: SerialNumber: syz [ 1691.484848][T30037] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1691.614547][T26908] rndis_host 2-1:16.119: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 1691.627636][T26908] option 2-1:16.119: GSM modem (1-port) converter detected [ 1691.645740][T30037] usb 3-1: device descriptor read/64, error -71 [ 1691.649704][T26908] usb 2-1: USB disconnect, device number 71 [ 1691.664815][T26908] option 2-1:16.119: device disconnected [ 1691.766275][T30037] usb usb3-port1: attempt power cycle [ 1691.920317][ T1106] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[1107] was attempted by "ci-upstream-kasan-gce/syz-executor exec"[1106] [ 1691.963316][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 1691.963333][ T29] audit: type=1800 audit(1781308707.613:3646): pid=1106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.8619" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1692.002801][ T1106] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1ùà^!‚lü1Ü*ø$pOcÚÉ”ÎÜr$åG—•µ [ 1692.135370][T30037] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1692.212062][T30037] usb 3-1: device descriptor read/8, error -71 [ 1692.484346][T30037] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1692.534692][T30037] usb 3-1: device descriptor read/8, error -71 [ 1692.554737][T30027] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1692.664694][T30037] usb usb3-port1: unable to enumerate USB device [ 1692.704229][T30027] usb 2-1: device descriptor read/64, error -71 [ 1692.871121][ T1121] geneve2: entered promiscuous mode [ 1692.877304][ T1121] geneve2: entered allmulticast mode [ 1692.944354][T30027] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1693.012506][ T1127] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8626'. [ 1693.068703][ T1129] netlink: 48 bytes leftover after parsing attributes in process `syz.6.8627'. [ 1693.079443][ T1129] netlink: 48 bytes leftover after parsing attributes in process `syz.6.8627'. [ 1693.090010][T30027] usb 2-1: device descriptor read/64, error -71 [ 1693.204615][T30027] usb usb2-port1: attempt power cycle [ 1693.384301][T29026] Bluetooth: hci3: command tx timeout [ 1693.443005][ T29] audit: type=1326 audit(1781308709.093:3647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1132 comm="syz.6.8628" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc046f9ce59 code=0x0 [ 1693.555493][T30027] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1693.575715][T30027] usb 2-1: device descriptor read/8, error -71 [ 1693.814236][T30027] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1693.834940][T30027] usb 2-1: device descriptor read/8, error -71 [ 1693.946228][T30027] usb usb2-port1: unable to enumerate USB device [ 1694.095799][T20557] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1694.254197][T20557] usb 3-1: Using ep0 maxpacket: 8 [ 1694.262052][T20557] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1694.283030][T20557] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1694.293561][T20557] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1694.303806][T20557] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1694.318832][T20557] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1694.329070][T20557] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1694.577085][T20557] usb 3-1: GET_CAPABILITIES returned 0 [ 1694.582723][T20557] usbtmc 3-1:16.0: can't read capabilities [ 1694.750262][ T1157] FAULT_INJECTION: forcing a failure. [ 1694.750262][ T1157] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1694.764284][ T1157] CPU: 0 UID: 0 PID: 1157 Comm: syz.0.8636 Tainted: G L syzkaller #0 PREEMPT(full) [ 1694.764313][ T1157] Tainted: [L]=SOFTLOCKUP [ 1694.764320][ T1157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1694.764330][ T1157] Call Trace: [ 1694.764338][ T1157] [ 1694.764345][ T1157] dump_stack_lvl+0xe8/0x150 [ 1694.764372][ T1157] should_fail_ex+0x40c/0x560 [ 1694.764396][ T1157] _copy_from_user+0x2d/0xb0 [ 1694.764418][ T1157] copy_from_sockptr_offset+0x66/0xa0 [ 1694.764557][ T1157] do_arpt_set_ctl+0x937/0x1030 [ 1694.764590][ T1157] ? __mutex_trylock_common+0x15f/0x270 [ 1694.764616][ T1157] ? __pfx_do_arpt_set_ctl+0x10/0x10 [ 1694.764641][ T1157] ? rcu_is_watching+0x15/0xb0 [ 1694.764660][ T1157] ? trace_contention_end+0x3d/0x140 [ 1694.764692][ T1157] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1694.764708][ T1157] ? nf_setsockopt+0x3a/0x290 [ 1694.764723][ T1157] ? __pfx___mutex_lock+0x10/0x10 [ 1694.764733][ T1157] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1694.764745][ T1157] ? __pfx___mutex_lock+0x10/0x10 [ 1694.764760][ T1157] nf_setsockopt+0x26f/0x290 [ 1694.764773][ T1157] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1694.764786][ T1157] smc_setsockopt+0x232/0xb00 [ 1694.764864][ T1157] ? __pfx_smc_setsockopt+0x10/0x10 [ 1694.764877][ T1157] ? aa_sock_opt_perm+0xff/0x1a0 [ 1694.764893][ T1157] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1694.764944][ T1157] ? __pfx_smc_setsockopt+0x10/0x10 [ 1694.764959][ T1157] do_sock_setsockopt+0x17c/0x1b0 [ 1694.764976][ T1157] __x64_sys_setsockopt+0x13d/0x1b0 [ 1694.764991][ T1157] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1694.765002][ T1157] do_syscall_64+0x174/0x580 [ 1694.765012][ T1157] ? trace_irq_disable+0x3b/0x140 [ 1694.765027][ T1157] ? clear_bhb_loop+0x40/0x90 [ 1694.765039][ T1157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1694.765049][ T1157] RIP: 0033:0x7f6209d9ce59 [ 1694.765061][ T1157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1694.765070][ T1157] RSP: 002b:00007f620abeb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1694.765081][ T1157] RAX: ffffffffffffffda RBX: 00007f620a015fa0 RCX: 00007f6209d9ce59 [ 1694.765089][ T1157] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 1694.765095][ T1157] RBP: 00007f620abeb090 R08: 0000000000000418 R09: 0000000000000000 [ 1694.765102][ T1157] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000001 [ 1694.765108][ T1157] R13: 00007f620a016038 R14: 00007f620a015fa0 R15: 00007f620a13fa48 [ 1694.765124][ T1157] [ 1694.797961][ T1146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1695.041350][ T1146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1695.058220][ T1159] netlink: 'syz.7.8635': attribute type 12 has an invalid length. [ 1695.083703][T20557] usb 3-1: USB disconnect, device number 30 [ 1695.130713][ T1161] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8637'. [ 1695.409700][ T1176] FAULT_INJECTION: forcing a failure. [ 1695.409700][ T1176] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1695.424993][ T1176] CPU: 0 UID: 0 PID: 1176 Comm: syz.1.8640 Tainted: G L syzkaller #0 PREEMPT(full) [ 1695.425015][ T1176] Tainted: [L]=SOFTLOCKUP [ 1695.425019][ T1176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1695.425025][ T1176] Call Trace: [ 1695.425030][ T1176] [ 1695.425035][ T1176] dump_stack_lvl+0xe8/0x150 [ 1695.425053][ T1176] should_fail_ex+0x40c/0x560 [ 1695.425068][ T1176] _copy_from_user+0x2d/0xb0 [ 1695.425082][ T1176] ___sys_recvmsg+0x173/0x590 [ 1695.425095][ T1176] ? __pfx____sys_recvmsg+0x10/0x10 [ 1695.425113][ T1176] ? __fget_files+0x2a/0x420 [ 1695.425134][ T1176] ? __fget_files+0x3a2/0x420 [ 1695.425150][ T1176] do_recvmmsg+0x329/0x810 [ 1695.425164][ T1176] ? __pfx_do_recvmmsg+0x10/0x10 [ 1695.425179][ T1176] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1695.425199][ T1176] __x64_sys_recvmmsg+0x198/0x250 [ 1695.425210][ T1176] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1695.425224][ T1176] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1695.425235][ T1176] do_syscall_64+0x174/0x580 [ 1695.425244][ T1176] ? trace_irq_disable+0x3b/0x140 [ 1695.425260][ T1176] ? clear_bhb_loop+0x40/0x90 [ 1695.425272][ T1176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1695.425282][ T1176] RIP: 0033:0x7fe534f9ce59 [ 1695.425294][ T1176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1695.425303][ T1176] RSP: 002b:00007fe535d98028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1695.425315][ T1176] RAX: ffffffffffffffda RBX: 00007fe535215fa0 RCX: 00007fe534f9ce59 [ 1695.425322][ T1176] RDX: 0000000000000004 RSI: 0000200000005700 RDI: 0000000000000003 [ 1695.425328][ T1176] RBP: 00007fe535d98090 R08: 0000000000000000 R09: 0000000000000000 [ 1695.425335][ T1176] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 1695.425341][ T1176] R13: 00007fe535216038 R14: 00007fe535215fa0 R15: 00007fe53533fa48 [ 1695.425357][ T1176] [ 1695.427405][ T1164] trusted_key: encrypted_key: insufficient parameters specified [ 1695.891345][ T29] audit: type=1326 audit(1781308711.543:3648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1180 comm="syz.2.8642" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfc7b9ce59 code=0x7ffc0000 [ 1695.917593][ T29] audit: type=1326 audit(1781308711.543:3649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1180 comm="syz.2.8642" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfc7b9ce59 code=0x7ffc0000 [ 1695.950443][ T29] audit: type=1326 audit(1781308711.603:3650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1180 comm="syz.2.8642" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfc7b9ce59 code=0x7ffc0000 [ 1695.976862][ T29] audit: type=1326 