last executing test programs: 29m14.615685615s ago: executing program 3 (id=158): r0 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) r2 = socket(0x1e, 0x1, 0x0) r3 = syz_io_uring_setup(0x6358, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x80000000, 0x399}, &(0x7f0000000100)=0x0, &(0x7f0000000600)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) io_uring_enter(r3, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) listen(r2, 0xa7) shutdown(r2, 0x2) io_uring_setup(0x51eb, &(0x7f00000008c0)={0x0, 0x9c2f, 0x10002, 0x1, 0x1a9, 0x0, r0}) write$char_usb(r1, &(0x7f0000000040)="e2", 0x918) 29m14.40831635s ago: executing program 3 (id=160): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0x168, 0x9, 0x230, 0xb, 0x320, 0x250, 0x250, 0x320, 0x250, 0x3, 0x0, {[{{@uncond, 0x6000000, 0x208, 0x230, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@rt={{0x138}, {0x0, [0x4, 0x8], 0x6, 0x17, 0x4, [@private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @private2, @dev={0xfe, 0x80, '\x00', 0x38}, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, @private0, @private2, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @mcast1, @loopback, @dev={0xfe, 0x80, '\x00', 0x26}], 0xe}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x2, 0x6, 0x4}, {0x3, 0x5, 0x1}}}}, {{@ipv6={@loopback, @mcast1, [0x0, 0xffffff00, 0x0, 0xff000000], [0xffffff00, 0xffffff00, 0x0, 0xff000000], 'gretap0\x00', 'bridge_slave_0\x00', {}, {}, 0x2b, 0x2, 0x4, 0x3}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x3c2, 0x5fb8, 0x77, 'syz0\x00', {0x2b}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000024000180060005004e230007060001000200000008000300ac1414aa0800060001"], 0x38}}, 0x0) listen(r1, 0xc) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x8401, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r10, 0x65, 0x5, 0x0, 0xfffffffffffffebb) r11 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x5) ioctl$KVM_SET_MP_STATE(r11, 0x4004ae99, &(0x7f0000000040)=0x3) r12 = syz_open_dev$video4linux(&(0x7f0000000200), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r12, 0xc0205649, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x810, r11, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x34, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe64, 0x1ff, @mcast1, 0x4}, 0x1c) ioctl$KVM_RUN(r11, 0xae80, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000004e2300000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r13 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r13, 0xc0905664, &(0x7f0000000140)={0x0, 0x0, '\x00', @bt={0xfffffffb, 0x9, 0xeb, 0xfffffffe, 0xc0, 0x6bd6, 0x2, 0x9}}) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000002600010329bd7000fddbdf25200000000c0031800800230006000000bd0ab7e6a7d1e4573d1c5cc9ddba9a4f201b8809db50d1c45e5900000000"], 0x20}, 0x1, 0x0, 0x0, 0xe0}, 0x80) 29m13.194899308s ago: executing program 3 (id=167): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010400000000000000000a0000000900010073797a31000000000900030073797a310000000034000000030a010400000000000000000a0000000900010073797a31000000000900030073797a320000000008000a000000000440000000060a010400000000000000000a0000000900010073797a31000000000900020073797a320000000014000480100001800c000100636f756e746572006c000000060a010400000000000000000a0000000900010073797a31000000000900020073797a3100000000400004803c0001800e000100696d6d6564696174650000002800028008000100000000001c0002801800028008000100fffffffd0900020073797a320000000014000000110001"], 0x15c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x14}, 0x1, 0x0, 0x0, 0x20048000}, 0x34008050) 29m12.808019907s ago: executing program 3 (id=170): syz_emit_ethernet(0x7a, &(0x7f0000000100)={@link_local, @remote, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "f2b900", 0x44, 0x2f, 0x1, @dev, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {}, {}, {0x289, 0x88be, 0x4}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x2, {0x6}}}}}}}}}, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a00)="54000000100001040000000000000000000000000000000000000000000000000f00030073797a6b616c6c6572300000240012000a00010076786c616e00000014000200080001007b000000080002007f000001", 0x54}], 0x1}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) r5 = openat$autofs(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, r6, {r0}}, './file0\x00'}) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x104000, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000001d00010c00000000e2ff000007000000", @ANYRES32=r4, @ANYBLOB="80000200080001137f0000010a0002"], 0x30}}, 0x0) r10 = socket$nl_sock_diag(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r7, 0x84, 0xf, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0xffff7fff, @loopback, 0x74}}, 0xa3, 0x3, 0x1000, 0x4b5c, 0x1}, &(0x7f0000000280)=0x98) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000002c0)={r11, 0x4}, 0x8) sendmsg$TCPDIAG_GETSOCK(r10, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x4c, 0x14, 0x101, 0x70bd25, 0x25dfdbff, {0x1, 0x10, 0x8, 0x7, {0x4e24, 0x4e22, [0x3, 0x31, 0xffffff01, 0xc3], [0x6, 0x0, 0x40000000, 0x7], 0x0, [0xde, 0x7fffffff]}, 0x10002, 0x3}}, 0x4c}, 0x1, 0x0, 0x0, 0x24048084}, 0x40000) io_setup(0x8, &(0x7f0000000600)=0x0) io_destroy(r12) io_submit(r12, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000000)='M', 0x1}], 0x1}, 0x1) 29m11.632799182s ago: executing program 3 (id=174): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) (fail_nth: 3) 29m11.222032374s ago: executing program 3 (id=175): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 32) write$6lowpan_control(r1, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:10 1', 0x1a) (async, rerun: 32) socket$inet6_sctp(0xa, 0x4, 0x84) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@ipv4_newroute={0x3c, 0x18, 0x35f32a6dfa748ddd, 0x1003, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x6, 0x20002000}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x3a, 0x0, 0x4, 0x0, 0x7, 0x50, 0x61}}}}}]}, 0x3c}}, 0x0) 29m10.266543454s ago: executing program 32 (id=175): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 32) write$6lowpan_control(r1, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:10 1', 0x1a) (async, rerun: 32) socket$inet6_sctp(0xa, 0x4, 0x84) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@ipv4_newroute={0x3c, 0x18, 0x35f32a6dfa748ddd, 0x1003, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x6, 0x20002000}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x3a, 0x0, 0x4, 0x0, 0x7, 0x50, 0x61}}}}}]}, 0x3c}}, 0x0) 20m54.005904312s ago: executing program 0 (id=2768): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005400010000000000fedbdf250700000f", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r4, @ANYBLOB="000000000000000000000000000000000000002b86dd"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x810) 20m53.644621849s ago: executing program 0 (id=2772): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x24, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x0, 0xfff2}, {0xfff1, 0xa}, {0x2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c800}, 0x80c0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r1, &(0x7f0000000280), 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x8100, 0x0, 0x1, 0xd8, 0x6, @broadcast}, 0x14) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f00000009c0)=ANY=[@ANYRES16, @ANYBLOB, @ANYRES32=r0, @ANYRES64, @ANYRES32, @ANYBLOB="060005004e21000005000500070000000800030001000000"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x4) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f00000004c0)) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000940)={&(0x7f0000000700)={0x20, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {}, [{{0x8}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r2 = dup(r0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000005c0)={r3, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1c, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f00", "90be8b1c5512406c7f00", [0x4, 0xa]}}) r4 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x40240) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, 0xffffffffffffffff) write$UHID_INPUT(r2, &(0x7f0000001880)={0xc, {"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", 0x1000}}, 0x1006) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x30, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_TXQLEN={0x8}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0xe8030000, 0x0, 0x40801}, 0x4000000) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10) syz_io_uring_setup(0x74b3, &(0x7f0000000180)={0x0, 0x0, 0x30c0, 0xffffffff, 0x100002c1}, 0x0, 0x0, &(0x7f0000000000)) epoll_create(0xaf2) syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) writev(r2, &(0x7f00000039c0)=[{&(0x7f0000000740)="ac57081df2062b80351b69d289b4e90a60bebce5209b1ba581f2df20a62ae292a4f81858d4132dd31087ef59792e047c8fd8f5c1864af37f29897e584ecc110d9b5cbacd1c9a13f7f58dac099868b956439aa1ed6dd10c5bc7268d42249ffe3b53c8d4a5bb992078181ddcd41b74524518addc4c13e454f2fddd16e762e0daf021549dddb80cd5220777386a30dc39f7c3057ac18d5fbd132a784edaab86405654cc279fb84302109b82c1d0896521b2cffad9b4689a5d334ea9bc", 0xbb}, {&(0x7f00000028c0)="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", 0x1000}, {&(0x7f00000038c0)="8d48722b8ddf4364d2e59779e4ecb0b1848bbc39dbb22e120141dfb1aa2daaf14f81f19972bf763a53b9707d373f909ba8c93d86225bf1da5016bde06d15e93bb51a7bfa0d0f6ce6b8a899689d3d854cab0e203f00f2bf2cab4ddf17db6d0463d2179fe0c57ea6f787c7325eb5d6", 0x6e}, {&(0x7f0000003940)="7f08cdad25b8a739fc325fb350c2f62646b8284ccc5341878c8bf88124f4496c32a3e72aeacf14beed00009939a3ab1d2bc9262ec123c31af1872d5c4f432878cebd2c640740db930b1567193c4c5ed334f1b59e235969603ec053fff3d2fb1d7fdd31a9f7db953c53206d", 0x6b}], 0x4) 20m52.448142697s ago: executing program 0 (id=2780): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x0, 0x0, 0x10002, 0xffffffffffffffff, 0x7fffffffffffffff, 0x7, 0x7}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) setsockopt(r3, 0x0, 0x484, &(0x7f0000000600)="060000007f00000100150000000000006d6800"/44, 0x2c) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x0, r2, 0x3, &(0x7f0000000000)) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x8, 0x0) sendfile(r5, r6, 0x0, 0x20000000000002) 20m50.559715185s ago: executing program 0 (id=2788): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect$uac1(0x3, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000008861a2d754000010203010902600003010600020904000000010100000a240160d70a00020102090401000001020000090401010101020000090501091000ff0004072501040704000904020000010200000904020101010200000905820910000079d207250100f10d00"], 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r2 = socket(0x2b, 0x1, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$unix(r2, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x270) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1300000027000100fd0f005c4832b54c01"], 0x50}, 0x1, 0x0, 0x0, 0x8}, 0x0) 20m47.389674827s ago: executing program 0 (id=2799): r0 = socket$inet(0x2, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a02000000000018"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x8}, 0x94) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x2, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x200000}}}}}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) syz_usb_connect$uac2(0x5, 0x8f, &(0x7f0000000340)=ANY=[@ANYBLOB="12011003000000401e04373240000102030109027d000301053009080b00010107fe8c0904000000010120000924070000001d000708240a0001ff23000c240302070300040007008109b37200000102200009040101090002030b04082501000c40040009040200000102200009040201010102200009058209080040"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 20m46.753384898s ago: executing program 0 (id=2801): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000600000008000b00", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x629, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40018}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x1a}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}}, 0x10) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="0028000000000200140012800c0001006d6163766c616e00", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) 20m46.225683848s ago: executing program 33 (id=2801): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000600000008000b00", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x629, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40018}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x1a}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}}, 0x10) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="0028000000000200140012800c0001006d6163766c616e00", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) 19m20.639255961s ago: executing program 6 (id=3164): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) write$char_usb(r1, &(0x7f0000006800)="10", 0x20) close(r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6}, 0x10) r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) syz_usb_control_io(r0, 0x0, 0x0) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r4, 0xe) r5 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0xa8000, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000100)=0x15) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) syz_clone3(&(0x7f0000000340)={0x41920100, 0x0, 0x0, 0x0, {0x1e}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$NILFS_IOCTL_GET_SUINFO(r5, 0x80186e84, &(0x7f00000001c0)={&(0x7f0000000140)=[{0x100000001, 0x4e}, {0x9, 0x6, 0x2}, {0x6, 0x7, 0x2}, {0x7, 0x7f, 0x2}, {0x2, 0xb}, {0x6, 0x7771766, 0x2}, {0x1, 0x2}], 0x7, 0x10, 0x7, 0x3}) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) 19m16.441411058s ago: executing program 6 (id=3187): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000fdffffff0000000000000500180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000007a0000000600008095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0xb, 0x0, 0x0, 0x7, 0x0, 0x0, 0x410f3, 0x1c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 19m16.188036247s ago: executing program 6 (id=3189): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x16f}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x300, 0x2100, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x363}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x20000000, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040c0}, 0x8000) 19m13.540523303s ago: executing program 6 (id=3203): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000006080)={'wlan1\x00', 0x0}) r3 = socket(0x15, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYRES64=r3, @ANYRESHEX=r4, @ANYBLOB="2c726f6f746d6f646530b0303034303030302c757365725f69643d00"/42, @ANYRES32, @ANYBLOB="0000000049446171d4c7178b53492c6746ed264a22e728cefde610d244eabafd8384b93cf3e6e656329790e27b58f8b00b539377e885f1bb9d8b255974a4ca9120e04bdf98c3b1f1496e891035c99ac1ee00f2d769a204deb5479ca5ceb55be7628d4b", @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r8, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r9, {0x1524c422}}, './file0\x00'}) ioctl$int_in(r10, 0x5452, &(0x7f0000000240)=0xe955) move_mount(r8, &(0x7f0000000140)='.\x00', r9, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0xa) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000480), 0x1000000, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r11, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r11, &(0x7f0000006300), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x22110039, 0x1000, 0x0, 0x7ff, 0x58, 0x0, 0x0, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r11, &(0x7f0000004300)="d5c2280baf4e05cfa1d1112770cf43a123827586f0f2675b130041ff58ba6533ea7947f2f65b1d458fe88a96133ea3927f41fa6976fad8c967c88679769ee674b80debcd1ec6ce1eb490888bd66a52141fa82f51882b22a8e36ff462b51560307cd0048156800ad137f359719a9c5d6ad6a8c999984f22461c4ca6614ca4cbbd5e9103a3459228e3bd35e3c1cd5f2a83fbefafe7c5a39617ba1d856f37977da077ffcf4d52f5bb3feffa9e100b0279cb635a61ae9f5f4491bb1c9f04c041818a1ae9a25cbca38c4b4754a8be4f52db20ca464b3b4faf0ea8ff193b414e7b7a4ec8aec2e77adc43d09c62d37fc0aa6296a56a9445f264a245d41e77de43c2694cc5885ebd454a3b78b60172e3e6a2fd79efa8b5fbbe827512aa0656920858da51616244ad32e53ed039a270c042662bc966a8fa05e23a51c76585a6f753e57c63b5a1dd11c4ce8773702c5c759471b79ee9bed600d99853afda9b675f071bdf6ff4eb99cb1ae0128ac1f8132f9b7bef82221276395e59f1323c9f9f6bb937a9db0bc2088670ffc3e6233ba73d4e324df7bc866e84e82ab707ab8aadd593913dd3533cddb396e804a63155ad6911962bc49bad21faba90b5570b62d98eb5328214a7198b36ea6df9a72dc248311040e01539112e1d6bcb4ed9d7fb70d22768ec6603e4727b6ed2616eb9108524985ccd70f1361f68b1fb7088829acdd59ec5af9e84409737f0d852a3c55993cb7398b5640c458bc036115b86de7b8e68f1cff882ee5707040571c3e5c9602c773459cfecad4917d8ba2902bd64a676e2c6e507d06dbc806c13c0fd18175087440ce7d7300dfe745b8e98ac63b400e449a3f2518c6112c9864fde68f580ebc2d72e4bbd03f16a7289be813c258b02f76ce901afdafc69046c947c9e801ac635b2a95cca291c052c7f8149c92aaeaab41edb34a70604a7538c4bb6486b983416843fe6a65d7b828d66deb991e71526b7627e71c6a795a02e787bc561ec4b65d4742a129c59bc71b323850cb416f3d32494d6dbfe3ea73cb473b093ae0b0ebbbd3e3251ece756b3cc381f05ea1b8c3f7fbcbb16fc446fc084725e6c3a608221aad8d8179112f9e5ee3697346a0dc0645e530df523cf4daea14764c25da2da863adebaccefc2c83a9257b3131ac2fe04a27bf3aea8979b6f3091b4fef99e203725368d297bad3b020273d0b606d2368e2ecb0776349cb86bbcbaa5c910636527e3cbeca06b4135170d8808c5f113fcd77ecb2f099d1e663617a46ffc5275c8fcc339d315ca1583f66fe7a7e6430405c0be889826c07fcafa17f04e08bc39570a1f499092d390c5dba82d259f652307ff941e9f1f569a48144da846f16152df295553de6ef4e9ba0cd98dd16cf89d8bead08eacd4eea71cc5f8232349f2d8519b1172c724d3bbc415c19c9e679b5a96bc9051cf6f243f243366622023ab1b7039a89152e7db97f291bb3f0213c445c25caf5f0a5a2b382c841cd8a490dc97d008966e94ed0b5ce07bcc0c13b39c349e4b596147a633f3a73ab6012a1582d3d283293bd7c01f99cdbad8e18d24867c39ed0dc3fc3cc800edd23af24b225acb2cca5aa264bcda40e1432cf2cc0050efdff48fd49ae4225a983d1b12facbaaba73294eb225fff64a677d0ed2cd71bab61b3fde8a1fdae638d2036283a8a4ff5a548d05cb706f56ce7e3f55a688fa6c70393c53c33be11f34a38f61f80c8e94e50fc9d7c3695d234705bb9e0b2a8316cf54d7963f548d49f153bf796d0970ed1264c19d79eb77fd0aad4844796cec73a08206b9eca76f2ad76318a20d52e7d3338eac40d03775cca0c2b29a451cb10bc141289c2703198e7137200a360463000fab97d0da72a7b4e8aadfa8a2e559a7d06bf49d6d4a932cb29994ef7ca0c1beabf05b898bb2338e89a67373d50614300f13523fe451d4058e5a522d364ec884099ee3c6e6db8d4ec1e5dc08d127b6301a308a1d6798878c28ef828b91b529a22b7519d249a189a7eb942b94ce26148ea8bf16a44261cd9691ba980ec2d0c710dbee41756cb39b88213ad5763239ae7636e983580c41a40b0f3a3af9fa6f995ed1981d073f63a623554bb01869bdfda190bc8d9507cc067b897e1c5f0d087cf8dfcb171169541fa3cce7c3a620544c74f2d3234935a0acf6c804c43992812925cbaaa24f497e7a00efb20c45c7acb80adb3322cbe0f08d1015b40f5ae1366003ebea977b7b95f803487d10aedca3fd018cfa7b267dae604ed0ada202cbebd731f86b7c6764911d4ff0c75a318ee43b1b556781ac58fbd773b2bd0dd693f9b12fa149bbe392cb2d6bf72015912f4a120e47654d42d14107c67b4502b5ad62044d0022c7f8b255a3e46da4bb8f9e44515e4076ce7b1aefd57c4e264b2cbee4a9e8612ce8517b028067644c927a9ce7564449c8fb0471a87b9b76f374c7c2559379a3004326bdc91be5ec52672dc5fac0883ec527f2a1248601bb9267c3123568b815b90b40ba06c250e3068dee2d7fc232141eaaa130443a5775d049464ec454a7c980d9eebaa4f67a75075a6bc28ded9a5f07fe658a2b9eafa37f14055155409d1aa50be6343d13d515d0531b84644d2f58c280d6d008dee95607f67eb74c900f664d97f411f4ac6afc18f11b6fb75e78b3ff25680ed3bbf5b20969678475b86faa02a751e4cec87735645753f245047371c9e6e2e7ab5a9ea3182b4c96934a21b9df3628b478f5ef705aeda49a0609d4b8f5bf34424581557d029438306002fd4e9cff5a2d4e7d5e23c2992032d314b8fbb46ccda250070fc1b679c9c8646c5fe22d8fe2e0fff73d8153fc46ef7885aeaa2d1eabbe455544d46fdef8e3ef9debfe589870942bcc7196e62736e927c311782b5e4da2889d530a7c1550bff4909d2055941655cbcc5c924a477c80fc3b8a904cd9e62f5fb005b5b00154db5becbe327c0f3ec8314ef3fb53977ec24ff7d15aa83a13b23ab99c5332306023005d2dfb70d3ea2aefababd019ae16d304c083e38997cc94bdeb746fc151849c98dc2a23554e6fe789d3aba8bf4e31133c7f93a3cdcd884271dfdd2c45be398a5349ef5d08456178dfafa31cb4c607f09394d71b3405b3d615c7c59c125db88f72380140345d24c56094711dd833221d6b7c5864d049585605c1301c31982d19e403b601b797fe99d0bbfe30d647a913da72b4c5306f6123e7c572828308a9a8f4c686d07125d0006229c2e890ff7d3c354dde61ccd3b26069a81a98e112e61a930f253d607cda5023f002a09df6b1371638d9661c5a06bed166434f07120ad21476de8ad47296af4b449d581cddc74f9be42a84596fb0634f330a856216a9b32b080c8b66e9f51a758b9ca2e1215ddfe633714ca512032f6547217b1a60fcdb27ac8a04bc7851718b38607bc92c13118a323c3221bad99a8639762abcc4a08654da9938aeb301c55546f5ae7f61439dd883a1b2dede156a57c805ab12337d5381a2fb25b32916a8827fc4de8e2ecc70eeebeb01659d6bf88055477b863fb897d5db275a0c222d261e7df79474858b721e57747fe8997faaf36f5f175b23dd3c5efb2b93fb5824da18d635cd7027a3b0b1c87e7c90a5681682b8a7c47dc82fdd3f329c7b60270100dec8ccdd310245b92f4b0bd9a92e1f2a5733b1b91966be15a4761b06f6fe3b05b60ee7964b4d028257c2210ca88031db0590190d3714c1b6ec86e2821dca03db2fc0c9f0ad9800d1773c8037e9b38c7eb7c99618b731e0526f8453c7e1bb67cffcc2d96cc297e1f917b13dd7dda2a8b12191ed107c1e076ffd4965b9415f830be97935cac23a87f07e26354273c2663c7ef19a27dfe08543fa057e1285c909051602981f5929078214058684bc80bed493f6ef853012cb654d180e414fd484f5cb2cfd06c9b753f417697ff42794649e05fcaa3d53ad0fdfbb0db57dc549115e59978b14dd621370d136176098af2f39a2de72482a29b616e8b308b3d9b46ac9abf3d57ff89fe59b5a97966cc4b97d06c20ee4fd765e1c2abce54dc271a7c7efe656648800c27a9988583b4b76572222cb28916b9ff5f6f649de93923179809405c879a90cb450f604cbe8af55cf2a6d844a59ab0393b394e09c79e1b3c403af6eba69330f6969f78a49eb7022e77a39363f11e07fcc69f670f63c11497352f3f5bfea0aee446da35428cebe28f1c2d23ef3ff97e16ceeb2f88ab19b2b69dcdcc81b947b483cc06c776c52232489f86f4c377eb38056042e2e9e0943fc0ef1490df472b9b244235598894a2ffc296f0a2e4257baca6a3ea8cfb1a22ea8295ab9e5faaa2a9e964ae7625dbf945cdbb369265f429d475ab69413cc5bcb89af57b1b966bd0076f799a401d4b46e5045aceb1ef36e5bbfb037bb7681f2a38ef1df9b84baa3598201d13a813165355bf052bb5e456dc0abdefed995b4eb37a39b313af800f6029243a6a7bec75a23389a90034cac8df6713b919028a14649d756d0093550278aad494de2dfeb76220fd3ee5be31f73839ace7f0d6da650e26f5ded30471ed55d2e814fc1b89102e5917b4e58840ecc211eaffa5a2937abeb882ccdf29308e3ac30e23d66ee79c29b4fb7e793a55e344cac298e30f1ca3333df8b58f43126a3404a61501ce06b75e6e6a4bf13dbfb05efd7b9b4219efd428c8f7f345884640d19f5515abcce05f315f00e65d9aa8022890a23da45ede06f455d66e0c96bbf7e9cc74eddca999a51174b4784eba8a9ebed13415de6bd0f160443d43b78181cfa381313a54e25f6751a38f290e5972ff7f70692e18c4737af2a7f6d4eac52ea594a22be4fd00fac1484e6d2d4d3196b49212b49598f5bc77b34d8a3633cf7212c869557d6eb27bf0d0a02555d9318194e9de9c9730ac72daee7cad6c2d4b248a8744515670766a8f1c739917fb859d98974532477989f4c24345f120f5320fdb8d8d56fa6ff2511e701bab399513cecb3e740e3761d02685a765f5267554d0f9243b51620197adc3b561b59c58f334307220db357c1121d7dbf6cbc6a7e5252724c83fcee85e304534780a01e7ecceb2ef53ffb6bc6cb9051b1400493ce55d62c01e972fff3cc7d0b68a2dd4d263c9191df1b629e323797f570083f122db3df6abb6fd6c4a351bb7500c7241e4392ac76e04259968e517a43e907cb0b0533d6750b9587a1a5d852639c6b789d333e848e3ad66cbf19c5ee5a641036cb7a858f822f657dec36cc134d6c1a629cfce1f1e24dbb73d09fba04f53b2c6309d71d92211a1f08535244eefcbb52e095626bcc78b950db1cb8facc3660fa705dceef155b00aef3291367ffcea06b5abe588bbdcea2637761308dc65509798b6a494dae4a75c1922c1234248dbfcabfaab3088a0dad09a135a45d75105314020f3ba8901dc39ee624a32e9f863ff55844974b44e57b30302cd0c349f3cc091befd5665f918c298ba89454fb811ce573e41f27490853a52abd6144e85d77de88c3f2e5506c8de40a3957e65936f3b294ce92610b63cec888cb16fe0e8a7af3dd142da96b57f602cc64ba69966724584c2872e5fc42348a324ff082a3ecfded82c3e5b7292d3726c4800176acab6a7a1479a0b5fea79f299e90ffdb1b3843e2349b8f8dc7881145b3796380474c2ceb57e27726c9e50b746a2b12a214fea9cfd6c668363fe6e402710665118928fedb2f4900322b0c7d2c348881ea52278dae765c14b51fd5e8f000602aa3978d83b76056410c2260931e35d841793c8a36b191f93c33c0e4e6367ef45a1cf5145d774861224afbb11a7b77bb94492ec49827f713f8309d80d22e17701046e04c5b277f7b423cbbada01e6d40beb56e755e583b8f3de4b67c4b5ac83771b805fa7af49de2fc8b9a223293d83e7eb4eea3a3af1d1221e5d458e7cab60eaf1b51550a1b125ce018d76096f16d922f4aba48a728ec1b7d4812fe2ca789261b6d8e0c8edb3ba9007649084899c4f6b7986c1cb4a98d412c801fb91675ee42e2bb511bff6700772d3c03a7cb6adb41cbddc33053f8f65c164e9bd47b931510046506b169216d0a04edc479bc51c28acc536ced3834a7a9ce8fb55b72fa186a559437bf41f04b733e05986c915bc19f1b2f99d3bae6c13873d32e3c809b71881c3075f8dd1746f36409ac7934c25236ee2752560fcdd5175037a6fc5f0da58a229418ce30f3e64f9eb6ff3fe4498f47fdd69ceac5e792c8c9f087316f334b7f75e3432d3f1d03ee97c8f16485ec906c94e6c9580f7d03d98a8da85ec118b77c6c1d3b2e99fbf4b45e66cb4f8817f786d1f90e1e5e250be8c240a9648a219a02e62acbd72d1b0c0b42c75065a35664ea6a03cb05ea179f2e8e50e3d7ed53d31cdc10cf5fce48781fa338e3ee819f410540f045cb0edd7b2d219993faaa97cf95aa6144e889a02069421291d05eade30693a751039fece452c22d1afba081d1c40178fed7684cae475bcc365484118a184670cd7aa2758bdb01058ea9b244d5241f627bc5be11c9395e3cb839b0eac7842a312e1fc8b4ddae2aa4ef907ca5c9b847785051323e16d5497c4424289496277475bba67da750fa05bd8be730e4aabaeb94641fa2263dd3d4eb511b4fa40b8cf8b16d7aded1163f2258add79b04e1eb888afa27d057de2523863fc2da38d44cc69ae2d455900eede5fce69d7e9f8707cdb2456a45dda14d257eee4982f86259b855a0293068aa4aeff9439bc06c8ed5a370fe46fa88fa9bb92872166ac69152d1cbb4720eec5b9a057890cbb838aef12091454fe721395b46f9fa29ec1829fedf65aaec1176bb9eb15511bd77e7d4fe7321b3e0dfda95e5c90c3663956477885d6d94b280f58edbc77e864dca73536cd4988bcde2a3edb91704ad59148d85a001e393cebdb56ee088fa1033cdc6fbcbea30e2974035bfe29cee1eace13e30950bb4658886dae7e565ffd7b71e41feecbcac35fd97c81a8fff9d2a1d43f183c6e984671e06645eb0a60228d1b6c12c28bc6eaa4b9125c57b48ced2e199ed3acf12dbe10af4a56f2f5dca829fd07fc3f7e0de6913c73be0ada3e43bcbe70de784de699d0b51d7a56a3eacaf5d7dcd77d73cfb82e04633574213e05dc98850d822bc6dc90dc3fd6184296287342e2243fe6f0cf94e6d02a1b900d0c718e2afbe7fea2fafa375f209fb9cef5d844b861a1029aa3dd7081e81fe6501bbb413dcd23e013f279ef87e082335ade324b7688054992ccc63fbf9153213ab6d07ed0b79945d19639aaa5dd10e53aafe57f1e323300246cb1d6ede1eb1f319ca6fe1b0cc8e733b34818425888110b6eabe2db302310d0a8bcdd5342146b29c535cc9a95a455c8926d77323a31b948d47dc611815a329654a252fd09dbcec5f3cd8bc7e465759eb8e72ff6fd4ef1f375e4e8762a58148622d14480b7bb9aca2eeab3367a7376c9c85e6ba1735e56ac8d21942883f318eab7a568fc7ff01885a7089aa7661b15d73799bc0b8f8ce6a3b61adb6949965a223850b6825616c036e099952e04fde7cf086b5e76d45b86ab78b322f9af580173f2e798a39df7cade0d365c9d46d3fb36970f8a99d7b20a1b275afff852126f21ac24ca8c34deb49ba511f4d9edb4f56941aaaa477253f9bfc9a25a2694bbbe3b917074dd4eb6f1be20395ac33dd932a7ccf0604d64257b5af3faf271c145c190a528e471a7f23a53b5f9ea1bd0cc36410e9c538e91dd01d162edde856087b60dcba2042e65b6ae7b81787bd3308db9eb025b6fd930a9eb74a30883b83cfa8be5270dd3ee3408db7f7b136adebb3ee30f0e0b8835a0ded325363e4a2991cafd4a73483954c0f5d3358b25780608fa48f3f527c7e617ec12eb017df33f5088676d8bc476da251e608394e3d8fc0883fd4d1804f8e07f5e12ffa4ee80365a88abf29936bf1b255539fef95f5cf3bebcd26817edb28e7b6adf4851dcfe8aa1aa097f67c51557326ccf9c46ee2780d491e87774324d4dcf26f2e472a5e199b0cdef01094ea72bd5ad5fe1be6c9d545df3dc5de550665d220718a2c0baed2833cfb1428e2d1c2b9ea1e29f4b07fd6c51492643d4000716cd1e8a4f9d58b6b04b805d8962495323fd62949b17348418201664c6f2f651f99d73