last executing test programs: 4m0.46215015s ago: executing program 0 (id=1073): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x3}}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)="d542f6300b61ca7913e7cd7b4036afcfddb3c77fc63db30ef223f1cc4fcdcbb56655be4873ea15e1a9d348fadc935180e702560acae65d42d95f6ddcae59879a1ce7e78eb197a0c8231a504b2614ac6dfd9a5760fe75ba4204694d382eb51806597cde99cedde3f0edd8bd3fce154f83e47f422d0e5bf427c23771a122bd", 0x7e}, {&(0x7f0000000780)}, {&(0x7f0000000580)="49a6cc7e52cf0644e1fb10e13cb6893bd19afc65f2af20dd1746a881eb4dabcaf163ce54133d2499c296320937b805f1880adf0cb1507df75aaf", 0x3a}, {&(0x7f0000000a80)="190e431aa3b287c28be2f5404c8034cc87b917c381ccff6f8d431e872be3df64fee6c95001ceff12f2e942df6a8738cd4ad9ef7ad532fd0c824bf8d36d616e99807b3be837b3145efe65f7c6b66b9813e122d9be7799ebf0160d4bd329ac230e639a58a6538ec01e2de41722469556b03344f32eac19", 0x76}], 0x4, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe3603b4624ac6a578ccd9a27b381a8dad12b3e3de940a99238945935184cd93dd174b70ecb9c3c99d2df9dd0cbef6a9e230f7dd8367384f034a7a011388990e94cd43e9f80ec3358dc596926960604b9f051", 0x83}, {&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6afd9641d356257181e43b6e60349f69ec5f529734f76708a6c5eccb57005c1a513d8030d12c", 0x41}, {&(0x7f0000000d00)="dc6e94ac2db166801ffce85f6f44f2cb071c6b5113bc6bbf2f503d468253693a01102fcb8157c6e8a2b5620efa5d22400147cce896821150f95c0c69fa587a1f99fcb28cfeb09f45cb836f0ff891be10bb209dc04adc202ef866f27b74faa5ad3a2e5d40ebd6785c4e4a97ac13238c746d1109d12af5446c4e84591f121a494251e43bed18f6269bdd2e56f9c211dd7145f664286911b8bb3acf76a1b5ece94183a6c8cc47f2e1dd4e91dc10be8732e92e8620fa060fb15016c2dc9b6da18325e778660d499aec6215b0f9f679fa76d22cdd4ae3776203e2054240594f1c9b77ad77cf3f5631012fa0788c5b17f98cc34720b0", 0xf3}, {&(0x7f0000000fc0)="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", 0xfc}, {&(0x7f0000000800)="b56380b7487ff3b0cd079ed795bdeeb3ad75fe878a", 0x15}, {&(0x7f00000011c0)}, {&(0x7f0000001200)="43979d4537ac96f6e22b12acd1fdd3ffc7ef440e65e2e70d511a408f743d4ce7516f4364a00a041dc7b1ffe56ebc713b158ea1aab13ce3db53ab8af3f76ffaa86df636018175c4a8ea922a193ad08ca30d5031b27a4a", 0x56}, {&(0x7f0000001300)="ceff7472ad7240514c6f826361e8daefdb50fe704622e5641d1b096ad682a5682aa51b6eea91858d93228379d70f8489a6de471b8361073ce93c3bf35183529235eed04037cb6851e51dec4562fe30f99bd5de546427fecd0aa008bcbb2983ce2cfff078d49f7ecf297f85da5c094c0e7f07b12ec543a068bd2d654348f0e303f208c9190f58b7a9e0e1d2ba846bc248a3ec1530f702a9bd45a1d7bec2b2ccf08c24fec06bd18667119d193444ed6c60c641f54a3826524167885f2542b1bef1198ab8", 0xc3}], 0x8, &(0x7f00000014c0)}}], 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000880)="562f2edb8e8c8229195820c788783ff270fb0f06936fe49376e5519e3fa8f998387d7011fc5d8c9f5fc8e0e1663c9f6919128a8941ae935aaba3f683642630f5a74535b0e1f886ea2807f04d3a68ff4285f2bf581674a033cb5ecf8c756e8df3968c959df5326ed67c09d8b72eceeb87023f6188e15cb258cd8c85be3eddaac311ee4cb17a08ef47157753606ce7996162ea4b18214763730e2b944b468575927829842ee7f6f8a3603a7a522025c55284c9ca0ab899626f86c9336ead2278445733db5e643e10fa93339be48ff1592bc6bcf2b68b4536951c600a0e6d1b5d5b0cdbdf85122560b4", 0xe8}, {&(0x7f0000000540)}, {&(0x7f00000006c0)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e", 0x7a}, {0x0}, {0x0}, {0x0}], 0x6}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0x6, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0xb, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0x9000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x4, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0xf3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x4, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x7, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3m59.852847159s ago: executing program 0 (id=1076): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_GET_NAME(0x10, 0x0) rt_sigprocmask(0x1, 0x0, 0x0, 0x2e5579f84f2fe880) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={[0x1]}, 0x8) 3m56.734340729s ago: executing program 0 (id=1087): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x24, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x4000, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfc5, 0xb080, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x9, 0x3, 0x1, {0x22, 0x2c}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x10, 0x4}}}}}]}}]}}, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000000)='nfs\x00', 0x0) userfaultfd(0x801) pipe2$watch_queue(&(0x7f0000000040), 0x80) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) 3m52.769729416s ago: executing program 0 (id=1108): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 3m52.577470315s ago: executing program 0 (id=1111): mmap$KVM_VCPU(&(0x7f0000ffc000/0x3000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffe10, 0x10, &(0x7f0000000040), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x42) r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x5bc, 0x2) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) socket$inet6(0xa, 0x3, 0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r2) syz_io_uring_setup(0x239, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000000)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r8, 0x5) shutdown(r8, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f0000000080), 0x12) ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, &(0x7f0000001c80)) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000100)={0x37, 0x1, 0x20, "3bd9e3280005fffffffbffb7e6e89a00a417000000e9268cd237c55d618e00", 0x51424752}) brk(0x200000ff8000) 3m52.380354299s ago: executing program 0 (id=1112): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3629ff075475e4bd6e43be1712bf8b4dc", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[], 0x19c}}, 0x4000) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000007c0)=""/67, 0x43}, {&(0x7f00000003c0)=""/139, 0x8b}, {&(0x7f0000000480)=""/88, 0x58}, {&(0x7f0000000640)=""/181, 0xb5}], 0x4}, 0x2000) sendmmsg$alg(r1, &(0x7f0000000ec0)=[{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000240)='R', 0x1}], 0x1, 0x0, 0x0, 0x2400c000}], 0x1, 0x4) 3m51.974936359s ago: executing program 32 (id=1112): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3629ff075475e4bd6e43be1712bf8b4dc", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[], 0x19c}}, 0x4000) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000007c0)=""/67, 0x43}, {&(0x7f00000003c0)=""/139, 0x8b}, {&(0x7f0000000480)=""/88, 0x58}, {&(0x7f0000000640)=""/181, 0xb5}], 0x4}, 0x2000) sendmmsg$alg(r1, &(0x7f0000000ec0)=[{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000240)='R', 0x1}], 0x1, 0x0, 0x0, 0x2400c000}], 0x1, 0x4) 3m9.727243525s ago: executing program 3 (id=1320): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x44, 0x1, 0x9, 0xc39}]}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") syz_emit_ethernet(0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaafe8000000000000004002010000020000000000000aa"], 0x0) ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000380)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) 3m9.456119439s ago: executing program 3 (id=1322): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000280)='./bus\x00', 0x381844, 0x80) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x0, 0x0, 0x10002, 0xffffffffffffffff, 0x7fffffffffffffff, 0x7, 0x7}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc1002}]}) pipe2$watch_queue(0x0, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x4008030) r3 = syz_open_dev$radio(&(0x7f0000000140), 0x0, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000100)={0x0, 0x1, 0x3, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90d, 0x0, '\x00', @value64=0xfffffffffffffffe}}) recvmmsg(0xffffffffffffffff, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$evdev(0x0, 0x2, 0x862b01) socket$nl_audit(0x10, 0x3, 0x9) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp6\x00') preadv(r5, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x40000000, 0x0) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="03000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r3, @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000d70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x8000a7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet(r4, 0x0, 0x0, 0x24044000, 0x0, 0x0) shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x60200, 0x0) 3m7.152291508s ago: executing program 3 (id=1332): openat$kvm(0xffffffffffffff9c, 