audit(1781308711.603:3651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1180 comm="syz.2.8642" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfc7b9ce59 code=0x7ffc0000 [ 1696.005945][ T29] audit: type=1326 audit(1781308711.663:3652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1180 comm="syz.2.8642" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfc7b9ce59 code=0x7ffc0000 [ 1696.036741][ T29] audit: type=1326 audit(1781308711.663:3653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1180 comm="syz.2.8642" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcfc7b9cbc2 code=0x7ffc0000 [ 1696.061937][ T29] audit: type=1326 audit(1781308711.663:3654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1180 comm="syz.2.8642" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fcfc7b9cc57 code=0x7ffc0000 [ 1696.090026][ T29] audit: type=1326 audit(1781308711.663:3655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1180 comm="syz.2.8642" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fcfc7b9ce59 code=0x7ffc0000 [ 1696.223091][T20563] IPVS: starting estimator thread 0... [ 1696.334774][ T1185] IPVS: using max 28 ests per chain, 67200 per kthread [ 1696.729410][ T1199] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8648'. [ 1696.755799][ T1200] geneve2: entered promiscuous mode [ 1696.771724][ T1200] geneve2: entered allmulticast mode [ 1696.898877][ T1206] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8650'. [ 1696.920941][ T1206] netlink: 'syz.1.8650': attribute type 4 has an invalid length. [ 1696.966862][ T29] kauditd_printk_skb: 121 callbacks suppressed [ 1696.966880][ T29] audit: type=1326 audit(1781308712.623:3777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1180 comm="syz.2.8642" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfc7b9ce59 code=0x7ffc0000 [ 1697.015914][ T29] audit: type=1326 audit(1781308712.623:3778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1180 comm="syz.2.8642" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfc7b9ce59 code=0x7ffc0000 [ 1697.075297][ T29] audit: type=1326 audit(1781308712.663:3779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1180 comm="syz.2.8642" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fcfc7b9ce59 code=0x7ffc0000 [ 1697.131269][ T29] audit: type=1326 audit(1781308712.663:3780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1180 comm="syz.2.8642" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfc7b9ce59 code=0x7ffc0000 [ 1697.157284][ T1203] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1697.175643][ T1181] netlink: 164 bytes leftover after parsing attributes in process `syz.2.8642'. [ 1697.181072][ T29] audit: type=1326 audit(1781308712.663:3781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1180 comm="syz.2.8642" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfc7b9ce59 code=0x7ffc0000 [ 1697.245653][ T29] audit: type=1326 audit(1781308712.673:3782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1180 comm="syz.2.8642" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcfc7b9ce59 code=0x7ffc0000 [ 1697.296362][T20557] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1697.299525][ T29] audit: type=1326 audit(1781308712.673:3783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1180 comm="syz.2.8642" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfc7b9ce59 code=0x7ffc0000 [ 1697.366421][ T29] audit: type=1326 audit(1781308712.673:3784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1180 comm="syz.2.8642" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfc7b9ce59 code=0x7ffc0000 [ 1697.423563][ T29] audit: type=1326 audit(1781308712.783:3785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1180 comm="syz.2.8642" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfc7b9ce59 code=0x7ffc0000 [ 1697.476165][ T29] audit: type=1326 audit(1781308712.783:3786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1180 comm="syz.2.8642" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfc7b9ce59 code=0x7ffc0000 [ 1697.504310][T20557] usb 2-1: Using ep0 maxpacket: 32 [ 1697.516745][T20557] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 1697.534151][T20557] usb 2-1: config 0 has no interface number 0 [ 1697.557709][T20557] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1697.568822][T20557] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1697.585683][T20557] usb 2-1: Product: syz [ 1697.594190][T20557] usb 2-1: Manufacturer: syz [ 1697.614293][T20557] usb 2-1: SerialNumber: syz [ 1697.636789][T20557] usb 2-1: config 0 descriptor?? [ 1698.060654][ T1206] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8650'. [ 1698.060975][T20557] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1698.104152][T20557] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1698.289763][ T1181] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8642'. [ 1698.737397][T20557] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 1698.776946][T20557] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 1698.811375][T20557] usb 2-1: USB disconnect, device number 76 [ 1699.554654][ T1222] FAULT_INJECTION: forcing a failure. [ 1699.554654][ T1222] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1699.569741][ T1222] CPU: 1 UID: 0 PID: 1222 Comm: syz.0.8654 Tainted: G L syzkaller #0 PREEMPT(full) [ 1699.569771][ T1222] Tainted: [L]=SOFTLOCKUP [ 1699.569778][ T1222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1699.569789][ T1222] Call Trace: [ 1699.569796][ T1222] [ 1699.569804][ T1222] dump_stack_lvl+0xe8/0x150 [ 1699.569831][ T1222] should_fail_ex+0x40c/0x560 [ 1699.569855][ T1222] _copy_from_user+0x2d/0xb0 [ 1699.569878][ T1222] ___sys_recvmsg+0x173/0x590 [ 1699.569902][ T1222] ? __pfx____sys_recvmsg+0x10/0x10 [ 1699.569933][ T1222] ? __fget_files+0x2a/0x420 [ 1699.569982][ T1222] do_recvmmsg+0x329/0x810 [ 1699.570009][ T1222] ? __pfx_do_recvmmsg+0x10/0x10 [ 1699.570038][ T1222] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1699.570080][ T1222] __x64_sys_recvmmsg+0x198/0x250 [ 1699.570100][ T1222] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1699.570126][ T1222] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1699.570146][ T1222] do_syscall_64+0x174/0x580 [ 1699.570162][ T1222] ? trace_irq_disable+0x3b/0x140 [ 1699.570188][ T1222] ? clear_bhb_loop+0x40/0x90 [ 1699.570210][ T1222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1699.570228][ T1222] RIP: 0033:0x7f6209d9ce59 [ 1699.570246][ T1222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1699.570262][ T1222] RSP: 002b:00007f620abeb028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1699.570281][ T1222] RAX: ffffffffffffffda RBX: 00007f620a015fa0 RCX: 00007f6209d9ce59 [ 1699.570295][ T1222] RDX: 0400000000000043 RSI: 0000200000003440 RDI: 0000000000000003 [ 1699.570308][ T1222] RBP: 00007f620abeb090 R08: 0000000000000000 R09: 0000000000000000 [ 1699.570319][ T1222] R10: 0000000040012032 R11: 0000000000000246 R12: 0000000000000002 [ 1699.570330][ T1222] R13: 00007f620a016038 R14: 00007f620a015fa0 R15: 00007f620a13fa48 [ 1699.570359][ T1222] [ 1700.081648][ T1230] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8659'. [ 1701.144574][T20563] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1701.295283][T20563] usb 2-1: Using ep0 maxpacket: 16 [ 1701.302724][T20563] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 1701.311431][T20563] usb 2-1: config 0 has no interface number 0 [ 1701.317879][T20563] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1701.333908][T20563] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 33022, setting to 1024 [ 1701.348088][T20563] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1701.357473][T20563] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1701.365980][T20563] usb 2-1: Product: syz [ 1701.370469][T20563] usb 2-1: SerialNumber: syz [ 1701.377845][T20563] usb 2-1: config 0 descriptor?? [ 1701.394034][T20563] cm109 2-1:0.8: invalid payload size 1024, expected 4 [ 1701.403613][T20563] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input302 [ 1701.675274][T20563] usb 8-1: new high-speed USB device number 103 using dummy_hcd [ 1701.682412][T26908] usb 2-1: USB disconnect, device number 77 [ 1701.683190][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1701.696101][ C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1701.708818][T26908] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1701.837372][T20563] usb 8-1: device descriptor read/64, error -71 [ 1701.982675][ T1281] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8676'. [ 1701.992604][ T1281] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8676'. [ 1702.013284][ T1281] hsr0: entered promiscuous mode [ 1702.023462][ T1280] hsr0: left promiscuous mode [ 1702.084220][T20563] usb 8-1: new high-speed USB device number 104 using dummy_hcd [ 1702.092732][ T1285] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8677'. [ 1702.226752][T20563] usb 8-1: device descriptor read/64, error -71 [ 1702.327449][ T1295] netlink: set zone limit has 4 unknown bytes [ 1702.336992][T20563] usb usb8-port1: attempt power cycle [ 1702.401666][ T1300] FAULT_INJECTION: forcing a failure. [ 1702.401666][ T1300] name failslab, interval 1, probability 0, space 0, times 0 [ 1702.418021][ T1300] CPU: 1 UID: 0 PID: 1300 Comm: syz.1.8684 Tainted: G L syzkaller #0 PREEMPT(full) [ 1702.418051][ T1300] Tainted: [L]=SOFTLOCKUP [ 1702.418058][ T1300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1702.418069][ T1300] Call Trace: [ 1702.418077][ T1300] [ 1702.418085][ T1300] dump_stack_lvl+0xe8/0x150 [ 1702.418109][ T1300] should_fail_ex+0x40c/0x560 [ 1702.418123][ T1300] should_failslab+0xa8/0x100 [ 1702.418140][ T1300] ? skb_clone+0x212/0x3a0 [ 1702.418150][ T1300] kmem_cache_alloc_noprof+0x87/0x650 [ 1702.418168][ T1300] skb_clone+0x212/0x3a0 [ 1702.418179][ T1300] __netlink_deliver_tap+0x413/0x860 [ 1702.418200][ T1300] ? netlink_deliver_tap+0x2e/0x1b0 [ 1702.418214][ T1300] netlink_deliver_tap+0x19c/0x1b0 [ 1702.418228][ T1300] netlink_dump+0x95b/0xee0 [ 1702.418247][ T1300] ? __pfx_netlink_dump+0x10/0x10 [ 1702.418271][ T1300] netlink_recvmsg+0x683/0xa50 [ 1702.418289][ T1300] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1702.418305][ T1300] ? __lock_acquire+0x683/0x2cd0 [ 1702.418318][ T1300] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1702.418332][ T1300] ? security_socket_recvmsg+0x7e/0x2c0 [ 1702.418344][ T1300] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1702.418362][ T1300] sock_recvmsg_nosec+0x10c/0x140 [ 1702.418376][ T1300] ____sys_recvmsg+0x3e3/0x4a0 [ 1702.418395][ T1300] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1702.418416][ T1300] ? import_iovec+0x73/0xa0 [ 1702.418431][ T1300] ___sys_recvmsg+0x213/0x590 [ 1702.418443][ T1300] ? __pfx____sys_recvmsg+0x10/0x10 [ 1702.418460][ T1300] ? __fget_files+0x2a/0x420 [ 1702.418487][ T1300] do_recvmmsg+0x329/0x810 [ 1702.418509][ T1300] ? __pfx_do_recvmmsg+0x10/0x10 [ 1702.418536][ T1300] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1702.418569][ T1300] __x64_sys_recvmmsg+0x198/0x250 [ 1702.418590][ T1300] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1702.418605][ T1300] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1702.418616][ T1300] do_syscall_64+0x174/0x580 [ 1702.418625][ T1300] ? trace_irq_disable+0x3b/0x140 [ 1702.418639][ T1300] ? clear_bhb_loop+0x40/0x90 [ 1702.418651][ T1300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1702.418661][ T1300] RIP: 0033:0x7fe534f9ce59 [ 1702.418673][ T1300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1702.418681][ T1300] RSP: 002b:00007fe535d98028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1702.418693][ T1300] RAX: ffffffffffffffda RBX: 00007fe535215fa0 RCX: 00007fe534f9ce59 [ 1702.418701][ T1300] RDX: 0400000000000043 RSI: 0000200000003440 RDI: 0000000000000003 [ 1702.418708][ T1300] RBP: 00007fe535d98090 R08: 0000000000000000 R09: 0000000000000000 [ 1702.418714][ T1300] R10: 0000000040012032 R11: 0000000000000246 R12: 0000000000000002 [ 1702.418721][ T1300] R13: 00007fe535216038 R14: 00007fe535215fa0 R15: 00007fe53533fa48 [ 1702.418736][ T1300] [ 1702.833544][T20563] usb 8-1: new high-speed USB device number 105 using dummy_hcd [ 1702.854843][T20563] usb 8-1: device descriptor read/8, error -71 [ 1703.114525][T20563] usb 8-1: new high-speed USB device number 106 using dummy_hcd [ 1703.157572][T20563] usb 8-1: device descriptor read/8, error -71 [ 1703.269112][ T29] kauditd_printk_skb: 112 callbacks suppressed [ 1703.269129][ T29] audit: type=1800 audit(1781308718.923:3899): pid=1329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.8691" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 1703.304953][T20563] usb usb8-port1: unable to enumerate USB device [ 1703.501861][ T29] audit: type=1326 audit(1781308719.153:3900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1328 comm="syz.6.8691" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7fc046f96bd7 code=0x0 [ 1704.305861][ T1337] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1704.319627][ T1337] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1704.429458][ T1337] netdevsim netdevsim1 netdevsim0: refused to change device tx_queue_len [ 1704.685673][ T1341] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8696'. [ 1704.951174][ T1353] netlink: 'syz.1.8699': attribute type 15 has an invalid length. [ 1704.961407][ T1353] netlink: 666 bytes leftover after parsing attributes in process `syz.1.8699'. [ 1704.977729][ T1353] netlink: 'syz.1.8699': attribute type 1 has an invalid length. [ 1704.990262][ T1356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1705.344010][ T1384] syzkaller1: entered promiscuous mode [ 1705.358727][ T1384] syzkaller1: entered allmulticast mode [ 1705.578307][ T29] audit: type=1326 audit(1781308721.233:3901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1389 comm="syz.6.8710" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc046f9ce59 code=0x7ffc0000 [ 1705.604564][T30037] usb 8-1: new high-speed USB device number 107 using dummy_hcd [ 1705.613446][ T29] audit: type=1326 audit(1781308721.233:3902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1389 comm="syz.6.8710" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc046f9ce59 code=0x7ffc0000 [ 1705.786181][T30037] usb 8-1: config 7 descriptor has 1 excess byte, ignoring [ 1705.808481][T30037] usb 8-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 1705.826815][T30037] usb 8-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84 [ 1705.836284][T30037] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1705.846191][T30037] usb 8-1: Product: syz [ 1705.850507][T30037] usb 8-1: Manufacturer: syz [ 1705.855224][T30037] usb 8-1: SerialNumber: syz [ 1705.881844][T30037] rndis_host 8-1:7.0: skipping garbage [ 1705.887453][T30037] rndis_host 8-1:7.0: rndis: master #0/ffff888053fa4000 slave #1/0000000000000000 [ 1705.899320][T30037] option 8-1:7.0: GSM modem (1-port) converter detected [ 1706.132867][T20563] usb 8-1: USB disconnect, device number 107 [ 1706.141760][T20563] option 8-1:7.0: device disconnected [ 1707.804591][T20557] usb 2-1: new full-speed USB device number 78 using dummy_hcd [ 1707.925400][ T1457] syzkaller0: entered promiscuous mode [ 1707.931380][ T1457] syzkaller0: entered allmulticast mode [ 1707.970021][T20557] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1707.995311][T20557] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1708.015536][T20557] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1708.028857][T20557] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1708.039813][T20557] usb 2-1: Product: syz [ 1708.044749][T20557] usb 2-1: Manufacturer: syz [ 1708.051066][T20557] usb 2-1: SerialNumber: syz [ 1708.068904][T20557] usb 2-1: 0:2 : does not exist [ 1708.076718][T20557] usb 2-1: unit 9 not found! [ 1708.091584][ T1465] netlink: 'syz.6.8728': attribute type 12 has an invalid length. [ 1708.268128][ T1446] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8723'. [ 1708.332859][ T1467] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8723'. [ 1708.481727][T20557] usb 2-1: 4:0: cannot get min/max values for control 1 (id 4) [ 1708.508877][T20557] usb 2-1: 4:0: cannot get min/max values for control 2 (id 4) [ 1708.525054][T20557] usb 2-1: 4:0: cannot get min/max values for control 3 (id 4) [ 1708.540567][T20557] usb 2-1: 4:0: cannot get min/max values for control 4 (id 4) [ 1708.574035][T20557] usb 2-1: 4:0: cannot get min/max values for control 6 (id 4) [ 1708.588380][T20557] usb 2-1: 4:0: cannot get min/max values for control 7 (id 4) [ 1708.602112][T20557] usb 2-1: 4:0: cannot get min/max values for control 8 (id 4) [ 1708.653628][T20557] usb 2-1: USB disconnect, device number 78 [ 1708.689887][T30911] udevd[30911]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1709.208690][ T29] audit: type=1800 audit(1781308724.863:3903): pid=1486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.8734" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1709.348281][ T1490] openvswitch: netlink: nsh attr 0 has unexpected len 3 expected 0 [ 1709.376515][ T1490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8733'. [ 1709.404279][ T1490] netlink: 43 bytes leftover after parsing attributes in process `syz.2.8733'. [ 1710.722367][ T1522] FAULT_INJECTION: forcing a failure. [ 1710.722367][ T1522] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1710.756620][ T1522] CPU: 1 UID: 0 PID: 1522 Comm: syz.1.8747 Tainted: G L syzkaller #0 PREEMPT(full) [ 1710.756651][ T1522] Tainted: [L]=SOFTLOCKUP [ 1710.756658][ T1522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1710.756669][ T1522] Call Trace: [ 1710.756676][ T1522] [ 1710.756684][ T1522] dump_stack_lvl+0xe8/0x150 [ 1710.756708][ T1522] should_fail_ex+0x40c/0x560 [ 1710.756730][ T1522] _copy_to_iter+0x404/0x1810 [ 1710.756748][ T1522] ? unwind_get_return_address+0x4d/0x90 [ 1710.756784][ T1522] ? __pfx__copy_to_iter+0x10/0x10 [ 1710.756804][ T1522] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1710.756831][ T1522] ? lockdep_hardirqs_on+0x7a/0x110 [ 1710.756857][ T1522] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1710.756881][ T1522] ? __skb_try_recv_datagram+0x3de/0x4e0 [ 1710.756905][ T1522] __skb_datagram_iter+0xf8/0x980 [ 1710.756926][ T1522] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1710.756953][ T1522] skb_copy_datagram_iter+0xb5/0x240 [ 1710.756975][ T1522] netlink_recvmsg+0x2b9/0xa50 [ 1710.757010][ T1522] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1710.757048][ T1522] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1710.757073][ T1522] sock_recvmsg_nosec+0x10c/0x140 [ 1710.757099][ T1522] ____sys_recvmsg+0x3e3/0x4a0 [ 1710.757134][ T1522] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1710.757174][ T1522] ? import_iovec+0x73/0xa0 [ 1710.757198][ T1522] ___sys_recvmsg+0x213/0x590 [ 1710.757221][ T1522] ? __pfx____sys_recvmsg+0x10/0x10 [ 1710.757253][ T1522] ? __fget_files+0x2a/0x420 [ 1710.757311][ T1522] do_recvmmsg+0x329/0x810 [ 1710.757337][ T1522] ? __pfx_do_recvmmsg+0x10/0x10 [ 1710.757361][ T1522] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1710.757394][ T1522] __x64_sys_recvmmsg+0x198/0x250 [ 1710.757415][ T1522] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1710.757440][ T1522] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1710.757459][ T1522] do_syscall_64+0x174/0x580 [ 1710.757475][ T1522] ? trace_irq_disable+0x3b/0x140 [ 1710.757499][ T1522] ? clear_bhb_loop+0x40/0x90 [ 1710.757521][ T1522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1710.757537][ T1522] RIP: 0033:0x7fe534f9ce59 [ 1710.757554][ T1522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1710.757569][ T1522] RSP: 002b:00007fe535d98028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1710.757588][ T1522] RAX: ffffffffffffffda RBX: 00007fe535215fa0 RCX: 00007fe534f9ce59 [ 1710.757602][ T1522] RDX: 0400000000000043 RSI: 0000200000003440 RDI: 0000000000000003 [ 1710.757614][ T1522] RBP: 00007fe535d98090 R08: 0000000000000000 R09: 0000000000000000 [ 1710.757626][ T1522] R10: 0000000040012032 R11: 0000000000000246 R12: 0000000000000002 [ 1710.757637][ T1522] R13: 00007fe535216038 R14: 00007fe535215fa0 R15: 00007fe53533fa48 [ 1710.757666][ T1522] [ 1710.784209][T30037] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1710.996724][ T1530] netlink: 20 bytes leftover after parsing attributes in process `syz.7.8744'. [ 1711.164232][T30037] usb 3-1: Using ep0 maxpacket: 32 [ 1711.205994][T30037] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1711.224669][T30037] usb 3-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 1711.237821][ T1541] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8751'. [ 1711.241079][T30037] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1711.260941][T30037] usb 3-1: config 0 descriptor?? [ 1711.601125][ T1553] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8755'. [ 1711.611613][ T1553] ip6tnl3: entered promiscuous mode [ 1711.654255][T20563] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1711.830851][T20563] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1711.843873][T20563] usb 2-1: config 3 has an invalid interface number: 151 but max is 0 [ 1711.854471][T20563] usb 2-1: config 3 has no interface number 0 [ 1711.860933][T20563] usb 2-1: config 3 interface 151 has no altsetting 0 [ 1711.871821][T20563] usb 2-1: New USB device found, idVendor=05ac, idProduct=0263, bcdDevice=1d.cd [ 1711.886218][T20563] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1711.895795][T20563] usb 2-1: Product: syz [ 1711.900051][T20563] usb 2-1: Manufacturer: syz [ 1711.905593][T20563] usb 2-1: SerialNumber: syz [ 1711.937305][T30037] usbhid 3-1:0.0: can't add hid device: -71 [ 1711.944954][T30037] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1711.957666][T30037] usb 3-1: USB disconnect, device number 31 [ 1712.030839][ T1558] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8757'. [ 1712.069207][ T1566] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1712.216367][T20563] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:3.151/input/input303 [ 1712.228798][ T4984] bcm5974 2-1:3.151: could not read from device [ 1712.237640][ T4984] bcm5974 2-1:3.151: could not read from device [ 1712.250449][T20563] usb 2-1: USB disconnect, device number 79 [ 1712.303369][T31485] udevd[31485]: Error opening device "/dev/input/event4": No such file or directory [ 1712.313221][T31485] udevd[31485]: Unable to EVIOCGABS device "/dev/input/event4" [ 1712.321753][T31485] udevd[31485]: Unable to EVIOCGABS device "/dev/input/event4" [ 1712.329545][T31485] udevd[31485]: Unable to EVIOCGABS device "/dev/input/event4" [ 1712.337995][T31485] udevd[31485]: Unable to EVIOCGABS device "/dev/input/event4" [ 1712.576700][ T1577] fuse: Bad value for 'fd' [ 1712.591655][ T29] audit: type=1326 audit(1781308728.243:3904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1576 comm="syz.2.8763" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfc7b9ce59 code=0x7ffc0000 [ 1712.619168][ T29] audit: type=1326 audit(1781308728.243:3905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1576 comm="syz.2.8763" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fcfc7b9ce59 code=0x7ffc0000 [ 1712.646266][ T29] audit: type=1326 audit(1781308728.243:3906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1576 comm="syz.2.8763" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfc7b9ce59 code=0x7ffc0000 [ 1712.673960][ T29] audit: type=1326 audit(1781308728.243:3907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1576 comm="syz.2.8763" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcfc7b5d68e code=0x7ffc0000 [ 1712.714270][ T29] audit: type=1326 audit(1781308728.243:3908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1576 comm="syz.2.8763" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcfc7b9caeb code=0x7ffc0000 [ 1712.742688][ T29] audit: type=1326 audit(1781308728.243:3909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1576 comm="syz.2.8763" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcfc7b9caeb code=0x7ffc0000 [ 1712.777863][ T29] audit: type=1326 audit(1781308728.243:3910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1576 comm="syz.2.8763" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcfc7b9caeb code=0x7ffc0000 [ 1712.807590][ T29] audit: type=1326 audit(1781308728.273:3911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1576 comm="syz.2.8763" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcfc7b9caeb code=0x7ffc0000 [ 1712.834275][T20558] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1712.847182][ T29] audit: type=1326 audit(1781308728.363:3912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1576 comm="syz.2.8763" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcfc7b9caeb code=0x7ffc0000 [ 1713.006489][T20558] usb 3-1: Using ep0 maxpacket: 16 [ 1713.016092][T20558] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 1713.024346][T20558] usb 3-1: config 0 has no interface number 0 [ 1713.030504][T20558] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1713.042900][T20558] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 33022, setting to 1024 [ 1713.059104][T20558] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1713.078210][T20558] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1713.100671][T20558] usb 3-1: Product: syz [ 1713.108255][T20558] usb 3-1: SerialNumber: syz [ 1713.118206][T20558] usb 3-1: config 0 descriptor?? [ 1713.360446][T20558] cm109 3-1:0.8: invalid payload size 1024, expected 4 [ 1713.379498][T20558] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input304 [ 1713.746419][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1713.753672][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1713.761346][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1713.768741][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1713.776238][T20557] usb 3-1: USB disconnect, device number 32 [ 1713.782344][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1713.782363][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1713.853661][T20557] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1713.889967][ T1588] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8766'. [ 1714.005820][ T1591] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8767'. [ 1714.026863][ T1591] ipvlan2: entered allmulticast mode [ 1714.043750][ T1591] syz_tun: entered allmulticast mode [ 1714.677796][ T1609] netlink: 'syz.1.8773': attribute type 12 has an invalid length. [ 1714.699734][ T1607] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8772'. [ 1714.788052][ T1612] netlink: 'syz.2.8774': attribute type 15 has an invalid length. [ 1714.819876][ T1612] netlink: 666 bytes leftover after parsing attributes in process `syz.2.8774'. [ 1714.851884][ T1614] netlink: 'syz.2.8774': attribute type 1 has an invalid length. [ 1714.881455][ T29] kauditd_printk_skb: 69 callbacks suppressed [ 1714.881472][ T29] audit: type=1800 audit(1781308730.533:3982): pid=1616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.8775" name="SYSV00000000" dev="hugetlbfs" ino=4 res=0 errno=0 [ 1715.034225][ T5618] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1715.184368][ T5618] usb 2-1: Using ep0 maxpacket: 32 [ 1715.192007][ T5618] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1715.202812][ T5618] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1715.216587][ T5618] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1715.229768][ T5618] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1715.245694][ T5618] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1715.254930][ T5618] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1715.262983][ T5618] usb 2-1: Product: syz [ 1715.267801][ T5618] usb 2-1: Manufacturer: syz [ 1715.273996][ T5618] usb 2-1: SerialNumber: syz [ 1715.291429][ C0] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1715.301817][ T5618] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input305 [ 1715.494205][T20557] usb 8-1: new high-speed USB device number 108 using dummy_hcd [ 1715.554480][ T5618] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1715.562957][ T5618] (id 0x00) [ 1715.624471][ T5618] rc_core: IR keymap rc-imon-pad not found [ 1715.632084][ T5618] Registered IR keymap rc-empty [ 1715.637880][ T5618] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1715.644208][T20557] usb 8-1: device descriptor read/64, error -71 [ 1715.649265][ T5618] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1715.771667][ T5618] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 1715.788761][ T5618] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input306 [ 1715.807301][ T5618] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:80> initialized [ 1715.895073][T20557] usb 8-1: new high-speed USB device number 109 using dummy_hcd [ 1716.025308][T20557] usb 8-1: device descriptor read/64, error -71 [ 1716.135425][T20557] usb usb8-port1: attempt power cycle [ 1716.484219][T20557] usb 8-1: new high-speed USB device number 110 using dummy_hcd [ 1716.515180][T20557] usb 8-1: device descriptor read/8, error -71 [ 1716.754294][T20557] usb 8-1: new high-speed USB device number 111 using dummy_hcd [ 1716.789098][T20557] usb 8-1: device descriptor read/8, error -71 [ 1716.915074][T20557] usb usb8-port1: unable to enumerate USB device [ 1717.124280][T26908] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1717.297342][ T1641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1717.306789][ T1641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1717.517889][ T1641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1717.547991][ T1641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1717.589116][ T1641] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 1717.597421][ T1641] pim6reg1: linktype set to 823 [ 1717.663391][ T1645] netlink: 132 bytes leftover after parsing attributes in process `syz.6.8785'. [ 1717.738786][T20558] usb 2-1: USB disconnect, device number 80 [ 1718.482503][ T29] audit: type=1800 audit(1781308734.133:3983): pid=1651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.8786" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 1718.663930][ T1660] FAULT_INJECTION: forcing a failure. [ 1718.663930][ T1660] name failslab, interval 1, probability 0, space 0, times 0 [ 1718.684840][ T1660] CPU: 0 UID: 0 PID: 1660 Comm: syz.6.8790 Tainted: G L syzkaller #0 PREEMPT(full) [ 1718.684871][ T1660] Tainted: [L]=SOFTLOCKUP [ 1718.684878][ T1660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1718.684888][ T1660] Call Trace: [ 1718.684895][ T1660] [ 1718.684904][ T1660] dump_stack_lvl+0xe8/0x150 [ 1718.684933][ T1660] should_fail_ex+0x40c/0x560 [ 1718.684959][ T1660] should_failslab+0xa8/0x100 [ 1718.684989][ T1660] __kmalloc_cache_noprof+0x88/0x660 [ 1718.685014][ T1660] ? __sctp_v6_cmp_addr+0x1dd/0x4f0 [ 1718.685120][ T1660] ? sctp_add_bind_addr+0x8c/0x370 [ 1718.685194][ T1660] sctp_add_bind_addr+0x8c/0x370 [ 1718.685227][ T1660] sctp_copy_local_addr_list+0x31a/0x4e0 [ 1718.685307][ T1660] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 1718.685334][ T1660] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1718.685363][ T1660] ? sctp_v6_is_any+0x64/0x80 [ 1718.685381][ T1660] ? sctp_copy_one_addr+0x93/0x360 [ 1718.685419][ T1660] sctp_bind_addr_copy+0xb3/0x3c0 [ 1718.685450][ T1660] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1718.685478][ T1660] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1718.685503][ T1660] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1718.685532][ T1660] ? sctp_inet6_send_verify+0x23a/0x300 [ 1718.685547][ T1660] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 1718.685572][ T1660] __sctp_connect+0x5cb/0xdc0 [ 1718.685604][ T1660] ? __pfx___sctp_connect+0x10/0x10 [ 1718.685625][ T1660] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1718.685651][ T1660] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 1718.685679][ T1660] sctp_getsockopt_connectx3+0x227/0x360 [ 1718.685704][ T1660] ? lock_sock_nested+0x6a/0x100 [ 1718.685728][ T1660] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 1718.685759][ T1660] ? sctp_getsockopt+0x12f/0xb90 [ 1718.685782][ T1660] ? __local_bh_enable_ip+0xd0/0x130 [ 1718.685806][ T1660] sctp_getsockopt+0x984/0xb90 [ 1718.685827][ T1660] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1718.685850][ T1660] do_sock_getsockopt+0x51d/0x7e0 [ 1718.685881][ T1660] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1718.685921][ T1660] ? __fget_files+0x3a2/0x420 [ 1718.685948][ T1660] ? __fget_files+0x2a/0x420 [ 1718.685977][ T1660] __x64_sys_getsockopt+0x1a4/0x240 [ 1718.686009][ T1660] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1718.686030][ T1660] do_syscall_64+0x174/0x580 [ 1718.686047][ T1660] ? trace_irq_disable+0x3b/0x140 [ 1718.686072][ T1660] ? clear_bhb_loop+0x40/0x90 [ 1718.686094][ T1660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1718.686112][ T1660] RIP: 0033:0x7fc046f9ce59 [ 1718.686134][ T1660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1718.686147][ T1660] RSP: 002b:00007fc047e1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1718.686166][ T1660] RAX: ffffffffffffffda RBX: 00007fc047215fa0 RCX: 00007fc046f9ce59 [ 1718.686180][ T1660] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 1718.686195][ T1660] RBP: 00007fc047e1c090 R08: 0000200000000080 R09: 0000000000000000 [ 1718.686206][ T1660] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000002 [ 1718.686216][ T1660] R13: 00007fc047216038 R14: 00007fc047215fa0 R15: 00007fc04733fa48 [ 1718.686243][ T1660] [ 1719.135647][T26908] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1719.152230][T26908] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1719.160026][T26908] usb 3-1: can't read configurations, error -71 [ 1719.247869][ T1680] geneve2: entered promiscuous mode [ 1719.253242][ T1680] geneve2: entered allmulticast mode [ 1719.295788][ T1672] netlink: 'syz.7.8793': attribute type 5 has an invalid length. [ 1719.310408][ T1672] netlink: 'syz.7.8793': attribute type 5 has an invalid length. [ 1719.431972][ T29] audit: type=1800 audit(1781308735.083:3984): pid=1687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.8801" name="SYSV00000000" dev="hugetlbfs" ino=11 res=0 errno=0 [ 1719.439228][ T1685] hsr0: entered promiscuous mode [ 1719.465548][ T1684] hsr0: left promiscuous mode [ 1719.574349][ T5696] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1719.734389][ T5696] usb 2-1: Using ep0 maxpacket: 16 [ 1719.742510][ T5696] usb 2-1: config 127 has an invalid interface number: 27 but max is 1 [ 1719.751205][ T5696] usb 2-1: config 127 contains an unexpected descriptor of type 0x1, skipping [ 1719.760491][ T5696] usb 2-1: config 127 has an invalid interface number: 140 but max is 1 [ 1719.769142][ T5696] usb 2-1: config 127 has an invalid interface number: 76 but max is 1 [ 1719.780826][ T5696] usb 2-1: config 127 contains an unexpected descriptor of type 0x1, skipping [ 1719.790141][ T5696] usb 2-1: config 127 has 3 interfaces, different from the descriptor's value: 2 [ 1719.800860][ T5696] usb 2-1: config 127 has no interface number 0 [ 1719.812070][ T5696] usb 2-1: config 127 has no interface number 1 [ 1719.818608][ T5696] usb 2-1: config 127 has no interface number 2 [ 1719.826146][ T5696] usb 2-1: config 127 interface 27 altsetting 10 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 1719.837557][ T5696] usb 2-1: config 127 interface 27 altsetting 10 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 1719.848935][ T5696] usb 2-1: config 127 interface 27 altsetting 10 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 1719.861026][ T5696] usb 2-1: config 127 interface 27 altsetting 10 has a duplicate endpoint with address 0x6, skipping [ 1719.872084][ T5696] usb 2-1: config 127 interface 27 altsetting 10 bulk endpoint 0xB has invalid maxpacket 64 [ 1719.882348][ T5696] usb 2-1: config 127 interface 27 altsetting 10 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 1719.894333][ T5696] usb 2-1: config 127 interface 27 altsetting 10 has a duplicate endpoint with address 0xB, skipping [ 1719.905764][ T5696] usb 2-1: config 127 interface 27 altsetting 10 has an endpoint descriptor with address 0x36, changing to 0x6 [ 1719.917865][ T5696] usb 2-1: config 127 interface 27 altsetting 10 has a duplicate endpoint with address 0x6, skipping [ 1719.931936][ T5696] usb 2-1: config 127 interface 27 altsetting 10 has 10 endpoint descriptors, different from the interface descriptor's value: 12 [ 1719.949951][ T5696] usb 2-1: too many endpoints for config 127 interface 140 altsetting 22: 217, using maximum allowed: 30 [ 1719.961310][ T5696] usb 2-1: config 127 interface 140 altsetting 22 has an endpoint descriptor with address 0x2E, changing to 0xE [ 1719.973309][ T5696] usb 2-1: config 127 interface 140 altsetting 22 has a duplicate endpoint with address 0xE, skipping [ 1719.984862][ T5696] usb 2-1: config 127 interface 140 altsetting 22 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 1719.996107][ T5696] usb 2-1: config 127 interface 