last executing test programs: 55.992116973s ago: executing program 1 (id=319): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r0, {0x0, 0xfff3}, {0xffff, 0x6}, {0x8, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x6c07}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008094}, 0x4c840) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1e, &(0x7f0000000240), &(0x7f0000000300)=0x4) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) r1 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="12012000f1048108cd060202d4c34e01000109021b1901000000d40904150001da40df000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2400, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f0000000340)={0x0, 0xada, 0x0, 0x0, 0x0, 0x26}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) (async) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0xc0800, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000040)={0x7, 0x2, 0x4, 0x7fb63abb, 0x5, "008ef14ba278887cb0baba08431799317e6324"}) (async) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) (async) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000200)=@e={0xff, 0x3, 0x12, 0x5, @generic=0x1, 0x4, 0x8, 0x4}) (async) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r6, 0x40045569, 0x9) (async) r7 = syz_io_uring_setup(0xefd, &(0x7f0000000180)={0x0, 0x1000595e, 0x400, 0x2, 0x51}, 0x0, &(0x7f0000000000), &(0x7f0000000080)=0x0) syz_io_uring_submit(0x0, 0x0, r8, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r7, 0x57bb, 0xfffffffd, 0x9, 0x0, 0x1a) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r6, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r6, 0x5501) (async) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x29, 0x0) munlockall() 54.216162036s ago: executing program 1 (id=328): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$uac3(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000340)=ANY=[@ANYBLOB="0014af"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000a80)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000d40)={0x84, &(0x7f0000000740)={0x20, 0x15, 0x4, "8b27be98"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000780)=""/180, 0xb4}], 0x1, &(0x7f0000000ac0)=""/8, 0x8}, 0xe}], 0x1, 0x40002080, 0x0) syz_usb_control_io$uac3(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000180)={0x40, 0x13, 0x4, "19040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) r3 = socket$inet(0x2, 0x801, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r3, 0x1) 53.463246789s ago: executing program 1 (id=336): r0 = socket$inet6(0xa, 0x3, 0xff) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket(0x10, 0x80002, 0x0) sendmsg(r2, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e140000001a00ffffba16a0aa1c091dbfa1090000", 0x38}], 0x1}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0xa, 0x0, 0x3d, 0x10000, 'syz1\x00', 0x5}) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x10, 0x9]}}) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40000000100003040000000000000000", @ANYRES32], 0x40}}, 0x0) r3 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf8d77", 0x8, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x10004, 0x2, 0xdddd1000, 0x2000, &(0x7f000000f000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) sendmsg$rds(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000002c0)=""/63, 0x3f}, {&(0x7f0000000480)=""/174, 0xae}, {&(0x7f00000006c0)=""/197, 0xc5}], 0x3, 0x0, 0x0, 0x20000001}, 0x4004884) syz_kvm_setup_cpu$x86(r6, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) recvmmsg(r2, &(0x7f0000007a80), 0x17, 0x40018020, 0x0) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="644c50a0662338ff3f2095f354331222ab88ca0955b95c2627ae53fb3838c6d51b83100813dcb49107f502b5b745474674dd9f3654f1a01d722d79831b5f", 0x3e}], 0x1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x1, 0x3, 0xfffffffd, 0x14, @dev={0xfe, 0x80, '\x00', 0x12}, @remote, 0x700, 0xba08}}) 52.765188435s ago: executing program 1 (id=338): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1, 0x0, 0x8000}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0xb, 0x8, 0x6}) readv(r0, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x20}], 0x1) eventfd(0xffff8001) syz_emit_ethernet(0x8e, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r0], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) sendto(r2, &(0x7f0000000100)="efc97c181662e7ca5f231a710635b27cb7788ffb1a5a96f123c29404b4c9433c73662fa074af378de2b332cfa9dffb1aaed7cd2548350675da3d2d8cbfe9415b17101a8ff9e176c7e28fab32d7fb9c2d3f598c76da63995dd3cf6397c933", 0x5e, 0x8801, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0xe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x7, 0x1, 0x4, 0x0, 0x9}) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405668, &(0x7f0000000200)={0x9, 0x1, 0x1, "0000087aba10fdfffffbe30b51751bc53051a30000000000000016ebffffff00", 0x34565559}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x104000, 0x0) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300), 0x24a842, 0x0) write$dsp(r7, &(0x7f0000000b80)="eb67b6", 0x3) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r7, 0x0) close(r7) bind$rxrpc(r4, &(0x7f0000000180)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x92}}, 0x24) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c00098008000140c0580001080008400000000114"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 51.584654802s ago: executing program 1 (id=342): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, 0x0, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) sendto(0xffffffffffffffff, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x4044084, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x7f3a, &(0x7f0000000200), 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) 51.289441497s ago: executing program 1 (id=343): openat$nvram(0xffffffffffffff9c, &(0x7f0000000c80), 0x283, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000c80), 0x283, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x20004000) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x4c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x1771}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sched_setattr(0x0, &(0x7f0000000400)={0x38, 0x5, 0x0, 0x6, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x4}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) (async) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) sendfile(r1, r1, 0x0, 0x200000) 51.149762553s ago: executing program 32 (id=343): openat$nvram(0xffffffffffffff9c, &(0x7f0000000c80), 0x283, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000c80), 0x283, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x20004000) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x4c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x1771}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sched_setattr(0x0, &(0x7f0000000400)={0x38, 0x5, 0x0, 0x6, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x4}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) (async) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) sendfile(r1, r1, 0x0, 0x200000) 10.035998209s ago: executing program 0 (id=543): sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000040)={0x14, 0x14, 0x400, 0x2070bd25, 0x25dfdbfb, {0x11, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008010) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') utimensat(r0, 0x0, &(0x7f0000000040)={{0x0, 0x3ffffffe}, {0x0, 0x3fffffff}}, 0x0) syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)=ANY=[], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ncm(0x4, 0x9b, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x89, 0x2, 0x1, 0x0, 0x40, 0x3, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "088ff5d5a2"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x3, 0x3, 0x7}, {0x6, 0x24, 0x1a, 0x6, 0x38}, [@acm={0x4, 0x24, 0x2, 0x7}, @mdlm={0x15, 0x24, 0x12, 0xfff0}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x8}, @country_functional={0xa, 0x24, 0x7, 0xff, 0xb15e, [0xb, 0x91]}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x3, 0x2, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x1, 0x8, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x5, 0x8}}}}}}}]}}, &(0x7f0000000200)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x7, 0x40, 0x2, 0xff, 0xee}, 0x16, &(0x7f0000000100)=ANY=[@ANYBLOB="050f1600020a9003000000000d090007100200be0500"], 0x2, [{0x6a, &(0x7f0000000140)=@string={0x6a, 0x3, "8e9399c79fad200b8813fad4d832f51d5ba6c4a7a59fe74930fa512fe51d75afe511e6bb8c03eac7bc63f294f0289cce1414dc19187d7b9dd06a01a7b5b2b0a0357645c71b101f405e1bd9fe8b3423870caa1fb1f019bacf24f5d80a47270d798bed73a53dfba79b"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1401}}]}) 7.063898844s ago: executing program 5 (id=563): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000100)={0x80000000, 0x273, "e40d0e6262ea80a44654750fc03e06dfdf8e96ff71ab852e35d78904e0c38852", 0x2, 0x37bf39ff, 0x1, 0xb, 0x3, 0x601, 0x2, 0xf, [0x3, 0xf, 0x2, 0xfffffffa]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f00000002c0)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff2}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6248}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) listen(r2, 0x9) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000140)={'syztnl0\x00', r4, 0x1, 0x8, 0x326f, 0xfffffff5, {{0x29, 0x4, 0x3, 0x5, 0xa4, 0x64, 0x0, 0x9, 0x29, 0x0, @private=0xa010100, @remote, {[@timestamp={0x44, 0x1c, 0xe4, 0x0, 0xb, [0x4, 0xe41, 0xd57, 0x4c, 0xd29c, 0x800]}, @timestamp_prespec={0x44, 0x3c, 0xf8, 0x3, 0x8, [{@multicast1, 0x4}, {@multicast2, 0x2}, {@rand_addr=0x64010102, 0x7}, {@loopback, 0x9}, {@loopback, 0xb}, {@local, 0xa18000}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x8}]}, @end, @lsrr={0x83, 0xf, 0x7f, [@dev={0xac, 0x14, 0x14, 0x3f}, @multicast2, @dev={0xac, 0x14, 0x14, 0x20}]}, @generic={0xc6, 0x2}, @ssrr={0x89, 0x23, 0x29, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, @remote, @remote, @private=0xa010101, @multicast2, @local]}]}}}}}) 6.965849224s ago: executing program 0 (id=564): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000240)) fsopen(&(0x7f00000005c0)='aufs\x00', 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x24020040}, 0x40804) memfd_create(&(0x7f0000000400)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Kp\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x00\x00\x00\x00\x00\x00\x03\xff\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec2D\xf7\xb4\xa4\xb9\x06\xfc\xa7\x86\xb4Bxf\xd8\'\x17N\x1ar\xf9+%vm\t\x9f#yN\xb8k\xf6\xc0\xcbW8o\x92\xc7\xffo\xd3\xdc+\x84\x91\x13Ss\xb2h\x12C\xba\x02B\x92\xfeZ\b\xac\xb6[\x86\xbb\xdf\x8b\x7f\xfa\xc2\x8a\x13BW\'3\xa3m{\xd2\xc1p\xf9\xbf\xc5\xcb\xee', 0x6) pipe2$watch_queue(&(0x7f0000000300), 0x80) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060003000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r3 = socket(0x10, 0x3, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000140)={0x14, r5, 0xf1aad47e89fb43b5}, 0x14}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0x42795000) preadv2(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}], 0x1, 0x40, 0x4, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x4cf40) ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r3, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="40000000100039042cbd7000eaff9772bfa803e4", @ANYRES32=0x0, @ANYBLOB="93200400040000002000128008000100736974001400028008000300e00000010500040009000000"], 0x40}, 0x1, 0x0, 0x0, 0x24048014}, 0x8010) 6.877134157s ago: executing program 5 (id=565): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000cc0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="e1", 0x1}], 0x1}}, {{&(0x7f0000000140)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000003040)=[{&(0x7f00000001c0)="05", 0x1}], 0x1}}], 0x2, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r1, 0x1, 0x100269}, 0xc) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) 6.852691038s ago: executing program 5 (id=566): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0800080005040a00000014000f00bcd414efb3a49548eb341660274e43b4b017e7d399437e96b4ba5d53460157e46de74be951"], 0x33) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0800080005040a00000014000f00bcd414efb3a49548eb341660274e43b4b017e7d399437e96b4ba5d53460157e46de74be951"], 0x33) (async) 6.736878164s ago: executing program 5 (id=567): r0 = syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000180)={0x9, 0x0, 0x3, 0x5}) (async) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) (async) r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000380)={0xc}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, 0x0) (async) socket$pptp(0x18, 0x1, 0x2) (async) connect$pptp(r2, &(0x7f0000000140)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x224833, 0xffffffffffffffff, 0xec776000) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_open_dev$vim2m(0x0, 0x0, 0x2) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x48040) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) socket$l2tp(0x2, 0x2, 0x73) ioctl$SNDRV_PCM_IOCTL_FORWARD(0xffffffffffffffff, 0x40084149, &(0x7f0000000240)=0x9) (async) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl(r6, 0x4048aec9, &(0x7f0000000140)="03000000000000000100000002") (async) userfaultfd(0x801) ioctl$TCXONC(r2, 0x540a, 0x3) (async) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000200)={0x9a0000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x98f909, 0x8002, '\x00', @p_u16=&(0x7f0000000040)}}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r7, 0x6, 0xe, &(0x7f0000000280)="dc8daf8d", 0x4) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2b, 0x0, 0xffffffd8) (async) setsockopt$inet_tcp_buf(r2, 0x6, 0x1c, &(0x7f0000000000)="f286d43e9ba0aff680c51b2ea727382708f361f658927ad8a381f54fd1ee4c", 0x1f) 5.531775218s ago: executing program 5 (id=573): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x106}}, 0x20) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xfff2}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240048e4}, 0x8000) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000b80)={0x0, 0xfffffffffffffe17, 0xfa00, {0x0, &(0x7f0000000040), 0x106}}, 0xfffffe13) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) unshare(0x20060400) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000240), 0x201c0, 0x0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f00000000c0)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r8, 0x7ab, &(0x7f0000000140)={&(0x7f0000000c40)={{@host=0x10, 0x8}, {@local, 0x2}, 0x400, "d49e0b1f09a3e05cb89814146444bb34d22f02362479246bb6372d891a3b5dafa58a6abc5a678d6874fc8fb5f8a529c6e30103484f2667c174fb6cda19ea0a9301bc3238eb816e9c3882f243bcd4bd7115b26dacf5923f060498d471cb4f789562fcda119739dd1a5b0e4e1a4a64dbd7b398bd4e7a247d81f968f2e945f293fc3860bf11f0424193fce743067d27f0ac187b44b128a4999547f73d8c35d3c2bd8b51bbc9a31123f773be89e109cc71b8ec29a539233c0cba15b0899c7181b9a3a37fbbefe9ae0de04a32336a6eba07b2fb6ad426d56e17291bb1a9d1fcdaa939378bab6dd2eac37b369ef163c9e0fc8039352c24d8147fcc2e2559b47066abd21a3a5f83f239a2227d17d4ca90f60ed9acc243ed382525a74e8f9cb99852760359278d5d22294a70433ba4cec5147fbb09b1d0008ba76257f1c5af6b8d6bf3bcfd5a468a566a4e98fe5f264f2663b72cb421c90d8b7883ddfb5749b27a3e146f9d8538706fea61b07c6e064446337439b90aa5dc82f6c63c57d6ba0e709b7c1b15fa8367f8e6df2cf59b0b30740ef47c5cccffce5911569591ce4ab62275964cd147e87a30cc6e71f7e40e161997cdbadcfbfb6c54e0289ac137508b7b5339414e4ab7afcc420148e37d49b664cc07c8178a3b50f566c5bdd3aa9217ef909805972bd63ee1d729b282cd866c183744b20da3227f9d43843236b571c8d3237408c266e08d0699ebd30e0820362664ab323b15d3ae9896d6120aae6ef9085f53a2b39cc31238b031476c86e6b16d7703fcbacc7269ce8622eab1cfdf82a364209ec4ac912db924bb76bc35ddf8d0e7a3aff0d08a48c07be47303b59653d9409f14dc59ac33cae5e010466f54d86772e43e3680863bb9bf10c971f16a731e601d7fcdbb91d7146e7834d89059ad522d70398c2bacf113ed791e32f933dfa23f5d6d11bfc9d9e0f04a34b0eddd99d16cd9712485e0a5c9aaf1ebf3f14d00005f8960b6145cbb7d4522692ebe1f9491f87a29ed67c5fb60f5e69bde2a758742999fc986a2dbf619997701000080000000000abd84557c77ea13356c977d0f098ab9fec85acbd6447f2e6893e2fa6a0a7b272dab66e69b7def48f8b3583a53a0941fb3e4367fa8d56e05ee3b265f17ca0439fcdcea276f7f0a9bf4c2a324d7143658007cf4019e8da69ba1b7dff4383714cbcb71dfe6f1481f7e5db234b2a5c360ddb1889d92cd36f8fc72ac865f1c6445957b2a57c1af59ef8d2e9fe328ec2bde763d65c4dea965042f540515bf2f879d1b26309ebc1d7f76c569fa88fbe61845e96e93d3b6025b6285777e59495943596c128fdacc545263ce458bf99f57d7e5dc77f65cf650902b5b6d5af9359334759843365bf0dfb244817a40e8cc903000"}, 0x418, 0x7012}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r8, 0x7ac, &(0x7f0000000100)={0x0, 0x1804, 0x40}) syz_usb_connect(0x3, 0x1b, &(0x7f0000000180)=ANY=[@ANYBLOB="120150ff080000005c5900000000810b6f0102030109e80800007881cd9abb6b744aa6f119605f8abe3d5ac2ee27cbd8b5a87c89100c78585097111e9268cac845854b3b124bebb763bc4b33fdf8e874072c5255c903a5d1adcf9f874234cb0f12cb23b6b5b90ac59300cdbbb46bad3c003f1dbaaf1d3df8b620e3ba6002a76a1cb092"], &(0x7f0000001140)={0x0, 0x0, 0x5, &(0x7f0000000080)=ANY=[@ANYRES16=0x0]}) 5.185452503s ago: executing program 2 (id=575): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x1c0000, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRES64=r0], 0x10}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x23) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) mknod$loop(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x3000, 0x1) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001000010025bd7000fddbdf25000000005a84ac17a75332aa102590987ad7ae825bb13077c98e69ff5ce43df5c97b2ce4473fc0fa8b4563228e92f52b3c9ab6698ca1a50b4c70ac7571074284c2f1c4c27d91d00aefb2551806cbbdcd7c947d282d7684cbab44561d0a5190ad2e1d7785c2f210859b9efc0455cda90495dfd1cfe6c2bc2ac97117d978a377e28f873ac0558387cef793c74f1526aa730a1db34039295f90e30628dcee66eb3b48e446107e5fc0c88d17f094e6837cf972ced7ceeeaabb4bfd297c9984d991b612901481c0ace42568a144dc504684d45450759cfc4946dbbf4e828bddcf1da31906dd56b1", @ANYRES32=0x0, @ANYBLOB="000000000300000008001b00000000000800290041010000"], 0x30}, 0x1, 0x0, 0x0, 0x24040051}, 0x4048801) openat$kvm(0xffffffffffffff9c, 0x0, 0x541500, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x400000000) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000040)={0x18, 0x0, {0x4001, @multicast, 'batadv0\x00'}}, 0x1e) syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004"], 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x24, r8, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x24}}, 0x18) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r11 = dup(r10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r11, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) r12 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0xc0686611, &(0x7f0000000040)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) sendmsg$BATADV_CMD_SET_VLAN(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="95", @ANYRES16=r8, @ANYBLOB, @ANYRES32=0x0], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4010) sendmmsg(r5, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 5.099415029s ago: executing program 3 (id=576): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x57, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000003c0)) r1 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004cc0)=[{{&(0x7f0000000480)={0xa, 0x4e24, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1ff}, 0x1c, 0x0}}], 0x1, 0x40) sendmmsg$inet6(r1, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x10000, &(0x7f0000000040)={0xa, 0x4e20, 0x5, @private0, 0x1b9}, 0x1c) syz_usb_connect$cdc_ncm(0x0, 0x98, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902860002010000000904000001020d0000052406000105240000000d240f01000000000000e5ffff0524"], 0x0) 5.062460163s ago: executing program 4 (id=577): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109022400010000000009040000025c291d00090509"], 0x0) syz_usb_connect$uac2(0x4, 0x10a, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x3040, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf8, 0x3, 0x1, 0xf5, 0xa0, 0xf9, {0x8, 0xb, 0x1, 0x0, 0x1, 0x5, 0x20, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4, 0x1, 0x12, 0xad}, [@processing_unit={0x9, 0x24, 0x8, 0x1, 0x1, [0x3, 0x3]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xa, 0x6, 0x9, 0x8, 0x1}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x2, 0x5, 0x5, "ab4e9852581748dc"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x3, 0x1, 0x7, 0x4, "e0f5d7"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x1, 0xa, 0x14, "ffa9406a2ed65024cd"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x7f, 0x3, 0x9, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x7, 0x5e, 0x9, {0x8, 0x25, 0x1, 0x2, 0x0, 0x5, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x8, 0x1, 0x1, 0x4, "3fff63ed835f205c"}, @as_header={0x10, 0x24, 0x1, 0x6, 0x1, 0x0, 0x1002, 0x20, 0xb8000000, 0x8}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x9, 0x23, 0x5, "75b4d3ca05e9ff7d"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x2}, @as_header={0x10, 0x24, 0x1, 0xf8, 0xa, 0x2, 0x1002, 0x9, 0xdd, 0x94}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x4, 0x7, 0x87, {0x8, 0x25, 0x1, 0xc1ed48cc2f8c27c6, 0x30, 0xff, 0x93}}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x310, 0x8, 0x2, 0x6, 0xff, 0x6}, 0x70, &(0x7f0000000200)={0x5, 0xf, 0x70, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "68cdd062629ef2b728ff41058f815edb"}, @ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x5860, 0xf00, 0xf801, [0x3f30, 0xff3f00, 0x0, 0xc03f, 0xc0]}, @wireless={0xb, 0x10, 0x1, 0xe, 0x40, 0x35, 0xc, 0x101, 0xb0}, @generic={0x29, 0x10, 0x4, "482b8f3bddce73531aad64a95998587e97e7911e694d3b5c1653493ef7d89fbd00d698164a40"}, @ptm_cap={0x3}]}, 0x1, [{0xdb, &(0x7f0000000280)=@string={0xdb, 0x3, "4e93505d2cb08a760722cf80dae18d9a84bc1d0d61db245648c4643a70ee3bf98dc74d23d9ee4dde22ee041a060129e555456cc90de449790d226fa78c611fbadbf7fea1a19e8ee8947cead13337f041afcfeb8db1e483311462c3b2bbcf756bf69f251da3016404e4bef7f0b391bca8cfe6914c6642322587bb5862f97e659c03e78c8f14edb1d6c88108d5be3912f8fc5788ef5fd2fb7e3dbde7bbd57cf85e9e16263c2aa81c2594848220d9ee61182e112b827e41ed3999c98209ceaab063309d19c9a61245e30d6597f443cc053461adfb9807c2170175"}}]}) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) 4.876822423s ago: executing program 0 (id=578): syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, &(0x7f0000000500)=[@out_dx={0x6a, 0x28, {0xa20f}}], 0x28}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 64) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) (async, rerun: 64) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x45ffffb, 0x122c42) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001ac0)={r2, 0x800, {0x0, 0x0, 0x0, 0x1, 0x1ffffe, 0x0, 0x0, 0x2, 0x4, "339f020bbe82b38b000000000000000000070d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded147e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd2bf35239d2", "4f000000dd9d9ac2f63a7ad700", [0x5, 0x800000]}}) (async) r4 = dup(r3) read$FUSE(r4, &(0x7f0000003c40)={0x2020}, 0x67ec255e) (async) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000580)={0x1, 0x0, [{0x0, 0x7fffffff, 0x1, 0xffff, 0x2, 0x400, 0x80000001}]}) madvise(&(0x7f0000ffc000/0x4000)=nil, 0xffffffffdf003fff, 0x8) (async, rerun: 32) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x3a, 0xfff, 0x3fffc, 0x180, 0x2, 0x0, 0xf5, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0x2, 0xbdb], 0x200000, 0x1c6017}) (async, rerun: 32) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.540529701s ago: executing program 4 (id=579): syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0xfffffffffffffcca, 0x2f, 0x10, 0x70bd27, 0x25dfdbfb, {0x4}, [@typed={0x11, 0x16, 0x0, 0x0, @str='&*(-^/[#\\.