last executing test programs: 21m44.521652036s ago: executing program 3 (id=617): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000300)={r2, 0x8, 0x20, 0x2}, &(0x7f0000000380)=0x18) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000001000ffff25bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="320b05378e5b3befad42a975684d0023080000280012800b0001006970376772650000180002800bb438b453e4928c0000000000000000001fe37f05f3bee0c0dae1f910c99d234a3150c76f6215c07908d6755f5cff160fe02e5b798bb0b55ab8bef19c372f7e06e0fec249a6c137b44e5e144169b63113a3eed29330fabe6bdd8bbc874d8c"], 0x50}, 0x1, 0x0, 0x0, 0x4000080}, 0x5) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000040)={r2, 0x5, 0x4, 0x1}, &(0x7f0000000080)=0x10) r5 = socket(0x400000000010, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) fsopen(&(0x7f0000000c80)='pvfs2\x00', 0x1) ioctl$sock_SIOCETHTOOL(r5, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x11, 0x0, 0x20040001, 0x0, 0x7, 0x0, 0x0, 0xa1}}) 21m44.450521473s ago: executing program 3 (id=619): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x80001) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000500)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3, 0x4, {0xa, 0x4e21, 0xd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}}}, 0x3a) 21m43.432569805s ago: executing program 3 (id=624): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2b, 0x1, 0x1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0xfffffffffffffd64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) 21m43.173076144s ago: executing program 3 (id=625): r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) close(0x3) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r1, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x0, 0x402, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000180)={0x50, 0x0, r2, {0x7, 0x2b, 0x4, 0x19401804, 0x2, 0x7, 0x6, 0xcccb, 0x0, 0x0, 0x1, 0x8001}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x101042, 0x10d) close(r1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r4, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x6, r3, 0x0}]) 21m42.748379155s ago: executing program 3 (id=627): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x304}, "5b4a96a1b4d934c5", "f74e521c61dcbf83afbe670f6cca7db51768dc976e6dd490a3800258c4f7c8b5", "e0c07261", "a5561fa99c955809"}, 0x38) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f00000005c0)="6e2d3c942889", 0x6}], 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x207, &(0x7f0000000040)={0x0, 0x30bd, 0xc000, 0x5, 0x40000183}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x6da0, 0x7721, 0x16, 0x0, 0x0) 21m42.48397237s ago: executing program 3 (id=628): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001800)=@newqdisc={0x860, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x834, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x6, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ed, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x7, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1fb, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x1, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x7fd, 0x1, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x0, 0xe, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x0, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0xfffffffc, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x3, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0xffff6f3c, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0xf, 0x9, 0xffffffff, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0xfffffffe, 0x3, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x4001, 0x2, 0x2, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8c, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0x9, 0x1, 0xb7e, 0x10002, 0x2, 0x7, 0x4, 0x1, 0x2, 0x103ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x90, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0xf, 0xefba, 0x7, 0x3, 0xbe4, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xffe, 0x421, 0x3ff, 0x2, 0xd, 0xfb6, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x0, 0x0, 0xc, 0x7ff, 0x1}, {0x4, 0x1, 0x0, 0xf, 0x0, 0x73}, 0xebd1, 0x5, 0x1480}}]}}]}, 0x860}, 0x1, 0x0, 0x0, 0x48088}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 21m42.151497062s ago: executing program 32 (id=628): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001800)=@newqdisc={0x860, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x834, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x6, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ed, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x7, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1fb, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x1, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x7fd, 0x1, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x0, 0xe, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x0, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0xfffffffc, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x3, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0xffff6f3c, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0xf, 0x9, 0xffffffff, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0xfffffffe, 0x3, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x4001, 0x2, 0x2, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8c, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0x9, 0x1, 0xb7e, 0x10002, 0x2, 0x7, 0x4, 0x1, 0x2, 0x103ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x90, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0xf, 0xefba, 0x7, 0x3, 0xbe4, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xffe, 0x421, 0x3ff, 0x2, 0xd, 0xfb6, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x0, 0x0, 0xc, 0x7ff, 0x1}, {0x4, 0x1, 0x0, 0xf, 0x0, 0x73}, 0xebd1, 0x5, 0x1480}}]}}]}, 0x860}, 0x1, 0x0, 0x0, 0x48088}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 21m6.984227679s ago: executing program 4 (id=776): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x20140, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f00000002c0)={0x0, 0x0, 0x0}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380), 0x404500, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$DVB_DEMUX_DMX_GET_STC(0xffffffffffffffff, 0xc0106f32, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x17) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) syz_clone(0xa38a1500, 0x0, 0x13, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(0xffffffffffffffff, 0x410, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, 0x0) 21m5.758816179s ago: executing program 4 (id=778): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000140001000000000000000000020000ff", @ANYRES32=r3, @ANYBLOB="08000200ac1414aa"], 0x20}}, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r5 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0x0, 0x10}, {0xfff1}}}, 0x24}}, 0x0) 21m5.560359852s ago: executing program 4 (id=780): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r0, 0xd}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r1}, &(0x7f0000000880), &(0x7f00000008c0)}, 0x20) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241) r4 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100ebffffff0000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, &(0x7f0000000c40)={0x84, &(0x7f00000006c0)={0x20, 0xf, 0x1, 'P'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$MEMGETREGIONCOUNT(r3, 0x80044d07, &(0x7f0000000040)) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000180)={{}, "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"}) socket$nl_generic(0x10, 0x3, 0x10) mq_open(&(0x7f0000000140)='^.{*\x00', 0x40, 0x1, &(0x7f0000001180)={0x1, 0x401, 0x200, 0x5}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_emit_ethernet(0x56, &(0x7f00000011c0)={@local, @broadcast, @val={@val={0x88a8, 0x1, 0x1, 0x1}, {0x8100, 0x3, 0x1, 0x1}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x10, 0x200, 0x0, 0x0, {[@generic={0x0, 0x2}]}}}}}}}}, 0x0) 21m2.8524661s ago: executing program 4 (id=789): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0x4}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240448a0}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r6, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) 21m0.022386709s ago: executing program 4 (id=795): socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0xa, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$nl_rdma(0x10, 0x3, 0x14) socket$kcm(0x11, 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x15, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x20, 0x16, 0x107, 0x70bd2e, 0x25dfdbfb, {0x17, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r0}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x404c011}, 0x20008010) 20m59.788719275s ago: executing program 4 (id=797): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x240) pivot_root(&(0x7f0000000000)='./file0/../file0/../file0/../file0/file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') socket$nl_crypto(0x10, 0x3, 0x15) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x30000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1b, 0xd}}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x0, 0x4, 0xfe, 0x100, 0x0, @dev={0xfe, 0x80, '\x00', 0x35}, @mcast2, 0x8000, 0x700, 0x2, 0x2aa1f153}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl1\x00', &(0x7f0000000040)={'ip6tnl0\x00', r3, 0x0, 0x82, 0x64, 0x1ac9ee85, 0x2, @mcast1, @local, 0x0, 0x1, 0xd, 0xa171}}) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE2(r4, &(0x7f0000001000)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x1d, 0x5, 0x57e, 0x306, 0x3, 0xfffffffc, "05010905a10105091901290a150025017501950a8102950175068103c0"}}, 0x135) syz_usb_connect$midi(0x5, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100020000000840390c00f7000102020109021200010108204025fa68f0273cf50c909e4c7609"], 0x0) write$UHID_INPUT2(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="0c000000030021"], 0x9) 20m44.602970818s ago: executing program 33 (id=797): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x240) pivot_root(&(0x7f0000000000)='./file0/../file0/../file0/../file0/file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') socket$nl_crypto(0x10, 0x3, 0x15) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x54, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x30000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1b, 0xd}}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x0, 0x4, 0xfe, 0x100, 0x0, @dev={0xfe, 0x80, '\x00', 0x35}, @mcast2, 0x8000, 0x700, 0x2, 0x2aa1f153}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl1\x00', &(0x7f0000000040)={'ip6tnl0\x00', r3, 0x0, 0x82, 0x64, 0x1ac9ee85, 0x2, @mcast1, @local, 0x0, 0x1, 0xd, 0xa171}}) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE2(r4, &(0x7f0000001000)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x1d, 0x5, 0x57e, 0x306, 0x3, 0xfffffffc, "05010905a10105091901290a150025017501950a8102950175068103c0"}}, 0x135) syz_usb_connect$midi(0x5, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100020000000840390c00f7000102020109021200010108204025fa68f0273cf50c909e4c7609"], 0x0) write$UHID_INPUT2(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="0c000000030021"], 0x9) 19m52.690798246s ago: executing program 0 (id=1035): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xa, 0xffea}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0xfffffff7, 0xb47e, 0xb, 0x20000003, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000440)={0x7ff, r1, 'id1\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0x2, 0xb}, {0xfff1, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x9, 0x7, 0xa, 0x40000003, 0xfffffffc, 0xfffffffd}, [@TCA_NETEM_LOSS={0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000030}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) close(0x3) 19m52.362113502s ago: executing program 0 (id=1038): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x0, 0x34a30b42, 0x0, 0x1000, 0x4008000, 0x1002, 0xfffffffffffffffb, 0x80005, 0xa, 0x6, 0x5, 0x8bda, 0xfffffffffffffefe, 0x4, 0x6], 0x25000, 0x316353}) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) r4 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x4003, 0x2) r5 = socket$inet(0x2b, 0x801, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r5, 0x0, 0x483, &(0x7f0000000100), &(0x7f0000000080)=0x68) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0xe, 0x41414770, 0x9, 0xfffffffc, 0x2000bd30, 0x3, 0xfeedcafe, 0x3, 0x0, 0x0, 0x5}}) 19m52.103020405s ago: executing program 0 (id=1041): openat$ptmx(0xffffffffffffff9c, 0x0, 0x121301, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002100)="de98ee653502c564abeb97fc678bde22efebcf99c2d89952950acc703a3c6268a54c8b1bd1ee165c82980cd315b55a070dc41deeb2d4c1842d936a0bcde5fd7ed6031fdd9cb58ebfe8261528f097f309813b5722c24a1af8e6bc6ddaef7e85d2659690154bc5e6ee73c3fe7176509ad7b30e1098fc9873db91d3c1816825e710374de8d40693578b598922d9c523cfff93a630f121251d17ad40bce021d7fd57945fe2a186618a40b5f3995a9f0ceaa3e22b57e4f68e53fffeb5474fb83afaf5cde6b0aaf5cf0313ede442ddf1df6c280921e43d80dddfd005969272e1719b37fd8f749fcde83f8201826b4cf5b1c1da394568aa7d8833dd11309f46422b0152ede5ab29b17bc1ae80147346155b20a98d6fc2650bec3fe73327c45cad1b38f7c983cd070556a8f8ed5d58e1052f6436fad905099d18fb3e62c2c36a1c2209a94c820e30e5234e77be3beb4cd183015d281e7bf39cdcf0f1e541211c75d64a49df66bea814bab91ed65386d6a491a6295c24dbaf752a5e7a856e0dfe46a6f9e718ca3919c6f8978b0fd65c9e389114e5afd8e9e2a575b854463b63f46d08795f0f1d0d48d6d610fd74e9238de32ee3fa2ffef550336341803c083ac1d749be6c5440bbe4bd3bc3015bcde2b4e2160ba266d281a9641f74d9348fb6fa8550d1e8a8362999452e40b75c412cfa77ab8e1aaf1a9e83c855ec9b7ada38690f0d2e59f67a1f3babbcda8011595ea720816c24726b833beaca0a9d11e7b99373601d27d18c9e29940503d3a12149fdc4fe0065c3d023d6e7712eb853df19f2b4b886e08d61629288ff16c2597d7fae5bfc8b41f92fc325ffe0f61683b1f661409bdd7c3d88a854f8393484f4669b5d9654fd3a0819a32110b9064539a7419c332629b3fc71da35b7ed4f7c693842ce83733a63f2e6af37989cfcb768ab8cea5d21b82a0e9f6fdcec26b0107708867dec54c4e739fe9b931b3c6da013bfae097c57f1e16ba54f9028e672511938a0ad9d681d7feebc65a2f5f588abd66261393f3ba02d7b2cf650a9f7c6a4ca55b4d41132908dc9c90e26f0da8e2259e3a2b63b2d9e27754e278827ab80438070698c690ec375a9aeb4193079a28a2a062961ba0e65af01644af063f3ebefda92c4986379f7b099b2fd3960929578736f09887fc5816cb1b982e5b121b79662d1674dd0c6e82627cf8c63e576e5c1eb0af9415ddc10ff880e8ae3ce8c4fb87b8f9d364974c2a1d8eba4e04bc2bc018bfabc435683b2551c0e4908570b930c4fd7c03ddb95e9ec1d1994e3df0305fdac4e5b914641ae25b0c469b194c0bb78ab04887cdc4262da468475b926a18254d23b4c44705aeca34ef8a7b04dd55a43f39996529a23804e054655c5ba8661f7c02737e7539650364928d62b9b8d80988232009acb54214f06640e9bc6614c0ce02e4a22dc8b91a0aad711e4fd01d7020b7c7185e41e27ce266b9f5aec682cbd4bba3240d6277b17b564937254f37afe580cba0b78c6b0cc81830eaf10d7cc1f7e918d49e935629fe6c24b4368a04af1b99f6981340ee031874f3d4b3a9ebc31719b3b775bfe1fdfa0460a3820bff6f61b49b11ac2ca00836a0c4a74aed92a619f34231196669b942e761538e64f965d23d4f7814256e876263fe5307985c4e6eb69c974f66276764e80ab1de3f5c55e7b2cfdb78dd183a85473e968918ad73f29a266c818b9bf9f62eed86df25b2577bb6d98e3996e94f5bdf119b869541a94eb3536c979c3d77cc0df7c0c48a902ca2f03f5ba5a8ef9431cf95f6fc89744e8440e1d5ebb837e30ef7541fbc27672c31566ac3676a173cb9e466a2d206ba1ebc2b985eddcd6ff937375fbc8415eba46f5ec68cfa9f3a669d41b078867dd9f5160ba45fa4719f32cf877d4b7a6d77c977533659f7c7ac22c68f5e93c1df6c2a3d45b55a4afd3355680aed864f6bbe13da2da28a4851f73c88e555f3bb1c34a21fc45ab6c28287902e8b5fcae6899c804f364cd878a8d1734462bb075cb7bc709cc2c5d7747c4c29a2fa9259752301c26b852b7993adf889d45dbe39094c9b7b168756e5b939ed10bb6df57b8f5e14352cfc7d8b03cda5b978b06cf2430af5db17177b1ef664bc4b00307f970c4fc606a6bab72125f62b0f59655c35b104da7af188a953cfc09b3aa0785abf330830fefedcc8bf9a11d5dc4b5642f679d45cb44fe61ab1d906345c1c345f6b8027bae9504580c20115d2504d9c83ab54ea2557b6d2dd3bc65fa29f091aa46a215e77621836154104e6969fa9107139a19f2e45cc6bf55422a0e1a6d037ad9e63df5f9cd2045e13ac2d6a15bc12008c4cd23782df7d41bfecc0037292d22c7b42f2cc1a22db7502332d9f4fa85f7640c8635b9469681adb6bcec2dfdf6926f1815156d80a835ae918527f549ea6df45f350f618dc1f3ca139759be28e35013034f8bbfd3fa1a8f302594213c18015305911f42e287f2d86f17d76f8a0ea03fb574c60c808669f9f4454fc2eaf0e93873f688e34bd3341f6874d5d8fe754172a751d6ab23dc1642220e7fb1071df0ee3c7e07c338915494a3b360bdc0b38ed221c2c2bc86b29744448b255802b3ddfe600c1d0f9acabb2185e4e9dae5e456d5825f516c857f63e72e4a5f3d45eaf11a0e3a5ad0ba30a0bf0f94cc99586fd202d6118bb6f9c272f6cbe39dd9b8b36ea7fa51dfe0bb87a633be11c16a14d1bce8492387696e195fa3c5f172690b4434aa2e91ce7d225d73b1983d2605ec725aae0ae402cd2f79fc202a307f1896f3dfcf8c0fd8b841dcfeda5d65bb7d76f7c2d2eb1b164c0368e9984f320a224d7d438bc5c699acbc18a587b7589e960af114afbc9f59243646557962fc2e0cb5b5bf160a313bcfd9ade3e140b808e9f19415808aa312ae9c9e8bcd5a47fc721eda59d10670088714984a71d5c0df8b68e675a8e31ec15a92ff6a04d17e0ef849c782b302d11f742efe6486ab904fd65c0aac4ec25c6d877b453dce80e894de703aa8b1e5d00701850f149fe437fd0944cb95e54a924a49bd86bb9a602cf2904fbd9e399f1cdcd0b45b6d8f872e285f9dfeaa26aa760074651393c6451b36c643dd0b7236ec7803d69cec1b09bf1b63fbb68ad7c01507f00083b184ff01a62096f386f4c8fdc85e93eecf3f4b384aec1c10ccc60d8109a6d887bd389c3406163f9600879f0e944443d783e8644f69344f6f44f7bbf1883cda7369c9b9904d991c01552135f158a0bbb7f40c354f292c034824d82c209ebc770f5b756768ae51d45f8875b59904a07090689e65b40625566eed5d209130db812f287b966ae21ba46a3a7a3a0360a4e284d8d91ba9ed9806ea063827c8dda0fa98f758cbfa523ac645421f444a40b95bb065a64256c19354b1ad5002bb7b2add9b5236ad64e9052734b9d263515683db121b5e4dc1eab244dd8fc0fc62d962834ba0b21aad872b127afc0a33c7869a3f213519aa2ef51bab9ab28ed18859fd8239841a6668fc614dedd099121ae6c220a143c119cb9bff9068f65d0554b4c12105e59a22e91203a08ab8c718ec62c42d7ebb7b495e9e1be8fb7e4aab2777025da37b48d9d7b97578841a73898a6eab994e250106e096390c77b0600537be881ab7d81e3cb468bf1fe318b1e804d8df9875e9b8da22e6244997317391cce608085a28b8d070d654a29afab324ba3eecf427b6dfd43501ec0db919f71a932897eb37fe3bd64ab5a34ec60011696298b74ddd7a3710d3e444cedcc5cdc357f9dd58e67dc0ed3fc8df6dad82b3c00b4290c3280c28f78df052ec9cdd9df025abe8834616eddd5bb93379c69092911cd60761e7d14b426a83e335bfc8bf67a14e01df7cefb6023f0c6556534b975ed889de0d96d968526372402ce3d21a2c5c64a449dc3ba4ee0b5ceabc2fa29679e225681c8e946dc94b48af024bb1633e1860c7d8c14500967f24e2f8f46db537232a4e9f4abf8408f53bb52b035bdb89917a6f2f4bd22403ad002c2d936b785ecd965177e9f6235787a185d0eca92532f1aab16756ae86ece13925ba4a1fd08125102ae08c428d073aa426c4e792b5a4acf618605df1707021ce1eed62da4ee87334e34edf43338a0076b8ec739e2c31071e10c6a853e19fbf25b8a356527a67c8f7696dc184e374f4641f4e5b0aa345f1e6c4bfeba3a392d9a994bc271717a051c98d6c5b1f3296caf4c01d80ffb75b6fbdd0a0583f9d4695a44a2878df0c09a85aaab14522320cc3d2611603a34e52da03677a60cc87cc3c689975e5b5366c82e040b6643b8865d8bea0c84cef9ff85245a8b4bc41af1a50775b29fe55e42ac4b29fe80ddaf02e8c9bd07cab823f3d9021ac88236525ec045688a2fc9c6df66f541b10720cebf09ead919524f071cd128fb7575c84190c698b420f89b3c11195b5d83022d1f7e48afc21203995caf8f9286dcd5bd51b65c1af1caadf5a1b3f12579066855ff851075adb959dc3e086a7fb4e9a27fe80e8f3c0959b042486310ae7b785b0612e0385e36f50d4cae3474dd000c3957955534b4907b9480e2e5d83dedbeb76cb78d893c5b64dd51e31abc8e8b4c56b96f67c4b6e43861d91681af3270aae1a8f50712bd97326ee46a2640285b2902f051071d5a3400e99b76459956ac6908688c314bd8e54365383a65b186a6386cc5218e41e0b386759de81bccf5aa68f8608831a9d33ad1af2bdbd8579c5921cd8c3dd2f3bf1f123c742e118c76e2f43618bb7885e44826b7417c9ca5a139d774c16fbf74c8969c038ba6a54f27bab46ecc94d6455188d8dc1edf1da715c8d9976226877096df4158eeecced2248c7b88de0dd11a076db1f06bae4adba8286dc39aa62a55233886e011622ae1cf97238914a55078a7890814529440000004e0d34364e0f3daa9eba6fa54c085777b18c0523818ff8710dee4bfeb3db549c3f38dde73b99a7b1b219282407a4e0ab3794089e21f6f2045ab6254ac3703903edb302fb2f0f97e47cca7969ad6b5b6cf27314137a04d5f4f29c193cfc5540592ab1342a1a9cbd514a7b4d6b23f724a5d7bfa6ffe8e3d9de29b8661139f179a0fafecf234f19bee75c25faffc765e02377d83e0ad0a0029c08f5c71595bc1b2fe88f0fe958f3f1f8ba6821ab834cab9bc902b2d47bd4b5ed52b5b0d7b3bc999b2f68879be39ddcb0428ce3a617b68c11459b746651f413d9e9a098cd2b5c0fcfd0ea1db2cde1672818d7bc73b053015692f9e9259a0153e3c9ac5e73e3343dd350cfbcaa57be93cc881a35063aec2db4ed71df2b1bd90b5ecbd84f399d4530c5450d622188423e151cec49673dc633e503c497d53843f4824750dc09abae9f2f465e92888715b6879f5edbab7bcd58f0899e1430ffb5f3063450945cb0fb3b5c3088ed6966c54dddae3aab489a80341b45a17cac02ae62749f209a7e16ecdfd86b43569c7b34511c65474acf2b2c18834e158e20957bf2320e4a6b9d63caea93b3a7dd4f7ba54443aba1ac2b6f2b27e1bf6f17d3fd1582462e0debc7069bb70e219654cbb99adfed54ab94329382163f2ab6710bb581d189cb3449a02c917c1f2d1d5f51958ce605fdb0e37ae5f3cb3f123276d43b2c26ea948dee863e0b679ecddf0fe41ce78bbca30167c9c7d6b0e9193c98090facd7205a490727e1ac49bb4d639348a32546007459c61c27bf8df87dd2ed3f3228b8193422a72d15f848bac13c6ffa7b8a767cf04866feb7c7a81267d7a8e890128d4709e4873223578aa7febdd562403c6092c0a3f6e0650772ede935ab6ef95e375bcbfa395e23ef1d73532388b845a95f158dc845a123f798176c73e177926d39abd38a910d40653006375110be2f2c5f6efc87b31908be36dd07c8ba5853519a37dfc4dea981af855293f49a3270bb67cdc17b780fbf2a418fcec8953dae927909a6bbbdce230d23113efad9c02474682dafc63311050cb4f3f86c282ff29728eefac5c678360122b4ce221bcec82d24e053b63972d2e9a631a180b48bb8d2d4de7254d91a858271df51a1d87ca7eb5d19ac3def1fdd6ebd8f57c2c9e43cb6ff2fa00d27f279368f5ee29a84ba219a51d1f0f1965781164edbb3aa6209fbce6d40284fbb4a33f59bf9e1248100a623de16613eebc11f510b7718dde9f13b4c9b2b6a10dd932696cdb7fa4b5733b0377453471462762457d42038ebf8c0fb392ca7656ad1f050c326de75fffc698c48f5d809ae360ddb9856b9a54b811073233294bf91e46414441b6665f432201da12e49718b0d7929b6cbcbf310a09ce0d22f07ee5cfa8ffb9f03acd224641171ffafdf50f18be8fa3c907226cc1a6f3b16a776781a6396dbf09f689ad6bba4d537dad490a6f036a45ee3e224e6f519e44b7352ee3e7d3f0d89f8c7c8f54b6d2698c0298a07866c9d9ca09c96c2ac8efd7974294df6dd1bb0598debadb6135e7123bbfddf84870de54476a291586fc0e64784e65fdf78d462e8b51cbac38e7ff1878b11418f188220e3deb5367a2d90ad7d44395f6965cc6d680c59daac268c16814d1085302d0453b48e4a8ae78b8a5b6951a875ef42776f6d11955da7e5734a72b61cefcc6889b8f8d58db51ee78d7b1a8ffebd90e15a64654054767aaec24dd3b5f338b572496c8731049c10622b7f54fdfa43aaea316946291fee7bc9e64640e8bccf33fd1e8693b67020b49cf77faaaa8269e2fecc4e2b43c8c3378a4a9b9b85a4fe2c346c5512cda631542e0ff5706eba996f4f72e629b076d6be1966d44b1835ce664e3c6a4f18c68f5e32f900a0a167e547d5aa79c0aede966f83d00366a623ef8107e328654c8558d5e606f69a12b6c2a6fcbe0e08f945c4ad2738ed0b28d79c98514abe0819569c6e4f4751c665fd651aaa9ee392c330560ef6d57c0a97f0764f88433b2bf7641ba391634316b0ee1dac23a63be21270e50ea1ac24ac3b429a0b46c38dbd48c540bfb1e141b8b3df6caa179c7e54f2b7b1371e8eb05a30f13da95200ab70dc58325f6bea0ee9fe1f04154998df393f2b4ff4431363f3a7450fa5210e883d67620ae63cc41f72e74e26a0244de1ac722b6f1c1d293f7483b331a0efda65a4e4e9144547fe6dce2f4535e29048b07079329b63754bb124b9e046a6e97929b1f4a387765bf93804530791c9f649db6efbebebf46fa4f9af7ff2587130d0e70a32d4aab1dfbee6aadd1f3e5317e3d4c8cde75b1479bc3dd16ea35db3dca11cf1eb1d2bbac60b83605e171619d85fd4b6d0e24be8db76df12efef05eb87473b832e59f3039df44ef034e5e7546b399cc817a41b2f020286ff139072a5b909ebb185a3c955cf88f4a9929b2112e0a9ab43da0288ce3ea268ccc9f46f852d387f5d0a2831dfc8cb0bf593905ba376c069b8c9b70558ec826c5bf9835031199c4c6d84c913da7e9e7db49c1d34511d917b9ad3c40af0598737d58fd61b8f2adc46b73a284957a99943cf73414412fa5440a5f85b63c20794d122c267fba72bfcd0e2741642fd8ff5a0ae1ffd8b30d852c053d0e31f505ca13a21c0223a8ee77cdd92de1b9f87ebee4ea332e9d4573d7efb2ad3f50c35fb7a596c4edb4b72bf6df5a16ffe3c8a236f2cab8c0712ac26c2cbcc68c1dc45209b579c952c7d645642aeed7d60407ee2dc168179d536da950108e962c5c976d3a05bf5142466ee38939ee94e707a0135f99c99b5d6376f63c711e4f64950f08dbc931c812f34735d9eb1c5997770d8159068cdca2e0f192311ca438d613728b544d6a3e50ae0e4e6b1eb611ce55a96bb2f991d49173073d8547f5ede69d8b587a34bb8f637297a15ab4fc45f1384bbd19b3feab5fb81322ba831386eeb6067e55af374c1b1eb9613a6c41dfe2bbbcfad157dd042c67c44400b350f0dc40a8611f2e947f32ea3ac3f609027b5dbc95b157c13216fe7c35edcc82950bd4e38bcb02b63d2576489c331a222e013e73b5333694889b184bedbbb6fdd6fd40a62b1d5d494e68cd2aefc264f74bf70ef38373e599faaa326f574ae32b1aad86854af22db8c9673d14666aa7c0c3bbe0d76a835ba4b391552777ed20c5c6cd0aa84f3be73ca0a3c128914107fb8fc02220317fb111cf13398480cd3325582a7e55f4c4ef5a258bcd01a97615e95f89c8046d41d04340b88cd5f4b1d827a030637145d98422facadbbbce97dc3060402a7bfa73d7b4dde53184a0923c0ee29c6e8e2c35e396808df2481af6aab053b619fcb2833f14f87051c5461567c5f8dd40383a7521971775493f896e18c78bad8219f88258ea686652780c03ebafb63ecbfcb23e24d52a2f88a77ed3b2280637807a5e155f4fad7149b76841772471a3b77aa42e8058c0af1ac2be9d88b5152851708f1a77582b3e31702864ee6a244a38f3f95d9797a60cddeb5ddf08cc48fc677f03f9e717ebe7f472883e5a6a7df31ca4272228f26991460c537ebc8aecb6a0c34a763eb1f57124fbfafd6db4c21bedf6723b252aeb21eb1fd9f4f811fd3e2e764422964761b2ef3aaaf986a48f7be66f6387578f9492feebc97dfbc6bc97380394a5635dbe582e52a1fb18ea8fc4e53974c63d198cf0d878ba8a8d58688a037c0f753c7073337ef3da4c134ef939c98c8806d09943591e6013a1342de7c722f993fd7eb36ba8e8407d1ea60eb5724b0d6262c70469dbd8ea1956b8d7f5a77707a9cbe2137079e7abda3966c5bee4fd86e8a3c4969bc88ff328a2adc8f4546f647575866d5ced16df06bf40d9a5f178f9d19e490bd76e187c441e7de0e571f6cea5512ec9bea48903d91a519dc82defe34a06b0244d623090b5a250786bbc66c1e76db6b18d81ed33c81a7c93782d5cdbe0a7cf7d1ab29c04be6ff4a9bbc10f716a67d52fd52d91425abd2002cf83c3797861db5fbeaec745a552ca4a50604340f2cf2c1b10e9ba76c8ea43b283c73f774f8be213f17f70cf93b9f6a8bab1f516a935e80c3cc6756945edafd572e6e00840eedf61fc40351869f03562d8c13006de585a1141c02f1311fbc8e45e4b3878c32810698e4764a6e8495f165eefee35714a1794f9ab50897c5565ab745425933d9d6272a172c1f2a274f9ca7bc8e1b01a27b8bd06fd9dc61880789696348c99e9a70c9dd2a62ca04d1f86dc87380b618c2a78b16229d614702fce242fa17ea90cda2648f9375bf7e78b4267d558983e08a9566d95871998d23cc6d22c23370ae067b677609844abc140df81cbd9addbf657fffaab5c22c479acca18f3e4b508cf01ff7b2ca308ff116389790f26f2c7635f89c747a5bc66f61de575653069349a89fd7e3dd785266b7bccf16eb8b4a8a86751de60d33e17d64f6e4e0f9d13a16d243ad7364114db7ad011f094c4debf20a39e35e7eeb440bbe8811db2857b965edd1e2675ceb1bc9a1691f123dedb341962fbbe539485d2241b0409adce2587d035187a0dd5a62076ac4eb5c3e2f4455569b6eac0fc16155da1774cbe505dc92e2087585a7846bae699bef32e3c5ec2356dd4433ed29d4b03ff7b38f7b3cb96b92874eefda6c2e0e326214e40f14cc2ef80e1cd3fe226257a423b8ff5bb368b87ac7066c5136487775b5b122a858334c37f6a3f53d758c3c866e2e79daf9aeab36a59eddbae2fa5b6d20973014196ef0a4cde1373c7297833e6f1e46828f4a42eebd829dd4f17999abe285218ed5dc6007b21bceb588a213b29dbb1ab1a79b41a12df26fe35f0cf6a310c9e50cf10d71ad5960626e4efec211032ec4ae52512001362ba4108d86eb774d2d4d0364cbb1dae68f03a774e328c2dc09899ee80c05ac2a8e3ba905b0b3b7a08a3df20b505901123e7dc0a15db48d09c84189ca4345c23c2010c12cc35287fad30211cab9631e148a7c1e8bfab61ced30e098d1c3cf7b6a7fbd8288dfdc48044d0d47c17f129f6b5d751af1984d395ab1b08ccca3e7309a89a8a36dfc3fb82d2a4269bffc32571438d04a7b98137b46ae1fea1bd9ea64f99e2f0c5f12ed84886b10bbd511993b0447036c4e57b9dae6d5bdad6aa3f2d12e62471194e43111613b8b6944c2baf1f539ea14dd76c356bfef7e3d4b6fb91f6d321a796a4bce5a4c6a5caaf0f3eccd914dea21ae909be7ba486075ff6139e7e351fdd7e98013ba51ff0248852398c734f245ffd7fde8cacfa4805496ad7350b1c96d7bf9da9be492f2f414e973937ac9109b6e8b8315aa9b81840f2c21239caf85a28f0e590bb6ad12148e75bd4d7ea69a9ffb053781db98d5fb5aca30a734017be7683a559c203c006ecd4b135afe3650b906e0aa208c889f2af09f3f8263260c3bd07cf8021124b6f0e0d021f9839e47996905c3d7562df810484552de3bcc9ae054b62a01af6a7991e4d63f30c7a92d8b58e01052e53818e64d7540a3208af321709a5d891ceecae5d27a999b00ed01616a73ec8854ca61973ed1fd3d82f8628b215c55eb7908e297d77098a7b0c362709005a7d13c89c54556589b2a926c6e08cc1c0afebc7eeb5d7ae4ef0507c91b8e706e6dbf83d898819192c812554ad1c6377871a8ca50f1325630f7b5266b807ef61d0c8d399fada49cb02a14c16d39f4fa7b81272573808e761c9dce7cfd12f4f18dd06b0ee471c166e095bf84aa4aaa2d82f1afcf09e5d960257c0a8dc404225b4b62187829c59e57da50bf848d72fabfb69362c117c6913541f84095a2a4ccdd2d30860cd96640bb2315e435a4af08c62c584ad129300adb02a871f3c548b96c4f6c47efdf4a1163a8a5ba9b4766b01437bc5957324660a8cd87df0f7e000d1309e896e3ce9f57b17562c9368a95a4cf66b3a5b57f0cca563b045452bbc8ad07b96fd0322728ccb3b05bfda14ef36ecfa2f32c5aa899811a67f2d62ed970db5723d6e4e4913c98c81ed6c03469112c23549f7e20be6401c6544db9078f34e6a4ad3cc868bace2e7ec6ea17225986f9e941ec67d9a3fc57958f9df8a60f585aa38b1769e26ed3f68dd85685b2cefae9dd72a18abc0de6b94689785df377ef4a812a6abc7f738a396f0e99ccbc5731801c36e746ab6b1dda88ca6ecb899528e18543cb3dfd439cd5be566594f01a4533da3638e6331fedf5b67870938ad044aa0dfdae33e3a6258ad40baadd726eacb1f3c1eb8d83ef4e185d7603a4f1eb006d90bf5849e2f65d37ffe750eb061bbad08a0c0cfabb9abf7f27d36ee5687d23feaa923e09d2ae905410a9193f21ed9b1d6331bb1f3babb90da2f2e023a6ceda4b4fe0f5d864738ee7f65a0b136021fbe076b4adf2d3af760e1361bad7ae35cb7ca010ddf4488255a2d3c492d0b26a1a5643f998b5d04a52a59f176d9bda85c916ff901329f09fe953b030b92f6415172476ad89d3e8cdcb4eda7dde5d4fcd5d6a584a312563558e784b0f9bcea7c53d26c3f2d3350c70a5e06a67c4c0373dd6279e29c320e6580fba8ab2df3039c289235c066af1b07dd112f25b25e292020f36c1aba246cba4e054d64b38f53ed57a712dffad7d3dc97f86af511638a2779107fc55da63b6498ea5f3ae36883163e5bf2324211a61a9889278f828e58daae797fdba9218d322da7aa23db7a48a00", 