0x0, 0x121c40, 0x0) r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) socket(0x28, 0x1, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8) syz_emit_ethernet(0x15, &(0x7f0000001500)=ANY=[@ANYBLOB="0180c200000ebbbbbbbbbbbb0800400000000068000005069078ac1e010100000000440070a1001414aa000000000a0101010000000664010102000000818300f0ac1414267f000001640101027f00000100000000ac1414aae000000244000683ffffffff00000001ac14142800000008ac1414aa000000000a010100ffffffff64010100ffffffffac1414bb000000010000000000000003e0000002000001ff00"], 0x0) 3m6.85790834s ago: executing program 3 (id=1334): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000100)='./file0\x00', 0x126) 3m6.719948456s ago: executing program 3 (id=1335): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000400)={0x5, 0x2}) ppoll(&(0x7f0000002700)=[{r0, 0x8018}], 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x200000000000011, 0x2, 0x0) syz_emit_ethernet(0xff03, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x210501, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000180)=0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff) r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x280000b, 0x28011, r4, 0x40000) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[], 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000023, 0x13, r6, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000002040)={0xf0f080, 0x5}) r7 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) r8 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000040)={0xc0002009}) r9 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000040)=0xd) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000000c0)=0x1) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, 0x0) r10 = syz_open_procfs$userns(0x0, &(0x7f00000001c0)) open_by_handle_at(r10, &(0x7f0000000900)=ANY=[@ANYBLOB="10000000f1000000980000000000000000000002"], 0x400040) fcntl$setsig(r1, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r2, 0x9010}], 0x1, 0x0, 0x0, 0xff5f) 3m6.084433205s ago: executing program 3 (id=1336): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="6666440f21e70f796602400f01d10f01cf26f30fc777003e66450f38817980c402f19ef7c744240000000000c744240247d20000c7442406000000000f011c2466b815000f00d8f20fd0ec", 0x4b}], 0x1, 0x4, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m5.524219926s ago: executing program 33 (id=1336): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="6666440f21e70f796602400f01d10f01cf26f30fc777003e66450f38817980c402f19ef7c744240000000000c744240247d20000c7442406000000000f011c2466b815000f00d8f20fd0ec", 0x4b}], 0x1, 0x4, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14.466245985s ago: executing program 5 (id=2108): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semctl$SETALL(0x0, 0x0, 0x14, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000808000400", @ANYRES32=r4, @ANYBLOB="06001500070000000c0016"], 0x38}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000480)='coredump_filter\x00') readv(r7, &(0x7f0000000800)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x1e}, {0x0}], 0x9) unshare(0x6020400) r8 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r8, &(0x7f00000001c0)={0x2c, 0x20, 0x0, 0x29, r8}, 0x10) read$FUSE(r7, &(0x7f0000001400)={0x2020}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) r10 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r10, 0xc06864b8, &(0x7f0000000580)={0x0, 0x8c1, 0x80, 0x9, 0x3, [0x2], [0x810003, 0xfffffffe, 0x200000], [0x5, 0x20, 0x80, 0x46], [0x8ac2]}) socket(0x10, 0x803, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x0, 0x18c, 0x203, 0x8000000, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) recvmsg(r3, 0x0, 0x40002002) 12.537535982s ago: executing program 5 (id=2118): bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x3f00) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x8, 0x7ffd}, 0x48) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$fuse(0x0, 0x0, 0x0, 0x84000, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x89901) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80000, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r3, r3, &(0x7f0000000000)=0x2eb4, 0x2000007ff) io_uring_setup(0x705b, &(0x7f00000004c0)={0x0, 0xe58f, 0x8000, 0x2, 0x1db}) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) write$binfmt_script(r5, 0x0, 0x0) close(r5) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) 12.402085274s ago: executing program 1 (id=2119): syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffe9f}}]}}, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[], 0x0) syz_usb_connect(0x0, 0xdd, &(0x7f0000000080)=ANY=[], 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070011000523a608463a", @ANYRES16=r3], 0xfe33) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a"], 0xfe33) 10.126014793s ago: executing program 1 (id=2124): io_uring_setup(0x1f8e, &(0x7f0000000140)={0x0, 0x7bfc, 0x800, 0xffffffff, 0xc}) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e25, 0x21, @dev={0xfe, 0x80, '\x00', 0x18}}, {0xa, 0x0, 0xfffffffe, @empty}, 0xffffffffffffffff, 0x27}}, 0x48) write$RDMA_USER_CM_CMD_QUERY(r2, 0x0, 0x0) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r5, 0x1, 0x70bd2a, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000fbdbdf2505000000200001800d0001007564703a73797a32000000"], 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r6, 0x84, 0x7, 0x0, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, 0x0, 0x44840) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x0) r7 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) write$P9_RVERSION(r7, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$nl_route(0x10, 0x3, 0x0) r8 = syz_open_dev$mouse(&(0x7f0000000d00), 0x0, 0x2042) io_setup(0x388c, &(0x7f00000003c0)=0x0) io_submit(r9, 0x1, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, r8}]) 9.541933605s ago: executing program 6 (id=2128): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000980)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x1}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240408a0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x5, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7ff, 0x100000000, 0x6eb, 0x5, 0x7, 0x2c0b}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 9.138083006s ago: executing program 5 (id=2130): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001008000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a340000000c0a010100000000000000000a00000600020073797a30000000000800038004800080140000001100010000000000000000000100000adf17f768e1c29bca96feff061bf26e22dab5aeb20f1ddccc828a67ad37c1bbf7668dcb061acf8d3af839e1d2475da7c6ad084549699b9a216d10207fd33ad22cc2cd15e7ab"], 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[], 0x1d8}}, 0x0) r2 = syz_open_dev$cec(0x0, 0x0, 0x40000) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000000040)=0x2) r3 = syz_open_dev$cec(&(0x7f0000000140), 0x0, 0x40) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000180)={"20ae6787", 0xff, 0x0, 0x0, 0x5, 0x2, "86d789d8d3a4b8d4e3af7de691228e", "782d0487", "65127069", "a23206eb", ["391f7798ca78e5d7352e51dc", "1d651f1205a1e442c9d9bf56", "07b106f6b3d6cf3d4073de08", "eaf5dff75c95b2badadd5d39"]}) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6(0xa, 0x3, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0x2, &(0x7f0000000140)=0x7, 0xfe8b) r6 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r6, 0x40106f52, &(0x7f0000000100)={0x3, &(0x7f0000000140)=[{0x11, '\x00', @data=0x3, 0x1}, {0x1c, '\x00', @buffer={"d134f42cc8a6d9ec0e50197ab06db6029625cf7c0449226a6354f16b15abb8ac", 0x20}, 0xffffff81}, {0x21, '\x00', @buffer={"95ca19eefa35a8f58daa6564ddbc5707158a584a93f6d961df63f599b1305c4b", 0x20}, 0x4ea8}]}) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in=@loopback, @in=@rand_addr=0x64010101, 0x4e28, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xa417}, {0x0, 0x0, 0x7}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@mcast2, 0x4002, 0x32}, 0x0, @in=@multicast2, 0x0, 0x2, 0x0, 0xfb, 0x0, 0x0, 0x800}}, 0xe8) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r8 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r8, 0x81044804, &(0x7f0000000400)={0x1, 0x2, 0x1b}) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@private2, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x0, 0x0, 0xc0, 0x2, 0x0, 0x10}}, {{@in6=@loopback, 0x0, 0x6c}}}, 0xe8) close(r4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x4, 