f8d17bb5e52dba2e6f94fa33f816d74bb6a45bd6cbdbd07f530406227c8fd11f390e805bbc17bc0e81076a27c0be023b64777afec0a7a0c3f53f03bc2ca72ae2873d68217a1a6905f414c2cb1b9561dfd07850a026da5f5775a66f8f3a6bc29b48c8a81b06ba30994ba8e7e233e3a3a5d886767ea6de91fbfc0a594c2375d62e71c7209d87d0f6c7a79a0d80da328e93f08650ec745495c771410913d094e4190075b7225761172eb420c82ab493548f6de38e17d3e687a89ce77c67c58b875c48c8a4d1664cbc6f67df357e040444fcd515d92d5823fc3ef6485208b6f3eda8cd09ea3b004f7eb06ac268ae8c3bf571aa3f619222a47540f9af340c80c587f7226e3d715b18c3ee41f64777d3a0a09f32190ad67922f6ecc63c956a715c3c42a6aaaf5e588d119210083ceaa414820b62fef87a678cd3f24f8fa3cdb6629b041cd7555974313f56d1b0e117ea925dc95e18b5d3f4ba9812f1067022945c3f5d547370d45853c4db3c9ca4436d7e649e1ac3ec02f9c1e9139849b46027d4b276cb0eb4b09848999f466f528290e47ba9540ceca89390db3fcbacb1d566e22e917f01f4442bd4dd0d350d057ffdf5b3549ca559901e6ff5147bdc25c11b23f1678f02c20e4e2e6f339b262e2b82eae0b15b4227f1d514f99ec78fbcf80c8f6f243536f2d7a809de05ae5e1d676fe950ad3513f801bbe4d16737def4b5ec4b62f8562cd5432bd372645202edeb286662d7e8d0dadac5b91c903c2756bdc4f5a7c931f2c3f7feace2b83f5459a196000e2ed1e1b2accaa9d637d5e408340161331c4b0047bf2ab31d317bb1c8f6e1b3d52f9f240bd971a447942dd4b73301781656aad9ce9b01aed907b7eb3a78397b97e601b04a4cb028d327ef32cf20c34e8dad9c9b1f981ab5c06a2b0271852e2a1016ee460d8568391c9ece5a2b8f29cbc6f2d6cc2e66c30c96df548e67dd6ad8c1ff09dfa22b2e8b2c52a3948c4febb09e3c2d34c0604a5ef930cd53be69a4bed9c9ee057178ece02a6b4df4624191590952888bdfafd2dbeca128d500872a8b236fba9623672c4dc15f56a761ee0c54026112fc464f72d3039587f009b94930dac0dbe444a939b38c0f5bce7aa366bfc2bb909db231178228846f71a56ab219e28cef1b102c1bfadbe8f0916d10a573b8cb38cc2cc2ec496a410a4e82847006d2ed4bac927a63a00416d0bfce59cc69aaf78ddc9566f23582999a655c8ad3b217486fb5a037ce089baf344d55bbd475be4e90b10e92c9c1bae3202c2d63355549f0ac95058724fea81ff9cec027e7b93e2cee43af81c6978fee5faf6216118785251b8ca023115b2f87d5d4b10c29aa3616628ab40a8ef36668ef57d7f9be505eabc01947ca222362818a71b3d63e5725a4d8a2c619b1867f70daa07703360d026d6f65247330be1ba84ddaaa7779591ca261beda4f4c094af65c5c276fe3bfb89f067c8c54af67e78f61bdc114ed4aa869c3adf282d7a8e7272579e9fd9e47611e0dc89f97561110e0141c69b1fa114e27b3d1e2c825ea008a370e08cd0a0610edef20cdd8a7cda0922fff046edfd2ff391a10ffce5dd6045619ce9af6b03f4193d858a76b201ed5beb0f11321707b7b593b23adaee4a0c0caf39dfeebcbd2948030435dc94ca00990c728502ec4686194f0f454304a422023c1b2c5b1ebbcd8cd50fa2d11361e3bbdc306e2739e27de300eda27b1c1ea62d773104cea77c18037c6bcc76423621b45abbe789b384bfdfb46efa1627ff29d9d840bf6e1f05e7e13fae6383e42ce153dcb062fa0cefd0fe9298ddbe77fd78d7036b5a815504b48267203da08ca685bfe8ae89c031074bbe5d3d6dcc6a3a8a8a4d3102765c3b714867f4516df62f214351b97bb8b5697a9f9a9dd78627342b239c524a3943d1d70f8cdd7391f05e7395731a8fc05210c6733ea256040bbbb53389229b84dafaaa3db1d5eca2971d9e550149461f1a672eae2319a99beed48934520666bc54b63085a744b5fc9a9b089b16c50ae945f74adcd4c5d064a12a6e103ef59bcc035a755ad31836eb7d04e5900d3800c822b96b466a9f6611f46b8a7d6131f91c625a5604de5bf01e5ca5d99a714c8dc1160260010f8d55f9125ee453b61c911bdf0824caa804c76d6512802875c5433de9b2e8b6c579a67fec5d2bc64ed3d1c313854221b75c9a0ed42af6f5354e7b1d1bf8661baa1261e68fc20d14b5652d25a536f208bff2b90fefa163a232696e655bcf95bed39355ec865e272fed582aae18858f5096ece40b9108efb00147f9c2ced59bfe2a79826851850ed95b35908dfb4d9ab7da0668a1fa8933ac4f6534e9598481477791fd1a1c269011ac9fe81f0491790e8aac121ffc00e38a7619a1855e6899abc2c670375a3ba4ac0cf652da89a70628cee1a35ae17b3490102e3c88ca324d06fce2151bc9de49472cf6e76ccb16d2a9cbf4161812e2c7758d73631024190fe9b71935de6968b289d3503b497f3f4b6306446ae9c312f8f1c63c1f7e62652173d9ed48cb128815bd44a12061f9b73fbdc6674ab9e0d01807f7bcfa0aa59168420e5ad8b72d7b576e273a1d229934fce2867689a41cb17767cf9defe1a96515a677ba08e10e187a3ce2f1d78e6b43b0d46c36163a1967b203df4f53379ee98422e973ab5c090adff21b5cc84fc78358021f681a0f0fd744f687e4f6c295470bf8f548d2d3dc841481dd51db9124cacde83bc9fef44a3e69e1cb28579d897f3013ac6133395328247fdcc152e5563678258936576196ced017c79bb6a4ea501a44cb25e5af1697afbdb3abb316837470ffdbe985ac3967334a90731602d3fac4f5c2758f04ec9c161a7cf330b7c7549fb62e6c15d07a7203c94edd3a8141c91b2029d6a90b14322337e6610822d9d7bff58c10d9c6cff71822f6456a421a65fdaa5d2c793f256a4e7a39f0d85d65fb95479eff79345c0615c9bbb4fb3324f9360b70dc709b0200042e8461b8cee9ce30beab3e276df48f41f001262fc14153f9764e13b50397442e00d7b11266bde10a3b7f83818086ff0015409679e4472d9e0215804fa9d21cebfa5cb5099cf88750cbeaaf58c2743f2746ea4cb73760ba88a07b91b68553716d563af5d7702219d0c600916dc54242d825c6d68320baf234a39f0b9ea9e6a4a72c4d5829b2f28508f54b33c7e0394a43fe23e7940d9b04bbe790d903a2d2c979e0ea79931b934d094fa2d5948c05cf278c341d788f2061ff617c9fa4700b1e1f0fbfa1b8c42848f2ea01cd318a8748c3336622ead25527ddbcd8a12ba3a5183f4419deb13558ed0ec99e73448c21ede0dbee9c01fc7675e54c60d4dee29c0f8fe81af6fe7b726f5d3c50dac634aefbf1ca6aa4df1b340a4109acf30939f6094c8591218729788111bfde98cd96d4b04b25bcd1bcb7f826241995573bae00", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x78, 0x0, 0x100000000, {0x20000, 0xcbfb, 0x0, {0x5, 0x0, 0x48b, 0xa, 0x400000000000007, 0xd, 0xfff7ffff, 0x6, 0x101, 0x4000, 0xffff1855, 0xffffffffffffffff, 0x0, 0x3, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140)={0x474083, 0x31, 0x1}, 0x18) r12 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r12, 0x89f0, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x7800, 0x20, 0x8, 0x3, {{0x5, 0x4, 0x1, 0x8, 0x14, 0x64, 0x0, 0x0, 0x0, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x3c}}}}}) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000080)=0x2, 0x4) getsockopt(r3, 0x200000000114, 0x2710, &(0x7f0000019580)=""/102397, &(0x7f0000000040)=0x18ffd) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="11002bbd7000fedbdf250700000008000300", @ANYRES32=r2, @ANYBLOB="08000500060000001400040070696d72655f000000000000270000000800178004000400"], 0x40}, 0x1, 0x0, 0x0, 0x84}, 0x10) 19m12.355623555s ago: executing program 6 (id=3207): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f00000001c0)={0x1, @pix_mp={0x610, 0x500, 0x47425247, 0x3, 0xd, [{}, {}, {0x8000000, 0x3}, {0x300, 0x80000}, {0x0, 0x9}, {0x0, 0x20008}, {0x40}, {0x0, 0x2}], 0x0, 0x0, 0x0, 0x0, 0x4}}) 19m11.887792337s ago: executing program 6 (id=3208): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) listen(r0, 0x5) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x64, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/notes', 0x40, 0x8b) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) recvmsg$can_raw(r2, 0x0, 0x10040) read(r0, &(0x7f00000000c0)=""/24, 0x18) shutdown(r0, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10) 19m10.703048667s ago: executing program 34 (id=3208): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) listen(r0, 0x5) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x64, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/notes', 0x40, 0x8b) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) recvmsg$can_raw(r2, 0x0, 0x10040) read(r0, &(0x7f00000000c0)=""/24, 0x18) shutdown(r0, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10) 14m46.108012067s ago: executing program 1 (id=4553): r0 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) r2 = openat$dir(0xffffff9c, &(0x7f00000000c0)='./file0\x00', 0x50140, 0x21) fanotify_mark(r0, 0x1, 0x40001012, r2, &(0x7f0000000140)='./file0\x00') r3 = syz_io_uring_setup(0x6358, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x80000000, 0x399}, &(0x7f0000000100)=0x0, &(0x7f0000000600)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) io_uring_enter(r3, 0x540b, 0xfffffffd, 0x4b, 0x0, 0x0) io_uring_setup(0x47de, &(0x7f00000002c0)={0x0, 0xfbcf, 0x800, 0x1, 0x1e9, 0x0, r3}) write$char_usb(r1, &(0x7f0000000040)="e2", 0x918) 14m45.699325258s ago: executing program 1 (id=4556): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x78}, 0x1, 0x0, 0x0, 0x48894}, 0x4) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 14m45.46021612s ago: executing program 1 (id=4559): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000001058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000b0c10000000000000000000", 0x58}], 0x1) 14m45.225066253s ago: executing program 1 (id=4563): r0 = syz_open_procfs(0x0, &(0x7f0000001580)='clear_refs\x00') r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) write$evdev(r2, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0x28, 0x2, 0x200, "8a00000000b8af3e8f72f108007c39492ff7e7ffffffffff4bee00", 0xa0363159}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fstat64(r0, &(0x7f00000003c0)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) syz_usb_control_io$rtl8150(r4, 0x0, &(0x7f0000000340)={0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="40171100000006a44f3bee509f885eb4208187"], 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000001500)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) connect$inet(r5, &(0x7f0000001540)={0x2, 0xee22, @multicast1}, 0x10) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000014c0)=ANY=[@ANYBLOB="3400000002030000000000000000000003000001080005400000000008000f000000002008000440000000180800054000000000d85f16ae22c48b12864656f4"], 0x34}, 0x1, 0x0, 0x0, 0x20}, 0x1) r6 = syz_io_uring_setup(0x7544, &(0x7f0000001380)={0x0, 0x43d3, 0x8000, 0x1, 0x48}, &(0x7f0000001400), &(0x7f0000001440)=0x0, &(0x7f0000001480)) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f00000015c0)=ANY=[@ANYRES64=r6, @ANYRESDEC=r3, @ANYRESDEC=r7], 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$setregset(0x4205, r8, 0x1, &(0x7f0000000100)={0x0}) socket(0x1, 0x803, 0xfffffffc) move_mount(r3, 0x0, 0xffffffffffffff9c, 0x0, 0x67) setsockopt(r3, 0x5, 0x40, &(0x7f0000000440)="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", 0xfe0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0)) fallocate(0xffffffffffffffff, 0x0, 0x40000, 0x3) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYRESHEX=r2, @ANYRES32=0x0], 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x8000005) 14m42.417394606s ago: executing program 1 (id=4577): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f00000001c0)={0x1, @pix_mp={0x610, 0x500, 0x47425247, 0x3, 0xd, [{}, {}, {0x8000000, 0x3}, {0x5000000, 0x80000}, {0x0, 0x9}, {0x0, 0x20008}, {0x40}, {0x0, 0x2}], 0x0, 0x0, 0x0, 0x0, 0x4}}) 14m42.028186311s ago: executing program 1 (id=4580): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x48894}, 0x4) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 14m41.480966402s ago: executing program 35 (id=4580): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x48894}, 0x4) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4m31.29879722s ago: executing program 5 (id=7522): syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0x80000011}) r2 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000000)={0xf0f041}) syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x103381) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) r3 = socket(0x10, 0x80000, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000005b80)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x29, 0x84, 0x0, 0xfffffffe, 0x36, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, 0x7838, 0x0, 0x63ed, 0xfffffffe}}) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCOUTQ(r4, 0x5411, &(0x7f0000000000)) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r5) madvise(&(0x7f0000253000/0x3000)=nil, 0x3000, 0xb) r6 = userfaultfd(0x801) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmmsg$inet6(r3, &(0x7f0000000300), 0x0, 0x8090) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r9 = getpid() process_vm_readv(r9, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x294}) ioctl$BTRFS_IOC_SNAP_DESTROY(r8, 0x5000940f, &(0x7f00000007c0)={{r6}, "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"}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r6, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) syz_usb_connect(0x6607ce06876b5dbb, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010003d121b5402d1e820033dd0102030000021b0001040060070904160800ff89e003082148000701229005"], &(0x7f0000000780)={0x0, 0x0, 0x13, 0x0}) 4m29.702523338s ago: executing program 5 (id=7529): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010425bd7000fcdbdf2500000900", @ANYRES32=0x0, @ANYBLOB="2395050000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x4000880) 4m29.489100434s ago: executing program 5 (id=7530): sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x51, 0xffffffff}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=r0}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mbind(&(0x7f00003f8000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000240)=0x6, 0x8, 0x2) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat$vcsu(0xffffff9c, &(0x7f0000000100), 0x682201, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000af5f9bb54a0a416582a61a962b76f08d8e2c5f73eae03a486e48ba54b584ad5781ec6c0e483400000000000000b91bfc92018dffd0814565e3e6bb93cb27c706e5eb8e5a8f813957c21f4b757e12e9e5ba43b53e070a01e47e15ec9b1e2d9cc633cba5e7266df0ed229c629e6bbf303654593e6c833f1b862374ac663c75d15583e07acd2231b1b5fe009a3c8507b9ac2c916bd7dddce404cf954525ecc3bcaac81e00"/193, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x20ffc000, 0x0, 0x13, r1, 0x0) r2 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000540)={0xaa, 0x310}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r3, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x80000001, @mcast1}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x4d, &(0x7f00000000c0)=0x400, 0x4) recvmmsg(r3, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_open_procfs$userns(0x0, &(0x7f0000001240)) syz_ublk_setup_io_uring(0x20, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000001000/0x1000)=nil, 0x1000}}) r4 = socket(0x1e, 0x4, 0x0) recvfrom(r4, &(0x7f0000000040)=""/18, 0x12, 0x6667b9fe4a5fca3, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r5 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r5, 0x111, 0x1, 0x101, 0x4) 4m28.178641252s ago: executing program 5 (id=7535): mkdir(0x0, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c0102, 0x0) write$vga_arbiter(r0, 0x0, 0xa) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r1 = openat$autofs(0xffffff9c, &(0x7f0000000080), 0x6800, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) open$dir(&(0x7f0000000100)='./file0/file0\x00', 0x4c400, 0x110) umount2(&(0x7f0000000440)='./file0/file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) epoll_create1(0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_FILTER(r6, 0x403c6f2b, &(0x7f0000000000)={0x8000, {"8604a0a71359a294b7585622d5b25618", "398e9cb8b9ef106c55992b65958724b1", "04641700"}, 0x2, 0x6}) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010100, 0x4e20, 0x3, 'wlc\x00', 0x11, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x0, 0xc3, 0x12d5c, 0x87f5}}, 0x44) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000003540)={0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000001fc0)={0x118, 0x2a, 0x1, 0x70bd29, 0x25dfdbfd, "", [@nested={0x105, 0x147, 0x0, 0x1, [@generic="fa7aa8360b13ff46e39fedcdd0f33beac134b9622ed3b7eaf049f5ade3b84aaed0e058faf80bb7f67512922fe8039931389f8f17812f88029e6b3b28ab4c925eac7c38b55d1b4eab0d00b6b657", @typed={0xb1, 0x149, 0x0, 0x0, @binary="1533558e8e4c823514b14daffe38441b77d98f11a8094b58e0c2310090ce8f914d5aa7717d2bdcdedf5bf8e7a8df766ef65159a8f115b0ef7ee24dd2b7527cdc95e9999cfb9d70b9c8b5f50e6efe977a8e8e4c4a0f24880d350f478ec57e093c9cc090126131d0cd5810c670e858446899bcfd3222c5951988c43c768a9d2e5a814a854104bf20293881c1c1a8b3ce392eb12951bba145ab66e07a501ace000afb528218e338abce12c43544bc"}]}]}, 0x118}], 0x1}, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x0, 0xfffffffb}}, 0x44) 4m27.004739905s ago: executing program 5 (id=7537): r0 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x8, 0x8001002, 0x3d7}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x18) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r3 = open(&(0x7f0000000280)='.\x00', 0x40000, 0xa8) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r3, 0x410, &(0x7f00000000c0)={0x3, 0x0, 0x1, 0xfffe}) rmdir(&(0x7f0000000000)='./file0\x00') close_range(r0, 0xffffffffffffffff, 0x0) 4m26.928173368s ago: executing program 5 (id=7538): sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x7}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000200)=0x5, 0x4) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000001c0)={'veth0_to_team\x00', {0x2, 0x9, @remote}}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000000c0)=0x6, 0x4) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xbabd}, 0x1c) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r2, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 4m25.989029715s ago: executing program 36 (id=7538): sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x7}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000200)=0x5, 0x4) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000001c0)={'veth0_to_team\x00', {0x2, 0x9, @remote}}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000000c0)=0x6, 0x4) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xbabd}, 0x1c) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r2, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 11.421705844s ago: executing program 7 (id=8561): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000040), 0x10000, 0x0) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800), 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) unshare(0x28040480) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, 0x0) syz_usb_connect$uac2(0x2, 0x9a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010102000000200c381810400001020301090288000301018008080b0001010c200609040000000101200009240103000c24030207030503050303000b2406030500"/78, @ANYRES16], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) r2 = fsopen(&(0x7f0000000000)='udf\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) syz_open_dev$dri(0x0, 0x2, 0x6801c0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r3, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x5}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000005}, 0x48000) 9.481183262s ago: executing program 8 (id=8572): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000100000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fdffffff0300"/28], 0x50) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x1000000000000, 0x0, 0x0, 0xa}}, 0x20) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) shutdown(r2, 0x0) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r3, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44010) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4e02}) io_setup(0xbf, &(0x7f0000000100)=0x0) io_submit(r9, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x20000000, 0x0, 0x7, 0x8, 0x0, r8, &(0x7f0000000080)='\x00\x00', 0x2}]) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00', 0x0}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r10, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="20000000ba84c8bdcd8a14ddd7af90cf1b0a0000fb768f5247bace132430b77aa87e92a36f2eee140f759b83c637c7e3661ec1a17212754548cae23343cc43fc8b613c4145", @ANYRES16=r12, @ANYBLOB="00022cbd7000fcdbdf25630000000c0099000600000078000000"], 0x20}, 0x1, 0x0, 0x0, 0xc040}, 0x41010) sendto$packet(r10, &(0x7f0000000240)='\t', 0x1, 0x100400c1, &(0x7f0000000200)={0x11, 0x8100, r11, 0x1, 0x87, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) r13 = socket(0x40000000015, 0x5, 0x0) sendto$inet6(r13, 0x0, 0x0, 0x4000000, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x39}, 0x4}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 8.196464628s ago: executing program 7 (id=8578): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000240)={0x80000011}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0xf, 0x3, 0x2) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a0073e37e83276db8a707e1bcdd0b7d7d6014d649f5241066ffeb1443fc0afcacfeaef5e555b5fd4b888b20841f6ccf0a485c6e76cc93258fb188e9ab9a3c477845efc6cb671dbcee70c215abd3b9344f7e8e7c94807b4fc90e1d4a07ae3580d48640aafccef914eb", @ANYRES32=r5, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x8000) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) 7.912768784s ago: executing program 8 (id=8579): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0xffffffffffffff4f) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f000083b000/0x1000)=nil, &(0x7f00008a6000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f000070b000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000608000/0x2000)=nil, &(0x7f000024c000/0x4000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f00006d0000/0x2000)=nil, &(0x7f00002f3000/0x1000)=nil, 0x0, 0x0, r1}, 0x64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x1, &(0x7f00000001c0)}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYRES32], 0x50) r2 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="01072dbd7000fedbdf25260000004f65338df7b501c82a03ca3536c6d29b05f9e529df56786951c32ce4845a5465f785e957fe7efcb9c3ae30a12bc3f355488a769827703dfc88641d0c6fdd"], 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000002878648e90b83408ae7b6966556506678251e31cf77d9fbff7e56e85a303208622001d772bfde74352b5aaed4773d346162ddcadbe49e0647af4a48c3cd7e45c1dd9af74730d4e68963e350730d29f187d5ac0dde58fa80871cbcb836fff7f4298b5743828", @ANYRES16=r5, @ANYBLOB="02002bbd7000fedbdf2514000000080001007063690011000200303030303a30303a31302e3000000000080003000100000008000b00000800000600110068ed0000080015000a000000"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x2000) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x4cd) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r7 = syz_open_dev$dri(&(0x7f0000000100), 0x4dd, 0xc0100) mmap$panthor(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000002, 0x2010, r7, 0x806) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000300)={0x28, 0x0, 0x2711, @local}, 0x10, 0x0) listen(r6, 0xb95) io_setup(0x8, &(0x7f0000000600)) remap_file_pages(&(0x7f0000903000/0x1000)=nil, 0x1000, 0x0, 0x9, 0x0) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000100)) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r8, 0x65, 0x5, &(0x7f0000000140), 0x4) 7.196053825s ago: executing program 7 (id=8583): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async, rerun: 64) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xd, 0x0, &(0x7f0000000040)) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1a1d, &(0x7f0000000180)={0x0, 0x755e, 0x13080, 0x3, 0x2b5, 0x0, 0x0}, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000000)) (async) clock_nanosleep(0xb, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) sendmsg$key(0xffffffffffffffff, &(0x7f0000002a00)={0x0, 0x0, 0x0}, 0x4) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000018c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x4000014) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x61, &(0x7f0000000a40)={{0x12, 0x1, 0x300, 0xd3, 0xdd, 0x71, 0x10, 0x46d, 0xa0e, 0x61f7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0x2, 0x0, 0xdc, "", [{{0x9, 0x4, 0x39, 0xd3, 0x0, 0x3, 0x0, 0x0, 0x9}}]}}]}}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x1555555555555801}) syz_usb_control_io$sierra_net(r2, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io(r2, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$sierra_net(r2, 0x0, 0x0) (async) syz_usb_control_io$uac1(r2, 0x0, 0x0) (async) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000500)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000400), &(0x7f0000000140)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, 0x0, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x92e0, 0x400, 0xa2100, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x8000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x2000, 0x0, 0x801f0, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x73}}], 0x1, &(0x7f0000000340)={0x2e, 0x79, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0x3, 0x1, 0x0, 0x0}}, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xa, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) (rerun: 64) listen(0xffffffffffffffff, 0x8) (async) write$UHID_INPUT(r3, &(0x7f0000001040)={0xc, {"a2e3ad21ed0d52f91b5d360887f70e06d038e7ff7fc6e5539b3272298b089b07081b4d090890e0878f0e1ac6e7049b334a959bfc9a240d2567f3988f7ef319520100ffe8d178708c523c921b1b9b39070d075d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc825d8e524b2451138e495bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546850a27af9544ae15a7e454dea05918b4fd42513f000000000000000a3621c56cea8d20fa911a0c41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c9000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cfe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c198045651cf4778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdc80c47ee4f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2691491abf8ab9c015073014d9e08d4338b8780bdecd436cf0541e4505bc3a45237f104b962102de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78ff95b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd735892892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af0000807e0000000002d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5407000000e3ad038f2211f1033195563c7f93cd54b9094f226e78b271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b4051db55e0510a6e4114a53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005008000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a6d8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546def271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652770711935f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f42f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599af40005b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fd30d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb84d9a88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678458fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000000000000000000000000bd700", 0x1000}}, 0x375) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x4e24, 0x2, @empty, 0x7fffffff}}, 0x0, 0x0, 0x21, 0x0, "0ed1f49c1be6c77a9794d96f9bf095e367c3dde4fb4b86d880c44648df9cb62c02f654fdb8bbd9dbe941d3c99bc65fe221fa8ac76ae23f3222bb9206f0475fae4a0a6af518d55f7275080000008b9e15"}, 0xd8) (async) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x106}, 0x1c) fcntl$dupfd(r1, 0x0, r1) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r7, 0xc0106407, &(0x7f0000000000)={0xffffffff, 0x2, 0x1, 0x80000000}) 6.605165975s ago: executing program 2 (id=8586): syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902130001000000000904"], 0x0) futex(&(0x7f0000000040), 0xa69403b2cf23f548, 0x2, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f0000000140), 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f000905", @ANYBLOB="03", @ANYBLOB="e38a"], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) signalfd4(r0, &(0x7f0000000180)={[0x7fffffff, 0x2]}, 0x8, 0x80000) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c0000001a00010000000000000000000a18"], 0x2c}}, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f00000010c0)={0xc, {"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", 