140 altsetting 22 has 3 endpoint descriptors, different from the interface descriptor's value: 217 [ 1720.009893][ T5696] usb 2-1: config 127 interface 76 altsetting 4 has a duplicate endpoint with address 0xE, skipping [ 1720.020885][ T5696] usb 2-1: config 127 interface 76 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 1720.039065][ T5696] usb 2-1: config 127 interface 76 altsetting 4 has a duplicate endpoint with address 0xC, skipping [ 1720.050279][ T5696] usb 2-1: config 127 interface 76 altsetting 4 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 1720.061766][ T5696] usb 2-1: config 127 interface 76 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 1720.073166][ T5696] usb 2-1: config 127 interface 76 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 1720.084052][ T5696] usb 2-1: config 127 interface 76 altsetting 4 has a duplicate endpoint with address 0x1, skipping [ 1720.084224][T30037] usb 8-1: new full-speed USB device number 112 using dummy_hcd [ 1720.095159][ T5696] usb 2-1: config 127 interface 76 altsetting 4 has a duplicate endpoint with address 0xF, skipping [ 1720.116819][ T5696] usb 2-1: config 127 interface 27 has no altsetting 0 [ 1720.123929][ T5696] usb 2-1: config 127 interface 140 has no altsetting 0 [ 1720.131858][ T5696] usb 2-1: config 127 interface 76 has no altsetting 0 [ 1720.143216][ T5696] usb 2-1: Dual-Role OTG device on HNP port [ 1720.154211][ T5696] usb 2-1: New USB device found, idVendor=19d2, idProduct=ff45, bcdDevice=43.87 [ 1720.164634][ T5696] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1720.174668][ T5696] usb 2-1: Product: syz [ 1720.180495][ T5696] usb 2-1: Manufacturer: syz [ 1720.185350][ T5696] usb 2-1: SerialNumber: syz [ 1720.203728][ T1682] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1720.277759][T30037] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1720.288995][T30037] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1720.301178][T30037] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1720.312297][T30037] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1720.322776][T30037] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1720.338853][T30037] usb 8-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1720.348420][T30037] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1720.357013][T30037] usb 8-1: Product: syz [ 1720.361333][T30037] usb 8-1: Manufacturer: syz [ 1720.366462][T30037] usb 8-1: SerialNumber: syz [ 1720.373560][T30037] usb 8-1: config 0 descriptor?? [ 1720.619882][T30037] radio-si470x 8-1:0.0: DeviceID=0xb436 ChipID=0x8100 [ 1720.832008][T30037] radio-si470x 8-1:0.0: software version 180, hardware version 54 [ 1721.071372][ T1716] geneve2: entered promiscuous mode [ 1721.077645][ T1716] geneve2: entered allmulticast mode [ 1721.222628][ T29] audit: type=1800 audit(1781308736.873:3985): pid=1719 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.8813" name="SYSV00000000" dev="hugetlbfs" ino=12 res=0 errno=0 [ 1721.344460][T30037] radio-si470x 8-1:0.0: si470x_set_report: usb_control_msg returned -110 [ 1721.353197][T30037] radio-si470x 8-1:0.0: submitting int urb failed (-90) [ 1721.361832][T30037] radio-si470x 8-1:0.0: si470x_set_report: usb_control_msg returned -32 [ 1721.371276][T30037] radio-si470x 8-1:0.0: probe with driver radio-si470x failed with error -22 [ 1721.828862][T26908] usb 8-1: USB disconnect, device number 112 [ 1721.969412][ T1731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1721.983324][ T1732] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8817'. [ 1721.995784][ T1732] netlink: 7 bytes leftover after parsing attributes in process `syz.7.8817'. [ 1722.005524][ T1731] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8817'. [ 1722.293191][ T5696] option 2-1:127.27: GSM modem (1-port) converter detected [ 1722.316930][ T5696] usb 2-1: USB disconnect, device number 81 [ 1722.340955][ T5696] option 2-1:127.27: device disconnected [ 1722.407207][ T1747] fuse: Bad value for 'fd' [ 1722.439696][ T29] audit: type=1800 audit(1781308738.093:3986): pid=1751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.8824" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 1722.548115][ T1750] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8822'. [ 1722.752119][ T1766] [ 1722.754497][ T1766] ===================================================== [ 1722.761791][ T1766] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1722.769660][ T1766] syzkaller #0 Tainted: G L [ 1722.775726][ T1766] ----------------------------------------------------- [ 1722.783110][ T1766] syz.0.8831/1766 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1722.792315][ T1766] ffff88807d70fbe8 (&new->fa_lock){...-}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 1722.801737][ T1766] [ 1722.801737][ T1766] and this task is already holding: [ 1722.809279][ T1766] ffff8880295c6028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xcb/0xc00 [ 1722.819855][ T1766] which would create a new lock dependency: [ 1722.825830][ T1766] (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){...-}-{3:3} [ 1722.834016][ T1766] [ 1722.834016][ T1766] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1722.843467][ T1766] (&dev->event_lock#2){..-.}-{3:3} [ 1722.843500][ T1766] [ 1722.843500][ T1766] ... which became SOFTIRQ-irq-safe at: [ 1722.856621][ T1766] lock_acquire+0x106/0x350 [ 1722.861231][ T1766] _raw_spin_lock_irqsave+0x40/0x60 [ 1722.866517][ T1766] input_event+0x71/0xc0 [ 1722.870930][ T1766] aiptek_irq+0x14cf/0x28a0 [ 1722.875609][ T1766] __usb_hcd_giveback_urb+0x374/0x530 [ 1722.881118][ T1766] dummy_timer+0xac3/0x4b40 [ 1722.885778][ T1766] __hrtimer_run_queues+0x3bc/0xa10 [ 1722.891257][ T1766] hrtimer_run_softirq+0x17a/0x240 [ 1722.896565][ T1766] handle_softirqs+0x225/0x840 [ 1722.901625][ T1766] __irq_exit_rcu+0xca/0x220 [ 1722.906527][ T1766] irq_exit_rcu+0x9/0x30 [ 1722.911063][ T1766] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1722.918711][ T1766] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1722.924811][ T1766] lock_acquire+0x221/0x350 [ 1722.929488][ T1766] page_table_check_clear+0x141/0x4f0 [ 1722.935135][ T1766] __zap_vma_range+0x3791/0x4c70 [ 1722.940548][ T1766] unmap_vmas+0x390/0x550 [ 1722.945022][ T1766] exit_mmap+0x293/0x9f0 [ 1722.949393][ T1766] __mmput+0x118/0x420 [ 1722.953556][ T1766] exit_mm+0x1e4/0x2b0 [ 1722.957736][ T1766] do_exit+0x6cd/0x2360 [ 1722.962087][ T1766] do_group_exit+0x22d/0x2f0 [ 1722.966772][ T1766] __x64_sys_exit_group+0x3f/0x40 [ 1722.971974][ T1766] x64_sys_call+0x221a/0x2240 [ 1722.976909][ T1766] do_syscall_64+0x174/0x580 [ 1722.981595][ T1766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1722.987573][ T1766] [ 1722.987573][ T1766] to a SOFTIRQ-irq-unsafe lock: [ 1722.994850][ T1766] (tasklist_lock){.+.+}-{3:3} [ 1722.994877][ T1766] [ 1722.994877][ T1766] ... which became SOFTIRQ-irq-unsafe at: [ 1723.007919][ T1766] ... [ 1723.007934][ T1766] lock_acquire+0x106/0x350 [ 1723.015198][ T1766] _raw_read_lock+0x36/0x50 [ 1723.019826][ T1766] __do_wait+0xd9/0x720 [ 1723.024074][ T1766] do_wait+0x1e7/0x510 [ 1723.028623][ T1766] kernel_wait+0xd6/0x1c0 [ 1723.033310][ T1766] call_usermodehelper_exec_work+0xbe/0x230 [ 1723.039623][ T1766] process_scheduled_works+0xa8e/0x14e0 [ 1723.045382][ T1766] worker_thread+0xa47/0xfb0 [ 1723.050074][ T1766] kthread+0x389/0x470 [ 1723.054682][ T1766] ret_from_fork+0x514/0xb70 [ 1723.059359][ T1766] ret_from_fork_asm+0x1a/0x30 [ 1723.064388][ T1766] [ 1723.064388][ T1766] other info that might help us debug this: [ 1723.064388][ T1766] [ 1723.074897][ T1766] Chain exists of: [ 1723.074897][ T1766] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 1723.074897][ T1766] [ 1723.088571][ T1766] Possible interrupt unsafe locking scenario: [ 1723.088571][ T1766] [ 1723.096995][ T1766] CPU0 CPU1 [ 1723.102539][ T1766] ---- ---- [ 1723.108101][ T1766] lock(tasklist_lock); [ 1723.112345][ T1766] local_irq_disable(); [ 1723.120390][ T1766] lock(&dev->event_lock#2); [ 1723.127673][ T1766] lock(&client->buffer_lock); [ 1723.135559][ T1766] [ 1723.139001][ T1766] lock(&dev->event_lock#2); [ 1723.144218][ T1766] [ 1723.144218][ T1766] *** DEADLOCK *** [ 1723.144218][ T1766] [ 1723.152539][ T1766] 7 locks held by syz.0.8831/1766: [ 1723.157653][ T1766] #0: ffff88823bfae910 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1ae/0x4c0 [ 1723.166893][ T1766] #1: ffff88801f7a0230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa4/0x330 [ 1723.177037][ T1766] #2: ffffffff8e95c780 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb5/0x330 [ 1723.186734][ T1766] #3: ffffffff8e95c780 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 1723.196354][ T1766] #4: ffffffff8e95c780 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 1723.205603][ T1766] #5: ffff8880295c6028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xcb/0xc00 [ 1723.215879][ T1766] #6: ffffffff8e95c780 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 1723.224957][ T1766] [ 1723.224957][ T1766] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1723.235395][ T1766] -> (&dev->event_lock#2){..-.