0x4) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$pokeuser(0x6, r9, 0x388, 0x70be3a88) 8.746479647s ago: executing program 6 (id=2131): r0 = socket(0xa, 0x3, 0x87) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000200", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="1000c6f4baf9fdbce95a96fe5e9dea3db8f20000080000001e0000000000"], 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) lseek(0xffffffffffffffff, 0x6, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x43}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c050}, 0x4800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r4}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8936, &(0x7f0000000000)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) r8 = syz_open_dev$vbi(&(0x7f0000000140), 0x0, 0x2) ioctl$VIDIOC_G_FREQUENCY(r8, 0xc02c5638, &(0x7f0000000400)={0x0, 0x5, 0x9c}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff3, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000240)=@assoc_value, &(0x7f0000000440)=0x8) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 6.865353856s ago: executing program 1 (id=2138): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semctl$SETALL(0x0, 0x0, 0x14, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000808000400", @ANYRES32=r4, @ANYBLOB="06001500070000000c0016"], 0x38}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000480)='coredump_filter\x00') readv(r7, &(0x7f0000000800)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x1e}, {0x0}], 0x9) unshare(0x6020400) r8 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r8, &(0x7f00000001c0)={0x2c, 0x20, 0x0, 0x29, r8}, 0x10) read$FUSE(r7, &(0x7f0000001400)={0x2020}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) r10 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r10, 0xc06864b8, &(0x7f0000000580)={0x0, 0x8c1, 0x80, 0x9, 0x3, [0x2], [0x810003, 0xfffffffe, 0x200000], [0x5, 0x20, 0x80, 0x46], [0x8ac2]}) socket(0x10, 0x803, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x290, 0x0, 0x18c, 0x203, 0x8000000, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) recvmsg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) 6.450294712s ago: executing program 6 (id=2140): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r3, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x4c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88c7}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {}, @from_mac=@broadcast, @device_b}}}]}, 0x4c}}, 0x800) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) socket$netlink(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 5.674788675s ago: executing program 2 (id=2142): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x2, 0x60b925, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x6, 0xb}, {0xa, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x24040030}, 0x20004080) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) r2 = shmget$private(0x0, 0x800000, 0x0, &(0x7f0000173000/0x800000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) shmctl$SHM_UNLOCK(r2, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r3, 0x1) r4 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r4, 0xda8d) accept4$inet(r4, 0x0, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r5, &(0x7f0000005b40)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}], 0x1, &(0x7f00000017c0)}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x60cd894) unshare(0x40200) r6 = semget(0x1, 0x4, 0x39c) semop(r6, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) semop(r6, &(0x7f0000000000)=[{0x3, 0xbbdd}, {0x2, 0x100, 0x3000}], 0x2) semctl$SETALL(r6, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x8]) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) unshare(0x40400) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) 5.385625949s ago: executing program 4 (id=2143): mkdir(0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000180)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000000)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = gettid() write$dsp(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs$namespace(r1, &(0x7f0000000200)='ns/mnt\x00') syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848130000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r5, @ANYBLOB], 0x20}}, 0x0) 5.281145976s ago: executing program 5 (id=2144): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r6, 0x0, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x70bd26, 0x25dfdbff, {0x2, 0x1f, 0x51, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 5.272435433s ago: executing program 6 (id=2145): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) timer_create(0x1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f7410262e66f36d0f330f09660f3a0cb90000a6752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x31}], 0x1, 0x4498bda7e2139f37, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000340)='name', &(0x7f00000000c0)='\xf6gr\xe7lo_', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000100)='name', &(0x7f0000000140)='ccnA\xf6gr\xe7lo.', 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x5, 0x40, 0x40, 0x0, 0x3, 0x2004cb, 0x4000000000000000, 0x2, 0x3, 0x0, 0x1, 0x0, 0x2, 0x9, 0x1], 0x80a0000, 0x450}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.631122512s ago: executing program 1 (id=2146): sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010) socket$kcm(0x21, 0x2, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) getpeername$netlink(r1, &(0x7f0000000340), &(0x7f0000000540)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0x28) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 4.538953765s ago: executing program 2 (id=2147): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000003340)=@newtfilter={0x88c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x860, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10, 0x10000, 0x80000001, 0x3, 0x3, 0x80000000, 0x5, 0xbf, 0x4, 0xf4, 0xffffffff, 0x7, 0x1, 0x81, 0x80000000, 0x81, 0x6, 0x0, 0x7, 0x9cc7, 0xfff, 0xff, 0x9, 0x9, 0x7f, 0x9, 0x3, 0x3, 0x4, 0x9, 0x0, 0x2, 0x1, 0x6, 0xffffff09, 0x4, 0x3, 0x8, 0x0, 0x1, 0xd, 0x40, 0x0, 0x0, 0x7fffffff, 0x9, 0x101, 0x107, 0x263, 0x98, 0x3, 0x80000001, 0x6, 0x1, 0xfffffffa, 0x5, 0x0, 0x9, 0x4, 0x5, 0x8, 0x0, 0x8, 0xfffffe01, 0x7d4, 0x0, 0x1389, 0x53b7, 0xd18, 0x6, 0x7, 0x56, 0x645ec805, 0x4, 0x3, 0x3, 0x5007, 0x3, 0x2, 0x8a92, 0x4, 0x7, 0x4, 0xbbb, 0x0, 0x3, 0x9, 0x271, 0xffffe819, 0xa, 0xe8, 0x3, 0x200, 0x8001, 0x3, 0x87d7, 0x9, 0x851, 0x2, 0x8, 0x3, 0x7, 0x8, 0x6f47, 0x3, 0x5c90, 0x4, 0x1ff, 0x0, 0xf02, 0x1e, 0x57e7, 0x5adaaf8c, 0x3f8, 0x4, 0x79, 0x7, 0x5, 0x4, 0x2, 0x2, 0x1, 0xa, 0x3ff, 0x85f, 0x8, 0x2, 0x3, 0x2, 0x25a, 0x4, 0x3, 0x0, 0xfffffff8, 0x8001, 0xffff6a70, 0x6, 0x5, 0x2, 0x8, 0x3, 0x5, 0x5, 0x1, 0xffffffc0, 0x9, 0x3ff, 0x5, 0x9, 0x7, 0x7, 0xf, 0xfffffff7, 0x8, 0x7fff, 0x0, 0x2e7, 0x3ff, 0x8, 0x450, 0x7, 0x7fffffff, 0x5, 0x5, 0x5, 0x2, 0x1, 0x1000, 0x5, 0x3, 0x4, 0x7, 0x2, 0x0, 0x0, 0x1, 0x80, 0x6670, 0x5, 0x16d, 0x2, 0x4, 0x9, 0x401, 0xc, 0x9, 0x13f9, 0x9, 0x0, 0x5, 0x7, 0x45, 0x80000001, 0xb, 0x3, 0x2, 0x0, 0x6, 0x8000, 0x4, 0x3, 0x6, 0x2, 0x7, 0xa262, 0x1, 0xc, 0x6, 0x7, 0x400, 0x2, 0x401, 0x6, 0x205, 0xa, 0x1000, 0x1, 0x58ba, 0x5, 0x42bc, 0x5, 0x120, 0x3, 0x5, 0x3, 0x6f1da0e, 0x80000001, 0x2, 0x8, 0x4, 0x696, 0x7, 0x8, 0x2, 0x1e, 0x3, 0x0, 0x8, 0x4, 0x8f0d, 0x4, 0xa, 0xfffffff6, 0xfffffff7, 0x6, 0x6, 0x1, 0x80, 0x5, 0x0, 0x6, 0x8e, 0xb5d, 0x9, 0xfffffd4c]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xc2, 0x6, 0x859, 0xaedb, 0x7, {0x7, 0x0, 0xd, 0x8, 0x4, 0x8fa6}, {0x8, 0x2, 0x7ff, 0xf95b, 0x4002, 0x280000}, 0x10001, 0xfffffffd, 0x6}}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x0, 0xfffffffe, 0x10, 0x8, 0x0, 0x9, 0x0, 0x7, 0x8, 0x4d8b, 0x6, 0x40, 0x1, 0x0, 0x81, 0x0, 0xf, 0x0, 0x0, 0x5, 0x8, 0x8000, 0x4, 0x9, 0x9, 0x81, 0xa00000, 0xe, 0x4, 0x80000000, 0x6, 0xfffffff9, 0x3, 0x2, 0x7, 0x7, 0x1, 0x14f, 0x8, 0x200, 0x7, 0x5, 0x69, 0x84, 0x3ff, 0x0, 0xf0e7, 0x7, 0x487, 0x4, 0xc, 0x7fffffff, 0x3ff, 0x7fffffff, 0x0, 0xbd, 0x6, 0x0, 0xa, 0x10001, 0x2, 0x43, 0x1, 0x7, 0xffffff00, 0x6, 0x333f, 0x7, 0xc8a, 0x6, 0x1, 0x10, 0x7f, 0x7, 0x8, 0x100, 0x8001, 0x8, 0x4, 0x9, 0x81, 0x5, 0x7, 0x4, 0x0, 0x7f, 0x9, 0x3, 0x4, 0x4, 0x2, 0x9, 0x2, 0xfffffff8, 0x4, 0x4e, 0x3, 0x4, 0x1ff, 0xc0000000, 0x4, 0x5b3c, 0xfffffff7, 0x6d, 0x8001, 0x10000, 0x1, 0x2c29, 0x7, 0x4, 0x0, 0x5, 0x0, 0xfffffffb, 0xea, 0x0, 0x9, 0x40, 0xfffffffa, 0xffffff00, 0x1, 