\xa5%\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x42014}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000240), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r3, 0x80804120, &(0x7f0000001780)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000040)=0xc) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000640)=0x10) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b40)='sour:e', &(0x7f0000000040)='c:::\x00', 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) poll(&(0x7f00000002c0)=[{r5, 0x80ad}], 0x1, 0x2) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x44, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa, 0x1, "fefe807eb37b"}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc8}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000200)='befs\x00', 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 3.529524973s ago: executing program 2 (id=580): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x1c0000, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="100000001d14"], 0x10}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x23) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000080), 0x12) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') r3 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x9, 0x0, 0x0, 0x7, 0xf, 0x0, 0x0, 0x7, 0x41, [0x0, 0x1, 0x0, 0x100, 0x4005, 0x0, 0x6, 0x2]}}) (fail_nth: 3) ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f0000000140)={0x0, 0x1, 0x0, '\x00', &(0x7f00000001c0)=0x5}) 3.396686625s ago: executing program 2 (id=581): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/resume', 0x88102, 0x0) io_setup(0x0, &(0x7f0000000000)=0x0) r2 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x101240, 0xc9) io_submit(r1, 0x2, &(0x7f0000000240)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x2, r2, &(0x7f0000000080)="e0c580f2f1631c92baeb82d7bdde47d4f51552", 0x13, 0x6, 0x0, 0x1, r0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0xffff, r0, &(0x7f0000000140)="9f3b596d9d1492ceee3c594de23945b92876fe9fded33621f076122d0c91ce4c50f3846ab072969ddd681071a5e99c635b736533f49f0d8621f38f4a681ddb3f14159f2b401f4dc57f2a2abffdca218560bfd938727fb9367efe5c69", 0x5c, 0x33, 0x0, 0x0, r0}]) write$cgroup_int(r0, &(0x7f00000001c0)=0x720, 0x12) 3.319469997s ago: executing program 2 (id=582): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48811}, 0x4000000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000200)={0xffffffffffffffff}) sigaltstack(&(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffed8}, 0x0) r2 = memfd_create(&(0x7f0000000180)='J=\t\xeb\xf8\xa7\x04\x9f\xe1hO\x8e\xd7\xb5\x93}\x8d\xed\x01L`\x93\xcd\x9b`;\x1c\xfc\xaf9\x98\x91\xe7\x00'/52, 0x0) splice(r1, 0x0, r2, 0x0, 0x400c5, 0x5) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_MATCH_INFO={0x4}, @NFTA_MATCH_NAME={0x8, 0x1, 'u32\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x20040040) 2.271734901s ago: executing program 2 (id=583): ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x2c0, 0x0, &(0x7f0000000180)=[0x10082, 0xec66, 0xff, 0x8, 0x98bd, 0x800000000000009, 0x0, 0x100000000000004, 0x10000, 0x100, 0x9024, 0x0, 0x7, 0x5, 0x5, 0x49, 0x400, 0x5, 0x0, 0x9, 0x8, 0x7, 0x1c1, 0x1000000003, 0x2, 0x2, 0x6, 0x7, 0x96, 0xffffffff, 0xffffffff00000000, 0x0, 0x4, 0x7, 0x23b, 0x3, 0x2, 0x888f, 0x4, 0xb, 0x6, 0x6, 0x3, 0xa3de, 0x20000000006, 0x8, 0x5c3e, 0x400, 0x3, 0xfffefffffffffff7, 0xfffffffffffffffa, 0x2, 0xe, 0x7, 0x8, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0xc, 0xd, 0x9, 0xe8, 0x80000000, 0xfffffffffffffc01, 0x2, 0x4, 0x4, 0xcdc, 0x7, 0x2, 0x3, 0x2, 0x5, 0xfff, 0x3, 0x4, 0x6, 0xab6, 0x0, 0x4, 0xfff, 0xfdffffffffffff81, 0x9, 0x4, 0x2000000000000006, 0x1, 0x5, 0x400000000008061f, 0x3, 0x8, 0xf6, 0x4, 0x6, 0xffffffffffffffff, 0x7, 0xe53e, 0x2c, 0x8, 0x2293332d, 0x6, 0x5, 0x0, 0xd, 0x2, 0x5, 0x2, 0x2, 0x7, 0xdfd4, 0xfffd, 0x0, 0x8, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb692, 0xcd, 0x8, 0x3]}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, './file0\x00'}}) syz_open_dev$vim2m(0x0, 0x8, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000c40)=@arm64={0x9, 0x40, 0x3, '\x00', 0x7}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x5, 0x2, 0x9c, 0x0, 0x2, 0x7f, 0x9, 0x5, 0x2, 0x5, 0x5, 0x5, 0x0, 0x9, 0x8, 0xe, 0x6, 0x8, 0x7, '\x00', 0x0, 0x3f92}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = dup(r4) syz_ublk_setup_io_uring(0x4000020, &(0x7f0000000180)={0x0, 0x0, 0x10, 0x40002, 0x1e5, 0x0, r5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x70bd27, 0x0, [@sadb_address={0x3, 0x6, 0x33, 0x0, 0x0, @in={0x2, 0x1000}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0xfc, 0xe0000001}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_key={0x2, 0x8, 0x8, 0x0, '4'}]}, 0x60}, 0x1, 0x7}, 0x0) syz_ublk_add_dev(0xffffffffffffffff, r6, r7, r8, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf6c4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x164}}}, &(0x7f0000000280)=0x0) r12 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) syz_ublk_setup_queues(r12, r11, &(0x7f0000000480)={0x0, 0x18c2, 0x842, 0x0, 0x1d2}, &(0x7f0000002680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe90e, 0x200, 0x1, 0x43}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x216, 0x20000, 0x2, 0x200019b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb6d4, 0x4000, 0x0, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x2000, 0x0, 0x231}}], 0x4, &(0x7f0000003900)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, r10, '\x00', {0x1, 0xd55, 0x0, 0x0}}, 0x0) 2.220808566s ago: executing program 5 (id=584): sched_setaffinity(0x0, 0x0, 0x0) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100023f639010861a2d754d2d0102030209021b0001000000000904010001e911bd0009050ce33338b076d56add44"], 0x0) (async) syz_usb_connect$cdc_ecm(0x907b21c729810dce, 0x111, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xff, 0x1, 0x1, 0x3, 0x80, 0x10, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x2, 0x6, 0x0, 0x5, {{0x9, 0x24, 0x6, 0x0, 0x0, "d249ec45"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x7fffffff, 0x400, 0x2, 0x6a}, [@dmm={0x7, 0x24, 0x14, 0x0, 0xd}, @dmm={0x7, 0x24, 0x14, 0xf68b, 0xffff}, @ncm={0x6, 0x24, 0x1a, 0xa, 0x10}, @network_terminal={0x7, 0x24, 0xa, 0x5, 0x1, 0x0, 0x4}, @mdlm_detail={0xa5, 0x24, 0x13, 0x6, "8ecc44675b6098859bb745a5b0d093a0d736637c2636fe08c7223f3f32016ac47911f0a97e70923bbf6853e340b7409d2fe57da07016727d3851ed3a1e2fb5fa2352f15efc7f8ae23bebd05f97b68f99d872a1d03dc1ac97ad51d792d7e0f6f7a1a650e9a169cc4d8e88746ced60f34990c9144aa33f9c9507c1a220e0e91cb37b16a61297996448ca4197c4389047b59f1ef6fe5d1ce2ac50f21db3748a97a138"}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x1, 0xfb, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0xf7, 0xc0, 0x9}}}}}]}}]}}, &(0x7f0000000a40)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x250, 0x4, 0x9, 0x2, 0x10, 0x4}, 0x2e, &(0x7f0000000600)={0x5, 0xf, 0x2e, 0x6, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0xe, 0x7, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xd, 0x81, 0x33, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x1a, 0x1, 0x0, 0x2d75}, @wireless={0xb, 0x10, 0x1, 0xc, 0x10, 0x4, 0x4, 0x100, 0x65}, @ptm_cap={0x3}]}, 0x8, [{0x4, &(0x7f0000000640)=@lang_id={0x4}}, {0x96, &(0x7f0000000680)=@string={0x96, 0x3, "c37568408168e63ce7da27eb9f1307b63e78414b37d7e4de41e1147d2bdc61c73110f8a48b13adab7769f808302abda2c291598b0419caba20c0b04c7cc8c3494c636d2c0bff4470d196d4c7648414946f825a89b838f614a7b0647c606217031a7aade12e95833f2ac6f7005b35d9cdb5f89d5363a60749f09aca866cb8fa09d304987198190cf50d45ad0a562aa07847d096c3"}}, {0xff, &(0x7f0000000740)=@string={0xff, 0x3, "c7d6b51e2d273e3fb472517ffd339f4462beade01a3800507844e1d019edf063ebfa93ed7c9bc4180c785a3dfecf385bb5b397da67c9cf499224328074d261cde0e8ca3407718967556e9b890b17646824e87a34b0ec473aa31b70cc824efaa4ed1944ea4c4fcf1659c0469b8b9ff13469ef80bd92b65e4c220d1ecf1b4058deb718e89837c1598ed05021422e788b2f2a837d4a796bea3c9efd5897d4a376bfc10c37a5c5327e45e27142a8b794e06032574ab0c59305e0119bfd74c19e6266d0f3f1a910d406b222f7e4205971118ee8f45de41f356510de55b4432bfccc145e66dc594b145dc9a8a167a9bf4941a0c0c088171c37e36c0f750dcb96"}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x2c09}}, {0xb3, &(0x7f0000000880)=@string={0xb3, 0x3, "7e038cf77bb1fc9b2349f1fad85a5c4a46a6995dd98750d87d68fb1208d865d5d24b63c75b65281c1bfb88744d28d38a24c9a895286eda94685d44531602438afbbb0bd3c3631823d962c32f25215fb781d604952d48b8a3727db6204019d449ef834c5489bb7ff373bd626756e44a94ec87f88707a2ed496baad1add497a3d1af0fe01afa84a41a73ed1692ff5fd69527ef97c095a6f4f439ccf8aa29602bc5f529e178acfbf020ee38db4f23ee50205d"}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0xc}}, {0x80, &(0x7f0000000980)=@string={0x80, 0x3, "853c8ebb9305b1c6137ef36e2fbc0538b2f2a265203a45e667750982e1c8f0d673350c67960616eed6ee2334a58173796901510c3d51da658446d93b800d0f06d09fbd5d29634b2360c57c08bbc5ed9058ad009faa5412dc74d7f828d42fe019b216d07dc330ebd68e5d7325af09cfa456c2e7a267406f56fcd8239661c2"}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x414}}]}) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) (async) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0xfffffffd, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) (async) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) (async) r4 = getpgid(0xffffffffffffffff) capget(&(0x7f0000000180)={0x0, r4}, &(0x7f00000001c0)={0x4, 0x5, 0x4e73, 0x40, 0x73, 0x50}) (async) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x48, 0x0, 0x0) 2.005874591s ago: executing program 3 (id=585): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/40, 0x28, 0x0, &(0x7f0000000080)=""/247, 0xf7}, &(0x7f0000000200)=0x40) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="5800000603000000000000000000000000000c000300686173683a6970000500010007000000052005000a0000000900020073797a3000000000050004000000000014000780080008400016005e0800064000002800"], 0x58}, 0x1, 0x0, 0x0, 0x2c0c0}, 0x24040800) (async) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000}) fallocate(r3, 0x1, 0x180ffffff, 0x80000000) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001500)={0x1, &(0x7f00000014c0)=[{0x1d, 0x4, 0x8, 0x7fff}]}) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x103ff, 0x2000300, 0x34324258, 0x2, 0x0, [{0x8, 0x4645}, {0x8, 0x29f6ebcd}, {0xd, 0x8}, {0x5, 0x638}, {0x2, 0x1}, {0x5, 0x1}, {0x6, 0x409}, {0x10001, 0x1800002}], 0x0, 0xd, 0x4, 0x3078182a3427730f}}) r5 = add_key(&(0x7f0000000240)='blacklist\x00', &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000380)="258cb4c03024a269c4cd3ab05b38efa2aee3058008ec50350eae2c56daf0d5c5ba8dfa1ed5386e768ba3718da3432b7c50b221c59defae084cd44181255aecb830b2c154d2bd96c7724b6e8edaa202631c84b311d2daa871d61875b6d03f9a6f1a7cf89a212b8f1021e2a0518bee9648d99d312591e91d9545f8e4f63b13b12c45843b6c23d44799229e042459d6b219f39260edfaf10674302ab747c1837ef32d4ffbf667ee66c225b774055621043751f74226e4d1e288db902d0932756297374ab188bb62f699c12bb466cead2018b45f261a47ef9eb2eb0290fb077b884b1b75488cf595a0443b54985e6fac27a57f7c79af84773120", 0xf8, 0x0) keyctl$update(0x2, r5, &(0x7f0000000480)="91c5162dbaf00e8ce615fca1ba957ee9b16f0cb96286419ab8f9517b", 0x1c) 1.956288286s ago: executing program 2 (id=586): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='file0\x00', 0x42, 0x1fe) write(r0, &(0x7f0000000080)='/sys/kernel/config', 0x12) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='file0\x00', 0x0, 0x0) read(r1, &(0x7f0000000000), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000f00)=""/49, 0x31) getdents64(r3, 0xfffffffffffffffe, 0x29) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000020000004400128009000100626f6e640000000034000280050001080400000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x20000040}, 0x14) socket(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, &(0x7f0000000400)={0x0, [[0x14, 0xffffffff, 0xffffffff, 0x3, 0x7, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x1, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x1b, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setpriority(0x2, 0x0, 0x8000000000000003) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001500010000000000000000000100000008000100", @ANYRES16=r7], 0x1c}, 0x1, 0x0, 0x0, 0x48001}, 0x44090) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x84, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @empty}}, 0x0, 0x83}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000002511000008000000184b0000040000000000000000000000bf91000000000000b7020000020000008500000000000000b7000000000000009500000000", @ANYBLOB="472e11a0575a31ab0b7e5802679a877f8e2c47259723c4a77d53a040f0bc82fbf9918873c18fc6758da7941f7618964fcc6723ad158c473d487dae2bc7b7026abd4f8a9a9f8f2fa9e1664ba00f73d92826d625083703f2c260984e970820e2d0c8c8b592f8f7cbbcfcfb1801209d7662d5286e5e8b6e967c985f72", @ANYRESOCT=0x0], &(0x7f0000000000)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x3e}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x40, 0x7fff0000}]}) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(0xffffffffffffffff, 0x40184152, &(0x7f0000000a40)={0x0, &(0x7f0000000a00), 0x40}) syz_usb_control_io$hid(r4, 0x0, 0x0) 1.776874833s ago: executing program 4 (id=587): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3c8, 0xe8, 0x1d0, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0xffffff00, 0xff, 0xf, 0x5, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@remote, {[0x0, 0xff, 0x13e83c6aad2f0bac, 0xff, 0x0, 0xff]}}, 0x3, 0x4, 0x800, 0x7, 0x1, 0x3, 'pim6reg\x00', 'veth0_to_batadv\x00', {0xff}, {}, 0x0, 0xc0}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x10001}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 0x0, 0xfd, {}, {@mac=@remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'netpci0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @mac=@multicast, @broadcast, @dev={0xac, 0x14, 0x14, 0x29}, 0x2, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8003, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) (async) r4 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000002e80)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000180)="c3d1de", 0x3}], 0x1}, 0x1) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) (async) r6 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r6, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) (async) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000b00)={r6, r5}) (async) r7 = fsmount(0xffffffffffffffff, 0x0, 0x80) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000000d0a01010000000000000000020000040800044000000002090001003bb9b616000000000900010073797a3000000000140003c6100000800900090073797a3200003100"/84], 0x54}, 0x1, 0x0, 0x0, 0x8040}, 0x4000000) setsockopt$sock_attach_bpf(r6, 0x1, 0x7, 0x0, 0x0) (async) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000600)="27031600160014000000002f1eafacf706e105000000894f00050005ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0x35}], 0x1}, 0x4) (async) ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000000)=0x1) (async) close_range(r0, 0xffffffffffffffff, 0x0) 1.775920895s ago: executing program 3 (id=588): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2000, 0x0) execve(&(0x7f0000000740)='./file0\x00', 0x0, 0x0) (async) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029ea69801d76ab0a272a2a788bab6c95f79725074", 0x1c}], 0x1}, 0x0) (async) file_getattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800) (async) execve(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000008c0)={[&(0x7f0000000700)='{}{\x00', &(0x7f0000000780)='/$%%(:\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='\xda)\x02\\\\\x00', &(0x7f0000000840)='wg2\x00', &(0x7f0000000880)='vxcan\x00']}, &(0x7f0000000a40)={[&(0x7f0000000900)='\x00', &(0x7f0000000940)='pfifo_fast\x00', &(0x7f0000000980)='+@-{%^\x16[-(,-}&:-\\\x00', &(0x7f00000009c0)='(\'%^]!\x00', &(0x7f0000000a00)=':\x00']}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a80)=ANY=[@ANYBLOB="40000000020105000000000000000000020000071800018014000180140019800800010001623a000000020000050000000000000000000000000000000000008bc3b137ecaf47aeac3f710e1617092c545dea3c49f42e763ab9e4bf33235af5e712799584"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x48040) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000040)={'wg2\x00', 0x0}) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x2a020480) (async) r6 = inotify_init1(0x0) inotify_add_watch(r6, 0x0, 0x400) (async) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r4, 0x8ed9, 0x4}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r5, 0x400, 0x408}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@delqdisc={0x54, 0x25, 0x400, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xffe0, 0x5822e3890fa0a024}, {0xc, 0x9}, {0x7, 0x5}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x7fff0}, @qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}, @TCA_RATE={0x6, 0x5, {0xff, 0x7}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xef5f}]}, 0x54}}, 0x0) (async) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x4010, r7, 0x32f8e000) link(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.620187397s ago: executing program 3 (id=589): socket$can_raw(0x1d, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioprio_set$pid(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x3f00) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) write$binfmt_script(r5, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x0, 0x4000010) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) writev(r6, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40500000000000195000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0xffffffff}, 0x10}, 0x94) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r7, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) unshare(0x2c020400) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r9 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) shmat(r9, &(0x7f0000ffc000/0x2000)=nil, 0x4000) 1.60924834s ago: executing program 4 (id=590): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRESDEC=r0, @ANYRES32=0x1], 0x50) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x7) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000100)={0x0, 0x7fffffffffffffff, 0x3}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0xd) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001c00010302000020000000000100000008000180a4bfda84"], 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x4004000) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r2, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e24, @multicast2}, 0x2, 0x0, 0x3}}, 0x26) r6 = socket$pppl2tp(0x18, 0x1, 0x1) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0xffff, 0x2, 0x0, {0xa, 0x0, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x400}}}, 0x32) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0x3}}, 0x2e) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000500)=0x2) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='net\x00') write(0xffffffffffffffff, &(0x7f0000000380)=' 1\\\\x0000\\001 2147483647 /tmp\n', 0x1f) ioctl$PPPIOCBRIDGECHAN(r8, 0x40047435, &(0x7f0000000200)=0x1) 1.57573944s ago: executing program 4 (id=591): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001300)='/proc/timer_list\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4084, 0xff4}], 0x1, 0x50, 0x205) 1.507390306s ago: executing program 4 (id=592): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0xcf2, 0x6250, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8, 0x6, 0x50, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}]}}]}}]}}, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) pselect6(0x40, &(0x7f0000000100)={0x6, 0x3, 0x0, 0x1, 0x800, 0x2}, 0x0, &(0x7f0000000240)={0x1f, 0xe, 0x0, 0x0, 0x200, 0xfffffffffffffffc}, 0x0, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x10113}], 0x1) read$FUSE(r1, &(0x7f0000002580)={0x2020}, 0x2020) syz_usb_ep_read(r0, 0x2, 0x1f, &(0x7f0000000080)=""/31) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f00000000c0)="02") syz_usb_connect$midi(0x0, 0x68, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x644, 0x8047, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x56, 0x1, 0x1, 0x7f, 0x60, 0xe, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x0, 0x5, [@midi_out_jack={0xd, 0x24, 0x3, 0x2, 0xff, 0x3, [{0x3, 0x4}, {0x9, 0x5}, {0x0, 0x49}], 0x3}, @midi_out_jack={0xb, 0x24, 0x3, 0x0, 0x8, 0x2, [{0x9}, {0xc, 0x5}], 0x7}], [{{0x9, 0x5, 0x9, 0x8, 0x200, 0xb4, 0x93, 0x2, {0x7, 0x25, 0x1, 0x3, "62d70c"}}}, {{0x9, 0x5, 0xc, 0x4, 0x440, 0x6, 0x8, 0xe, {0x13, 0x25, 0x1, 0xf, "b6deb804caf9356987f6a74eace415"}}}]}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x200, 0x6, 0x1, 0x5, 0xff, 0x1}, 0x53, &(0x7f00000001c0)=ANY=[@ANYBLOB="050f53000614100401d0b924485444482b1a614d89d73a6a320a1003000600010309000a1003000e000702c80010100ade6100000000005700300000000b1001081d00040609007f0b100108040000ff050010"], 0x7, [{0xf8, &(0x7f0000000240)=@string={0xf8, 0x3, "4a9cd1bbde14987080cee8593e811fafa78cfd8f72d3a5fff07f734bcc74caff16e0b9798cef8c6d0f04cfb4e71341ad1f7f0e5388b716bbdeab001cfcfb176ec3ce56c0f91e3f1f49edae0217a2d1245000c2f2e34948b7f78d354b1eb2282feeaad81abad856c5f737b840ac1a70396cc7e093df33c23cd26efa2a83cccddb2f645def1c8a7462563202bd2a93661404a1ddfbbc2fedb17d611f63dc948e43fa3c8086ef8b0f57b417889d0b6d0d1277ef0c11cec4026cd8fde398015853cbee3d4950118251e8cf196bd6fe983ea4c95276431eae673239d297538c3c6db038b49e49aa68c4a765b4c3ac757a7f317981b563dff5"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x801}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x83e}}, {0xf, &(0x7f00000003c0)=@string={0xf, 0x3, "70d32f62219546a4016d6f2bde"}}, {0x4c, &(0x7f0000000400)=@string={0x4c, 0x3, "6e4e1f149e551e7f71c57a85a2075e81dbe805350f8fb5b677429085dfbef606bda968bb122898547ef3887556eb93c3b1f76ec45a5079a7b4fb0b641c53190211a38cbb1b6dca5aba88"}}, {0x102, &(0x7f0000000640)=@string={0x102, 0x3, "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"}}, {0x55, &(0x7f0000000540)=@string={0x55, 0x3, "86844f463ccb755c4c5d6c5d1039b558506ff3484574183739d97cc54a958cd82b2923723bd542d8275ee3a5bdc845e26ed05d73102e9c1f41a56b17292261cfa3b4dd92fb27c00e159df2d4bcc690fd71cec8"}}]}) 688.593858ms ago: executing program 0 (id=593): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280080001007f000001080002007f000002100009800c0001"], 0xb0}}, 0x0) sendmsg$AUDIT_USER(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xda91b1aeef2fad8f}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, 0x3ed, 0x800, 0x70bd25, 0x25dfdbff, "2e61208c603bbd8c96fede8d", ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000080) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400b59527bd7040ffdbdf250a1700ff", @ANYRES32=r1, @ANYBLOB="1400020000000000000000000000000000000001"], 0x48}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) 477.648929ms ago: executing program 0 (id=594): timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000440)=0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) (async) r1 = timerfd_create(0x9, 0x80800) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='cpuset\x00') read$FUSE(r2, &(0x7f0000002080)={0x2020}, 0x2020) (async) timerfd_settime(r1, 0x2, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x3938700}}, &(0x7f00000000c0)) (async) timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000040)=0x0) timer_settime(r3, 