0x1000}}, 0x1006) r4 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cgroup.freeze\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180200fb1479d500"/24], &(0x7f00000005c0)='GPL\x00', 0x9, 0xd5, &(0x7f0000001480)=""/213, 0x41100, 0x10}, 0x94) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0xae00) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000100)={&(0x7f00000007c0)=[{0x6, 0x8000, 0x0, 0x0}, {0x8, 0x5000, 0x0, 0x0}], 0x2}) 5.885177453s ago: executing program 9 (id=8589): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000100000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fdffffff0300"/28], 0x50) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x1000000000000, 0x0, 0x0, 0xa}}, 0x20) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) shutdown(r2, 0x0) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r3, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44010) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4e02}) io_setup(0xbf, &(0x7f0000000100)=0x0) io_submit(r9, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x20000000, 0x0, 0x7, 0x8, 0x0, r8, &(0x7f0000000080)='\x00\x00', 0x2}]) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00', 0x0}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r10, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="20000000ba84c8bdcd8a14ddd7af90cf1b0a0000fb768f5247bace132430b77aa87e92a36f2eee140f759b83c637c7e3661ec1a17212754548cae23343cc43fc8b613c4145", @ANYRES16=r12, @ANYBLOB="00022cbd7000fcdbdf25630000000c0099000600000078000000"], 0x20}, 0x1, 0x0, 0x0, 0xc040}, 0x41010) sendto$packet(r10, &(0x7f0000000240)='\t', 0x1, 0x100400c1, &(0x7f0000000200)={0x11, 0x8100, r11, 0x1, 0x87, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) r13 = socket(0x40000000015, 0x5, 0x0) sendto$inet6(r13, 0x0, 0x0, 0x4000000, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x39}, 0x4}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 5.611801385s ago: executing program 4 (id=8590): openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000480), 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xffff0000, 0xeeee8000, 0xf000, 0x7, 0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x1, 0xddccb000, 0xd, 0x0, 0x0, 0x7, 0x7, 0x0, 0x4, 0x1}, {0x118004, 0xdddd8000, 0x18, 0xe, 0x0, 0x4, 0x81, 0x0, 0x80, 0xe, 0x4, 0x6}, {0x10b002, 0x2000, 0xc, 0xfd, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, {0x1000, 0x0, 0xd, 0x8, 0x70, 0x80, 0x0, 0x0, 0xfd, 0x1c, 0x7, 0x88}, {0x100026fff, 0xeeef0000, 0x8, 0x4, 0x0, 0x8, 0x0, 0x0, 0x6, 0xfc, 0x86, 0xfe}, {0xeeee8000, 0x10000, 0xf, 0x0, 0x5, 0x0, 0x0, 0x81, 0x0, 0x4}, {0xd000, 0x41000, 0x3, 0x82, 0xfc, 0x10, 0x4, 0xe}, {0x0, 0x800}, {0x1, 0xfffe}, 0x40000010, 0x0, 0x0, 0x10, 0x1000000000000001, 0x0, 0x900, [0x0, 0x0, 0x2, 0x5]}) socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f00000000c0), 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) socket(0x10, 0x803, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, 0x0, &(0x7f0000000100)=r5}, 0x20) writev(r4, 0x0, 0x0) 5.132284025s ago: executing program 2 (id=8591): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x40, 0x0, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x1}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x3}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0xffdffff8, 0x8, 0x8, "000000000000000000000042d8663000"}) r3 = syz_open_pts(r2, 0x2000) ioctl$TIOCNXCL(r3, 0x540d) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x2, 0x10, 0x10, 0x10, 0x12, 0x10, 0x10, 0xdd, 0x10, 0x1, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x74}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5000000010000104004000000101000000000000", @ANYRES32=0x0, @ANYBLOB="0900022081b4000028004380"], 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r4 = syz_usb_connect(0x0, 0x75e, &(0x7f0000000500)={{0x12, 0x1, 0x250, 0xf8, 0xce, 0x86, 0x40, 0x19d2, 0xfffe, 0x2907, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74c, 0x3, 0xea, 0x3, 0x60, 0xdc, "", [{{0x9, 0x4, 0xaf, 0x8, 0x1, 0xff, 0xff, 0xff, 0x7, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "dedfa3c0"}, {0x5, 0x24, 0x0, 0xaee8}, {0xd, 0x24, 0xf, 0x1, 0x63, 0x0, 0x8000, 0xfa}, {0x6, 0x24, 0x1a, 0x8319, 0x20}, [@mbim_extended={0x8, 0x24, 0x1c, 0xfff, 0x9, 0xfffc}, @network_terminal={0x7, 0x24, 0xa, 0x9, 0x10, 0x6a, 0x7}, @mdlm={0x15, 0x24, 0x12, 0xfff}]}], [{{0x9, 0x5, 0xd, 0xc, 0x200, 0x4, 0x8, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x7, 0x4}]}}]}}, {{0x9, 0x4, 0x78, 0x9, 0x8, 0x2, 0x2, 0xff, 0xb1, [@uac_control={{0xa, 0x24, 0x1, 0x3d7d, 0x1f}, [@input_terminal={0xc, 0x24, 0x2, 0x2, 0x101, 0x2, 0x7, 0x7af1, 0x3, 0x3f}, @feature_unit={0x9, 0x24, 0x6, 0x5, 0x6, 0x1, [0x9], 0x7}]}], [{{0x9, 0x5, 0x80, 0x3, 0x20, 0x10, 0x9, 0x2, [@generic={0xdb, 0x31, "bbb80348093f7ff30722699e9fb5a7002bb26aaa11d7627657b9337bc56e232092149aaa859c30de7d9d20e25fb08e6a4e8eef1e028cbe4d8916558e3bf1f503b1b16e964729b0ab98761a92861d72e4936d52bbe3d3b3611c4f2d72806d0b585fdf6e06419cee656721c9e1667d8f8614a56c4e1419dbd2d440b95b71726aabc0f96efded463f3f9810b60c3c5702e984fb3149ac966f75f5c5dd28492d752148176c278606a06a7ab9661d9ce7ff7292ac47c83984b500144f972e1c230c609842cbe49b1861a8f1186f3eb918cb53416c73ab4cd454828a"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x4, 0xd}]}}, {{0x9, 0x5, 0xe, 0x10, 0x200, 0xf, 0x7, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x101}]}}, {{0x9, 0x5, 0x6, 0x13, 0x40, 0x18, 0x2, 0x6, [@generic={0xea, 0x22, "d6c2b1e037d805982eba4576168c1a09b1fd71283def8d4a3e29ad471e54f93546cd2ff29c4644f1a3323f5e64307d3b4626f4385d4e072eb555646b37fe7ed18f4cea5c17cb17a35fe4a8cd0d9c3971b796143bc54fbfa276b08e1766fcd62bbf36aca0c7de9209f5b63cc4ea8d20f5d1cff5e23d278c18792441b3759892172ca57d4ab8fc20386c84e7f2948bd3020f0e2bc75d80ba8e970f5820c0ca387069f19225213cf00132c4048200cfeb17be58ddb355fe1c37b1cf03181fc697b044566aab5a8832fe30355da0af220ceb2f794a42fede1abc803eab18188c5b76633894fdf9da8bd0"}]}}, {{0x9, 0x5, 0x4, 0x8, 0x40, 0xf, 0x1f, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xd6, 0x7}, @generic={0x8, 0x31, "3152a0b9292c"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x400, 0x8, 0x8, 0x8, [@generic={0x101, 0x22, "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"}, @generic={0x74, 0xa, "5d2b01db635aa6c5d952004e34f111dad25151cefc5fa723854c3ca58927d7e485b537a6d513ff69675a2a2ec9c1cd97665f37746698fcb537bc6f9853b4f4628c2459731e7d6b4ac361fb288e5c910fd2efceaa701fbc0c66c3e561b4dc81f69474f5fde4b15cee0e65aef8c6c61ff23d6c"}]}}, {{0x9, 0x5, 0x8ef7be755095bbb9, 0x10, 0x20, 0x3, 0x7, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xf, 0x3}]}}, {{0x9, 0x5, 0xf, 0x10, 0x20, 0x5, 0x6, 0x7, [@generic={0x1a, 0x30, "201589dc3c316fde50fe55dd8880787121fdb2f6b92ad89e"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x20, 0x5, 0xc, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xa5, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x9, 0xc9}]}}]}}, {{0x9, 0x4, 0x7d, 0x9, 0x2, 0x80, 0x38, 0xea, 0xd, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x401, 0x8b9c, 0x8a9e, 0xa3}, {0x6, 0x24, 0x1a, 0x9, 0x8}, [@mdlm={0x15, 0x24, 0x12, 0x6}, @country_functional={0xa, 0x24, 0x7, 0x40, 0xf801, [0x4, 0x2]}, @dmm={0x7, 0x24, 0x14, 0x0, 0x1}, @obex={0x5, 0x24, 0x15, 0x3}, @country_functional={0xe, 0x24, 0x7, 0x5, 0x2, [0xd, 0x4, 0x2, 0x7]}]}, @cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, 'M'}, {0x5, 0x24, 0x0, 0x400}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x3, 0x1c, 0x8}, [@mdlm_detail={0x55, 0x24, 0x13, 0x67, "643c5f475b7993ee8e07e76bd0aa422f2451475e2d976a0795f5d06165e3bf2e6563a905e5239777cfa14c1b5cd50f220e497914d34bb94f543a323dee65df4558605d7f8cdc60dd76fe0317a1e5e11ae3"}, @mdlm={0x15, 0x24, 0x12, 0x3}, @mdlm={0x15}, @network_terminal={0x7, 0x24, 0xa, 0x3, 0x6, 0x2, 0x81}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x9}, @mbim={0xc, 0x24, 0x1b, 0x0, 0x5, 0x5, 0xe, 0x5, 0x4}]}], [{{0x9, 0x5, 0xa, 0x1f, 0x8, 0x7f, 0x2, 0x4, [@generic={0x8d, 0x11, "c31276a37b6d96a352082796dd473fe37d8b52b1408752946c2c79f986b330e82ecf01a2bb83c75e7a9ad6f744cfb65c1759f519ce1b7c0424c26c834c659c80d98db49fb8e391c5d07d0b1f9d6ccd2212bc08887fe306706abf7326963977b945b84d3f6e2d54d070dbac9a93a6ea46dca47ee759bd7b684738ced091abcac96efd52b17f55f2005be23d"}, @generic={0x48, 0x6779acfc26b436f9, "dc8c971a57021796d03fe9e5f5004170c67d067c2c11fb5bf0d699d48c3a3710d191d8fa13192701ab7a9c667f87e853af9cdf18f74971f948f99662199db81a680ebb7bc5f4"}]}}, {{0x9, 0x5, 0x6, 0x3, 0x40, 0x1, 0x6, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x7}, @generic={0xf3, 0x0, "5ea72791733010ab37746b6956a376ff749c70c76c7495aeb9fef95eb1f9a8a7fc22c3f8585216a292c763176475fcf6fe2c714dc7a792dad8fd6aae3a33faca84b173ba95f0e5c9c23eb82ea2a3f85737f18dc865f10dc130a23075ddfe8242f5ca8bc5c452ffdb09e9f692b859bacd5829f72448b806b0ee7fa49068262db34f289cd5ba2f9a8aad45de573dbb29981344ea49b8c237ac36da4a7b545ef4fed753ec8bf611d22c60c6ab9274a560d6f9304b5cdc832c2e66e71c2262a1157fc656b5d4c21b909e01bf5d50a9cf78d4d5f63f909cbc3109f39d95a8cf5ecec772298183f2eb35b79ebd234cbb199eaf28"}]}}]}}]}}]}}, &(0x7f0000000e00)={0xa, &(0x7f0000000c80)={0xa, 0x6, 0x0, 0x8, 0x5, 0xeb, 0xff, 0x8}, 0x15, &(0x7f0000000cc0)={0x5, 0xf, 0x15, 0x1, [@ssp_cap={0x10, 0x10, 0xa, 0xfa, 0x1, 0x7, 0x0, 0xaa91, [0xff0f]}]}, 0x3, [{0x4, &(0x7f0000000d00)=@lang_id={0x4, 0x3, 0x437}}, {0x76, &(0x7f0000000d40)=@string={0x76, 0x3, "50de257aee981e6937cd0b93613759e10b36c93ad59e76d50a53b8a34e4882379da256f708f625b3ba94c6f4bb5fd148712d8f51fe9c0e860e7e3dd1d5cc6a83c953d5a97918eca876636fce536e3f0bafd448dbc605e067fd05c14bb68f3d4bb43bc8858b384e0c31444351405ab5961c6e213f"}}, {0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x2001}}]}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, 0x0) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000f80)={0xc, &(0x7f0000000e40)={0x40, 0x22, 0xd8, {0xd8, 0x3, "cd0ff3f3c0b932e66929d091a71b5c7948c9234ba0ad3e9f9eb7ac682ac3f3b9683c34cbcf1fa8acef3784b5662fdf5840dfd2a2a0d77a75f90863ffbfd2d0fbec6f44139af350d859e0b3dacd423d071cb6b5a79ba8d39be85c35be23ff00988925938db7c821ef1be705ec4595123711b1bf592f908d865f5fc46475a2f5c5c1437b670aa85a0259d896c0b0dd67deb7cbd5a2c237aeadc8ae720f3e417fe9665c4c42e0e8964bfef42ab91d0b0dab698782c2e8ace62a85502b0e5c4db61118aad23619bdfd4ea02d2a8ca73d6649389191266dad"}}, &(0x7f0000000f40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000010c0)={0x10, &(0x7f0000000fc0)={0x20, 0xe, 0x50, "b328b2bd0a7a55c414d184431f5b2950484f7528ef981e7309bfe1070b5a049172b88a88e4c1cfc666db546b9f7a55d24afd745b7f7c6dbbda60de94257ea36ec7f40c339e750a99f420d5c5e5c902e0"}, &(0x7f0000001040)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000001080)={0x0, 0x8, 0x1, 0x66}}) 4.287886919s ago: executing program 8 (id=8592): ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x44, 0x2, 0x4, "4649f24412bdd46c200734bbcb8b79109bffbf00000000000000f7666c0b00", 0x32314d56}) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') setns(r0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000000480)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) lsetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000200)=@known='user.incfs.id\x00', 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x1) listxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x30, r6, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x8001) r7 = syz_open_dev$video4linux(&(0x7f0000000000), 0xd2, 0xc0103) ioctl$VIDIOC_LOG_STATUS(r7, 0x5646, 0x0) 4.287343657s ago: executing program 9 (id=8593): r0 = syz_usb_connect$uac3(0x0, 0xbc, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0xd8c, 0xc, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xaa, 0x3, 0x1, 0x7f, 0xc0, 0x8, {0x8, 0xb, 0x0, 0x1, 0x1, 0x1, 0x30, 0x23}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0x3c, 0x7}, [@output_terminal={0x13, 0x24, 0x3, 0x5, 0x405, 0x3, 0x4, 0x4, 0x8c87, 0x1, 0x41f4, 0x6}, @output_terminal={0x13, 0x24, 0x3, 0x4, 0x402, 0x13, 0x4, 0x8, 0x3, 0x6, 0x8, 0x6}, @source_unit={0xc, 0x24, 0xb, 0x8, 0x0, 0x997d, 0x80, 0x4762}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x60, 0x25, 0x3, 0x2, {0xa, 0x25, 0x25, 0x405, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x800, 0x7ff, 0xe}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x74, 0x8, 0xc0, {0xa, 0x25, 0x25, 0x7ffffffc, 0x2, 0xbe1}}}}}}}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYRES16=r0], 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001140)=ANY=[@ANYBLOB="140000001000010000000000400000000000000a28000000000a01010000000000000000070000000900010073797a3000000000080002400000000350000000120a01010000000000000000070000000900010073797a3000000000050002006f303000080003400000000720000480060001000002000005000200110000000c0003"], 0xcd0}}, 0x10) timer_create(0x3, &(0x7f0000000200)={0x0, 0x33, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)=0x0) timer_settime(r3, 0x594ffc7dfc2800e3, &(0x7f0000000280)={{0x0, 0x989680}}, &(0x7f00000002c0)) syz_usb_control_io$hid(r1, 0x0, 0x0) cachestat(r2, &(0x7f0000000080)={0x14, 0x7}, &(0x7f00000000c0), 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0xa) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0) io_uring_register$IORING_REGISTER_RING_FDS(0xffffffffffffffff, 0x14, &(0x7f0000000900)=[{0x3, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000300)=""/195, 0xc3}, {&(0x7f0000000400)=""/51, 0x33}, {&(0x7f0000000500)=""/169, 0xa9}, {&(0x7f00000005c0)=""/222, 0xde}, {&(0x7f00000006c0)=""/84, 0x54}, {&(0x7f0000000740)=""/48, 0x30}, {&(0x7f0000000780)=""/85, 0x55}, {&(0x7f0000000800)=""/149, 0x95}]}], 0x1) 4.286905583s ago: executing program 4 (id=8594): io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x8, 0x8001002, 0x3d7}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x18) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x28040041, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x408c040, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, 0x0) r4 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r5 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r4) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000140)={r5, 0x4d}, &(0x7f0000000180)=ANY=[@ANYRES16=r3, @ANYRESDEC=r0], 0x0, 0x0) r6 = open(0x0, 0x40000, 0xa8) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r6, 0x410, &(0x7f00000000c0)={0x3, 0x0, 0x1, 0xfffe}) rmdir(&(0x7f0000000000)='./file0\x00') 4.171270465s ago: executing program 4 (id=8595): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x28000004}, 0x18) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x2, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYRES64=r1], 0x7c}, 0x1, 0x0, 0x0, 0xc040}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000a2b4c7700000060a010400000000000000000200ffff400004803c0001800b00010065787468647200002c000293050002009400000008000340000000f50800044000000001080001400000001308000540000000010900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a848056f4afd11600ec9a89"], 0x94}}, 0x0) add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000980)=@newtfilter={0x84, 0x2c, 0xd2f, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x40, 0x7, 0x7, 0x80}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) 3.647932087s ago: executing program 7 (id=8596): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000000680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x1, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000140)="b8", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)}], 0x1}}], 0x2, 0x0) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x3}, 0x8) close(r2) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2) ioctl$SNDRV_TIMER_IOCTL_INFO(r4, 0x80e85411, &(0x7f0000000400)) r5 = getpid() socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(r5, &(0x7f0000000340)={0x38, 0x6, 0x1000002d, 0x12000, 0x299c0, 0x7, 0x395400000000000, 0x2, 0x3, 0x5507}, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) r7 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r8 = fcntl$dupfd(r7, 0x0, r7) write$binfmt_script(r8, 0x0, 0x0) write$binfmt_script(r8, &(0x7f0000001b00), 0xfffffd9d) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="600000000206010400000000000018000000000014000780080011400000000005001500030000000500010006000000050005000200000005000400000000000900020073797a300000000011000300686173683a69702c6d61726b00000000"], 0x60}}, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x3a, &(0x7f0000000980)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbb359bb6539865fb0d8f60bb06000000000000002c0002000000059078ac1414ff0a0101004402000000014e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c0000009078dadf"], 0x0) sendmsg$IPSET_CMD_DESTROY(r10, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010400000000000000000200e704050001000700000030692b5aebac0cd17186e7779be9ab9e218cc6ca0af0bd83226a6865a9f66727"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 2.436826844s ago: executing program 2 (id=8597): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="273eebfecb7c0e923301b61cbdab2a3d983b065a5600000000000000", 0x1c}, {&(0x7f0000000080)="eba9fdb4ed6aca1c886ad3dd020e1928ead1005bad0758efb5ec8beb0000", 0x1e}], 0x2) 2.376879864s ago: executing program 2 (id=8598): munmap(&(0x7f0000f30000/0x1000)=nil, 0x1000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0x18}) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x74, r4, {0x4, 0xfff2}, {0xafabc05531515610, 0xd}, {0x8, 0x2}}}, 0x48}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xc) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)={0x1c, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}}, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r11, 0x4068aea3, &(0x7f0000001000)) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000002000)={0x2, 0x0, [{0x400000b0, 0x0, 0x10001}, {0x400000b1, 0x0, 0x4000000000001}]}) ioctl$KVM_RUN(r11, 0xae80, 0x0) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000ac0)=@newsa={0x134, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@local, 0x0, 0x0, 0x1fff, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x14, 0x6c}, @in=@empty=0x14, {0x0, 0x800000000, 0x0, 0xfffffff7ffffffff, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4, 0x1000}, {}, 0x80000000, 0x0, 0x2, 0x1, 0x6, 0x2c}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x134}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) futex(&(0x7f0000000000), 0x5, 0xfffffffd, 0x0, &(0x7f0000000140)=0x2, 0x40000001) 2.239274304s ago: executing program 9 (id=8599): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000fdffffff0000000000000500180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000007a0000000600008095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0xb, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, 0xfff3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 1.930426175s ago: executing program 4 (id=8600): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f0000000040)=0x1) sendto$packet(r0, &(0x7f0000000480)="05000000", 0x4, 0x4040850, &(0x7f0000000080)={0x11, 0x8100, r1, 0x1, 0x3, 0x6, @random="9b657ea580a1"}, 0x14) 1.885355075s ago: executing program 9 (id=8601): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000004040000850000008600000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00/\x00', 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.784880884s ago: executing program 2 (id=8602): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001a09000000008000feffffff020020800000001200000000080001006401010108000200ac1e0001"], 0x2c}}, 0x14004041) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @mcast1, 0x3}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x40010, 0xffffffffffffffff, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f00000000c0)=0x4, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000240)={'team0\x00', &(0x7f00000001c0)=@ethtool_stats={0x1d, 0xa, [0x2, 0xe7, 0x0, 0x7, 0x4, 0x2, 0x7fffffff, 0x7, 0x186, 0xca4d]}}) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0xe22, 0x0, @mcast1}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x8000000004) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x14, 0x52, 0x1, 0x0, 0x25dfdbfe, {0xa}}, 0x14}}, 0x0) writev(r6, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 1.780471075s ago: executing program 8 (id=8603): close(0xffffffffffffffff) socket$kcm(0x29, 0x5, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f00000005c0)={0x0, 0x4731, 0x400, 0x3, 0x279, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000000)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x10000004, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x4, 0xb0d, 0x0, 0x0, 0x1000, 0x80000001, 0x0, 0x0, 0x103}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r0, r6, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, r1}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8b15, 0x1, 0x0, 0x8000004, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x0, 0xfffffffd, 0x68, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2fdf, 0x800, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x40006253, 0x4000, 0x0, 0xfffffffb}}], 0x1, &(0x7f00000003c0)={0x2e, 0x4c, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xf000}, 0x0, r5, '\x00', {0x0, 0xdb9, 0x0, 0x0}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x94) 1.633149207s ago: executing program 4 (id=8604): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffde, 0x200, 0x2, 0x15e, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x80, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x4e52ba9def4ca6b0, 0x3, 0x0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r7, 0x89fc, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='('], 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') unshare(0x22020600) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) preadv(r8, &(0x7f0000000000)=[{&(0x7f0000000480)=""/187, 0xbb}], 0x1, 0x25, 0x25) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = openat$nvram(0xffffff9c, &(0x7f0000000000), 0x200000, 0x0) io_uring_enter(r10, 0x3d53, 0x7f97, 0x40, &(0x7f0000000040)={[0x700, 0x2000000]}, 0x8) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x6, 0x2, 0xffffffff, 0x2}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x7, 0xd}}, @TCA_NETEM_RATE={0x14, 0x6, {0x1, 0x80, 0x7, 0x7a7}}]}}}]}, 0x6c}}, 0x20000000) 1.632824262s ago: executing program 9 (id=8605): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}, 0x1, 0xfffd, 0x0, 0x40040}, 0x4004004) 1.526531786s ago: executing program 2 (id=8606): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x402c5828, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x82cb000}) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x20040004) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) close(0xffffffffffffffff) socket$kcm(0x11, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x1, 0x4}, {}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010102cc2c0008da0b400167f701"], &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0}) 1.478565583s ago: executing program 7 (id=8607): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f00000016c0)={0x10, 0x0, 0x25dfdbfb, 0x40000044}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000090200000a20000000000a01040000000000000000020000000900010073797a300000000048000000120a01040000000000000000020000000900010073797a30000000000900020073797a31000000000800034000000008130004800f000100756e636f6e66696e6564000014000000110001"], 0x90}}, 0x4) 1.476209657s ago: executing program 9 (id=8608): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x402c5828, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x82cb000}) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x20040004) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) close(0xffffffffffffffff) socket$kcm(0x11, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x1, 0x4}, {}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0}) 1.288500411s ago: executing program 7 (id=8609): openat$sndseq(0xffffffffffffff9c, 0x0, 0x40) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffffffd) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008081}, 0x800) syz_usb_connect(0x6, 0x36, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xf8, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x4000, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x1f00, 0xf1c) 812.228863ms ago: executing program 4 (id=8610): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="3000000003080103000000000000000005000004050003000600000014000480080006400000067008000740000000037a7a1a85ae34dda89c3671fa8ce199951025b696d286b2870805c8"], 0x30}, 0x1, 0x0, 0x0, 0x28000004}, 0x18) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x2, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYRES64=r1], 0x7c}, 0x1, 0x0, 0x0, 0xc040}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000a2b4c7700000060a010400000000000000000200ffff400004803c0001800b00010065787468647200002c000293050002009400000008000340000000f50800044000000001080001400000001308000540000000010900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a848056f4afd11600ec9a89"], 0x94}}, 0x0) add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000980)=@newtfilter={0x84, 0x2c, 0xd2f, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x40, 0x7, 0x7, 0x80}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) 514.702438ms ago: executing program 8 (id=8611): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r0}, 0x64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004"], 0x50) r1 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) (fail_nth: 21) 0s ago: executing program 8 (id=8612): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x8000, 0x9]}, 0x8) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000001000)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000180)={0xe0c, 0x0, 0x5, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [{{0x254, 0x1, {{0x0, 0x21a5}, 0x9, 0x6, 0x0, 0x84, 0x23, 'syz1\x00', "7f18525b4e721fc31702b5808803fd0c68df4db43f6a5108b8ebcc74a4b0074c", "7d0277526ead5a2a9607b7efcfb87edc461d32d049a7d468bda9e189836dcadb", [{0xffff, 0x7, {0x1, 0x8b5e}}, {0x5, 0x7, {0x0, 0x5}}, {0x8, 0x3, {0x1, 0xd}}, {0x9, 0xb525, {0x3, 0xffffffff}}, {0x200, 0x3ff, {0x1, 0x380}}, {0xc, 0x5, {0x0, 0xffffffff}}, {0x8, 0x4, {0x0, 0x1}}, {0x2, 0x7, {0x1, 0xffffffff}}, {0x0, 0x2, {0x2, 0x100}}, {0x3, 0x3, {0x3, 0x5}}, {0x3270, 0x2, {0x3, 0x80000001}}, {0x7, 0x400, {0x2}}, {0xa, 0xfffe, {0x3, 0x1ff}}, {0x76f7, 0x6, {0x3, 0x7ff}}, {0x40, 0x2, {0x2, 0x7}}, {0xc, 0x2, {0x2, 0x4feefffd}}, {0xfffa, 0x2, {0x1, 0x2}}, {0x1, 0x5, {0x1, 0x7}}, {0x6, 0xe4, {0x3, 0x7fffffff}}, {0x7, 0xfffa, {0x3, 0xffffffff}}, {0xc, 0x8001, {0x2, 0x1}}, {0x7, 0x3, {0x2, 0x7}}, {0xfff, 0xe, {0x2, 0x8}}, {0x0, 0x0, {0x1, 0x8}}, {0x1, 0xfffd}, {0xff01, 0x1000, {0x3, 0xeaa}}, {0x53, 0x1c, {0x2, 0x324}}, {0x0, 0x1, {0x1, 0x3}}, {0x4, 0x12, {0x0, 0x9}}, {0x3, 0x1, {0x3, 0x7f}}, {0x3ff, 0x1, {0x3, 0x3}}, {0x800, 0xfff7, {0x2, 0x4}}, {0x7, 0x5, {0x2, 0x7fff}}, {0x9, 0x7ff, {0x1, 0xbd1}}, {0x6, 0x3, {0x1, 0xfffffff9}}, {0x400, 0x2, {0x2}}, {0x2f6, 0x3383, {0x3, 0x2}}, {0xfffc, 0x1, {0x0, 0x9463}}, {0x1, 0x5, {0x3, 0x2}}, {0x4, 0x28, {0x2, 0x7}}]}}}, {{0x254, 