0x8001, 0xda, 0x7f, 0x3, 0x8566, 0x2f, 0x9, 0xfffffff9, 0xb, 0x1, 0x8, 0x9, 0x82b36, 0x4, 0x4, 0x6, 0x2, 0x7f, 0x5, 0x1ff, 0x7f, 0x101, 0xfffffffa, 0xd, 0x6, 0x0, 0xf, 0x9, 0xb, 0x7f, 0x1, 0x10, 0x0, 0x5, 0x1038, 0x9, 0x5, 0xf0, 0x200, 0x0, 0x6, 0x80000000, 0x5, 0xffffffff, 0x6, 0x2, 0x3ff, 0x3, 0x7ff, 0x6, 0x1, 0xd, 0x3, 0x632, 0x2, 0xc4, 0xffff, 0x8, 0x0, 0x9, 0x3, 0x8, 0x5, 0x7, 0x3, 0x10001, 0xd, 0xd, 0x7, 0x7, 0xf2, 0x5, 0x600000, 0x7, 0x4, 0xfffffff7, 0x1, 0x3, 0x33fbb166, 0x9, 0x3, 0x4, 0x8, 0x4, 0xc, 0x7fffffff, 0x400, 0x9, 0x8, 0x1, 0x2e5c, 0x5, 0x7, 0x5, 0x1, 0x7fff, 0x80000001, 0x8c, 0xffffffc0, 0x80000000, 0x7, 0x7d3, 0xfff0, 0x1, 0x8, 0xb, 0x7ff, 0x4, 0x0, 0x6, 0x4, 0x5, 0x6, 0xd143, 0x4, 0x3a6, 0x7, 0x6, 0x7, 0x1000, 0x1, 0x4, 0x2b, 0x7, 0xa, 0x6, 0xdff, 0x30d, 0x1003, 0x1, 0x3ff, 0x7ff, 0xfffffffd, 0x7]}]}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x24048001}, 0x20044804) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x204001, 0x0) close(r9) socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000340)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000440)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1}, 0x804) 4.349402785s ago: executing program 1 (id=2148): io_uring_setup(0x1f8e, &(0x7f0000000140)={0x0, 0x7bfc, 0x800, 0xffffffff, 0xc}) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e25, 0x21, @dev={0xfe, 0x80, '\x00', 0x18}}, {0xa, 0x0, 0xfffffffe, @empty}, 0xffffffffffffffff, 0x27}}, 0x48) write$RDMA_USER_CM_CMD_QUERY(r2, 0x0, 0x0) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r5, 0x1, 0x70bd2a, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000fbdbdf2505000000200001800d0001007564703a73797a32000000"], 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r6, 0x84, 0x7, 0x0, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, 0x0, 0x44840) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x0) r7 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) write$P9_RVERSION(r7, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$nl_route(0x10, 0x3, 0x0) r8 = syz_open_dev$mouse(&(0x7f0000000d00), 0x0, 0x2042) io_setup(0x388c, &(0x7f00000003c0)=0x0) io_submit(r9, 0x1, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, r8}]) 4.190391433s ago: executing program 2 (id=2149): ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f00000003c0)={0xfffc, {0x10001, 0x7, 0x101, 0x6, 0x80000000, 0x924}}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x1, 0x5, 0x9, 0x10008, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0xffffffff, 0x2, 0x6, 0x7, 0x81, 0x9, 0x79, 0x25713dc3, 0x10000, 0x0, 0x95, 0x4, 0x4, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x1000, 0xef1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x8, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x7, 0xf1, 0x4, 0x1, 0xffff, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0xfffffffe, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0x5, 0xd3, 0x408, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0x4, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0x40bfc, 0x8, 0x5, 0x7f, 0x2a29, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x1, 0x19d86, 0xd, 0xfffffff7, 0x8, 0x6, 0x5396, 0x3, 0x200006, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x8, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x201, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8008, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'gre0\x00', &(0x7f0000000200)=@ethtool_ringparam={0x10, 0x80000001, 0x3, 0x1, 0xd, 0xefe, 0x0, 0x0, 0x8}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.943057645s ago: executing program 5 (id=2150): socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x26d01, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x800) fchown(r0, 0x0, 0x0) 3.845758864s ago: executing program 4 (id=2151): r0 = socket$inet(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000440)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900004001000000000000000000000000ffff0000230000000000000000000000ff"], 0x4c}}, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x90000) write(r2, &(0x7f0000000180), 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@local}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000200)=0xc) quotactl_fd$Q_QUOTAON(r1, 0xffffffff80000201, r5, &(0x7f0000000280)='./file0\x00') openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0xc00000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xfffdffffffffffff, 0x9, 0x3, 0xf, 0x80000006, 0x7fff}, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x8}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14, 0x0, 0x331, 0x70bd2a, 0x25dfdbfb, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x2004c0c1}, 0x8004800) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, 0x0, 0x20008840) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r4, 0x7af, &(0x7f0000000080)={@hyper, 0x2}) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(r2, 0xffffffffffffffff, 0x0) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="10000000daffff8faafdfcc59cff", @ANYRES64=0x3], 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) recvmmsg(r8, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x80}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/47, 0x2f}, {&(0x7f0000000f00)=""/4096, 0x1000}, {&(0x7f0000001f80)=""/255, 0xff}, {&(0x7f0000002140)=""/50, 0x32}], 0x4}, 0x1}], 0x4, 0x21, 0x0) 3.442379028s ago: executing program 4 (id=2152): ioprio_set$pid(0x2, 0x0, 0x6000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, 0x0, 0x0) recvfrom(r1, &(0x7f0000000080)=""/86, 0x56, 0x20, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x1, {0xa, 0x4e20, 0x4, @loopback, 0x6}}}, 0x80) getsockopt(r1, 0x200000000114, 0x2715, 0x0, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000380)={&(0x7f0000001000), 0x0, 0x2}, 0x1) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) 3.248809783s ago: executing program 2 (id=2153): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x1, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x1000], [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x198e, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x2000c010}, 0x8) syz_usb_connect$uac1(0x2, 0xaa, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902980003010000e60904000000010100000a2401000000020102132406040006030000000000000000000000000924030000010000ff0924050000f8431cfd0924030604030204001b240404020904", @ANYRES8=r0, @ANYRES16=r0], 0x0) syz_usb_connect$hid(0x3, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x97, 0x4d9, 0xa070, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x12, 0x10, 0x2, "", [{{0x9, 0x4, 0x0, 0xd8, 0x1, 0x3, 0x1, 0x1, 0x6, {0x9, 0x21, 0x9, 0x8, 0x1, {0x22, 0x988}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x7, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x68, 0x5, 0x7f}}]}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x110, 0x5, 0x6e, 0xa, 0xff, 0xc}, 0x23, &(0x7f0000000600)={0x5, 0xf, 0x23, 0x3, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0xe, 0x3, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0xb, "3023d5ebc4d3bd42b21c03b8a77bff35"}]}}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[0x0], &(0x7f00000003c0), 0x0, 0x1, 0x0, 0x0, r8}) ioctl$DRM_IOCTL_MODE_ATOMIC(r7, 0xc03864bc, &(0x7f0000000b00)={0x700, 0x1, &(0x7f0000000640)=[r8], &(0x7f0000000680)=[0x14], &(0x7f0000000a80)=[r9], &(0x7f0000000040), 0x0, 0x2}) ioctl$KVM_SET_MSRS(r6, 0xc048aeca, &(0x7f00000004c0)={0x1, 0x0, [{0x40000070, 0x0, 0x6}]}) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x20, 0x22, 0x89, {0x89, 0xc, "4ea07f6058839e59e5e42ebc291eb3658aa43a89f84642d621ecd960f2926b650935eb6cd90b220ae4a1b977efb485d454c5a51a8b3cc1ae26eb51accb4ede0667d1e949278a4c63148a7fea02bfdee32c0326d2ba1062a21d1fe0678470bc3f92bf4a463706caa52cd37c7e6f713928bb89077cda4ca54e23cf8a8b22653a0a246f4d89d8c9f0"}}, &(0x7f0000000500)={0x0, 0x3, 0x87, @string={0x87, 0x3, "d8feeddee07513b8c67e8074783c5876510d314b14b561ca4c4a5a367a4021e3f6934d371fdfed6162011c3f5d74db9c2f8253e3a7cdd617e8c334df7eaee669ddd21284c1e36d8fa0f0fdc521e17935bfbc44f52744e530bc9852fedf22d2da6e0829c0c30379bf402ba6fa7cdecc5a9ff90197d8f04cf0b38b758e5ed631c56b9497ab82"}}}, &(0x7f0000000480)={0x44, &(0x7f0000000140)={0x20, 0x10, 