0x1, &(0x7f0000000140)={{}, {0x0, 0x989680}}, 0x0) unshare(0x64000600) (async) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) (async) io_uring_enter(r2, 0x3cd6, 0xe45b, 0x20, &(0x7f0000000180)={[0x9ec]}, 0x8) 168.92786ms ago: executing program 3 (id=595): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="008a740000000000000000000000000000009a00000000000000000000cc5ae5d1c4cf4f3611a2e4b30ab9d6113e080a5c224bd9cf4ba906c163e09c692106cf9f3889e633e6dbb80ac54950723130f6a531a8d8c507603905b4"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x14, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x600000, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r5, {0x7, 0x9}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xd}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f0000000200)=[0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa3, &(0x7f0000000380)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0xdb, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, @val=@tracing={r6, 0x8}}, 0x20) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000880), 0x800, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xc, 0x1e, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0xbf60, 0x0, 0x0, 0x0, 0x8dbd}, [@ldst={0x3, 0x1, 0x0, 0xb, 0xa, 0x2, 0x10}, @ldst={0x0, 0x1, 0x3, 0x0, 0x3, 0x2, 0x8}, @alu={0x7, 0x0, 0x3, 0x2, 0x6, 0xe5c5967a4380a83e, 0x10}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x10}, @call={0x85, 0x0, 0x0, 0x9e}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000780)='GPL\x00', 0x401, 0x6d, &(0x7f00000007c0)=""/109, 0x41100, 0x11, '\x00', r5, @fallback=0x32, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000840)={0x4, 0x2, 0xb, 0x92}, 0x10, r6, 0xffffffffffffffff, 0x2, &(0x7f00000008c0)=[r7, r2], &(0x7f0000000900)=[{0x5, 0x5, 0xa, 0x5}, {0x5, 0x1, 0x3, 0x8}], 0x10, 0x5}, 0x94) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000004c0)=0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000000080)={0x50, 0x0, r10, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r9, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r9, &(0x7f00000083c0)="c91443d5daaf04b192358b692f84d66c60492a57cffd585b0068ccde45d94ded1e86d3670791c21f8e0b2153d10d45d37b72ee2fa06ad61b0a9354045a8dae1bd1cfb49f3c11fe54c17eee632d95574681e6c472eb8a1beaf3a4b88561847a0a0f05fa4a26639d7e74a0c1c2790d6a59d4073b1c55539b7c21b8550efbd5f835c56642f4be57d170e36a6bf3a995f418554f0cab342769089d0777b28daad5c0c4ba56a0bd6c0515d9bf488fdcf49a9a7bbfcf5ad78733f8119f2568daefbd0985a9916c0d048e38765cc7bb1c82e0f3c81d98e7179ec782331bc3cfb2caf58a99668420795e6a00ef41dcf5283bbb61ebaedbb7a675be4fb2d11c31f9b76936d1112c68978c73f42e145b094490d748c1456a14c23fe25e2fdaeaaa7dc0d35dcc9bbfe86361f99f4d04090d1e66aa9714ee9f4608ad66c60f500bf06a1b5b90fbe2f6c42c4b5f337393b0bb201473712c48f898c514fff84c46b50d3aaf44578f41d312bb5a73526db7818617dcb938ebdb17f92423ca2cf7ea2c611483e0baff012fd97e28558317049e4fe2d27f72796d7260b33900cd61f984c087d3c54f6aa11e389a49069ef99ca86c279598b42dd3485f09fc7e119f707438498316cf2f2bc8a293eeb1a35635989327d4f6c9ba6b2d5b9b8ee89a1e13d538b954479663223bb704af6a63ee497734410ea43bfdb0ad3708cb7155df2432c44e8468a7b77b807d345c9b94fedadfdeba12f4b6d11d16fd6dd5fff6cf896d0f40785ffca538dae61d8a5ffee814e96628cd945553e788b8d915762ca3b40124149b3c186ddd5f7af5b75f4725444f2f7e54b999c93e8c5fd4d4fbd7a3b3d7e85df3053c866f1dd247cac6912ed8b0e491101ca5a0b999a21014b573ba3996c76065c9d8bebf431f8be6435837193efd6e5a565b2ced30d04355435f166b09f9dc91ee50412d0daf72b28ec14c505cb155de1a46362f140ac2b633fa42b12109f0a29fa8ba271d6fc2a77af3b16032ee46b3ddead76a481ef52f6bd25cab4494681f0abc2ffc60ebb36cffcc058a067fcdae6c9de670cd6fde6eb8086a65fc05df17cf69f654516ba30ee04a1427b40fb8e81fe46787d557046854ad342442bacd781c7a6063892402fb0d765397448991206b28193e20f285e50d9219ace39b311e572ebcd80702164315656e7fa92960d0fd28c6489406f0b3061218417548e7e78b8aaaf5a623eb47c92aebfebd1c78343bc781f184e0122a28f56b18832da5646ee8405fa2fc040ab30377c447b42d0bfdddc65e064ccdf1ad52a94309a819caeb523e22b25d1ba288b7f2c726290d50021b9839c5d3c471aadb08025d97619935a9880942cf653508a0b2c43838e5aada8b84d22042928dd372dedec14672266ddceb0744c7464ab282d7fbfb2767e891832aa25d1425b33a60c6894a8d5292fdd73e05a868b8e50cb1a412d1249a77ccfc3d3eb35a67221f80bb8960fd93ceb74e102f2a6946b50caae3ccb86a8ec441d6e58dbf24b3eb962c8a28cffeded9b7cf4a54f524a1ef49fbdc91e125aad65a54df6a0f10cd8799f48aa144f7aec977b4a347c5c9628c4805ecf71f305adc9e5ca7c1f313f9ea3e99b3590efd94d831e1ff5cd7a26b72281109547facfa3abac2cfc9177b117a3757b778e95b5069236abb25d8fb032c38d296f87388fdd364b491cb828732177a2c6bcaaf831d138c898bb60c0d9d8a02d8b4b8e7efa87d3ed66221ac52e31ba9c2da488b999eaf82994bc8f1ac29d5e60b8b1cdc30a1c9829aca1cd7881c8aaac9ede0f5d8b85538d2b13751cfc6b37587b0223b9f6b6dd9340753106b1eecdf4f63c51cc2c63a1f86235bad7602e115d1e0ed78a6b170b88eb9584d2098b187695627612189998171d245797391b2b79bb690a79dac4b769e3f18c4d49359f7b460d997c03c793f51a830d5b21faed2ae1c3eb0fce0cdadde3c789ec931b6397c2a2fb2eda87756fec031e5f50f07619130f8e39f1e00004a1f204e5d87780542bdedf0b1ca5168779ad7cb2ebf27e0a5d760a2492b4d92eab24f2bc9af0a3e51140c415a6f885d0faa38ee6dcffc41652b28e628b859db0e7a0f961e37c5806df137e68c5316667f36051eb05c971e208721fdb8a49b8c49f85114be9dd7288f4e95c5f6fb8c1bc1bc7d79f32ba5419d90130a0328ba70d10c770a1540718f7d890dba9c39a116623d492275a1268c91149bfe026ca1c6a458449d4004d653f4b0a234eacd1f4da495fd1f936b4b335f64514fc8091b1dab132f599e26cb127e25011efa30a922b5a3e8807db9a00a9cc732fd323708767c905c8a3cd53e2e8d377d3b43cb971cbd0e66e2e47f3d601d49e29941b2ea4d3c8b7f5698e1a633ebba00f6c178d6d04b9f1544f04cd173e2d49f129a8725a647e1a9e798b5581c6a461b585012a302353178188e55f8102a49343c9c370ee505d09e4be8580d95f5bf39267b00e93adb6b52b2029160d78ac271e4e0c70ed835484e80302b93efd599707d4d22c806476fd04d18ebd6a9bf88c11dc2c96041ac8c3e04ac0aa5d2ac6740972717b543fb871884a7a0434a433571fd621977777984ea9c06914be966da9f349cb1ef3a116c49f0c716eae1df118cd3d5b350b917c06d853c1e1514213f5a29071e42eecee264ff20529c53c3a060a18a680ade2a08b4549e6998f06e61e4f4c36d578e9ad83dd38d1eeb100e7ab023edb38426d5165b867b9507a6b644aa0322da335b208105f2e74a9841ea7c629ea20cef740f6364e9d84a4485d3bb6b5f4e14c7764f78b65c0647870638a8f618381ec0823faed0424a448f753a59fb22e5138e0ca537b6935befb99fc6eea2d9457c01345afbbaaf3a7a96a39478b222af322f86730d137c3f570b38c7363bb9a89bb4b3b8979b9afd232927becbc91c8d4a276febe47bacd4a84c0bfdd54e685080f2c3be0b1e37bc6d21b13b7b1bfd507880f6ad7fa39bf99eaf6b7088d758d9383e38326381088e9e3e792f75d682cf61cf1176953960b0e160b2a535495d52c28f14fa45ed7a3f91e219dcd05afdda2b7e6c1b742b29f6c5f62a040a5fe6606433fce7de757ed76372dfc0b1af9af10c0128bcd335eff1c6c9660b0893730c3ef8de6e50dba419b35d1766eb9a5dce4c2fa518f8e3e2a27855e04d06b89e97578a4406ac03f3314575143db5e43ae3d03a7e90a590b4c188a5acbe1cf23cd4cf60ca98248d4e740122a55ac6e463511b4c4cd47040aafc0bed7878348a4caad4d977671cf4ac319773767ee28f8ccc4c9deae531b029eff5345470f20865549b2f2c4089306304e13e42ca37fbca6839bbcd2f10bd20c81d44ab73ad5ffcc55f51b53efb00d3c68d8d8505e005247ba23e86a803b199f36447fd01f192994b2fa27c9db59ae66b56b30c1ae5cd717407068a9b13ca941b82db254f4ecdbd1751a3f8f1061031bb41af5c04a33ffc98509f456830cf3c94c14451f04d84844e41c618e82958710d07daeba666329b914f2cc7c1d34ffbf6b50620b7c78c25c5d82a5aadcc4d824b3b68c34231fa7c0befe5241c447f90111c55848feed9d1ee67f61095ec2c0b4ac82f5cf169201516082a804c9d1775990d430d21bc65877041905caf385918f44191c134e493d960724b28f01e79fbf3b99eac1e75fbc8ab8dcfdd98b573fa6d7e6a6ead6b15ed78e2a8d564f61d8c52be8104306c104146696e16c9e9bff79a5fc1d92326cf0f2ff5e5c5c252773f2bd2c554bc409aaec03055f71d439daebc1d8b06c9ca0e1fe4729e8e6119616e8fb861b1e2694d1df267cbc496ba4a87013c3317a16b4c1e369748507794a20ad06aad20e4dbfc1834d789d2a8e9395ddad33a74c6c7cf54e61e533cae228909536eba8020f0c3845d2063270cae4d8e8dd8cfe3f112c46751444546ced9f6434741656dcda2185be13eebcc0392c256f384fc16353e89cbdeef8fb2e3cadc1ed2142f3b6485dc2d540fe799d027413128f624aaf8bc1933d3a0e6a954931bfc914921dec7ec822a31ebb652d4f312ab4068cedc6203b0de98e60c5f82296a3482132b288ba0a8eabdd8ac40faf145928e7563dbcb14d0625c92b542860993bb0388d8390dae727ae4086d4de1b7fea9d79f4844374bcd67fa5e1a3a28cd6d8da3f171fcf9d13062bb149fde18917c6650cdfa2be8de33b556ad34fad454db13a446e8a7c40167117e884d874c786768975df0b201ea0077ba735d31d65a832dc122d13c6559601b83899af1f14808f55f077ad465ed61378c63abff3ad742691168fe1e31bfd0dbb9f43d364ddf0bb185f69e69110c9eb1ab808354fdd2cf571838d5ec63bac3d70ca40878dc3c3cea26adffd5a197206d7c80d6a86c202338e72f17dc7185e1df0cfefa9475a2156738f90c6410c1698d1a160fd396548323c796ec5dca3cd59e468ff6a14caf34b4fdb16f1c92acb6bff2e859f9de1266dea0d1828598319b40a3edef657be02188fc94490c1da088d3ec2f315d6b5bb2f262764b67ba321379f4c93bb3ef9bc7db0c0e5f1e680ebfa84463e904d5351ecf25d1d22a98f81f7a1fc4c4fee3934b7672661f0bcd94109706644d0fdac4b7933b5db2acf39b98c0a8106a7a757408404a4c299a077379458e2118fb0a53b798adc1b85d3eb20b539e572741b9855e44a545809f897dde06730145b5caefe9db1c321783450d25d38834532c3e372fa92a53ac9cb4330eaaf65fe1b69a66459058e02d20c6641b7d8edfa8e356baaeb011b61208ef36ed33235144c86d6ce65da89d66da06291d4acc05e3136559ab77a7c4ad229c5307b48ed642d96c28cd06c82dedd4a16ed90bceda81292120438fd5c47b7b41b2646fe0899643f896ddb2d11e7311f8a0cbb9bfa38106507e06f35b3052ad6b6a11ac5f0129bedc59d04aee3737ebbf10f97c80f1a4e3f51ac8ac4488ad9e3f685a7c0dd4074b07774f4efe4b9f2cba400ef49f73b12fc7d96d8f3283a1eaf8c003931fc24a9248e201ac31bb49226c37d535592e00308d86ba0765a7eda13b72686101d352fb959598038b8dec44a0f18e5c8ec089912d325880390ce5186d4585df46e5662987c164f0ccfb8f12f6144f91349051d3ffa35ba597d2b5920e279ca8e139dfe2ba9923c0190fd444c8bf12a627618791a8781d6b54470777e6a5dac8cb505ae1e534b0c3af7db010dd602b1459964e1e15a812f3b4c8038e6bc1dc568ba482ee4944582abeeda1ed012391706ddb1e0ce60efd15acde8283d3612de5d0cf76185ad3a1ce89488e1cea4009573b55a2766d100ecefc5d53c99876cfec65daea82f55cf9687ec70e45cfdba9fe69fc3a822c29ff4be34857bdcd4313fb23d1d01d8a79cbd0057eeb5c1c0b39f75d5a753a2e10bd0ebb91dab1312bdf1a984332d566ab56dfd838d285995bec8726c5d1358fe10b0b6aaa99b9d9b08894c1dbd06356e5c693ddebb9d8b306062defb160db9d8f02ae3df59697866f5adeb34c8c5b27b63b09675030f344197b3bff097b996819dec9059aaf5ec1a6c585a86d16528091543a9e6bca4d850b7963fd1e7d981814dedb165c1a6444ec0a21743a4de8845b386ad4e1e9c9f2873f6a353487d9a8f8f56ae1d0f69124ee56b5c2b2a48c78cc6ba6b313b889adf0acfaebb4e2dc71054a4992366a2b6ff1f5972d7d2f0e9e3b17d7fbe931f43871819dc6e6040ba239ebce2cfa424ff7344b8a880040321909dcd16956594f5d99fdd39ea5d7209b906d2601572c56c72db899f986185194fe5aab45f27d9ac12aa8600b3c2728ef2e589a6886d711edf4d7f95b2e10d9adde3009560ad754f9e7a52808720a973dc475f8177fd5b199b69925f03a44a8bd9f3c3369861802ce5ca4b40cb47d19e2e1bda1b054f16b66ac7b7c0e5205112e011d6957f1df50505003544631ff4385d8128d46838338930aebc0496348045a7c05abd7a56e1079947d3eb1c50e4d8be001d03d8973f8f08f2f21a415174173ccb90f7ab615be5036947e164a434c059637bfeebb8b9f2e87b9774a4595c71122c9fac74347488b9a054e2e7b9c45b7b12fcca0fe789db614c70d4149d44e50fb64aabccee7447288a5b865a60c2640171f89afecda2cb18b7ecea214bd32f43d5ff66e90741697d085f3ee9bfd8662a3cc570999bb151090160d3bf5bf1d85e896d66276cba7ed97f341f595b13c02ac2a1352aec7a5980de2c8f9d890951108947b7602dcf2bdd2aef680667572b87aadf7c54338492eae763df73e89e3c438c196da83d98bc65233a242e08894f2390d8714f0abb801d9e5c42f169555284b6cf079005b373e9938db71a93ee5945c2a43a06e3df580d372318b3d203503c6e968206d7db8116cca2f2a1fae7f5b5195bea92914d66516bc3ceb2d9dc4de59d0d52ab80910aba7ebb696c7deaddcf0fedf56e2a88c3496bb79897c6420a0ef1b03ad89c76b24f67ffd41c9227d464565457bb25f0b32c83e676b0a3284f2acbed39c6875871c5e866a8284f12e383f87f12dd9bbe3078c68b3711eaa9bc17a7ac8413a8ef486922eddf43f01625671b7c3d0a4c6c2dc38217b4135c8cb46df7d936aabfd253e95e0816dd1f92b257e2f96d2a259a320756ba77d99b709711326f2ea42def974d60f817a1f6779121dd32a1cb194c7809e4c8fd052ba357323436491ec45a49fa601ed373aadd2199e4483704fb2f4edd7bf2815b552fb84d09094cab9700b5125887ee508570217c16799bc11d9e3658de8d9812f30dc8078bbecaf887a6527686b026eea70229df1e61759adf19c1b96673419decb382ae29bd685c5f32120b2d56d3e97c9ef00a2c0598c2181b8fa53172312590a9549ff55dffb9070b042c74654b2ae56371b2a6bac8e2808a40fd5d6d0af184c035101394e347521467e0ddb962e0d63614cf1461ac7b9d744084e9f6f26c88d515dbb1b7392b8e9384b81f186224d5c09e266682d8044d8afb1bd6483962b03ed6884759d2647b8f174a6695a437a1f1aac3e6a2f8ca658ee8a8ae44a77393cec61a9f335a1e859825e73df4125828fbde19d3695125992ddb2826ffbc6c7cfbfdbae19ba864c4170c79cce408e8b280a7632c855d802029ebac8627fbd6fec1c3bd858411c969ca035992f2ab909c423158dffd0dd5a407b3e0c2d9b180440996e09e15f17b4e42f365371d9dd58c4609455253c44c2ba73f592e360ab5fcccdb6e90ae0c60ada9325c4824242c0d866e7dfbefe091067d5c7ff0432814f733591eb0096659738b34cfa8c6c988ec628f34fe08f31dc0156dc39866412932d045168f4f3a48f24fb3b884be1384845d496c3009626f1c41b0189e95c9055d24eb5a0390596f6ccf50d3727e607875a3b2cf076a277e12ac07ddc59da78ee16e1952706ac6a1a9ade80b867d889789c935d196cc4da67aa35ba80ef2077ee4dd69c5f31a0410f7fd0739303ddcdbff2f53e0a44ec5de0f062e533444bd946959a1d9c25b297b6fc7675ca4add9e24e8ff390e0375f3b15e1d3e8129007d743e384659f191bd23ffe02140fa64d5c6d75937b28d51afcaa9d207f57c878f2f54493025e9eff5b5ce0c997d11c9690262e38e1e83c7f1a0ed3f200d9d0472739d59dea3cc6e8783758e3e3201731cf27211267702594356345449b42fa64b64c6f00a8f26665524fe2208b1a7c5fbdc822ea611c1811526471e4f52ab5e3a43de8fd4eba2fb2796a206e348de9b0be78ded78204dc82d9e9adccbe408d7ff538aab3d663eab189927a9cd597388e8dc5063d2db42cd65415fa32d20288da017c9f94e788dfe7cc3a0f6b6ab06116ed3f72f3c048cb1e51abf308ed7169908d1ad5b7ab3a86a3316d164084f8d88c6f96142d888ccb158efa586015914c116db114aa82c44a55d4c33bd901dc34e820d3120d57def03ea4f01b263913cc02ca586b208506d149ef03a706fd5360a12b83acb7bf97ac1f1f85389d4fbfdcf38551e9dbce760a05e8e4023d85038570d3697b3e7de73aac9c7feb39b6ccd1a775c8ce01b08d7190e28866aa7bb8d0cff0fc45b452fcb6a290f98f4b5ec125224c8a93918b1f2888befba6de3d294ee1f13a9c56e92eaac0b8e6c6905e77a60ea7e1d1ed979b6b2606652e7d75750a065c57c7efb1ef5708719ef04e354bd861b15e0a1cbc7cfe65c8a3d9a2b790260d6e6eb60bd4e0fb3f040dfa27fa00797664122add0750a23a8b20fcd68b6be1e21620dda4bf0561f4c5ed74f41612a0676dcdbf669df3436cbf2ce253e69319e3ab36e6e6314f11e0d0882ee3d7f3d3b3dcfe3cd7f061e301369207545676e09801f9bc4bc4c3dcaf48e5320a4b3211051a7525868a0ac1278ed6fc9531ed89cf4205458acc05d5351bcab7ea50250b6cb4c6fdd0cd96f30cdc9a820f495d0a3e14eb6c493a85a87e3b7fb8e5f23431c3c5359f5802f1fc11ff71c3172c6b57b5587ab38579b79e328792edb7a81d60762bc6c88693a00712f811cab9b075a97535c904396dbd2fa0994ba9c9b06fe9c042cb6860d22844b94863bf7b68a1ab8639e4487b38d48e40da4a98dedd7d73ca4b575bf4c604a364a9247c2ea5e3b127ff42f9bce1d3d37c2428edab1708ebd71ac0e4a408a9c6eb97407a4a8b5e912e2c63fadd1abad9a772a96fc4666f7d2b604adbde6f1136de2adfe38994491ab0f34ff1fd20cb8034ad39aae4c5c0076da2e7a157764b770e1c5f35b6f323ce809b2e92be1345204021d74712368e0ef77056afd85f065bba085793c9b6950d3c3fc6c445afbdd5a80cf7b0bb13055fd486700be1500bdf8771e286a63962e56d4771ed5eefbf111ba7380f02d6f96eed174246820b73bd772689c072bb3d8e43ef96f5466dce5c9392e34b7176821d2f4df3dab4c6ef5e0238ffe61582812fdacc987fbb6d98cad5a2d7af0e4c8dd3f800cd75c38a515d4d4c7118c5f81c6f7504e7ae452370c56c4b7fb4daa65bf26919c12081485d09e9d142965320211f483ed2a0a6836fa2488a878eaf9653b0528c3680b75a1920a25b5c5c17548c7ceb9a1656a0cf6a404aec14f7ed8a1dcf8ed32e1cf94dc2f60b65aa102650b7a22d9e708c606ce8403ceb81434bd9938b2c4e5a8530a156a1df7d143b2da54071ba3e673ce11760f72c32273b7bcd9a48da2a6caeb4b782cf1c3a044c1731f3ad61ce32bbd0b52cbb187cb3ecc1e85a67ffe27cf86769a0d69fe293dd30f060b8a0f26ccd0287d0b8d941ee7410a7c6aa430add67c2dd60db292e24f294ce80b0321aaa4d054a6f5d9981e1d5e859b454f5005be082bd59baca5775eedb7994333c62c452ef7b2893e4d03a28c0e368928b4bdd6e31f52a83cd7e162975405fd128321e0a8e3e77fd93257b0c46b309e16203974382ced818faac3a02e74141e9ea36c4a1b98bd859fafce43b2984d856c832f61b1ca562cee96f5843adc14b35bec1ccdafedd214f1a344345373f3c9eccee8324950a23c3e77d55dbde9a7ac1b7804927affb8b0e1488dcd8919d227bd1f50a35abf25e3f120c25b0dfb4d85b4c2a2c69cf7047c76c45e4e901e7396140496f9a322c2c2ac777a27adff5a6daf32e852b1bac89f1086739a603cf0f6838f792351c08e38ab130e5a83aa5a4f2da19df131770a308d810eed0059a2e5546a2169b9d0119f6df7c18981f4b4f119c76fdaac031ce7551f25678b5c4d8815a7ea9565e63389fca6ea0bcd40e71ac72124113dc0041ce26a0c9979ff76d7f1f2c0cd2c16d8c7a36930b909ed7e2d4adfa8352b12b99bdcbc25b485f652539fab7ac983c1ae925967c15ba2345e45d6bafe13b3e9d7acf1a592422ea09c3a45f7fe24e235bd70b106cdaa665584e74cdaf9f39b804bc6c4e7f0bf572225acd4dfe010081b91c2d5970d4f43d2e1a0e05f84baaf50642991b3704034aed74572e6a4715b79276432d06660b39c989570fc0d5d0071a7c690658caee447370d3295db3b5dc625e697e1ca2675b5430b9969024835c7d001fbce86c5165c4fe8f2d46b883daaa3fbf42dc5cf61209379013896df740b9cc32638358ea8079a33f04197f650471086e67e5cf9779268d7973c73bbbde2f1c11e1a8e2b154aaa8b4b74f8a03f14ceb7afc4ba35e6620b7af89c969021d20cb260c1868f3fa432ce7e509db06001ae6540531b126c1e3a851acbf0a9c1354bece05c094d69d9bd87f99391e23306911383d2082997339daebd67d8a707c9b496a309b7921696f39a07864f31208802db7188881e346b41c34f4129fca9c6a13172a4dabfe791584d240fc03685057d53c08737aa1d486233318eb4545f2e8d18087705b9d3a7658564592f56aea3aee53d66c249988bf353853728553a1577062e24af533f47dc012ae90c5c085babc121be2993c063e203ab949a088041271ac0527c56edd4b7a87e98323a0137cd493aa05fe38d02754a66d89348b119e6200d5919bc366788eb67115fc57c4c1a9dd42c7411d6709ad82de8662a1849445b39beb2ba8f894860e41a054f61337179a9214b0884f3964c95ed2a4ab37de8038566bba76fbaa7502c0460558ff4bf4793ca68d78e50f384a81da4cfa23723747e906b82290e0b8ea07e3404bee0915800d4c3c07f94c43e7aafbc7a44d923de97963d0d1586bee06fc90aadbe5758fb9933ff7df346d62e082223741f5cb26ef953ca654ab983a72b30b296891c9e3f1ed5216b0e588eb25f5d4ccad6f96973cc2d26196bbd37c83266473071ccd84d9e3c74f22621e8bd60afa4bcad6c853c7591fe5d4298a954ea5006f682a7a65aeb26b230f3866a28a58bf532aca8fd5eaec64f442ac510a7df4114f00fd6ff7e02d77f8e72797222556959958c4c4d166c5af18a6e25588cac9871a3d5bb453889ff8d13db22024a997bf97a5afdf698b1deaff3101e27868d2de47b92c403ce82e15f3239d8923e8ca0c01e3781b5dd6121f57d2238dc3ff8a1bde3e371efd33838c552e43588042b360f55d7ca92f11987630364b263428e18601d7bf23f6432b3a9aa2c500cd9ac5f73cbe309443858a2806956b0cdcfc19904567bb1703641017c6199e768410e03d8ba603eb34249d567370202f39639ae8f6d52d9d5dbfc544c5b85ac8187095c63f1f613fe4af179fc5c837e6e0ccc21e62ac22ac045c4ac3b1ca6a4cbdbe29ea465240fc0aed1f0e086d7580bcf81d4e2a4d55a8e3bc57110e7cf1e1895df07974f0686dd2ea2b12bbfd64e7a9d0c62c662f0370e6ed495eeb2ee5029042147a1f2e5fcd6068b06567be893cb80e2cbb5fbb12847313811c13cf685698d5e2175959579e510279b9e959ac2c3f94fec653c6b521f8909d633ccedbc1109285ecbd52d27cd2891eaf354db2c966d1e3086718848433c12658fe7f6fbfef930b963139a63f6c4caee5a1964d3a038dd0db403c0a251d702c07a0fba4a3576ec6668a78e9e26efc6ad83a670a47608bf4207979bf196b3160c95e7ccc6406d46f529d34676b76d72396262e1448df051130a21484e0e977df1f7f0a259ac762eef9506877498b9998e1286d6294cf60b95352e81c3", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x150, 0x0, 0x3, [{{0x4, 0x3, 0x7fffffff, 0x3, 0x9, 0x10001, {0x6, 0x9, 0x4, 0x46a1, 0x6, 0x0, 0x6, 0x1, 0xa, 0x8000, 0xde, 0x0, r12, 0x8001, 0x80000000}}, {0x1, 0x1, 0x1, 0x32540194, '\x00'}}, {{0x4, 0x3, 0x7ff, 0x7fffffffffffffff, 0xfff, 0x7ff, {0x3, 0x9, 0x3, 0x6, 0x7, 0x2, 0x2, 0x6, 0x7, 0x8000, 0x0, r11, r12, 0x1, 0x1}}, {0x0, 0x7, 0x1, 0x300, '\x00'}}]}, 0x0, 0x0, 0x0}) getgroups(0x2, &(0x7f0000000500)=[0xee01, 0xee01]) sendmsg$unix(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)="1b71b2547365681b3e2940f36357fa8912f04cff56b8b8882650c6009afec8acc91bfb4ffd8f8b4d5046809fa0ea987118", 0x31}, {&(0x7f0000000140)="d3b76f492ec1ccdc10aa115a54c2536575aa177e05212c5004ca6b6ee715200b4878f732be78099eb60a3ddf456381684514961da69cc6c285728e36ae0ee974a846b7327cb8", 0x46}, {&(0x7f00000001c0)="b0bfae8daab4db928c6fd919c742e453f5ed48c7391485c97d4772a0508f694c0d0ea8e8a92cc7518ecc0f6835cd4df952f10f989a58e51dd0016a72b3da31d22f00b13559f2a6b9187e7c69296404b75618d9d09482d7d18d2f9da989cabff92ef0ef093073cbf7004b3822c3a290269fb2551aeefae4", 0x77}, {&(0x7f0000000400)="7d1c23971146c6d344d8863ee32d0e01272f6c9f2e264181988d31a5f7f35b7985588f4a85965b285e45a5ef3061f1c225edf6301b3f500b8dc4a6f291a16f34292420c5a7", 0x45}], 0x4, &(0x7f0000000540)=[@cred={{0x1c, 0x1, 0x2, {r8, r11, r13}}}], 0x20, 0x40}, 0xd4) 64.51753ms ago: executing program 0 (id=596): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x83, 0x7fff0000}]}) r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x20) syz_kvm_setup_cpu$x86(r8, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="b9800000c00f3235000400000f30440f20c03508000000440f22c036646665f36526f20f22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30f245ab48b800000000000000800f23c00f21f83500000b000f23f8c481e57dcd", 0x67}], 0x1, 0x10, 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000040)=@x={0x94, 0x4, "689f2ad807f5"}) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = dup(r5) syz_ublk_setup_queues(r10, r4, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c, 0x0, r0}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x700, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x83, 0x7fff0000}]}) (async) syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000300)) (async) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) dup(r7) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x20) (async) syz_kvm_setup_cpu$x86(r8, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="b9800000c00f3235000400000f30440f20c03508000000440f22c036646665f36526f20f22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30f245ab48b800000000000000800f23c00f21f83500000b000f23f8c481e57dcd", 0x67}], 0x1, 0x10, 0x0, 0x0) (async) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000040)=@x={0x94, 0x4, "689f2ad807f5"}) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async) dup(r5) (async) syz_ublk_setup_queues(r10, r4, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c, 0x0, r0}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x700, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) (async) 0s ago: executing program 3 (id=597): r0 = getpid() r1 = epoll_create(0x7) r2 = socket$xdp(0x2c, 0x3, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r2, &(0x7f00000000c0)={r1, 0xffffffffffffffff, 0x6}) r3 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) kernel console output (not intermixed with test programs): 3][ T6105] usb 4-1: Using ep0 maxpacket: 8 [ 131.545221][ T6105] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 131.558378][ T6105] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.558415][ T6105] usb 4-1: Product: syz [ 131.558769][ T6105] usb 4-1: Manufacturer: syz [ 131.558784][ T6105] usb 4-1: SerialNumber: syz [ 131.584984][ T6105] usb 4-1: config 0 descriptor?? [ 131.598289][ T6105] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 131.598345][ T6105] pctv452e: pctv452e_power_ctrl: 1 [ 131.598345][ T6105] [ 131.598383][ T6105] usb 4-1: selecting invalid altsetting 3 [ 131.598396][ T6105] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 131.598396][ T6105] [ 131.598408][ T6105] dvb-usb: bulk message failed: -22 (5/0) [ 131.654453][ T6105] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 131.656454][ T6105] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 131.656504][ T6105] usb 4-1: media controller created [ 131.658219][ T6105] dvb-usb: bulk message failed: -22 (8/0) [ 131.658236][ T6105] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 131.658307][ T6105] dvb-usb: MAC address reading failed. [ 131.700663][ T6105] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 131.709606][ T945] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 131.806069][ T6105] DVB: Unable to find symbol stb0899_attach() [ 131.806106][ T6105] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 131.890046][ T945] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 131.903860][ T945] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.903901][ T945] usb 1-1: Product: syz [ 131.903918][ T945] usb 1-1: Manufacturer: syz [ 131.903934][ T945] usb 1-1: SerialNumber: syz [ 131.928616][ T945] usb 1-1: config 0 descriptor?? [ 131.951290][ T6105] rc_core: IR keymap rc-tt-1500 not found [ 131.953845][ T6105] Registered IR keymap rc-empty [ 131.955402][ T6105] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 131.975349][ T6105] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input17 [ 131.997428][ T6105] dvb-usb: schedule remote query interval to 100 msecs. [ 131.997462][ T6105] pctv452e: pctv452e_power_ctrl: 0 [ 131.997462][ T6105] [ 131.999381][ T6105] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 132.007369][ T6105] usb 4-1: USB disconnect, device number 19 [ 132.119973][ T6105] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 132.558501][ T6785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.558911][ T6785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.826781][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.833396][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.980993][ T945] dvb_usb_rtl28xxu 1-1:0.0: chip type detection failed -110 [ 132.988514][ T945] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 133.448565][ T6801] netlink: 36 bytes leftover after parsing attributes in process `syz.1.280'. [ 133.452504][ T6771] syz.2.272 (6771): drop_caches: 2 [ 133.483151][ T6797] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.483776][ T6797] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.745376][ T6797] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.752211][ T6797] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.874973][ T6815] netlink: 8 bytes leftover after parsing attributes in process `syz.2.283'. [ 133.923112][ T6815] netlink: 8 bytes leftover after parsing attributes in process `syz.2.283'. [ 133.928665][ T6815] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:16x2160 (0x33424752, 8, 0, 0, 0) [ 133.958982][ T6803] lo: entered allmulticast mode [ 133.969548][ T5981] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.969603][ T5981] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.969648][ T5981] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.969679][ T5981] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.133927][ T6826] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 134.275487][ T6830] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 1000000 out of range (51000000..2150000000) [ 134.298768][ T31] kauditd_printk_skb: 107 callbacks suppressed [ 134.298812][ T31] audit: type=1326 audit(1788740087.888:1593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6825 comm="syz.3.285" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc38019e159 code=0x0 [ 134.441908][ T6837] netlink: 'syz.3.285': attribute type 23 has an invalid length. [ 134.547274][ T6105] usb 1-1: USB disconnect, device number 29 [ 134.997374][ T6845] kvm: pic: non byte write [ 135.159001][ T6850] ip6gre1: entered allmulticast mode [ 135.175250][ T6852] xt_hashlimit: size too large, truncated to 1048576 [ 135.363260][ T6854] netlink: 12 bytes leftover after parsing attributes in process `syz.2.292'. [ 135.404995][ T6859] fuse: Unknown parameter 'default_permissions' [ 136.282832][ T30] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 136.299405][ T6881] bridge0: entered allmulticast mode [ 136.318470][ T6881] bridge_slave_1: left allmulticast mode [ 136.325852][ T6881] bridge_slave_1: left promiscuous mode [ 136.334554][ T6881] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.375451][ T31] audit: type=1326 audit(1788740089.968:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6879 comm="syz.3.300" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc38019e159 code=0x0 [ 136.418243][ T6881] bridge_slave_0: left allmulticast mode [ 136.418271][ T6881] bridge_slave_0: left promiscuous mode [ 136.432332][ T30] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 136.438242][ T6881] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.439053][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.439074][ T30] usb 5-1: Product: syz [ 136.439086][ T30] usb 5-1: Manufacturer: syz [ 136.439099][ T30] usb 5-1: SerialNumber: syz [ 136.461267][ T30] usb 5-1: config 0 descriptor?? [ 136.493172][ T6886] x_tables: duplicate underflow at hook 1 [ 136.889358][ T10] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 137.043839][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 137.053011][ T10] usb 4-1: New USB device found, idVendor=2b73, idProduct=001b, bcdDevice= 0.40 [ 137.071645][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.071685][ T10] usb 4-1: Product: syz [ 137.071708][ T10] usb 4-1: Manufacturer: syz [ 137.071724][ T10] usb 4-1: SerialNumber: syz [ 137.185587][ T6898] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.305' sets config #0 [ 137.498631][ T6911] qrtr: Invalid version 0 [ 137.552138][ T30] dvb_usb_rtl28xxu 5-1:0.0: chip type detection failed -110 [ 137.552236][ T30] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 137.625897][ T6914] netlink: 32 bytes leftover after parsing attributes in process `syz.1.308'. [ 137.652790][ T6911] syzkaller1: entered promiscuous mode [ 137.652833][ T6911] syzkaller1: entered allmulticast mode [ 137.657307][ T6914] netlink: 16 bytes leftover after parsing attributes in process `syz.1.308'. [ 137.657811][ T6914] netlink: 180 bytes leftover after parsing attributes in process `syz.1.308'. [ 137.927964][ T6919] netlink: 12 bytes leftover after parsing attributes in process `syz.0.309'. [ 137.928356][ T6919] vlan0: entered promiscuous mode [ 138.113340][ T6922] netlink: 'syz.1.310': attribute type 10 has an invalid length. [ 138.145130][ T6922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.165313][ T6922] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 138.181483][ T6921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.182070][ T6921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.208618][ T6930] FAULT_INJECTION: forcing a failure. [ 138.208618][ T6930] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.222223][ T6930] CPU: 0 UID: 0 PID: 6930 Comm: syz.2.312 Tainted: G L syzkaller #0 PREEMPT(full) [ 138.222253][ T6930] Tainted: [L]=SOFTLOCKUP [ 138.222259][ T6930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 138.222269][ T6930] Call Trace: [ 138.222276][ T6930] [ 138.222283][ T6930] dump_stack_lvl+0xe8/0x150 [ 138.222313][ T6930] should_fail_ex+0x410/0x560 [ 138.222340][ T6930] _copy_from_iter+0x1d3/0x1660 [ 138.222365][ T6930] ? __alloc_skb+0x27a/0x7a0 [ 138.222384][ T6930] ? __alloc_skb+0x27a/0x7a0 [ 138.222400][ T6930] ? __alloc_skb+0x27a/0x7a0 [ 138.222417][ T6930] ? __pfx__copy_from_iter+0x10/0x10 [ 138.222440][ T6930] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 138.222461][ T6930] ? __alloc_skb+0x27a/0x7a0 [ 138.222474][ T6930] ? __alloc_skb+0x27a/0x7a0 [ 138.222494][ T6930] ? netlink_sendmsg+0x650/0xb40 [ 138.222515][ T6930] ? skb_put+0x112/0x210 [ 138.222535][ T6930] netlink_sendmsg+0x6c0/0xb40 [ 138.222565][ T6930] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.222593][ T6930] ? apparmor_socket_sendmsg+0x18b/0x360 [ 138.222622][ T6930] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.222643][ T6930] sock_sendmsg_nosec+0x13a/0x180 [ 138.222668][ T6930] ____sys_sendmsg+0x54e/0x850 [ 138.222688][ T6930] ? __pfx_____sys_sendmsg+0x10/0x10 [ 138.222714][ T6930] ? import_iovec+0x73/0xa0 [ 138.222729][ T6930] ___sys_sendmsg+0x2a5/0x360 [ 138.222742][ T6930] ? __lock_acquire+0x6df/0x2e50 [ 138.222761][ T6930] ? __pfx____sys_sendmsg+0x10/0x10 [ 138.222807][ T6930] ? __fget_files+0x2a/0x420 [ 138.222826][ T6930] ? __fget_files+0x3a2/0x420 [ 138.222854][ T6930] __x64_sys_sendmsg+0x1b1/0x290 [ 138.222874][ T6930] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 138.222909][ T6930] do_syscall_64+0x166/0x520 [ 138.222925][ T6930] ? trace_irq_disable+0x3b/0x140 [ 138.222940][ T6930] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.222994][ T6930] ? clear_bhb_loop+0x70/0xc0 [ 138.223015][ T6930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.223031][ T6930] RIP: 0033:0x7fe3aa39e159 [ 138.223047][ T6930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.223060][ T6930] RSP: 002b:00007fe3ab351028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 138.223079][ T6930] RAX: ffffffffffffffda RBX: 00007fe3aa625fa0 RCX: 00007fe3aa39e159 [ 138.223090][ T6930] RDX: 0000000020040040 RSI: 0000200000000500 RDI: 0000000000000003 [ 138.223101][ T6930] RBP: 00007fe3ab351090 R08: 0000000000000000 R09: 0000000000000000 [ 138.223110][ T6930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.223119][ T6930] R13: 00007fe3aa626038 R14: 00007fe3aa625fa0 R15: 00007fe3aa74fa48 [ 138.223141][ T6930] [ 138.949344][ T30] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 139.043046][ T6948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.052337][ T6948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.100509][ T30] usb 1-1: Using ep0 maxpacket: 8 [ 139.110328][ T30] usb 1-1: unable to get BOS descriptor or descriptor too short [ 139.110384][ T30] usb 1-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 139.114525][ T30] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 2047, setting to 1024 [ 139.114554][ T30] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 1024 [ 139.124670][ T30] usb 1-1: string descriptor 0 read error: -22 [ 139.124797][ T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.128953][ T6940] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 139.166626][ T30] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 139.202598][ T6105] usb 5-1: USB disconnect, device number 24 [ 139.571163][ T10] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 139.578280][ T10] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 139.584588][ T30] usb 1-1: USB disconnect, device number 30 [ 139.599935][ T6961] FAULT_INJECTION: forcing a failure. [ 139.599935][ T6961] name failslab, interval 1, probability 0, space 0, times 0 [ 139.599981][ T6961] CPU: 1 UID: 0 PID: 6961 Comm: syz.3.323 Tainted: G L syzkaller #0 PREEMPT(full) [ 139.600003][ T6961] Tainted: [L]=SOFTLOCKUP [ 139.600009][ T6961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 139.600019][ T6961] Call Trace: [ 139.600026][ T6961] [ 139.600033][ T6961] dump_stack_lvl+0xe8/0x150 [ 139.600062][ T6961] should_fail_ex+0x410/0x560 [ 139.600091][ T6961] should_failslab+0xa8/0x100 [ 139.600112][ T6961] ? skb_clone+0x212/0x3a0 [ 139.600132][ T6961] kmem_cache_alloc_noprof+0xa1/0x600 [ 139.600160][ T6961] ? skb_clone+0x212/0x3a0 [ 139.600187][ T6961] skb_clone+0x212/0x3a0 [ 139.600205][ T6961] ? nfnetlink_rcv+0x4b0/0x28c0 [ 139.600228][ T6961] nfnetlink_rcv+0x4de/0x28c0 [ 139.600251][ T6961] ? kernel_text_address+0xa5/0xe0 [ 139.600271][ T6961] ? __kernel_text_address+0xd/0x30 [ 139.600291][ T6961] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 139.600318][ T6961] ? arch_stack_walk+0xfb/0x150 [ 139.600352][ T6961] ? stack_trace_save+0xa9/0x100 [ 139.600379][ T6961] ? __lock_acquire+0x6df/0x2e50 [ 139.600397][ T6961] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 139.600415][ T6961] ? __lock_acquire+0x6df/0x2e50 [ 139.600449][ T6961] ? __lock_acquire+0x6df/0x2e50 [ 139.600477][ T6961] ? __netlink_lookup+0xc6/0x8b0 [ 139.600509][ T6961] ? lock_acquire+0x115/0x350 [ 139.600526][ T6961] ? netlink_deliver_tap+0x2e/0x1b0 [ 139.600554][ T6961] ? netlink_deliver_tap+0x2e/0x1b0 [ 139.600583][ T6961] ? netlink_deliver_tap+0x2e/0x1b0 [ 139.600609][ T6961] netlink_unicast+0x7bd/0x940 [ 139.600639][ T6961] netlink_sendmsg+0x813/0xb40 [ 139.600668][ T6961] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.600696][ T6961] ? apparmor_socket_sendmsg+0x18b/0x360 [ 139.600725][ T6961] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.600746][ T6961] sock_sendmsg_nosec+0x13a/0x180 [ 139.600773][ T6961] ____sys_sendmsg+0x54e/0x850 [ 139.600799][ T6961] ? __pfx_____sys_sendmsg+0x10/0x10 [ 139.600827][ T6961] ? import_iovec+0x73/0xa0 [ 139.600849][ T6961] ___sys_sendmsg+0x2a5/0x360 [ 139.600868][ T6961] ? __lock_acquire+0x6df/0x2e50 [ 139.600890][ T6961] ? __pfx____sys_sendmsg+0x10/0x10 [ 139.600940][ T6961] ? __fget_files+0x2a/0x420 [ 139.600963][ T6961] ? __fget_files+0x3a2/0x420 [ 139.600993][ T6961] __x64_sys_sendmsg+0x1b1/0x290 [ 139.601015][ T6961] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 139.601054][ T6961] do_syscall_64+0x166/0x520 [ 139.601071][ T6961] ? trace_irq_disable+0x3b/0x140 [ 139.601087][ T6961] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.601106][ T6961] ? clear_bhb_loop+0x70/0xc0 [ 139.601128][ T6961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.601145][ T6961] RIP: 0033:0x7fc38019e159 [ 139.601162][ T6961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.601177][ T6961] RSP: 002b:00007fc380f8f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 139.601197][ T6961] RAX: ffffffffffffffda RBX: 00007fc380425fa0 RCX: 00007fc38019e159 [ 139.601210][ T6961] RDX: 0000000020040040 RSI: 0000200000000500 RDI: 0000000000000003 [ 139.601222][ T6961] RBP: 00007fc380f8f090 R08: 0000000000000000 R09: 0000000000000000 [ 139.601233][ T6961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.601243][ T6961] R13: 00007fc380426038 R14: 00007fc380425fa0 R15: 00007fc38054fa48 [ 139.601271][ T6961] [ 139.956673][ T10] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 139.963175][ T10] usb 4-1: USB disconnect, device number 20 [ 140.161957][ T5623] udevd[5623]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 140.388954][ T6966] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 140.824369][ T6980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.835347][ T6980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.037444][ T6986] syzkaller0: entered promiscuous mode [ 141.037489][ T6986] syzkaller0: entered allmulticast mode [ 141.309374][ T30] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 141.370048][ T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 141.474689][ T30] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 141.488527][ T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.488574][ T30] usb 1-1: Product: syz [ 141.488601][ T30] usb 1-1: Manufacturer: syz [ 141.488622][ T30] usb 1-1: SerialNumber: syz [ 141.519331][ T10] usb 4-1: device descriptor read/64, error -71 [ 141.535440][ T30] usb 1-1: config 0 descriptor?? [ 141.547699][ T7001] binder_alloc: binder_alloc_mmap_handler: 6999 200000ffd000-200001000000 already mapped failed -16 [ 141.548007][ T7001] binder_alloc: binder_alloc_mmap_handler: 6999 200000ffd000-200001000000 already mapped failed -16 [ 141.548188][ T7001] binder_alloc: binder_alloc_mmap_handler: 6999 200000ffd000-200001000000 already mapped failed -16 [ 141.548341][ T7001] binder_alloc: binder_alloc_mmap_handler: 6999 200000ffd000-200001000000 already mapped failed -16 [ 141.559158][ T7001] binder_alloc: binder_alloc_mmap_handler: 6999 200000ffd000-200001000000 already mapped failed -16 [ 141.559397][ T7001] binder_alloc: binder_alloc_mmap_handler: 6999 200000ffd000-200001000000 already mapped failed -16 [ 141.559551][ T7001] binder_alloc: binder_alloc_mmap_handler: 6999 200000ffd000-200001000000 already mapped failed -16 [ 141.559709][ T7001] binder_alloc: binder_alloc_mmap_handler: 6999 200000ffd000-200001000000 already mapped failed -16 [ 141.559865][ T7001] binder_alloc: binder_alloc_mmap_handler: 6999 200000ffd000-200001000000 already mapped failed -16 [ 141.560023][ T7001] binder_alloc: binder_alloc_mmap_handler: 6999 200000ffd000-200001000000 already mapped failed -16 [ 141.560778][ T7002] binder: BINDER_SET_CONTEXT_MGR already set [ 141.560787][ T7002] binder: 6999:7002 ioctl 4018620d 2000000002c0 returned -16 [ 141.560890][ T7002] binder: BINDER_SET_CONTEXT_MGR already set [ 141.560898][ T7002] binder: 6999:7002 ioctl 4018620d 2000000002c0 returned -16 [ 141.560970][ T7002] binder: BINDER_SET_CONTEXT_MGR already set [ 141.560977][ T7002] binder: 6999:7002 ioctl 4018620d 2000000002c0 returned -16 [ 141.561059][ T7002] binder: BINDER_SET_CONTEXT_MGR already set [ 141.561065][ T7002] binder: 6999:7002 ioctl 4018620d 2000000002c0 returned -16 [ 141.561139][ T7002] binder: BINDER_SET_CONTEXT_MGR already set [ 141.561145][ T7002] binder: 6999:7002 ioctl 4018620d 2000000002c0 returned -16 [ 141.561243][ T7002] binder: BINDER_SET_CONTEXT_MGR already set [ 141.561250][ T7002] binder: 6999:7002 ioctl 4018620d 2000000002c0 returned -16 [ 141.561322][ T7002] binder: BINDER_SET_CONTEXT_MGR already set [ 141.561329][ T7002] binder: 6999:7002 ioctl 4018620d 2000000002c0 returned -16 [ 141.561401][ T7002] binder: BINDER_SET_CONTEXT_MGR already set [ 141.561408][ T7002] binder: 6999:7002 ioctl 4018620d 2000000002c0 returned -16 [ 141.561515][ T7002] binder: BINDER_SET_CONTEXT_MGR already set [ 141.677650][ T7002] binder: 6999:7002 ioctl 4018620d 2000000002c0 returned -16 [ 141.677744][ T7002] binder: BINDER_SET_CONTEXT_MGR already set [ 141.677752][ T7002] binder: 6999:7002 ioctl 4018620d 2000000002c0 returned -16 [ 141.677829][ T7002] binder: BINDER_SET_CONTEXT_MGR already set [ 141.677835][ T7002] binder: 6999:7002 ioctl 4018620d 2000000002c0 returned -16 [ 141.677920][ T7002] binder: BINDER_SET_CONTEXT_MGR already set [ 141.677927][ T7002] binder: 6999:7002 ioctl 4018620d 2000000002c0 returned -16 [ 141.678002][ T7002] binder: BINDER_SET_CONTEXT_MGR already set [ 141.678008][ T7002] binder: 6999:7002 ioctl 4018620d 2000000002c0 returned -16 [ 141.678083][ T7002] binder: BINDER_SET_CONTEXT_MGR already set [ 141.678090][ T7002] binder: 6999:7002 ioctl 4018620d 2000000002c0 returned -16 [ 141.678165][ T7002] binder: BINDER_SET_CONTEXT_MGR already set [ 141.678172][ T7002] binder: 6999:7002 ioctl 4018620d 2000000002c0 returned -16 [ 141.678993][ T7002] binder: BINDER_SET_CONTEXT_MGR already set [ 141.679000][ T7002] binder: 6999:7002 ioctl 4018620d 2000000002c0 returned -16 [ 141.679077][ T7002] binder: BINDER_SET_CONTEXT_MGR already set [ 141.679084][ T7002] binder: 6999:7002 ioctl 4018620d 2000000002c0 returned -16 [ 141.681601][ T7002] binder: BINDER_SET_CONTEXT_MGR already set [ 141.681613][ T7002] binder: 6999:7002 ioctl 4018620d 2000000002c0 returned -16 [ 141.681688][ T7002] binder: BINDER_SET_CONTEXT_MGR already set [ 141.681695][ T7002] binder: 6999:7002 ioctl 4018620d 2000000002c0 returned -16 [ 141.681773][ T7002] binder: BINDER_SET_CONTEXT_MGR already set [ 141.681780][ T7002] binder: 6999:7002 ioctl 4018620d 2000000002c0 returned -16 [ 141.681853][ T7002] binder: BINDER_SET_CONTEXT_MGR already set [ 141.681860][ T7002] binder: 6999:7002 ioctl 4018620d 2000000002c0 returned -16 [ 141.681943][ T7002] binder: BINDER_SET_CONTEXT_MGR already set [ 141.681950][ T7002] binder: 6999:7002 ioctl 4018620d 2000000002c0 returned -16 [ 141.682023][ T7002] binder: BINDER_SET_CONTEXT_MGR already set [ 141.682029][ T7002] binder: 6999:7002 ioctl 4018620d 2000000002c0 returned -16 [ 141.682106][ T7002] binder: BINDER_SET_CONTEXT_MGR already set [ 141.682113][ T7002] binder: 6999:7002 ioctl 4018620d 2000000002c0 returned -16 [ 141.682247][ T7002] binder: BINDER_SET_CONTEXT_MGR already set [ 141.682255][ T7002] binder: 6999:7002 ioctl 4018620d 2000000002c0 returned -16 [ 141.682331][ T7002] binder: BINDER_SET_CONTEXT_MGR already set [ 141.682338][ T7002] binder: 6999:7002 ioctl 4018620d 2000000002c0 returned -16 [ 141.682410][ T7002] binder: BINDER_SET_CONTEXT_MGR already set [ 141.682418][ T7002] binder: 6999:7002 ioctl 4018620d 2000000002c0 returned -16 [ 141.682494][ T7002] binder: BINDER_SET_CONTEXT_MGR already set [ 141.682501][ T7002] binder: 6999:7002 ioctl 4018620d 2000000002c0 returned -16 [ 141.682574][ T7002] binder: BINDER_SET_CONTEXT_MGR already set [ 141.682581][ T7002] binder: 6999:7002 ioctl 4018620d 2000000002c0 returned -16 [ 141.682659][ T7002] binder: BINDER_SET_CONTEXT_MGR already set [ 141.682667][ T7002] binder: 6999:7002 ioctl 4018620d 2000000002c0 returned -16 [ 141.684436][ T7002] binder: BINDER_SET_CONTEXT_MGR already set [ 141.684445][ T7002] binder: 6999:7002 ioctl 4018620d 2000000002c0 returned -16 [ 141.684523][ T7002] binder: BINDER_SET_CONTEXT_MGR already set [ 141.684530][ T7002] binder: 6999:7002 ioctl 4018620d 2000000002c0 returned -16 [ 141.684604][ T7002] binder: BINDER_SET_CONTEXT_MGR already set [ 141.684610][ T7002] binder: 6999:7002 ioctl 4018620d 2000000002c0 returned -16 [ 141.684704][ T7002] binder: BINDER_SET_CONTEXT_MGR already set [ 141.684711][ T7002] binder: 6999:7002 ioctl 4018620d 2000000002c0 returned -16 [ 141.684785][ T7002] binder: BINDER_SET_CONTEXT_MGR already set [ 141.684792][ T7002] binder: 6999:7002 ioctl 4018620d 2000000002c0 returned -16 [ 141.684867][ T7002] binder: BINDER_SET_CONTEXT_MGR already set [ 141.684875][ T7002] binder: 6999:7002 ioctl 4018620d 2000000002c0 returned -16 [ 141.684955][ T7002] binder: BINDER_SET_CONTEXT_MGR already set [ 141.684962][ T7002] binder: 6999:7002 ioctl 4018620d 2000000002c0 returned -16 [ 141.685036][ T7002] binder: BINDER_SET_CONTEXT_MGR already set [ 141.685043][ T7002] binder: 6999:7002 ioctl 4018620d 2000000002c0 returned -16 [ 141.685118][ T7002] binder: BINDER_SET_CONTEXT_MGR already set [ 141.685125][ T7002] binder: 6999:7002 ioctl 4018620d 2000000002c0 returned -16 [ 141.685200][ T7002] binder: BINDER_SET_CONTEXT_MGR already set [ 141.685207][ T7002] binder: 6999:7002 ioctl 4018620d 2000000002c0 returned -16 [ 141.685280][ T7002] binder: BINDER_SET_CONTEXT_MGR already set [ 141.685287][ T7002] binder: 6999:7002 ioctl 4018620d 2000000002c0 returned -16 [ 141.685360][ T7002] binder: BINDER_SET_CONTEXT_MGR already set [ 141.685367][ T7002] binder: 6999:7002 ioctl 4018620d 2000000002c0 returned -16 [ 141.687871][ T7002] binder: BINDER_SET_CONTEXT_MGR already set [ 141.687882][ T7002] binder: 6999:7002 ioctl 4018620d 2000000002c0 returned -16 [ 141.687973][ T7002] binder: BINDER_SET_CONTEXT_MGR already set [ 141.687980][ T7002] binder: 6999:7002 ioctl 4018620d 2000000002c0 returned -16 [ 141.688054][ T7002] binder: BINDER_SET_CONTEXT_MGR already set [ 141.688061][ T7002] binder: 6999:7002 ioctl 4018620d 2000000002c0 returned -16 [ 141.688135][ T7002] binder: BINDER_SET_CONTEXT_MGR already set [ 141.688142][ T7002] binder: 6999:7002 ioctl 4018620d 2000000002c0 returned -16 [ 141.688214][ T7002] binder: BINDER_SET_CONTEXT_MGR already set [ 141.688221][ T7002] binder: 6999:7002 ioctl 4018620d 2000000002c0 returned -16 [ 141.688295][ T7002] binder: BINDER_SET_CONTEXT_MGR already set [ 141.688301][ T7002] binder: 6999:7002 ioctl 4018620d 2000000002c0 returned -16 [ 141.688375][ T7002] binder: BINDER_SET_CONTEXT_MGR already set [ 141.688382][ T7002] binder: 6999:7002 ioctl 4018620d 2000000002c0 returned -16 [ 141.695168][ T7002] binder: BINDER_SET_CONTEXT_MGR already set [ 141.695181][ T7002] binder: 6999:7002 ioctl 4018620d 2000000002c0 returned -16 [ 141.695274][ T7002] binder: BINDER_SET_CONTEXT_MGR already set [ 141.695281][ T7002] binder: 6999:7002 ioctl 4018620d 2000000002c0 returned -16 [ 141.695359][ T7002] binder: BINDER_SET_CONTEXT_MGR already set [ 141.695366][ T7002] binder: 6999:7002 ioctl 4018620d 2000000002c0 returned -16 [ 141.695440][ T7002] binder: BINDER_SET_CONTEXT_MGR already set [ 141.695447][ T7002] binder: 6999:7002 ioctl 4018620d 2000000002c0 returned -16 [ 141.695521][ T7002] binder: BINDER_SET_CONTEXT_MGR already set [ 141.695528][ T7002] binder: 6999:7002 ioctl 4018620d 