0x1, {{0x0, 0x5}, 0x5, 0x0, 0x4, 0x1d1, 0x10, 'syz0\x00', "418ec4f597f3b6a46464f5967a27807a11a776b8682944897561f51d41384048", "8e7a2b64e7e6ab39e6413fa1dcd71806c287262e2603c4b06f3ae3021a8750d3", [{0x41, 0x1978, {0x0, 0x260e}}, {0xec, 0x8, {0x2, 0x7}}, {0x6, 0xff80, {0x0, 0x4}}, {0x1ff, 0x7, {0x1, 0x2}}, {0x4, 0x3, {0x1, 0xfffffff8}}, {0x8, 0x8, {0x0, 0x2}}, {0x9, 0x8, {0x3, 0xfffffffb}}, {0x8000, 0x7, {0x2, 0x4fb9c87f}}, {0xfffd, 0x1, {0x3, 0x1cf16255}}, {0x6, 0x401, {0x1, 0x2}}, {0x1, 0x2, {0x2, 0xfb6}}, {0x8001, 0x70, {0x3, 0xb}}, {0x1000, 0x1ff, {0x0, 0x2}}, {0x45, 0x3, {0x3, 0x40}}, {0x0, 0x1, {0x3, 0xff}}, {0x701, 0x9, {0x3, 0xce89}}, {0x2, 0x1}, {0xff, 0x0, {0x1, 0xc}}, {0x2e9, 0xcf, {0x1, 0x4c8c}}, {0x5, 0xf, {0x103f79724d869006, 0x4}}, {0x3, 0xf, {0x0, 0x5}}, {0x2, 0x4, {0x3, 0xa}}, {0x20, 0xeae3, {0x2, 0x7}}, {0xf251, 0xe, {0x1, 0x101}}, {0xf5b, 0x8, {0x3, 0x401}}, {0xb74, 0x8001, {0x2, 0xff}}, {0x8, 0x41a, {0x2, 0xb}}, {0x5, 0x1f1, {0x1, 0x1}}, {0xdc79, 0x5, {0x0, 0x7fffffff}}, {0x40, 0x8, {0x1, 0x5}}, {0x62c, 0x0, {0x0, 0x3ff}}, {0x9, 0x9, {0x2}}, {0xe, 0x800, {0x1, 0xc7}}, {0x0, 0x2, {0x0, 0x10000}}, {0xda6, 0x3, {0x2, 0x1}}, {0x1879, 0xb, {0x3, 0xc0}}, {0x8001, 0x0, {0x2, 0x200}}, {0xe, 0x9, {0x2, 0x46}}, {0x5, 0x9, {0x0, 0x1}}, {0x40, 0x5, {0x1, 0xc}}]}}}, {{0x254, 0x1, {{0x3, 0xd}, 0x9, 0x7, 0x9, 0x6, 0x2, 'syz0\x00', "7211e1ecbfa0941395e4d3cbcdae91481a6e8d1914dbd9440e4713ea9d77dc12", "e8d7aa582ad91b9a49ac8eed3095abce92e6a234d08bd123d54bc46023a83d07", [{0x9, 0x0, {0x2, 0x800}}, {0x8, 0xfffb, {0x2, 0x101}}, {0x9, 0x81, {0x1, 0x7}}, {0x1, 0x7f, {0x2, 0x1}}, {0x4, 0x5, {0x3, 0x3ff}}, {0x53, 0x808, {0x1, 0x10000}}, {0x3, 0x0, {0x1, 0x4}}, {0x0, 0x8, {0x2, 0x631}}, {0x100, 0x81, {0x3, 0x90000}}, {0x7, 0x1ff, {0x0, 0x4}}, {0x6, 0x5, {0x1, 0x3}}, {0x6, 0xfffd, {0x2, 0x8}}, {0x4, 0x10, {0x3, 0x7}}, {0x400, 0x3, {0x3, 0x10000}}, {0x5, 0xb, {0x3, 0xff}}, {0x1ff, 0x7, {0x0, 0x4}}, {0x7ff, 0x0, {0x1, 0x7}}, {0x4, 0x7, {0x0, 0x5}}, {0x2, 0x5, {0x0, 0x2}}, {0x9, 0x1000, {0x3, 0x520b0c5f}}, {0x6, 0x5, {0x0, 0x8}}, {0x3, 0x0, {0x3}}, {0xbf6, 0xd1e, {0x2, 0xa0ce}}, {0x7ff, 0x4, {0x0, 0xc63}}, {0x3, 0xff14, {0x1, 0x800}}, {0x212, 0x3, {0x1, 0x7d6}}, {0x3, 0x7, {0x1, 0x8}}, {0x9, 0x81, {0x3, 0x10001}}, {0xba, 0x101, {0x2, 0x6}}, {0x10, 0x4}, {0x3, 0xad5, {0x0, 0x5}}, {0x1, 0x5, {0x1, 0x7}}, {0x8, 0x5, {0x0, 0x7}}, {0xfffd, 0x0, {0x1, 0x97a16c3}}, {0x8d8, 0x0, {0x3, 0x3}}, {0x0, 0x8, {0x3}}, {0x4, 0xbbd3, {0x3, 0x8}}, {0xd, 0x8, {0x2, 0x3}}, {0x8000, 0x0, {0x2, 0x9}}, {0x7, 0x2, {0x1, 0x400}}]}}}, {{0x254, 0x1, {{0x3, 0x40}, 0x3, 0x7f, 0x2c23, 0x3, 0xf, 'syz1\x00', "3382ada4ebc19b9746b0fd540ad101fc8281472c5ed7c9787618fd9a203e2e06", "5ea35579c0cb1bc5e19c3988b012f8b3b13069a5e9f206ce6e840fd43406d5f4", [{0x1000, 0x6, {0x2, 0xfffffff7}}, {0x401, 0x1, {0x1, 0x10}}, {0x1c00, 0x7, {0x0, 0x1ff}}, {0x10, 0x800, {0x1, 0xcf68}}, {0x44, 0x7, {0x1, 0x5}}, {0x2, 0x800, {0x1, 0x80000000}}, {0x0, 0x1, {0x3, 0x4}}, {0x3, 0x8, {0x2, 0x167ada8c}}, {0xfeff, 0xd72a, {0x2, 0x324}}, {0x4000, 0x9, {0x2, 0x8}}, {0x3e, 0x3, {0x0, 0x3}}, {0x10, 0x7, {0x2, 0x6079}}, {0x3856, 0x6, {0x2, 0x4}}, {0x9, 0x5, {0x3, 0x9}}, {0xf8, 0x8, {0x1}}, {0x8a7, 0xfffc, {0x1, 0x1}}, {0x3, 0x3, {0x0, 0x19}}, {0x7, 0xffff, {0x2, 0x4}}, {0xce85, 0x7, {0x0, 0xf818}}, {0xfffa, 0x400, {0x0, 0xd}}, {0x2, 0x6, {0x2, 0x5}}, {0x0, 0x1ff, {0x2, 0xffffffff}}, {0x5, 0x5, {0x0, 0xefc}}, {0x100, 0x3, {0x0, 0x9}}, {0x8, 0x9, {0x0, 0x8000}}, {0x9, 0x7, {0x1, 0x5}}, {0x1, 0x5, {0x1, 0x7}}, {0x4, 0x7, {0x2, 0xb}}, {0x67, 0x9, {0x3, 0x6}}, {0x8, 0x3, {0x0, 0xcb}}, {0x5, 0x8, {0x3, 0x9}}, {0x1, 0x4660, {0x2, 0x9f}}, {0x2, 0x2, {0x2, 0x4}}, {0x7f, 0x959, {0x2, 0x80000000}}, {0x1ff, 0x7, {0x2, 0x81}}, {0x800, 0x4, {0x1, 0x21}}, {0x1, 0x1, {0x2, 0xa}}, {0x1, 0x1, {0x2, 0x9}}, {0x5, 0x7, {0x2, 0x5}}, {0x1, 0x2, {0x1, 0x800}}]}}}, {{0x254, 0x1, {{0x3}, 0x0, 0x8, 0x80, 0x1, 0x14, 'syz1\x00', "f5ac94ca2ebcaddef8aca10b887b81537daea5423107caf7c15b65b065a91222", "ea140f5c8444d4a0114b3ba54742884ada1c5714e32b23c483632c59f90413b1", [{0x8, 0xe, {0x2, 0x7f}}, {0x1, 0x7, {0x1, 0x2}}, {0x7f, 0x4, {0x0, 0xc8}}, {0xfffe, 0x6, {0x1, 0x9}}, {0x35, 0x1ff, {0x2, 0x4}}, {0x4, 0x0, {0x2}}, {0x6, 0x7fff, {0x1, 0x1}}, {0x1e8, 0x6, {0x3, 0x4}}, {0x5, 0x9, {0x1, 0x9}}, {0x0, 0x777f, {0x1, 0x8}}, {0x40, 0x2, {0x1, 0xf}}, {0x1, 0x8, {0x1, 0x5}}, {0x8, 0x5, {0x2, 0x63ae}}, {0x7f, 0x6, {0x0, 0x6}}, {0x3, 0x9, {0x0, 0x5}}, {0x3ff, 0x6, {0x1, 0x6}}, {0x7, 0x1ff, {0x1, 0x2}}, {0x9, 0x1, {0x1, 0x6}}, {0x12, 0x3, {0x2, 0x7}}, {0xe20, 0x3, {0x3, 0x3}}, {0x9, 0x0, {0x3, 0x4cf}}, {0x8000, 0x1, {0x3, 0x3}}, {0x5, 0x6, {0x3, 0x5}}, {0x3c2f, 0x3, {0x0, 0xa9}}, {0x3, 0x1, {0x0, 0x39}}, {0x3ff, 0x9, {0xc4cb064b511528d4, 0x5}}, {0x3, 0x7, {0x1, 0x2}}, {0xd, 0x6, {0x3, 0xffff6d6d}}, {0x7, 0x3, {0x2, 0x8f8f}}, {0xd77, 0xb, {0x3, 0x80000000}}, {0xa75, 0x3b, {0x1, 0x9}}, {0x3, 0x0, {0x3, 0x4}}, {0xb, 0x7fff, {0x3, 0x1ff}}, {0x100, 0xffff, {0x1, 0x9}}, {0xa143, 0x0, {0x0, 0x8f0}}, {0x0, 0x4, {0x1, 0xfffffff4}}, {0x5, 0x3, {0x2, 0x9}}, {0x7fff, 0xfffc, {0x3, 0x5}}, {0xc, 0x7, {0x0, 0x95c}}, {0x2, 0x9, {0x2, 0x8}}]}}}, {{0x254, 0x1, {{0x2, 0x1}, 0x79, 0xf3, 0xfffa, 0x5, 0x7, 'syz0\x00', "589f4c2758fa5d4d2dd54970f0589875105b8c6e94de6a3878a24ccc57fd3843", "f9c33096435c763e6daf6675248ff154c9cee07235710cb68f0d63c45fa65b8e", [{0x4, 0x7ff, {0x1, 0x6d02}}, {0x8, 0x1f88, {0x1, 0x7f}}, {0x9, 0x5, {0x2, 0x10001}}, {0x8, 0x6, {0x0, 0xffffffff}}, {0x5, 0x400}, {0x4, 0xa, {0x2, 0x3}}, {0x9, 0xa5f4, {0x2, 0x1be}}, {0x3e47, 0x80, {0x3, 0x8}}, {0xff, 0xe9, {0x3, 0x2}}, {0x2, 0x9, {0x1, 0x2}}, {0x4, 0x3, {0x3, 0x17}}, {0x4fe8, 0x200, {0x2, 0x9}}, {0x6, 0x2, {0x3, 0x5}}, {0x4, 0x6f80, {0x3, 0x6}}, {0x0, 0x7, {0x1, 0x7}}, {0xfff9, 0x1000, {0x2}}, {0x0, 0x40, {0x0, 0x1}}, {0x8, 0x1, {0x2, 0x10001}}, {0x401, 0x6, {0x1, 0x7b7dab1}}, {0x5, 0x7, {0x3, 0x6a5}}, {0x0, 0x2, {0x3, 0x8}}, {0x6, 0xeb, {0x2, 0xc6e7516b}}, {0x5, 0xff, {0x2, 0x8}}, {0x7fff, 0x5, {0x1, 0xfff}}, {0x3, 0x9, {0x0, 0x8}}, {0xf, 0x1, {0x2, 0x1}}, {0x8000, 0x9, {0x0, 0x6}}, {0xc, 0x7, {0x2, 0xc534}}, {0x0, 0x40, {0x0, 0x7ff}}, {0xffff, 0x36, {0x1}}, {0x370, 0x7, {0x1, 0xb3c1}}, {0x1ff, 0x8001, {0x0, 0x7}}, {0x81, 0x0, {0x3, 0x400}}, {0x3, 0xfff2, {0x0, 0xffff}}, {0x2, 0xff, {0x0, 0x3}}, {0x7, 0xfffa, {0x0, 0x6}}, {0x9cff, 0xc30e, {0x1, 0x8}}, {0x9, 0x7, {0x1, 0xfffffff5}}, {0x9, 0x4, {0x3, 0x1}}, {0xe, 0x3, {0x3, 0x3}}]}}}]}, 0xe0c}, 0x1, 0x0, 0x0, 0x40000}, 0x1ac5e012b079dab2) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000008001f80"], 0x38}}, 0x0) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000001040)='batadv_slave_1\x00') fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): fig index 0 descriptor/start: -61 [ 1785.998955][T21987] usb 10-1: can't read configurations, error -61 [ 1786.126364][T21987] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 1786.277118][T21987] usb 10-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1786.280329][T21987] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1786.280371][T21987] usb 10-1: can't read configurations, error -61 [ 1786.280728][T21987] usb usb10-port1: attempt power cycle [ 1786.551304][T32186] tipc: Resetting bearer [ 1786.616174][T21987] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 1786.637346][T21987] usb 10-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1786.644066][T21987] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1786.644112][T21987] usb 10-1: can't read configurations, error -61 [ 1786.736066][ T5831] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1786.765163][T32192] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8172'. [ 1786.767083][T21987] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 1786.791456][T21987] usb 10-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1786.793253][T21987] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1786.793296][T21987] usb 10-1: can't read configurations, error -61 [ 1786.794509][T21987] usb usb10-port1: unable to enumerate USB device [ 1786.906252][ T5831] usb 3-1: Using ep0 maxpacket: 8 [ 1786.908417][ T5831] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1786.908469][ T5831] usb 3-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=f7.67 [ 1786.929274][ T5831] usb 3-1: config 0 has an invalid interface number: 49 but max is 0 [ 1786.929306][ T5831] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1786.929329][ T5831] usb 3-1: config 0 has no interface number 0 [ 1786.972222][ T5831] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1786.972253][ T5831] usb 3-1: Product: syz [ 1786.972271][ T5831] usb 3-1: Manufacturer: syz [ 1786.972288][ T5831] usb 3-1: SerialNumber: syz [ 1786.975660][ T5831] usb 3-1: config 0 descriptor?? [ 1787.066002][T28278] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 1787.116678][ T5831] rtsx_usb 3-1:0.49: probe with driver rtsx_usb failed with error -22 [ 1787.218145][T28278] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1787.218883][T28278] usb 5-1: config 0 has no interfaces? [ 1787.241251][T28278] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1787.241280][T28278] usb 5-1: Product: syz [ 1787.241296][T28278] usb 5-1: Manufacturer: syz [ 1787.241313][T28278] usb 5-1: SerialNumber: syz [ 1787.268241][T28278] usb 5-1: config 0 descriptor?? [ 1787.480372][T28278] usb 5-1: USB disconnect, device number 111 [ 1788.310073][T32223] tipc: Enabling of bearer rejected, failed to enable media [ 1788.566726][T21987] usb 8-1: new high-speed USB device number 111 using dummy_hcd [ 1788.716095][T21987] usb 8-1: Using ep0 maxpacket: 16 [ 1788.718244][T21987] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 1788.719551][T21987] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1788.719581][T21987] usb 8-1: config 0 has no interfaces? [ 1788.721445][T21987] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1788.721485][T21987] usb 8-1: SerialNumber: syz [ 1788.741665][T21987] usb 8-1: config 0 descriptor?? [ 1788.906663][ T25] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 1788.926747][T28278] usb 3-1: USB disconnect, device number 59 [ 1789.009481][T11168] IPVS: starting estimator thread 0... [ 1789.056364][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 1789.057397][ T25] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1789.059099][ T25] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1789.062874][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1789.062906][ T25] usb 5-1: Product: syz [ 1789.062923][ T25] usb 5-1: Manufacturer: syz [ 1789.062938][ T25] usb 5-1: SerialNumber: syz [ 1789.072586][ T25] usb 5-1: config 0 descriptor?? [ 1789.099347][T32238] IPVS: using max 28 ests per chain, 67200 per kthread [ 1789.128114][ T25] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1789.133288][T32240] hsr_slave_0: left promiscuous mode [ 1789.135048][T32240] hsr_slave_1: left promiscuous mode [ 1789.189188][T21987] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 1789.315939][T21987] usb 10-1: device descriptor read/64, error -71 [ 1789.558034][T21987] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 1789.639898][T32249] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8188'. [ 1789.696002][T21987] usb 10-1: device descriptor read/64, error -71 [ 1789.700465][ T25] gspca_zc3xx: reg_w_i err -71 [ 1789.806558][T21987] usb usb10-port1: attempt power cycle [ 1790.147197][T21987] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 1790.167853][T21987] usb 10-1: device descriptor read/8, error -71 [ 1790.286844][ T25] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1790.286944][ T25] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1790.291040][ T25] usb 5-1: USB disconnect, device number 112 [ 1790.406275][T21987] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 1790.426775][T21987] usb 10-1: device descriptor read/8, error -71 [ 1790.536418][T21987] usb usb10-port1: unable to enumerate USB device [ 1790.616841][ T25] usb 5-1: new full-speed USB device number 113 using dummy_hcd [ 1790.745994][ T25] usb 5-1: device descriptor read/64, error -71 [ 1790.796361][T21987] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 1790.818555][T32262] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8187'. [ 1790.947153][T21987] usb 9-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1790.948559][T21987] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 1790.948588][T21987] usb 9-1: can't read configurations, error -61 [ 1790.987112][ T25] usb 5-1: new full-speed USB device number 114 using dummy_hcd [ 1791.055970][T21988] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1791.075941][T21987] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 1791.116001][ T25] usb 5-1: device descriptor read/64, error -71 [ 1791.207605][T21988] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1791.208935][T21988] usb 3-1: config 0 has no interfaces? [ 1791.211681][T21988] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1791.211705][T21988] usb 3-1: Product: syz [ 1791.211725][T21988] usb 3-1: Manufacturer: syz [ 1791.211736][T21988] usb 3-1: SerialNumber: syz [ 1791.214896][T21988] usb 3-1: config 0 descriptor?? [ 1791.229342][ T25] usb usb5-port1: attempt power cycle [ 1791.235114][T21987] usb 9-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1791.256867][T21987] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 1791.256981][T21987] usb 9-1: can't read configurations, error -61 [ 1791.261129][T21987] usb usb9-port1: attempt power cycle [ 1791.321058][T21988] usb 8-1: USB disconnect, device number 111 [ 1791.401873][T32265] netlink: 'syz.7.8193': attribute type 1 has an invalid length. [ 1791.433761][T32265] bond5: entered promiscuous mode [ 1791.434186][T32265] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1791.452317][T28278] usb 3-1: USB disconnect, device number 60 [ 1791.490734][T32265] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1791.491076][T32265] bond5: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 1791.491098][T32265] bond5: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 1791.525148][T32265] bond5: (slave ip6gre2): making interface the new active one [ 1791.525179][T32265] ip6gre2: entered promiscuous mode [ 1791.542260][T32265] bond5: (slave ip6gre2): Enslaving as an active interface with an up link [ 1791.576370][ T25] usb 5-1: new full-speed USB device number 115 using dummy_hcd [ 1791.601626][ T25] usb 5-1: device descriptor read/8, error -71 [ 1791.607510][T21987] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 1791.629435][T21987] usb 9-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1791.632237][T21987] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 1791.632279][T21987] usb 9-1: can't read configurations, error -61 [ 1791.728817][T32269] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8194'. [ 1791.766096][T21987] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 1791.793910][T21987] usb 9-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1791.800455][T21987] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 1791.800558][T21987] usb 9-1: can't read configurations, error -61 [ 1791.801580][T21987] usb usb9-port1: unable to enumerate USB device [ 1792.066174][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.066240][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.295909][T28278] usb 8-1: new high-speed USB device number 112 using dummy_hcd [ 1792.326615][ T25] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1792.346943][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 1792.347824][ T25] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1792.349554][ T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1792.349642][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1792.352049][ T25] usb 5-1: config 0 descriptor?? [ 1792.397710][ T25] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1792.456355][T28278] usb 8-1: Using ep0 maxpacket: 8 [ 1792.465292][T28278] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1792.465346][T28278] usb 8-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=f7.67 [ 1792.499630][T28278] usb 8-1: config 0 has an invalid interface number: 49 but max is 0 [ 1792.499672][T28278] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1792.499693][T28278] usb 8-1: config 0 has no interface number 0 [ 1792.524532][T28278] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1792.524564][T28278] usb 8-1: Product: syz [ 1792.524581][T28278] usb 8-1: Manufacturer: syz [ 1792.524597][T28278] usb 8-1: SerialNumber: syz [ 1792.577223][T28278] usb 8-1: config 0 descriptor?? [ 1792.623442][ T31] audit: type=1326 audit(1789249805.701:6261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32283 comm="syz.2.8200" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef0ec code=0x7ffc0000 [ 1792.623638][ T31] audit: type=1326 audit(1789249805.701:6262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32283 comm="syz.2.8200" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef0ec code=0x7ffc0000 [ 1792.684578][ T31] audit: type=1326 audit(1789249805.761:6263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32283 comm="syz.2.8200" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=308 compat=1 ip=0xf6fef0ec code=0x7ffc0000 [ 1792.684838][ T31] audit: type=1326 audit(1789249805.761:6264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32283 comm="syz.2.8200" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef0ec code=0x7ffc0000 [ 1792.685721][ T31] audit: type=1326 audit(1789249805.761:6265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32283 comm="syz.2.8200" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef0ec code=0x7ffc0000 [ 1792.768719][T28278] rtsx_usb 8-1:0.49: probe with driver rtsx_usb failed with error -22 [ 1792.795418][T32282] Sensor A: ================= START STATUS ================= [ 1792.795442][T32282] Sensor A: Test Pattern: 75% Colorbar [ 1792.795485][T32282] Sensor A: Show Information: All [ 1792.795510][T32282] Sensor A: Vertical Flip: true [ 1792.795533][T32282] Sensor A: Horizontal Flip: false [ 1792.795556][T32282] Sensor A: Brightness: 128 [ 1792.795579][T32282] Sensor A: Contrast: 128 [ 1792.795602][T32282] Sensor A: Hue: 0 [ 1792.795624][T32282] Sensor A: Saturation: 128 [ 1792.795645][T32282] Sensor A: Pixel Rate: 160000000 [ 1792.795668][T32282] Sensor A: Horizontal Blanking: 800 [ 1792.795689][T32282] Sensor A: Vertical Blanking: 3223 [ 1792.795710][T32282] Sensor A: ================== END STATUS ================== [ 1793.076458][ T25] gspca_vc032x: reg_w err -110 [ 1793.076524][ T25] vc032x 5-1:0.0: probe with driver vc032x failed with error -110 [ 1793.108223][T32289] openvswitch: netlink: Message has 16 unknown bytes. [ 1793.409291][T32292] ip6gre1: entered allmulticast mode [ 1793.700334][T32294] FAULT_INJECTION: forcing a failure. [ 1793.700334][T32294] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1793.700397][T32294] CPU: 1 UID: 0 PID: 32294 Comm: syz.2.8203 Tainted: G L syzkaller #0 PREEMPT(full) [ 1793.700428][T32294] Tainted: [L]=SOFTLOCKUP [ 1793.700436][T32294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1793.700450][T32294] Call Trace: [ 1793.700460][T32294] [ 1793.700471][T32294] dump_stack_lvl+0xe8/0x150 [ 1793.700512][T32294] should_fail_ex+0x410/0x560 [ 1793.700544][T32294] copy_fpstate_to_sigframe+0xa12/0xd20 [ 1793.700585][T32294] ? copy_fpstate_to_sigframe+0x188/0xd20 [ 1793.700625][T32294] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 1793.700661][T32294] ? ktime_get+0x45/0x220 [ 1793.700685][T32294] ? ktime_get+0x45/0x220 [ 1793.700721][T32294] ? fpu__alloc_mathframe+0xac/0x130 [ 1793.700755][T32294] get_sigframe+0x603/0x830 [ 1793.700796][T32294] ? __pfx_get_sigframe+0x10/0x10 [ 1793.700842][T32294] ia32_setup_rt_frame+0x110/0xae0 [ 1793.700875][T32294] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1793.700912][T32294] ? get_signal+0x10dd/0x12c0 [ 1793.700959][T32294] ? __pfx_ia32_setup_rt_frame+0x10/0x10 [ 1793.700996][T32294] arch_do_signal_or_restart+0x48e/0x860 [ 1793.701034][T32294] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1793.701076][T32294] ? ksys_write+0x242/0x270 [ 1793.701119][T32294] exit_to_user_mode_loop+0x10e/0x770 [ 1793.701143][T32294] ? rcu_is_watching+0x16/0xb0 [ 1793.701168][T32294] ? asm_int80_emulation+0x1a/0x20 [ 1793.701192][T32294] ? asm_int80_emulation+0x1a/0x20 [ 1793.701217][T32294] do_int80_emulation+0x314/0x500 [ 1793.701244][T32294] ? asm_int80_emulation+0x1a/0x20 [ 1793.701266][T32294] ? clear_bhb_loop+0x70/0xc0 [ 1793.701289][T32294] ? clear_bhb_loop+0x70/0xc0 [ 1793.701318][T32294] asm_int80_emulation+0x1a/0x20 [ 1793.701340][T32294] RIP: 0023:0xf71275ab [ 1793.701360][T32294] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1793.701380][T32294] RSP: 002b:00000000f53dd4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 1793.701405][T32294] RAX: 0000000000000001 RBX: 0000000000000005 RCX: 00000000f53dd5c0 [ 1793.701420][T32294] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1793.701435][T32294] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1793.701449][T32294] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1793.701463][T32294] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1793.701494][T32294] [ 1794.030613][T32296] netlink: 'syz.8.8204': attribute type 13 has an invalid length. [ 1794.030639][T32296] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8204'. [ 1794.030665][T32296] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 1794.362493][ T25] usb 5-1: USB disconnect, device number 116 [ 1794.496506][T32303] syzkaller0: entered promiscuous mode [ 1794.496524][T32303] syzkaller0: entered allmulticast mode [ 1794.529318][T32305] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8208'. [ 1794.795962][ T25] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 1794.946868][ T25] usb 9-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1794.947615][ T25] usb 9-1: config 0 has no interfaces? [ 1794.953387][ T25] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1794.953416][ T25] usb 9-1: Product: syz [ 1794.953432][ T25] usb 9-1: Manufacturer: syz [ 1794.953458][ T25] usb 9-1: SerialNumber: syz [ 1794.984611][ T25] usb 9-1: config 0 descriptor?? [ 1795.222798][ T25] usb 9-1: USB disconnect, device number 35 [ 1795.245180][T32312] netlink: 'syz.2.8211': attribute type 10 has an invalid length. [ 1795.245205][T32312] netlink: 55 bytes leftover after parsing attributes in process `syz.2.8211'. [ 1795.245409][T32313] netlink: 'syz.2.8211': attribute type 10 has an invalid length. [ 1795.245426][T32313] netlink: 55 bytes leftover after parsing attributes in process `syz.2.8211'. [ 1795.421748][T32312] batman_adv: batadv0: Removing interface: ipvlan2 [ 1795.437772][ T5831] usb 5-1: new full-speed USB device number 117 using dummy_hcd [ 1795.587805][ T5831] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1795.594439][ T5831] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1795.594472][ T5831] usb 5-1: Product: syz [ 1795.594488][ T5831] usb 5-1: Manufacturer: syz [ 1795.594505][ T5831] usb 5-1: SerialNumber: syz [ 1795.630714][ T5831] usb 5-1: config 0 descriptor?? [ 1795.854542][ T5831] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 117 [ 1796.063978][T32318] syzkaller0: entered promiscuous mode [ 1796.064007][T32318] syzkaller0: entered allmulticast mode [ 1796.172536][ T5831] usb 8-1: USB disconnect, device number 112 [ 1796.254305][T32323] Sensor A: ================= START STATUS ================= [ 1796.254354][T32323] Sensor A: Test Pattern: 75% Colorbar [ 1796.254381][T32323] Sensor A: Show Information: All [ 1796.254404][T32323] Sensor A: Vertical Flip: true [ 1796.254425][T32323] Sensor A: Horizontal Flip: false [ 1796.254447][T32323] Sensor A: Brightness: 128 [ 1796.254470][T32323] Sensor A: Contrast: 128 [ 1796.254491][T32323] Sensor A: Hue: 0 [ 1796.254513][T32323] Sensor A: Saturation: 128 [ 1796.254534][T32323] Sensor A: Pixel Rate: 160000000 [ 1796.309177][T32323] Sensor A: Horizontal Blanking: 800 [ 1796.309222][T32323] Sensor A: Vertical Blanking: 3223 [ 1796.309414][T32323] Sensor A: ================== END STATUS ================== [ 1796.392307][T32326] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8215'. [ 1796.396233][ T25] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 1796.547196][ T25] usb 10-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1796.549275][ T25] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1796.549305][ T25] usb 10-1: can't read configurations, error -61 [ 1796.678161][ T25] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 1796.866776][ T25] usb 10-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1796.871738][ T25] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1796.871768][ T25] usb 10-1: can't read configurations, error -61 [ 1796.872032][ T25] usb usb10-port1: attempt power cycle [ 1796.986410][T21988] usb 8-1: new high-speed USB device number 113 using dummy_hcd [ 1797.139707][T21988] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1797.139760][T21988] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 1797.141024][T21988] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 1797.141057][T21988] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 1797.142929][T21988] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1797.142948][T21988] usb 8-1: Product: syz [ 1797.142960][T21988] usb 8-1: Manufacturer: syz [ 1797.142971][T21988] usb 8-1: SerialNumber: syz [ 1797.206717][ T25] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 1797.227726][ T25] usb 10-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1797.229330][ T25] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1797.229360][ T25] usb 10-1: can't read configurations, error -61 [ 1797.355997][ T25] usb 10-1: new high-speed USB device number 47 using dummy_hcd [ 1797.378094][ T25] usb 10-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1797.379796][ T25] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1797.379824][ T25] usb 10-1: can't read configurations, error -61 [ 1797.380166][ T25] usb usb10-port1: unable to enumerate USB device [ 1797.431733][T32331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1797.435102][T32331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1797.457887][T32331] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8217'. [ 1797.492529][T21988] usb 8-1: unit 4: unexpected type 0x03 [ 1797.615305][T21988] usb 8-1: USB disconnect, device number 113 [ 1797.706362][T26124] udevd[26124]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1797.976438][ T25] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1798.128555][ T25] usb 3-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 1798.133833][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1798.133865][ T25] usb 3-1: Product: syz [ 1798.133881][ T25] usb 3-1: Manufacturer: syz [ 1798.283327][T32346] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8223'. [ 1798.331043][T21988] usb 5-1: USB disconnect, device number 117 [ 1798.391595][ T25] scsi host1: uas [ 1798.556226][T28278] usb 8-1: new high-speed USB device number 114 