0xf5, "3a08c93c8730b52a70827d7e9ffbc610f8957634ff499d3f4a3c699f9cb61cf3a17d9b34eb611597a1d9836568fc87f3a213c33a3ebcdc583255477cfc2a72da392d5c53d37fd0e4b37a102fb8ee16e905b34561743d8a1e9b6466eb90010d79479f7441c927bb0d85bd69e43fa9fc99485bd9019d55656a22e5df5a429dc9096f6f32d78a29580cf8791e49b1852ac85a8b4ba905d4bd7b5e0509487f1ebffc7cdf0ed35f612ab6b410772fa03ba34864d70346d3325a0eafa521691e959184018747165328201500ba5402cf5f165399e323f8cdfbdaffbb8c8977cc4203aaa284cabe2d738e009475c264266e0627c97eee4e24"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000002c0)=ANY=[@ANYBLOB="060000005000000000"], &(0x7f0000000300)={0x20, 0x82, 0x1, '\\'}, &(0x7f0000000340)={0x20, 0x83, 0x3, "01cbc9"}, &(0x7f0000000380)={0x20, 0x84, 0x4, "47845674"}, &(0x7f0000000440)={0x20, 0x85, 0x3, '{_9'}}) 2.954865369s ago: executing program 6 (id=2154): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001008000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a340000000c0a010100000000000000000a00000600020073797a30000000000800038004800080140000001100010000000000000000000100000adf17f768e1c29bca96feff061bf26e22dab5aeb20f1ddccc828a67ad37c1bbf7668dcb061acf8d3af839e1d2475da7c6ad084549699b9a216d10207fd33ad22cc2cd15e7ab"], 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[], 0x1d8}}, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x40000) ioctl$CEC_S_MODE(r2, 0x40046109, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000140), 0x0, 0x40) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000180)={"20ae6787", 0xff, 0x0, 0x0, 0x5, 0x2, "86d789d8d3a4b8d4e3af7de691228e", "782d0487", "65127069", "a23206eb", ["391f7798ca78e5d7352e51dc", "1d651f1205a1e442c9d9bf56", "07b106f6b3d6cf3d4073de08", "eaf5dff75c95b2badadd5d39"]}) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6(0xa, 0x3, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0x2, &(0x7f0000000140)=0x7, 0xfe8b) r6 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r6, 0x40106f52, &(0x7f0000000100)={0x3, &(0x7f0000000140)=[{0x11, '\x00', @data=0x3, 0x1}, {0x1c, '\x00', @buffer={"d134f42cc8a6d9ec0e50197ab06db6029625cf7c0449226a6354f16b15abb8ac", 0x20}, 0xffffff81}, {0x21, '\x00', @buffer={"95ca19eefa35a8f58daa6564ddbc5707158a584a93f6d961df63f599b1305c4b", 0x20}, 0x4ea8}]}) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in=@loopback, @in=@rand_addr=0x64010101, 0x4e28, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xa417}, {0x0, 0x0, 0x7}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@mcast2, 0x4002, 0x32}, 0x0, @in=@multicast2, 0x0, 0x2, 0x0, 0xfb, 0x0, 0x0, 0x800}}, 0xe8) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r8 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r8, 0x81044804, &(0x7f0000000400)={0x1, 0x2, 0x1b}) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@private2, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x0, 0x0, 0xc0, 0x2, 0x0, 0x10}}, {{@in6=@loopback, 0x0, 0x6c}}}, 0xe8) close(r4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x4, 0x4) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$pokeuser(0x6, r9, 0x388, 0x70be3a88) 2.11718525s ago: executing program 4 (id=2155): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000002040)={0x1c, &(0x7f0000000280)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000005c0)={0x40, 0x17, 0x4, "69dae2cc"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000640)={0x1c, &(0x7f0000000480)=ANY=[], 0x0, 0x0}) 1.968214183s ago: executing program 2 (id=2156): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x103001, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x4, r2}) ioctl$DMA_BUF_SET_NAME_A(r4, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000540)=0x1) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0xcf7a}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x1, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2000400}, 0x59) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000001140), 0x2c01c3, 0x0) write$tun(r6, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x1004) 1.322309887s ago: executing program 4 (id=2157): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x2, 0x60b925, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x6, 0xb}, {0xa, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x24040030}, 0x20004080) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) r2 = shmget$private(0x0, 0x800000, 0x0, &(0x7f0000173000/0x800000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) shmctl$SHM_UNLOCK(r2, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r3, 0x1) r4 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r4, 0xda8d) accept4$inet(r4, 0x0, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r5, &(0x7f0000005b40)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}], 0x1, &(0x7f00000017c0)}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x60cd894) unshare(0x40200) r6 = semget(0x1, 0x4, 0x39c) semop(r6, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) semop(r6, &(0x7f0000000000)=[{0x3, 0xbbdd}, {0x2, 0x100, 0x3000}], 0x2) semctl$SETALL(r6, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x8]) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) unshare(0x40400) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) 952.059912ms ago: executing program 1 (id=2158): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000010000', @ANYRESDEC=0x0]) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r1, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) dup3(0xffffffffffffffff, r2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x21}]}}}]}]}], {0x14}}, 0xd8}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb0}}, 0x0) 727.359843ms ago: executing program 5 (id=2159): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x853, 0x146, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x7ffd, 0xfc, 0x1, {0x22, 0xea}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x5}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r3 = socket$inet(0x2, 0x3, 0x4) close(0x3) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000001900)={0x0, &(0x7f0000000800)=""/129, &(0x7f00000008c0)="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", 0x0, 0x0, r1, 0x4}, 0x38) sendmmsg$inet(r4, &(0x7f0000002200)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @remote}, 0x10, 0x0}}], 0x1, 0x20000041) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x6, 0x400000) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) 188.243417ms ago: executing program 4 (id=2160): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) listen(0xffffffffffffffff, 0x803) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r4, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000100)={0x2, 0x0, [{0x400000b0, 0x0, 0x1}, {0x400000b1, 0x0, 0xfffffffffffffff7}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 21.161637ms ago: executing program 6 (id=2161): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x7002}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) syz_open_dev$dri(&(0x7f0000000440), 0x3fd, 0x8a40) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="250000000001050500000000000000000a000000100002800c000280052200cb00"], 0x24}}, 0x0) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x4e20, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x8000) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 0s ago: executing program 2 (id=2162): r0 = socket$inet(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000440)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900004001000000000000000000000000ffff0000230000000000000000000000ff"], 0x4c}}, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x90000) write(r2, &(0x7f0000000180), 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@local}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000200)=0xc) quotactl_fd$Q_QUOTAON(r1, 0xffffffff80000201, r5, &(0x7f0000000280)='./file0\x00') openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0xc00000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xfffdffffffffffff, 0x9, 0x3, 0xf, 0x80000006, 0x7fff}, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x8}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x1c, 0x0, 0x331, 0x70bd2a, 0x25dfdbfb, {0xb}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004c0c1}, 0x8004800) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, 0x0, 0x20008840) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r4, 0x7af, 0x0) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r7, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(r2, 0xffffffffffffffff, 0x0) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_DIRENTPLUS(r8, &(0x7f0000000100)=ANY=[@ANYBLOB="10000000daffff8faafdfcc59cff", @ANYRES64=0x3], 