0x2000, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000700000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000880), 0x7ff, r0}, 0x38) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000100)={0x80000001, 0x25000, 0x4, 0xffffffffffffffff, 0xf}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x8000000) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad10102030109022400010000000009042902"], 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x24000085) add_key$user(0x0, 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x12c, @ioapic={0xffff1000, 0x8000, 0xfffff5a7, 0x7fffffff, 0x0, [{0x1, 0x81, 0xfd, '\x00', 0x4}, {0x7, 0x3, 0x1, '\x00', 0x6}, {0x7, 0x3, 0xe, '\x00', 0x3b}, {0x4a, 0xe, 0xd6, '\x00', 0x86}, {0xd, 0x2, 0x6, '\x00', 0x2}, {0xd, 0x1, 0xf9, '\x00', 0x3}, {0x2, 0xa, 0x7, '\x00', 0x6}, {0x8, 0xd, 0x2a, '\x00', 0x8}, {0x4, 0x0, 0xa, '\x00', 0x2}, {0x8, 0xd6, 0x3, '\x00', 0x8}, {0x9e, 0x6, 0x3}, {0x2, 0x9, 0x0, '\x00', 0x7f}, {0x45, 0x51, 0x6}, {0xe, 0xfc, 0x0, '\x00', 0x1}, {0x8, 0x2, 0x6, '\x00', 0xb}, {0xd, 0x1b, 0xfe, '\x00', 0x3}, {0x2, 0xa, 0xd6, '\x00', 0x8}, {0xa, 0x0, 0xca, '\x00', 0x6}, {0x0, 0x7, 0x4, '\x00', 0x1a}, {0xb, 0x8, 0x81, '\x00', 0xda}, {0x3, 0x7, 0x6, '\x00', 0x7}, {0x9, 0x3, 0x1, '\x00', 0x2}, {0xf9, 0x21, 0x4, '\x00', 0x7}, {0x8, 0x9, 0x0, '\x00', 0x6}]}}) 19m50.781326718s ago: executing program 0 (id=1046): r0 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x200, 0xc, 0x77, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) umount2(0x0, 0x5) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000240), 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000019c0)=@newtaction={0x14, 0x30, 0x0, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b"], 0x44}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 19m49.104054605s ago: executing program 0 (id=1050): r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x20) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f00000000c0)=ANY=[]) ioctl$XFS_IOC_FSGROWFSLOG(r1, 0x4008586f, &(0x7f00000001c0)={0x6, 0xffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000f00)={'veth1_macvtap\x00', &(0x7f00000002c0)=@ethtool_cmd={0x35, 0xc4, 0x531, 0x8d, 0xf, 0x1, 0x6, 0x25, 0x5, 0xd, 0xad, 0x7, 0x80, 0x80, 0xfd, 0xf, [0x3, 0x10007c88]}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6_vti0\x00'}) sendto$packet(r2, &(0x7f00000002c0)="1a040500bbff03fc01004788", 0xc, 0x4000004, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0xf955, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xec, 0x21, 0x1, 0x4, 0x0, {{@in=@multicast2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x9c, 0x11, [{@in=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x32, 0x0, 0x0, 0x2, 0x2, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@loopback, @in=@rand_addr=0x64010102, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x2, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 19m48.767936648s ago: executing program 0 (id=1051): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4342, 0x0) r1 = dup(r0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd86) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x401, 0xfffffe0800000001, 0xfa11, 0xf7ffffff}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000332000/0x4000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000053000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000691000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000600), 0x161a02, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r2, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) 19m33.607144856s ago: executing program 34 (id=1051): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4342, 0x0) r1 = dup(r0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd86) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x401, 0xfffffe0800000001, 0xfa11, 0xf7ffffff}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000332000/0x4000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000053000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000691000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000600), 0x161a02, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r2, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) 9m46.378205903s ago: executing program 2 (id=2743): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) fsync(r0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x6000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) socket(0x2b, 0x1, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003540)=[{{&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000080)="93", 0x1}, {&(0x7f0000002400)="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", 0x4e0}], 0x2}}, {{&(0x7f0000000740)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001a40)=[{&(0x7f0000000780)="e4", 0x1}], 0x1}}], 0x2, 0x8000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000000), 0x4) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000000)=[{0x0}], 0x1) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$BLKZEROOUT(r4, 0x127f, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="00000001000000000000000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000bf98000000000000b5080000664f8f029624b00d07000000b7000000000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_procfs(0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, 0x0, 0xc000) 9m39.820779772s ago: executing program 2 (id=2756): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r2 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) unshare(0x20060400) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd(0x3) r6 = gettid() syz_open_procfs(r6, &(0x7f00000000c0)='stat\x00') ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000000)={0x7c, 0x3000, 0x0, r5}) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f00000003c0)={0x5, 0x3000, 0x0, r5, 0x4}) r7 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x149a82, 0x0) write$cgroup_int(r9, &(0x7f00000001c0)=0xffffffffffffeffe, 0x12) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0xf4, 0x0, &(0x7f00000005c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000180)={@fd={0x66642a85, 0x0, r1}, @flat=@handle={0x73682a85, 0x1100, 0x1}, @flat=@weak_binder={0x77622a85, 0xb}}, 0x0}}, @register_looper, @decrefs={0x40046307, 0x2}, @enter_looper, @request_death, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0x7, 0x1, 0x9}, @fd={0x66642a85, 0x0, r4}, @fda={0x66646185, 0x8, 0x1, 0x2a}}, &(0x7f0000000380)={0x0, 0x20, 0x38}}}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000500)={@ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/205, 0xcd, 0x1, 0x5}, @fd={0x66642a85, 0x0, r9}, @flat=@weak_handle={0x77682a85, 0x1000, 0x3}}, 0x0}}, @increfs={0x40046304, 0x1}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x4b, 0x0, &(0x7f0000000240)="2f2aefa92367bdae6e69d9eb186b56663d2af21ee9d9e21ca96f510c671494d853644c75ca759998db7d21fa758c9d4ff1aacf225ba306e06340a1cae55575c631a1370c97db32005d3df9"}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) write$sysctl(r10, &(0x7f0000000040)='1\x00', 0x1) 9m35.634060556s ago: executing program 2 (id=2764): ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, r0}) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f00000004c0)={r4, 0x80000}) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x56, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x3, 0xffe00002}, {0x16, 0x0, 0x40}]}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaa"], 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 9m35.352252478s ago: executing program 2 (id=2765): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xae44, 0x5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0xf1ba, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) close(0x5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) symlinkat(&(0x7f0000002000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r3) add_key(&(0x7f0000000500)='encrypted\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) execve(&(0x7f0000000400)='./file1\x00', 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x37b9, 0xc000, 0x3, 0xce}) io_uring_enter(r3, 0x2219, 0xae02, 0x16, 0x0, 0x58) memfd_create(&(0x7f00000003c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\x97\xb0[\xf2\x84j\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xb6\xe4\xce31\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3d\xa7\x05Y\xab\xf3\x9c\xf9\xa9\x0fa\xc20x0}) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000600)=0x20000, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r4, 0x2}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a3a0000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000054000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800"], 0xf0}}, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x2}, 0x8) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0x403, 0x2000, 0xfffffd, {0x0, 0x0, 0x3}, [@IFLA_MAP={0x24, 0xe, {0xfffffffffffffc01, 0xabde, 0x3, 0x7ff, 0xc, 0x1}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bridge0\x00'}]}, 0x58}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r8, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r8, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r9 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGMASK(r9, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) 9m14.597354301s ago: executing program 35 (id=2774): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0x71) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000100)={0x0, 0x37, 0x800}) set_mempolicy(0x4005, &(0x7f0000000040)=0x13, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000600)=0x20000, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r4, 0x2}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a3a0000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000054000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800"], 0xf0}}, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x2}, 0x8) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0x403, 0x2000, 0xfffffd, {0x0, 0x0, 0x3}, [@IFLA_MAP={0x24, 0xe, {0xfffffffffffffc01, 0xabde, 0x3, 0x7ff, 0xc, 0x1}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bridge0\x00'}]}, 0x58}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r8, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r8, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r9 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGMASK(r9, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) 2m46.595278202s ago: executing program 6 (id=3461): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x66, 0x0, 0x0) syz_open_dev$I2C(0x0, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r6, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r6, 0x5b) read$watch_queue(r5, &(0x7f0000000000)=""/1, 0x1) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_io_uring_setup(0x1fc7, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x3b1}, 0x0, 0x0, &(0x7f0000000000)) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r8, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) write$uinput_user_dev(r6, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x40, [0x7ffd, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0x2, 0xe661, 0x4, 0x7, 0xdf, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x200, 0x1, 0x7, 0x1fe, 0x3e, 0x2, 0x6, 0x6, 0xc, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000009, 0x9, 0x8000012f, 0x8004, 0x1, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x8, 0x6c7, 0x9, 0xfffffffc, 0x8, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x30e, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x6, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f34, 0xd, 0x100004e0, 0x2, 0x4, 0xb, 0x8001, 0x9, 0x8, 0x9, 0x3b, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0xffffffff, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0x7f, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0xfffffffe, 0x5, 0x9, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x80000086, 0x3, 0x303c, 0xbe7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x0, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x6, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x8b, 0xfffffff9, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x80009, 0xbb33, 0x80000000, 0xb, 0xfffffff3, 0x93a, 0x6, 0x1000006, 0xfffffffe, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7ff, 0x2, 0x5, 0x1, 0x2, 0x14d, 0x60a7, 0x16, 0x96, 0xfffffffe, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0xf, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd9, 0x200, 0xffff3441, 0x1]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x3f00000000000000) 2m42.07200207s ago: executing program 6 (id=3467): socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000200)='9p\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14040010}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x0) poll(&(0x7f0000000340)=[{r2, 0x3200}], 0x1, 0x9) socket$nl_route(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000003140)=[{&(0x7f00000002c0)="ca7bfc8312c9237bffa562dc1d03c723970f07a1078c261ec3fdfed5f81f4f5fe80bb3ebaa7484bfa3214dbd065c92f849a4c0f98b384d978d483f4d189251fe8cfea46b9c", 0x45}, {&(0x7f0000001000)="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", 0x546}], 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c00000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0x0, &(0x7f0000000280)=""/135, &(0x7f0000000340), &(0x7f0000000380), 0x80, r3}, 0x38) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r4, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0xffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f00000000c0)=ANY=[], 0x6a) r7 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@private2, @in=@local, 0x4e28, 0x0, 0x4, 0xf000, 0x2}, {0xffffffffffffffff, 0x802, 0x913e, 0x0, 0xfffffffffffffffc, 0xfffffffffffff207, 0x5}, {0x0, 0x0, 0x0, 0x8}, 0x3, 0x0, 0x1, 0x0, 0x4, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x20}, 0x4d2, 0x33}, 0x0, @in=@multicast1, 0x3507, 0x0, 0x2, 0x4, 0x4, 0xfffffffe, 0xfffffffd}}, 0xe8) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x2000, 0x1000, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) 2m38.292918546s ago: executing program 6 (id=3475): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xd1, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000000c0)={0x42, 0x1, 0x2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000001140), 0x2, 0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) unshare(0x2000200) unshare(0x40000200) recvmmsg(r1, &(0x7f0000006180)=[{{&(0x7f00000011c0)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f00000034c0)=[{&(0x7f0000001600)=""/184, 0xb8}, {&(0x7f00000013c0)=""/148, 0x94}, {&(0x7f0000001480)=""/159, 0x9f}, {&(0x7f0000001840)=""/246, 0xf6}, {&(0x7f0000001700)=""/138, 0x8a}, {&(0x7f00000017c0)=""/96, 0x60}, {&(0x7f0000002340)=""/4084, 0xff4}, {&(0x7f0000003340)=""/204, 0xcc}, {&(0x7f0000003440)=""/98, 0x62}], 0x9}, 0x9}, {{&(0x7f0000003580)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000004900)=[{&(0x7f0000003600)=""/65, 0x41}, {&(0x7f0000003680)=""/199, 0xc7}, {&(0x7f0000003780)=""/144, 0x90}, {&(0x7f0000003900)=""/4096, 0x1000}], 0x4, &(0x7f0000004980)=""/64, 0x40}, 0xfffff341}, {{&(0x7f0000005ec0)=@generic, 0x80, &(0x7f00000060c0)=[{&(0x7f0000005f40)=""/230, 0xe6}, {&(0x7f0000006040)=""/92, 0x5c}], 0x2, &(0x7f0000006100)=""/105, 0x69}, 0x10}], 0x3, 0x12002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000001300)={0x20, 0x3, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x25}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x0) syz_io_uring_setup(0x320, &(0x7f0000001280)={0x0, 0xb713, 0x400, 0x0, 0x1}, &(0x7f0000000000), &(0x7f0000001180), &(0x7f0000000000)) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000140)=""/4078, 0xfee}], 0x1, 0xf2, 0x207fff) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r6, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x400000000a882, 0x0) ioctl$BLKZEROOUT(r6, 0x127f, &(0x7f0000000000)={0x600, 0x1000000}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28012, r7, 0xffffc000) 2m34.909799486s ago: executing program 6 (id=3479): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x1, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0x2}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f000000a7c0), 0x0, 0x800) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000020000000900010073797a300000000064000000090a010400000000000000000200002008000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000040c00018008000140000000043c0000000c0a01010000000000000000020000000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002fb"], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2382420, &(0x7f0000000200)=ANY=[]) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0x4}}, './file1\x00'}) io_uring_setup(0x20006d19, &(0x7f0000000100)={0x0, 0x31cf, 0x10001, 0x2, 0x10c, 0x0, r4}) r5 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) write$binfmt_script(r6, &(0x7f0000000080)={'#! ', './file1'}, 0xb) close(r6) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) socket$inet(0xa, 0x0, 0x84) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x8, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) socket$netlink(0x10, 0x3, 0x13) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000200), 0xfffffd9d) 2m31.859417018s ago: executing program 6 (id=3487): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getcwd(0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000007c0)={0x1, 0x2, 0x1, 0x0, 0x8}) syz_extract_tcp_res(&(0x7f0000000000), 0x4, 0xfffffffe) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = fsopen(0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x8) fallocate(r2, 0x0, 0x1000000, 0x3) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8000003d) r4 = syz_io_uring_setup(0xed9, &(0x7f0000000340)={0x0, 0x2090, 0x2, 0x800008, 0xfffffffd}, &(0x7f0000000040), &(0x7f0000000240), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r4, 0x11, &(0x7f0000000500)='n', 0x1) write(r1, &(0x7f0000000240)="1c0000001a009b8a140000", 0xb) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x13, 0x0, 0x2) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000808, 0x0, 0x0) r6 = syz_io_uring_setup(0xf01, 0x0, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0, 0x0) syz_io_uring_submit(r7, r8, 0x0, 0x0) io_uring_enter(r6, 0x2000, 0xfffffffd, 0x0, 0x0, 0x0) ioctl$PPPIOCSCOMPRESS(r3, 0x4010744d) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f00000001c0)) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x2401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x34, 0x3, "64000000746573745f6c6162656c000000000000050000000000000000000000000100"/48}]}}}]}]}], {0x40, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x104}}, 0x0) 2m31.312374831s ago: executing program 6 (id=3489): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = epoll_create(0xd751) epoll_pwait(r2, &(0x7f00000000c0)=[{}], 0x1, 0xef19, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='attr\x00') r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x17, 0x1, 0x70bd26, 0x25dfdbfd, {0x8}, [@typed={0x8, 0x5, 0x0, 0x0, @u32=0x7}]}, 0xff2e}}, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x5f, 0x1) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x100440}, &(0x7f0000000040)=0xffffffbb) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={r5, 0xfffffffffffffe9f, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x7, @loopback, 0x5}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e22, 0xc, @local, 0x9}, @in6={0xa, 0x4e22, 0x6, @remote, 0x800}, @in={0x2, 0x4e22, @rand_addr=0x64010102}, @in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e23, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}]}, &(0x7f0000000200)=0x10) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x7) syz_open_dev$sndctrl(0x0, 0x6, 0x20080) shutdown(0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x380000b, 0x204031, 0xffffffffffffffff, 0x5e9b7000) r6 = syz_open_dev$dvb_dvr(0x0, 0x0, 0x0) ioctl$DVB_DVR_DMX_SET_BUFFER_SIZE(r6, 0x6f2d, 0x7fffffffffffffff) ioctl$DVB_DVR_DMX_SET_BUFFER_SIZE(r6, 0x6f2d, 0xcb) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r8 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r8, 0x5522) ioctl$USBDEVFS_DISCONNECT_CLAIM(r7, 0x8108551b, &(0x7f0000000140)={0x0, 0x2, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r7, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r7, 0x80045510, &(0x7f0000000040)={0x0, 0x200000}) 2m16.108622935s ago: executing program 36 (id=3489): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = epoll_create(0xd751) epoll_pwait(r2, &(0x7f00000000c0)=[{}], 0x1, 0xef19, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='attr\x00') r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x17, 0x1, 0x70bd26, 0x25dfdbfd, {0x8}, [@typed={0x8, 0x5, 0x0, 0x0, @u32=0x7}]}, 0xff2e}}, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x5f, 0x1) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x100440}, &(0x7f0000000040)=0xffffffbb) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={r5, 0xfffffffffffffe9f, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x7, @loopback, 0x5}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e22, 0xc, @local, 0x9}, @in6={0xa, 0x4e22, 0x6, @remote, 0x800}, @in={0x2, 0x4e22, @rand_addr=0x64010102}, @in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e23, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}]}, &(0x7f0000000200)=0x10) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x7) syz_open_dev$sndctrl(0x0, 0x6, 0x20080) shutdown(0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x380000b, 0x204031, 0xffffffffffffffff, 0x5e9b7000) r6 = syz_open_dev$dvb_dvr(0x0, 0x0, 0x0) ioctl$DVB_DVR_DMX_SET_BUFFER_SIZE(r6, 0x6f2d, 0x7fffffffffffffff) ioctl$DVB_DVR_DMX_SET_BUFFER_SIZE(r6, 0x6f2d, 0xcb) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r8 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r8, 0x5522) ioctl$USBDEVFS_DISCONNECT_CLAIM(r7, 0x8108551b, &(0x7f0000000140)={0x0, 0x2, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r7, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r7, 0x80045510, &(0x7f0000000040)={0x0, 0x200000}) 13.076985394s ago: executing program 8 (id=3950): ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) r0 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0xfe, 0x7fff0006}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x20004, r1}) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f00000004c0)={r5, 0x80000}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x109181, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x56, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r7, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x3, 0xffe00002}, {0x16, 0x0, 0x40}]}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaa"], 0x0) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r7, 0x4068aea3, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(r0, 0xc0106450, &(0x7f0000000180)={r5, 0x1, 0x2}) r9 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e00100905"], 0x0) syz_usb_control_io(r9, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_GETVERSION(r10, 0xc0145b0d, &(0x7f0000000040)) ppoll(&(0x7f0000000080)=[{r10, 0x1206}], 0x1, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) 9.737190149s ago: executing program 8 (id=3957): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="403f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.261777705s