2000000002c0 returned -16 [ 141.695672][ T7002] binder: BINDER_SET_CONTEXT_MGR already set [ 141.695679][ T7002] binder: 6999:7002 ioctl 4018620d 2000000002c0 returned -16 [ 141.695766][ T7002] binder: BINDER_SET_CONTEXT_MGR already set [ 141.695773][ T7002] binder: 6999:7002 ioctl 4018620d 2000000002c0 returned -16 [ 141.695846][ T7002] binder: BINDER_SET_CONTEXT_MGR already set [ 141.695852][ T7002] binder: 6999:7002 ioctl 4018620d 2000000002c0 returned -16 [ 141.695934][ T7002] binder: BINDER_SET_CONTEXT_MGR already set [ 141.695941][ T7002] binder: 6999:7002 ioctl 4018620d 2000000002c0 returned -16 [ 141.696014][ T7002] binder: BINDER_SET_CONTEXT_MGR already set [ 141.696021][ T7002] binder: 6999:7002 ioctl 4018620d 2000000002c0 returned -16 [ 141.696128][ T7002] binder: BINDER_SET_CONTEXT_MGR already set [ 141.696136][ T7002] binder: 6999:7002 ioctl 4018620d 2000000002c0 returned -16 [ 141.696210][ T7002] binder: BINDER_SET_CONTEXT_MGR already set [ 141.696216][ T7002] binder: 6999:7002 ioctl 4018620d 2000000002c0 returned -16 [ 141.696291][ T7002] binder: BINDER_SET_CONTEXT_MGR already set [ 141.696298][ T7002] binder: 6999:7002 ioctl 4018620d 2000000002c0 returned -16 [ 141.696372][ T7002] binder: BINDER_SET_CONTEXT_MGR already set [ 141.696378][ T7002] binder: 6999:7002 ioctl 4018620d 2000000002c0 returned -16 [ 141.696476][ T7002] binder: BINDER_SET_CONTEXT_MGR already set [ 141.696483][ T7002] binder: 6999:7002 ioctl 4018620d 2000000002c0 returned -16 [ 141.770345][ T10] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 141.909385][ T10] usb 4-1: device descriptor read/64, error -71 [ 142.019682][ T10] usb usb4-port1: attempt power cycle [ 142.392426][ T10] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 142.421798][ T10] usb 4-1: device descriptor read/8, error -71 [ 142.659714][ T10] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 142.680183][ T10] usb 4-1: device descriptor read/8, error -71 [ 142.739780][ T30] dvb_usb_rtl28xxu 1-1:0.0: chip type detection failed -110 [ 142.739877][ T30] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 142.793762][ T10] usb usb4-port1: unable to enumerate USB device [ 143.159322][ T10] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 143.310746][ T10] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 143.320493][ T10] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 143.320516][ T10] usb 3-1: config 1 has no interface number 0 [ 143.320553][ T10] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 1024 [ 143.320575][ T10] usb 3-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 143.325078][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.325102][ T10] usb 3-1: Product: syz [ 143.325115][ T10] usb 3-1: Manufacturer: syz [ 143.325127][ T10] usb 3-1: SerialNumber: syz [ 143.332873][ T7025] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 143.332989][ T7025] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 143.342226][ T10] usb 3-1: Expected 3 endpoints, found: 2 [ 143.394123][ T7031] netlink: 64 bytes leftover after parsing attributes in process `syz.4.341'. [ 143.544674][ T5670] usb 2-1: USB disconnect, device number 16 [ 143.659353][ T10] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 143.810335][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 143.812157][ T10] usb 5-1: New USB device found, idVendor=045e, idProduct=9994, bcdDevice=fc.3c [ 143.813118][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.813144][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.813163][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 143.813198][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.831195][ T10] usb 5-1: config 0 descriptor?? [ 143.949076][ T5613] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 143.957535][ T5613] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 143.968172][ T5613] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 143.972655][ T5613] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 143.973316][ T5613] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 144.095296][ T5670] usb 1-1: USB disconnect, device number 31 [ 144.186640][ T7037] xt_TCPMSS: Only works on TCP SYN packets [ 144.264696][ T10] hid_parser_main: 4009 callbacks suppressed [ 144.264761][ T10] hid-multitouch 0003:045E:9994.0009: unknown main item tag 0x2 [ 144.264881][ T10] hid-multitouch 0003:045E:9994.0009: unknown main item tag 0x0 [ 144.264907][ T10] hid-multitouch 0003:045E:9994.0009: unknown main item tag 0x0 [ 144.264931][ T10] hid-multitouch 0003:045E:9994.0009: unknown main item tag 0x0 [ 144.264954][ T10] hid-multitouch 0003:045E:9994.0009: unknown main item tag 0x0 [ 144.264977][ T10] hid-multitouch 0003:045E:9994.0009: unknown main item tag 0x0 [ 144.265000][ T10] hid-multitouch 0003:045E:9994.0009: unknown main item tag 0x0 [ 144.265024][ T10] hid-multitouch 0003:045E:9994.0009: unknown main item tag 0x0 [ 144.265047][ T10] hid-multitouch 0003:045E:9994.0009: unknown main item tag 0x0 [ 144.274498][ T10] hid-multitouch 0003:045E:9994.0009: hidraw0: USB HID v0.00 Device [HID 045e:9994] on usb-dummy_hcd.4-1/input0 [ 144.512443][ T10] usb 5-1: USB disconnect, device number 25 [ 144.704399][ T7034] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.712513][ T7034] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.719899][ T7034] bridge_slave_0: entered allmulticast mode [ 144.722257][ T7051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.348'. [ 144.737027][ T7034] bridge_slave_0: entered promiscuous mode [ 144.746243][ T7034] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.746367][ T7034] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.746497][ T7034] bridge_slave_1: entered allmulticast mode [ 144.751502][ T7034] bridge_slave_1: entered promiscuous mode [ 144.847094][ T7034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.858747][ T7034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.872797][ T7057] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 144.912026][ T7060] tipc: Started in network mode [ 144.912086][ T7060] tipc: Node identity 887766554433221100ffeeddccbbaa99, cluster identity 4711 [ 144.913773][ T5613] Bluetooth: hci2: Malformed HCI Event: 0x22 [ 144.918741][ T7034] team0: Port device team_slave_0 added [ 144.924550][ T7034] team0: Port device team_slave_1 added [ 145.010722][ T7034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.010753][ T7034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 145.010786][ T7034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.014409][ T7034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.014424][ T7034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 145.014446][ T7034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.118733][ T7065] nvme_fabrics: unknown parameter or missing value '#! 1R?&n%~[6=p͊yz\Uj@5NfWrs)q' in ctrl creation request [ 145.152666][ T7034] hsr_slave_0: entered promiscuous mode [ 145.156790][ T7034] hsr_slave_1: entered promiscuous mode [ 145.157417][ T7034] debugfs: 'hsr0' already exists in 'hsr' [ 145.157435][ T7034] Cannot create hsr debugfs directory [ 145.264631][ T7065] fuse: Unknown parameter ' [ 145.264631][ T7065] 0xffffffffffffffff' [ 145.368207][ T7065] nvme nvme0: failed to connect socket: -111 [ 145.509445][ T4946] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 145.528341][ T7034] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 145.537793][ T7034] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 145.543615][ T7034] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 145.554423][ T7034] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 145.563657][ T7034] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 145.574902][ T7034] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 145.575757][ T7034] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 145.587386][ T7034] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 145.617527][ T7034] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.617714][ T7034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.619516][ T7034] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.619634][ T7034] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.661157][ T4946] usb 4-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 145.671958][ T4946] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.683057][ T4946] usb 4-1: config 0 descriptor?? [ 145.697281][ T4946] pwc: Creative Labs Webcam 5 detected. [ 145.705731][ T6720] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.718066][ T6720] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.752591][ T7034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.777086][ T7034] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.786059][ T6720] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.786183][ T6720] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.816489][ T6317] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.816653][ T6317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.869970][ T5670] usb 3-1: USB disconnect, device number 21 [ 146.020119][ T5613] Bluetooth: hci4: command tx timeout [ 146.046755][ T7034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.112901][ T7034] veth0_vlan: entered promiscuous mode [ 146.133696][ T7034] veth1_vlan: entered promiscuous mode [ 146.181694][ T7034] veth0_macvtap: entered promiscuous mode [ 146.195551][ T7034] veth1_macvtap: entered promiscuous mode [ 146.229085][ T7034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.250166][ T7034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.314232][ T6720] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.314302][ T6720] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.314347][ T6720] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.314376][ T6720] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.377782][ T4946] pwc: recv_control_msg error -32 req 02 val 2b00 [ 146.495194][ T6325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.495240][ T6325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.591712][ T6720] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.591759][ T6720] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.600153][ T4946] pwc: recv_control_msg error -71 req 04 val 1600 [ 146.600562][ T4946] pwc: recv_control_msg error -71 req 02 val 2c00 [ 146.608737][ T4946] pwc: recv_control_msg error -71 req 04 val 1000 [ 146.617065][ T4946] pwc: recv_control_msg error -71 req 04 val 1300 [ 146.617982][ T4946] pwc: recv_control_msg error -71 req 04 val 1400 [ 146.645146][ T4946] pwc: recv_control_msg error -71 req 02 val 2000 [ 146.652239][ T4946] pwc: recv_control_msg error -71 req 02 val 2100 [ 146.659725][ T4946] pwc: recv_control_msg error -71 req 06 val 0600 [ 146.666941][ T4946] pwc: recv_control_msg error -71 req 04 val 1500 [ 146.675149][ T4946] pwc: recv_control_msg error -71 req 02 val 2500 [ 146.683397][ T4946] pwc: recv_control_msg error -71 req 02 val 2400 [ 146.690906][ T4946] pwc: recv_control_msg error -71 req 02 val 2600 [ 146.697858][ T4946] pwc: recv_control_msg error -71 req 02 val 2900 [ 146.704830][ T4946] pwc: recv_control_msg error -71 req 02 val 2800 [ 146.713647][ T4946] pwc: recv_control_msg error -71 req 04 val 1100 [ 146.722003][ T4946] pwc: recv_control_msg error -71 req 04 val 1200 [ 146.722426][ T4946] pwc: Failed to power off camera (-71) [ 146.751180][ T4946] pwc: Registered as video103. [ 146.760813][ T4946] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input19 [ 146.782364][ T4946] usb 4-1: USB disconnect, device number 25 [ 147.188864][ T7095] netlink: 20 bytes leftover after parsing attributes in process `syz.5.344'. [ 148.100066][ T5613] Bluetooth: hci4: command tx timeout [ 148.217998][ T7115] capability: warning: `syz.3.362' uses deprecated v2 capabilities in a way that may be insecure [ 148.751762][ T4946] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 148.872661][ T7140] netlink: 'syz.3.368': attribute type 6 has an invalid length. [ 148.884318][ T7140] netlink: 168 bytes leftover after parsing attributes in process `syz.3.368'. [ 148.906059][ T7138] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 148.926803][ T4946] usb 1-1: descriptor type invalid, skip [ 148.926836][ T4946] usb 1-1: descriptor type invalid, skip [ 148.935106][ T4946] usb 1-1: New USB device found, idVendor=056a, idProduct=0319, bcdDevice= 0.40 [ 148.940905][ T4946] usb 1-1: config 1 has an invalid descriptor of length 200, skipping remainder of the config [ 148.940928][ T4946] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 148.956459][ T4946] usb 1-1: language id specifier not provided by device, defaulting to English [ 148.970204][ T4946] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.970229][ T4946] usb 1-1: Product: Г [ 148.970241][ T4946] usb 1-1: SerialNumber: 榔ↈᝨ䁐躵޺鋜戾ॽ [ 149.077460][ T7141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.078242][ T7141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.199389][ T5698] usb 3-1: new low-speed USB device number 22 using dummy_hcd [ 149.301542][ T2067] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 149.363997][ T5698] usb 3-1: New USB device found, idVendor=0471, idProduct=0302, bcdDevice=60.00 [ 149.376002][ T5698] usb 3-1: config 2 interface 0 has no altsetting 0 [ 149.393013][ T5698] usb 3-1: string descriptor 0 read error: -22 [ 149.393183][ T5698] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.436055][ T5698] pwc: Philips PCA645VC USB webcam detected. [ 149.491574][ T2067] usb 4-1: Using ep0 maxpacket: 8 [ 149.506992][ T2067] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 149.521186][ T2067] usb 4-1: config 1 interface 0 altsetting 7 endpoint 0x1 has invalid maxpacket 1080, setting to 1024 [ 149.521233][ T2067] usb 4-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 1024 [ 149.521272][ T2067] usb 4-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 149.521299][ T2067] usb 4-1: config 1 interface 0 has no altsetting 0 [ 149.582788][ T2067] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.582831][ T2067] usb 4-1: Product: 視겯陋᫊㒥鴟㤠涻봶ㅺ᧹ᗸ㉬ℱ勊蹽臓⪁塑赈ᗐ踸렌鉮祝꣫算턈㹬鷵啠꠱昂攍Ｐꦆꏑ믆漆닅췁梅㇃橛㷕ᛉ䘈ꍅ醠襦䦜ᰝ슽틳瓡䧙踂㳇⪛⅜䊌⏢ᛗ從估ﵧⱐ彵牦鯞㕷㨚䗞ꯘ扨뵃鴓Ẫã徺䃕Ƅꔰ갍箟킿랴䲉﬐냻쿺௸䉈ѳᦸ [ 149.582871][ T2067] usb 4-1: Manufacturer: ࠾ [ 149.582887][ T2067] usb 4-1: SerialNumber: 킗ᛯ잊峉묵뿇䎣ꗰ汯셌㬁讯됼뎥웄仵袒き畇㐆춫︰숶⶯竪完쒓㬾픑ꓠ᭟䃻숿竝歀रᘩ⋚訁渽ﲸ㔮编芦죴ᘜ畣蕠̠鯝ᕡ쫢冦婫➬揺辱ᘎꢸ⣘⯬倁裻苖뾟䆱궋꠪馞熴軍ා◎ʌ先쒛㜦엛쑁᱃徘븖体딉쎡쵍ퟚ䃛퀎놞ↅ喹讄㓗ᖣॉ榖殔⸀ [ 149.665946][ T7150] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 149.677678][ T7150] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 149.919284][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 150.105639][ T7128] netlink: 'syz.2.364': attribute type 1 has an invalid length. [ 150.181735][ T5613] Bluetooth: hci4: command tx timeout [ 150.731771][ T5698] pwc: send_video_command error -71 [ 150.731833][ T5698] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 150.732585][ T5698] Philips webcam 3-1:2.0: probe with driver Philips webcam failed with error -71 [ 150.738690][ T5698] usb 3-1: USB disconnect, device number 22 [ 151.366609][ T4946] usb 1-1: USB disconnect, device number 32 [ 151.499430][ T6105] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 151.659600][ T6105] usb 5-1: Using ep0 maxpacket: 16 [ 151.665605][ T6105] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 151.676744][ T6105] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.687104][ T6105] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 151.701707][ T6105] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.701736][ T6105] usb 5-1: Product: syz [ 151.701913][ T6105] usb 5-1: Manufacturer: syz [ 151.701927][ T6105] usb 5-1: SerialNumber: syz [ 151.744743][ T6105] usb 5-1: 0:2 : does not exist [ 151.849629][ T4946] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 151.870579][ T30] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 151.901190][ T2067] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 26 if 0 alt 7 proto 1 vid 0x04B8 pid 0x0202 [ 151.921951][ T2067] usb 4-1: USB disconnect, device number 26 [ 151.945231][ T2067] usblp0: removed [ 151.951178][ T6105] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 151.989938][ T4946] usb 1-1: device descriptor read/64, error -71 [ 152.050526][ T30] usb 6-1: Using ep0 maxpacket: 8 [ 152.052642][ T30] usb 6-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=c4.d4 [ 152.055778][ T30] usb 6-1: config 0 has an invalid interface number: 95 but max is 0 [ 152.055800][ T30] usb 6-1: config 0 has no interface number 0 [ 152.055838][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.072785][ T30] usb 6-1: config 0 descriptor?? [ 152.085819][ T6105] usb 5-1: USB disconnect, device number 26 [ 152.115836][ T30] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state. [ 152.115895][ T30] cxusb: set interface failed [ 152.116232][ T30] dvb-usb: bulk message failed: -22 (1/0) [ 152.143391][ T30] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 152.144490][ T30] dvbdev: DVB: registering new adapter (AVerMedia AVerTVHD Volar (A868R)) [ 152.144538][ T30] usb 6-1: media controller created [ 152.192329][ T30] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 152.229869][ T4946] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 152.241224][ T5623] udevd[5623]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 152.259319][ T5613] Bluetooth: hci4: command tx timeout [ 152.302021][ T30] DVB: Unable to find symbol lgdt330x_attach() [ 152.302063][ T30] dvb-usb: no frontend was attached by 'AVerMedia AVerTVHD Volar (A868R)' [ 152.305613][ T30] dvb-usb: bulk message failed: -22 (1/0) [ 152.305632][ T30] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully initialized and connected. [ 152.317616][ T30] usb 6-1: USB disconnect, device number 2 [ 152.401504][ T4946] usb 1-1: device descriptor read/64, error -71 [ 152.436139][ T30] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully deinitialized and disconnected. [ 152.509843][ T4946] usb usb1-port1: attempt power cycle [ 152.849886][ T4946] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 152.861990][ T7179] cgroup: fork rejected by pids controller in /syz3 [ 152.872593][ T30] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 152.885430][ T4946] usb 1-1: device descriptor read/8, error -71 [ 153.029984][ T30] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 153.033811][ T30] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.033863][ T30] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 153.033886][ T30] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 153.033922][ T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.141659][ T4946] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 153.170220][ T4946] usb 1-1: device descriptor read/8, error -71 [ 153.249484][ T5670] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 153.279817][ T4946] usb usb1-port1: unable to enumerate USB device [ 153.292127][ T7221] capability: warning: `syz.3.382' uses 32-bit capabilities (legacy support in use) [ 153.409699][ T5670] usb 6-1: Using ep0 maxpacket: 8 [ 153.415576][ T5670] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 153.427339][ T5670] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 153.427404][ T5670] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.430153][ T5670] usb 6-1: config 0 descriptor?? [ 153.531916][ T30] cxacru 3-1:1.0: send of cm 0x91 failed (-71) [ 153.540354][ T30] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 153.540372][ T30] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 153.563670][ T30] cxacru 3-1:1.0: probe with driver cxacru failed with error -71 [ 153.576653][ T30] usb 3-1: USB disconnect, device number 23 [ 153.673049][ T5670] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 153.776363][ T7229] could not allocate digest TFM handle sha224-neon [ 154.194009][ T4946] usb 6-1: USB disconnect, device number 3 [ 154.592404][ T5670] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 154.750254][ T5670] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 154.751244][ T5670] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 154.751265][ T5670] usb 4-1: config 1 has no interface number 0 [ 154.751300][ T5670] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 154.751321][ T5670] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 154.751343][ T5670] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.753775][ T5670] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.753795][ T5670] usb 4-1: Product: syz [ 154.753808][ T5670] usb 4-1: Manufacturer: syz [ 154.753821][ T5670] usb 4-1: SerialNumber: syz [ 154.758505][ T7262] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 154.986163][ T7262] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 155.193978][ T5670] usb 4-1: Incompatible driver and firmware versions [ 155.226214][ T7262] netlink: 28 bytes leftover after parsing attributes in process `syz.3.386'. [ 155.245071][ T10] usb 4-1: USB disconnect, device number 27 [ 155.256038][ T7282] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 155.305131][ T7284] FAULT_INJECTION: forcing a failure. [ 155.305131][ T7284] name failslab, interval 1, probability 0, space 0, times 0 [ 155.318577][ T7284] CPU: 1 UID: 0 PID: 7284 Comm: syz.2.392 Tainted: G L syzkaller #0 PREEMPT(full) [ 155.318605][ T7284] Tainted: [L]=SOFTLOCKUP [ 155.318611][ T7284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 155.318622][ T7284] Call Trace: [ 155.318629][ T7284] [ 155.318636][ T7284] dump_stack_lvl+0xe8/0x150 [ 155.318666][ T7284] should_fail_ex+0x410/0x560 [ 155.318696][ T7284] should_failslab+0xa8/0x100 [ 155.318715][ T7284] ? skb_clone+0x212/0x3a0 [ 155.318734][ T7284] kmem_cache_alloc_noprof+0xa1/0x600 [ 155.318761][ T7284] ? skb_clone+0x212/0x3a0 [ 155.318787][ T7284] skb_clone+0x212/0x3a0 [ 155.318811][ T7284] __netlink_deliver_tap+0x413/0x860 [ 155.318844][ T7284] ? netlink_deliver_tap+0x2e/0x1b0 [ 155.318867][ T7284] netlink_deliver_tap+0x19c/0x1b0 [ 155.318889][ T7284] netlink_sendskb+0x68/0x140 [ 155.318912][ T7284] nfnetlink_rcv+0x260c/0x28c0 [ 155.318960][ T7284] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 155.318995][ T7284] ? ref_tracker_free+0x689/0x830 [ 155.319036][ T7284] ? skb_clone+0x246/0x3a0 [ 155.319059][ T7284] ? __netlink_deliver_tap+0x811/0x860 [ 155.319089][ T7284] ? netlink_deliver_tap+0x2e/0x1b0 [ 155.319110][ T7284] ? netlink_deliver_tap+0x2e/0x1b0 [ 155.319139][ T7284] netlink_unicast+0x7bd/0x940 [ 155.319170][ T7284] netlink_sendmsg+0x813/0xb40 [ 155.319201][ T7284] ? __pfx_netlink_sendmsg+0x10/0x10 [ 155.319231][ T7284] ? apparmor_socket_sendmsg+0x18b/0x360 [ 155.319256][ T7284] ? __pfx_netlink_sendmsg+0x10/0x10 [ 155.319275][ T7284] sock_sendmsg_nosec+0x13a/0x180 [ 155.319302][ T7284] ____sys_sendmsg+0x54e/0x850 [ 155.319328][ T7284] ? __pfx_____sys_sendmsg+0x10/0x10 [ 155.319356][ T7284] ? import_iovec+0x73/0xa0 [ 155.319425][ T7284] ___sys_sendmsg+0x2a5/0x360 [ 155.319442][ T7284] ? __lock_acquire+0x6df/0x2e50 [ 155.319462][ T7284] ? __pfx____sys_sendmsg+0x10/0x10 [ 155.319511][ T7284] ? __fget_files+0x2a/0x420 [ 155.319533][ T7284] ? __fget_files+0x3a2/0x420 [ 155.319565][ T7284] __x64_sys_sendmsg+0x1b1/0x290 [ 155.319586][ T7284] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 155.319617][ T7284] do_syscall_64+0x166/0x520 [ 155.319631][ T7284] ? trace_irq_disable+0x3b/0x140 [ 155.319645][ T7284] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.319660][ T7284] ? clear_bhb_loop+0x70/0xc0 [ 155.319681][ T7284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.319698][ T7284] RIP: 0033:0x7fe3aa39e159 [ 155.319715][ T7284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.319728][ T7284] RSP: 002b:00007fe3ab351028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 155.319747][ T7284] RAX: ffffffffffffffda RBX: 00007fe3aa625fa0 RCX: 00007fe3aa39e159 [ 155.319759][ T7284] RDX: 0000000020040040 RSI: 0000200000000500 RDI: 0000000000000003 [ 155.319770][ T7284] RBP: 00007fe3ab351090 R08: 0000000000000000 R09: 0000000000000000 [ 155.319780][ T7284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 155.319791][ T7284] R13: 00007fe3aa626038 R14: 00007fe3aa625fa0 R15: 00007fe3aa74fa48 [ 155.319818][ T7284] [ 155.339904][ T5670] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 155.489401][ T5670] usb 1-1: Using ep0 maxpacket: 16 [ 155.490370][ T5670] usb 1-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice=41.e6 [ 155.492883][ T5670] usb 1-1: config 0 has an invalid interface number: 63 but max is 0 [ 155.492918][ T5670] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.492934][ T5670] usb 1-1: config 0 has no interface number 0 [ 155.492975][ T5670] usb 1-1: config 0 interface 63 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 155.492996][ T5670] usb 1-1: config 0 interface 63 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 155.493032][ T5670] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.507034][ T5670] usb 1-1: config 0 descriptor?? [ 155.751101][ T7290] netlink: 4 bytes leftover after parsing attributes in process `syz.2.393'. [ 156.004678][ T7295] netlink: 16 bytes leftover after parsing attributes in process `syz.3.395'. [ 156.259829][ T2067] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 156.409367][ T2067] usb 6-1: Using ep0 maxpacket: 8 [ 156.417476][ T2067] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 156.433378][ T2067] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 156.442258][ T2067] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 156.442288][ T2067] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 156.442309][ T2067] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 156.442332][ T2067] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 156.442351][ T2067] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 156.442388][ T2067] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.743902][ T2067] usb 6-1: GET_CAPABILITIES returned 0 [ 156.743963][ T2067] usbtmc 6-1:16.0: can't read capabilities [ 157.909533][ T2067] usb 5-1: new low-speed USB device number 27 using dummy_hcd [ 158.016877][ T31] audit: type=1326 audit(1788740111.608:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7334 comm="syz.2.405" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe3aa39e159 code=0x0 [ 158.059974][ T2067] usb 5-1: Invalid ep0 maxpacket: 16 [ 158.158636][ T5670] usb 1-1: USB disconnect, device number 37 [ 158.189889][ T2067] usb 5-1: new low-speed USB device number 28 using dummy_hcd [ 158.239606][ T6105] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 158.339365][ T2067] usb 5-1: Invalid ep0 maxpacket: 16 [ 158.345737][ T2067] usb usb5-port1: attempt power cycle [ 158.390799][ T6105] usb 3-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00 [ 158.401628][ T6105] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.412697][ T6105] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.430806][ T6105] usb 3-1: config 0 descriptor?? [ 158.642393][ T7335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.642773][ T7335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.643616][ T7335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.647258][ T7335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.648187][ T7335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.648542][ T7335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.656340][ T7335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.656697][ T7335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.667218][ T7335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.667589][ T7335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.689377][ T2067] usb 5-1: new low-speed USB device number 29 using dummy_hcd [ 158.731468][ T2067] usb 5-1: Invalid ep0 maxpacket: 16 [ 158.869418][ T2067] usb 5-1: new low-speed USB device number 30 using dummy_hcd [ 158.891481][ T2067] usb 5-1: Invalid ep0 maxpacket: 16 [ 158.896080][ T2067] usb usb5-port1: unable to enumerate USB device [ 159.020809][ T31] audit: type=1326 audit(1788740112.618:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7348 comm="syz.0.409" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1baaf9e159 code=0x7ffc0000 [ 159.021420][ T31] audit: type=1326 audit(1788740112.618:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7348 comm="syz.0.409" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1baaf9e159 code=0x7ffc0000 [ 159.022450][ T31] audit: type=1326 audit(1788740112.618:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7348 comm="syz.0.409" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1baaf9e159 code=0x7ffc0000 [ 159.053050][ T2067] usb 6-1: USB disconnect, device number 4 [ 159.085107][ T31] audit: type=1326 audit(1788740112.678:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7348 comm="syz.0.409" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1baaf9e159 code=0x7ffc0000 [ 159.085175][ T31] audit: type=1326 audit(1788740112.678:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7348 comm="syz.0.409" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1baaf9dec2 code=0x7ffc0000 [ 159.085209][ T31] audit: type=1326 audit(1788740112.678:1602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7348 comm="syz.0.409" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f1baaf9df57 code=0x7ffc0000 [ 159.085244][ T31] audit: type=1326 audit(1788740112.678:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7348 comm="syz.0.409" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f1baaf5ae51 code=0x7ffc0000 [ 159.085298][ T31] audit: type=1326 audit(1788740112.678:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7348 comm="syz.0.409" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f1baaf9ef49 code=0x7ffc0000 [ 159.085335][ T31] audit: type=1326 audit(1788740112.678:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7348 comm="syz.0.409" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f1baaf5aebb code=0x7ffc0000 [ 159.090300][ T31] audit: type=1326 audit(1788740112.688:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7348 comm="syz.0.409" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f1baaf5a5ac code=0x7ffc0000 [ 159.326046][ T7355] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 159.340349][ T7355] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 159.442743][ T7357] x_tables: duplicate underflow at hook 1 [ 159.948576][ T7366] loop5: detected capacity change from 0 to 7 [ 159.958802][ T7366] Dev loop5: unable to read RDB block 7 [ 159.958952][ T7366] loop5: unable to read partition table [ 159.959184][ T7366] loop5: partition table beyond EOD, truncated [ 159.959211][ T7366] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 161.105678][ T6105] usbhid 3-1:0.0: can't add hid device: -71 [ 161.105793][ T6105] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 161.121601][ T6105] usb 3-1: USB disconnect, device number 24 [ 161.342153][ T7410] netlink: 16 bytes leftover after parsing attributes in process `syz.5.421'. [ 161.389413][ T5614] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 161.403801][ T7414] netlink: 64 bytes leftover after parsing attributes in process `syz.5.421'. [ 161.540783][ T5614] usb 1-1: Using ep0 maxpacket: 32 [ 161.542922][ T5614] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 161.558634][ T5614] usb 1-1: config index 0 descriptor too short (expected 164, got 36) [ 161.558689][ T5614] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.558722][ T5614] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.558755][ T5614] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.563558][ T5614] usb 1-1: config 0 descriptor?? [ 162.099462][ T7444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.102836][ T7444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.323972][ T5614] usbhid 1-1:0.0: can't add hid device: -71 [ 162.324078][ T5614] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 162.364781][ T5614] usb 1-1: USB disconnect, device number 38 [ 162.620802][ T7452] program syz.2.426 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 162.789401][ T25] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 162.917552][ T7458] netlink: 64 bytes leftover after parsing attributes in process `syz.5.427'. [ 162.944396][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 162.945069][ T25] usb 4-1: New USB device found, idVendor=0cf3, idProduct=b003, bcdDevice=bf.24 [ 162.946882][ T25] usb 4-1: config 3 has an invalid interface number: 249 but max is 0 [ 162.946928][ T25] usb 4-1: config 3 has no interface number 0 [ 162.946965][ T25] usb 4-1: config 3 interface 249 has no altsetting 0 [ 162.949479][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.949499][ T25] usb 4-1: Product: syz [ 162.949512][ T25] usb 4-1: Manufacturer: syz [ 162.949524][ T25] usb 4-1: SerialNumber: syz [ 163.243798][ T25] usb 4-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 163.285885][ T25] usb 4-1: USB disconnect, device number 28 [ 163.388529][ T7473] loop0: detected capacity change from 0 to 4096 [ 163.462914][ T7473] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 163.462950][ T7473] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 163.462976][ T7473] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 163.463026][ T7473] loop0: [ 164.279899][ T5670] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 164.441274][ T5670] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 164.456901][ T5670] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.456943][ T5670] usb 4-1: Product: syz [ 164.456975][ T5670] usb 4-1: Manufacturer: syz [ 164.456990][ T5670] usb 4-1: SerialNumber: syz [ 164.492303][ T5670] usb 4-1: config 0 descriptor?? [ 164.717743][ T5670] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 164.793181][ T7505] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 165.109769][ T5614] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 165.239427][ T5614] usb 1-1: device descriptor read/64, error -71 [ 165.480422][ T5614] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 165.491039][ T31] kauditd_printk_skb: 56 callbacks suppressed [ 165.491073][ T31] audit: type=1326 audit(1788740119.088:1662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7535 comm="syz.2.439" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3aa39e159 code=0x7ffc0000 [ 165.497717][ T31] audit: type=1326 audit(1788740119.088:1663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7535 comm="syz.2.439" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3aa39e159 code=0x7ffc0000 [ 165.567054][ T31] audit: type=1326 audit(1788740119.158:1664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7535 comm="syz.2.439" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fe3aa39e159 code=0x7ffc0000 [ 165.567133][ T31] audit: type=1326 audit(1788740119.158:1665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7535 comm="syz.2.439" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3aa39e159 code=0x7ffc0000 [ 165.569624][ T31] audit: type=1326 audit(1788740119.168:1666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7535 comm="syz.2.439" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe3aa39e159 code=0x7ffc0000 [ 165.594432][ T31] audit: type=1326 audit(1788740119.188:1667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7535 comm="syz.2.439" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3aa39e159 code=0x7ffc0000 [ 165.596164][ T31] audit: type=1326 audit(1788740119.188:1668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7535 comm="syz.2.439" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3aa39e159 code=0x7ffc0000 [ 165.648514][ T5614] usb 1-1: device descriptor read/64, error -71 [ 165.739604][ T31] audit: type=1326 audit(1788740119.328:1669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7535 comm="syz.2.439" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7fe3aa39e159 code=0x7ffc0000 [ 165.739670][ T31] audit: type=1326 audit(1788740119.328:1670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7535 comm="syz.2.439" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3aa39e159 code=0x7ffc0000 [ 165.800722][ T5614] usb usb1-port1: attempt power cycle [ 165.989296][ T7495] 8021q: VLANs not supported on ip_vti0 [ 166.017598][ T7545] faux_driver vgem: [drm] Unknown color mode 1024; guessing buffer size. [ 166.086723][ T7543] !: entered allmulticast mode [ 166.141333][ T5614] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 166.170424][ T5614] usb 1-1: device descriptor read/8, error -71 [ 166.410683][ T5614] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 166.434534][ T5614] usb 1-1: device descriptor read/8, error -71 [ 166.459724][ T2067] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 166.539658][ T5614] usb usb1-port1: unable to enumerate USB device [ 166.552907][ T7563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.553370][ T7563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.564002][ T7565] fuse: Unknown parameter 'f4' [ 166.624056][ T2067] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 166.626740][ T5670] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 166.632184][ T5670] usb 4-1: USB disconnect, device number 29 [ 166.661439][ T2067] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 166.661482][ T2067] usb 6-1: config 0 has no interface number 0 [ 166.661539][ T2067] usb 6-1: config 0 interface 251 altsetting 0 endpoint 0x82 has invalid maxpacket 832, setting to 64 [ 166.695447][ T2067] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.695488][ T2067] usb 6-1: Product: syz [ 166.695516][ T2067] usb 6-1: Manufacturer: syz [ 166.695531][ T2067] usb 6-1: SerialNumber: syz [ 166.722491][ T2067] usb 6-1: config 0 descriptor?? [ 166.728964][ T7551] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 166.799455][ T10] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 166.968320][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 166.975209][ T10] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 166.981717][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.981741][ T10] usb 5-1: Product: syz [ 166.981753][ T10] usb 5-1: Manufacturer: syz [ 166.981766][ T10] usb 5-1: SerialNumber: syz [ 166.988540][ T10] usb 5-1: config 0 descriptor?? [ 167.003664][ T7551] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 167.012565][ T10] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 167.012662][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 167.012675][ T10] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 167.012785][ T10] dvb-usb: bulk message failed: -22 (5/0) [ 167.012798][ T10] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 167.027525][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 167.030716][ T10] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 167.030766][ T10] usb 5-1: media controller created [ 167.059734][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 167.154593][ T10] usb 5-1: selecting invalid altsetting 3 [ 167.154638][ T10] ttusb2: set interface to alts=3 failed [ 167.232295][ T5670] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 167.271289][ T10] DVB: Unable to find symbol tda10086_attach() [ 167.271315][ T10] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 167.272212][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 167.272228][ T10] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 167.272336][ T10] dvb-usb: bulk message failed: -22 (5/0) [ 167.272347][ T10] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 167.272406][ T10] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 167.278279][ T10] usb 5-1: USB disconnect, device number 31 [ 167.389838][ T5670] usb 3-1: device descriptor read/64, error -71 [ 167.390672][ T10] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 167.431777][ T7551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.432182][ T7551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.450420][ T2067] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 167.460857][ T2067] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 167.473441][ T2067] asix 6-1:0.251: probe with driver asix failed with error -71 [ 167.486994][ T2067] usb 6-1: USB disconnect, device number 5 [ 167.669490][ T5670] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 167.800539][ T5670] usb 3-1: device descriptor read/64, error -71 [ 167.899388][ T2067] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 167.921690][ T5670] usb usb3-port1: attempt power cycle [ 168.049377][ T2067] usb 4-1: Using ep0 maxpacket: 8 [ 168.056221][ T2067] usb 4-1: unable to get BOS descriptor or descriptor too short [ 168.056279][ T2067] usb 4-1: New USB device found, idVendor=0644, idProduct=9247, bcdDevice= 0.40 [ 168.058999][ T2067] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.059029][ T2067] usb 4-1: Product: syz [ 168.059040][ T2067] usb 4-1: Manufacturer: syz [ 168.059053][ T2067] usb 4-1: SerialNumber: syz [ 168.096828][ T5698] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 168.142256][ T7592] netlink: 28 bytes leftover after parsing attributes in process `syz.5.452'. [ 168.143247][ T7592] netlink: 'syz.5.452': attribute type 6 has an invalid length. [ 168.259493][ T5698] usb 5-1: Using ep0 maxpacket: 32 [ 168.264798][ T5670] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 168.265640][ T5698] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 168.266597][ T5698] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.266637][ T5698] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC3, changing to 0x83 [ 168.266659][ T5698] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 168.266680][ T5698] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 168.268511][ T5698] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 168.268531][ T5698] usb 5-1: Product: syz [ 168.268544][ T5698] usb 5-1: Manufacturer: syz [ 168.268555][ T5698] usb 5-1: SerialNumber: syz [ 168.283866][ T5698] usb 5-1: config 0 descriptor?? [ 168.287434][ T5698] usb 5-1: no audio or video endpoints found [ 168.290086][ T5670] usb 3-1: device descriptor read/8, error -71 [ 168.419529][ T25] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 168.500176][ T5698] usb 5-1: USB disconnect, device number 32 [ 168.541022][ T5670] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 168.560225][ T5670] usb 3-1: device descriptor read/8, error -71 [ 168.570066][ T25] usb 6-1: New USB device found, idVendor=0af0, idProduct=6711, bcdDevice= 0.00 [ 168.571476][ T25] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 168.571503][ T25] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 168.573582][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 168.573605][ T25] usb 6-1: Product: syz [ 168.573617][ T25] usb 6-1: Manufacturer: syz [ 168.669633][ T5670] usb usb3-port1: unable to enumerate USB device [ 168.776059][ T7596] netlink: 20 bytes leftover after parsing attributes in process `syz.0.453'. [ 168.786726][ T7596] Unknown options in mask b7f2 [ 168.802297][ T7596] netlink: 'syz.0.453': attribute type 7 has an invalid length. [ 168.817404][ T5614] usb 6-1: USB disconnect, device number 6 [ 169.062098][ T5698] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 169.222275][ T5698] usb 1-1: Using ep0 maxpacket: 8 [ 169.228903][ T5698] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0069, bcdDevice=6e.55 [ 169.246268][ T5698] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.255892][ T5698] usb 1-1: Product: syz [ 169.260746][ T5698] usb 1-1: Manufacturer: syz [ 169.265650][ T5698] usb 1-1: SerialNumber: syz [ 169.274965][ T5698] usb 1-1: config 0 descriptor?? [ 169.538032][ T7621] bridge1: entered promiscuous mode [ 169.538134][ T7621] bridge1: entered allmulticast mode [ 169.579100][ T7621] team0: Port device bridge1 added [ 169.604249][ T7623] bridge0: port 3(team0) entered blocking state [ 169.604370][ T7623] bridge0: port 3(team0) entered disabled state [ 169.604612][ T7623] team0: entered allmulticast mode [ 169.604627][ T7623] team_slave_0: entered allmulticast mode [ 169.604643][ T7623] team_slave_1: entered allmulticast mode [ 169.650509][ T7623] team0: entered promiscuous mode [ 169.650550][ T7623] team_slave_0: entered promiscuous mode [ 169.664301][ T7623] team_slave_1: entered promiscuous mode [ 169.725312][ T7623] bridge0: port 3(team0) entered blocking state [ 169.725573][ T7623] bridge0: port 3(team0) entered forwarding state [ 169.755457][ T5698] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 169.775092][ T5698] dvb_usb_af9015 1-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 169.788046][ T5698] usb 1-1: USB disconnect, device number 43 [ 170.605989][ T7652] ip6gretap0: entered promiscuous mode [ 171.239881][ T2067] usb 4-1: USB disconnect, device number 30 [ 171.495136][ T5623] udevd[5623]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 172.010138][ T5698] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 172.160586][ T5698] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 172.161573][ T5698] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.168247][ T5698] usb 6-1: config 0 descriptor?? [ 172.187341][ T5698] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 172.581562][ T5698] cpia1 6-1:0.0: unexpected state after lo power cmd: 00 [ 172.941287][ T2067] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 172.990199][ T7683] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 173.006797][ T5698] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0) [ 173.099316][ T2067] usb 3-1: Using ep0 maxpacket: 8 [ 173.104807][ T2067] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 173.114917][ T2067] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.114966][ T2067] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.128351][ T2067] usb 3-1: config 0 descriptor?? [ 173.138351][ T2067] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 173.208560][ T25] usb 6-1: USB disconnect, device number 8 [ 173.334689][ T2067] gspca_vc032x: reg_r err -32 [ 173.334769][ T2067] vc032x 3-1:0.0: probe with driver vc032x failed with error -32 [ 173.365884][ T7729] netlink: 24 bytes leftover after parsing attributes in process `syz.2.479'. [ 173.366129][ T7729] netlink: 24 bytes leftover after parsing attributes in process `syz.2.479'. [ 173.366328][ T7729] netlink: 24 bytes leftover after parsing attributes in process `syz.2.479'. [ 173.368112][ T7729] netlink: 24 bytes leftover after parsing attributes in process `syz.2.479'. [ 173.368344][ T7729] netlink: 24 bytes leftover after parsing attributes in process `syz.2.479'. [ 173.368574][ T7729] netlink: 24 bytes leftover after parsing attributes in process `syz.2.479'. [ 173.371746][ T7729] netlink: 24 bytes leftover after parsing attributes in process `syz.2.479'. [ 173.371967][ T7729] netlink: 24 bytes leftover after parsing attributes in process `syz.2.479'. [ 173.372161][ T7729] netlink: 24 bytes leftover after parsing attributes in process `syz.2.479'. [ 173.372355][ T7729] netlink: 24 bytes leftover after parsing attributes in process `syz.2.479'. [ 