using dummy_hcd [ 1798.595453][T32337] C: renamed from veth1_to_team [ 1798.613318][T32337] netlink: 'syz.2.8219': attribute type 8 has an invalid length. [ 1798.613346][T32337] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1798.616106][ C1] usb 3-1: stat urb: status -71 [ 1798.617410][ C1] usb 3-1: cmd cmplt err -71 [ 1798.629342][ T25] usb 3-1: USB disconnect, device number 61 [ 1798.669604][ T25] scsi 1:0:0:0: tag#28 uas_zap_pending 0 uas-tag 1 inflight: CMD [ 1798.669708][ T25] scsi 1:0:0:0: tag#28 CDB: Inquiry 12 00 00 00 24 00 [ 1798.738177][T28278] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1798.776908][T28278] usb 8-1: config 0 has no interfaces? [ 1798.782379][T28278] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1798.782410][T28278] usb 8-1: Product: syz [ 1798.782427][T28278] usb 8-1: Manufacturer: syz [ 1798.782443][T28278] usb 8-1: SerialNumber: syz [ 1798.801577][T21988] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1798.806048][T28278] usb 8-1: config 0 descriptor?? [ 1798.947928][T21988] usb 5-1: Using ep0 maxpacket: 32 [ 1798.949594][T21988] usb 5-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=72.1d [ 1798.950854][T21988] usb 5-1: config 0 has an invalid interface number: 109 but max is 0 [ 1798.950883][T21988] usb 5-1: config 0 has no interface number 0 [ 1798.952939][T21988] usb 5-1: config 0 has an invalid interface number: 109 but max is 0 [ 1798.952967][T21988] usb 5-1: config 0 has no interface number 0 [ 1798.954099][T21988] usb 5-1: config 0 has an invalid interface number: 109 but max is 0 [ 1798.954127][T21988] usb 5-1: config 0 has no interface number 0 [ 1798.955109][T21988] usb 5-1: config 0 has an invalid interface number: 109 but max is 0 [ 1798.955136][T21988] usb 5-1: config 0 has no interface number 0 [ 1799.034684][T21988] usb 5-1: config 0 has an invalid interface number: 109 but max is 0 [ 1799.034718][T21988] usb 5-1: config 0 has no interface number 0 [ 1799.046875][T21987] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 1799.061911][T21988] usb 5-1: config 0 has an invalid interface number: 109 but max is 0 [ 1799.061943][T21988] usb 5-1: config 0 has no interface number 0 [ 1799.064732][T21988] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1799.064764][T21988] usb 5-1: Product: syz [ 1799.064782][T21988] usb 5-1: Manufacturer: syz [ 1799.064799][T21988] usb 5-1: SerialNumber: syz [ 1799.075641][T21988] usb 5-1: config 0 descriptor?? [ 1799.113078][T28278] usb 8-1: USB disconnect, device number 114 [ 1799.196318][T21987] usb 9-1: Using ep0 maxpacket: 8 [ 1799.199097][T21987] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1799.199153][T21987] usb 9-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=f7.67 [ 1799.201487][T21987] usb 9-1: config 0 has an invalid interface number: 49 but max is 0 [ 1799.201516][T21987] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1799.201540][T21987] usb 9-1: config 0 has no interface number 0 [ 1799.204758][T21987] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1799.204788][T21987] usb 9-1: Product: syz [ 1799.204805][T21987] usb 9-1: Manufacturer: syz [ 1799.204823][T21987] usb 9-1: SerialNumber: syz [ 1799.289853][T21987] usb 9-1: config 0 descriptor?? [ 1799.418293][T21987] rtsx_usb 9-1:0.49: probe with driver rtsx_usb failed with error -22 [ 1799.842813][T32367] openvswitch: netlink: Key type 2054 is out of range max 32 [ 1799.944114][T32368] Sensor A: ================= START STATUS ================= [ 1799.944692][T32368] Sensor A: Test Pattern: 75% Colorbar [ 1799.944724][T32368] Sensor A: Show Information: All [ 1799.966268][T32368] Sensor A: Vertical Flip: true [ 1799.966287][T32368] Sensor A: Horizontal Flip: false [ 1799.966302][T32368] Sensor A: Brightness: 128 [ 1799.966319][T32368] Sensor A: Contrast: 128 [ 1799.966333][T32368] Sensor A: Hue: 0 [ 1799.966348][T32368] Sensor A: Saturation: 128 [ 1799.966399][T32368] Sensor A: Pixel Rate: 160000000 [ 1799.966416][T32368] Sensor A: Horizontal Blanking: 800 [ 1799.966438][T32368] Sensor A: Vertical Blanking: 3223 [ 1799.966456][T32368] Sensor A: ================== END STATUS ================== [ 1800.178403][T21988] mdc800 5-1:0.109: probe fails -> wrong Number of Configuration [ 1800.210161][T21988] usb 5-1: USB disconnect, device number 118 [ 1800.406942][T28278] usb 8-1: new high-speed USB device number 115 using dummy_hcd [ 1800.556790][T28278] usb 8-1: Using ep0 maxpacket: 16 [ 1800.557627][T28278] usb 8-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9 [ 1800.557673][T28278] usb 8-1: too many configurations: 60, using maximum allowed: 8 [ 1800.624396][T28278] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=204 [ 1800.624444][T28278] usb 8-1: Product: syz [ 1800.624456][T28278] usb 8-1: Manufacturer: syz [ 1800.624467][T28278] usb 8-1: SerialNumber: syz [ 1800.628859][T21988] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1800.661198][T28278] usb 8-1: config 0 descriptor?? [ 1800.679219][T28278] pwc: Philips SPC 880NC USB webcam detected. [ 1800.789040][T21988] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1800.802284][T21988] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1800.802360][T21988] usb 5-1: Product: syz [ 1800.802406][T21988] usb 5-1: Manufacturer: syz [ 1800.802449][T21988] usb 5-1: SerialNumber: syz [ 1800.885364][T28278] pwc: Warning: more than 1 configuration available. [ 1800.894918][T28278] pwc: Failed to set LED on/off time (-71) [ 1800.902355][T28278] pwc: send_video_command error -71 [ 1800.902373][T28278] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1800.902485][T28278] Philips webcam 8-1:0.0: probe with driver Philips webcam failed with error -71 [ 1800.940787][T28278] usb 8-1: USB disconnect, device number 115 [ 1800.965976][ T5696] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1801.117537][ T5696] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1801.118472][ T5696] usb 3-1: config 0 has no interfaces? [ 1801.124817][ T5696] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1801.124850][ T5696] usb 3-1: Product: syz [ 1801.124878][ T5696] usb 3-1: Manufacturer: syz [ 1801.124895][ T5696] usb 3-1: SerialNumber: syz [ 1801.169165][ T5696] usb 3-1: config 0 descriptor?? [ 1801.261029][T21988] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1801.261096][T21988] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1801.392533][ T5696] usb 3-1: USB disconnect, device number 62 [ 1801.583788][T32382] FAULT_INJECTION: forcing a failure. [ 1801.583788][T32382] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1801.583827][T32382] CPU: 1 UID: 0 PID: 32382 Comm: syz.9.8237 Tainted: G L syzkaller #0 PREEMPT(full) [ 1801.583862][T32382] Tainted: [L]=SOFTLOCKUP [ 1801.583871][T32382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1801.583896][T32382] Call Trace: [ 1801.583904][T32382] [ 1801.583915][T32382] dump_stack_lvl+0xe8/0x150 [ 1801.583954][T32382] should_fail_ex+0x410/0x560 [ 1801.583985][T32382] _copy_from_user+0x2d/0xb0 [ 1801.584015][T32382] snd_seq_write+0x309/0x820 [ 1801.584219][T32382] ? __pfx_snd_seq_write+0x10/0x10 [ 1801.584253][T32382] ? bpf_lsm_file_permission+0x9/0x20 [ 1801.584282][T32382] ? security_file_permission+0x75/0x260 [ 1801.584319][T32382] ? rw_verify_area+0x203/0x4c0 [ 1801.584354][T32382] ? __pfx_snd_seq_write+0x10/0x10 [ 1801.584385][T32382] vfs_write+0x296/0xba0 [ 1801.584427][T32382] ? __pfx_vfs_write+0x10/0x10 [ 1801.584461][T32382] ? __fget_files+0x2a/0x420 [ 1801.584494][T32382] ? __fget_files+0x2a/0x420 [ 1801.584522][T32382] ? __fget_files+0x3a2/0x420 [ 1801.584550][T32382] ? __fget_files+0x2a/0x420 [ 1801.584589][T32382] ksys_write+0x150/0x270 [ 1801.584621][T32382] ? __pfx_ksys_write+0x10/0x10 [ 1801.584660][T32382] __do_fast_syscall_32+0x27a/0x6a0 [ 1801.584689][T32382] ? do_fast_syscall_32+0x33/0x70 [ 1801.584714][T32382] ? irqentry_exit+0x10f/0x910 [ 1801.584743][T32382] do_fast_syscall_32+0x33/0x70 [ 1801.584768][T32382] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1801.584795][T32382] RIP: 0023:0xf7f730ec [ 1801.584816][T32382] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1801.584837][T32382] RSP: 002b:00000000f543650c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 1801.584862][T32382] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000300 [ 1801.584890][T32382] RDX: 0000000000000070 RSI: 0000000000000000 RDI: 0000000000000000 [ 1801.584904][T32382] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1801.584918][T32382] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1801.584932][T32382] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1801.584965][T32382] [ 1802.199600][T32388] ipvlan2: entered allmulticast mode [ 1802.199626][T32388] vlan0: entered allmulticast mode [ 1802.199640][T32388] bond4: entered allmulticast mode [ 1802.479473][T32397] bond6: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 1802.487656][T32397] bond6 (unregistering): Released all slaves [ 1802.607103][T21987] usb 10-1: new high-speed USB device number 48 using dummy_hcd [ 1802.724294][T32406] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8244'. [ 1802.763202][T21987] usb 10-1: Using ep0 maxpacket: 32 [ 1802.764192][T21987] usb 10-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1802.771869][T21987] usb 10-1: config 0 has an invalid interface number: 35 but max is 0 [ 1802.771901][T21987] usb 10-1: config 0 has no interface number 0 [ 1802.771975][T21987] usb 10-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1802.772005][T21987] usb 10-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1802.824096][T21987] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1802.824127][T21987] usb 10-1: Product: syz [ 1802.824144][T21987] usb 10-1: Manufacturer: syz [ 1802.824188][T21987] usb 10-1: SerialNumber: syz [ 1802.855209][T21987] usb 10-1: config 0 descriptor?? [ 1802.958618][ T5696] usb 9-1: USB disconnect, device number 36 [ 1803.068848][T21987] radio-si470x 10-1:0.35: this is not a si470x device. [ 1803.277405][T21987] radio-raremono 10-1:0.35: this is not Thanko's Raremono. [ 1803.342935][T21987] usb 10-1: USB disconnect, device number 48 [ 1803.463411][T32418] Sensor A: ================= START STATUS ================= [ 1803.463463][T32418] Sensor A: Test Pattern: 75% Colorbar [ 1803.464026][T32418] Sensor A: Show Information: All [ 1803.465477][T32418] Sensor A: Vertical Flip: true [ 1803.465505][T32418] Sensor A: Horizontal Flip: false [ 1803.473857][T32418] Sensor A: Brightness: 128 [ 1803.473890][T32418] Sensor A: Contrast: 128 [ 1803.473914][T32418] Sensor A: Hue: 0 [ 1803.483115][T32418] Sensor A: Saturation: 128 [ 1803.483164][T32418] Sensor A: Pixel Rate: 160000000 [ 1803.483188][T32418] Sensor A: Horizontal Blanking: 800 [ 1803.483391][T32418] Sensor A: Vertical Blanking: 3223 [ 1803.483416][T32418] Sensor A: ================== END STATUS ================== [ 1804.346656][T21988] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -EPROTO [ 1804.346726][T21988] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1804.347702][T21988] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1804.351802][T21988] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 1804.422299][T21988] usb 5-1: USB disconnect, device number 119 [ 1804.469236][ T5696] usb 8-1: new full-speed USB device number 116 using dummy_hcd [ 1804.619932][ T5696] usb 8-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 1804.621180][ T5696] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1804.621222][ T5696] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1804.621242][ T5696] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1804.621268][ T5696] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1804.681370][ T5696] usb 8-1: config 0 descriptor?? [ 1804.919275][T32429] netlink: 'syz.4.8252': attribute type 1 has an invalid length. [ 1804.989090][T32429] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1805.066075][T21988] usb 10-1: new high-speed USB device number 49 using dummy_hcd [ 1805.123349][ T5696] hid_parser_main: 4007 callbacks suppressed [ 1805.123377][ T5696] hid-led 0003:0FC5:B080.004A: unknown main item tag 0x0 [ 1805.123428][ T5696] hid-led 0003:0FC5:B080.004A: unknown main item tag 0x0 [ 1805.123460][ T5696] hid-led 0003:0FC5:B080.004A: unknown main item tag 0x0 [ 1805.123491][ T5696] hid-led 0003:0FC5:B080.004A: unknown main item tag 0x0 [ 1805.123522][ T5696] hid-led 0003:0FC5:B080.004A: unknown main item tag 0x0 [ 1805.123552][ T5696] hid-led 0003:0FC5:B080.004A: unknown main item tag 0x0 [ 1805.123582][ T5696] hid-led 0003:0FC5:B080.004A: unknown main item tag 0x0 [ 1805.123612][ T5696] hid-led 0003:0FC5:B080.004A: unknown main item tag 0x0 [ 1805.123640][ T5696] hid-led 0003:0FC5:B080.004A: unknown main item tag 0x0 [ 1805.123667][ T5696] hid-led 0003:0FC5:B080.004A: unknown main item tag 0x0 [ 1805.237500][T21988] usb 10-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1805.238268][T21988] usb 10-1: config 0 has no interfaces? [ 1805.242959][T21988] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1805.242991][T21988] usb 10-1: Product: syz [ 1805.243009][T21988] usb 10-1: Manufacturer: syz [ 1805.243026][T21988] usb 10-1: SerialNumber: syz [ 1805.285521][T21988] usb 10-1: config 0 descriptor?? [ 1805.542655][ T5696] usb 10-1: USB disconnect, device number 49 [ 1806.050626][T21988] usb 8-1: USB disconnect, device number 116 [ 1806.786360][T21988] usb 10-1: new high-speed USB device number 50 using dummy_hcd [ 1806.861665][T32455] netlink: 'syz.7.8260': attribute type 12 has an invalid length. [ 1806.861694][T32455] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8260'. [ 1806.861724][T32455] bond0: option primary_reselect: invalid value (113) [ 1806.940228][T21988] usb 10-1: Using ep0 maxpacket: 8 [ 1806.943292][T21988] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1806.943337][T21988] usb 10-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=f7.67 [ 1806.944519][T21988] usb 10-1: config 0 has an invalid interface number: 49 but max is 0 [ 1806.944541][T21988] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1806.944557][T21988] usb 10-1: config 0 has no interface number 0 [ 1806.996816][T21988] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1806.996841][T21988] usb 10-1: Product: syz [ 1806.996854][T21988] usb 10-1: Manufacturer: syz [ 1806.996867][T21988] usb 10-1: SerialNumber: syz [ 1807.033624][T21988] usb 10-1: config 0 descriptor?? [ 1807.065913][ T5696] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1807.179994][T21988] rtsx_usb 10-1:0.49: probe with driver rtsx_usb failed with error -22 [ 1807.206109][ T5696] usb 3-1: device descriptor read/64, error -71 [ 1807.371623][T32461] ipvlan3: entered allmulticast mode [ 1807.371649][T32461] vlan0: entered allmulticast mode [ 1807.371664][T32461] veth0_vlan: entered allmulticast mode [ 1807.375081][T32461] batman_adv: batadv0: Adding interface: ipvlan3 [ 1807.375102][T32461] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1536 would solve the problem. [ 1807.375137][T32461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:32) already exists on: ipvlan2 [ 1807.375156][T32461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1807.375181][T32461] batman_adv: batadv0: Not using interface ipvlan3 (retrying later): interface not active [ 1807.466891][ T5684] kworker/0:4 (5684) used greatest stack depth: 15432 bytes left [ 1807.528008][ T5696] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1807.656001][ T5696] usb 3-1: device descriptor read/64, error -71 [ 1807.766637][ T5696] usb usb3-port1: attempt power cycle [ 1807.848082][ T31] audit: type=1326 audit(1789249820.931:6266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32460 comm="syz.7.8271" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f280ec code=0x0 [ 1808.116044][ T5696] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1808.136594][ T5696] usb 3-1: device descriptor read/8, error -71 [ 1808.396228][ T5696] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1808.417078][ T5696] usb 3-1: device descriptor read/8, error -71 [ 1808.526262][ T5696] usb usb3-port1: unable to enumerate USB device [ 1809.061843][T32482] Sensor A: ================= START STATUS ================= [ 1809.061868][T32482] Sensor A: Test Pattern: 75% Colorbar [ 1809.061897][T32482] Sensor A: Show Information: All [ 1809.061921][T32482] Sensor A: Vertical Flip: true [ 1809.061943][T32482] Sensor A: Horizontal Flip: false [ 1809.061965][T32482] Sensor A: Brightness: 128 [ 1809.061989][T32482] Sensor A: Contrast: 128 [ 1809.062012][T32482] Sensor A: Hue: 0 [ 1809.062034][T32482] Sensor A: Saturation: 128 [ 1809.062063][T32482] Sensor A: Pixel Rate: 160000000 [ 1809.062088][T32482] Sensor A: Horizontal Blanking: 800 [ 1809.062110][T32482] Sensor A: Vertical Blanking: 3223 [ 1809.062132][T32482] Sensor A: ================== END STATUS ================== [ 1809.457090][T21988] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 1809.606016][T21988] usb 9-1: Using ep0 maxpacket: 32 [ 1809.606769][T21988] usb 9-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=72.1d [ 1809.607466][T32488] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8267'. [ 1809.610328][T21988] usb 9-1: config 0 has an invalid interface number: 109 but max is 0 [ 1809.610360][T21988] usb 9-1: config 0 has no interface number 0 [ 1809.611790][T21988] usb 9-1: config 0 has an invalid interface number: 109 but max is 0 [ 1809.611849][T21988] usb 9-1: config 0 has no interface number 0 [ 1809.613246][T21988] usb 9-1: config 0 has an invalid interface number: 109 but max is 0 [ 1809.613274][T21988] usb 9-1: config 0 has no interface number 0 [ 1809.623025][T21988] usb 9-1: config 0 has an invalid interface number: 109 but max is 0 [ 1809.623125][T21988] usb 9-1: config 0 has no interface number 0 [ 1809.631275][T21988] usb 9-1: config 0 has an invalid interface number: 109 but max is 0 [ 1809.631380][T21988] usb 9-1: config 0 has no interface number 0 [ 1809.643337][T21988] usb 9-1: config 0 has an invalid interface number: 109 but max is 0 [ 1809.643422][T21988] usb 9-1: config 0 has no interface number 0 [ 1809.734819][T21988] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1809.734841][T21988] usb 9-1: Product: syz [ 1809.734852][T21988] usb 9-1: Manufacturer: syz [ 1809.734863][T21988] usb 9-1: SerialNumber: syz [ 1809.764026][T21988] usb 9-1: config 0 descriptor?? [ 1810.036121][ T5696] usb 8-1: new high-speed USB device number 117 using dummy_hcd [ 1810.186933][ T5696] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1810.187688][ T5696] usb 8-1: config 0 has no interfaces? [ 1810.226268][ T5696] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1810.226302][ T5696] usb 8-1: Product: syz [ 1810.226319][ T5696] usb 8-1: Manufacturer: syz [ 1810.226336][ T5696] usb 8-1: SerialNumber: syz [ 1810.234442][ T5696] usb 8-1: config 0 descriptor?? [ 1810.429565][T32496] fuse: Bad value for 'fd' [ 1810.511321][T21987] usb 8-1: USB disconnect, device number 117 [ 1810.891076][ T5696] usb 10-1: USB disconnect, device number 50 [ 1811.078240][T32499] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8270'. [ 1812.236006][T28278] usb 10-1: new high-speed USB device number 51 using dummy_hcd [ 1812.343586][T21988] mdc800 9-1:0.109: probe fails -> wrong Number of Configuration [ 1812.382264][T21988] usb 9-1: USB disconnect, device number 37 [ 1812.400392][T28278] usb 10-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1812.401115][T28278] usb 10-1: config 0 has no interfaces? [ 1812.424219][T28278] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1812.424261][T28278] usb 10-1: Product: syz [ 1812.424277][T28278] usb 10-1: Manufacturer: syz [ 1812.424307][T28278] usb 10-1: SerialNumber: syz [ 1812.470554][T28278] usb 10-1: config 0 descriptor?? [ 1812.769027][T28278] usb 10-1: USB disconnect, device number 51 [ 1812.928856][T32519] Sensor A: ================= START STATUS ================= [ 1812.928886][T32519] Sensor A: Test Pattern: 75% Colorbar [ 1812.929947][T32519] Sensor A: Show Information: All [ 1812.931786][T32519] Sensor A: Vertical Flip: true [ 1812.931811][T32519] Sensor A: Horizontal Flip: false [ 1812.931835][T32519] Sensor A: Brightness: 128 [ 1812.932423][T32519] Sensor A: Contrast: 128 [ 1812.933858][T32519] Sensor A: Hue: 0 [ 1812.935690][T32519] Sensor A: Saturation: 128 [ 1812.969867][T32519] Sensor A: Pixel Rate: 160000000 [ 1812.970450][T32519] Sensor A: Horizontal Blanking: 800 [ 1812.970525][T32519] Sensor A: Vertical Blanking: 3223 [ 1812.970683][T32519] Sensor A: ================== END STATUS ================== [ 1813.708751][T28278] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1813.856223][T28278] usb 3-1: Using ep0 maxpacket: 8 [ 1813.859018][T28278] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1813.859066][T28278] usb 3-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=f7.67 [ 1813.866194][T28278] usb 3-1: config 0 has an invalid interface number: 49 but max is 0 [ 1813.866227][T28278] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1813.866249][T28278] usb 3-1: config 0 has no interface number 0 [ 1813.935086][T28278] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1813.935119][T28278] usb 3-1: Product: syz [ 1813.935137][T28278] usb 3-1: Manufacturer: syz [ 1813.935153][T28278] usb 3-1: SerialNumber: syz [ 1813.965048][T28278] usb 3-1: config 0 descriptor?? [ 1814.081360][T28278] rtsx_usb 3-1:0.49: probe with driver rtsx_usb failed with error -22 [ 1814.195624][T32531] Sensor A: ================= START STATUS ================= [ 1814.195647][T32531] Sensor A: Test Pattern: 75% Colorbar [ 1814.195676][T32531] Sensor A: Show Information: All [ 1814.195700][T32531] Sensor A: Vertical Flip: true [ 1814.195723][T32531] Sensor A: Horizontal Flip: false [ 1814.195746][T32531] Sensor A: Brightness: 128 [ 1814.204382][T32531] Sensor A: Contrast: 128 [ 1814.204411][T32531] Sensor A: Hue: 0 [ 1814.204430][T32531] Sensor A: Saturation: 128 [ 1814.204451][T32531] Sensor A: Pixel Rate: 160000000 [ 1814.204472][T32531] Sensor A: Horizontal Blanking: 800 [ 1814.204492][T32531] Sensor A: Vertical Blanking: 3223 [ 1814.204520][T32531] Sensor A: ================== END STATUS ================== [ 1814.506310][T21988] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1814.657806][T21988] usb 5-1: Using ep0 maxpacket: 32 [ 1814.658654][T21988] usb 5-1: New USB device found, idVendor=17cc, idProduct=1021, bcdDevice= 0.40 [ 1814.666698][T21988] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1814.666772][T21988] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1814.713466][T21988] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1814.713499][T21988] usb 5-1: Product: syz [ 1814.713518][T21988] usb 5-1: Manufacturer: syz [ 1814.713536][T21988] usb 5-1: SerialNumber: syz [ 1814.971478][T32533] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8283'. [ 1815.289426][T21988] usb 5-1: USB disconnect, device number 120 [ 1815.816612][T21987] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 1815.968039][T21987] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1815.969279][T21987] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1815.969313][T21987] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1815.969334][T21987] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1815.969389][T21987] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1815.980146][T21987] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1815.980231][T21987] usb 9-1: Product: syz [ 1815.980273][T21987] usb 9-1: Manufacturer: syz [ 1816.065031][T21987] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1816.276916][T28278] usb 9-1: USB disconnect, device number 38 [ 1816.412606][T21987] usb 5-1: new full-speed USB device number 121 using dummy_hcd [ 1816.588513][T21987] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1816.610834][T21987] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1816.610929][T21987] usb 5-1: Product: syz [ 1816.610986][T21987] usb 5-1: Manufacturer: syz [ 1816.611029][T21987] usb 5-1: SerialNumber: syz [ 1816.696340][ T5696] usb 8-1: new high-speed USB device number 118 using dummy_hcd [ 1816.847184][ T5696] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1816.848554][ T5696] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1816.848589][ T5696] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1816.851104][ T5696] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1816.851136][ T5696] usb 8-1: Product: syz [ 1816.851153][ T5696] usb 8-1: Manufacturer: syz [ 1816.851170][ T5696] usb 8-1: SerialNumber: syz [ 1816.854435][ T5696] usb 8-1: config 0 descriptor?? [ 1816.923904][ T5696] usb 8-1: selecting invalid altsetting 0 [ 1817.124613][T21987] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 121 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 1817.181658][ T25] usb 8-1: USB disconnect, device number 118 [ 1817.315537][T32550] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8289'. [ 1817.353846][T24884] udevd[24884]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1818.010591][ T5696] usb 3-1: USB disconnect, device number 67 [ 1818.114867][T32560] fuse: Bad value for 'fd' [ 1818.455439][T32565] syzkaller0: entered promiscuous mode [ 1818.458946][T32565] syzkaller0: entered allmulticast mode [ 1819.250351][ T25] usb 5-1: USB disconnect, device number 121 [ 1819.256383][ T25] usblp0: removed [ 1819.522930][ T31] audit: type=1326 audit(1789249832.601:6267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32568 comm="syz.4.8294" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708f0ec code=0x0 [ 1819.705047][T32572] vlan0: entered promiscuous mode [ 1820.304014][T32579] dummy0: entered promiscuous mode [ 1820.304046][T32579] dummy0: entered allmulticast mode [ 1820.304270][T32579] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1821.125973][ T5696] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 1821.306157][ T5696] usb 5-1: Using ep0 maxpacket: 32 [ 1821.307331][ T5696] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1821.310650][ T5696] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1821.310681][ T5696] usb 5-1: config 0 has no interfaces? [ 1821.310716][ T5696] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1821.384875][ T5696] usb 5-1: config 0 descriptor?? [ 1821.615360][T32594] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8301'. [ 1821.633265][T32594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1821.661418][ T25] usb 5-1: USB disconnect, device number 122 [ 1821.767229][T32611] xt_LOG: level 115 >= 8 [ 1821.914102][T32617] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8310'. [ 1822.216707][ T25] usb 8-1: new low-speed USB device number 119 using dummy_hcd [ 1822.366657][ T5696] usb 10-1: new high-speed USB device number 52 using dummy_hcd [ 1822.368094][ T25] usb 8-1: New USB device found, idVendor=054c, idProduct=087d, bcdDevice=15.88 [ 1822.369634][ T25] usb 8-1: config 4 has an invalid interface number: 244 but max is 2 [ 1822.369663][ T25] usb 8-1: config 4 has an invalid interface number: 244 but max is 2 [ 1822.369684][ T25] usb 8-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1822.369706][ T25] usb 8-1: config 4 has 1 interface, different from the descriptor's value: 3 [ 1822.369730][ T25] usb 8-1: config 4 has no interface number 0 [ 1822.369762][ T25] usb 8-1: config 4 interface 244 has no altsetting 1 [ 1822.373471][ T25] usb 8-1: string descriptor 0 read error: -22 [ 1822.373616][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1822.471728][ T25] usb-storage 8-1:4.244: USB Mass Storage device detected [ 1822.491640][ T25] usb-storage 8-1:4.244: Quirks match for vid 054c pid 087d: 4000000 [ 1822.526679][ T5696] usb 10-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1822.527422][ T5696] usb 10-1: config 0 has no interfaces? [ 1822.530513][ T5696] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1822.530542][ T5696] usb 10-1: Product: syz [ 1822.530559][ T5696] usb 10-1: Manufacturer: syz [ 1822.530575][ T5696] usb 10-1: SerialNumber: syz [ 1822.580875][ T5696] usb 10-1: config 0 descriptor?? [ 1822.642631][T21987] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1822.812306][T21987] usb 3-1: Using ep0 maxpacket: 32 [ 1822.815206][T21987] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1822.831837][T21987] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 1822.831871][T21987] usb 3-1: config 0 has no interface number 0 [ 1822.831916][T21987] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1822.831947][T21987] usb 3-1: config 0 interface 85 has no altsetting 0 [ 1822.872132][T21987] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1822.872163][T21987] usb 3-1: Product: syz [ 1822.872178][T21987] usb 3-1: Manufacturer: syz [ 1822.872195][T21987] usb 3-1: SerialNumber: syz [ 1822.905913][T21987] usb 3-1: config 0 descriptor?? [ 1823.090085][ T5696] usb 10-1: USB disconnect, device number 52 [ 1823.213643][T32638] syz.8.8326 (32638): drop_caches: 2 [ 1823.320798][T21987] appletouch 3-1:0.85: Geyser mode initialized. [ 1823.323482][T21987] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input180 [ 1823.426241][T28278] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 1823.592364][T28278] usb 5-1: New USB device found, idVendor=15a4, idProduct=9035, bcdDevice= 2.00 [ 1823.593301][T28278] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1823.593339][T28278] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1823.593371][T28278] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1824.146243][T21987] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 1824.298234][T21987] usb 9-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1824.299162][T21987] usb 9-1: config 0 has no interfaces? [ 1824.304521][T21987] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1824.304891][T21987] usb 9-1: Product: syz [ 1824.304910][T21987] usb 9-1: Manufacturer: syz [ 1824.304972][T21987] usb 9-1: SerialNumber: syz [ 1824.355459][T21987] usb 9-1: config 0 descriptor?? [ 1824.578041][T21987] usb 9-1: USB disconnect, device number 39 [ 1824.608076][T28278] usb 5-1: dvb_usb_v2: 2nd usb_bulk_msg() failed=-71 [ 1824.608209][T28278] dvb_usb_af9035 5-1:1.0: probe with driver dvb_usb_af9035 failed with error -71 [ 1824.644957][T28278] usb 5-1: USB disconnect, device number 123 [ 1824.921297][ T25] usb 8-1: USB disconnect, device number 119 [ 1825.333087][T32685] random: crng reseeded on system resumption [ 1825.565525][T32689] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8332'. [ 1825.614411][T28278] usb 3-1: USB disconnect, device number 68 [ 1825.720409][T28278] appletouch 3-1:0.85: input: appletouch disconnected [ 1825.998187][ T5696] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1826.020899][T32698] vlan0: entered promiscuous mode [ 1826.149554][ T5696] usb 5-1: Using ep0 maxpacket: 32 [ 1826.150434][ T5696] usb 5-1: New USB device found, idVendor=0499, idProduct=105c, bcdDevice= 0.40 [ 1826.152639][ T5696] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 32 [ 1826.175412][ T5696] usb 5-1: New USB device strings: Mfr=1, Product=6, SerialNumber=3 [ 1826.175495][ T5696] usb 5-1: Product: syz [ 1826.175538][ T5696] usb 5-1: Manufacturer: syz [ 1826.175580][ T5696] usb 5-1: SerialNumber: syz [ 1826.208218][T32692] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1826.356066][T28278] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 1826.407234][T32710] netlink: 'syz.2.8340': attribute type 10 has an invalid length. [ 1826.437688][ T5696] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1826.556056][T28278] usb 9-1: Using ep0 maxpacket: 32 [ 1826.558237][T28278] usb 9-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 1826.560937][T28278] usb 9-1: config 0 has an invalid interface number: 119 but max is 0 [ 1826.560970][T28278] usb 9-1: config 0 has no interface number 0 [ 1826.561013][T28278] usb 9-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1826.561040][T28278] usb 9-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1826.561069][T28278] usb 9-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 52, changing to 7 [ 1826.561098][T28278] usb 9-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 9272, setting to 1024 [ 1826.561126][T28278] usb 9-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1826.564482][T28278] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1826.564514][T28278] usb 9-1: Product: syz [ 1826.564531][T28278] usb 9-1: Manufacturer: syz [ 1826.564549][T28278] usb 9-1: SerialNumber: syz [ 1826.581724][T28278] usb 9-1: config 0 descriptor?? [ 1826.680291][T28278] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.119/input/input181 [ 1826.733589][ T5696] usb 5-1: USB disconnect, device number 124 [ 1826.913784][T28278] usb 9-1: USB disconnect, device number 40 [ 1827.027935][T26125] udevd[26125]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1827.726064][T28278] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1827.884709][T32727] fuse: Unknown parameter '' [ 1827.893965][T28278] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1827.901837][T28278] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1827.902016][T28278] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1827.966395][T28278] usb 5-1: config 0 descriptor?? [ 1828.072286][T32720] 8021q: adding VLAN 0 to HW filter on device team0 [ 1828.182841][T28278] usbhid 5-1:0.0: can't add hid device: -71 [ 1828.182989][T28278] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1828.186389][ T5696] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 1828.214370][T28278] usb 5-1: USB disconnect, device number 125 [ 1828.293887][T32720] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1828.293929][T32720] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1828.359703][ T5696] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1828.359759][ T5696] usb 9-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1828.363518][ T5696] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1828.363548][ T5696] usb 9-1: Product: syz [ 1828.363564][ T5696] usb 9-1: Manufacturer: syz [ 1828.363579][ T5696] usb 9-1: SerialNumber: syz [ 1828.392653][T32720] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1828.429357][T32720] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1828.444275][T32720] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1828.445068][ T5696] usb 9-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1828.464011][T32720] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1828.630934][T32720] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1828.635132][T32720] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1828.658442][T32720] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 1828.663529][T32720] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1828.689944][T32720] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1828.703493][ T5696] usb 9-1: unit 13 not found! [ 1828.706694][T21987] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1828.802643][T32720] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1828.822411][T32720] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1828.846064][T21987] usb 5-1: device descriptor read/64, error -71 [ 1828.890291][ T5696] usb 9-1: USB disconnect, device number 41 [ 1828.940763][T32743] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8351'. [ 1829.051346][T25772] udevd[25772]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1829.088191][T21987] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1829.215708][T31816] bridge0: port 1(bridge_slave_0) entered blocking state [ 1829.215910][T31816] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1829.216283][T21987] usb 5-1: device descriptor read/64, error -71 [ 1829.230347][T31816] bridge0: port 2(bridge_slave_1) entered blocking state [ 1829.230739][T31816] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1829.326292][T21987] usb usb5-port1: attempt power cycle [ 1829.526710][T11168] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1829.527098][T11168] bond2: (slave bond0): link status definitely up, 20000 Mbps full duplex [ 1829.527185][T11168] bond2: (slave bond0): making interface the new active one [ 1829.572702][T11168] bond2: active interface up! [ 1829.576374][T32196] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1829.590994][T32196] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1829.591587][T32196] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1829.667483][T21987] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1829.689617][T21987] usb 5-1: device descriptor read/8, error -71 [ 1829.906691][T32762] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8354'. [ 1829.925970][T21987] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1829.946983][T21987] usb 5-1: device descriptor read/8, error -71 [ 1829.952001][T32761] syzkaller0: entered promiscuous mode [ 1829.952029][T32761] syzkaller0: entered allmulticast mode [ 1830.056522][T21987] usb usb5-port1: unable to enumerate USB device [ 1830.493914][T32766] Sensor A: ================= START STATUS ================= [ 1830.493937][T32766] Sensor A: Test Pattern: 75% Colorbar [ 1830.493970][T32766] Sensor A: Show Information: All [ 1830.493993][T32766] Sensor A: Vertical Flip: true [ 1830.494016][T32766] Sensor A: Horizontal Flip: false [ 1830.494040][T32766] Sensor A: Brightness: 128 [ 1830.494064][T32766] Sensor A: Contrast: 128 [ 1830.494087][T32766] Sensor A: Hue: 0 [ 1830.494109][T32766] Sensor A: Saturation: 128 [ 1830.494131][T32766] Sensor A: Pixel Rate: 160000000 [ 1830.494154][T32766] Sensor A: Horizontal Blanking: 800 [ 1830.494177][T32766] Sensor A: Vertical Blanking: 3223 [ 1830.494211][T32766] Sensor A: ================== END STATUS ================== [ 1832.142855][ T314] program syz.8.8362 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1832.143262][ T314] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1832.845943][T21987] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 1832.875941][T28278] usb 8-1: new high-speed USB device number 120 using dummy_hcd [ 1832.996166][T21987] usb 9-1: Using ep0 maxpacket: 16 [ 1832.998197][T21987] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 1833.019339][T21987] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1833.019372][T21987] usb 9-1: config 0 has no interfaces? [ 1833.022227][T21987] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1833.022258][T21987] usb 9-1: SerialNumber: syz [ 1833.038202][T28278] usb 8-1: Using ep0 maxpacket: 8 [ 1833.038993][T28278] usb 8-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 1833.040067][T28278] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1833.040119][T28278] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1833.040139][T28278] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1833.040159][T28278] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1833.069936][T28278] usb 8-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 1833.069969][T28278] usb 8-1: Product: syz [ 1833.069985][T28278] usb 8-1: Manufacturer: syz [ 1833.070001][T28278] usb 8-1: SerialNumber: syz [ 1833.078211][T21987] usb 9-1: config 0 descriptor?? [ 1833.169328][T28278] usb 8-1: config 0 descriptor?? [ 1833.275959][T28278] rc_core: IR keymap rc-imon-rsc not found [ 1833.275982][T28278] Registered IR keymap rc-empty [ 1833.277793][T28278] rc rc0: iMON Station as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 1833.281969][T28278] input: iMON Station as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input182 [ 1833.320438][T28278] imon_raw 8-1:0.0: probe with driver imon_raw failed with error -90 [ 1833.541301][ T31] audit: type=1326 audit(1789249846.621:6268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=325 comm="syz.7.8367" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f280ec code=0x7ffc0000 [ 1833.543601][ T31] audit: type=1326 audit(1789249846.621:6269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=325 comm="syz.7.8367" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f280ec code=0x7ffc0000 [ 1833.551355][ T31] audit: type=1326 audit(1789249846.631:6270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=325 comm="syz.7.8367" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f280ec code=0x7ffc0000 [ 1833.551554][ T31] audit: type=1326 audit(1789249846.631:6271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=325 comm="syz.7.8367" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f280ec code=0x7ffc0000 [ 1833.592997][ T31] audit: type=1326 audit(1789249846.671:6272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=325 comm="syz.7.8367" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f280ec code=0x7ffc0000 [ 1833.622294][ T31] audit: type=1326 audit(1789249846.681:6273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=325 comm="syz.7.8367" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f280ec code=0x7ffc0000 [ 1833.622460][ T31] audit: type=1326 audit(1789249846.701:6274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=325 comm="syz.7.8367" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f280ec code=0x7ffc0000 [ 1833.730137][ T31] audit: type=1326 audit(1789249846.811:6275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=325 comm="syz.7.8367" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7f280ec code=0x7ffc0000 [ 1833.730189][ T31] audit: type=1326 audit(1789249846.811:6276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=325 comm="syz.7.8367" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f280ec code=0x7ffc0000 [ 1833.730227][ T31] audit: type=1326 audit(1789249846.811:6277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=325 comm="syz.7.8367" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f280ec code=0x7ffc0000 [ 1833.939165][ T342] IPVS: ip_vs_add_dest(): server weight less than zero [ 1834.158482][ T344] syzkaller0: entered promiscuous mode [ 1834.158512][ T344] syzkaller0: entered allmulticast mode [ 1835.582276][ T25] usb 9-1: USB disconnect, device number 42 [ 1835.698133][ T359] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8374'. [ 1835.935959][T21987] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 1836.005913][ T25] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 1836.087500][T21987] usb 3-1: not running at top speed; connect to a high speed hub [ 1836.087529][T21987] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 1836.089946][T21987] usb 3-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 1836.090017][T21987] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1836.157214][ T25] usb 9-1: Using ep0 maxpacket: 32 [ 1836.161531][ T25] usb 9-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1836.163767][ T25] usb 9-1: config index 0 descriptor too short (expected 539, got 27) [ 1836.163806][ T25] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1836.163823][ T25] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 1836.220416][ T25] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1836.220439][ T25] usb 9-1: Product: syz [ 1836.220451][ T25] usb 9-1: Manufacturer: syz [ 1836.220462][ T25] usb 9-1: SerialNumber: syz [ 1836.281865][T21987] uvcvideo 3-1:1.0: Found UVC 1.00 device (046d:0825) [ 1836.281920][T21987] uvcvideo 3-1:1.0: No streaming interface found for terminal 32770. [ 1836.292081][ T25] usb 9-1: config 0 descriptor?? [ 1836.321840][ T25] hub 9-1:0.0: bad descriptor, ignoring hub [ 1836.321862][ T25] hub 9-1:0.0: probe with driver hub failed with error -5 [ 1836.332647][ T25] input: syz syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input183 [ 1836.385374][ T25] usbtouchscreen 9-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -90 [ 1836.658662][ T25] usbtouchscreen 9-1:0.0: probe with driver usbtouchscreen failed with error -90 [ 1836.704468][T21987] usb 3-1: USB disconnect, device number 69 [ 1836.725191][ T25] usb 9-1: USB disconnect, device number 43 [ 1836.894832][ T5824] usb 8-1: USB disconnect, device number 120 [ 1836.946142][ T365] openvswitch: netlink: Key 7 has unexpected len 0 expected 12 [ 1837.132106][ T370] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8389'. [ 1837.455898][ T5831] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1837.627958][ T5831] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1837.628014][ T5831] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1837.629148][ T5831] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1837.629175][ T5831] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1837.632447][ T5831] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1837.632478][ T5831] usb 3-1: Product: syz [ 1837.632495][ T5831] usb 3-1: Manufacturer: 覴ij̨ⵇ烇微웗鬚í ä¼—άå›â¤‘몰勻親᲎锹밦뾫ᒌ [ 1837.632517][ T5831] usb 3-1: SerialNumber: syz [ 1837.718735][ T5831] usb 3-1: selecting invalid altsetting 1 [ 1837.719502][ T5831] usb 3-1: unit 6 not found! [ 1838.603175][ T400] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20000 [ 1838.603999][ T400] IPVS: set_ctl: invalid protocol: 29 172.20.20.32:20000 [ 1839.024870][ T405] bridge0: port 2(bridge_slave_1) entered disabled state [ 1839.025076][ T405] bridge0: port 1(bridge_slave_0) entered disabled state [ 1839.043383][T28278] usb 10-1: new high-speed USB device number 53 using dummy_hcd [ 1839.206158][T28278] usb 10-1: Using ep0 maxpacket: 16 [ 1839.206952][T28278] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 1839.209132][T28278] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1839.209157][T28278] usb 10-1: config 0 has no interfaces? [ 1839.210626][T28278] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1839.210652][T28278] usb 10-1: SerialNumber: syz [ 1839.221673][T28278] usb 10-1: config 0 descriptor?? [ 1839.300910][ T409] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8390'. [ 1839.358669][ T412] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8390'. [ 1839.646408][T19285] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1839.647389][T19285] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1839.647442][T19285] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1839.647489][T19285] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1840.263661][ T423] Sensor A: ================= START STATUS ================= [ 1840.263689][ T423] Sensor A: Test Pattern: 75% Colorbar [ 1840.263808][ T423] Sensor A: Show Information: All [ 1840.263832][ T423] Sensor A: Vertical Flip: true [ 1840.263862][ T423] Sensor A: Horizontal Flip: false [ 1840.263884][ T423] Sensor A: Brightness: 128 [ 1840.264643][ T423] Sensor A: Contrast: 128 [ 1840.264794][ T423] Sensor A: Hue: 0 [ 1840.264916][ T423] Sensor A: Saturation: 128 [ 1840.264941][ T423] Sensor A: Pixel Rate: 160000000 [ 1840.264966][ T423] Sensor A: Horizontal Blanking: 800 [ 1840.264989][ T423] Sensor A: Vertical Blanking: 3223 [ 1840.265048][ T423] Sensor A: ================== END STATUS ================== [ 1840.504575][ T5831] usb 3-1: 2:0: failed to get current value for ch 0 (-71) [ 1840.640033][ T5831] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1840.657532][ T5831] usb 3-1: USB disconnect, device number 70 [ 1840.740406][T26124] udevd[26124]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1841.059968][ T428] syzkaller0: entered promiscuous mode [ 1841.063214][ T428] syzkaller0: entered allmulticast mode [ 1841.863349][ T5831] usb 10-1: USB disconnect, device number 53 [ 1842.066632][ T5824] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 1842.103696][ T443] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8399'. [ 1842.219230][ T5824] usb 9-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 1842.220763][ T5824] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1842.220799][ T5824] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1842.220823][ T5824] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1842.220869][ T5824] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1842.225640][ T5824] usb 9-1: config 0 descriptor?? [ 1842.733504][ T5824] input: HID 04b4:0001 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:04B4:0001.004B/input/input184 [ 1842.849878][ T459] syzkaller0: entered promiscuous mode [ 1842.858244][ T459] syzkaller0: entered allmulticast mode [ 1842.912053][ T5824] cypress 0003:04B4:0001.004B: input,hidraw0: USB HID v0.00 Joystick [HID 04b4:0001] on usb-dummy_hcd.8-1/input0 [ 1842.951815][ T5824] usb 9-1: USB disconnect, device number 44 [ 1843.229386][ T462] fido_id[462]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1843.717943][ T471] openvswitch: netlink: Missing key (keys=c0, expected=2000) [ 1843.996332][ T5824] usb 8-1: new high-speed USB device number 121 using dummy_hcd [ 1844.177312][ T5824] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1844.177966][ T5824] usb 8-1: no configurations [ 1844.177983][ T5824] usb 8-1: can't read configurations, error -22 [ 1844.310994][ T5824] usb 8-1: new high-speed USB device number 122 using dummy_hcd [ 1844.458361][ T5824] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1844.458410][ T5824] usb 8-1: no configurations [ 1844.458425][ T5824] usb 8-1: can't read configurations, error -22 [ 1844.458740][ T5824] usb usb8-port1: attempt power cycle [ 1844.796026][ T5824] usb 8-1: new high-speed USB device number 123 using dummy_hcd [ 1844.818279][ T5824] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1844.818327][ T5824] usb 8-1: no configurations [ 1844.818342][ T5824] usb 8-1: can't read configurations, error -22 [ 1844.946293][ T5824] usb 8-1: new high-speed USB device number 124 using dummy_hcd [ 1844.966038][ T5831] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1844.967485][ T5824] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1844.967532][ T5824] usb 8-1: no configurations [ 1844.967547][ T5824] usb 8-1: can't read configurations, error -22 [ 1844.968289][ T5824] usb usb8-port1: unable to enumerate USB device [ 1845.125890][ T5831] usb 3-1: Using ep0 maxpacket: 32 [ 1845.127933][ T5831] usb 3-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=72.1d [ 1845.130280][ T5831] usb 3-1: config 0 has an invalid interface number: 109 but max is 0 [ 1845.130311][ T5831] usb 3-1: config 0 has no interface number 0 [ 1845.131421][ T5831] usb 3-1: config 0 has an invalid interface number: 109 but max is 0 [ 1845.131450][ T5831] usb 3-1: config 0 has no interface number 0 [ 1845.133129][ T5831] usb 3-1: config 0 has an invalid interface number: 109 but max is 0 [ 1845.133159][ T5831] usb 3-1: config 0 has no interface number 0 [ 1845.134982][ T5831] usb 3-1: config 0 has an invalid interface number: 109 but max is 0 [ 1845.135011][ T5831] usb 3-1: config 0 has no interface number 0 [ 1845.195044][ T5831] usb 3-1: config 0 has an invalid interface number: 109 but max is 0 [ 1845.195076][ T5831] usb 3-1: config 0 has no interface number 0 [ 1845.233811][ T5831] usb 3-1: config 0 has an invalid interface number: 109 but max is 0 [ 1845.233847][ T5831] usb 3-1: config 0 has no interface number 0 [ 1845.265920][ T5831] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1845.265950][ T5831] usb 3-1: Product: syz [ 1845.265967][ T5831] usb 3-1: Manufacturer: syz [ 1845.265983][ T5831] usb 3-1: SerialNumber: syz [ 1845.270588][ T5831] usb 3-1: config 0 descriptor?? [ 1846.247091][ T25] usb 10-1: new high-speed USB device number 54 using dummy_hcd [ 1846.396008][ T25] usb 10-1: Using ep0 maxpacket: 32 [ 1846.397801][ T25] usb 10-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 1846.399691][ T25] usb 10-1: config 0 has an invalid interface number: 239 but max is 0 [ 1846.399734][ T25] usb 10-1: config 0 has an invalid descriptor of length 108, skipping remainder of the config [ 1846.399755][ T25] usb 10-1: config 0 has no interface number 0 [ 1846.399799][ T25] usb 10-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 1846.399824][ T25] usb 10-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1846.399844][ T25] usb 10-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 1846.399877][ T25] usb 10-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024 [ 1846.399906][ T25] usb 10-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024 [ 1846.399931][ T25] usb 10-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 1846.399955][ T25] usb 10-1: config 0 interface 239 altsetting 4 endpoint 0x85 has an invalid bInterval 107, changing to 10 [ 1846.399982][ T25] usb 10-1: config 0 interface 239 altsetting 4 endpoint 0x85 has invalid maxpacket 25209, setting to 1024 [ 1846.400001][ T25] usb 10-1: config 0 interface 239 has no altsetting 0 [ 1846.406156][ T25] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1846.406240][ T25] usb 10-1: Product: syz [ 1846.406294][ T25] usb 10-1: Manufacturer: syz [ 1846.406339][ T25] usb 10-1: SerialNumber: syz [ 1846.485219][ T510] netlink: 'syz.8.8419': attribute type 1 has an invalid length. [ 1846.529162][ T25] usb 10-1: config 0 descriptor?? [ 1846.547400][ T506] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1846.554011][ T506] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1847.310447][T21988] usb 10-1: USB disconnect, device number 54 [ 1847.322239][T27091] Bluetooth: hci4: BCM: Reset failed (-71) [ 1847.874755][ T5831] mdc800 3-1:0.109: probe fails -> wrong Number of Configuration [ 1847.896523][ T5831] usb 3-1: USB disconnect, device number 71 [ 1847.941867][ T510] bridge0: port 2(bridge_slave_1) entered disabled state [ 1847.942381][ T510] bridge0: port 1(bridge_slave_0) entered disabled state [ 1848.876381][T21988] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1848.905134][ T540] syzkaller0: entered promiscuous mode [ 1848.905188][ T540] syzkaller0: entered allmulticast mode [ 1848.926954][ T544] syzkaller0: entered promiscuous mode [ 1848.926982][ T544] syzkaller0: entered allmulticast mode [ 1849.026974][T21988] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 1849.034754][T21988] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 1849.034777][T21988] usb 5-1: Product: syz [ 1849.034788][T21988] usb 5-1: Manufacturer: syz [ 1849.034799][T21988] usb 5-1: SerialNumber: syz [ 1849.087254][T21988] usb 