ago: executing program 1 (id=3965): r0 = syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b71"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000b00)={0x0, 0x14, 0x1a, "ac6fd0e2fc9bdd229a6d2938b9768b9a41ba440ea15bfef09eb3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 7.807624652s ago: executing program 8 (id=3966): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e24, 0xdd48, @private2={0xfc, 0x2, '\x00', 0x1}, 0xd}, {0xa, 0x4e23, 0x6462, @empty, 0x5e}, 0x0, {[0x3, 0x9, 0x3a, 0x2, 0x0, 0x8000c, 0x0, 0x8000]}}, 0x5c) 7.512340095s ago: executing program 8 (id=3968): ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) r0 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0xfe, 0x7fff0006}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x20004, r1}) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f00000004c0)={r5, 0x80000}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x109181, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x56, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r7, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x3, 0xffe00002}, {0x16, 0x0, 0x40}]}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaa"], 0x0) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r7, 0x4068aea3, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(r0, 0xc0106450, &(0x7f0000000180)={r5, 0x1, 0x2}) r9 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e00100905"], 0x0) syz_usb_control_io(r9, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_GETVERSION(r10, 0xc0145b0d, &(0x7f0000000040)) ppoll(&(0x7f0000000080)=[{r10, 0x1206}], 0x1, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) 6.237607067s ago: executing program 9 (id=3978): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000880)={0x0, 0x4, 0x30}, &(0x7f00000008c0)=0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000000c0)=0xa0000) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f250040290000000109021200010000000009"], 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(r4, &(0x7f00000006c0)={0x2c, &(0x7f0000000280)={0x40, 0x30, 0x4c, {0x4c, 0x23, "c3cef41ffc6475bf989f6dbdddcba33375680ed6b54c79a6af22dc92267f20441623db59b7721e2018233b30924952a7f60086e1dfae67d5597a0dfbf06e5565786e7c30b4dc3c91482b"}}, &(0x7f0000000440)={0x0, 0x3, 0xde, @string={0xde, 0x3, "d5c228a4912a9f2cd21d7a418a3f8e84c3bc31a2b8423e052952b534130fabc4efaa9c92150462b3ba88bec5f12bb28bb7cc5bb26d2ab581d50b6d5b119de756493b7aafde0acce0365ed91f619183de918bb82d54df1a87f432ecd957e2127a5c3de80f8ecddd229959d0f05556bae7f0724553566df7324f1396477f5b351e04fe6b985044f24e2fd7304d5573927fea5a8ffb835345bf5cf5bc19d552ef7c84e7d6adca277f676d555b10175146564e727c73d7de5c629a7eb51b830c79159c5951ca75c79b631b6273104a5759c3c7fc645d606dbbcbcea64601"}}, &(0x7f0000000600)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000640)={0x20, 0x29, 0xf, {0xf, 0x29, 0xbd, 0x0, 0x5, 0x2a, "77c1bb4c", "75e5d2d4"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x0, 0x97, 0x4, 0x9, 0x8, 0x7fff}}}, &(0x7f0000000b80)={0x84, &(0x7f0000000740)={0x0, 0xe, 0x38, "306c3657dda398ea1d0546a87bc3f8629d281ae746f0caca6152516b0910a84d430d99e51601bca1a4d482102149eed542048fe7495fccbf"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0xa}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000880)=ANY=[@ANYBLOB="200008000000000240000f1d0000"], &(0x7f00000008c0)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000900)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000940)={0x40, 0xb, 0x2, "f47b"}, &(0x7f0000000980)={0x40, 0xf, 0x2, 0x2}, &(0x7f00000009c0)={0x40, 0x13, 0x6}, &(0x7f0000000a00)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000000a40)={0x40, 0x19, 0x2, "59d1"}, &(0x7f0000000a80)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000ac0)={0x40, 0x1c, 0x1, 0xe}, &(0x7f0000000b00)={0x40, 0x1e, 0x1, 0x48}, &(0x7f0000000b40)={0x40, 0x21, 0x1}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) bind$alg(0xffffffffffffffff, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0xfffffd85) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000003f0009000000000000080000030000000400000010000180"], 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x4) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r6, 0x1, 0x2b, 0x0, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x3, 0x6, @local}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=@getchain={0x2c, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, 0x0, {0x7, 0xa}, {0xd, 0xfff3}, {0x8}}, [{0x8, 0xb, 0x10000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) r9 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r9, 0x707, &(0x7f00000000c0)={&(0x7f0000000000)=[{0xd0, 0x0, 0x0, 0x0}, {0x1000, 0x2000, 0x0, 0x0}], 0x2}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7ab, &(0x7f0000000000)={&(0x7f0000000540)={{@host=0x10}, {@host=0x10, 0x800}, 0x400, "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"}, 0x418, 0x1}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r2, 0x7ac, &(0x7f0000000100)={0x0, 0x1804, 0x40}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=@newlink={0x134, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_AF_SPEC={0x114, 0x1a, 0x0, 0x1, [@AF_INET={0x40, 0x2, 0x0, 0x1, {0x3c, 0x20, 0x0, 0x1, [{0x8, 0x21}, {0x8, 0x18}, {0x8, 0x3}, {0x8, 0x9}, {0x8, 0xc, 0x0, 0x0, 0x64}, {0x8, 0x12}, {0x8, 0x1f}]}}, @AF_INET6={0x6c, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private1}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @private2}, @IFLA_INET6_ADDR_GEN_MODE={0x5}]}, @AF_BRIDGE={0x4}, @AF_MPLS={0x4}, @AF_INET6={0x2c, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x0, 0x8, 0x1}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0xfffffe85}, @AF_BRIDGE={0x4}]}]}, 0x134}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x3, 0x4, 0x4, 0x1, 0x8, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x19, 0x1000002}, 0x50) 6.083015273s ago: executing program 1 (id=3979): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='bbr', 0x3) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000001b00)="a6", 0x1001, 0x20000045, &(0x7f0000000140)={0xa, 0x4001, 0xfffc, @loopback, 0xfffffffd}, 0x1c) 6.01832886s ago: executing program 1 (id=3980): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000880)={0x0, 0x4, 0x30}, &(0x7f00000008c0)=0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000000c0)=0xa0000) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)=ANY=[@ANYBLOB="2011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(r4, &(0x7f00000006c0)={0x2c, &(0x7f0000000280)={0x40, 0x30, 0x4c, {0x4c, 0x23, "c3cef41ffc6475bf989f6dbdddcba33375680ed6b54c79a6af22dc92267f20441623db59b7721e2018233b30924952a7f60086e1dfae67d5597a0dfbf06e5565786e7c30b4dc3c91482b"}}, &(0x7f0000000440)={0x0, 0x3, 0xde, @string={0xde, 0x3, "d5c228a4912a9f2cd21d7a418a3f8e84c3bc31a2b8423e052952b534130fabc4efaa9c92150462b3ba88bec5f12bb28bb7cc5bb26d2ab581d50b6d5b119de756493b7aafde0acce0365ed91f619183de918bb82d54df1a87f432ecd957e2127a5c3de80f8ecddd229959d0f05556bae7f0724553566df7324f1396477f5b351e04fe6b985044f24e2fd7304d5573927fea5a8ffb835345bf5cf5bc19d552ef7c84e7d6adca277f676d555b10175146564e727c73d7de5c629a7eb51b830c79159c5951ca75c79b631b6273104a5759c3c7fc645d606dbbcbcea64601"}}, &(0x7f0000000600)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000640)={0x20, 0x29, 0xf, {0xf, 0x29, 0xbd, 0x0, 0x5, 0x2a, "77c1bb4c", "75e5d2d4"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x0, 0x97, 0x4, 0x9, 0x8, 0x7fff}}}, &(0x7f0000000b80)={0x84, &(0x7f0000000740)={0x0, 0xe, 0x38, "306c3657dda398ea1d0546a87bc3f8629d281ae746f0caca6152516b0910a84d430d99e51601bca1a4d482102149eed542048fe7495fccbf"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0xa}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000880)=ANY=[@ANYBLOB="200008000000000240000f1d0000"], &(0x7f00000008c0)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000900)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000940)={0x40, 0xb, 0x2, "f47b"}, &(0x7f0000000980)={0x40, 0xf, 0x2, 0x2}, &(0x7f00000009c0)={0x40, 0x13, 0x6}, &(0x7f0000000a00)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000000a40)={0x40, 0x19, 0x2, "59d1"}, &(0x7f0000000a80)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000ac0)={0x40, 0x1c, 0x1, 0xe}, &(0x7f0000000b00)={0x40, 0x1e, 0x1, 0x48}, &(0x7f0000000b40)={0x40, 0x21, 0x1}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) bind$alg(0xffffffffffffffff, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0xfffffd85) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000003f0009000000000000080000030000000400000010000180"], 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x4) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r6, 0x1, 0x2b, 0x0, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x3, 0x6, @local}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=@getchain={0x2c, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, 0x0, {0x7, 0xa}, {0xd, 0xfff3}, {0x8}}, [{0x8, 0xb, 0x10000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) r9 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r9, 0x707, &(0x7f00000000c0)={&(0x7f0000000000)=[{0xd0, 0x0, 0x0, 0x0}, {0x1000, 0x2000, 0x0, 0x0}], 0x2}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7ab, &(0x7f0000000000)={&(0x7f0000000540)={{@host=0x10}, {@host=0x10, 0x800}, 0x400, "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"}, 0x418, 0x1}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r2, 0x7ac, &(0x7f0000000100)={0x0, 0x1804, 0x40}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=@newlink={0x134, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_AF_SPEC={0x114, 0x1a, 0x0, 0x1, [@AF_INET={0x40, 0x2, 0x0, 0x1, {0x3c, 0x20, 0x0, 0x1, [{0x8, 0x21}, {0x8, 0x18}, {0x8, 0x3}, {0x8, 0x9}, {0x8, 0xc, 0x0, 0x0, 0x64}, {0x8, 0x12}, {0x8, 0x1f}]}}, @AF_INET6={0x6c, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private1}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @private2}, @IFLA_INET6_ADDR_GEN_MODE={0x5}]}, @AF_BRIDGE={0x4}, @AF_MPLS={0x4}, @AF_INET6={0x2c, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x0, 0x8, 0x1}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0xfffffe85}, @AF_BRIDGE={0x4}]}]}, 0x134}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x3, 0x4, 0x4, 0x1, 0x8, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x19, 0x1000002}, 0x50) 4.285884887s ago: executing program 1 (id=3989): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@gettaction={0x14, 0x32, 0x2, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x80000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x5c, 0x10, 0x401, 0x170bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38099}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x1ff}]}}}, @IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.177437349s ago: executing program 8 (id=3991): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x41, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x1b) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000280)=ANY=[], 0x28) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42792000) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)='\x00', 0x1}, {0x0}], 0x2) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x68e, 0x20002) write(r0, &(0x7f0000000340)="04f4cc5a525043e2129d7a492d6819bcb0f8ac5dbcc8f4d05322fac2150e188e87076c1a3bf918835f13626bb0ec5fceb0b9a991d25d6067589dfcb55aac90472aee8cab85000da43397c00f45b09195e5ff79287524d626e39d8a30833028dadf62c9cf7a3e6a98d8a91551c47394611438d056796dcb4c6fea4c3d932f51eaf67a592c2ce1a801cef2e0c3cec19767a2b055a7c3d8524e84a2", 0x9a) ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_TIMESTAMP_INFO(r4, 0xc0106440, &(0x7f0000000180)={0x2, 0x6, &(0x7f0000000140)}) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r5, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006) r6 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) preadv(r6, &(0x7f0000001e80)=[{&(0x7f0000001c80)=""/236, 0xec}], 0x1, 0x5, 0x6) landlock_restrict_self(0xffffffffffffffff, 0xc) r7 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r7, &(0x7f0000000080)="4c00000012001f15b9409b8400feffffffffffff000000000017030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94acc000000000000000000000051d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6000000000200600fe8000000000004000000000000000aafe8000000000000000000000000000aa00004001", @ANYRES32=r0, @ANYRES32=0x41424344, @ANYRESOCT=r0], 0x0) 4.104496428s ago: executing program 1 (id=3992): syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1a010c005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99080805", @ANYRES16], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/238, 0xee}, {0x0}], 0x2) 3.955041487s ago: executing program 5 (id=3995): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000680), 0x200202, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x9, 0x0, 0x7ffffdbd}]}) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000200)={0x80, 0x0, r1}) r3 = shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x1000) shmdt(r3) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_emit_ethernet(0x95, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f00000001c0)={0x1, 0x1, [0xf74, 0x4e0, 0xe4b, 0xa20]}) syz_io_uring_setup(0x40617c, &(0x7f0000000d00)={0x0, 0x137c, 0x2, 0x1, 0x370}, &(0x7f0000000340), &(0x7f0000000380), &(0x7f0000000d80)) syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000) munlockall() r4 = fsopen(&(0x7f00000000c0)='romfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8br1}) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f00000004c0)={r5, 0x80000}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x109181, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x56, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r7, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x3, 0xffe00002}, {0x16, 0x0, 0x40}]}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaa"], 0x0) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r7, 0x4068aea3, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(r0, 0xc0106450, &(0x7f0000000180)={r5, 0x1, 0x2}) r9 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e00100905"], 0x0) syz_usb_control_io(r9, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_GETVERSION(r10, 0xc0145b0d, &(0x7f0000000040)) ppoll(&(0x7f0000000080)=[{r10, 0x1206}], 0x1, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) 2.920124833s ago: executing program 9 (id=4002): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000f14010000008000fededf250900450069"], 0x1c}, 0x1, 0x0, 0x0, 0x4004015}, 0x0) socket(0xb, 0x2, 0x0) eventfd2(0xe5c, 0x80000) 2.807360173s ago: executing program 9 (id=4003): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x68, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_ID={0x14, 0x3, "864c1c6d30413055ba57886923be69fd"}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) 2.695774988s ago: executing program 9 (id=4004): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0400f9f407000904018002200000000000000000000800010000000000", 0x24) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x20000040}, 0x4008811) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) userfaultfd(0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8000000) writev(0xffffffffffffffff, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0xa6f81, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x24000085) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={0x0, r2, r2}, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000180)=0x6f) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000001c0)=0x2) read$FUSE(r3, &(0x7f00000063c0)={0x2020}, 0xfffffffffffffe46) r4 = fsopen(&(0x7f00000003c0)='ubifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000400)='{\x00', &(0x7f0000000440)='\x00', 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000020a010200000000000000000000000034000000140a0101000900010073797a300000000008000340000000000c000640000000100000000020000000000a030041744d52b5466322020000000900010073797a3000000000200000000e0a010300000000000000000200eca800000900010073797a3000000000140000001100010000000000000000000000000ae5c3522edef7886f8bcd7d5696b20ac7354ae9b54b5a83ad98325105d792a558a9cea00a577dc7f3"], 0xb0}}, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) 2.378282638s ago: executing program 7 (id=4005): sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000019140)=ANY=[@ANYBLOB="1201000000000040ac0538024000010203010902240601010000000904000000030102"], 0x0) 2.259785905s ago: executing program 5 (id=4006): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000280)=ANY=[], 0x28) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42792000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)='\x00', 0x1}, {0x0}], 0x2) ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_TIMESTAMP_INFO(0xffffffffffffffff, 0xc0106440, &(0x7f0000000180)={0x2, 0x6, &(0x7f0000000140)}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) preadv(r2, &(0x7f0000001e80)=[{&(0x7f0000001c80)=""/236, 0xec}], 0x1, 0x5, 0x6) landlock_restrict_self(0xffffffffffffffff, 0xc) socket$inet6(0x10, 0x2, 0x4) 1.751008848s ago: executing program 7 (id=4007): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xd0, &(0x7f0000000240)=ANY=[]) 1.341173411s ago: executing program 9 (id=4008): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='0', 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) 1.31435272s ago: executing program 5 (id=4009): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getcwd(0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000007c0)={0x1, 0x2, 0x1, 0x0, 0x8}) syz_extract_tcp_res(&(0x7f0000000000), 0x4, 0xfffffffe) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = fsopen(0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x8) fallocate(r2, 0x0, 0x1000000, 0x3) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8000003d) r4 = syz_io_uring_setup(0xed9, &(0x7f0000000340)={0x0, 0x2090, 0x2, 0x800008, 0xfffffffd}, &(0x7f0000000040), &(0x7f0000000240), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r4, 0x11, &(0x7f0000000500)='n', 0x1) write(r1, &(0x7f0000000240)="1c0000001a009b8a140000003b9b301f0000000000", 0x15) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x13, 0x0, 0x2) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000808, 0x0, 0x0) r6 = syz_io_uring_setup(0xf01, 0x0, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0, 0x0) syz_io_uring_submit(r7, r8, 0x0, 0x0) io_uring_enter(r6, 0x2000, 0xfffffffd, 0x0, 0x0, 0x0) ioctl$PPPIOCSCOMPRESS(r3, 0x4010744d) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f00000001c0)) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x2401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd0}}, 0x0) 1.261675477s ago: executing program 9 (id=4010): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x66, 0x0, 0x0) syz_open_dev$I2C(0x0, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r6, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r6, 0x5b) read$watch_queue(r5, &(0x7f0000000000)=""/1, 0x1) keyctl$revoke(0x3, r4) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_io_uring_setup(0x1fc7, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x3b1}, 0x0, 0x0, &(0x7f0000000000)) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r8, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) write$uinput_user_dev(r6, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x40, [0x7ffd, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0x2, 0xe661, 0x4, 0x7, 0xdf, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x200, 0x1, 0x7, 0x1fe, 0x3e, 0x2, 0x6, 0x6, 0xc, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000009, 0x9, 0x8000012f, 0x8004, 0x1, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x8, 0x6c7, 0x9, 0xfffffffc, 0x8, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x30e, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x6, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f34, 0xd, 0x100004e0, 0x2, 0x4, 0xb, 0x8001, 0x9, 0x8, 0x9, 0x3b, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0xffffffff, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0x7f, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0xfffffffe, 0x5, 0x9, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x80000086, 0x3, 0x303c, 0xbe7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x0, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x6, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x8b, 0xfffffff9, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x80009, 0xbb33, 0x80000000, 0xb, 0xfffffff3, 0x93a, 0x6, 0x1000006, 0xfffffffe, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7ff, 0x2, 0x5, 0x1, 0x2, 0x14d, 0x60a7, 0x16, 0x96, 0xfffffffe, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0xf, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd9, 0x200, 0xffff3441, 0x1]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x3f00000000000000) 1.160686996s ago: executing program 5 (id=4011): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x41, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x1b) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000280)=ANY=[], 0x28) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42792000) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)='\x00', 0x1}, {0x0}], 0x2) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x68e, 0x20002) write(r0, &(0x7f0000000340)="04f4cc5a525043e2129d7a492d6819bcb0f8ac5dbcc8f4d05322fac2150e188e87076c1a3bf918835f13626bb0ec5fceb0b9a991d25d6067589dfcb55aac90472aee8cab85000da43397c00f45b09195e5ff79287524d626e39d8a30833028dadf62c9cf7a3e6a98d8a91551c47394611438d056796dcb4c6fea4c3d932f51eaf67a592c2ce1a801cef2e0c3cec19767a2b055a7c3d8524e84a2", 0x9a) ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_TIMESTAMP_INFO(r4, 0xc0106440, &(0x7f0000000180)={0x2, 0x6, &(0x7f0000000140)}) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r5, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006) r6 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) preadv(r6, &(0x7f0000001e80)=[{&(0x7f0000001c80)=""/236, 0xec}], 0x1, 0x5, 0x6) landlock_restrict_self(0xffffffffffffffff, 0xc) r7 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r7, &(0x7f0000000080)="4c00000012001f15b9409b8400feffffffffffff000000000017030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94acc000000000000000000000051d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6000000000200600fe8000000000004000000000000000aafe8000000000000000000000000000aa00004001", @ANYRES32=r0, @ANYRES32=0x41424344, @ANYRESOCT=r0], 0x0) 1.003591026s ago: executing program 7 (id=4012): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000a00)={'veth0_virt_wifi\x00', &(0x7f00000009c0)=@ethtool_gstrings={0x1b, 0x4}}) 911.864261ms ago: executing program 1 (id=4013): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x1, 0x0, 0x0, 0x0, 0x20, 0x56e, 0x11c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x18, "", [{{0x9, 0x4, 0x0, 0x0, 0xff, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0xf, 0xf3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000180)={0x20, 0xa, 0x6, {0x6, 0xe, "110041c9"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 386.42619ms ago: executing program 7 (id=4014): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x4}, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x14, 0x3, 0x3, 0x3, 0x70bd2d, 0x25dfdbfb, {0xa, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x800) 344.071943ms ago: executing program 7 (id=4015): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000001580)=""/4119, 0x1017}, {&(0x7f00000001c0)=""/227, 0xe3}], 0x2) 262.952924ms ago: executing program 7 (id=4016): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000680), 0x200202, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x9, 0x0, 0x7ffffdbd}]}) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000200)={0x80, 0x0, r1}) r3 = shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x1000) shmdt(r3) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000001d040000000000007f000000000000005504000017ffff162500000017ffff17ce040000000000007b0a00fe000000002d04000000000000d6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d8582755a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fcd7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e22ce67f1231bd236ed200073826593c4e1a0f50a74bb4850486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cabdfe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f8089322d84ac523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f6260a483632a2ab447f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe91c921ac1476027772c87d172ab29967e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f522df408d9818b6cc400098abb869921911480a876fbba698801937e8b4264eb6f5137bdaa075f1488d22230592a79000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb520400000000000000c3ae49f88c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399fa5ee0b41e14a6fe6894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014fa841061e63d40f4e536314beda5738fee012365f963b2a85e7d8075c333475b9f0284405e30700000041285fbe0bdd37220e31d4731614a50c16c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe8c350a5c554a387de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c7963c2ba910969f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed90000800847683c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d68ad9fa2b2528798df1c36fc438d9c98f168490b41e158bb2e2d8ed19d44b9cce67c79f9f7bfae7ebe09e441745c592ce69c522b5136be09ed1b97ea3d5b317508df23e92c56fc2eb74d27d3861d91745b8fb9f6cc20e9f8b174000c62c4a2b212332a073fc5d0be7347e41454cb27e081c43e92ae7f9f046600db85d945a4666b588629ce0809d5c8506308688db21ec04d365497bf902126ca2ec1589f1423ae3a655121"], &(0x7f00000001c0)='GPL\x00'}, 0x48) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_emit_ethernet(0x95, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f00000001c0)={0x1, 0x1, [0xf74, 0x4e0, 0xe4b, 0xa20]}) syz_io_uring_setup(0x40617c, &(0x7f0000000d00)={0x0, 0x137c, 0x2, 0x1, 0x370}, &(0x7f0000000340), &(0x7f0000000380), &(0x7f0000000d80)) syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000) munlockall() r4 = fsopen(&(0x7f00000000c0)='romfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd6000000000002e9300000c00018008000100", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) 0s ago: executing program 5 (id=4018): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x66, 0x0, 0x0) syz_open_dev$I2C(0x0, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r6, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r6, 0x5b) read$watch_queue(r5, &(0x7f0000000000)=""/1, 0x1) keyctl$revoke(0x3, r4) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_io_uring_setup(0x1fc7, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x3b1}, 0x0, 0x0, &(0x7f0000000000)) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r8, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) write$uinput_user_dev(r6, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x40, [0x7ffd, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0x2, 0xe661, 0x4, 0x7, 0xdf, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x200, 0x1, 0x7, 0x1fe, 0x3e, 0x2, 0x6, 0x6, 0xc, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000009, 0x9, 0x8000012f, 0x8004, 0x1, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x8, 0x6c7, 0x9, 0xfffffffc, 0x8, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x30e, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x6, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f34, 0xd, 0x100004e0, 0x2, 0x4, 0xb, 0x8001, 0x9, 0x8, 0x9, 0x3b, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0xffffffff, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0x7f, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0xfffffffe, 0x5, 0x9, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x80000086, 0x3, 0x303c, 0xbe7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x0, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x6, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x8b, 0xfffffff9, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x80009, 0xbb33, 0x80000000, 0xb, 0xfffffff3, 0x93a, 0x6, 0x1000006, 0xfffffffe, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7ff, 0x2, 0x5, 0x1, 0x2, 0x14d, 0x60a7, 0x16, 0x96, 0xfffffffe, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0xf, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd9, 0x200, 0xffff3441, 0x1]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x3f00000000000000) kernel console output (not intermixed with test programs): process `syz.5.3453'. [ 1386.361347][ T9490] usb 2-1: Using ep0 maxpacket: 32 [ 1386.364275][ T9490] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1386.371882][ T9490] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 1386.371946][ T9490] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1386.372014][ T9490] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1386.382768][ T9490] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1386.382850][ T9490] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1386.382904][ T9490] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1386.383068][ T9490] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1386.477170][ T9490] usb 2-1: config 0 descriptor?? [ 1386.656207][T16822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1386.656433][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1386.748348][ T9490] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1387.031231][T19660] trusted_key: encrypted_key: insufficient parameters specified [ 1387.205805][ T5625] usb 2-1: USB disconnect, device number 2 [ 1387.218829][T19662] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3456'. [ 1387.267249][ T5625] usblp0: removed [ 1387.281201][T19667] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3456'. [ 1387.289118][T19667] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3456'. [ 1387.303879][ T6110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1388.077105][T19673] tipc: Enabling of bearer rejected, already enabled [ 1388.117503][ T5625] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 1388.291113][ T5625] usb 6-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 1388.309827][ T5625] usb 6-1: config 0 has an invalid interface number: 120 but max is 0 [ 1388.309923][ T5625] usb 6-1: config 0 has no interface number 0 [ 1388.310085][ T5625] usb 6-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1388.310153][ T5625] usb 6-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1388.310220][ T5625] usb 6-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1388.310320][ T5625] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1388.375026][ T5625] usb 6-1: config 0 descriptor?? [ 1388.401092][T19673] tipc: Enabling of bearer rejected, failed to enable media [ 1388.464782][ T5625] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.120/input/input99 [ 1389.653352][T19675] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1389.764368][ T9490] usb 6-1: USB disconnect, device number 124 [ 1390.165021][T19690] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3462'. [ 1390.165070][T19690] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3462'. [ 1391.260783][T19705] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3459'. [ 1391.274933][T19704] net_ratelimit: 2 callbacks suppressed [ 1391.275000][T19704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1391.337773][T19704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1391.350511][T19704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1391.360873][T19704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1391.370872][T19704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1391.380604][T19704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1391.436776][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1391.437164][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1391.437341][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1391.453619][T19706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1391.454105][T19706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1391.465484][T19704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1392.759820][T19711] netlink: 'syz.8.3466': attribute type 4 has an invalid length. [ 1393.822502][T19719] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3465'. [ 1395.843609][T19722] netlink: 108 bytes leftover after parsing attributes in process `syz.8.3468'. [ 1396.666010][T19703] net_ratelimit: 75 callbacks suppressed [ 1396.666110][T19703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1396.802872][T19728] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1396.837661][T19703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1397.043601][T19731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1397.054280][T19731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1397.476843][ T9490] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1397.534936][ T6603] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1397.537837][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1397.619262][ T31] audit: type=1800 audit(1787767240.864:3800): pid=19746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3475" name="nullb0" dev="devtmpfs" ino=3834 res=0 errno=0 [ 1397.640940][ T9490] usb 2-1: Using ep0 maxpacket: 8 [ 1397.647490][ T9490] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1397.677069][ T9490] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1397.677144][ T9490] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1397.726496][ T9490] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1397.734880][ T9490] usb 2-1: Product: syz [ 1397.739193][ T9490] usb 2-1: Manufacturer: syz [ 1397.739231][ T9490] usb 2-1: SerialNumber: syz [ 1398.171326][T16823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1398.177029][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1398.276016][T19754] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1398.329964][T19753] veth0_macvtap: Caught tx_queue_len zero misconfig [ 1399.275484][ T9490] usb 2-1: USB disconnect, device number 3 [ 1399.463586][T19465] udevd[19465]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1401.314615][ T31] audit: type=1800 audit(1787767244.524:3801): pid=19774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3480" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1401.469929][T19787] program syz.5.3482 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1401.551122][T19786] veth0: Caught tx_queue_len zero misconfig [ 1402.568814][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1402.650835][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1403.185469][ T5625] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 1403.295521][T16823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1403.296184][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1403.298652][T16823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1403.299106][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1403.395220][ T5625] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1403.430932][ T5625] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 1403.430987][ T5625] usb 6-1: config 0 has no interface number 0 [ 1403.431109][ T5625] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1403.507114][ T5625] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1403.507173][ T5625] usb 6-1: Product: syz [ 1403.507191][ T5625] usb 6-1: Manufacturer: syz [ 1403.507207][ T5625] usb 6-1: SerialNumber: syz [ 1403.581142][ T5625] usb 6-1: config 0 descriptor?? [ 1403.613188][ T5625] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 1404.132685][T19821] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3488'. [ 1404.438389][T19825] usb 8-1: USB disconnect, device number 30 [ 1405.043207][ T31] audit: type=1800 audit(1787767248.294:3802): pid=19832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3490" name="nullb0" dev="devtmpfs" ino=3834 res=0 errno=0 [ 1405.818647][T19842] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 1405.960994][ C0] usb 6-1: yurex_control_callback - control failed: -2 [ 1405.993380][ T9490] usb 6-1: USB disconnect, device number 125 [ 1406.032617][ T9490] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 1406.082160][ T5625] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 1406.264417][ T5625] usb 9-1: Using ep0 maxpacket: 16 [ 1406.282040][ T5625] usb 9-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1406.318876][ T5625] usb 9-1: config 0 has an invalid interface number: 34 but max is 0 [ 1406.318933][ T5625] usb 9-1: config 0 has no interface number 0 [ 1406.319038][ T5625] usb 9-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1406.319131][ T5625] usb 9-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1406.399095][ T5625] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1406.399165][ T5625] usb 9-1: Product: syz [ 1406.399228][ T5625] usb 9-1: Manufacturer: syz [ 1406.399295][ T5625] usb 9-1: SerialNumber: syz [ 1406.413387][ T5625] usb 9-1: config 0 descriptor?? [ 1406.431261][T19842] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1406.431342][T19842] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1406.658131][T19842] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1406.669824][T19842] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1406.912856][ T5625] asix 9-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1406.913448][ T5625] asix 9-1:0.34: probe with driver asix failed with error -61 [ 1407.471796][T19854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1407.482972][T19854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1408.489809][T19863] binder: BINDER_SET_CONTEXT_MGR already set [ 1408.489835][T19863] binder: 19862:19863 ioctl 4018620d 200000000100 returned -16 [ 1408.527509][T19863] binder: BINDER_SET_CONTEXT_MGR already set [ 1408.527563][T19863] binder: 19862:19863 ioctl 4018620d 2000000002c0 returned -16 [ 1408.635211][T19864] .`: (slave netdevsim1): Releasing backup interface [ 1408.665899][T19864] bond1: (slave geneve2): Releasing active interface [ 1408.708603][T19864] bond2: (slave gretap1): Releasing active interface [ 1408.769169][T19864] bond3: (slave veth3): Releasing active interface [ 1408.769230][T19864] bond3: (slave veth3): the permanent HWaddr of slave - 12:1e:f3:3c:d2:3c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1408.810450][T19864] bond3: (slave veth5): Releasing active interface [ 1408.827459][T16109] usb 9-1: USB disconnect, device number 34 [ 1408.919223][T19864] bond4: (slave bond0): Releasing active interface [ 1409.004545][T19864] bond0: (slave geneve3): Releasing active interface [ 1409.054530][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1409.055051][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1409.056455][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1409.056989][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1409.164452][T19864] bond5: (slave gretap3): Releasing active interface [ 1409.188194][T19870] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3500'. [ 1409.218167][T19864] batman_adv: batadv0: Removing interface: gretap4 [ 1409.269978][T19864] bond6: (slave erspan1): Releasing active interface [ 1409.331240][T19864] bond8: (slave bridge1): Removing an active aggregator [ 1409.346267][T19864] bond8: (slave bridge1): Releasing backup interface [ 1409.375388][T19864] bridge1: left promiscuous mode [ 1409.399160][T19864] bridge1: left allmulticast mode [ 1409.478286][T16109] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1409.889611][ T5625] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1410.007670][T19881] [U]  [ 1411.217170][T19894] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1411.217288][T19894] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 1411.871534][T19898] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3505'. [ 1412.177073][ T9490] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1412.367091][ T9490] usb 2-1: Using ep0 maxpacket: 8 [ 1412.372916][ T9490] usb 2-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 1412.394520][ T9490] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1412.394575][ T9490] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1412.394649][ T9490] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1412.448005][ T9490] usb 2-1: config 0 descriptor?? [ 1412.679135][T19898] xt_HMARK: proto mask must be zero with L3 mode [ 1412.959164][ T9490] input: HID 04f2:1236 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:04F2:1236.0039/input/input100 [ 1413.163308][ T9490] chicony 0003:04F2:1236.0039: input,hidraw0: USB HID v0.05 Joystick [HID 04f2:1236] on usb-dummy_hcd.1-1/input0 [ 1413.206710][ T9490] usb 2-1: USB disconnect, device number 4 [ 1413.640972][T19910] fido_id[19910]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1414.167176][T16821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1414.167391][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1414.610779][T19925] bridge0: entered promiscuous mode [ 1414.610892][T19925] bridge0: entered allmulticast mode [ 1414.630412][T19919] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3509'. [ 1414.630483][T19919] tipc: Enabling of bearer rejected, media not registered [ 1414.810949][ T158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1414.811592][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1415.010605][ T31] audit: type=1326 audit(1787767258.254:3803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19923 comm="syz.8.3511" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20a999e0d9 code=0x7ffc0000 [ 1415.061722][ T31] audit: type=1326 audit(1787767258.304:3804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19923 comm="syz.8.3511" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20a999e0d9 code=0x7ffc0000 [ 1415.199580][ T31] audit: type=1326 audit(1787767258.444:3805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19923 comm="syz.8.3511" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f20a999e0d9 code=0x7ffc0000 [ 1415.260965][ T31] audit: type=1326 audit(1787767258.504:3806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19923 comm="syz.8.3511" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20a999e0d9 code=0x7ffc0000 [ 1415.261067][ T31] audit: type=1326 audit(1787767258.504:3807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19923 comm="syz.8.3511" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f20a999e0d9 code=0x7ffc0000 [ 1415.324358][T19933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1415.324735][T19933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1415.551571][ T31] audit: type=1326 audit(1787767258.804:3808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19923 comm="syz.8.3511" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20a999e0d9 code=0x7ffc0000 [ 1415.584076][ T31] audit: type=1326 audit(1787767258.834:3809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19923 comm="syz.8.3511" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20a999e0d9 code=0x7ffc0000 [ 1416.301470][T19937] [U]  [ 1416.767302][T19939] syzkaller1: entered promiscuous mode [ 1416.773053][T19939] syzkaller1: entered allmulticast mode [ 1416.798442][T19939] netlink: 'syz.7.3514': attribute type 1 has an invalid length. [ 1417.126932][ T9490] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1417.264630][T19956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1417.279572][T19956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1417.300029][ T9490] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1417.300111][ T9490] usb 2-1: New USB device found, idVendor=05ac, idProduct=0272, bcdDevice= 0.40 [ 1417.323159][ T9490] usb 2-1: config 1 interface 0 altsetting 35 endpoint 0x81 has an invalid bInterval 21, changing to 8 [ 1417.336435][ T9490] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1417.355763][T19958] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1417.383541][ T9490] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1417.383585][ T9490] usb 2-1: Product: syz [ 1417.383636][ T9490] usb 2-1: Manufacturer: syz [ 1417.383657][ T9490] usb 2-1: SerialNumber: syz [ 1417.503669][T19958] netlink: 'syz.8.3519': attribute type 10 has an invalid length. [ 1417.556923][T19958] team0 (unregistering): Port device team_slave_0 removed [ 1417.596585][T19958] team0 (unregistering): Port device team_slave_1 removed [ 1417.688417][ T9490] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input101 [ 1417.712401][ T4970] bcm5974 2-1:1.0: could not read from device [ 1417.735672][ T4970] bcm5974 2-1:1.0: could not read from device [ 1417.762557][ T4970] bcm5974 2-1:1.0: could not read from device [ 1417.770455][ T9490] usb 2-1: USB disconnect, device number 5 [ 1417.797387][ T4970] bcm5974 2-1:1.0: could not read from device [ 1418.497367][T19965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3520'. [ 1418.548653][T19965] ip6tnl3: entered allmulticast mode [ 1419.744457][T19977] netlink: 'syz.5.3522': attribute type 4 has an invalid length. [ 1419.937153][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1419.938038][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1420.334343][T19983] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1420.386525][T19983] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1420.403814][T19983] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1420.453431][T19983] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1420.463344][T19983] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1420.574254][ T6110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1420.574727][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1420.620000][T15190] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1420.631806][T15190] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1420.642225][T15190] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1420.660214][T15190] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1420.671618][T15190] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1421.275395][T19989] netlink: 'syz.7.3525': attribute type 11 has an invalid length. [ 1421.981860][T19981] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1422.005240][T19995] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3525'. [ 1422.631720][T20001] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3526'. [ 1422.820288][T15190] Bluetooth: hci2: command tx timeout [ 1423.129545][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.129625][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.416028][T19986] bridge0: port 1(bridge_slave_0) entered blocking state [ 1423.418501][T19986] bridge0: port 1(bridge_slave_0) entered disabled state [ 1423.420519][T19986] bridge_slave_0: entered allmulticast mode [ 1423.460846][T19986] bridge_slave_0: entered promiscuous mode [ 1423.488451][T19986] bridge0: port 2(bridge_slave_1) entered blocking state [ 1423.510948][T19986] bridge0: port 2(bridge_slave_1) entered disabled state [ 1423.511432][T19986] bridge_slave_1: entered allmulticast mode [ 1423.526097][T19986] bridge_slave_1: entered promiscuous mode [ 1423.692683][T19986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1423.790281][T19986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1423.972801][T19986] team0: Port device team_slave_0 added [ 1424.048266][T19986] team0: Port device team_slave_1 added [ 1424.186726][ T7419] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1424.194857][T19986] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1424.194890][T19986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1424.194943][T19986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1424.291335][T19986] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1424.291393][T19986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1424.291441][T19986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1424.391696][ T7419] usb 2-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 1424.421897][ T7419] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1424.624225][T19986] hsr_slave_0: entered promiscuous mode [ 1424.740981][T19986] hsr_slave_1: entered promiscuous mode [ 1424.743085][T19986] debugfs: 'hsr0' already exists in 'hsr' [ 1424.743147][T19986] Cannot create hsr debugfs directory [ 1424.900263][T15190] Bluetooth: hci2: command tx timeout [ 1424.940285][ T7419] wacom 0003:056A:033B.003A: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 1424.956801][ T7419] wacom 0003:056A:033B.003A: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.1-1/input0 [ 1424.972969][ T7419] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/0003:056A:033B.003A/input/input102 [ 1425.170031][T16109] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 1425.379398][T16109] usb 9-1: Using ep0 maxpacket: 32 [ 1425.409623][T16109] usb 9-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1425.470430][T16109] usb 9-1: config 0 has an invalid interface number: 196 but max is 0 [ 1425.470486][T16109] usb 9-1: config 0 has no interface number 0 [ 1425.470569][T16109] usb 9-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1425.470655][T16109] usb 9-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1425.470735][T16109] usb 9-1: config 0 interface 196 has no altsetting 0 [ 1425.606048][T16109] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1425.606096][T16109] usb 9-1: Product: syz [ 1425.606130][T16109] usb 9-1: Manufacturer: syz [ 1425.606152][T16109] usb 9-1: SerialNumber: syz [ 1425.613504][T16109] usb 9-1: config 0 descriptor?? [ 1425.642344][T20024] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1425.672562][ T7419] usb 2-1: USB disconnect, device number 6 [ 1425.710956][T16822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1425.711544][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1425.888413][T20027] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3531'. [ 1425.946164][T16109] ipheth 9-1:0.196: Unable to find endpoints [ 1425.955325][T16109] usb 9-1: USB disconnect, device number 35 [ 1426.037534][ T7422] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 1426.140889][T19986] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1426.170001][T19986] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1426.173427][T19986] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1426.187407][T19986] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1426.190013][T19986] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1426.209020][T19986] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1426.223253][T19986] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1426.236476][T19986] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1426.247381][ T7422] usb 6-1: Using ep0 maxpacket: 32 [ 1426.277344][ T7422] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1426.335299][ T7422] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1426.343193][ T7422] usb 6-1: config 0 descriptor?? [ 1426.368976][ T158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1426.369181][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1426.548232][T19986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1426.573126][ T7422] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1426.615622][ T7422] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1426.630750][ T7422] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1426.630837][ T7422] usb 6-1: media controller created [ 1426.667812][T19986] 8021q: adding VLAN 0 to HW filter on device team0 [ 1426.715673][ T7422] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1426.739853][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 1426.739962][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1426.767058][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 1426.767189][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1426.791413][T20033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1426.792559][T20033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1426.841172][T20033] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3532'. [ 1426.899871][T20033] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3532'. [ 1426.899954][T20033] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3532'. [ 1426.980122][T15190] Bluetooth: hci2: command tx timeout [ 1426.988593][ T7422] az6027: usb out operation failed. (-71) [ 1427.004283][ T7422] az6027: usb out