173.719638][ T25] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 173.806900][ T7740] Cannot find add_set index 2 as target [ 173.869640][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 173.872109][ T25] usb 4-1: unable to get BOS descriptor or descriptor too short [ 173.872155][ T25] usb 4-1: New USB device found, idVendor=1235, idProduct=8215, bcdDevice= 0.40 [ 173.873271][ T25] usb 4-1: config 1 has an invalid descriptor of length 11, skipping remainder of the config [ 173.881709][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.881732][ T25] usb 4-1: Product: syz [ 173.881744][ T25] usb 4-1: Manufacturer: syz [ 173.881755][ T25] usb 4-1: SerialNumber: syz [ 173.920119][ T2067] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 174.049388][ T30] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 174.069369][ T2067] usb 5-1: Using ep0 maxpacket: 32 [ 174.070316][ T2067] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 174.071812][ T2067] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.094387][ T2067] usb 5-1: config 0 descriptor?? [ 174.111959][ T2067] as10x_usb: device has been detected [ 174.112889][ T2067] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 174.127688][ T7733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.133778][ T7733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.151764][ T2067] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 174.200014][ T30] usb 1-1: Using ep0 maxpacket: 8 [ 174.200828][ T30] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 174.202400][ T30] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 174.202444][ T30] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 174.202464][ T30] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 174.202484][ T30] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 174.202504][ T30] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 174.202563][ T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.221143][ T2067] as10x_usb: error during firmware upload part1 [ 174.221961][ T2067] Registered device nBox DVB-T Dongle [ 174.397611][ T5698] usb 5-1: USB disconnect, device number 33 [ 174.409897][ T7743] as102_open: can't find device for minor 0 [ 174.413298][ T7743] as102_open: can't find device for minor 0 [ 174.415619][ T30] usb 1-1: usb_control_msg returned -71 [ 174.415683][ T30] usbtmc 1-1:16.0: can't read capabilities [ 174.432818][ T30] usb 1-1: USB disconnect, device number 44 [ 174.834273][ T31] audit: type=1326 audit(1788740128.428:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7752 comm="syz.5.485" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287af9e159 code=0x7ffc0000 [ 174.834364][ T31] audit: type=1326 audit(1788740128.428:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7752 comm="syz.5.485" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287af9e159 code=0x7ffc0000 [ 174.834416][ T31] audit: type=1326 audit(1788740128.428:1673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7752 comm="syz.5.485" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287af9e159 code=0x7ffc0000 [ 174.834487][ T31] audit: type=1326 audit(1788740128.428:1675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7752 comm="syz.5.485" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f287af9e159 code=0x7ffc0000 [ 174.834527][ T31] audit: type=1326 audit(1788740128.428:1676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7752 comm="syz.5.485" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287af9e159 code=0x7ffc0000 [ 174.834565][ T31] audit: type=1326 audit(1788740128.428:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7752 comm="syz.5.485" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287af9e159 code=0x7ffc0000 [ 174.834612][ T31] audit: type=1326 audit(1788740128.428:1674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7752 comm="syz.5.485" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287af9e159 code=0x7ffc0000 [ 174.834650][ T31] audit: type=1326 audit(1788740128.428:1678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7752 comm="syz.5.485" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287af9e159 code=0x7ffc0000 [ 174.834684][ T31] audit: type=1326 audit(1788740128.428:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7752 comm="syz.5.485" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287af9e159 code=0x7ffc0000 [ 174.908656][ T31] audit: type=1326 audit(1788740128.498:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7752 comm="syz.5.485" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7f287af9e159 code=0x7ffc0000 [ 174.954452][ T7753] fuse: Bad value for 'fd' [ 175.177520][ T7758] loop0: detected capacity change from 0 to 4096 [ 175.213654][ T7758] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 175.213696][ T7758] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 175.213732][ T7758] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 175.213792][ T7758] loop0: [ 175.531688][ T5698] Unregistered device nBox DVB-T Dongle [ 175.540036][ T5698] as10x_usb: device has been disconnected [ 175.791859][ T30] usb 3-1: USB disconnect, device number 29 [ 176.570743][ T25] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 176.579989][ T25] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 176.581738][ T25] usb 4-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8215); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 176.581799][ T25] usb 4-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 176.660561][ T5670] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 176.717815][ T25] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 176.735827][ T25] usb 4-1: USB disconnect, device number 31 [ 176.779169][ T5623] udevd[5623]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 176.799738][ T5670] usb 3-1: device descriptor read/64, error -71 [ 176.861124][ T7791] loop0: detected capacity change from 0 to 4096 [ 176.900642][ T7791] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 176.914883][ T7791] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 176.926111][ T7791] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 176.933248][ T7791] loop0: [ 177.049413][ T25] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 177.057329][ T5670] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 177.189697][ T5670] usb 3-1: device descriptor read/64, error -71 [ 177.202018][ T25] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 177.203113][ T25] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 177.203135][ T25] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 177.203150][ T25] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 177.203189][ T25] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 177.203211][ T25] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 177.206295][ T25] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 177.206317][ T25] usb 4-1: Product: syz [ 177.206329][ T25] usb 4-1: Manufacturer: syz [ 177.234528][ T25] cdc_wdm 4-1:1.0: skipping garbage [ 177.234547][ T25] cdc_wdm 4-1:1.0: skipping garbage [ 177.265517][ T25] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 177.265538][ T25] cdc_wdm 4-1:1.0: Unknown control protocol [ 177.307285][ T5670] usb usb3-port1: attempt power cycle [ 177.329548][ T5698] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 177.439946][ T945] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 177.444712][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 177.444840][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 177.445083][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 177.445101][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 177.445291][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 177.445307][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 177.445501][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 177.445518][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 177.445599][ T25] usb 4-1: USB disconnect, device number 32 [ 177.445716][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 177.445732][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 177.445747][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 177.550645][ T5698] usb 5-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 177.562589][ T5698] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.562662][ T5698] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 177.562702][ T5698] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.611711][ T945] usb 6-1: Using ep0 maxpacket: 8 [ 177.617976][ T945] usb 6-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 177.633753][ T945] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.650793][ T5670] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 177.667080][ T945] usb 6-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 177.667121][ T945] usb 6-1: Product: syz [ 177.667149][ T945] usb 6-1: Manufacturer: syz [ 177.667164][ T945] usb 6-1: SerialNumber: syz [ 177.687469][ T5670] usb 3-1: device descriptor read/8, error -71 [ 177.702369][ T945] usb 6-1: config 0 descriptor?? [ 177.719214][ T945] imon_raw 6-1:0.0: IR endpoint missing [ 177.918861][ T945] usb 6-1: USB disconnect, device number 9 [ 177.931487][ T5670] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 177.961235][ T5670] usb 3-1: device descriptor read/8, error -71 [ 178.014862][ T5698] dvb_ttusb_budget: cmd xter failed, receive error -22 [ 178.029881][ T5698] dvb_ttusb_budget: ttusb_init_controller: error [ 178.037244][ T5698] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 178.070271][ T5670] usb usb3-port1: unable to enumerate USB device [ 178.121156][ T5698] DVB: Unable to find symbol stv0299_attach() [ 178.163983][ T5698] DVB: Unable to find symbol tda8083_attach() [ 178.170939][ T5698] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 178.222218][ T7814] dvb_ttusb_budget: cmd xter failed, receive error -22 [ 178.423590][ T25] usb 5-1: USB disconnect, device number 34 [ 178.543259][ T7822] loop0: detected capacity change from 0 to 4096 [ 178.591881][ T7822] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 178.601595][ T7822] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 178.611450][ T7822] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 178.618409][ T7822] loop0: [ 178.682151][ T7824] __nla_validate_parse: 25 callbacks suppressed [ 178.693306][ T7824] netlink: 4 bytes leftover after parsing attributes in process `syz.5.509'. [ 178.744336][ T6105] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 178.890003][ T6105] usb 1-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 178.894563][ T6105] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.894588][ T6105] usb 1-1: Product: syz [ 178.894601][ T6105] usb 1-1: Manufacturer: syz [ 178.894613][ T6105] usb 1-1: SerialNumber: syz [ 178.931200][ T6105] usb 1-1: USB2VGA dongle found at address 45 [ 178.938315][ T6105] usb 1-1: Allocated 8 output buffers [ 179.720974][ T6105] usb 1-1: Failed to early initialize device [ 179.738436][ T6105] usb 1-1: USB disconnect, device number 45 [ 179.973160][ T7858] loop0: detected capacity change from 0 to 4096 [ 180.012834][ T7855] netlink: 'syz.5.518': attribute type 10 has an invalid length. [ 180.056197][ T7852] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 180.087609][ T7858] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 180.087641][ T7858] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 180.087672][ T7858] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 180.087715][ T7858] loop0: [ 180.090327][ T7855] bridge0: port 3(team0) entered disabled state [ 180.132250][ T7855] team0 (unregistering): left allmulticast mode [ 180.147995][ T7855] team_slave_0: left allmulticast mode [ 180.148438][ T7855] team_slave_1: left allmulticast mode [ 180.148482][ T7855] team0 (unregistering): left promiscuous mode [ 180.148494][ T7855] team_slave_0: left promiscuous mode [ 180.148707][ T7855] team_slave_1: left promiscuous mode [ 180.149068][ T7855] bridge0: port 3(team0) entered disabled state [ 180.268771][ T7855] team0 (unregistering): Port device team_slave_0 removed [ 180.334117][ T7855] team0 (unregistering): Port device team_slave_1 removed [ 180.392217][ T7855] team0 (unregistering): Port device bridge1 removed [ 181.099337][ T25] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 181.229644][ T25] usb 3-1: device descriptor read/64, error -71 [ 181.288259][ T7888] tap0: tun_chr_ioctl cmd 1074025677 [ 181.295789][ T7888] tap0: linktype set to 776 [ 181.470644][ T25] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 181.613122][ T25] usb 3-1: device descriptor read/64, error -71 [ 181.719664][ T25] usb usb3-port1: attempt power cycle [ 181.792567][ T7893] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 181.959681][ T945] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 182.000065][ T30] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 182.059430][ T25] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 182.080270][ T25] usb 3-1: device descriptor read/8, error -71 [ 182.119638][ T945] usb 1-1: Using ep0 maxpacket: 8 [ 182.120355][ T945] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 182.121290][ T945] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 182.121330][ T945] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 182.121349][ T945] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 182.121370][ T945] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 182.121389][ T945] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 182.121425][ T945] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.199392][ T30] usb 5-1: Using ep0 maxpacket: 16 [ 182.205680][ T30] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 182.221701][ T30] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.221751][ T30] usb 5-1: config 0 interface 0 has no altsetting 0 [ 182.221802][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.256752][ T30] usb 5-1: config 0 descriptor?? [ 182.319610][ T25] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 182.350196][ T25] usb 3-1: device descriptor read/8, error -71 [ 182.457065][ T7897] netlink: 64 bytes leftover after parsing attributes in process `syz.0.528'. [ 182.466642][ T25] usb usb3-port1: unable to enumerate USB device [ 182.500368][ T5698] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 182.516782][ T945] usb 1-1: usb_control_msg returned -71 [ 182.516849][ T945] usbtmc 1-1:16.0: can't read capabilities [ 182.528450][ T945] usb 1-1: USB disconnect, device number 46 [ 182.651345][ T5698] usb 6-1: New USB device found, idVendor=1b3d, idProduct=9302, bcdDevice=34.d2 [ 182.668279][ T5698] usb 6-1: config 4 has an invalid interface number: 135 but max is 1 [ 182.668309][ T5698] usb 6-1: config 4 has an invalid interface number: 54 but max is 1 [ 182.668349][ T5698] usb 6-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 182.668365][ T5698] usb 6-1: config 4 has no interface number 0 [ 182.668377][ T5698] usb 6-1: config 4 has no interface number 1 [ 182.668418][ T5698] usb 6-1: config 4 interface 135 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 182.668438][ T5698] usb 6-1: config 4 interface 135 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 182.668457][ T5698] usb 6-1: config 4 interface 135 altsetting 0 endpoint 0xE has an invalid bInterval 224, changing to 7 [ 182.668479][ T5698] usb 6-1: config 4 interface 135 altsetting 0 has an endpoint descriptor with address 0xF5, changing to 0x85 [ 182.668501][ T5698] usb 6-1: config 4 interface 135 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 182.668521][ T5698] usb 6-1: config 4 interface 135 altsetting 0 has a duplicate endpoint with address 0x85, skipping [ 182.668540][ T5698] usb 6-1: config 4 interface 135 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 182.668558][ T5698] usb 6-1: config 4 interface 135 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 182.668588][ T5698] usb 6-1: config 4 interface 54 altsetting 6 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 182.668610][ T5698] usb 6-1: config 4 interface 54 altsetting 6 has a duplicate endpoint with address 0xE, skipping [ 182.668628][ T5698] usb 6-1: config 4 interface 54 has no altsetting 0 [ 182.673606][ T5698] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.673629][ T5698] usb 6-1: Product: 笃쳩唤ᛍ៙둎⢆琉寞欹ᕥﶶȗ佡豴ﺫꉼ辈毯ꠛ᯼륝企঱幋䱶鈵ǘ䷌㨢礸ꭲ잿ᕟ틌₇蜀球㵛⯷㼻꿫졑㐡鞇뜒穔ﮘ赘墊伺锅そ텺鲪偃㲘톼 [ 182.673650][ T5698] usb 6-1: Manufacturer: 먉䒬ᇨኼ켃灟茻㣥챭ꭢࠨ稦 [ 182.673664][ T5698] usb 6-1: SerialNumber: 뮎肙꣜ో㍑⑷訶È [ 182.784761][ T7914] syz.3.533: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 182.784878][ T7914] CPU: 0 UID: 0 PID: 7914 Comm: syz.3.533 Tainted: G L syzkaller #0 PREEMPT(full) [ 182.784903][ T7914] Tainted: [L]=SOFTLOCKUP [ 182.784911][ T7914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 182.784922][ T7914] Call Trace: [ 182.784930][ T7914] [ 182.784937][ T7914] dump_stack_lvl+0xe8/0x150 [ 182.784967][ T7914] warn_alloc+0x24d/0x270 [ 182.784995][ T7914] ? kasan_save_track+0x4f/0x80 [ 182.785012][ T7914] ? kasan_save_track+0x3e/0x80 [ 182.785032][ T7914] ? __pfx_warn_alloc+0x10/0x10 [ 182.785057][ T7914] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 182.785076][ T7914] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.785111][ T7914] __vmalloc_node_range_noprof+0x127/0x1540 [ 182.785156][ T7914] ? rcu_is_watching+0x16/0xb0 [ 182.785182][ T7914] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 182.785207][ T7914] ? __kmalloc_cache_noprof+0x321/0x600 [ 182.785234][ T7914] ? __kmalloc_cache_noprof+0x14d/0x600 [ 182.785262][ T7914] ? xskq_create+0x56/0x220 [ 182.785291][ T7914] xskq_create+0x148/0x220 [ 182.785314][ T7914] ? xsk_init_queue+0x8a/0xe0 [ 182.785340][ T7914] xsk_init_queue+0x8a/0xe0 [ 182.785366][ T7914] xsk_setsockopt+0x52a/0x960 [ 182.785390][ T7914] ? __pfx_xsk_setsockopt+0x10/0x10 [ 182.785413][ T7914] ? __pfx_aa_sk_perm+0x10/0x10 [ 182.785442][ T7914] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 182.785463][ T7914] ? __pfx_xsk_setsockopt+0x10/0x10 [ 182.785486][ T7914] do_sock_setsockopt+0x17c/0x1b0 [ 182.785509][ T7914] __x64_sys_setsockopt+0x13d/0x1b0 [ 182.785534][ T7914] do_syscall_64+0x166/0x520 [ 182.785550][ T7914] ? trace_irq_disable+0x3b/0x140 [ 182.785568][ T7914] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.785585][ T7914] ? clear_bhb_loop+0x70/0xc0 [ 182.785607][ T7914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.785625][ T7914] RIP: 0033:0x7fc38019e159 [ 182.785642][ T7914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.785657][ T7914] RSP: 002b:00007fc380f8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 182.785675][ T7914] RAX: ffffffffffffffda RBX: 00007fc380425fa0 RCX: 00007fc38019e159 [ 182.785689][ T7914] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 182.785700][ T7914] RBP: 00007fc380235024 R08: 0000000000000029 R09: 0000000000000000 [ 182.785712][ T7914] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 182.785723][ T7914] R13: 00007fc380426038 R14: 00007fc380425fa0 R15: 00007fc38054fa48 [ 182.785751][ T7914] [ 182.789297][ T7914] Mem-Info: [ 182.789310][ T7914] active_anon:7411 inactive_anon:9 isolated_anon:0 [ 182.789310][ T7914] active_file:1125 inactive_file:56232 isolated_file:0 [ 182.789310][ T7914] unevictable:0 dirty:205 writeback:0 [ 182.789310][ T7914] slab_reclaimable:10120 slab_unreclaimable:99391 [ 182.789310][ T7914] mapped:30511 shmem:520 pagetables:1477 [ 182.789310][ T7914] sec_pagetables:0 bounce:0 [ 182.789310][ T7914] kernel_misc_reclaimable:0 [ 182.789310][ T7914] free:1291163 free_pcp:14303 free_cma:0 [ 182.789359][ T7914] Node 0 active_anon:29644kB inactive_anon:36kB active_file:4500kB inactive_file:224704kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:122028kB dirty:816kB writeback:0kB shmem:2080kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:4096kB kernel_stack:13996kB pagetables:5792kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 182.789411][ T7914] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:224kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:16kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 182.789462][ T7914] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 182.789515][ T7914] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 182.789547][ T7914] Node 0 DMA32 free:1208940kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:29644kB inactive_anon:36kB active_file:4500kB inactive_file:224704kB unevictable:0kB writepending:816kB zspages:0kB present:3129332kB managed:2546700kB mlocked:0kB bounce:0kB free_pcp:48436kB local_pcp:17524kB free_cma:0kB [ 182.789600][ T7914] lowmem_reserve[]: 0 0 0 0 0 [ 182.789630][ T7914] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 182.789678][ T7914] lowmem_reserve[]: 0 0 0 0 0 [ 182.789708][ T7914] Node 1 Normal free:3940352kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:224kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:8776kB local_pcp:2764kB free_cma:0kB [ 182.789759][ T7914] lowmem_reserve[]: 0 0 0 0 0 [ 182.789789][ T7914] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 182.789904][ T7914] Node 0 DMA32: 1961*4kB (UME) 1169*8kB (UME) 374*16kB (UME) 54*32kB (UME) 197*64kB (UME) 120*128kB (UME) 48*256kB (UME) 20*512kB (UM) 9*1024kB (UME) 11*2048kB (UME) 269*4096kB (UM) = 1208972kB [ 182.790050][ T7914] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 182.790137][ T7914] Node 1 Normal: 6*4kB (UM) 9*8kB (UM) 10*16kB (UM) 8*32kB (UM) 8*64kB (UM) 4*128kB (UM) 4*256kB (UM) 3*512kB (UM) 0*1024kB 2*2048kB (UM) 960*4096kB (UM) = 3940352kB [ 182.790276][ T7914] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 182.790290][ T7914] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 182.790309][ T7914] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 182.790323][ T7914] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 182.790338][ T7914] 57875 total pagecache pages [ 182.790348][ T7914] 2 pages in swap cache [ 182.790355][ T7914] Free swap = 124988kB [ 182.790362][ T7914] Total swap = 124996kB [ 182.790370][ T7914] 2097051 pages RAM [ 182.790376][ T7914] 0 pages HighMem/MovableOnly [ 182.790382][ T7914] 428760 pages reserved [ 182.790389][ T7914] 0 pages cma reserved [ 182.879088][ T7899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.881072][ T7899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.998676][ T7907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 183.042376][ T5698] ftdi_sio 6-1:4.135: FTDI USB Serial Device converter detected [ 183.053061][ T5698] ftdi_sio ttyUSB0: unknown device type: 0x34d2 [ 183.053488][ T7899] nvme nvme0: rdma connection establishment failed (-104) [ 183.117374][ T5698] ftdi_sio 6-1:4.54: FTDI USB Serial Device converter detected [ 183.119083][ T5698] ftdi_sio ttyUSB1: unknown device type: 0x34d2 [ 183.164203][ T5698] usb 6-1: USB disconnect, device number 10 [ 183.206032][ T5698] ftdi_sio 6-1:4.135: device disconnected [ 183.211269][ T7919] netlink: 4 bytes leftover after parsing attributes in process `syz.0.534'. [ 183.223939][ T5698] ftdi_sio 6-1:4.54: device disconnected [ 183.373607][ T30] mcp2221 0003:04D8:00DD.000A: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 183.659393][ T25] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 183.813669][ T25] usb 1-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01 [ 183.826976][ T25] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 183.827023][ T25] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 