5-1: config 0 descriptor?? [ 1849.109834][T21988] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 1849.109959][T21988] dvb-usb: bulk message failed: -22 (2/0) [ 1849.144534][T21988] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1849.145222][T21988] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 1849.145267][T21988] usb 5-1: media controller created [ 1849.230693][T21988] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1849.405113][T21988] dvb-usb: bulk message failed: -22 (1/0) [ 1849.593157][T21988] DVB: Unable to find symbol mt352_attach() [ 1849.593397][T21988] dvb-usb: bulk message failed: -22 (5/0) [ 1849.593415][T21988] zl10353_read_register: readreg error (reg=127, ret==-121) [ 1849.593451][T21988] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 1849.808075][T21988] rc_core: IR keymap rc-dvico-mce not found [ 1849.808097][T21988] Registered IR keymap rc-empty [ 1849.810772][T21988] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 1849.863821][T21988] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input185 [ 1849.975647][T21988] dvb-usb: schedule remote query interval to 100 msecs. [ 1849.975677][T21988] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 1850.003699][T21988] usb 5-1: USB disconnect, device number 4 [ 1850.177173][T21988] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 1851.141477][ T570] netlink: 'syz.9.8431': attribute type 1 has an invalid length. [ 1851.382736][ T570] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1851.629313][ T25] usb 3-1: new low-speed USB device number 72 using dummy_hcd [ 1851.652452][ T574] bond1: (slave geneve2): making interface the new active one [ 1851.691433][ T574] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1851.728027][T19289] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1851.729038][T19289] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1851.729083][T19289] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1851.729124][T19289] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1851.786373][ T25] usb 3-1: Invalid ep0 maxpacket: 32 [ 1851.915921][ T25] usb 3-1: new low-speed USB device number 73 using dummy_hcd [ 1852.066034][ T25] usb 3-1: Invalid ep0 maxpacket: 32 [ 1852.066492][ T25] usb usb3-port1: attempt power cycle [ 1852.108075][ T581] tipc: Started in network mode [ 1852.108114][ T581] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 1852.108176][ T581] tipc: Enabling of bearer rejected, failed to enable media [ 1852.406068][ T25] usb 3-1: new low-speed USB device number 74 using dummy_hcd [ 1852.427247][ T25] usb 3-1: Invalid ep0 maxpacket: 32 [ 1852.555973][ T25] usb 3-1: new low-speed USB device number 75 using dummy_hcd [ 1852.576838][ T25] usb 3-1: Invalid ep0 maxpacket: 32 [ 1852.577265][ T25] usb usb3-port1: unable to enumerate USB device [ 1853.500573][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.500640][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.643032][ T604] netlink: 79 bytes leftover after parsing attributes in process `syz.9.8440'. [ 1853.690475][ T604] kvm: user requested TSC rate below hardware speed [ 1853.994323][ T611] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8442'. [ 1854.010999][ T611] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8442'. [ 1854.192924][ T609] syzkaller0: entered promiscuous mode [ 1854.192997][ T609] syzkaller0: entered allmulticast mode [ 1855.128068][ T631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8448'. [ 1855.577311][ T5696] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1855.727051][ T5696] usb 3-1: Using ep0 maxpacket: 8 [ 1855.727809][ T5696] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 1855.729192][ T5696] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1855.729245][ T5696] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1855.729275][ T5696] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1855.729304][ T5696] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1855.731899][ T5696] usb 3-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 1855.731930][ T5696] usb 3-1: Product: syz [ 1855.731948][ T5696] usb 3-1: Manufacturer: syz [ 1855.731966][ T5696] usb 3-1: SerialNumber: syz [ 1855.799418][ T5696] usb 3-1: config 0 descriptor?? [ 1855.806053][T15156] usb 8-1: new high-speed USB device number 125 using dummy_hcd [ 1855.958704][ T5696] rc_core: IR keymap rc-imon-rsc not found [ 1855.958725][ T5696] Registered IR keymap rc-empty [ 1855.960247][T15156] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1855.960984][T15156] usb 8-1: config 0 has no interfaces? [ 1855.961959][ T5696] rc rc0: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1855.966044][T15156] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1855.966146][T15156] usb 8-1: Product: syz [ 1855.966160][T15156] usb 8-1: Manufacturer: syz [ 1855.966256][T15156] usb 8-1: SerialNumber: syz [ 1855.988544][ T5696] input: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input186 [ 1856.007637][T15156] usb 8-1: config 0 descriptor?? [ 1856.027464][ T5696] imon_raw 3-1:0.0: probe with driver imon_raw failed with error -90 [ 1856.250209][ T5696] usb 8-1: USB disconnect, device number 125 [ 1856.408941][ T31] kauditd_printk_skb: 26 callbacks suppressed [ 1856.408963][ T31] audit: type=1326 audit(1789249869.491:6304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=634 comm="syz.2.8451" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef0ec code=0x7ffc0000 [ 1856.411900][ T31] audit: type=1326 audit(1789249869.491:6305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=634 comm="syz.2.8451" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef0ec code=0x7ffc0000 [ 1856.412755][ T31] audit: type=1326 audit(1789249869.491:6306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=634 comm="syz.2.8451" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6fef0ec code=0x7ffc0000 [ 1856.414375][ T31] audit: type=1326 audit(1789249869.491:6307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=634 comm="syz.2.8451" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef0ec code=0x7ffc0000 [ 1856.415340][ T31] audit: type=1326 audit(1789249869.491:6308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=634 comm="syz.2.8451" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef0ec code=0x7ffc0000 [ 1856.447730][ T31] audit: type=1326 audit(1789249869.501:6309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=634 comm="syz.2.8451" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf6fef0ec code=0x7ffc0000 [ 1856.448198][ T31] audit: type=1326 audit(1789249869.531:6310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=634 comm="syz.2.8451" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef0ec code=0x7ffc0000 [ 1856.500596][ T31] audit: type=1326 audit(1789249869.531:6311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=634 comm="syz.2.8451" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef0ec code=0x7ffc0000 [ 1856.500644][ T31] audit: type=1326 audit(1789249869.561:6312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=634 comm="syz.2.8451" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf6fef0ec code=0x7ffc0000 [ 1856.500678][ T31] audit: type=1326 audit(1789249869.561:6313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=634 comm="syz.2.8451" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef0ec code=0x7ffc0000 [ 1857.064898][ T663] ipvlan2: entered promiscuous mode [ 1857.064928][ T663] ipvlan2: left allmulticast mode [ 1857.064943][ T663] vlan0: left allmulticast mode [ 1857.064958][ T663] bond4: left allmulticast mode [ 1857.065124][ T663] vxcan2: entered promiscuous mode [ 1857.065279][ T663] vxcan3: entered promiscuous mode [ 1857.323807][ T670] netlink: 'syz.7.8462': attribute type 23 has an invalid length. [ 1857.451319][ T673] netlink: 48 bytes leftover after parsing attributes in process `syz.7.8462'. [ 1857.516577][ T677] openvswitch: netlink: Flow actions attr not present in new flow. [ 1857.547389][ T674] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1857.863011][ T679] syzkaller0: entered promiscuous mode [ 1857.863038][ T679] syzkaller0: entered allmulticast mode [ 1857.923076][ T679] tipc: Enabled bearer , priority 0 [ 1857.932539][ T678] tipc: Resetting bearer [ 1858.103456][ T678] tipc: Disabling bearer [ 1858.217938][ T688] syzkaller0: entered promiscuous mode [ 1858.217968][ T688] syzkaller0: entered allmulticast mode [ 1858.287590][ T5830] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 1858.303071][ T682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1858.322592][ T682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1858.574117][T21988] usb 3-1: USB disconnect, device number 76 [ 1859.099284][T21988] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1859.247812][T21988] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1859.248553][T21988] usb 3-1: config 0 has no interfaces? [ 1859.250841][T21988] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1859.250863][T21988] usb 3-1: Product: syz [ 1859.250874][T21988] usb 3-1: Manufacturer: syz [ 1859.250886][T21988] usb 3-1: SerialNumber: syz [ 1859.253808][T21988] usb 3-1: config 0 descriptor?? [ 1859.518025][T21988] usb 3-1: USB disconnect, device number 77 [ 1859.619544][ T709] netlink: 152 bytes leftover after parsing attributes in process `syz.9.8474'. [ 1859.624800][ T708] netlink: 152 bytes leftover after parsing attributes in process `syz.9.8474'. [ 1859.816125][ T25] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1859.975989][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 1859.976909][ T25] usb 5-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 1859.978249][ T25] usb 5-1: config 0 has an invalid interface number: 239 but max is 0 [ 1859.978281][ T25] usb 5-1: config 0 has an invalid descriptor of length 108, skipping remainder of the config [ 1859.978303][ T25] usb 5-1: config 0 has no interface number 0 [ 1859.978347][ T25] usb 5-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 1859.978375][ T25] usb 5-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1859.978404][ T25] usb 5-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 1859.978433][ T25] usb 5-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024 [ 1859.978461][ T25] usb 5-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024 [ 1859.978485][ T25] usb 5-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 1859.978510][ T25] usb 5-1: config 0 interface 239 altsetting 4 endpoint 0x85 has an invalid bInterval 107, changing to 10 [ 1859.978535][ T25] usb 5-1: config 0 interface 239 altsetting 4 endpoint 0x85 has invalid maxpacket 25209, setting to 1024 [ 1859.978561][ T25] usb 5-1: config 0 interface 239 has no altsetting 0 [ 1859.982678][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1859.982709][ T25] usb 5-1: Product: syz [ 1859.982727][ T25] usb 5-1: Manufacturer: syz [ 1859.982744][ T25] usb 5-1: SerialNumber: syz [ 1859.986585][ T25] usb 5-1: config 0 descriptor?? [ 1860.062507][ T707] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1860.062788][ T707] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1860.455174][ T722] netlink: 'syz.2.8477': attribute type 4 has an invalid length. [ 1860.529570][ T717] netlink: 'syz.2.8477': attribute type 4 has an invalid length. [ 1860.606282][ T5830] usb 8-1: new high-speed USB device number 126 using dummy_hcd [ 1860.656819][T15156] usb 5-1: USB disconnect, device number 6 [ 1860.673181][T27091] Bluetooth: hci4: BCM: Reset failed (-71) [ 1860.756430][ T5830] usb 8-1: Using ep0 maxpacket: 32 [ 1860.759644][ T5830] usb 8-1: New USB device found, idVendor=17cc, idProduct=1021, bcdDevice= 0.40 [ 1860.761936][ T5830] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1860.761966][ T5830] usb 8-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1860.765379][ T5830] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1860.765410][ T5830] usb 8-1: Product: syz [ 1860.765427][ T5830] usb 8-1: Manufacturer: syz [ 1860.765445][ T5830] usb 8-1: SerialNumber: syz [ 1860.934275][ T728] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8479'. [ 1861.121757][ T719] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8478'. [ 1861.346920][ T5830] usb 8-1: USB disconnect, device number 126 [ 1861.355234][T24882] udevd[24882]: setting owner of /dev/bus/usb/008/126 to uid=0, gid=0 failed: No such file or directory [ 1861.564240][ T736] netlink: 380 bytes leftover after parsing attributes in process `syz.8.8482'. [ 1861.670119][ T735] vlan0: entered promiscuous mode [ 1861.884975][T19289] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1861.885003][T19289] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1862.103718][ T747] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8485'. [ 1862.236421][ T5830] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1862.387422][ T5830] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1862.388175][ T5830] usb 3-1: config 0 has no interfaces? [ 1862.392857][ T5830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1862.392888][ T5830] usb 3-1: Product: syz [ 1862.392905][ T5830] usb 3-1: Manufacturer: syz [ 1862.392923][ T5830] usb 3-1: SerialNumber: syz [ 1862.411787][ T5830] usb 3-1: config 0 descriptor?? [ 1862.663474][T15156] usb 3-1: USB disconnect, device number 78 [ 1862.766572][ T5830] usb 8-1: new high-speed USB device number 127 using dummy_hcd [ 1862.916706][ T5830] usb 8-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 1862.917999][ T5830] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1863.178706][ T5830] cxacru_cm: 43 callbacks suppressed [ 1863.178843][ T5830] cxacru 8-1:1.0: receive of cm 0x90 failed (-71) [ 1863.201638][ T758] cxacru 8-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 1863.201692][ T758] cxacru 8-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 1863.280943][ T5830] usb 8-1: USB disconnect, device number 127 [ 1863.794858][ T765] syzkaller0: entered promiscuous mode [ 1863.794885][ T765] syzkaller0: entered allmulticast mode [ 1863.930983][ T773] netlink: 48 bytes leftover after parsing attributes in process `syz.7.8495'. [ 1864.177428][ T778] dummy0: entered allmulticast mode [ 1864.177645][ T778] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1864.425633][T21988] usb 9-1: new full-speed USB device number 45 using dummy_hcd [ 1864.492588][ T784] loop4: detected capacity change from 0 to 7 [ 1864.514764][ T784] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 1864.514796][ T784] loop4: partition table partially beyond EOD, truncated [ 1864.515535][ T784] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 1864.530578][T15156] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1864.597702][T21988] usb 9-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 1864.601446][T21988] usb 9-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 1864.601477][T21988] usb 9-1: Product: syz [ 1864.601493][T21988] usb 9-1: Manufacturer: syz [ 1864.601509][T21988] usb 9-1: SerialNumber: syz [ 1864.673870][T21988] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 1864.677542][T15156] usb 3-1: Using ep0 maxpacket: 32 [ 1864.679828][T15156] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1864.713413][T15156] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1864.713441][T15156] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1864.713495][T15156] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1864.783715][T15156] usb 3-1: config 0 descriptor?? [ 1864.875963][T26124] udevd[26124]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 1865.268949][T15156] hid_parser_main: 30 callbacks suppressed [ 1865.268978][T15156] ft260 0003:0403:6030.004C: unknown main item tag 0x0 [ 1865.269019][T15156] ft260 0003:0403:6030.004C: unknown main item tag 0x0 [ 1865.494931][T15156] ft260 0003:0403:6030.004C: chip code: 0000 0000 [ 1865.703340][T15156] ft260 0003:0403:6030.004C: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 1866.143659][ T780] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1866.352582][T15156] ft260 0003:0403:6030.004C: failed to retrieve status: -71, no wakeup [ 1866.353160][T15156] ft260 0003:0403:6030.004C: failed to retrieve status: -71 [ 1866.355293][T15156] ft260 0003:0403:6030.004C: failed to reset I2C controller: -71 [ 1866.392643][ T805] lo: entered promiscuous mode [ 1866.392972][ T805] tunl0: entered promiscuous mode [ 1866.393209][ T805] gre0: entered promiscuous mode [ 1866.393400][ T805] gretap0: entered promiscuous mode [ 1866.393575][ T805] erspan0: entered promiscuous mode [ 1866.393770][ T805] ip_vti0: entered promiscuous mode [ 1866.394093][ T805] ip6_vti0: entered promiscuous mode [ 1866.394262][ T805] sit0: entered promiscuous mode [ 1866.394420][ T805] ip6tnl0: entered promiscuous mode [ 1866.394574][ T805] ip6gre0: entered promiscuous mode [ 1866.394706][ T805] syz_tun: entered promiscuous mode [ 1866.458625][ T805] bridge0: entered promiscuous mode [ 1866.458882][ T805] vcan0: entered promiscuous mode [ 1866.479976][ T805] bond0: entered promiscuous mode [ 1866.484094][ T805] team0: entered promiscuous mode [ 1866.484365][ T805] dummy0: left allmulticast mode [ 1866.484572][ T805] nlmon0: entered promiscuous mode [ 1866.484785][ T805] batadv0: entered promiscuous mode [ 1866.546237][ T805] vxcan0: entered promiscuous mode [ 1866.546509][ T805] vxcan1: entered promiscuous mode [ 1866.546731][ T805] veth0: entered promiscuous mode [ 1866.546956][ T805] veth1: entered promiscuous mode [ 1866.547149][ T805] wg0: entered promiscuous mode [ 1866.547375][ T805] wg1: entered promiscuous mode [ 1866.547391][ T805] wg1: left allmulticast mode [ 1866.547596][ T805] wg2: entered promiscuous mode [ 1866.547843][ T805] veth0_to_bridge: entered promiscuous mode [ 1866.548070][ T805] bridge_slave_0: entered promiscuous mode [ 1866.548268][ T805] veth1_to_bridge: entered promiscuous mode [ 1866.548495][ T805] bridge_slave_1: entered promiscuous mode [ 1866.548685][ T805] veth0_to_bond: entered promiscuous mode [ 1866.548878][ T805] bond_slave_0: entered promiscuous mode [ 1866.549095][ T805] veth1_to_bond: entered promiscuous mode [ 1866.549285][ T805] bond_slave_1: entered promiscuous mode [ 1866.549498][ T805] veth0_to_team: entered promiscuous mode [ 1866.549684][ T805] team_slave_0: entered promiscuous mode [ 1866.549877][ T805] veth1_to_team: entered promiscuous mode [ 1866.550095][ T805] team_slave_1: entered promiscuous mode [ 1866.550285][ T805] veth0_to_batadv: entered promiscuous mode [ 1866.550516][ T805] batadv_slave_0: entered promiscuous mode [ 1866.550707][ T805] xfrm0: entered promiscuous mode [ 1866.550933][ T805] veth0_to_hsr: entered promiscuous mode [ 1866.551259][ T805] veth1_to_hsr: entered promiscuous mode [ 1866.551566][ T805] hsr0: entered promiscuous mode [ 1866.551724][ T805] veth1_virt_wifi: entered promiscuous mode [ 1866.551907][ T805] veth0_virt_wifi: entered promiscuous mode [ 1866.560194][ T804] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8503'. [ 1866.616513][ T805] virt_wifi0: entered promiscuous mode [ 1866.618019][ T805] ªªªªªª: entered promiscuous mode [ 1866.618926][ T805] vlan1: entered promiscuous mode [ 1866.619789][ T805] macvlan0: entered promiscuous mode [ 1866.620058][ T805] macvlan1: entered promiscuous mode [ 1866.620221][ T805] ipvlan0: entered promiscuous mode [ 1866.620395][ T805] ipvlan1: entered promiscuous mode [ 1866.688001][ T805] macvtap0: entered promiscuous mode [ 1866.691458][ T805] macsec0: entered promiscuous mode [ 1866.691972][ T805] geneve0: entered promiscuous mode [ 1866.692452][ T805] geneve1: entered promiscuous mode [ 1866.695071][ T805] netdevsim netdevsim9 netdevsim1: entered promiscuous mode [ 1866.695449][ T805] netdevsim netdevsim9 netdevsim2: entered promiscuous mode [ 1866.718767][ T805] netdevsim netdevsim9 netdevsim3: entered promiscuous mode [ 1866.719323][ T805] mac80211_hwsim hwsim85 wlan0: entered promiscuous mode [ 1866.719804][ T805] ip6tnl1: entered promiscuous mode [ 1866.726741][ T805] mac80211_hwsim hwsim94 wlan1: entered promiscuous mode [ 1866.760223][T15156] usb 3-1: USB disconnect, device number 79 [ 1866.862837][T21988] vp7045: USB control message 'out' went wrong. [ 1866.862858][T21988] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1866.862901][T21988] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 1866.981309][ T805] bond1: entered promiscuous mode [ 1866.981334][ T805] geneve2: entered promiscuous mode [ 1866.986232][ T805] vlan0: entered promiscuous mode [ 1867.047961][T31816] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1867.048029][T31816] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1867.048085][T31816] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1867.048125][T31816] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1867.106081][ T5831] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1867.260044][ T5831] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1867.263722][ T5831] usb 5-1: config 0 has no interfaces? [ 1867.280871][ T5831] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1867.280958][ T5831] usb 5-1: Product: syz [ 1867.280999][ T5831] usb 5-1: Manufacturer: syz [ 1867.281041][ T5831] usb 5-1: SerialNumber: syz [ 1867.315695][ T5831] usb 5-1: config 0 descriptor?? [ 1867.394930][ T5696] usb 9-1: USB disconnect, device number 45 [ 1867.484315][ T813] netlink: 140 bytes leftover after parsing attributes in process `syz.9.8507'. [ 1867.612812][ T5824] usb 5-1: USB disconnect, device number 7 [ 1867.767106][T21988] usb 3-1: new full-speed USB device number 80 using dummy_hcd [ 1867.921631][T21988] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1867.922412][T21988] usb 3-1: not running at top speed; connect to a high speed hub [ 1867.922452][T21988] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 1867.924227][T21988] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 1867.961595][ T823] batadv0: entered promiscuous mode [ 1867.962159][ T823] vlan2: entered promiscuous mode [ 1867.983707][T21988] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1867.983740][T21988] usb 3-1: Product: syz [ 1867.983757][T21988] usb 3-1: Manufacturer: syz [ 1867.983774][T21988] usb 3-1: SerialNumber: syz [ 1868.012298][ T816] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1868.242495][T21988] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1868.242556][T21988] usb 3-1: MIDIStreaming interface descriptor not found [ 1868.346656][T21988] usb 3-1: USB disconnect, device number 80 [ 1868.477929][T26123] udevd[26123]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1868.873613][ T833] syzkaller0: entered promiscuous mode [ 1868.874190][ T833] syzkaller0: entered allmulticast mode [ 1869.834994][ T857] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8522'. [ 1870.116894][T21988] usb 10-1: new high-speed USB device number 55 using dummy_hcd [ 1870.277901][T21988] usb 10-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1870.278739][T21988] usb 10-1: config 0 has no interfaces? [ 1870.281743][T21988] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1870.281775][T21988] usb 10-1: Product: syz [ 1870.281794][T21988] usb 10-1: Manufacturer: syz [ 1870.281811][T21988] usb 10-1: SerialNumber: syz [ 1870.332791][T21988] usb 10-1: config 0 descriptor?? [ 1870.565406][ T5831] usb 10-1: USB disconnect, device number 55 [ 1870.975984][T21988] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 1871.141995][T21988] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1871.142060][T21988] usb 9-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40 [ 1871.143183][T21988] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 36, changing to 7 [ 1871.178058][T21988] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1871.178080][T21988] usb 9-1: Product: syz [ 1871.178092][T21988] usb 9-1: Manufacturer: syz [ 1871.178104][T21988] usb 9-1: SerialNumber: syz [ 1871.385537][ T880] netlink: 44 bytes leftover after parsing attributes in process `syz.9.8531'. [ 1871.385586][ T880] netlink: 44 bytes leftover after parsing attributes in process `syz.9.8531'. [ 1871.385604][ T880] netlink: 44 bytes leftover after parsing attributes in process `syz.9.8531'. [ 1871.463781][T21988] usb 9-1: 1:1 : unsupported format bits 0x2004 [ 1871.463817][T21988] usb 9-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 1871.487654][T21988] usb 9-1: unit 2 not found! [ 1871.487687][T21988] usb 9-1: unit 0 not found! [ 1871.632218][T21988] usb 9-1: USB disconnect, device number 46 [ 1871.724797][ T882] syzkaller0: entered promiscuous mode [ 1871.724822][ T882] syzkaller0: entered allmulticast mode [ 1871.783547][ T882] tc mirred to Houston: device batadv_slave_0 is down [ 1871.807349][T29193] udevd[29193]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1872.415997][T21988] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1872.590019][T21988] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1872.591100][T21988] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1872.591120][T21988] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1872.591985][T21988] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1872.592006][T21988] usb 3-1: SerialNumber: syz [ 1872.858171][T21988] usb 3-1: 0:2 : does not exist [ 1872.965155][ T898] syzkaller0: entered promiscuous mode [ 1872.965185][ T898] syzkaller0: entered allmulticast mode [ 1873.112418][T21988] usb 3-1: USB disconnect, device number 81 [ 1873.252379][T26124] udevd[26124]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1873.781393][ T920] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8541'. [ 1874.147213][ T5831] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1874.303784][ T5831] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1874.304533][ T5831] usb 3-1: config 0 has no interfaces? [ 1874.326387][ T5831] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1874.326420][ T5831] usb 3-1: Product: syz [ 1874.326437][ T5831] usb 3-1: Manufacturer: syz [ 1874.326455][ T5831] usb 3-1: SerialNumber: syz [ 1874.333389][ T5831] usb 3-1: config 0 descriptor?? [ 1874.564353][ T5831] usb 3-1: USB disconnect, device number 82 [ 1875.465997][T21988] usb 3-1: new full-speed USB device number 83 using dummy_hcd [ 1875.632377][T21988] usb 3-1: not running at top speed; connect to a high speed hub [ 1875.632407][T21988] usb 3-1: New USB device found, idVendor=041e, idProduct=401d, bcdDevice=c8.6b [ 1875.633740][T21988] usb 3-1: config 2 has an invalid interface number: 195 but max is 0 [ 1875.633769][T21988] usb 3-1: config 2 has no interface number 0 [ 1875.633800][T21988] usb 3-1: config 2 interface 195 has no altsetting 0 [ 1875.678963][T21988] usb 3-1: string descriptor 0 read error: -22 [ 1875.679109][T21988] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1875.728008][T21988] gspca_main: spca505-2.14.0 probing 041e:401d [ 1876.125475][T21988] gspca_spca505: reg write: error -71 [ 1876.125588][T21988] spca505 3-1:2.195: probe with driver spca505 failed with error -5 [ 1876.157854][T21988] usb 3-1: USB disconnect, device number 83 [ 