operation failed. (-71) [ 1427.004342][ T7422] stb0899_attach: Driver disabled by Kconfig [ 1427.004372][ T7422] az6027: no front-end attached [ 1427.004372][ T7422] [ 1427.021427][ T7422] az6027: usb out operation failed. (-71) [ 1427.021487][ T7422] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1427.092801][ T7422] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input105 [ 1427.129387][T19986] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1427.188526][ T7422] dvb-usb: schedule remote query interval to 400 msecs. [ 1427.188590][ T7422] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1427.215038][T19986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1427.215951][ T7422] usb 6-1: USB disconnect, device number 126 [ 1427.415370][T19986] veth0_vlan: entered promiscuous mode [ 1427.478687][T19986] veth1_vlan: entered promiscuous mode [ 1427.566912][ T31] audit: type=1326 audit(1787767270.814:3810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20047 comm="syz.1.3535" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57cf59e0d9 code=0x7ffc0000 [ 1427.566994][ T31] audit: type=1326 audit(1787767270.814:3811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20047 comm="syz.1.3535" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57cf59e0d9 code=0x7ffc0000 [ 1427.568962][ T31] audit: type=1326 audit(1787767270.814:3812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20047 comm="syz.1.3535" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57cf59e0d9 code=0x7ffc0000 [ 1427.569099][ T31] audit: type=1326 audit(1787767270.814:3813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20047 comm="syz.1.3535" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57cf59e0d9 code=0x7ffc0000 [ 1427.573405][ T31] audit: type=1326 audit(1787767270.814:3814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20047 comm="syz.1.3535" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f57cf59e0d9 code=0x7ffc0000 [ 1427.573533][ T31] audit: type=1326 audit(1787767270.814:3815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20047 comm="syz.1.3535" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57cf59e0d9 code=0x7ffc0000 [ 1427.592181][ T31] audit: type=1326 audit(1787767270.834:3816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20047 comm="syz.1.3535" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57cf59e0d9 code=0x7ffc0000 [ 1427.592231][ T31] audit: type=1326 audit(1787767270.834:3817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20047 comm="syz.1.3535" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57cf59e0d9 code=0x7ffc0000 [ 1427.674198][ T31] audit: type=1326 audit(1787767270.924:3818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20047 comm="syz.1.3535" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57cf59e0d9 code=0x7ffc0000 [ 1427.674287][ T31] audit: type=1326 audit(1787767270.924:3819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20047 comm="syz.1.3535" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f57cf59de42 code=0x7ffc0000 [ 1427.722790][T20048] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1427.881342][T19986] veth0_macvtap: entered promiscuous mode [ 1427.990167][T19986] veth1_macvtap: entered promiscuous mode [ 1428.033038][ T7422] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1428.118472][T19986] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1428.147330][T19986] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1428.277564][T16823] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1428.279052][T16823] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1428.280387][T16823] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1428.281084][T16823] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1428.961857][ T6110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1428.961897][ T6110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1429.070629][T15190] Bluetooth: hci2: command tx timeout [ 1429.222018][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1429.222062][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1429.373966][T20064] binder: BINDER_SET_CONTEXT_MGR already set [ 1429.374008][T20064] binder: 20062:20064 ioctl 4018620d 200000000100 returned -16 [ 1429.436228][T20064] binder: BINDER_SET_CONTEXT_MGR already set [ 1429.436268][T20064] binder: 20062:20064 ioctl 4018620d 200000004a80 returned -16 [ 1430.015473][T20073] input: syz0 as /devices/virtual/input/input106 [ 1430.829258][T20083] nvme nvme0: failed to connect socket: -101 [ 1431.377740][T20060] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1431.378714][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1431.379298][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1431.467691][T16822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1431.468188][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1431.577425][T20060] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1431.590423][T20060] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1431.599976][T20060] usb 2-1: Product: syz [ 1431.604476][T20060] usb 2-1: Manufacturer: syz [ 1431.609567][T20060] usb 2-1: SerialNumber: syz [ 1431.688617][T20060] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1432.300620][T20093] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3542'. [ 1432.319555][T20093] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3542'. [ 1432.319610][T20093] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3542'. [ 1432.592544][ T31] kauditd_printk_skb: 136 callbacks suppressed [ 1432.592600][ T31] audit: type=1326 audit(1787767275.834:3956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20091 comm="syz.8.3543" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20a999e0d9 code=0x7ffc0000 [ 1432.592742][ T31] audit: type=1326 audit(1787767275.834:3957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20091 comm="syz.8.3543" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20a999e0d9 code=0x7ffc0000 [ 1432.602017][ T31] audit: type=1326 audit(1787767275.834:3958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20091 comm="syz.8.3543" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20a999e0d9 code=0x7ffc0000 [ 1432.602769][ T31] audit: type=1326 audit(1787767275.834:3959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20091 comm="syz.8.3543" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f20a999e0d9 code=0x7ffc0000 [ 1432.737409][T20060] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1432.737728][T20060] ath9k_htc: Failed to initialize the device [ 1432.746057][ T31] audit: type=1326 audit(1787767275.984:3960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20091 comm="syz.8.3543" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f20a999de42 code=0x7ffc0000 [ 1432.746115][ T31] audit: type=1326 audit(1787767275.984:3961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20091 comm="syz.8.3543" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f20a999de42 code=0x7ffc0000 [ 1432.801654][ T31] audit: type=1326 audit(1787767276.034:3962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20091 comm="syz.8.3543" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20a999e0d9 code=0x7ffc0000 [ 1432.801821][ T31] audit: type=1326 audit(1787767276.034:3963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20091 comm="syz.8.3543" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f20a999de42 code=0x7ffc0000 [ 1432.801937][ T31] audit: type=1326 audit(1787767276.034:3964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20091 comm="syz.8.3543" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f20a999ded7 code=0x7ffc0000 [ 1432.888962][ T31] audit: type=1326 audit(1787767276.084:3965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20091 comm="syz.8.3543" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f20a995add1 code=0x7ffc0000 [ 1432.943784][T20060] usb 2-1: ath9k_htc: USB layer deinitialized [ 1433.308785][T16106] usb 2-1: USB disconnect, device number 7 [ 1433.472861][T20102] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3544'. [ 1433.561400][T20104] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3544'. [ 1433.603943][T20104] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3544'. [ 1433.627804][T20104] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1433.795840][T20106] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3546'. [ 1434.345175][T20108] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3545'. [ 1434.578545][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1434.666776][T20060] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1434.817524][T20121] input: syz0 as /devices/virtual/input/input107 [ 1434.858025][T20060] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1434.895023][T20060] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1434.949434][T20060] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1434.949486][T20060] usb 2-1: Product: syz [ 1434.949504][T20060] usb 2-1: Manufacturer: syz [ 1434.949547][T20060] usb 2-1: SerialNumber: syz [ 1436.578088][T16823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1436.578335][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1436.849960][ T5676] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1437.011508][ T5676] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1437.017068][ T5676] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1437.028472][ T5676] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1437.028598][ T5676] usb 10-1: Product: syz [ 1437.028642][ T5676] usb 10-1: Manufacturer: syz [ 1437.028678][ T5676] usb 10-1: SerialNumber: syz [ 1437.280326][T20125] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3549'. [ 1437.352701][ T5676] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1437.485264][ T5676] usb 10-1: USB disconnect, device number 2 [ 1437.531297][ T5676] usblp0: removed [ 1438.501663][ T6109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1438.501885][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1438.585993][T20060] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1438.617853][T20060] usb 2-1: USB disconnect, device number 8 [ 1438.683195][T20060] usblp0: removed [ 1438.851808][T20140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1438.862890][T20140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1439.027252][T20140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1439.027888][T20140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1439.035590][T20140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1439.237520][T20146] fuse: Bad value for 'fd' [ 1440.838505][ T5676] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 1440.986954][ T5676] usb 9-1: Using ep0 maxpacket: 32 [ 1440.991218][ T5676] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1440.992793][ T5676] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 1440.992825][ T5676] usb 9-1: config 0 has no interface number 0 [ 1440.995542][ T5676] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1440.995599][ T5676] usb 9-1: Product: syz [ 1440.995633][ T5676] usb 9-1: Manufacturer: syz [ 1440.995654][ T5676] usb 9-1: SerialNumber: syz [ 1441.130691][ T5676] usb 9-1: config 0 descriptor?? [ 1441.636845][T20060] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 1441.836747][T20060] usb 6-1: Using ep0 maxpacket: 8 [ 1441.843032][T20060] usb 6-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1441.882327][T20060] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1441.882403][T20060] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1441.882483][T20060] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1441.922707][T20060] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1441.922788][T20060] usb 6-1: Product: syz [ 1441.922809][T20060] usb 6-1: Manufacturer: syz [ 1441.922860][T20060] usb 6-1: SerialNumber: syz [ 1442.019923][ T6603] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 1442.051052][T20175] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 1442.149959][ T5676] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1442.150066][ T5676] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1442.862084][ T5676] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 1442.862428][ T5676] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -71 [ 1442.900227][ T5676] usb 9-1: USB disconnect, device number 36 [ 1442.984134][T20175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1442.985713][T20175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1443.052425][T20175] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 1443.182421][T20060] usb 6-1: 1:1: cannot get freq (v2/v3): err -71 [ 1443.182939][T20060] usb 6-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1443.342773][T20190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1443.345841][T20190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1443.494107][T20060] usb 6-1: USB disconnect, device number 127 [ 1443.698644][ T5625] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 1443.735309][T19486] udevd[19486]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1443.936778][T20196] veth1_to_hsr: entered allmulticast mode [ 1443.937039][T20196] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 1444.033763][T20196] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1444.050992][ T5625] usb 10-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 1444.169581][ T5625] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1444.180841][ T5625] usb 10-1: config 0 descriptor?? [ 1444.229347][ T5625] pwc: Samsung MPC-C10 USB webcam detected. [ 1444.661391][T20211] usb usb7: usbfs: process 20211 (syz.1.3566) did not claim interface 0 before use [ 1445.991877][T20192] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1446.682451][T20221] netlink: 164 bytes leftover after parsing attributes in process `syz.8.3567'. [ 1447.813988][T20233] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1448.348791][T20240] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 1448.364730][T20060] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1448.478251][ T5625] pwc: send_video_command error -71 [ 1448.478295][ T5625] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1448.478436][ T5625] Philips webcam 10-1:0.0: probe with driver Philips webcam failed with error -71 [ 1448.480128][ T5625] usb 10-1: USB disconnect, device number 3 [ 1448.544383][T20060] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1448.550655][T20060] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1448.638828][T20060] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1448.638902][T20060] usb 2-1: Product: syz [ 1448.638940][T20060] usb 2-1: Manufacturer: syz [ 1448.638996][T20060] usb 2-1: SerialNumber: syz [ 1448.968373][T20060] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1448.999455][T20060] usb 2-1: USB disconnect, device number 9 [ 1449.039488][T20060] usblp0: removed [ 1449.671718][T20248] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1449.672203][T20248] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 1451.036754][T20060] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1451.320846][T20060] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1451.343106][T20060] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1451.434081][T20060] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1451.434152][T20060] usb 6-1: Product: syz [ 1451.434187][T20060] usb 6-1: Manufacturer: syz [ 1451.434256][T20060] usb 6-1: SerialNumber: syz [ 1451.819504][T20060] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1451.936676][T20060] usb 6-1: USB disconnect, device number 2 [ 1452.123883][T20060] usblp0: removed [ 1452.420878][ T5625] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1452.699658][ T5625] usb 10-1: Using ep0 maxpacket: 8 [ 1452.756738][ T5625] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1452.864580][ T5625] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1452.864620][ T5625] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1452.864678][ T5625] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1452.864711][ T5625] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1452.864746][ T5625] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1452.940086][T20060] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1453.132836][T20060] usb 2-1: Using ep0 maxpacket: 8 [ 1453.167854][T20263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1453.169714][T20263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1453.248759][ T5625] usb 10-1: GET_CAPABILITIES returned 0 [ 1453.248829][ T5625] usbtmc 10-1:16.0: can't read capabilities [ 1453.457715][T16105] usb 10-1: USB disconnect, device number 4 [ 1454.245189][T20060] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1454.245280][T20060] usb 2-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=70.0b [ 1454.248310][T20060] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1454.248408][T20060] usb 2-1: can't read configurations, error -71 [ 1454.485294][T20273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1454.503322][T20273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1454.617769][T20276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3580'. [ 1455.576867][T20060] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1455.773296][T20060] usb 6-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 1455.793751][T20060] usb 6-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 1455.793789][T20060] usb 6-1: Product: syz [ 1455.804878][T20060] usb 6-1: config 0 descriptor?? [ 1455.820478][T20060] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 1455.839816][T20060] usb 6-1: Detected FT232H [ 1455.934289][T20292] netlink: 'syz.8.3583': attribute type 5 has an invalid length. [ 1455.934335][T20292] netlink: 'syz.8.3583': attribute type 5 has an invalid length. [ 1456.155087][T20300] Invalid argument reading file caps for ./file0 [ 1456.229312][T20060] ftdi_sio ttyUSB0: Unable to read latency timer: -121 [ 1456.552171][T20313] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3582'. [ 1456.552269][T20313] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3582'. [ 1456.818386][T20274] macsec0: left allmulticast mode [ 1456.846839][ T5676] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1456.893950][T20274] bond8: left promiscuous mode [ 1456.907289][T20274] bond8: left allmulticast mode [ 1457.027161][ T5676] usb 10-1: Using ep0 maxpacket: 16 [ 1457.029969][ T5676] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1457.035588][T20274] ip6tnl2: left allmulticast mode [ 1457.041820][ T5676] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1457.042034][ T5676] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1457.042211][ T5676] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1457.093416][T20274] bridge0: left promiscuous mode [ 1457.111141][ T5676] usb 10-1: config 0 descriptor?? [ 1457.158734][ T5676] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 1457.164325][T20274] ip6tnl3: left allmulticast mode [ 1457.334236][T20276] 8021q: adding VLAN 0 to HW filter on device .` [ 1457.355901][T20276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1457.414343][T20310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1457.448795][T20310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1457.532178][T20312] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1457.590726][T20276] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1457.891182][T20060] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1457.894053][T20060] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71 [ 1457.942199][T20060] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1457.958283][T20060] usb 6-1: USB disconnect, device number 3 [ 1457.981006][T20060] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1457.989254][T20060] ftdi_sio 6-1:0.0: device disconnected [ 1458.582234][T16109] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 1458.678899][T20326] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3589'. [ 1458.912466][T16109] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1458.955928][T20060] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1459.025700][T16109] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1459.168562][T20060] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1459.179026][T20060] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1459.179066][T20060] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1459.179107][T20060] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1459.213996][T20326] raw-gadget.5 gadget.5: fail, usb_ep_enable returned -22 [ 1459.263789][T16109] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1459.263826][T20060] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1459.263842][T16109] usb 9-1: Product: syz [ 1459.263877][T16109] usb 9-1: Manufacturer: syz [ 1459.263939][T16109] usb 9-1: SerialNumber: syz [ 1459.637571][T16109] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 37 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1459.672866][T16109] usb 9-1: USB disconnect, device number 37 [ 1459.678956][T20326] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3589'. [ 1459.793067][T16109] usblp0: removed [ 1460.105501][T20060] usb 6-1: USB disconnect, device number 4 [ 1460.463542][T16109] usb 10-1: USB disconnect, device number 5 [ 1461.094983][T20351] sch_tbf: burst 0 is lower than device syzkaller0 mtu (313) ! [ 1461.133132][T20351] mac80211_hwsim hwsim15 syzkaller0: entered promiscuous mode [ 1461.133197][T20351] mac80211_hwsim hwsim15 syzkaller0: entered allmulticast mode [ 1461.432415][T20355] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3591'. [ 1462.400372][T20354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1462.440849][T20354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1463.732813][T20368] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 1463.817764][T20358] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3595'. [ 1463.849653][T20368] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3597'. [ 1463.924130][T20371] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3597'. [ 1463.933973][T20371] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1464.285541][T16109] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1464.557866][T16109] usb 2-1: Using ep0 maxpacket: 8 [ 1464.779359][T16109] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1464.779413][T16109] usb 2-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=76.1a [ 1464.892929][T16109] usb 2-1: config 6 has an invalid interface number: 172 but max is 0 [ 1464.892965][T16109] usb 2-1: config 6 has no interface number 0 [ 1464.892999][T16109] usb 2-1: config 6 interface 172 has no altsetting 0 [ 1465.132269][T20381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1465.156814][T20381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1465.232163][T16109] usb 2-1: string descriptor 0 read error: -22 [ 1465.232274][T16109] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1465.315970][T16109] usb_8dev 2-1:6.172 can0: sending command message failed [ 1465.333632][T16109] usb_8dev 2-1:6.172 can0: can't get firmware version [ 1465.540718][T16109] usb_8dev 2-1:6.172: probe with driver usb_8dev failed with error -22 [ 1465.559517][T16109] usb 2-1: USB disconnect, device number 12 [ 1466.026701][T18766] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1466.038529][T20390] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1466.113287][T20390] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3604'. [ 1466.187632][T18766] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1466.188654][T18766] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1466.188705][T18766] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1466.188750][T18766] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1466.192675][T18766] usb 6-1: config 0 descriptor?? [ 1466.340152][T20396] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3605'. [ 1466.581568][T18766] usbhid 6-1:0.0: can't add hid device: -71 [ 1466.582040][T18766] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1466.625164][T18766] usb 6-1: USB disconnect, device number 5 [ 1466.747737][T20396] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3605'. [ 1466.750461][T20396] netlink: 1932 bytes leftover after parsing attributes in process `syz.8.3605'. [ 1466.750524][T20396] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3605'. [ 1466.750755][T20396] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3605'. [ 1467.680796][T20289] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1467.826280][T20413] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1467.960348][T20289] usb 6-1: Using ep0 maxpacket: 32 [ 1468.017802][T20289] usb 6-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1468.133413][T20289] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1468.133448][T20289] usb 6-1: config 0 has no interface number 0 [ 1468.133501][T20289] usb 6-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1468.133520][T20289] usb 6-1: config 0 interface 1 has no altsetting 0 [ 1468.363436][T20289] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1468.363471][T20289] usb 6-1: Product: syz [ 1468.363527][T20289] usb 6-1: Manufacturer: syz [ 1468.363554][T20289] usb 6-1: SerialNumber: syz [ 1468.374493][T20289] usb 6-1: config 0 descriptor?? [ 1468.703091][T20289] cx231xx 6-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1468.703133][T20289] cx231xx 6-1:0.1: Not found matching IAD interface [ 1468.730166][T20289] usb 6-1: USB disconnect, device number 6 [ 1468.741053][T20421] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3610'. [ 1471.206785][T18766] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1471.337379][T20450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1471.359653][T20450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1471.386952][T18766] usb 10-1: Using ep0 maxpacket: 8 [ 1471.388544][T18766] usb 10-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1471.403763][T18766] usb 10-1: config 2 has an invalid interface number: 31 but max is 0 [ 1471.403812][T18766] usb 10-1: config 2 has no interface number 0 [ 1471.403916][T18766] usb 