}-{3:3} { [ 1723.241062][ T1766] IN-SOFTIRQ-W at: [ 1723.245140][ T1766] lock_acquire+0x106/0x350 [ 1723.251475][ T1766] _raw_spin_lock_irqsave+0x40/0x60 [ 1723.258520][ T1766] input_event+0x71/0xc0 [ 1723.264782][ T1766] aiptek_irq+0x14cf/0x28a0 [ 1723.271131][ T1766] __usb_hcd_giveback_urb+0x374/0x530 [ 1723.278427][ T1766] dummy_timer+0xac3/0x4b40 [ 1723.284758][ T1766] __hrtimer_run_queues+0x3bc/0xa10 [ 1723.291889][ T1766] hrtimer_run_softirq+0x17a/0x240 [ 1723.298843][ T1766] handle_softirqs+0x225/0x840 [ 1723.306208][ T1766] __irq_exit_rcu+0xca/0x220 [ 1723.312621][ T1766] irq_exit_rcu+0x9/0x30 [ 1723.318702][ T1766] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1723.326165][ T1766] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1723.334010][ T1766] lock_acquire+0x221/0x350 [ 1723.340332][ T1766] page_table_check_clear+0x141/0x4f0 [ 1723.347532][ T1766] __zap_vma_range+0x3791/0x4c70 [ 1723.354294][ T1766] unmap_vmas+0x390/0x550 [ 1723.360485][ T1766] exit_mmap+0x293/0x9f0 [ 1723.366550][ T1766] __mmput+0x118/0x420 [ 1723.372434][ T1766] exit_mm+0x1e4/0x2b0 [ 1723.378414][ T1766] do_exit+0x6cd/0x2360 [ 1723.384437][ T1766] do_group_exit+0x22d/0x2f0 [ 1723.391017][ T1766] __x64_sys_exit_group+0x3f/0x40 [ 1723.397887][ T1766] x64_sys_call+0x221a/0x2240 [ 1723.404543][ T1766] do_syscall_64+0x174/0x580 [ 1723.411164][ T1766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1723.418894][ T1766] INITIAL USE at: [ 1723.423033][ T1766] lock_acquire+0x106/0x350 [ 1723.430260][ T1766] _raw_spin_lock_irqsave+0x40/0x60 [ 1723.437299][ T1766] input_inject_event+0xa4/0x330 [ 1723.443976][ T1766] kbd_led_trigger_activate+0xbc/0x100 [ 1723.451169][ T1766] led_trigger_set+0x525/0x940 [ 1723.458046][ T1766] led_trigger_set_default+0x263/0x2a0 [ 1723.465272][ T1766] led_classdev_register_ext+0x761/0x9a0 [ 1723.472657][ T1766] input_leds_connect+0x4de/0x750 [ 1723.479689][ T1766] input_register_device+0xd12/0x1150 [ 1723.488342][ T1766] atkbd_connect+0x6fa/0x9f0 [ 1723.494679][ T1766] serio_driver_probe+0x82/0xb0 [ 1723.501810][ T1766] really_probe+0x254/0xae0 [ 1723.509249][ T1766] __driver_probe_device+0x1f5/0x380 [ 1723.516275][ T1766] driver_probe_device+0x4f/0x240 [ 1723.523146][ T1766] __driver_attach+0x342/0x620 [ 1723.530220][ T1766] bus_for_each_dev+0x23b/0x2c0 [ 1723.537136][ T1766] serio_handle_event+0x1af/0xfc0 [ 1723.544179][ T1766] process_scheduled_works+0xa8e/0x14e0 [ 1723.551660][ T1766] worker_thread+0xa47/0xfb0 [ 1723.558014][ T1766] kthread+0x389/0x470 [ 1723.564269][ T1766] ret_from_fork+0x514/0xb70 [ 1723.570964][ T1766] ret_from_fork_asm+0x1a/0x30 [ 1723.577511][ T1766] } [ 1723.580271][ T1766] ... key at: [] input_allocate_device.__key.7+0x0/0x20 [ 1723.589573][ T1766] -> (&client->buffer_lock){....}-{3:3} { [ 1723.595314][ T1766] INITIAL USE at: [ 1723.599480][ T1766] lock_acquire+0x106/0x350 [ 1723.607731][ T1766] _raw_spin_lock+0x2e/0x40 [ 1723.613836][ T1766] evdev_pass_values+0xcb/0xc00 [ 1723.620277][ T1766] evdev_events+0x1e6/0x340 [ 1723.626714][ T1766] input_pass_values+0x288/0x890 [ 1723.633882][ T1766] __input_unregister_device+0x205/0x610 [ 1723.641362][ T1766] input_unregister_device+0x9b/0x100 [ 1723.648301][ T1766] aiptek_disconnect+0x96/0x150 [ 1723.654715][ T1766] usb_unbind_interface+0x295/0x9f0 [ 1723.661654][ T1766] device_release_driver_internal+0x4f5/0x880 [ 1723.669451][ T1766] bus_remove_device+0x444/0x560 [ 1723.675949][ T1766] device_del+0x524/0x8f0 [ 1723.681832][ T1766] usb_disable_device+0x3d4/0x8d0 [ 1723.688506][ T1766] usb_disconnect+0x346/0x9a0 [ 1723.694832][ T1766] hub_event+0x1bbb/0x4d30 [ 1723.700898][ T1766] process_scheduled_works+0xa8e/0x14e0 [ 1723.708007][ T1766] worker_thread+0xa47/0xfb0 [ 1723.714247][ T1766] kthread+0x389/0x470 [ 1723.719889][ T1766] ret_from_fork+0x514/0xb70 [ 1723.726045][ T1766] ret_from_fork_asm+0x1a/0x30 [ 1723.732554][ T1766] } [ 1723.735084][ T1766] ... key at: [] evdev_open.__key.27+0x0/0x20 [ 1723.743242][ T1766] ... acquired at: [ 1723.747035][ T1766] _raw_spin_lock+0x2e/0x40 [ 1723.751803][ T1766] evdev_pass_values+0xcb/0xc00 [ 1723.756816][ T1766] evdev_events+0x1e6/0x340 [ 1723.761482][ T1766] input_pass_values+0x288/0x890 [ 1723.766594][ T1766] __input_unregister_device+0x205/0x610 [ 1723.772530][ T1766] input_unregister_device+0x9b/0x100 [ 1723.778681][ T1766] aiptek_disconnect+0x96/0x150 [ 1723.783719][ T1766] usb_unbind_interface+0x295/0x9f0 [ 1723.789179][ T1766] device_release_driver_internal+0x4f5/0x880 [ 1723.795415][ T1766] bus_remove_device+0x444/0x560 [ 1723.800615][ T1766] device_del+0x524/0x8f0 [ 1723.805393][ T1766] usb_disable_device+0x3d4/0x8d0 [ 1723.810618][ T1766] usb_disconnect+0x346/0x9a0 [ 1723.815464][ T1766] hub_event+0x1bbb/0x4d30 [ 1723.820074][ T1766] process_scheduled_works+0xa8e/0x14e0 [ 1723.825815][ T1766] worker_thread+0xa47/0xfb0 [ 1723.830585][ T1766] kthread+0x389/0x470 [ 1723.834839][ T1766] ret_from_fork+0x514/0xb70 [ 1723.839645][ T1766] ret_from_fork_asm+0x1a/0x30 [ 1723.844597][ T1766] [ 1723.847002][ T1766] [ 1723.847002][ T1766] the dependencies between the lock to be acquired [ 1723.847011][ T1766] and SOFTIRQ-irq-unsafe lock: [ 1723.860537][ T1766] -> (tasklist_lock){.+.+}-{3:3} { [ 1723.865854][ T1766] HARDIRQ-ON-R at: [ 1723.869999][ T1766] lock_acquire+0x106/0x350 [ 1723.876516][ T1766] _raw_read_lock+0x36/0x50 [ 1723.883052][ T1766] __do_wait+0xd9/0x720 [ 1723.889870][ T1766] do_wait+0x1e7/0x510 [ 1723.895959][ T1766] kernel_wait+0xd6/0x1c0 [ 1723.902303][ T1766] call_usermodehelper_exec_work+0xbe/0x230 [ 1723.910218][ T1766] process_scheduled_works+0xa8e/0x14e0 [ 1723.917855][ T1766] worker_thread+0xa47/0xfb0 [ 1723.924630][ T1766] kthread+0x389/0x470 [ 1723.930897][ T1766] ret_from_fork+0x514/0xb70 [ 1723.937511][ T1766] ret_from_fork_asm+0x1a/0x30 [ 1723.944299][ T1766] SOFTIRQ-ON-R at: [ 1723.948443][ T1766] lock_acquire+0x106/0x350 [ 1723.954945][ T1766] _raw_read_lock+0x36/0x50 [ 1723.961512][ T1766] __do_wait+0xd9/0x720 [ 1723.967695][ T1766] do_wait+0x1e7/0x510 [ 1723.973807][ T1766] kernel_wait+0xd6/0x1c0 [ 1723.980250][ T1766] call_usermodehelper_exec_work+0xbe/0x230 [ 1723.988320][ T1766] process_scheduled_works+0xa8e/0x14e0 [ 1723.995857][ T1766] worker_thread+0xa47/0xfb0 [ 1724.002615][ T1766] kthread+0x389/0x470 [ 1724.008685][ T1766] ret_from_fork+0x514/0xb70 [ 1724.015268][ T1766] ret_from_fork_asm+0x1a/0x30 [ 1724.022174][ T1766] INITIAL USE at: [ 1724.026238][ T1766] lock_acquire+0x106/0x350 [ 1724.032652][ T1766] _raw_write_lock_irq+0x3d/0x50 [ 1724.040149][ T1766] copy_process+0x29eb/0x4380 [ 1724.047192][ T1766] kernel_clone+0x2d7/0x940 [ 1724.053671][ T1766] user_mode_thread+0x110/0x180 [ 1724.060577][ T1766] rest_init+0x23/0x300 [ 1724.066840][ T1766] start_kernel+0x38a/0x3e0 [ 1724.073489][ T1766] x86_64_start_reservations+0x24/0x30 [ 1724.080994][ T1766] x86_64_start_kernel+0x137/0x1b0 [ 1724.089066][ T1766] common_startup_64+0x13e/0x147 [ 1724.096213][ T1766] INITIAL READ USE at: [ 1724.100811][ T1766] lock_acquire+0x106/0x350 [ 1724.107659][ T1766] _raw_read_lock+0x36/0x50 [ 1724.114770][ T1766] __do_wait+0xd9/0x720 [ 1724.121580][ T1766] do_wait+0x1e7/0x510 [ 1724.128009][ T1766] kernel_wait+0xd6/0x1c0 [ 1724.134714][ T1766] call_usermodehelper_exec_work+0xbe/0x230 [ 1724.143063][ T1766] process_scheduled_works+0xa8e/0x14e0 [ 1724.151468][ T1766] worker_thread+0xa47/0xfb0 [ 1724.158420][ T1766] kthread+0x389/0x470 [ 1724.164830][ T1766] ret_from_fork+0x514/0xb70 [ 1724.171965][ T1766] ret_from_fork_asm+0x1a/0x30 [ 1724.179088][ T1766] } [ 1724.181857][ T1766] ... key at: [] tasklist_lock+0x18/0x40 [ 1724.190106][ T1766] ... acquired at: [ 1724.194193][ T1766] _raw_read_lock+0x36/0x50 [ 1724.199138][ T1766] send_sigio+0x101/0x370 [ 1724.203655][ T1766] dnotify_handle_event+0x169/0x440 [ 1724.209029][ T1766] fsnotify+0x18a5/0x1b60 [ 1724.213533][ T1766] path_openat+0x11aa/0x3890 [ 1724.218300][ T1766] do_file_open+0x23e/0x4a0 [ 1724.222973][ T1766] do_sys_openat2+0x113/0x200 [ 1724.227846][ T1766] __x64_sys_open+0x11e/0x150 [ 1724.232711][ T1766] do_syscall_64+0x174/0x580 [ 1724.237732][ T1766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1724.243794][ T1766] [ 1724.246111][ T1766] -> (&f_owner->lock){...