183.827054][ T25] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 183.827109][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.896154][ T7920] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 184.027902][ T7934] netlink: 24 bytes leftover after parsing attributes in process `syz.3.535'. [ 184.131667][ T6105] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 184.141141][ T7919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.147982][ T7919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.274897][ T7938] netlink: 12 bytes leftover after parsing attributes in process `syz.2.538'. [ 184.291978][ T6105] usb 6-1: Using ep0 maxpacket: 16 [ 184.297148][ T6105] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 184.298393][ T25] usb 1-1: USB disconnect, device number 47 [ 184.301943][ T5613] Bluetooth: hci5: Reading Intel version command failed (-71) [ 184.309270][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 184.319943][ T6105] usb 6-1: config index 0 descriptor too short (expected 51443, got 18) [ 184.327322][ T6105] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.327338][ T6105] usb 6-1: Product: syz [ 184.327345][ T6105] usb 6-1: Manufacturer: syz [ 184.327352][ T6105] usb 6-1: SerialNumber: syz [ 184.361101][ T6105] r8152-cfgselector 6-1: Unknown version 0x0000 [ 184.361127][ T6105] r8152-cfgselector 6-1: config 0 descriptor?? [ 184.768600][ T6105] usb 5-1: USB disconnect, device number 35 [ 184.910833][ T9] r8152-cfgselector 6-1: USB disconnect, device number 11 [ 185.075981][ T7946] ip6erspan0: entered allmulticast mode [ 185.210668][ T7955] program syz.2.544 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 185.224382][ T7955] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 185.279414][ T25] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 185.409361][ T25] usb 1-1: device descriptor read/64, error -71 [ 185.470730][ T6105] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 185.545188][ T7964] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 185.569486][ T9] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 185.620235][ T6105] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 185.624590][ T6105] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.624633][ T6105] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 185.624667][ T6105] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 185.625613][ T6105] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 185.625652][ T6105] usb 3-1: SerialNumber: syz [ 185.649370][ T25] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 185.740550][ T9] usb 4-1: device descriptor read/64, error -71 [ 185.781117][ T25] usb 1-1: device descriptor read/64, error -71 [ 185.839184][ T7955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.845780][ T7955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.849768][ T5614] usb 3-1: USB disconnect, device number 38 [ 185.889690][ T25] usb usb1-port1: attempt power cycle [ 185.953979][ T7975] input: syz0 as /devices/virtual/input/input20 [ 185.989916][ T9] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 186.132964][ T9] usb 4-1: device descriptor read/64, error -71 [ 186.229439][ T25] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 186.240356][ T9] usb usb4-port1: attempt power cycle [ 186.249895][ T25] usb 1-1: device descriptor read/8, error -71 [ 186.437501][ T7984] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 186.489589][ T25] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 186.510215][ T25] usb 1-1: device descriptor read/8, error -71 [ 186.562926][ T5614] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 186.589487][ T9] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 186.609999][ T9] usb 4-1: device descriptor read/8, error -71 [ 186.619618][ T25] usb usb1-port1: unable to enumerate USB device [ 186.710837][ T5614] usb 5-1: New USB device found, idVendor=0100, idProduct=0001, bcdDevice=fa.80 [ 186.720184][ T5614] usb 5-1: no configurations [ 186.720203][ T5614] usb 5-1: can't read configurations, error -22 [ 186.859496][ T5614] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 186.859828][ T9] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 186.881224][ T9] usb 4-1: device descriptor read/8, error -71 [ 186.898998][ T7993] netlink: 'syz.2.556': attribute type 4 has an invalid length. [ 186.937178][ T7993] netlink: 'syz.2.556': attribute type 4 has an invalid length. [ 186.989970][ T9] usb usb4-port1: unable to enumerate USB device [ 187.021559][ T5614] usb 5-1: New USB device found, idVendor=0100, idProduct=0001, bcdDevice=fa.80 [ 187.021603][ T5614] usb 5-1: no configurations [ 187.021632][ T5614] usb 5-1: can't read configurations, error -22 [ 187.022292][ T5614] usb usb5-port1: attempt power cycle [ 187.133924][ T7999] netlink: 36 bytes leftover after parsing attributes in process `syz.5.558'. [ 187.133974][ T7999] netlink: 4 bytes leftover after parsing attributes in process `syz.5.558'. [ 187.209371][ T2067] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 187.361302][ T5614] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 187.361550][ T2067] usb 3-1: New USB device found, idVendor=0582, idProduct=0156, bcdDevice= 0.40 [ 187.364472][ T2067] usb 3-1: config 1 has an invalid descriptor of length 142, skipping remainder of the config [ 187.364501][ T2067] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 187.364519][ T2067] usb 3-1: config 1 has no interface number 0 [ 187.364553][ T2067] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 187.364581][ T2067] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 187.364614][ T2067] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 248, changing to 7 [ 187.366431][ T2067] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.366452][ T2067] usb 3-1: Product: syz [ 187.366464][ T2067] usb 3-1: Manufacturer: syz [ 187.366477][ T2067] usb 3-1: SerialNumber: syz [ 187.381138][ T5614] usb 5-1: New USB device found, idVendor=0100, idProduct=0001, bcdDevice=fa.80 [ 187.381197][ T5614] usb 5-1: no configurations [ 187.381209][ T5614] usb 5-1: can't read configurations, error -22 [ 187.509389][ T5614] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 187.531324][ T5614] usb 5-1: New USB device found, idVendor=0100, idProduct=0001, bcdDevice=fa.80 [ 187.531409][ T5614] usb 5-1: no configurations [ 187.531422][ T5614] usb 5-1: can't read configurations, error -22 [ 187.540595][ T5614] usb usb5-port1: unable to enumerate USB device [ 187.624249][ T7994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.633692][ T7994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.859136][ T8038] FAULT_INJECTION: forcing a failure. [ 188.859136][ T8038] name failslab, interval 1, probability 0, space 0, times 0 [ 188.859179][ T8038] CPU: 1 UID: 0 PID: 8038 Comm: syz.3.569 Tainted: G L syzkaller #0 PREEMPT(full) [ 188.859208][ T8038] Tainted: [L]=SOFTLOCKUP [ 188.859214][ T8038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 188.859224][ T8038] Call Trace: [ 188.859230][ T8038] [ 188.859236][ T8038] dump_stack_lvl+0xe8/0x150 [ 188.859261][ T8038] should_fail_ex+0x410/0x560 [ 188.859292][ T8038] should_failslab+0xa8/0x100 [ 188.859315][ T8038] __kmalloc_noprof+0xfe/0x720 [ 188.859340][ T8038] ? tomoyo_encode+0x2ad/0x570 [ 188.859359][ T8038] ? tomoyo_encode+0x2ad/0x570 [ 188.859381][ T8038] tomoyo_encode+0x2ad/0x570 [ 188.859406][ T8038] tomoyo_realpath_from_path+0x5fa/0x640 [ 188.859430][ T8038] ? tomoyo_path_number_perm+0x219/0x5f0 [ 188.859456][ T8038] tomoyo_path_number_perm+0x246/0x5f0 [ 188.859483][ T8038] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 188.859508][ T8038] ? __lock_acquire+0x6df/0x2e50 [ 188.859539][ T8038] ? hook_file_ioctl+0x1f2/0x600 [ 188.859574][ T8038] ? __fget_files+0x2a/0x420 [ 188.859597][ T8038] ? __fget_files+0x2a/0x420 [ 188.859617][ T8038] ? __fget_files+0x3a2/0x420 [ 188.859638][ T8038] ? __fget_files+0x2a/0x420 [ 188.859662][ T8038] security_file_ioctl+0xc3/0x2a0 [ 188.859688][ T8038] __se_sys_ioctl+0x47/0x170 [ 188.859707][ T8038] do_syscall_64+0x166/0x520 [ 188.859723][ T8038] ? trace_irq_disable+0x3b/0x140 [ 188.859739][ T8038] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.859757][ T8038] ? clear_bhb_loop+0x70/0xc0 [ 188.859777][ T8038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.859793][ T8038] RIP: 0033:0x7fc38019e159 [ 188.859810][ T8038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.859825][ T8038] RSP: 002b:00007fc380f8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 188.859843][ T8038] RAX: ffffffffffffffda RBX: 00007fc380425fa0 RCX: 00007fc38019e159 [ 188.859856][ T8038] RDX: 00002000000000c0 RSI: 0000000000008946 RDI: 0000000000000007 [ 188.859867][ T8038] RBP: 00007fc380f8f090 R08: 0000000000000000 R09: 0000000000000000 [ 188.859877][ T8038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.859887][ T8038] R13: 00007fc380426038 R14: 00007fc380425fa0 R15: 00007fc38054fa48 [ 188.859914][ T8038] [ 188.860028][ T8038] ERROR: Out of memory at tomoyo_realpath_from_path. [ 189.503019][ T8047] syzkaller0: entered promiscuous mode [ 189.503050][ T8047] syzkaller0: entered allmulticast mode [ 189.527429][ T8043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.572'. [ 189.772022][ T6105] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 189.793753][ T2067] usb 3-1: 1:0 : does not exist [ 189.793787][ T2067] usb 3-1: 2:1 : incorrect wMaxPacketSize for BADD profile [ 189.829358][ T2067] usb 3-1: 1:3 : does not exist [ 189.829449][ T2067] usb 3-1: incorrect wMaxPacketSize 0x210 for BADD profile [ 189.900621][ T6105] usb 6-1: device descriptor read/64, error -71 [ 189.991308][ T2067] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 190.006488][ T2067] usb 3-1: USB disconnect, device number 39 [ 190.032673][ T5623] udevd[5623]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 190.139619][ T6105] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 190.151476][ T8066] loop5: detected capacity change from 0 to 4095 [ 190.279432][ T6105] usb 6-1: device descriptor read/64, error -71 [ 190.319352][ T2067] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 190.322184][ T8066] Buffer I/O error on dev loop5, logical block 511, async page read [ 190.334046][ T5623] Buffer I/O error on dev loop5, logical block 511, async page read [ 190.351208][ T5698] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 190.389647][ T6105] usb usb6-port1: attempt power cycle [ 190.430022][ T5670] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 190.490029][ T2067] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 190.502160][ T2067] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.505273][ T5698] usb 4-1: device descriptor read/64, error -71 [ 190.518723][ T2067] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 190.518785][ T2067] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.548002][ T2067] cxacru 3-1:1.0: usbatm_usb_probe: bind failed: -19! [ 190.591989][ T5670] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 190.605352][ T5670] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 190.605431][ T5670] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 190.605466][ T5670] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 190.643505][ T5670] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.643545][ T5670] usb 5-1: Product: syz [ 190.643582][ T5670] usb 5-1: Manufacturer: syz [ 190.643593][ T5670] usb 5-1: SerialNumber: syz [ 190.652912][ T5670] usb 5-1: config 0 descriptor?? [ 190.729366][ T6105] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 190.751308][ T6105] usb 6-1: device descriptor read/8, error -71 [ 190.779931][ T5698] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 190.898137][ T2067] usb 3-1: USB disconnect, device number 40 [ 190.931642][ T5698] usb 4-1: device descriptor read/64, error -71 [ 190.975006][ T5670] usb 5-1: USB disconnect, device number 40 [ 190.990507][ T6105] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 191.023251][ T6105] usb 6-1: device descriptor read/8, error -71 [ 191.042955][ T5698] usb usb4-port1: attempt power cycle [ 191.132204][ T6105] usb usb6-port1: unable to enumerate USB device [ 191.379482][ T5698] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 191.400124][ T5698] usb 4-1: device descriptor read/8, error -71 [ 191.487542][ T8071] FAULT_INJECTION: forcing a failure. [ 191.487542][ T8071] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.487588][ T8071] CPU: 1 UID: 0 PID: 8071 Comm: syz.2.580 Tainted: G L syzkaller #0 PREEMPT(full) [ 191.487612][ T8071] Tainted: [L]=SOFTLOCKUP [ 191.487618][ T8071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 191.487629][ T8071] Call Trace: [ 191.487635][ T8071] [ 191.487643][ T8071] dump_stack_lvl+0xe8/0x150 [ 191.487671][ T8071] should_fail_ex+0x410/0x560 [ 191.487702][ T8071] _copy_from_user+0x2d/0xb0 [ 191.487722][ T8071] sock_do_ioctl+0x195/0x320 [ 191.487748][ T8071] ? __pfx_sock_do_ioctl+0x10/0x10 [ 191.487769][ T8071] ? hook_file_ioctl+0x1f2/0x600 [ 191.487801][ T8071] sock_ioctl+0x57a/0x7e0 [ 191.487824][ T8071] ? __pfx_sock_ioctl+0x10/0x10 [ 191.487845][ T8071] ? __fget_files+0x2a/0x420 [ 191.487864][ T8071] ? __fget_files+0x3a2/0x420 [ 191.487878][ T8071] ? __fget_files+0x2a/0x420 [ 191.487897][ T8071] ? bpf_lsm_file_ioctl+0x9/0x20 [ 191.487919][ T8071] ? __pfx_sock_ioctl+0x10/0x10 [ 191.487940][ T8071] __se_sys_ioctl+0xfc/0x170 [ 191.487959][ T8071] do_syscall_64+0x166/0x520 [ 191.487975][ T8071] ? trace_irq_disable+0x3b/0x140 [ 191.487992][ T8071] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.488009][ T8071] ? clear_bhb_loop+0x70/0xc0 [ 191.488030][ T8071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.488046][ T8071] RIP: 0033:0x7fe3aa39e159 [ 191.488063][ T8071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.488081][ T8071] RSP: 002b:00007fe3ab351028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 191.488099][ T8071] RAX: ffffffffffffffda RBX: 00007fe3aa625fa0 RCX: 00007fe3aa39e159 [ 191.488112][ T8071] RDX: 00002000000000c0 RSI: 0000000000008946 RDI: 0000000000000007 [ 191.488123][ T8071] RBP: 00007fe3ab351090 R08: 0000000000000000 R09: 0000000000000000 [ 191.488134][ T8071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.488144][ T8071] R13: 00007fe3aa626038 R14: 00007fe3aa625fa0 R15: 00007fe3aa74fa48 [ 191.488178][ T8071] [ 191.776457][ T5698] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 191.800880][ T5698] usb 4-1: device descriptor read/8, error -71 [ 191.911571][ T5698] usb usb4-port1: unable to enumerate USB device [ 192.795434][ T6691] Buffer I/O error on dev loop5, logical block 511, async page read [ 193.050253][ T2067] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 193.179745][ T2067] usb 6-1: device descriptor read/64, error -71 [ 193.271382][ T8106] netlink: 20 bytes leftover after parsing attributes in process `syz.3.588'. [ 193.271429][ T8106] netlink: 16 bytes leftover after parsing attributes in process `syz.3.588'. [ 193.350347][ T5698] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 193.421262][ T2067] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 193.500622][ T5698] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 193.515719][ T5698] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.525249][ T5698] usb 3-1: Product: syz [ 193.525305][ T5698] usb 3-1: Manufacturer: syz [ 193.525323][ T5698] usb 3-1: SerialNumber: syz [ 193.541800][ T5698] usb 3-1: config 0 descriptor?? [ 193.550745][ T2067] usb 6-1: device descriptor read/64, error -71 [ 193.660135][ T2067] usb usb6-port1: attempt power cycle [ 193.799565][ T6105] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 193.960049][ T6105] usb 5-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 0.00 [ 193.975845][ T6105] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.975890][ T6105] usb 5-1: Product: syz [ 193.975918][ T6105] usb 5-1: Manufacturer: syz [ 193.975928][ T6105] usb 5-1: SerialNumber: syz [ 193.999567][ T2067] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 194.001415][ T6105] ums_eneub6250 5-1:1.0: USB Mass Storage device detected [ 194.027292][ T2067] usb 6-1: device descriptor read/8, error -71 [ 194.033886][ T6105] scsi host1: usb-storage 5-1:1.0 [ 194.263244][ T2067] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 194.276191][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.276258][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.280120][ T2067] usb 6-1: device descriptor read/8, error -71 [ 194.389582][ T2067] usb usb6-port1: unable to enumerate USB device [ 194.438177][ T8126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.593'. [ 194.453120][ T8126] netlink: 28 bytes leftover after parsing attributes in process `syz.0.593'. [ 194.474173][ T5698] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 194.677089][ T5698] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 194.691862][ T5698] usb 3-1: USB disconnect, device number 41 [ 194.752454][ T8123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.752952][ T8123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 ** replaying previous printk message ** [ 195.141016][ T2067] ------------[ cut here ]------------ [ 195.141069][ T2067] URB ffff88807b096a00 submitted while active [ 195.141087][ T2067] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x79/0x18b0, CPU#1: kworker/1:2/2067 [ 195.166643][ T2067] Modules linked in: [ 195.171028][ T2067] CPU: 1 UID: 0 PID: 2067 Comm: kworker/1:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 195.182313][ T2067] Tainted: [L]=SOFTLOCKUP [ 195.186716][ T2067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 195.197078][ T2067] Workqueue: events_freezable usb_stor_scan_dwork [ 195.203808][ T2067] RIP: 0010:usb_submit_urb+0x7c/0x18b0 [ 195.209381][ T2067] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 29 bc c9 fa 49 83 3e 00 74 40 e8 6e e4 59 fa 48 8d 3d 87 f4 19 09 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 53 e4 59 fa eb 05 e8 4c e4 [ 195.229165][ T2067] RSP: 0018:ffffc90006c3f878 EFLAGS: 00010293 [ 195.235430][ T2067] RAX: ffffffff876dd6b2 RBX: ffff88807b096a00 RCX: ffff888027149f40 [ 195.243500][ T2067] RDX: 0000000000000000 RSI: ffff88807b096a00 RDI: ffffffff9087cb40 [ 195.251719][ T2067] RBP: dffffc0000000000 R08: 0000000000000002 R09: 0000000000000000 [ 195.259935][ T2067] R10: ffffc90006c3f960 R11: fffff52000d87f37 R12: ffff88807b096a68 [ 195.267941][ T2067] R13: ffff888079c110a0 R14: ffff88807b096a08 R15: 0000000000000c00 [ 195.276004][ T2067] FS: 0000000000000000(0000) GS:ffff888124dd8000(0000) knlGS:0000000000000000 [ 195.285102][ T2067] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 195.291802][ T2067] CR2: 00007fc3801872c0 CR3: 000000005df74000 CR4: 00000000003526f0 [ 195.300420][ T2067] Call Trace: [ 195.303743][ T2067] [ 195.306796][ T2067] ? __raw_spin_lock_init+0x45/0x100 [ 195.312218][ T2067] ? __init_swait_queue_head+0xa8/0x150 [ 195.317851][ T2067] usb_stor_msg_common+0x2a2/0x500 [ 195.323133][ T2067] ? __pfx_usb_stor_msg_common+0x10/0x10 [ 195.328935][ T2067] usb_stor_Bulk_max_lun+0x2fd/0x5b0 [ 195.334363][ T2067] usb_stor_scan_dwork+0xf4/0x2c0 [ 195.339642][ T2067] ? process_scheduled_works+0x97a/0x1630 [ 195.345423][ T2067] process_scheduled_works+0xc3d/0x1630 [ 195.351120][ T2067] ? __pfx_process_scheduled_works+0x10/0x10 [ 195.357336][ T2067] ? assign_work+0x3cf/0x5d0 [ 195.362235][ T2067] worker_thread+0xa47/0xfb0 [ 195.366885][ T2067] ? __kthread_parkme+0x71/0x1f0 [ 195.371976][ T2067] kthread+0x38b/0x480 [ 195.376101][ T2067] ? __pfx_worker_thread+0x10/0x10 [ 195.381416][ T2067] ? __pfx_kthread+0x10/0x10 [ 195.386065][ T2067] ret_from_fork+0x514/0xb70 [ 195.390945][ T2067] ? __pfx_ret_from_fork+0x10/0x10 [ 195.396109][ T2067] ? __switch_to+0xc89/0x1420 [ 195.401015][ T2067] ? __pfx_kthread+0x10/0x10 [ 195.405656][ T2067] ret_from_fork_asm+0x1a/0x30 [ 195.410552][ T2067] [ 195.413611][ T2067] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 195.421026][ T2067] CPU: 1 UID: 0 PID: 2067 Comm: kworker/1:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 195.431975][ T2067] Tainted: [L]=SOFTLOCKUP [ 195.436309][ T2067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 195.446384][ T2067] Workqueue: events_freezable usb_stor_scan_dwork [ 195.452827][ T2067] Call Trace: [ 195.456122][ T2067] [ 195.459065][ T2067] vpanic+0x56d/0xa60 [ 195.463070][ T2067] ? __pfx__printk+0x10/0x10 [ 195.467678][ T2067] ? __pfx_vpanic+0x10/0x10 [ 195.472200][ T2067] ? is_bpf_text_address+0x292/0x2b0 [ 195.477509][ T2067] ? is_bpf_text_address+0x26/0x2b0 [ 195.482823][ T2067] panic+0xc5/0xd0 [ 195.486566][ T2067] ? __pfx_panic+0x10/0x10 [ 195.491009][ T2067] ? ret_from_fork_asm+0x1a/0x30 [ 195.495977][ T2067] __warn+0x315/0x4c0 [ 195.500000][ T2067] ? usb_submit_urb+0x79/0x18b0 [ 195.504880][ T2067] ? usb_submit_urb+0x79/0x18b0 [ 195.509759][ T2067] __report_bug+0x276/0x570 [ 195.514335][ T2067] ? usb_submit_urb+0x79/0x18b0 [ 195.519213][ T2067] ? __pfx___report_bug+0x10/0x10 [ 195.524356][ T2067] ? add_lock_to_list+0xc7/0x100 [ 195.529320][ T2067] ? lockdep_unlock+0x5c/0xd0 [ 195.534044][ T2067] ? __lock_acquire+0x14b9/0x2e50 [ 195.539083][ T2067] report_bug_entry+0x19b/0x290 [ 195.543959][ T2067] ? usb_submit_urb+0x7c/0x18b0 [ 195.548829][ T2067] ? usb_submit_urb+0x81/0x18b0 [ 195.553702][ T2067] handle_bug+0xce/0x200 [ 195.557954][ T2067] exc_invalid_op+0x1a/0x50 [ 195.562491][ T2067] asm_exc_invalid_op+0x1a/0x20 [ 195.567351][ T2067] RIP: 0010:usb_submit_urb+0x7c/0x18b0 [ 195.572858][ T2067] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 29 bc c9 fa 49 83 3e 00 74 40 e8 6e e4 59 fa 48 8d 3d 87 f4 19 09 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 53 e4 59 fa eb 05 e8 4c e4 [ 195.592487][ T2067] RSP: 0018:ffffc90006c3f878 EFLAGS: 00010293 [ 195.598563][ T2067] RAX: ffffffff876dd6b2 RBX: ffff88807b096a00 RCX: ffff888027149f40 [ 195.606558][ T2067] RDX: 0000000000000000 RSI: ffff88807b096a00 RDI: ffffffff9087cb40 [ 195.614562][ T2067] RBP: dffffc0000000000 R08: 0000000000000002 R09: 0000000000000000 [ 195.622541][ T2067] R10: ffffc90006c3f960 R11: fffff52000d87f37 R12: ffff88807b096a68 [ 195.630542][ T2067] R13: ffff888079c110a0 R14: ffff88807b096a08 R15: 0000000000000c00 [ 195.638536][ T2067] ? usb_submit_urb+0x72/0x18b0 [ 195.643410][ T2067] ? usb_submit_urb+0x72/0x18b0 [ 195.648337][ T2067] ? __raw_spin_lock_init+0x45/0x100 [ 195.653648][ T2067] ? __init_swait_queue_head+0xa8/0x150 [ 195.659220][ T2067] usb_stor_msg_common+0x2a2/0x500 [ 195.664363][ T2067] ? __pfx_usb_stor_msg_common+0x10/0x10 [ 195.670047][ T2067] usb_stor_Bulk_max_lun+0x2fd/0x5b0 [ 195.675807][ T2067] usb_stor_scan_dwork+0xf4/0x2c0 [ 195.680859][ T2067] ? process_scheduled_works+0x97a/0x1630 [ 195.686603][ T2067] process_scheduled_works+0xc3d/0x1630 [ 195.692192][ T2067] ? __pfx_process_scheduled_works+0x10/0x10 [ 195.698201][ T2067] ? assign_work+0x3cf/0x5d0 [ 195.702815][ T2067] worker_thread+0xa47/0xfb0 [ 195.707445][ T2067] ? __kthread_parkme+0x71/0x1f0 [ 195.712413][ T2067] kthread+0x38b/0x480 [ 195.716494][ T2067] ? __pfx_worker_thread+0x10/0x10 [ 195.721623][ T2067] ? __pfx_kthread+0x10/0x10 [ 195.726232][ T2067] ret_from_fork+0x514/0xb70 [ 195.730841][ T2067] ? __pfx_ret_from_fork+0x10/0x10 [ 195.735969][ T2067] ? __switch_to+0xc89/0x1420 [ 195.740693][ T2067] ? __pfx_kthread+0x10/0x10 [ 195.745938][ T2067] ret_from_fork_asm+0x1a/0x30 [ 195.750743][ T2067] [ 195.754169][ T2067] Kernel Offset: disabled [ 195.758520][ T2067] Rebooting in 86400 seconds..