10-1: config 2 interface 31 has no altsetting 0 [ 1471.437461][T18766] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1471.437519][T18766] usb 10-1: Product: syz [ 1471.437544][T18766] usb 10-1: Manufacturer: syz [ 1471.437589][T18766] usb 10-1: SerialNumber: syz [ 1471.499768][ T31] kauditd_printk_skb: 112 callbacks suppressed [ 1471.499817][ T31] audit: type=1326 audit(1787767314.734:4078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20451 comm="syz.1.3620" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f57cf59e0d9 code=0x0 [ 1471.696019][T18766] ch9200 10-1:2.31: probe with driver ch9200 failed with error -71 [ 1471.742141][T20434] binder: BINDER_SET_CONTEXT_MGR already set [ 1471.742183][T20434] binder: 20433:20434 ioctl 4018620d 200000000040 returned -16 [ 1471.745228][T18766] usb 10-1: USB disconnect, device number 6 [ 1471.979042][T20434] syz.5.3614 (20434): drop_caches: 2 [ 1472.020322][T20460] bridge0: entered promiscuous mode [ 1472.025870][T20460] bridge0: entered allmulticast mode [ 1472.077046][T20460] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3622'. [ 1472.091220][T20460] tipc: Enabling of bearer rejected, media not registered [ 1472.126752][ T5676] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 1472.356633][ T5676] usb 9-1: Using ep0 maxpacket: 8 [ 1472.412936][ T5676] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1472.422102][ T5676] usb 9-1: New USB device found, idVendor=0af0, idProduct=d157, bcdDevice=fe.05 [ 1472.462825][ T5676] usb 9-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1472.473495][ T5676] usb 9-1: config 7 has 0 interfaces, different from the descriptor's value: 1 [ 1472.493312][ T5676] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1472.493354][ T5676] usb 9-1: Product: syz [ 1472.493399][ T5676] usb 9-1: Manufacturer: syz [ 1472.493420][ T5676] usb 9-1: SerialNumber: syz [ 1473.551189][T20289] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 1474.047261][T20289] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1474.101933][T20289] usb 10-1: not running at top speed; connect to a high speed hub [ 1474.101993][T20289] usb 10-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice=f5.2e [ 1474.211647][T20289] usb 10-1: config 5 has an invalid interface number: 152 but max is 0 [ 1474.211713][T20289] usb 10-1: config 5 has no interface number 0 [ 1474.211805][T20289] usb 10-1: config 5 interface 152 has no altsetting 0 [ 1474.430981][T20289] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1474.431044][T20289] usb 10-1: Product: syz [ 1474.431063][T20289] usb 10-1: Manufacturer: syz [ 1474.431098][T20289] usb 10-1: SerialNumber: syz [ 1474.845826][T20289] as10x_usb: device has been detected [ 1474.847963][T20289] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 1474.878233][T20289] usb 10-1: DVB: registering adapter 2 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 1474.900268][T20289] as10x_usb: error during firmware upload part1 [ 1474.902253][T20289] Registered device Elgato EyeTV DTT Deluxe [ 1474.944331][T20289] usb 10-1: USB disconnect, device number 7 [ 1474.974211][T20289] Unregistered device Elgato EyeTV DTT Deluxe [ 1475.091889][T20289] as10x_usb: device has been disconnected [ 1475.124495][ T7422] usb 9-1: USB disconnect, device number 38 [ 1475.850943][ T7422] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 1476.128320][ T7422] usb 9-1: Using ep0 maxpacket: 32 [ 1476.183485][ T7422] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1476.292825][ T7422] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1476.292911][ T7422] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1476.306921][ T7422] usb 9-1: config 0 descriptor?? [ 1476.317912][ T5676] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1476.356449][ T7422] hub 9-1:0.0: USB hub found [ 1476.364895][T20514] bridge0: left promiscuous mode [ 1476.364974][T20514] bridge0: left allmulticast mode [ 1476.385398][T20518] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3635'. [ 1476.543625][ T5676] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1476.584812][ T5676] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1476.690094][ T7422] hub 9-1:0.0: 1 port detected [ 1476.733109][ T5676] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1476.734774][ T5676] usb 10-1: Product: syz [ 1476.736424][ T5676] usb 10-1: Manufacturer: syz [ 1476.736451][ T5676] usb 10-1: SerialNumber: syz [ 1476.923717][T20514] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1476.923769][T20514] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1476.925191][T20505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1476.928361][T20505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1476.992183][T20514] veth1_vlan: left promiscuous mode [ 1477.016789][T20514] veth0_vlan: left promiscuous mode [ 1477.024605][T20514] veth0_vlan: entered promiscuous mode [ 1477.027131][T20514] veth1_vlan: entered promiscuous mode [ 1477.085697][T20514] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1477.157701][ T5676] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1477.160724][ T5676] usb 10-1: USB disconnect, device number 8 [ 1477.183455][ T5676] usblp0: removed [ 1477.193133][T20285] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1477.237226][T20514] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1477.269761][T20514] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1477.339478][T20514] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1477.340550][T20514] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1477.422912][T16821] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1477.432647][ T6603] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1477.433107][ T6603] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1477.433222][ T6603] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1477.462681][T20285] usb 6-1: Using ep0 maxpacket: 16 [ 1477.617706][T20285] usb 6-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1477.717827][T20285] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1477.718763][T20285] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1477.718845][T20285] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1477.718939][T20285] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1477.954997][T20285] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1477.955056][T20285] usb 6-1: Product: syz [ 1477.955097][T20285] usb 6-1: Manufacturer: syz [ 1477.955112][T20285] usb 6-1: SerialNumber: syz [ 1477.963447][T20285] usb 6-1: config 0 descriptor?? [ 1478.020171][T20285] appledisplay 6-1:0.0: Submitting URB failed [ 1478.020554][T20285] appledisplay 6-1:0.0: probe with driver appledisplay failed with error -5 [ 1479.206117][ T7422] usb 9-1: USB disconnect, device number 39 [ 1479.260473][ T5676] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1479.298321][T20559] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3653'. [ 1479.468877][ T5676] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1479.512448][ T5676] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1479.544331][ T5676] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1479.544367][ T5676] usb 2-1: Product: syz [ 1479.544415][ T5676] usb 2-1: Manufacturer: syz [ 1479.544435][ T5676] usb 2-1: SerialNumber: syz [ 1479.690459][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1479.781140][T20285] usb 6-1: USB disconnect, device number 7 [ 1479.966748][ T5676] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1479.994465][ T5676] usb 2-1: USB disconnect, device number 13 [ 1480.065576][ T5676] usblp0: removed [ 1480.846869][T20552] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3652'. [ 1481.126118][T20557] veth1_to_hsr: left allmulticast mode [ 1481.352666][T20557] bond1: left promiscuous mode [ 1481.401569][T20557] ip6tnl1: left allmulticast mode [ 1481.409827][T20557] batman_adv: batadv0: Interface deactivated: macsec1 [ 1481.537135][T20557] ip6tnl2: left allmulticast mode [ 1481.674377][T20559] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1481.704830][T20559] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1481.844476][T20559] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1481.853769][T20559] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1481.876179][T20559] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1481.876252][T20559] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1481.909106][T20559] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1481.943307][T16821] bridge0: port 2(bridge_slave_1) entered blocking state [ 1481.943403][T16821] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1482.331103][T20579] x_tables: ip_tables: tos.1 match: invalid size 8 (kernel) != (user) 16 [ 1483.302211][T20606] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1483.752008][T20618] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3678'. [ 1483.753007][T20621] netlink: 'syz.1.3679': attribute type 2 has an invalid length. [ 1483.756020][T20618] netlink: 156 bytes leftover after parsing attributes in process `syz.8.3678'. [ 1483.858246][T20289] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1484.199146][T20289] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1484.309954][T20289] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1484.532641][T20289] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1484.532676][T20289] usb 10-1: Product: syz [ 1484.532727][T20289] usb 10-1: Manufacturer: syz [ 1484.532749][T20289] usb 10-1: SerialNumber: syz [ 1484.599105][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.600962][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.693622][T20639] ip_tables: iptables: counters copy to user failed while replacing table [ 1484.715837][T20639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1484.755666][T20639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1484.829958][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1484.830287][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1484.830565][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1484.922600][T20289] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1484.935581][T20289] usb 10-1: USB disconnect, device number 9 [ 1484.958834][T20289] usblp0: removed [ 1485.148595][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1485.268416][T20648] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1485.298413][T20648] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3687'. [ 1485.442755][T20648] hsr_slave_0: left promiscuous mode [ 1485.477453][T20648] hsr_slave_1: left promiscuous mode [ 1486.742930][T20289] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1486.882037][ T31] audit: type=1800 audit(1787767330.134:4079): pid=20663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3691" name="nullb0" dev="devtmpfs" ino=3834 res=0 errno=0 [ 1486.992689][T20289] usb 6-1: Using ep0 maxpacket: 32 [ 1487.010056][T20666] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3688'. [ 1487.053544][T20289] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=d3.7e [ 1487.166274][T20289] usb 6-1: config 6 has an invalid interface number: 132 but max is 0 [ 1487.166309][T20289] usb 6-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1487.166370][T20289] usb 6-1: config 6 has no interface number 0 [ 1487.166416][T20289] usb 6-1: config 6 interface 132 altsetting 6 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1487.166439][T20289] usb 6-1: config 6 interface 132 altsetting 6 endpoint 0xA has invalid wMaxPacketSize 0 [ 1487.166459][T20289] usb 6-1: config 6 interface 132 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1487.166484][T20289] usb 6-1: config 6 interface 132 has no altsetting 0 [ 1487.413399][T20289] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1487.413434][T20289] usb 6-1: Product: syz [ 1487.413486][T20289] usb 6-1: Manufacturer: syz [ 1487.413508][T20289] usb 6-1: SerialNumber: syz [ 1487.812908][T20289] usbtest 6-1:6.132: couldn't get endpoints, -22 [ 1487.819456][T20289] usbtest 6-1:6.132: probe with driver usbtest failed with error -22 [ 1487.838963][T20289] usb 6-1: USB disconnect, device number 8 [ 1487.931119][T20673] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3698'. [ 1487.966821][T20673] ip6tnl1: entered allmulticast mode [ 1488.007793][T20673] netlink: 156 bytes leftover after parsing attributes in process `syz.9.3698'. [ 1488.385723][T20677] xfrm0: Caught tx_queue_len zero misconfig [ 1488.429728][T20677] [U]  [ 1488.739247][ T31] audit: type=1326 audit(1787767331.984:4080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20684 comm="syz.1.3701" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f57cf59e0d9 code=0x0 [ 1489.224114][T20675] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3696'. [ 1489.256931][ T7425] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1489.423983][ T7425] usb 6-1: Using ep0 maxpacket: 32 [ 1489.425777][ T7425] usb 6-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 1489.438581][ T7425] usb 6-1: config 0 has an invalid interface number: 239 but max is 0 [ 1489.438625][ T7425] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1489.438664][ T7425] usb 6-1: config 0 has no interface number 0 [ 1489.438713][ T7425] usb 6-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 1489.438746][ T7425] usb 6-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1489.438780][ T7425] usb 6-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 1489.438813][ T7425] usb 6-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024 [ 1489.438846][ T7425] usb 6-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024 [ 1489.438876][ T7425] usb 6-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 1489.438913][ T7425] usb 6-1: config 0 interface 239 altsetting 4 endpoint 0x85 has an invalid bInterval 252, changing to 11 [ 1489.438946][ T7425] usb 6-1: config 0 interface 239 altsetting 4 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1489.438974][ T7425] usb 6-1: config 0 interface 239 has no altsetting 0 [ 1489.452215][ T7425] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1489.452296][ T7425] usb 6-1: Product: syz [ 1489.452338][ T7425] usb 6-1: Manufacturer: syz [ 1489.452387][ T7425] usb 6-1: SerialNumber: syz [ 1489.529778][ T7425] usb 6-1: config 0 descriptor?? [ 1489.548260][T20696] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1489.557172][T20285] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1489.596955][T20696] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1489.879313][T20285] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1489.924400][T15190] Bluetooth: hci6: urb ffff88802b00ef00 submission failed (90) [ 1489.937122][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1489.937504][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1489.937829][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1489.999177][T20285] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1490.225007][T20285] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1490.225043][T20285] usb 10-1: Product: syz [ 1490.225090][T20285] usb 10-1: Manufacturer: syz [ 1490.225112][T20285] usb 10-1: SerialNumber: syz [ 1490.527038][T20719] xfrm0: entered allmulticast mode [ 1490.528509][T20719] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 1490.598136][T20285] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1490.600387][T20285] usb 10-1: USB disconnect, device number 10 [ 1490.628519][T20285] usblp0: removed [ 1490.911346][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1491.011229][T20726] [U]  [ 1491.567725][T20734] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3712'. [ 1491.596420][T20734] ip6tnl2: entered allmulticast mode [ 1491.605433][T20734] netlink: 156 bytes leftover after parsing attributes in process `syz.7.3712'. [ 1492.345858][ T7422] usb 6-1: USB disconnect, device number 9 [ 1492.574808][ T31] audit: type=1326 audit(1787767335.824:4081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20741 comm="syz.7.3714" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d9d19e0d9 code=0x0 [ 1493.130036][T20761] [U]  [ 1493.223055][T20763] JFS: charset not found [ 1493.470979][T20769] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1493.572939][T20773] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3724'. [ 1493.656930][T20285] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1493.933408][T20285] usb 10-1: Using ep0 maxpacket: 32 [ 1493.989008][T20285] usb 10-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1494.098068][T20285] usb 10-1: config 0 has an invalid interface number: 196 but max is 0 [ 1494.098125][T20285] usb 10-1: config 0 has no interface number 0 [ 1494.098262][T20285] usb 10-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1494.098367][T20285] usb 10-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1494.098460][T20285] usb 10-1: config 0 interface 196 has no altsetting 0 [ 1494.238435][T20783] netlink: 'syz.1.3727': attribute type 1 has an invalid length. [ 1494.335414][T20285] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1494.339186][T20285] usb 10-1: Product: syz [ 1494.339231][T20285] usb 10-1: Manufacturer: syz [ 1494.339275][T20285] usb 10-1: SerialNumber: syz [ 1494.363639][T20289] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 1494.379288][T20285] usb 10-1: config 0 descriptor?? [ 1494.394783][T20766] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1494.528907][T20786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3728'. [ 1494.684872][T20289] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1494.789538][T20285] ipheth 10-1:0.196: Unable to find endpoints [ 1494.801602][T20289] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1494.840734][T20285] usb 10-1: USB disconnect, device number 11 [ 1495.021886][T20289] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1495.023330][T20289] usb 9-1: Product: syz [ 1495.023377][T20289] usb 9-1: Manufacturer: syz [ 1495.023402][T20289] usb 9-1: SerialNumber: syz [ 1495.056846][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1495.057132][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1495.057385][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1495.332727][T20289] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 40 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1495.360572][T20289] usb 9-1: USB disconnect, device number 40 [ 1495.402999][T20289] usblp0: removed [ 1496.623562][ T31] audit: type=1326 audit(1787767339.854:4082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20807 comm="syz.9.3734" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1501f9e0d9 code=0x0 [ 1496.649074][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1497.498798][T20813] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3735'. [ 1497.629940][T20817] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3737'. [ 1497.893398][T20820] netlink: Unknown conntrack attr (0) [ 1497.893465][T20820] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1498.150621][T20826] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1498.601810][ T31] audit: type=1326 audit(1787767341.844:4083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20838 comm="syz.1.3747" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f57cf59e0d9 code=0x0 [ 1498.996705][T18766] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1499.190094][T18766] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1499.201101][T18766] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1499.221225][T18766] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1499.221273][T18766] usb 10-1: Product: syz [ 1499.221310][T18766] usb 10-1: Manufacturer: syz [ 1499.221332][T18766] usb 10-1: SerialNumber: syz [ 1499.588960][T18766] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1499.620726][T18766] usb 10-1: USB disconnect, device number 12 [ 1499.667628][T18766] usblp0: removed [ 1499.818561][T20869] netlink: 156 bytes leftover after parsing attributes in process `syz.5.3757'. [ 1500.500639][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1500.501352][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1500.501992][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1501.776303][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1501.777120][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1501.945989][T20870] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3759'. [ 1502.709353][T20916] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3776'. [ 1503.218164][ T5676] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1503.409858][ T5676] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1503.421100][ T5676] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1503.463822][ T5676] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1503.463879][ T5676] usb 10-1: Product: syz [ 1503.463914][ T5676] usb 10-1: Manufacturer: syz [ 1503.463936][ T5676] usb 10-1: SerialNumber: syz [ 1503.753179][ T5676] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1503.772893][ T5676] usb 10-1: USB disconnect, device number 13 [ 1503.813448][T20929] [U]  [ 1503.858172][ T5676] usblp0: removed [ 1503.890980][T20912] mac80211_hwsim hwsim15 syzkaller0: left promiscuous mode [ 1503.891028][T20912] mac80211_hwsim hwsim15 syzkaller0: left allmulticast mode [ 1504.163635][T20916] veth1_vlan: left promiscuous mode [ 1504.170176][T20916] veth0_vlan: left promiscuous mode [ 1504.184574][T20916] veth0_vlan: entered promiscuous mode [ 1504.201445][T20916] veth1_vlan: entered promiscuous mode [ 1504.220944][T20916] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1504.230364][T20916] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1504.240996][T20916] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1504.250094][T20916] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1504.258292][T20916] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1505.622242][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1505.622505][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1505.622696][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1506.097908][ T31] audit: type=1800 audit(1787767349.324:4084): pid=20963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3790" name="nullb0" dev="devtmpfs" ino=3834 res=0 errno=0 [ 1506.150514][T20283] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1506.483683][T20283] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1506.592893][T20283] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1506.818007][T20283] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1506.818059][T20283] usb 6-1: Product: syz [ 1506.818093][T20283] usb 6-1: Manufacturer: syz [ 1506.818115][T20283] usb 6-1: SerialNumber: syz [ 1507.097485][T20283] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1507.099564][T20283] usb 6-1: USB disconnect, device number 10 [ 1507.101970][T20283] usblp0: removed [ 1507.217869][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1508.274097][T20974] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3793'. [ 1509.133920][T20987] [U]  [ 1509.445248][T20992] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3799'. [ 1510.036829][T18766] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1510.226646][T18766] usb 10-1: Using ep0 maxpacket: 8 [ 1510.233655][T18766] usb 10-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1510.246597][T18766] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1510.246644][T18766] usb 10-1: Product: syz [ 1510.246682][T18766] usb 10-1: Manufacturer: syz [ 1510.246704][T18766] usb 10-1: SerialNumber: syz [ 1510.274409][T18766] usb 10-1: config 0 descriptor?? [ 1510.332762][ T31] audit: type=1800 audit(1787767353.574:4085): pid=21012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3806" name="nullb0" dev="devtmpfs" ino=3834 res=0 errno=0 [ 1510.358783][T18766] gspca_main: se401-2.14.0 probing 047d:5003 [ 1510.400893][T21013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1510.426295][T21013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1510.736836][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1510.737695][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1510.738418][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1510.775725][T18766] gspca_se401: ExtraFeatures: 255 [ 1511.022414][T18766] input: se401 as /devices/platform/dummy_hcd.9/usb10/10-1/input/input108 [ 1511.094464][T18766] usb 10-1: USB disconnect, device number 14 [ 1511.220919][T21021] netlink: 136 bytes leftover after parsing attributes in process `syz.5.3809'. [ 1511.220973][T21021] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1511.419050][T21024] program syz.5.3810 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1511.436189][T20289] usb 9-1: new full-speed USB device number 41 using dummy_hcd [ 1511.739241][T20289] usb 9-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1511.850692][T20289] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1511.853659][T20289] usb 9-1: config 0 descriptor?? [ 1511.886807][T21031] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3813'. [ 1511.907324][T20289] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1512.385633][T20289] gp8psk: usb in 128 operation failed. [ 1512.412232][T20289] gp8psk: usb in 137 operation failed. [ 1512.412261][T20289] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1512.412293][T20289] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1512.446145][T20289] usb 9-1: USB disconnect, device number 41 [ 1512.674218][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1513.018584][T18766] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1513.061756][T21041] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1513.186805][T18766] usb 10-1: Using ep0 maxpacket: 32 [ 1513.191659][T18766] usb 10-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1513.203623][T18766] usb 10-1: config 0 has an invalid interface number: 196 but max is 0 [ 1513.203691][T18766] usb 10-1: config 0 has no interface number 0 [ 1513.203819][T18766] usb 10-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1513.203918][T18766] usb 10-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1513.204000][T18766] usb 10-1: config 0 interface 196 has no altsetting 