1876.504977][ T967] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 1876.505006][ T967] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1876.806707][ T969] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8554'. [ 1876.886435][ T970] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8554'. [ 1876.937153][ T970] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8554'. [ 1877.365140][ T976] syzkaller0: entered promiscuous mode [ 1877.365538][ T976] syzkaller0: entered allmulticast mode [ 1877.390717][ T986] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8559'. [ 1877.707921][ T988] Sensor A: ================= START STATUS ================= [ 1877.753317][ T988] Sensor A: Test Pattern: 75% Colorbar [ 1877.753702][ T988] Sensor A: Show Information: All [ 1877.845028][ T988] Sensor A: Vertical Flip: true [ 1877.845058][ T988] Sensor A: Horizontal Flip: false [ 1877.866441][ T988] Sensor A: Brightness: 128 [ 1877.866480][ T988] Sensor A: Contrast: 128 [ 1877.866496][ T988] Sensor A: Hue: 0 [ 1877.866511][ T988] Sensor A: Saturation: 128 [ 1877.866526][ T988] Sensor A: Pixel Rate: 160000000 [ 1877.913197][ T988] Sensor A: Horizontal Blanking: 800 [ 1877.978827][ T988] Sensor A: Vertical Blanking: 3223 [ 1877.978857][ T988] Sensor A: ================== END STATUS ================== [ 1879.456364][T21988] usb 10-1: new high-speed USB device number 56 using dummy_hcd [ 1879.607075][T21988] usb 10-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1879.610231][T21988] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1879.637498][T21988] usb 10-1: config 0 descriptor?? [ 1879.651605][T21988] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1880.006058][ T5696] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1880.125586][T21988] gspca_stv06xx: I2C: Read error writing address: -71 [ 1880.145290][T21988] usb 10-1: USB disconnect, device number 56 [ 1880.156754][ T5696] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1880.157466][ T5696] usb 5-1: config 0 has no interfaces? [ 1880.157502][ T5696] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1880.209404][ T5696] usb 5-1: config 0 descriptor?? [ 1880.474654][T21988] usb 5-1: USB disconnect, device number 8 [ 1880.904354][ T1038] syzkaller0: entered promiscuous mode [ 1880.904382][ T1038] syzkaller0: entered allmulticast mode [ 1881.069330][ T1044] Sensor A: ================= START STATUS ================= [ 1881.069347][ T1044] Sensor A: Test Pattern: 75% Colorbar [ 1881.069390][ T1044] Sensor A: Show Information: All [ 1881.069414][ T1044] Sensor A: Vertical Flip: true [ 1881.069435][ T1044] Sensor A: Horizontal Flip: false [ 1881.069455][ T1044] Sensor A: Brightness: 128 [ 1881.070059][ T1044] Sensor A: Contrast: 128 [ 1881.070086][ T1044] Sensor A: Hue: 0 [ 1881.070109][ T1044] Sensor A: Saturation: 128 [ 1881.070132][ T1044] Sensor A: Pixel Rate: 160000000 [ 1881.070157][ T1044] Sensor A: Horizontal Blanking: 800 [ 1881.070179][ T1044] Sensor A: Vertical Blanking: 3223 [ 1881.070203][ T1044] Sensor A: ================== END STATUS ================== [ 1881.895566][ T1050] netlink: 'syz.7.8578': attribute type 1 has an invalid length. [ 1882.123789][ T1064] netlink: 'syz.7.8578': attribute type 10 has an invalid length. [ 1882.123817][ T1064] netlink: 40 bytes leftover after parsing attributes in process `syz.7.8578'. [ 1882.219410][ T1050] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1882.496904][ T1055] dummy0: left promiscuous mode [ 1882.496929][ T1055] dummy0: left allmulticast mode [ 1882.524102][ T1055] bond6: (slave dummy0): Enslaving as a backup interface with an up link [ 1882.541313][ T1064] dummy0: entered promiscuous mode [ 1882.560912][ T1064] bond6: (slave dummy0): Releasing backup interface [ 1883.146153][T21988] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1883.301353][T21988] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1883.301413][T21988] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1883.302415][T21988] usb 5-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config [ 1883.302440][T21988] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1883.304701][T21988] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1883.304730][T21988] usb 5-1: Product: syz [ 1883.304747][T21988] usb 5-1: Manufacturer: syz [ 1883.304763][T21988] usb 5-1: SerialNumber: syz [ 1883.381185][T21988] usb 5-1: 0:1 : does not exist [ 1883.381305][T21988] usb 5-1: unit 32 not found! [ 1883.411556][ T1090] FAULT_INJECTION: forcing a failure. [ 1883.411556][ T1090] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1883.411598][ T1090] CPU: 1 UID: 0 PID: 1090 Comm: syz.9.8587 Tainted: G L syzkaller #0 PREEMPT(full) [ 1883.411630][ T1090] Tainted: [L]=SOFTLOCKUP [ 1883.411643][ T1090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1883.411659][ T1090] Call Trace: [ 1883.411669][ T1090] [ 1883.411680][ T1090] dump_stack_lvl+0xe8/0x150 [ 1883.411723][ T1090] should_fail_ex+0x410/0x560 [ 1883.411757][ T1090] _copy_from_user+0x2d/0xb0 [ 1883.411789][ T1090] input_event_from_user+0xfe/0x290 [ 1883.411818][ T1090] ? __pfx_input_event_from_user+0x10/0x10 [ 1883.411879][ T1090] evdev_write+0x2c7/0x4c0 [ 1883.411903][ T1090] ? __lock_acquire+0x747/0x2de0 [ 1883.411941][ T1090] ? __pfx_evdev_write+0x10/0x10 [ 1883.411966][ T1090] ? bpf_lsm_file_permission+0x9/0x20 [ 1883.411999][ T1090] ? security_file_permission+0x75/0x260 [ 1883.412039][ T1090] ? rw_verify_area+0x203/0x4c0 [ 1883.412072][ T1090] ? __pfx_evdev_write+0x10/0x10 [ 1883.412090][ T1090] vfs_write+0x296/0xba0 [ 1883.412128][ T1090] ? __pfx_vfs_write+0x10/0x10 [ 1883.412159][ T1090] ? __fget_files+0x2a/0x420 [ 1883.412189][ T1090] ? __fget_files+0x2a/0x420 [ 1883.412215][ T1090] ? __fget_files+0x3a2/0x420 [ 1883.412244][ T1090] ? __fget_files+0x2a/0x420 [ 1883.412279][ T1090] ksys_write+0x150/0x270 [ 1883.412311][ T1090] ? __pfx_ksys_write+0x10/0x10 [ 1883.412350][ T1090] __do_fast_syscall_32+0x27a/0x6a0 [ 1883.412376][ T1090] ? do_fast_syscall_32+0x33/0x70 [ 1883.412399][ T1090] ? asm_int80_emulation+0x1a/0x20 [ 1883.412419][ T1090] ? do_int80_emulation+0x299/0x500 [ 1883.412441][ T1090] ? trace_irq_disable+0x3b/0x140 [ 1883.412467][ T1090] do_fast_syscall_32+0x33/0x70 [ 1883.412490][ T1090] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1883.412514][ T1090] RIP: 0023:0xf7f730ec [ 1883.412534][ T1090] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1883.412551][ T1090] RSP: 002b:00000000f543650c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 1883.412573][ T1090] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 1883.412587][ T1090] RDX: 0000000000000918 RSI: 0000000000000000 RDI: 0000000000000000 [ 1883.412600][ T1090] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1883.412611][ T1090] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1883.412623][ T1090] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1883.412655][ T1090] [ 1883.521091][ T5696] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1883.688178][ T5696] usb 3-1: Using ep0 maxpacket: 32 [ 1883.692863][ T5696] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1883.712657][ T5696] usb 3-1: config index 0 descriptor too short (expected 19, got 18) [ 1883.730330][ T5696] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1883.730360][ T5696] usb 3-1: Product: syz [ 1883.730378][ T5696] usb 3-1: Manufacturer: syz [ 1883.730398][ T5696] usb 3-1: SerialNumber: syz [ 1883.768864][ T5696] usb 3-1: config 0 descriptor?? [ 1883.789345][ T5696] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 1883.789402][ T5696] dvb-usb: bulk message failed: -22 (2/0) [ 1883.813311][ T5696] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1883.814164][ T5696] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 1883.814224][ T5696] usb 3-1: media controller created [ 1883.877902][ T5696] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1883.944537][ T5696] usb 3-1: selecting invalid altsetting 7 [ 1883.944564][ T5696] cxusb: set interface failed [ 1883.944578][ T5696] dvb-usb: bulk message failed: -22 (1/0) [ 1883.983418][ T1088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1883.984087][ T1088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1884.121271][ T5696] DVB: Unable to find symbol lgdt330x_attach() [ 1884.121292][ T5696] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 1884.282747][T21988] usb 5-1: USB disconnect, device number 9 [ 1884.338125][ T5696] rc_core: IR keymap rc-dvico-portable not found [ 1884.338145][ T5696] Registered IR keymap rc-empty [ 1884.339500][ T5696] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 1884.351406][ T5696] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input187 [ 1884.385554][ T5696] dvb-usb: schedule remote query interval to 100 msecs. [ 1884.385580][ T5696] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 1884.430383][ T5696] usb 3-1: USB disconnect, device number 84 [ 1884.452418][T25772] udevd[25772]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1884.587995][ T5696] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 1885.057368][ T5696] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1885.207174][ T5696] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1885.208757][ T5696] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1885.211113][ T5696] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1885.211142][ T5696] usb 3-1: Product: syz [ 1885.211158][ T5696] usb 3-1: Manufacturer: syz [ 1885.211173][ T5696] usb 3-1: SerialNumber: syz [ 1885.865962][ T5831] usb 10-1: new high-speed USB device number 57 using dummy_hcd [ 1885.946971][ T1112] Sensor A: ================= START STATUS ================= [ 1885.946996][ T1112] Sensor A: Test Pattern: 75% Colorbar [ 1885.947766][ T1112] Sensor A: Show Information: All [ 1885.948063][ T1112] Sensor A: Vertical Flip: true [ 1885.948107][ T1112] Sensor A: Horizontal Flip: false [ 1885.948128][ T1112] Sensor A: Brightness: 128 [ 1885.948308][ T1112] Sensor A: Contrast: 128 [ 1885.948331][ T1112] Sensor A: Hue: 0 [ 1885.948364][ T1112] Sensor A: Saturation: 128 [ 1885.948484][ T1112] Sensor A: Pixel Rate: 160000000 [ 1885.948511][ T1112] Sensor A: Horizontal Blanking: 800 [ 1885.948554][ T1112] Sensor A: Vertical Blanking: 3223 [ 1885.948581][ T1112] Sensor A: ================== END STATUS ================== [ 1886.036269][ T5831] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1886.036355][ T5831] usb 10-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 1886.089532][ T5831] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 1886.089731][ T5831] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 1886.122893][ T5831] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1886.122915][ T5831] usb 10-1: Product: syz [ 1886.122926][ T5831] usb 10-1: Manufacturer: syz [ 1886.122988][ T5831] usb 10-1: SerialNumber: syz [ 1886.326575][ T5696] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1886.326637][ T5696] cdc_ncm 3-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 1886.326653][ T5696] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 1886.398386][ T1106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1886.400933][ T1106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1886.430264][ T1106] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8593'. [ 1886.558349][ T1101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1886.574807][ T1101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1886.716039][ T5696] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1886.762451][ T5696] usb 3-1: USB disconnect, device number 85 [ 1886.770795][ T5696] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 1886.969781][ T5831] usb 10-1: unit 4: unexpected type 0x03 [ 1887.140250][ T5831] usb 10-1: USB disconnect, device number 57 [ 1887.261762][T26124] udevd[26124]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1887.566685][ T1125] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8598'. [ 1888.798689][T21988] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1888.876419][ T5831] usb 10-1: new high-speed USB device number 58 using dummy_hcd [ 1888.946819][T21988] usb 3-1: Using ep0 maxpacket: 8 [ 1888.950043][T21988] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1888.950111][T21988] usb 3-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=f7.67 [ 1888.950140][T21988] usb 3-1: no configurations [ 1888.950150][T21988] usb 3-1: can't read configurations, error -22 [ 1889.007477][ T5831] usb 10-1: device descriptor read/64, error -71 [ 1889.086020][T21988] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1889.237133][T21988] usb 3-1: Using ep0 maxpacket: 8 [ 1889.241370][T21988] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1889.241426][T21988] usb 3-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=f7.67 [ 1889.241466][T21988] usb 3-1: no configurations [ 1889.241482][T21988] usb 3-1: can't read configurations, error -22 [ 1889.243300][T21988] usb usb3-port1: attempt power cycle [ 1889.245958][ T5831] usb 10-1: new high-speed USB device number 59 using dummy_hcd [ 1889.388260][ T5831] usb 10-1: device descriptor read/64, error -71 [ 1889.499294][ T5831] usb usb10-port1: attempt power cycle [ 1889.576139][T21988] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1889.620505][T21988] usb 3-1: Using ep0 maxpacket: 8 [ 1889.760899][T21988] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1889.760940][T21988] usb 3-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=f7.67 [ 1889.760968][T21988] usb 3-1: no configurations [ 1889.760978][T21988] usb 3-1: can't read configurations, error -22 [ 1889.848546][ T5831] usb 10-1: new high-speed USB device number 60 using dummy_hcd [ 1889.867837][ T5831] usb 10-1: device descriptor read/8, error -71 [ 1889.896655][T21988] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1889.917060][T21988] usb 3-1: Using ep0 maxpacket: 8 [ 1889.920334][T21988] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1889.920388][T21988] usb 3-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=f7.67 [ 1889.920428][T21988] usb 3-1: no configurations [ 1889.920441][T21988] usb 3-1: can't read configurations, error -22 [ 1889.920759][T21988] usb usb3-port1: unable to enumerate USB device [ 1889.976495][ T32] INFO: task kworker/1:7:21985 blocked for more than 143 seconds. [ 1889.976518][ T32] Tainted: G L syzkaller #0 [ 1889.976528][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1889.976536][ T32] task:kworker/1:7 state:D stack:21424 pid:21985 tgid:21985 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1889.976583][ T32] Workqueue: usb_hub_wq hub_event [ 1889.976701][ T32] Call Trace: [ 1889.976708][ T32] [ 1889.976719][ T32] __schedule+0x17db/0x58f0 [ 1889.976762][ T32] ? do_raw_spin_lock+0x12b/0x2f0 [ 1889.976799][ T32] ? __pfx___schedule+0x10/0x10 [ 1889.976832][ T32] ? schedule+0x90/0x2b0 [ 1889.976860][ T32] schedule+0x164/0x2b0 [ 1889.976888][ T32] schedule_preempt_disabled+0x13/0x30 [ 1889.976903][ T32] __mutex_lock+0x7c1/0x1550 [ 1889.976925][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1889.976946][ T32] ? hub_event+0x20c9/0x4d30 [ 1889.976967][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1889.976999][ T32] hub_event+0x20c9/0x4d30 [ 1889.977018][ T32] ? do_raw_spin_unlock+0xf5/0x200 [ 1889.977051][ T32] ? register_lock_class+0x31/0x2e0 [ 1889.977092][ T32] ? __pfx_hub_event+0x10/0x10 [ 1889.977117][ T32] ? rcu_is_watching+0x16/0xb0 [ 1889.977139][ T32] ? process_scheduled_works+0x97a/0x1630 [ 1889.977163][ T32] process_scheduled_works+0xc3d/0x1630 [ 1889.977208][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 1889.977235][ T32] ? assign_work+0x3cf/0x5d0 [ 1889.977261][ T32] worker_thread+0xa47/0xfb0 [ 1889.977307][ T32] kthread+0x38b/0x480 [ 1889.977324][ T32] ? __pfx_worker_thread+0x10/0x10 [ 1889.977346][ T32] ? __pfx_kthread+0x10/0x10 [ 1889.977363][ T32] ret_from_fork+0x514/0xb70 [ 1889.977383][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1889.977410][ T32] ? __switch_to+0xc89/0x1420 [ 1889.977436][ T32] ? __pfx_kthread+0x10/0x10 [ 1889.977453][ T32] ret_from_fork_asm+0x1a/0x30 [ 1889.977492][ T32] [ 1889.977554][ T32] [ 1889.977554][ T32] Showing all locks held in the system: [ 1889.977563][ T32] locks held by kworker/1:0/25: 3, on CPU#1: [ 1889.977669][ T32] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1889.977761][ T32] #1: ffffc900001f7c40 (xfrm_state_gc_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1889.977811][ T32] #2: ffffffff8ed62c68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 1889.977857][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 1889.977907][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1889.978001][ T32] locks held by udevd/4982: 1, last CPU#0: [ 1889.978014][ T32] #0: ffffffff8f4f0b78 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_check_open_permission+0x1d3/0x470 [ 1889.978057][ T32] locks held by getty/5371: 2, on CPU#0: [ 1889.978069][ T32] #0: ffff88803622e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1889.978117][ T32] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1889.978167][ T32] locks held by kworker/0:11/5830: 5, on CPU#0: [ 1889.978179][ T32] #0: ffff8880226f2940 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1889.978224][ T32] #1: ffffc9000517fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1889.978269][ T32] #2: ffff888029f151d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 1889.978311][ T32] #3: ffff88802a9761d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xfc/0x9a0 [ 1889.978347][ T32] #4: ffff888051b361a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 1889.978428][ T32] locks held by kworker/0:12/5831: 5, last CPU#0: [ 1889.978440][ T32] #0: ffff8880226f2940 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1889.978485][ T32] #1: ffffc9000518fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1889.978529][ T32] #2: ffff88802a0081d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 1889.978570][ T32] #3: ffff88802a00d568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x20a1/0x4d30 [ 1889.978610][ T32] #4: ffff888029edb360 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x20c9/0x4d30 [ 1889.978661][ T32] locks held by kworker/1:7/21985: 5, on CPU#1: [ 1889.978673][ T32] #0: ffff8880226f2940 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1889.978717][ T32] #1: ffffc90004437c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1889.978762][ T32] #2: ffff88802b4181d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 ** replaying previous printk message ** [ 1889.978762][ T32] #2: ffff88802b4181d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 1889.978809][ T32] #3: ffff88802b50b568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x20a1/0x4d30 [ 1889.978850][ T32] #4: ffff88802b44fa60 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x20c9/0x4d30 [ 1889.978897][ T32] locks held by kworker/1:15/26464: 5, on CPU#1: [ 1889.978941][ T32] #0: ffff8880226f2940 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1889.997781][ T32] #1: ffffc90004847c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1889.998013][ T32] #2: ffff88802b5101d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 1889.998162][ T32] #3: ffff88802b515568 (&port_dev->status_lock){+.+.}-{4:4} [ 1890.148717][ T5831] usb 10-1: new high-speed USB device number 61 using dummy_hcd [ 1890.257454][ T5831] usb 10-1: device descriptor read/8, error -71 [ 1890.360048][ T32] , at: hub_event+0x20a1/0x4d30 [ 1890.360153][ T32] #4: ffff88802b44fa60 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x20c9/0x4d30 [ 1890.360353][ T32] locks held by syz-executor/29787: 4, last CPU#0: [ 1890.360397][ T32] #0: ffffffff8ee36330 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10f/0x480 [ 1890.360565][ T32] #1: ffff888022fec378 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 1890.360734][ T32] #2: ffff888036de1d38 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 1890.367246][ T5831] usb usb10-port1: unable to enumerate USB device [ 1890.372051][ T32] #3: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: raw_spin_rq_lock_nested+0xb2/0x160 [ 1890.394345][ T32] locks held by kworker/u8:11/31819: 4, last CPU#0: [ 1890.394397][ T32] #0: ffff888036a74140 ((wq_completion)krds_cp_wq#5/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1890.394564][ T32] #1: ffffc9000f397c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1890.394732][ T32] #2: ffff8880259f3980 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1890.395042][ T32] #3: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __inet_dev_addr_type+0x159/0x560 [ 1890.395353][ T32] locks held by kworker/u8:18/32196: 5, last CPU#0: [ 1890.403811][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1890.418324][ T32] #1: ffffc90012917c40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1890.418507][ T32] #2: ffffffff8ebe98f0 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_disable+0x12/0x20 [ 1890.418713][ T32] #3: ffffffff8ee388a0 (jump_label_mutex){+.+.}-{4:4}, at: static_key_disable_cpuslocked+0x8d/0x1a0 [ 1890.418859][ T32] #4: ffffffff8ebff6a0 (text_mutex){+.+.}-{4:4}, at: arch_jump_label_transform_apply+0x17/0x30 [ 1890.419051][ T32] locks held by cxacru/758: 1, on CPU#0: [ 1890.419094][ T32] #0: ffffffff8ebf7d08 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xfc/0x2c0 [ 1890.419180][ T32] locks held by syz.2.8606/1148: 4, last CPU#0: [ 1890.419196][ T32] #0: ffff88807c172460 (sb_writers#5){.+.+}-{0:0}, at: vfs_fallocate+0x5e0/0x7e0 [ 1890.419262][ T32] #1: ffff888034373ed8 (&sb->s_type->i_mutex_key#15){++++}-{4:4}, at: shmem_fallocate+0x17c/0xf10 [ 1890.419331][ T32] #2: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: get_mem_cgroup_from_mm+0x38/0x290 [ 1890.419429][ T32] #3: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: percpu_ref_tryget+0x15/0x180 [ 1890.419492][ T32] locks held by syz.9.8608/1150: 3, last CPU#0: [ 1890.419510][ T32] #0: ffff888050728460 (sb_writers#5){.+.+}-{0:0}, at: vfs_fallocate+0x5e0/0x7e0 [ 1890.419568][ T32] #1: ffff8880556026b8 (&sb->s_type->i_mutex_key#15){++++}-{4:4}, at: shmem_fallocate+0x17c/0xf10 [ 1890.439836][ T32] #2: ffffffff8ee900e0 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x149/0x600 [ 1890.439889][ T32] locks held by syz.7.8609/1158: 2, last CPU#0: [ 1890.439901][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: xfrm_state_find+0x1f2/0x5f90 [ 1890.439950][ T32] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: km_query+0x2e/0x210 [ 1890.439993][ T32] locks held by syz.4.8610/1161: 1, last CPU#0: [ 1890.440005][ T32] #0: ffff8880797a27f0 (&u->iolock){+.+.}-{4:4}, at: __unix_dgram_recvmsg+0x1e3/0xd70 [ 1890.440190][ T32] [ 1890.440195][ T32] ============================================= [ 1890.440195][ T32] [ 1890.440204][ T32] NMI backtrace for cpu 0 [ 1890.440217][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1890.440238][ T32] Tainted: [L]=SOFTLOCKUP [ 1890.440244][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1890.440261][ T32] Call Trace: [ 1890.440269][ T32] [ 1890.440276][ T32] dump_stack_lvl+0xe8/0x150 [ 1890.440302][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 1890.440325][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1890.440354][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1890.440379][ T32] sys_info+0x135/0x170 [ 1890.440399][ T32] watchdog+0xfd7/0x1030 [ 1890.440421][ T32] ? watchdog+0x1c7/0x1030 [ 1890.440441][ T32] kthread+0x38b/0x480 [ 1890.440457][ T32] ? __pfx_watchdog+0x10/0x10 [ 1890.440472][ T32] ? __pfx_kthread+0x10/0x10 [ 1890.440488][ T32] ret_from_fork+0x514/0xb70 [ 1890.440506][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1890.440531][ T32] ? __switch_to+0xc89/0x1420 [ 1890.440555][ T32] ? __pfx_kthread+0x10/0x10 [ 1890.440571][ T32] ret_from_fork_asm+0x1a/0x30 [ 1890.440608][ T32] [ 1890.440614][ T32] Sending NMI from CPU 0 to CPUs 1: [ 1890.440670][ C1] NMI backtrace for cpu 1 [ 1890.440686][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1890.440712][ C1] Tainted: [L]=SOFTLOCKUP [ 1890.440720][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1890.440732][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1890.440764][ C1] Code: 9c 8f 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 91 24 00 fb f4 8c 08 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1890.440781][ C1] RSP: 0000:ffffc900001a7e40 EFLAGS: 00000246 [ 1890.440799][ C1] RAX: 000000000113c6b7 RBX: ffffffff819baed0 RCX: 8000000000000001 [ 1890.440816][ C1] RDX: 0000000000000001 RSI: ffffffff8e475f59 RDI: ffffffff8c6d9a80 [ 1890.440831][ C1] RBP: ffffc900001a7f10 R08: ffff8880b8733a1b R09: 1ffff110170e6743 [ 1890.440848][ C1] R10: dffffc0000000000 R11: ffffed10170e6744 R12: 0000000000000000 [ 1890.440862][ C1] R13: 1ffff11003cd1bb8 R14: 1ffff92000034fd0 R15: dffffc0000000000 [ 1890.440878][ C1] FS: 0000000000000000(0000) GS:ffff888124dd2000(0000) knlGS:0000000000000000 [ 1890.440895][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1890.440909][ C1] CR2: 0000000080020018 CR3: 000000003e9a4000 CR4: 00000000003526f0 [ 1890.440927][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1890.440939][ C1] DR3: 00000000000f010e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1890.440952][ C1] Call Trace: [ 1890.440960][ C1] [ 1890.440968][ C1] default_idle+0x9/0x20 [ 1890.440993][ C1] default_idle_call+0x72/0xb0 [ 1890.441018][ C1] do_idle+0x2e0/0x540 [ 1890.441049][ C1] ? __pfx_do_idle+0x10/0x10 [ 1890.441080][ C1] ? do_idle+0x10/0x540 [ 1890.441111][ C1] cpu_startup_entry+0x43/0x60 [ 1890.441128][ C1] start_secondary+0x101/0x110 [ 1890.441158][ C1] common_startup_64+0x13e/0x157 [ 1890.441192][ C1] [ 1890.464375][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 1891.198765][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1891.209545][ T32] Tainted: [L]=SOFTLOCKUP [ 1891.214947][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1891.225775][ T32] Call Trace: [ 1891.229097][ T32] [ 1891.232047][ T32] vpanic+0x56d/0xa60 [ 1891.236080][ T32] ? __pfx___schedule+0x10/0x10 [ 1891.241045][ T32] ? __pfx_vpanic+0x10/0x10 [ 1891.245586][ T32] panic+0xc5/0xd0 [ 1891.249432][ T32] ? __pfx_panic+0x10/0x10 [ 1891.253925][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 1891.259471][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 1891.264878][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 1891.271103][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 1891.277345][ T32] watchdog+0x1030/0x1030 [ 1891.281712][ T32] ? watchdog+0x1c7/0x1030 [ 1891.286185][ T32] kthread+0x38b/0x480 [ 1891.290328][ T32] ? __pfx_watchdog+0x10/0x10 [ 1891.295018][ T32] ? __pfx_kthread+0x10/0x10 [ 1891.299632][ T32] ret_from_fork+0x514/0xb70 [ 1891.304350][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1891.309522][ T32] ? __switch_to+0xc89/0x1420 [ 1891.314280][ T32] ? __pfx_kthread+0x10/0x10 [ 1891.318893][ T32] ret_from_fork_asm+0x1a/0x30 [ 1891.324407][ T32] [ 1891.328163][ T32] Kernel Offset: disabled [ 1891.332556][ T32] Rebooting in 86400 seconds..