-}-{3:3} { [ 1724.251402][ T1766] IN-SOFTIRQ-R at: [ 1724.255464][ T1766] lock_acquire+0x106/0x350 [ 1724.261963][ T1766] _raw_read_lock_irqsave+0x48/0x60 [ 1724.269077][ T1766] send_sigurg+0x55/0x420 [ 1724.275259][ T1766] sk_send_sigurg+0x6c/0x2e0 [ 1724.281683][ T1766] tcp_check_urg+0x1f3/0x750 [ 1724.288206][ T1766] tcp_urg+0x167/0x410 [ 1724.294183][ T1766] tcp_rcv_established+0xd74/0x2830 [ 1724.301302][ T1766] tcp_v4_do_rcv+0x727/0x13b0 [ 1724.307956][ T1766] tcp_v4_rcv+0x27d2/0x3160 [ 1724.314302][ T1766] ip_protocol_deliver_rcu+0x21d/0x440 [ 1724.321579][ T1766] ip_local_deliver_finish+0x3bb/0x6f0 [ 1724.328874][ T1766] NF_HOOK+0x336/0x3c0 [ 1724.334761][ T1766] NF_HOOK+0x336/0x3c0 [ 1724.340650][ T1766] process_backlog+0xa34/0x1860 [ 1724.347564][ T1766] __napi_poll+0xaa/0x330 [ 1724.353729][ T1766] net_rx_action+0x61d/0xf50 [ 1724.360139][ T1766] handle_softirqs+0x225/0x840 [ 1724.366896][ T1766] __irq_exit_rcu+0xca/0x220 [ 1724.373306][ T1766] irq_exit_rcu+0x9/0x30 [ 1724.379459][ T1766] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1724.386913][ T1766] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1724.394712][ T1766] its_return_thunk+0x0/0x10 [ 1724.401214][ T1766] mt_validate+0x3c92/0x4260 [ 1724.407628][ T1766] validate_mm+0xd4/0x4f0 [ 1724.413782][ T1766] mmap_region+0x1621/0x2340 [ 1724.420285][ T1766] do_mmap+0xc3b/0x10c0 [ 1724.426259][ T1766] vm_mmap_pgoff+0x272/0x4e0 [ 1724.433028][ T1766] ksys_mmap_pgoff+0x4dc/0x760 [ 1724.439720][ T1766] do_syscall_64+0x174/0x580 [ 1724.446137][ T1766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1724.453943][ T1766] INITIAL USE at: [ 1724.458271][ T1766] lock_acquire+0x106/0x350 [ 1724.464700][ T1766] _raw_write_lock_irq+0x3d/0x50 [ 1724.471394][ T1766] __f_setown+0x5f/0x380 [ 1724.477380][ T1766] generic_setlease+0xacb/0xfd0 [ 1724.484963][ T1766] do_fcntl_add_lease+0x35e/0x470 [ 1724.494577][ T1766] fcntl_setlease+0x123/0x180 [ 1724.502254][ T1766] do_fcntl+0x8b3/0x1a30 [ 1724.508442][ T1766] __se_sys_fcntl+0xc8/0x150 [ 1724.515245][ T1766] do_syscall_64+0x174/0x580 [ 1724.521783][ T1766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1724.529901][ T1766] INITIAL READ USE at: [ 1724.534316][ T1766] lock_acquire+0x106/0x350 [ 1724.541741][ T1766] _raw_read_lock_irqsave+0x48/0x60 [ 1724.549932][ T1766] send_sigio+0x38/0x370 [ 1724.556992][ T1766] dnotify_handle_event+0x169/0x440 [ 1724.564847][ T1766] fsnotify+0x18a5/0x1b60 [ 1724.571616][ T1766] fsnotify_create+0x121/0x180 [ 1724.579303][ T1766] vfs_create+0x2f3/0x450 [ 1724.586733][ T1766] filename_mknodat+0x3e8/0x660 [ 1724.594054][ T1766] __se_sys_mknod+0x3a/0x150 [ 1724.600941][ T1766] do_syscall_64+0x174/0x580 [ 1724.607747][ T1766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1724.616376][ T1766] } [ 1724.618977][ T1766] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1724.628112][ T1766] ... acquired at: [ 1724.632108][ T1766] _raw_read_lock_irqsave+0x48/0x60 [ 1724.637574][ T1766] send_sigio+0x38/0x370 [ 1724.641997][ T1766] kill_fasync+0x24d/0x4d0 [ 1724.646626][ T1766] lease_break_callback+0x26/0x30 [ 1724.652002][ T1766] __break_lease+0x80d/0x1e70 [ 1724.656859][ T1766] vfs_create+0x38e/0x450 [ 1724.661968][ T1766] filename_mknodat+0x3e8/0x660 [ 1724.667001][ T1766] __se_sys_mknodat+0x3b/0x150 [ 1724.671948][ T1766] do_syscall_64+0x174/0x580 [ 1724.676890][ T1766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1724.683153][ T1766] [ 1724.685485][ T1766] -> (&new->fa_lock){...-}-{3:3} { [ 1724.691768][ T1766] IN-SOFTIRQ-R at: [ 1724.695750][ T1766] lock_acquire+0x106/0x350 [ 1724.702509][ T1766] _raw_read_lock_irqsave+0x48/0x60 [ 1724.709558][ T1766] kill_fasync+0x199/0x4d0 [ 1724.716106][ T1766] sock_wake_async+0x132/0x150 [ 1724.722713][ T1766] sock_def_readable+0x3c1/0x550 [ 1724.729928][ T1766] packet_rcv+0x11a2/0x16f0 [ 1724.736555][ T1766] __netif_receive_skb_core+0x6eb/0x30b0 [ 1724.744062][ T1766] process_backlog+0x706/0x1860 [ 1724.750678][ T1766] __napi_poll+0xaa/0x330 [ 1724.756760][ T1766] net_rx_action+0x61d/0xf50 [ 1724.763264][ T1766] handle_softirqs+0x225/0x840 [ 1724.769936][ T1766] do_softirq+0x76/0xd0 [ 1724.775944][ T1766] __local_bh_enable_ip+0xf8/0x130 [ 1724.782802][ T1766] wg_socket_send_skb_to_peer+0x16b/0x1d0 [ 1724.790324][ T1766] wg_packet_tx_worker+0x1c8/0x7e0 [ 1724.797105][ T1766] process_scheduled_works+0xa8e/0x14e0 [ 1724.804348][ T1766] worker_thread+0xa47/0xfb0 [ 1724.810634][ T1766] kthread+0x389/0x470 [ 1724.816369][ T1766] ret_from_fork+0x514/0xb70 [ 1724.822625][ T1766] ret_from_fork_asm+0x1a/0x30 [ 1724.829123][ T1766] INITIAL USE at: [ 1724.833011][ T1766] lock_acquire+0x106/0x350 [ 1724.839069][ T1766] _raw_write_lock_irq+0x3d/0x50 [ 1724.845584][ T1766] fasync_remove_entry+0xf1/0x1c0 [ 1724.852181][ T1766] lease_modify+0x4f7/0x6c0 [ 1724.858426][ T1766] generic_setlease+0xe22/0xfd0 [ 1724.864936][ T1766] fcntl_setlease+0x108/0x180 [ 1724.871451][ T1766] do_fcntl+0x8b3/0x1a30 [ 1724.877261][ T1766] __se_sys_fcntl+0xc8/0x150 [ 1724.884547][ T1766] do_syscall_64+0x174/0x580 [ 1724.890703][ T1766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1724.898178][ T1766] INITIAL READ USE at: [ 1724.902685][ T1766] lock_acquire+0x106/0x350 [ 1724.909275][ T1766] _raw_read_lock_irqsave+0x48/0x60 [ 1724.916571][ T1766] kill_fasync+0x199/0x4d0 [ 1724.923084][ T1766] sock_wake_async+0x132/0x150 [ 1724.929883][ T1766] sock_def_readable+0x3c1/0x550 [ 1724.937265][ T1766] unix_stream_sendmsg+0x84e/0xde0 [ 1724.944472][ T1766] ____sys_sendmsg+0x9b9/0xa20 [ 1724.951501][ T1766] ___sys_sendmsg+0x2a5/0x360 [ 1724.958203][ T1766] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1724.965168][ T1766] do_syscall_64+0x174/0x580 [ 1724.971922][ T1766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1724.979846][ T1766] } [ 1724.982333][ T1766] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1724.991179][ T1766] ... acquired at: [ 1724.994984][ T1766] _raw_read_lock_irqsave+0x48/0x60 [ 1725.000456][ T1766] kill_fasync+0x199/0x4d0 [ 1725.005229][ T1766] evdev_pass_values+0x552/0xc00 [ 1725.010347][ T1766] evdev_events+0x1e6/0x340 [ 1725.015022][ T1766] input_pass_values+0x288/0x890 [ 1725.020305][ T1766] input_event_dispose+0x330/0x6b0 [ 1725.025589][ T1766] input_inject_event+0x1dd/0x330 [ 1725.030780][ T1766] evdev_write+0x325/0x4c0 [ 1725.035369][ T1766] vfs_write+0x296/0xba0 [ 1725.039888][ T1766] ksys_write+0x150/0x270 [ 1725.044496][ T1766] do_syscall_64+0x174/0x580 [ 1725.049287][ T1766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1725.055406][ T1766] [ 1725.057757][ T1766] [ 1725.057757][ T1766] stack backtrace: [ 1725.063740][ T1766] CPU: 1 UID: 0 PID: 1766 Comm: syz.0.8831 Tainted: G L syzkaller #0 PREEMPT(full) [ 1725.063782][ T1766] Tainted: [L]=SOFTLOCKUP [ 1725.063793][ T1766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1725.063810][ T1766] Call Trace: [ 1725.063819][ T1766] [ 1725.063828][ T1766] dump_stack_lvl+0xe8/0x150 [ 1725.063850][ T1766] __lock_acquire+0x2a37/0x2cd0 [ 1725.063875][ T1766] ? kill_fasync+0x199/0x4d0 [ 1725.063897][ T1766] lock_acquire+0x106/0x350 [ 1725.063912][ T1766] ? kill_fasync+0x199/0x4d0 [ 1725.063934][ T1766] ? do_raw_spin_lock+0x12b/0x2f0 [ 1725.063954][ T1766] ? evdev_pass_values+0xcb/0xc00 [ 1725.063971][ T1766] _raw_read_lock_irqsave+0x48/0x60 [ 1725.063994][ T1766] ? kill_fasync+0x199/0x4d0 [ 1725.064014][ T1766] kill_fasync+0x199/0x4d0 [ 1725.064034][ T1766] ? kill_fasync+0x53/0x4d0 [ 1725.064055][ T1766] evdev_pass_values+0x552/0xc00 [ 1725.064073][ T1766] ? evdev_pass_values+0x5f1/0xc00 [ 1725.064090][ T1766] evdev_events+0x1e6/0x340 [ 1725.064103][ T1766] ? evdev_events+0x79/0x340 [ 1725.064117][ T1766] ? input_pass_values+0x8d/0x890 [ 1725.064140][ T1766] input_pass_values+0x288/0x890 [ 1725.064166][ T1766] ? input_handle_event+0x6fd/0xf10 [ 1725.064189][ T1766] input_event_dispose+0x330/0x6b0 [ 1725.064211][ T1766] input_inject_event+0x1dd/0x330 [ 1725.064232][ T1766] ? input_inject_event+0xb5/0x330 [ 1725.064251][ T1766] evdev_write+0x325/0x4c0 [ 1725.064265][ T1766] ? __lock_acquire+0x683/0x2cd0 [ 1725.064281][ T1766] ? __pfx_evdev_write+0x10/0x10 [ 1725.064296][ T1766] ? bpf_lsm_file_permission+0x9/0x20 [ 1725.064318][ T1766] ? security_file_permission+0x75/0x260 [ 1725.064347][ T1766] ? rw_verify_area+0x203/0x4c0 [ 1725.064367][ T1766] ? __pfx_evdev_write+0x10/0x10 [ 1725.064382][ T1766] vfs_write+0x296/0xba0 [ 1725.064405][ T1766] ? __pfx_vfs_write+0x10/0x10 [ 1725.064425][ T1766] ? __fget_files+0x2a/0x420 [ 1725.064444][ T1766] ? __fget_files+0x2a/0x420 [ 1725.064461][ T1766] ? __fget_files+0x3a2/0x420 [ 1725.064478][ T1766] ? __fget_files+0x2a/0x420 [ 1725.064497][ T1766] ksys_write+0x150/0x270 [ 1725.064519][ T1766] ? __pfx_ksys_write+0x10/0x10 [ 1725.064542][ T1766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1725.064558][ T1766] do_syscall_64+0x174/0x580 [ 1725.064573][ T1766] ? trace_irq_disable+0x3b/0x140 [ 1725.064594][ T1766] ? clear_bhb_loop+0x40/0x90 [ 1725.064611][ T1766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1725.064626][ T1766] RIP: 0033:0x7f6209d9ce59 [ 1725.064643][ T1766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1725.064657][ T1766] RSP: 002b:00007f620abeb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1725.064674][ T1766] RAX: ffffffffffffffda RBX: 00007f620a015fa0 RCX: 00007f6209d9ce59 [ 1725.064686][ T1766] RDX: 0000000000000037 RSI: 0000200000000040 RDI: 0000000000000005 [ 1725.064697][ T1766] RBP: 00007f6209e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1725.064706][ T1766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1725.064716][ T1766] R13: 00007f620a016038 R14: 00007f620a015fa0 R15: 00007f620a13fa48 [ 1725.064732][ T1766] [ 1725.122950][ T29] audit: type=1326 audit(1781308740.773:3987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1762 comm="syz.6.8830" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc046f9ce59 code=0x7ffc0000 [ 1725.259684][ T1759] netlink: 'syz.7.8827': attribute type 11 has an invalid length. [ 1725.262704][ T5618] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1725.276891][ T1759] netlink: 190972 bytes leftover after parsing attributes in process `syz.7.8827'. [ 1725.282574][ T29] audit: type=1326 audit(1781308740.843:3988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1762 comm="syz.6.8830" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc046f9ce59 code=0x7ffc0000 [ 1730.185234][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.192662][ T1313] ieee802154 phy1 wpan1: encryption failed: -22