0 [ 1513.310094][T18766] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1513.310151][T18766] usb 10-1: Product: syz [ 1513.310187][T18766] usb 10-1: Manufacturer: syz [ 1513.310245][T18766] usb 10-1: SerialNumber: syz [ 1513.457522][T18766] usb 10-1: config 0 descriptor?? [ 1513.476113][T21038] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1513.832166][T18766] ipheth 10-1:0.196: Unable to find endpoints [ 1513.881876][T18766] usb 10-1: USB disconnect, device number 15 [ 1513.914645][ T7422] usb 2-1: new low-speed USB device number 14 using dummy_hcd [ 1514.228111][ T7422] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1514.262487][T21061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1514.282063][T20289] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 1514.326694][T21061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1514.340279][ T7422] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1514.340321][ T7422] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1514.340384][ T7422] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 4 [ 1514.340436][ T7422] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1514.405401][ T7422] hub 2-1:1.0: bad descriptor, ignoring hub [ 1514.405461][ T7422] hub 2-1:1.0: probe with driver hub failed with error -5 [ 1514.406923][ T7422] cdc_wdm 2-1:1.0: skipping garbage [ 1514.406973][ T7422] cdc_wdm 2-1:1.0: skipping garbage [ 1514.407013][ T7422] cdc_wdm 2-1:1.0: skipping garbage [ 1514.407249][ T7422] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1514.557076][T20289] usb 9-1: Using ep0 maxpacket: 32 [ 1514.609072][T20289] usb 9-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1514.717864][T20289] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1514.717946][T20289] usb 9-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1514.718049][T20289] usb 9-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1514.718116][T20289] usb 9-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1514.718234][T20289] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1514.718337][T20289] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1514.725646][T20289] usb 9-1: config 0 descriptor?? [ 1514.728326][T20285] usb 2-1: USB disconnect, device number 14 [ 1515.186682][ T7425] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 1515.296907][T20289] hid (null): invalid report_size 55607 [ 1515.301237][T20289] corsair-cpro 0003:1B1C:0C10.003B: invalid report_size 55607 [ 1515.314873][T20289] corsair-cpro 0003:1B1C:0C10.003B: item 0 2 1 7 parsing failed [ 1515.315591][T20289] corsair-cpro 0003:1B1C:0C10.003B: probe with driver corsair-cpro failed with error -22 [ 1515.362155][ T7425] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1515.364048][ T7425] usb 6-1: not running at top speed; connect to a high speed hub [ 1515.364128][ T7425] usb 6-1: New USB device found, idVendor=15c2, idProduct=003c, bcdDevice=8a.3e [ 1515.371171][ T7425] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 1515.394062][ T7422] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1515.427183][ T7425] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1515.427234][ T7425] usb 6-1: Product: syz [ 1515.427255][ T7425] usb 6-1: Manufacturer: syz [ 1515.427287][ T7425] usb 6-1: SerialNumber: syz [ 1515.500154][T18766] usb 9-1: USB disconnect, device number 42 [ 1515.714016][ T7422] usb 10-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=65.c8 [ 1515.735088][ T7425] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1515.735318][ T7425] imon 6-1:5.0: unable to initialize intf0, err -19 [ 1515.735379][ T7425] imon:imon_probe: failed to initialize context! [ 1515.735411][ T7425] imon 6-1:5.0: unable to register, err -19 [ 1515.789971][ T7425] usb 6-1: USB disconnect, device number 11 [ 1515.833722][ T7422] usb 10-1: config 3 has an invalid interface number: 137 but max is 1 [ 1515.833775][ T7422] usb 10-1: config 3 has an invalid interface number: 246 but max is 1 [ 1515.833832][ T7422] usb 10-1: config 3 has no interface number 0 [ 1515.833855][ T7422] usb 10-1: config 3 has no interface number 1 [ 1515.833914][ T7422] usb 10-1: config 3 interface 137 altsetting 8 bulk endpoint 0x2 has invalid maxpacket 8 [ 1515.833944][ T7422] usb 10-1: config 3 interface 246 altsetting 9 endpoint 0x1 has invalid maxpacket 21880, setting to 64 [ 1515.833967][ T7422] usb 10-1: config 3 interface 137 has no altsetting 0 [ 1515.833983][ T7422] usb 10-1: config 3 interface 246 has no altsetting 0 [ 1516.064935][ T7422] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1516.064995][ T7422] usb 10-1: Product: syz [ 1516.065055][ T7422] usb 10-1: Manufacturer: syz [ 1516.065077][ T7422] usb 10-1: SerialNumber: syz [ 1516.121653][T21071] raw-gadget.5 gadget.9: fail, usb_ep_enable returned -22 [ 1516.474932][ T7422] usb 10-1: USB disconnect, device number 16 [ 1516.496911][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1516.497616][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1516.498218][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1517.021142][T20289] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1517.342102][T21088] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1517.354812][T20289] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1517.368735][T21094] program syz.8.3836 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1517.466275][T20289] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1517.688024][T20289] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1517.688060][T20289] usb 2-1: Product: syz [ 1517.688085][T20289] usb 2-1: Manufacturer: syz [ 1517.688099][T20289] usb 2-1: SerialNumber: syz [ 1517.775182][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1517.864300][T20283] usb 10-1: new low-speed USB device number 17 using dummy_hcd [ 1517.979635][T20289] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1517.993461][T20289] usb 2-1: USB disconnect, device number 15 [ 1518.049583][T20289] usblp0: removed [ 1518.138377][T21105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1518.147291][T21105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1518.212410][T20283] usb 10-1: New USB device found, idVendor=1b1c, idProduct=1c1f, bcdDevice= 0.00 [ 1518.323127][T20283] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1518.323181][T20283] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 1518.323242][T20283] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1518.323290][T20283] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1518.342488][T20283] usb 10-1: config 0 descriptor?? [ 1518.361607][T21096] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1518.813723][T20289] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 1518.842374][T20283] hid (null): unknown global tag 0xe [ 1518.842404][T20283] hid (null): unknown global tag 0xe [ 1518.845932][T20283] corsair-psu 0003:1B1C:1C1F.003C: unknown main item tag 0x3 [ 1518.845963][T20283] corsair-psu 0003:1B1C:1C1F.003C: unknown global tag 0xe [ 1518.846030][T20283] corsair-psu 0003:1B1C:1C1F.003C: item 0 1 1 14 parsing failed [ 1518.848901][T20283] corsair-psu 0003:1B1C:1C1F.003C: probe with driver corsair-psu failed with error -22 [ 1519.075253][T20289] usb 9-1: Using ep0 maxpacket: 32 [ 1519.086499][ T7425] usb 10-1: USB disconnect, device number 17 [ 1519.134018][T20289] usb 9-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1519.245448][T20289] usb 9-1: config 0 has an invalid interface number: 196 but max is 0 [ 1519.245485][T20289] usb 9-1: config 0 has no interface number 0 [ 1519.245568][T20289] usb 9-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1519.245601][T20289] usb 9-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1519.245624][T20289] usb 9-1: config 0 interface 196 has no altsetting 0 [ 1519.480496][T20289] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1519.480531][T20289] usb 9-1: Product: syz [ 1519.480573][T20289] usb 9-1: Manufacturer: syz [ 1519.480594][T20289] usb 9-1: SerialNumber: syz [ 1519.509590][T20289] usb 9-1: config 0 descriptor?? [ 1519.521558][T21110] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1519.539691][T21101] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1519.920213][T20289] ipheth 9-1:0.196: Unable to find endpoints [ 1519.991252][T20289] usb 9-1: USB disconnect, device number 43 [ 1520.160656][T21120] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1521.552490][T21157] SET target dimension over the limit! [ 1521.686663][T21164] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3861'. [ 1521.854722][T21167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1521.855217][T21167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1521.945529][T21147] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1522.266859][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1522.267190][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1522.267462][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1522.696707][ T5676] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1522.768587][T21178] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3866'. [ 1522.803848][T21178] netlink: 156 bytes leftover after parsing attributes in process `syz.7.3866'. [ 1522.858892][ T5676] usb 10-1: Using ep0 maxpacket: 32 [ 1522.867526][ T5676] usb 10-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1522.879415][ T5676] usb 10-1: config 0 has an invalid interface number: 196 but max is 0 [ 1522.879466][ T5676] usb 10-1: config 0 has no interface number 0 [ 1522.879561][ T5676] usb 10-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1522.879662][ T5676] usb 10-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1522.879756][ T5676] usb 10-1: config 0 interface 196 has no altsetting 0 [ 1523.024729][ T5676] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1523.024781][ T5676] usb 10-1: Product: syz [ 1523.024806][ T5676] usb 10-1: Manufacturer: syz [ 1523.024850][ T5676] usb 10-1: SerialNumber: syz [ 1523.062901][ T5676] usb 10-1: config 0 descriptor?? [ 1523.083585][T21165] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1523.199746][T21171] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3863'. [ 1523.361203][ T5676] ipheth 10-1:0.196: Unable to find endpoints [ 1523.399076][ T5676] usb 10-1: USB disconnect, device number 18 [ 1523.541025][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1524.155363][T21187] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1524.399439][T21189] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1525.164683][ T7422] usb 10-1: new full-speed USB device number 19 using dummy_hcd [ 1525.629507][T21218] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3880'. [ 1525.644121][ T7422] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1525.660026][T21218] usb usb7: usbfs: process 21218 (syz.8.3880) did not claim interface 0 before use [ 1525.705473][ T7422] usb 10-1: not running at top speed; connect to a high speed hub [ 1525.705515][ T7422] usb 10-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 1525.735340][T21219] netlink: 156 bytes leftover after parsing attributes in process `syz.8.3880'. [ 1525.821804][ T7422] usb 10-1: config 127 has an invalid interface number: 124 but max is 0 [ 1525.821839][ T7422] usb 10-1: config 127 has no interface number 0 [ 1525.822235][ T7422] usb 10-1: config 127 interface 124 has no altsetting 0 [ 1526.053496][ T7422] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1526.053549][ T7422] usb 10-1: Product: syz [ 1526.053585][ T7422] usb 10-1: Manufacturer: syz [ 1526.053607][ T7422] usb 10-1: SerialNumber: syz [ 1526.617617][T21235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1526.619828][T21235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1526.855187][T21240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3888'. [ 1527.054319][ T7422] usb 10-1: USB disconnect, device number 19 [ 1527.219710][ T7422] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1527.499649][ T7422] usb 10-1: Using ep0 maxpacket: 16 [ 1527.507131][ T5676] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 1527.642698][T21257] wg1: Caught tx_queue_len zero misconfig [ 1527.653382][T21253] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1527.669374][ T7422] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1527.669444][ T7422] usb 10-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 1527.672505][ T5676] usb 9-1: Using ep0 maxpacket: 32 [ 1527.674174][ T5676] usb 9-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1527.715255][ T5676] usb 9-1: config 0 has an invalid interface number: 196 but max is 0 [ 1527.715322][ T5676] usb 9-1: config 0 has no interface number 0 [ 1527.715397][ T5676] usb 9-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1527.715482][ T5676] usb 9-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1527.715561][ T5676] usb 9-1: config 0 interface 196 has no altsetting 0 [ 1527.769143][ T5676] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1527.769201][ T5676] usb 9-1: Product: syz [ 1527.769218][ T5676] usb 9-1: Manufacturer: syz [ 1527.769255][ T5676] usb 9-1: SerialNumber: syz [ 1527.785065][ T7422] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1527.785118][ T7422] usb 10-1: can't read configurations, error -71 [ 1527.796022][ T5676] usb 9-1: config 0 descriptor?? [ 1527.799245][T21250] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1528.026886][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1528.027169][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1528.027482][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1528.129808][ T5676] ipheth 9-1:0.196: Unable to find endpoints [ 1528.191629][ T5676] usb 9-1: USB disconnect, device number 44 [ 1528.531927][T21263] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3897'. [ 1528.542138][T21263] usb usb7: usbfs: process 21263 (syz.9.3897) did not claim interface 0 before use [ 1528.545385][T21263] netlink: 156 bytes leftover after parsing attributes in process `syz.9.3897'. [ 1529.298378][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1529.626018][T21259] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3895'. [ 1529.749843][T21284] netlink: 'syz.1.3904': attribute type 17 has an invalid length. [ 1530.164369][T21261] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3896'. [ 1530.325382][ T5676] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1530.477068][ T5676] usb 2-1: Using ep0 maxpacket: 8 [ 1530.479769][ T5676] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1530.479838][ T5676] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1530.482023][ T5676] usb 2-1: config 4 interface 0 has no altsetting 0 [ 1530.502912][ T5676] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1530.502988][ T5676] usb 2-1: Manufacturer: syz [ 1530.503037][ T5676] usb 2-1: SerialNumber: syz [ 1530.829656][ T5676] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1530.847591][ T5676] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1530.847996][ T5676] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1530.876054][ T5676] usb 2-1: media controller created [ 1530.947008][ T5676] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1531.075673][ T5676] zl10353_read_register: readreg error (reg=127, ret==0) [ 1531.257302][ T5676] usb 2-1: USB disconnect, device number 16 [ 1531.708197][T21302] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3905'. [ 1531.835148][ T31] audit: type=1800 audit(1787767375.084:4086): pid=21306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3910" name="nullb0" dev="devtmpfs" ino=3834 res=0 errno=0 [ 1532.508775][ T5676] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 1532.552153][T21304] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1532.707023][ T5676] usb 9-1: Using ep0 maxpacket: 32 [ 1532.714306][ T5676] usb 9-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1532.730969][ T5676] usb 9-1: config 0 has an invalid interface number: 196 but max is 0 [ 1532.739637][ T5676] usb 9-1: config 0 has no interface number 0 [ 1532.746640][ T5676] usb 9-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1532.757166][ T5676] usb 9-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1532.770502][ T5676] usb 9-1: config 0 interface 196 has no altsetting 0 [ 1532.813213][ T5676] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1532.813258][ T5676] usb 9-1: Product: syz [ 1532.813310][ T5676] usb 9-1: Manufacturer: syz [ 1532.813484][ T5676] usb 9-1: SerialNumber: syz [ 1532.851409][ T5676] usb 9-1: config 0 descriptor?? [ 1532.864797][T21296] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1533.245690][ T5676] ipheth 9-1:0.196: Unable to find endpoints [ 1533.274717][ T5676] usb 9-1: USB disconnect, device number 45 [ 1533.606791][ T7425] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1533.766960][ T7425] usb 6-1: Using ep0 maxpacket: 16 [ 1533.777382][ T7425] usb 6-1: New USB device found, idVendor=0b05, idProduct=1837, bcdDevice= 0.00 [ 1533.790568][ T7425] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1533.790621][ T7425] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1533.790679][ T7425] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1533.830591][ T7425] usb 6-1: config 0 descriptor?? [ 1533.895318][T21326] random: crng reseeded on system resumption [ 1534.340527][T21335] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3912'. [ 1534.384923][ T7425] asus 0003:0B05:1837.003D: unknown main item tag 0x1 [ 1534.384984][ T7425] asus 0003:0B05:1837.003D: unknown main item tag 0x0 [ 1534.385017][ T7425] asus 0003:0B05:1837.003D: unknown main item tag 0x0 [ 1534.385050][ T7425] asus 0003:0B05:1837.003D: unknown main item tag 0x0 [ 1534.385082][ T7425] asus 0003:0B05:1837.003D: unknown main item tag 0x0 [ 1534.385163][ T7425] asus 0003:0B05:1837.003D: unknown main item tag 0x3 [ 1534.385196][ T7425] asus 0003:0B05:1837.003D: unknown main item tag 0x0 [ 1534.385236][ T7425] asus 0003:0B05:1837.003D: unknown main item tag 0x0 [ 1534.385267][ T7425] asus 0003:0B05:1837.003D: unknown main item tag 0x0 [ 1534.465355][ T7425] asus 0003:0B05:1837.003D: hidraw0: USB HID v0.81 Device [HID 0b05:1837] on usb-dummy_hcd.5-1/input0 [ 1534.480845][T21326] Unrecognized hibernate image header format! [ 1534.480888][T21326] PM: hibernation: Image mismatch: architecture specific data [ 1534.655477][T18766] usb 6-1: USB disconnect, device number 12 [ 1534.711247][T21338] fido_id[21338]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1534.756686][ T5676] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1534.959186][ T5676] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1534.972748][ T5676] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1535.074268][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1535.160648][ T5676] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1535.160699][ T5676] usb 10-1: Product: syz [ 1535.160734][ T5676] usb 10-1: Manufacturer: syz [ 1535.160752][ T5676] usb 10-1: SerialNumber: syz [ 1535.286684][ T31] audit: type=1800 audit(1787767378.534:4087): pid=21344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3921" name="nullb0" dev="devtmpfs" ino=3834 res=0 errno=0 [ 1535.488808][ T5676] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1535.528062][ T5676] usb 10-1: USB disconnect, device number 22 [ 1535.543245][ T5676] usblp0: removed [ 1535.706790][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1536.291833][T21352] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1537.045622][T21360] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1537.931036][T21370] binder: 21369:21370 ioctl c018620b 0 returned -14 [ 1538.252228][T21377] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3927'. [ 1538.844304][ T5676] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1539.031958][ T5676] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1539.086813][ T5676] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1539.124236][ T5676] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1539.132749][ T5676] usb 2-1: Product: syz [ 1539.137844][ T5676] usb 2-1: Manufacturer: syz [ 1539.142549][ T5676] usb 2-1: SerialNumber: syz [ 1539.555336][ T5676] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1539.603931][ T5676] usb 2-1: USB disconnect, device number 17 [ 1539.667209][ T5676] usblp0: removed [ 1540.177057][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1540.177381][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1540.241602][ T6603] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 1540.241812][T21402] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 1540.293290][T21400] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1540.609469][T21395] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1540.824477][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1541.576643][ T5676] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1541.738631][ T5676] usb 10-1: Using ep0 maxpacket: 8 [ 1541.744688][ T5676] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1541.755553][ T5676] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1541.767192][ T5676] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1541.777910][ T5676] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1541.788289][ T5676] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1541.801755][ T5676] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1541.841473][ T31] audit: type=1800 audit(1787767385.064:4088): pid=21420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3942" name="nullb0" dev="devtmpfs" ino=3834 res=0 errno=0 [ 1541.966409][T21419] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3944'. [ 1541.966476][T21419] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1541.966502][T21419] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 1542.065779][ T5676] usb 10-1: GET_CAPABILITIES returned 0 [ 1542.074148][ T5676] usbtmc 10-1:16.0: can't read capabilities [ 1542.281497][ T5676] usb 10-1: USB disconnect, device number 23 [ 1542.830473][ T7422] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 1542.979440][T15190] Bluetooth: hci2: command 0x0406 tx timeout [ 1543.082457][ T7422] usb 9-1: Using ep0 maxpacket: 8 [ 1543.137077][ T7422] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1543.245808][ T7422] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1543.245880][ T7422] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1543.245908][ T7422] usb 9-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1543.245972][ T7422] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1543.246131][ T7422] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1543.322883][ T7422] usbtmc 9-1:16.0: bulk endpoints not found [ 1543.332653][T21427] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3947'. [ 1543.407133][T20289] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1543.629478][T21444] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3951'. [ 1543.686654][T20289] usb 10-1: Using ep0 maxpacket: 32 [ 1543.732721][T20289] usb 10-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1543.845148][T20289] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1543.847648][T20289] usb 10-1: config 0 descriptor?? [ 1543.899637][T20289] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1544.007630][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1544.008385][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1544.009054][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1544.638966][T20289] gspca_vc032x: reg_w err -71 [ 1544.639010][T20289] gspca_vc032x: I2c Bus Busy Wait 00 [ 1544.639041][T20289] gspca_vc032x: I2c Bus Busy Wait 00 [ 1544.639057][T20289] gspca_vc032x: I2c Bus Busy Wait 00 [ 1544.639071][T20289] gspca_vc032x: I2c Bus Busy Wait 00 [ 1544.639084][T20289] gspca_vc032x: I2c Bus Busy Wait 00 [ 1544.639098][T20289] gspca_vc032x: I2c Bus Busy Wait 00 [ 1544.639113][T20289] gspca_vc032x: I2c Bus Busy Wait 00 [ 1544.639128][T20289] gspca_vc032x: I2c Bus Busy Wait 00 [ 1544.639142][T20289] gspca_vc032x: I2c Bus Busy Wait 00 [ 1544.639169][T20289] gspca_vc032x: I2c Bus Busy Wait 00 [ 1544.639184][T20289] gspca_vc032x: I2c Bus Busy Wait 00 [ 1544.639198][T20289] gspca_vc032x: I2c Bus Busy Wait 00 [ 1544.639213][T20289] gspca_vc032x: I2c Bus Busy Wait 00 [ 1544.639227][T20289] gspca_vc032x: I2c Bus Busy Wait 00 [ 1544.639242][T20289] gspca_vc032x: I2c Bus Busy Wait 00 [ 1544.639256][T20289] gspca_vc032x: I2c Bus Busy Wait 00 [ 1544.639270][T20289] gspca_vc032x: I2c Bus Busy Wait 00 [ 1544.639285][T20289] gspca_vc032x: I2c Bus Busy Wait 00 [ 1544.639300][T20289] gspca_vc032x: Unknown sensor... [ 1544.639381][T20289] vc032x 10-1:0.0: probe with driver vc032x failed with error -22 [ 1544.643475][T20289] usb 10-1: USB disconnect, device number 24 [ 1545.346727][T21451] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3953'. [ 1545.475106][T20283] usb 9-1: USB disconnect, device number 46 [ 1545.529937][T21455] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1546.019448][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.025833][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.045209][T21467] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1546.126720][ T7425] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 1546.288338][ T7425] usb 9-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1546.300350][ T7425] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1546.310812][ T7425] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1546.320579][ T7425] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1546.330919][ T7425] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1546.343837][ T7425] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1546.416066][T20289] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1546.589359][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1546.678509][T20289] usb 10-1: Using ep0 maxpacket: 32 [ 1546.734495][T20289] usb 10-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1546.837033][ T7425] gud 9-1:1.0: No supported pixel formats found [ 1546.843529][ T7425] gud 9-1:1.0: probe with driver gud failed with error -22 [ 1546.856230][T20289] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1546.863404][T20289] usb 10-1: config 0 descriptor?? [ 1547.066588][ T7422] usb 9-1: USB disconnect, device number 47 [ 1547.169742][T20289] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1547.173015][T20289] usb 10-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 1547.173103][T20289] usb 10-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 1547.258616][T20283] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1547.396628][T21469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1547.405601][T21469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1547.417120][T21469] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3959'. [ 1547.432008][T21469] netlink: 64 bytes leftover after parsing attributes in process `syz.9.3959'. [ 1547.432058][T21469] netlink: 64 bytes leftover after parsing attributes in process `syz.9.3959'. [ 1547.513320][T20283] usb 6-1: Using ep0 maxpacket: 8 [ 1547.518813][ T7425] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 1547.567801][T20283] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1547.678554][T20283] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1547.678614][T20283] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1547.678662][T20283] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1547.678761][T20283] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1547.678896][T20283] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1547.726803][ T7425] usb 2-1: not running at top speed; connect to a high speed hub [ 1547.726842][ T7425] usb 2-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 1547.760089][ T7425] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1547.760176][ T7425] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1547.806919][ T7425] uvcvideo 2-1:1.0: Found UVC 1.00 device (046d:0825) [ 1547.998370][T20283] usb 6-1: GET_CAPABILITIES returned 0 [ 1547.998444][T20283] usbtmc 6-1:16.0: can't read capabilities [ 1548.093536][T21491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1548.105662][T21491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1548.206281][T18766] usb 6-1: USB disconnect, device number 13 [ 1548.499633][T20283] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 1548.734002][ T7425] uvcvideo 2-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 1548.734084][ T7425] uvcvideo 2-1:1.1: Failed to initialize the device (-71). [ 1548.734849][ T7425] uvcvideo 2-1:1.0: probe with driver uvcvideo failed with error -71 [ 1548.773461][ T7425] usb 2-1: USB disconnect, device number 18 [ 1548.789784][T20283] usb 9-1: Using ep0 maxpacket: 8 [ 1548.849084][T20283] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1548.970220][T20283] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1548.970291][T20283] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1548.970321][T20283] usb 9-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1548.970395][T20283] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1548.970548][T20283] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1549.041954][T20283] usbtmc 9-1:16.0: bulk endpoints not found [ 1549.671170][T21505] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3974'. [ 1549.785148][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1549.785701][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1549.786360][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1549.793667][ T7425] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1549.956926][ T7425] usb 2-1: Using ep0 maxpacket: 32 [ 1549.962892][ T7425] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1549.973828][ T7425] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1549.985936][ T7425] usb 2-1: config 0 descriptor?? [ 1550.202218][ T7425] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1550.353281][T21523] netlink: 774 bytes leftover after parsing attributes in process `syz.7.3982'. [ 1550.353334][T21523] netlink: 'syz.7.3982': attribute type 1 has an invalid length. [ 1550.415451][T21517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1550.416671][T21517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1550.458646][T21517] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3980'. [ 1550.501523][T21517] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3980'. [ 1550.501578][T21517] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3980'. [ 1550.652786][T21529] dummy0: Caught tx_queue_len zero misconfig [ 1551.130744][T20060] usb 9-1: USB disconnect, device number 48 [ 1551.867665][T21561] binder: 21560:21561 unknown command 0 [ 1551.867708][T21561] binder: 21560:21561 ioctl c0306201 2000000001c0 returned -22 [ 1552.227525][T21570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1552.228666][T21570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1552.239350][T21570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1552.240474][T21570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1552.335329][T21570] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4000'. [ 1552.349434][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1552.377029][T21570] netlink: 64 bytes leftover after parsing attributes in process `syz.7.4000'. [ 1552.690345][T20060] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 1552.856656][T20060] usb 9-1: Using ep0 maxpacket: 8 [ 1552.862541][T20060] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1552.873456][T20060] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1552.873504][T20060] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1552.873535][T20060] usb 9-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1552.873561][T20060] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1552.873606][T20060] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1552.981748][T20060] usbtmc 9-1:16.0: bulk endpoints not found [ 1553.077368][T21583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1553.087666][T21583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1553.504521][T21588] __nla_validate_parse: 1 callbacks suppressed [ 1553.511020][T21588] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4004'. [ 1553.780802][T21591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1553.791148][T21591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1555.461770][ T7422] usb 9-1: USB disconnect, device number 49 [ 1555.528245][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1555.528504][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1555.528809][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1555.612795][ T32] INFO: task syz.6.3489:19824 blocked for more than 143 seconds. [ 1555.613349][ T32] Tainted: G L syzkaller #0 [ 1555.613397][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disabl ** replaying previous printk message ** [ 1555.613397][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1555.613413][ T32] task:syz.6.3489 state:D stack:25640 pid:19824 tgid:19824 ppid:8773 task_flags:0x400040 flags:0x00080002 [ 1555.613495][ T32] Call Trace: [ 1555.613508][ T32] [ 1555.613526][ T32] __schedule+0x17d4/0x5820 [ 1555.613601][ T32] ? __pfx___schedule+0x10/0x10 [ 1555.613652][ T32] ? schedule+0x90/0x2b0 [ 1555.613696][ T32] schedule+0x164/0x2b0 [ 1555.613740][ T32] schedule_preempt_disabled+0x13/0x30 [ 1555.613767][ T32] __mutex_lock+0x7c1/0x1550 [ 1555.613803][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1555.613837][ T32] ? usbdev_release+0x80/0x780 [ 1555.613867][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1555.613896][ T32] ? __fsnotify_parent+0x267/0x620 [ 1555.613945][ T32] ? __pfx___fsnotify_parent+0x10/0x10 [ 1555.613993][ T32] usbdev_release+0x80/0x780 [ 1555.614027][ T32] ? __pfx_usbdev_release+0x10/0x10 [ 1555.614054][ T32] __fput+0x418/0xa50 [ 1555.614093][ T32] task_work_run+0x1d9/0x270 [ 1555.614127][ T32] ? __pfx_task_work_run+0x10/0x10 [ 1555.614167][ T32] exit_to_user_mode_loop+0x204/0x770 [ 1555.614196][ T32] ? rcu_is_watching+0x16/0xb0 [ 1555.614232][ T32] do_syscall_64+0x328/0x520 [ 1555.614260][ T32] ? trace_irq_disable+0x3b/0x140 [ 1555.614286][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1555.614314][ T32] ? clear_bhb_loop+0x70/0xc0 [ 1555.614350][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1555.614369][ T32] RIP: 0033:0x7f74baf9e0d9 [ 1555.614387][ T32] RSP: 002b:00007f74bb34fba8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1555.614409][ T32] RAX: 0000000000000000 RBX: 00007f74bb227da0 RCX: 00007f74baf9e0d9 [ 1555.614424][ T32] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1555.614436][ T32] RBP: 00007f74bb227da0 R08: 0000000000000006 R09: 0000000000000000 [ 1555.614450][ T32] R10: 00007f74bb227cb0 R11: 0000000000000246 R12: 0000000000157091 [ 1555.614463][ T32] R13: 00007f74bb22618c R14: 0000000000156e77 R15: 00007f74bb34fcb0 [ 1555.614497][ T32] [ 1555.614508][ T32] INFO: task syz.6.3489:19825 blocked for more than 143 seconds. [ 1555.614524][ T32] Tainted: G L syzkaller #0 [ 1555.614536][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1555.614546][ T32] task:syz.6.3489 state:D stack:25720 pid:19825 tgid:19824 ppid:8773 task_flags:0x480140 flags:0x00080002 [ 1555.614598][ T32] Call Trace: [ 1555.614606][ T32] [ 1555.614617][ T32] __schedule+0x17d4/0x5820 [ 1555.614666][ T32] ? __pfx___schedule+0x10/0x10 [ 1555.614701][ T32] ? schedule+0x90/0x2b0 [ 1555.614732][ T32] schedule+0x164/0x2b0 [ 1555.614761][ T32] schedule_timeout+0xc0/0x2c0 [ 1555.614787][ T32] ? __pfx_schedule_timeout+0x10/0x10 [ 1555.614814][ T32] ? do_raw_spin_lock+0x12b/0x2f0 [ 1555.614846][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 1555.614875][ T32] ? wait_for_completion+0x272/0x5e0 [ 1555.614922][ T32] wait_for_completion+0x2ca/0x5e0 [ 1555.614973][ T32] ? __pfx_wait_for_completion+0x10/0x10 [ 1555.614999][ T32] ? kobject_put+0x50f/0x550 [ 1555.615027][ T32] i2c_del_adapter+0x281/0x430 [ 1555.615049][ T32] ? __pfx_rpm_resume+0x10/0x10 [ 1555.615076][ T32] ? __pfx_i2c_del_adapter+0x10/0x10 [ 1555.615099][ T32] ? usb_disable_interface+0x31d/0x350 [ 1555.615128][ T32] osif_disconnect+0x44/0x70 [ 1555.615150][ T32] usb_unbind_interface+0x295/0x9f0 [ 1555.615176][ T32] ? kernfs_remove_by_name_ns+0x101/0x140 [ 1555.615200][ T32] ? kernfs_remove_by_name_ns+0x101/0x140 [ 1555.615221][ T32] ? __pfx_usb_unbind_interface+0x10/0x10 [ 1555.615247][ T32] device_release_driver_internal+0x4f5/0x880 [ 1555.615276][ T32] bus_remove_device+0x444/0x560 [ 1555.615300][ T32] ? __pfx_bus_remove_device+0x10/0x10 [ 1555.615323][ T32] ? kernfs_remove_by_name_ns+0x101/0x140 [ 1555.615345][ T32] device_del+0x524/0x8f0 [ 1555.615374][ T32] ? __pfx_device_del+0x10/0x10 [ 1555.615396][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1555.615422][ T32] usb_disable_device+0x3d4/0x8d0 [ 1555.615453][ T32] usb_disconnect+0x346/0x9a0 [ 1555.615481][ T32] hub_quiesce+0x171/0x330 [ 1555.615515][ T32] hub_disconnect+0xc6/0x450 [ 1555.615543][ T32] usb_unbind_interface+0x295/0x9f0 [ 1555.615569][ T32] ? kernfs_remove_by_name_ns+0x101/0x140 [ 1555.615593][ T32] ? kernfs_remove_by_name_ns+0x101/0x140 [ 1555.615614][ T32] ? __pfx_usb_unbind_interface+0x10/0x10 [ 1555.615639][ T32] device_release_driver_internal+0x4f5/0x880 [ 1555.615669][ T32] proc_disconnect_claim+0x34a/0x3e0 [ 1555.615692][ T32] ? __pfx_proc_disconnect_claim+0x10/0x10 [ 1555.615743][ T32] usbdev_ioctl+0x132d/0x2120 [ 1555.615790][ T32] ? __pfx_usbdev_ioctl+0x10/0x10 [ 1555.615815][ T32] ? __fget_files+0x2a/0x420 [ 1555.615838][ T32] ? __fget_files+0x3a2/0x420 [ 1555.615860][ T32] ? __fget_files+0x2a/0x420 [ 1555.615886][ T32] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1555.615911][ T32] ? __pfx_usbdev_ioctl+0x10/0x10 [ 1555.615929][ T32] __se_sys_ioctl+0xfc/0x170 [ 1555.615960][ T32] do_syscall_64+0x166/0x520 [ 1555.615979][ T32] ? trace_irq_disable+0x3b/0x140 [ 1555.616000][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1555.616019][ T32] ? clear_bhb_loop+0x70/0xc0 [ 1555.616042][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1555.616061][ T32] RIP: 0033:0x7f74baf9e0d9 [ 1555.616077][ T32] RSP: 002b:00007f74bbe8b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1555.616099][ T32] RAX: ffffffffffffffda RBX: 00007f74bb225fa0 RCX: 00007f74baf9e0d9 [ 1555.616114][ T32] RDX: 0000200000000140 RSI: 000000008108551b RDI: 000000000000000a [ 1555.616127][ T32] RBP: 00007f74bb035024 R08: 0000000000000000 R09: 0000000000000000 [ 1555.616141][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1555.616153][ T32] R13: 00007f74bb226038 R14: 00007f74bb225fa0 R15: 00007f74bb34fa48 [ 1555.616181][ T32] [ 1555.616190][ T32] INFO: task syz.6.3489:19826 blocked for more than 143 seconds. [ 1555.616206][ T32] Tainted: G L syzkaller #0 [ 1555.616218][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1555.616227][ T32] task:syz.6.3489 state:D stack:28808 pid:19826 tgid:19824 ppid:8773 task_flags:0x400040 flags:0x00080002 [ 1555.616283][ T32] Call Trace: [ 1555.616291][ T32] [ 1555.616303][ T32] __schedule+0x17d4/0x5820 [ 1555.616351][ T32] ? __pfx___schedule+0x10/0x10 [ 1555.616385][ T32] ? schedule+0x90/0x2b0 [ 1555.616416][ T32] schedule+0x164/0x2b0 [ 1555.616445][ T32] schedule_preempt_disabled+0x13/0x30 [ 1555.616464][ T32] __mutex_lock+0x7c1/0x1550 [ 1555.616508][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1555.616542][ T32] ? usbdev_ioctl+0x13f/0x2120 [ 1555.616570][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1555.616599][ T32] ? hook_file_ioctl+0x1f2/0x600 [ 1555.616649][ T32] usbdev_ioctl+0x13f/0x2120 [ 1555.616681][ T32] ? __pfx_usbdev_ioctl+0x10/0x10 [ 1555.616704][ T32] ? __fget_files+0x2a/0x420 [ 1555.616734][ T32] ? __fget_files+0x3a2/0x420 [ 1555.616766][ T32] ? __fget_files+0x2a/0x420 [ 1555.616800][ T32] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1555.616834][ T32] ? __pfx_usbdev_ioctl+0x10/0x10 [ 1555.616860][ T32] __se_sys_ioctl+0xfc/0x170 [ 1555.616900][ T32] do_syscall_64+0x166/0x520 [ 1555.616927][ T32] ? trace_irq_disable+0x3b/0x140 [ 1555.616952][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1555.616978][ T32] ? clear_bhb_loop+0x70/0xc0 [ 1555.617011][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1555.617039][ T32] RIP: 0033:0x7f74baf9e0d9 [ 1555.617062][ T32] RSP: 002b:00007f74bbe6a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1555.617093][ T32] RAX: ffffffffffffffda RBX: 00007f74bb226090 RCX: 00007f74baf9e0d9 [ 1555.617113][ T32] RDX: 0000000000000000 RSI: 0000000000005522 RDI: 000000000000000a [ 1555.617131][ T32] RBP: 00007f74bb035024 R08: 0000000000000000 R09: 0000000000000000 [ 1555.617150][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1555.617166][ T32] R13: 00007f74bb226128 R14: 00007f74bb226090 R15: 00007f74bb34fa48 [ 1555.617204][ T32] [ 1555.617218][ T32] INFO: task syz.6.3489:19828 blocked for more than 143 seconds. [ 1555.617242][ T32] Tainted: G L syzkaller #0 [ 1555.617259][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1555.617274][ T32] task:syz.6.3489 state:D stack:28808 pid:19828 tgid:19824 ppid:8773 task_flags:0x400040 flags:0x00080002 [ 1555.617353][ T32] Call Trace: [ 1555.617364][ T32] [ 1555.617382][ T32] __schedule+0x17d4/0x5820 [ 1555.617452][ T32] ? __pfx___schedule+0x10/0x10 [ 1555.617509][ T32] ? schedule+0x90/0x2b0 [ 1555.617552][ T32] schedule+0x164/0x2b0 [ 1555.617593][ T32] schedule_preempt_disabled+0x13/0x30 [ 1555.617618][ T32] __mutex_lock+0x7c1/0x1550 [ 1555.617652][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1555.617684][ T32] ? usbdev_ioctl+0x13f/0x2120 [ 1555.617712][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1555.617743][ T32] ? hook_file_ioctl+0x1f2/0x600 [ 1555.617796][ T32] usbdev_ioctl+0x13f/0x2120 [ 1555.617830][ T32] ? __pfx_usbdev_ioctl+0x10/0x10 [ 1555.617854][ T32] ? __fget_files+0x2a/0x420 [ 1555.617897][ T32] ? __fget_files+0x3a2/0x420 [ 1555.617926][ T32] ? __fget_files+0x2a/0x420 [ 1555.617962][ T32] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1555.617997][ T32] ? __pfx_usbdev_ioctl+0x10/0x10 [ 1555.618024][ T32] __se_sys_ioctl+0xfc/0x170 [ 1555.618089][ T32] do_syscall_64+0x166/0x520 [ 1555.618117][ T32] ? trace_irq_disable+0x3b/0x140 [ 1555.618144][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1555.618172][ T32] ? clear_bhb_loop+0x70/0xc0 [ 1555.618204][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1555.618232][ T32] RIP: 0033:0x7f74baf9e0d9 [ 1555.618256][ T32] RSP: 002b:00007f74bbe49028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1555.618287][ T32] RAX: ffffffffffffffda RBX: 00007f74bb226180 RCX: 00007f74baf9e0d9 [ 1555.618308][ T32] RDX: 0000200000000040 RSI: 0000000080045510 RDI: 000000000000000a [ 1555.618328][ T32] RBP: 00007f74bb035024 R08: 0000000000000000 R09: 0000000000000000 [ 1555.618347][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1555.618366][ T32] R13: 00007f74bb226218 R14: 00007f74bb226180 R15: 00007f74bb34fa48 [ 1555.618405][ T32] [ 1555.618456][ T32] [ 1555.618456][ T32] Showing all locks held in the system: [ 1555.618473][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 1555.618502][ T32] #0: ffffffff8ed5c6a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1555.618612][ T32] locks held by getty/5380: 2, on CPU#1: [ 1555.618632][ T32] #0: ffff8880364450a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1555.618709][ T32] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1555.618809][ T32] locks held by kworker/0:12/7422: 3, last CPU#0: [ 1555.618828][ T32] #0: ffff888020aaf140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1555.618909][ T32] #1: ffffc900038b7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1555.618989][ T32] #2: ffff88802a5b91d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 1555.619074][ T32] locks held by kworker/1:12/7425: 5, on CPU#1: [ 1555.619093][ T32] #0: ffff888020aaf140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1555.619174][ T32] #1: ffffc90003807c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1555.619255][ T32] #2: ffff888029eac1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 1555.619334][ T32] #3: ffff8880598581d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1555.619413][ T32] #4: ffff88807cc941a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1555.619518][ T32] locks held by syz.6.3489/19824: 1, on CPU#0: [ 1555.619538][ T32] #0: ffff88802a53c1d8 (&dev->mutex){....}-{4:4}, at: usbdev_release+0x80/0x780 [ 1555.619611][ T32] locks held by syz.6.3489/19825: 4, on CPU#1: [ 1555.619631][ T32] #0: ffff88802a53c1d8 (&dev->mutex){....}-{4:4}, at: usbdev_ioctl+0x13f/0x2120 [ 1555.619703][ T32] #1: ffff88802a5731a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 1555.619787][ T32] #2: ffff88807b23c1d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xfc/0x9a0 [ 1555.619881][ T32] #3: ffff888025b261a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 1555.619965][ T32] locks held by syz.6.3489/19826: 1, on CPU#0: [ 1555.619986][ T32] #0: ffff88802a53c1d8 (&dev->mutex){....}-{4:4}, at: usbdev_ioctl+0x13f/0x2120 [ 1555.620061][ T32] locks held by syz.6.3489/19828: 1, on CPU#1: [ 1555.620081][ T32] #0: ffff88802a53c1d8 (&dev->mutex){....}-{4:4}, at: usbdev_ioctl+0x13f/0x2120 [ 1555.620158][ T32] locks held by kworker/0:7/20289: 6, on CPU#0: [ 1555.620177][ T32] #0: ffff888020aaf140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1555.620261][ T32] #1: ffffc90003967c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1555.620345][ T32] #2: ffff88802a5df1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 1555.620427][ T32] #3: ffff8880121fa1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1555.620515][ T32] #4: ffff88807a7de1a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1555.620597][ T32] #5: ffffffff8ebf7cc8 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xfc/0x2c0 [ 1555.620678][ T32] locks held by syz.8.4001/21589: 1, on CPU#0: [ 1555.620699][ T32] #0: ffffffff8ed62938 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 1555.620782][ T32] locks held by syz.9.4010/21599: 1, last CPU#1: [ 1555.620803][ T32] #0: ffff8880213005f0 (&u->iolock){+.+.}-{4:4}, at: __unix_dgram_recvmsg+0x1e3/0xd70 [ 1555.620889][ T32] locks held by syz.7.4016/21614: 1, on CPU#1: [ 1555.620909][ T32] #0: ffff88807c3a03b8 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 1555.620988][ T32] locks held by syz.7.4016/21620: 1, last CPU#0: [ 1555.621009][ T32] #0: ffff88807c3a03b8 (&mm->mmap_lock){++++}-{4:4}, at: __mm_populate+0x182/0x390 [ 1555.621088][ T32] locks held by syz.5.4018/21622: 1, last CPU#1: [ 1555.621109][ T32] #0: ffff88805a480ae0 (&sb->s_type->i_mutex_key#3/1){+.+.}-{4:4}, at: start_dirop+0x4f/0x90 [ 1555.621209][ T32] [ 1555.621220][ T32] ============================================= [ 1555.621220][ T32] [ 1555.621234][ T32] NMI backtrace for cpu 0 [ 1555.621253][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1555.621283][ T32] Tainted: [L]=SOFTLOCKUP [ 1555.621293][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1555.621306][ T32] Call Trace: [ 1555.621317][ T32] [ 1555.621327][ T32] dump_stack_lvl+0xe8/0x150 [ 1555.621361][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 1555.621395][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1555.621434][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1555.621472][ T32] sys_info+0x135/0x170 [ 1555.621507][ T32] watchdog+0xfd7/0x1030 [ 1555.621537][ T32] ? watchdog+0x1c7/0x1030 [ 1555.621567][ T32] kthread+0x38b/0x480 [ 1555.621590][ T32] ? __pfx_watchdog+0x10/0x10 [ 1555.621610][ T32] ? __pfx_kthread+0x10/0x10 [ 1555.621634][ T32] ret_from_fork+0x514/0xb70 [ 1555.621683][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1555.621707][ T32] ? __switch_to+0xc89/0x1420 [ 1555.621741][ T32] ? __pfx_kthread+0x10/0x10 [ 1555.621765][ T32] ret_from_fork_asm+0x1a/0x30 [ 1555.621816][ T32] [ 1555.621830][ T32] Sending NMI from CPU 0 to CPUs 1: [ 1555.621874][ C1] NMI backtrace for cpu 1 [ 1555.621892][ C1] CPU: 1 UID: 0 PID: 4974 Comm: klogd Tainted: G L syzkaller #0 PREEMPT(full) [ 1555.621919][ C1] Tainted: [L]=SOFTLOCKUP [ 1555.621926][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1555.621938][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp1+0x0/0xb0 [ 1555.621975][ C1] Code: 08 06 00 00 00 48 89 7c 0a 10 48 89 74 0a 18 48 89 44 0a 20 c3 cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 04 24 65 48 8b 0d 28 ee cb 11 65 48 8b 15 28 ee [ 1555.621998][ C1] RSP: 0018:ffffc90002ec7998 EFLAGS: 00000246 [ 1555.622015][ C1] RAX: 0000000000000000 RBX: ffff8880253a2200 RCX: ffff88807f480000 [ 1555.622030][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1555.622042][ C1] RBP: ffffc90002ec7ab0 R08: ffff8880253a17bb R09: 1ffff11004a742f7 [ 1555.622057][ C1] R10: dffffc0000000000 R11: ffffed1004a742f8 R12: dffffc0000000000 [ 1555.622071][ C1] R13: 1ffff920005d8f40 R14: ffff8880314b7b40 R15: 0000000000000000 [ 1555.622086][ C1] FS: 00007ff9bb877c80(0000) GS:ffff888124de6000(0000) knlGS:0000000000000000 [ 1555.622103][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1555.622117][ C1] CR2: 0000001b32b23ffc CR3: 000000007f6e4000 CR4: 00000000003526f0 [ 1555.622135][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000460 [ 1555.622147][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1555.622159][ C1] Call Trace: [ 1555.622166][ C1] [ 1555.622174][ C1] sk_filter_trim_cap+0xaa/0xd70 [ 1555.622200][ C1] ? __pfx_sk_filter_trim_cap+0x10/0x10 [ 1555.622221][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 1555.622249][ C1] ? _raw_spin_unlock+0x28/0x50 [ 1555.622280][ C1] unix_dgram_sendmsg+0x758/0x17b0 [ 1555.622322][ C1] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1555.622355][ C1] ? aa_sock_msg_perm+0xdb/0x1c0 [ 1555.622387][ C1] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1555.622416][ C1] sock_sendmsg_nosec+0x13a/0x180 [ 1555.622439][ C1] __sys_sendto+0x408/0x5a0 [ 1555.622464][ C1] ? bpf_lsm_capable+0x9/0x20 [ 1555.622496][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 1555.622527][ C1] ? irqentry_exit+0x218/0x910 [ 1555.622553][ C1] ? rcu_is_watching+0x16/0xb0 [ 1555.622579][ C1] __x64_sys_sendto+0xde/0x100 [ 1555.622605][ C1] do_syscall_64+0x166/0x520 [ 1555.622626][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1555.622646][ C1] ? clear_bhb_loop+0x70/0xc0 [ 1555.622668][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1555.622687][ C1] RIP: 0033:0x7ff9bb9c7407 [ 1555.622703][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1555.622719][ C1] RSP: 002b:00007fffe79b0f00 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 1555.622738][ C1] RAX: ffffffffffffffda RBX: 00007ff9bb877c80 RCX: 00007ff9bb9c7407 [ 1555.622753][ C1] RDX: 0000000000000052 RSI: 00007fffe79b1040 RDI: 0000000000000003 [ 1555.622766][ C1] RBP: 00007fffe79b1470 R08: 0000000000000000 R09: 0000000000000000 [ 1555.622779][ C1] R10: 0000000000004000 R11: 0000000000000202 R12: 00007fffe79b1488 [ 1555.622792][ C1] R13: 00007fffe79b1040 R14: 0000000000000037 R15: 00007fffe79b1040 [ 1555.622815][ C1] [ 1555.648261][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 1557.459903][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1557.470599][ T32] Tainted: [L]=SOFTLOCKUP [ 1557.474934][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1557.485004][ T32] Call Trace: [ 1557.488285][ T32] [ 1557.491220][ T32] vpanic+0x56d/0xa60 [ 1557.495226][ T32] ? __pfx___schedule+0x10/0x10 [ 1557.500103][ T32] ? __pfx_vpanic+0x10/0x10 [ 1557.504623][ T32] panic+0xc5/0xd0 [ 1557.508353][ T32] ? __pfx_panic+0x10/0x10 [ 1557.512779][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 1557.518257][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 1557.523669][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 1557.529887][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 1557.536086][ T32] watchdog+0x1030/0x1030 [ 1557.540459][ T32] ? watchdog+0x1c7/0x1030 [ 1557.544913][ T32] kthread+0x38b/0x480 [ 1557.549014][ T32] ? __pfx_watchdog+0x10/0x10 [ 1557.553715][ T32] ? __pfx_kthread+0x10/0x10 [ 1557.558342][ T32] ret_from_fork+0x514/0xb70 [ 1557.562966][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1557.568110][ T32] ? __switch_to+0xc89/0x1420 [ 1557.572833][ T32] ? __pfx_kthread+0x10/0x10 [ 1557.577454][ T32] ret_from_fork_asm+0x1a/0x30 [ 1557.582277][ T32] [ 1557.594980][ T32] Kernel Offset: disabled [ 1557.599341][ T32] Rebooting in 86400 seconds..