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) recvmmsg(r9, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x80}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/47, 0x2f}, {&(0x7f0000000f00)=""/4096, 0x1000}, {&(0x7f0000001f80)=""/255, 0xff}, {&(0x7f0000002140)=""/50, 0x32}], 0x4}, 0x1}], 0x4, 0x21, 0x0) kernel console output (not intermixed with test programs): [ 405.005055][T10452] veth0_macvtap: entered promiscuous mode [ 405.011796][ T5727] usb 6-1: Product: syz [ 405.025833][ T5727] usb 6-1: Manufacturer: syz [ 405.043570][ T5727] usb 6-1: SerialNumber: syz [ 405.060993][ T5727] usb 6-1: config 0 descriptor?? [ 405.104408][ T5627] udevd[5627]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 405.127609][ T5727] usb 6-1: selecting invalid altsetting 0 [ 405.176509][T10452] veth1_macvtap: entered promiscuous mode [ 405.276997][T10667] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1378'. [ 405.299233][T10452] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 405.386177][T10452] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.455534][T10667] syz_tun (unregistering): left allmulticast mode [ 405.552222][ T9775] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.602027][ T9775] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.654032][ T9775] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.732019][ T9775] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.106562][ T92] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.126954][ T92] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.233843][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.257665][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.264476][T10656] snd-usb-audio 6-1:0.0: Runtime PM usage count underflow! [ 407.295265][T10704] netlink: 'syz.2.1387': attribute type 10 has an invalid length. [ 407.313156][ T920] usb 6-1: USB disconnect, device number 2 [ 407.315725][T10704] tipc: Resetting bearer [ 407.381317][T10704] syz_tun: entered promiscuous mode [ 407.560997][T10709] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1388'. [ 408.847905][T10729] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1396'. [ 409.631583][ T920] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 409.798965][ T920] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 409.859605][ T920] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 409.908936][ T920] usb 6-1: config 0 interface 0 has no altsetting 0 [ 409.964539][ T920] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 409.999007][ T920] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 410.050183][ T920] usb 6-1: Product: syz [ 410.070742][ T920] usb 6-1: Manufacturer: syz [ 410.090122][ T920] usb 6-1: SerialNumber: syz [ 410.119051][ T920] usb 6-1: config 0 descriptor?? [ 410.183035][ T920] usb 6-1: selecting invalid altsetting 0 [ 411.800298][T10791] syz_tun: entered allmulticast mode [ 412.111587][ T5622] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 412.303098][ T5622] usb 7-1: Using ep0 maxpacket: 8 [ 412.354160][ T5622] usb 7-1: config 0 has an invalid interface number: 31 but max is 0 [ 412.376674][ T5622] usb 7-1: config 0 has no interface number 0 [ 412.407487][ T5622] usb 7-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 412.426855][ T5356] usb 6-1: USB disconnect, device number 3 [ 412.439738][ T5622] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.497950][ T5622] usb 7-1: Product: syz [ 412.515359][ T5622] usb 7-1: Manufacturer: syz [ 412.530339][ T5622] usb 7-1: SerialNumber: syz [ 412.633109][ T5622] usb 7-1: config 0 descriptor?? [ 412.907306][T10790] nfs: Unknown parameter '' [ 412.937687][ T5622] uvcvideo 7-1:0.31: probe with driver uvcvideo failed with error -22 [ 412.989830][ T5622] usb 7-1: USB disconnect, device number 2 [ 414.007978][T10839] futex_wake_op: syz.6.1417 tries to shift op by 32; fix this program [ 414.323847][T10855] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1423'. [ 414.823987][ T5622] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 415.012697][ T5622] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 415.052330][ T5622] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 415.066226][ T5622] usb 7-1: config 0 interface 0 has no altsetting 0 [ 415.151261][ T5622] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 415.201927][ T5622] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 415.211598][ T5622] usb 7-1: Product: syz [ 415.231663][ T5622] usb 7-1: Manufacturer: syz [ 415.261564][ T5622] usb 7-1: SerialNumber: syz [ 415.296813][T10877] xt_hashlimit: size too large, truncated to 1048576 [ 415.505807][ T5622] usb 7-1: config 0 descriptor?? [ 415.658957][ T5622] usb 7-1: selecting invalid altsetting 0 [ 417.622433][T10859] snd-usb-audio 7-1:0.0: Runtime PM usage count underflow! [ 417.666037][ T5710] usb 7-1: USB disconnect, device number 3 [ 418.204758][T10936] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1443'. [ 418.267438][T10941] syzkaller1: entered promiscuous mode [ 418.274531][T10941] syzkaller1: entered allmulticast mode [ 419.396019][T10980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.426330][T10980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.905407][T11026] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1460'. [ 422.098730][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ae81000: rx timeout, send abort [ 422.419279][T11037] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1463'. [ 422.461565][T11037] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1463'. [ 422.504152][T11039] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1463'. [ 422.557091][T11037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.587731][T11037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.599088][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ae83800: rx timeout, send abort [ 422.610169][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ae81000: abort rx timeout. Force session deactivation [ 423.107948][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ae80800: rx timeout, send abort [ 423.116864][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807ae80800: 0x00100: (3) A timeout occurred and this is the connection abort to close the session. [ 423.136528][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ae83800: abort rx timeout. Force session deactivation [ 423.841640][ T24] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 424.032722][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 424.059016][ T24] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 424.076021][ T24] usb 2-1: config 0 has no interface number 0 [ 424.099855][ T24] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 424.136208][ T24] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 424.159344][ T24] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 424.195881][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.228647][ T24] usb 2-1: Product: syz [ 424.245337][ T24] usb 2-1: Manufacturer: syz [ 424.262778][ T24] usb 2-1: SerialNumber: syz [ 424.317956][ T24] usb 2-1: config 0 descriptor?? [ 424.355219][T11068] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 424.386258][T11068] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 424.547168][T11079] TC_ACT_REPEAT abuse ? [ 424.653152][T11068] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 424.686455][T11068] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 424.930891][ T24] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 425.117920][T11089] IPv6: sit1: Disabled Multicast RS [ 425.414650][T11095] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1479'. [ 425.559242][T11098] netlink: 'syz.5.1482': attribute type 1 has an invalid length. [ 425.684548][ T5622] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 425.717868][T11098] 8021q: adding VLAN 0 to HW filter on device bond1 [ 425.796528][T11103] bond1: (slave geneve2): making interface the new active one [ 425.820835][T11103] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 425.865535][ T5622] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 425.884503][ T5622] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 425.920373][ T5622] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 425.962857][ T5622] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 425.974005][ T5622] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 425.982603][ T5622] usb 7-1: Manufacturer: syz [ 426.000411][ T5622] usb 7-1: config 0 descriptor?? [ 426.359650][ T24] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 426.371377][ T24] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 426.384077][ T24] asix 2-1:0.34: probe with driver asix failed with error -71 [ 426.406460][ T24] usb 2-1: USB disconnect, device number 27 [ 426.463748][ T5622] appleir 0003:05AC:8243.000D: unknown main item tag 0x0 [ 426.566784][ T5622] appleir 0003:05AC:8243.000D: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 427.265872][T11125] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1490'. [ 428.573549][ T920] usb 7-1: USB disconnect, device number 4 [ 429.427884][T11162] bond1: entered promiscuous mode [ 429.737792][T11171] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x1) [ 429.881193][T11175] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 429.913322][T11174] bridge0: port 3(syz_tun) entered blocking state [ 429.928474][T11174] bridge0: port 3(syz_tun) entered disabled state [ 429.961336][T11174] syz_tun: entered promiscuous mode [ 429.986494][T11174] bridge0: port 3(syz_tun) entered blocking state [ 429.993778][T11174] bridge0: port 3(syz_tun) entered listening state [ 430.301714][T11187] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1509'. [ 430.548026][T10827] bridge0: port 3(syz_tun) entered disabled state [ 432.180534][T11221] kvm: vcpu 0: requested 208 ns lapic timer period limited to 200000 ns [ 435.327887][T11260] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1531'. [ 435.390674][T11262] syzkaller1: entered promiscuous mode [ 435.432980][T11262] syzkaller1: entered allmulticast mode [ 435.796908][T11268] syz_tun: entered allmulticast mode [ 436.081637][ T5356] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 436.261522][ T5356] usb 6-1: Using ep0 maxpacket: 8 [ 436.269194][ T5356] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 436.299493][ T5356] usb 6-1: config 0 has no interface number 0 [ 436.302370][T11273] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1534'. [ 436.328626][ T5356] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 436.357207][ T5356] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.388620][ T5356] usb 6-1: Product: syz [ 436.406386][ T5356] usb 6-1: Manufacturer: syz [ 436.428865][T11277] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1534'. [ 436.444524][ T5356] usb 6-1: SerialNumber: syz [ 436.471177][ T5356] usb 6-1: config 0 descriptor?? [ 436.483454][T11273] bond1: peer notification delay (2365) is not a multiple of miimon (6), value rounded to 2364 ms [ 436.533698][T11277] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 436.721060][T11267] nfs: Unknown parameter '' [ 436.738409][ T5356] uvcvideo 6-1:0.31: probe with driver uvcvideo failed with error -22 [ 436.773559][ T5356] usb 6-1: USB disconnect, device number 4 [ 437.036146][T11187] Set syz1 is full, maxelem 65536 reached [ 437.166649][T11292] syzkaller0: entered promiscuous mode [ 437.189490][T11292] syzkaller0: entered allmulticast mode [ 439.851701][T10679] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 440.051495][T10679] usb 2-1: Using ep0 maxpacket: 8 [ 440.084743][T10679] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 440.113951][T10679] usb 2-1: config 0 has no interface number 0 [ 440.152406][T10679] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 440.180283][T10679] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.240324][T10679] usb 2-1: Product: syz [ 440.257317][T10679] usb 2-1: Manufacturer: syz [ 440.282350][T10679] usb 2-1: SerialNumber: syz [ 440.318344][T10679] usb 2-1: config 0 descriptor?? [ 440.550543][T11336] nfs: Unknown parameter '' [ 440.578827][T10679] uvcvideo 2-1:0.31: probe with driver uvcvideo failed with error -22 [ 440.634891][T10679] usb 2-1: USB disconnect, device number 28 [ 440.655336][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.662656][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.539861][T11390] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1571'. [ 442.849381][T11396] kvm: pic: non byte write [ 443.108551][T11404] bond1: entered allmulticast mode [ 443.130061][T11404] gre1: entered allmulticast mode [ 443.195672][T11404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.204925][ C1] ip_tunnel_core: Dead loop on virtual device gre1 (net 44), fix it urgently! [ 443.264015][ C1] ip_tunnel_core: Dead loop on virtual device gre1 (net 44), fix it urgently! [ 443.280876][T11404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.294971][T11401] nfs: Unknown parameter '' [ 443.328196][T11400] bond1: left allmulticast mode [ 443.354933][T11400] gre1: left allmulticast mode [ 443.362379][ C1] ip_tunnel_core: Dead loop on virtual device gre1 (net 44), fix it urgently! [ 444.069643][T11425] bond1: entered allmulticast mode [ 444.135452][T11429] gre1: entered promiscuous mode [ 444.164759][T11429] gre1: entered allmulticast mode [ 444.180760][T11429] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 444.219101][T11429] bond1: (slave gre1): Error -95 calling set_mac_address [ 444.332761][ C0] ip_tunnel_core: Dead loop on virtual device gre1 (net 44), fix it urgently! [ 444.734345][ C0] ip_tunnel_core: Dead loop on virtual device gre1 (net 44), fix it urgently! [ 446.041568][ T5622] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 446.261493][ T5622] usb 7-1: Using ep0 maxpacket: 8 [ 446.286330][ T5622] usb 7-1: config 0 has an invalid interface number: 31 but max is 0 [ 446.295496][ T5622] usb 7-1: config 0 has no interface number 0 [ 446.302557][T11476] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1596'. [ 446.322533][ T5622] usb 7-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 446.353521][ T5622] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.383765][ T5622] usb 7-1: Product: syz [ 446.389909][T11476] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 446.405221][ T5622] usb 7-1: Manufacturer: syz [ 446.420020][ T5622] usb 7-1: SerialNumber: syz [ 446.446447][T11476] bridge2: entered promiscuous mode [ 446.469067][ T5622] usb 7-1: config 0 descriptor?? [ 446.525738][T11479] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1596'. [ 446.724023][T11465] nfs: Unknown parameter '' [ 446.745961][T11479] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 446.800865][ T5622] uvcvideo 7-1:0.31: probe with driver uvcvideo failed with error -22 [ 446.827137][T11479] bridge3: entered promiscuous mode [ 446.868565][ T5622] usb 7-1: USB disconnect, device number 5 [ 448.215246][T11501] bridge0: port 3(syz_tun) entered disabled state [ 448.259896][T11501] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.268079][T11501] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.411504][ T24] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 448.523567][T11501] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 448.565601][T11501] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 448.587480][ T24] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 448.616579][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 448.638273][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 448.667899][ T24] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 448.691044][ T24] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 448.710417][ T24] usb 2-1: Manufacturer: syz [ 448.739522][ T24] usb 2-1: config 0 descriptor?? [ 448.851281][T10822] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.861669][T10822] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.870728][T10822] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.882229][T10822] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.164136][ T24] appleir 0003:05AC:8243.000E: unknown main item tag 0x0 [ 449.184124][ T24] appleir 0003:05AC:8243.000E: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 449.312117][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801eb55000: rx timeout, send abort [ 449.321016][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88801eb55000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 450.202624][T10679] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 450.362168][T10679] usb 7-1: Using ep0 maxpacket: 8 [ 450.391948][T10679] usb 7-1: config 0 has an invalid interface number: 31 but max is 0 [ 450.442052][T10679] usb 7-1: config 0 has no interface number 0 [ 450.467805][T10679] usb 7-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 450.491931][T10679] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.517138][T10679] usb 7-1: Product: syz [ 450.545103][T10679] usb 7-1: Manufacturer: syz [ 450.552560][T10679] usb 7-1: SerialNumber: syz [ 450.604171][T10679] usb 7-1: config 0 descriptor?? [ 450.722502][T11545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.756226][T11545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.880126][T11531] nfs: Unknown parameter '' [ 450.899507][T10679] uvcvideo 7-1:0.31: probe with driver uvcvideo failed with error -22 [ 450.934512][T10679] usb 7-1: USB disconnect, device number 6 [ 451.273538][ T5622] usb 2-1: USB disconnect, device number 29 [ 451.714568][ T31] kauditd_printk_skb: 94 callbacks suppressed [ 451.714583][ T31] audit: type=1326 audit(1785297022.727:1767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11555 comm="syz.4.1621" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017159de99 code=0x7ffc0000 [ 451.838686][ T31] audit: type=1326 audit(1785297022.757:1768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11555 comm="syz.4.1621" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f017159de99 code=0x7ffc0000 [ 451.868703][ T31] audit: type=1326 audit(1785297022.757:1769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11555 comm="syz.4.1621" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017159de99 code=0x7ffc0000 [ 451.900631][ T31] audit: type=1326 audit(1785297022.767:1770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11555 comm="syz.4.1621" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017159de99 code=0x7ffc0000 [ 451.931665][ T31] audit: type=1326 audit(1785297022.767:1771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11555 comm="syz.4.1621" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f017159de99 code=0x7ffc0000 [ 451.970622][ T31] audit: type=1326 audit(1785297022.767:1772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11555 comm="syz.4.1621" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017159de99 code=0x7ffc0000 [ 452.050204][ T31] audit: type=1326 audit(1785297022.767:1773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11555 comm="syz.4.1621" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017159de99 code=0x7ffc0000 [ 452.121838][ T31] audit: type=1326 audit(1785297022.777:1774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11555 comm="syz.4.1621" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f017159de99 code=0x7ffc0000 [ 452.152814][ T31] audit: type=1326 audit(1785297022.777:1775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11555 comm="syz.4.1621" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017159de99 code=0x7ffc0000 [ 452.180901][ T31] audit: type=1326 audit(1785297022.777:1776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11555 comm="syz.4.1621" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f017159de99 code=0x7ffc0000 [ 452.340661][T11576] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1628'. [ 452.550367][T11585] ip_tunnel_core: Dead loop on virtual device gre1 (net 44), fix it urgently! [ 452.582273][T11585] ip_tunnel_core: Dead loop on virtual device gre1 (net 44), fix it urgently! [ 452.609278][T11585] ip_tunnel_core: Dead loop on virtual device gre1 (net 44), fix it urgently! [ 452.641148][T11585] ip_tunnel_core: Dead loop on virtual device gre1 (net 44), fix it urgently! [ 452.678570][T11585] ip_tunnel_core: Dead loop on virtual device gre1 (net 44), fix it urgently! [ 452.695141][T11585] ip_tunnel_core: Dead loop on virtual device gre1 (net 44), fix it urgently! [ 452.724067][T11585] ip_tunnel_core: Dead loop on virtual device gre1 (net 44), fix it urgently! [ 452.764406][T11585] ip_tunnel_core: Dead loop on virtual device gre1 (net 44), fix it urgently! [ 452.782523][T11585] ip_tunnel_core: Dead loop on virtual device gre1 (net 44), fix it urgently! [ 452.845496][T11585] ip_tunnel_core: Dead loop on virtual device gre1 (net 44), fix it urgently! [ 452.892025][ T24] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 453.072362][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 453.096408][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 453.112190][ T24] usb 2-1: config 0 has no interfaces? [ 453.134691][ T24] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 453.149189][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.164466][ T24] usb 2-1: Product: syz [ 453.168994][ T24] usb 2-1: Manufacturer: syz [ 453.175177][ T24] usb 2-1: SerialNumber: syz [ 453.186885][ T24] usb 2-1: config 0 descriptor?? [ 453.987991][T10679] usb 2-1: USB disconnect, device number 30 [ 454.227587][T11629] netlink: 'syz.4.1635': attribute type 1 has an invalid length. [ 454.323888][T11629] 8021q: adding VLAN 0 to HW filter on device bond2 [ 454.417029][T11631] bond2: (slave geneve2): making interface the new active one [ 454.453096][T11631] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 454.478947][T10822] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.493778][T10822] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.512067][T10822] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.541955][T10822] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.650398][T11650] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1642'. [ 455.670916][T11653] sctp: [Deprecated]: syz.1.1643 (pid 11653) Use of int in max_burst socket option. [ 455.670916][T11653] Use struct sctp_assoc_value instead [ 455.827172][T11657] netlink: 'syz.5.1645': attribute type 1 has an invalid length. [ 455.977822][T11657] 8021q: adding VLAN 0 to HW filter on device bond2 [ 456.007434][T11585] syz.2.1630 (11585) used greatest stack depth: 16488 bytes left [ 456.541771][ T5622] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 456.727027][ T5622] usb 6-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 456.756755][ T5622] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.771906][ T5622] usb 6-1: Product: syz [ 456.779787][ T5622] usb 6-1: Manufacturer: syz [ 456.793443][ T5622] usb 6-1: SerialNumber: syz [ 456.850995][ T5622] usb 6-1: config 0 descriptor?? [ 456.897941][ T5622] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 457.123731][ T5622] gspca_m5602: Failed to find a sensor [ 457.148054][ T5622] ALi m5602 6-1:0.0: ALi m5602 webcam failed [ 457.196483][ T5622] usb 6-1: USB disconnect, device number 5 [ 458.181727][ T5622] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 458.356887][ T5622] usb 6-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 458.376806][ T5622] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.389391][ T5622] usb 6-1: Product: syz [ 458.394709][ T5622] usb 6-1: Manufacturer: syz [ 458.400441][ T5622] usb 6-1: SerialNumber: syz [ 458.433719][ T5622] usb 6-1: config 0 descriptor?? [ 458.453106][ T5622] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 458.873943][ T5622] gspca_m5602: Failed to find a sensor [ 458.887268][ T5622] ALi m5602 6-1:0.0: ALi m5602 webcam failed [ 458.904958][ T5622] usb 6-1: USB disconnect, device number 6 [ 461.168878][T11752] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1673'. [ 461.209673][T11752] bridge_slave_0: default FDB implementation only supports local addresses [ 462.659798][ T5633] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 463.046781][T11785] loop2: detected capacity change from 0 to 7 [ 463.099896][T11785] Dev loop2: unable to read RDB block 7 [ 463.109684][T11785] loop2: unable to read partition table [ 463.118047][T11785] loop2: partition table beyond EOD, truncated [ 463.126200][T11785] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 463.571868][ T920] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 463.743763][ T920] usb 2-1: Using ep0 maxpacket: 8 [ 463.768181][ T920] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 463.790869][ T920] usb 2-1: config 0 has no interface number 0 [ 463.820188][ T920] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 463.848717][ T920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.889559][ T920] usb 2-1: Product: syz [ 463.905570][ T920] usb 2-1: Manufacturer: syz [ 463.920484][ T920] usb 2-1: SerialNumber: syz [ 463.933571][T11804] syzkaller0: entered promiscuous mode [ 463.948514][ T920] usb 2-1: config 0 descriptor?? [ 463.950811][T11804] syzkaller0: entered allmulticast mode [ 464.221183][T11790] nfs: Unknown parameter '' [ 464.243106][ T920] uvcvideo 2-1:0.31: probe with driver uvcvideo failed with error -22 [ 464.274275][ T920] usb 2-1: USB disconnect, device number 31 [ 464.345442][T11815] geneve2: entered promiscuous mode [ 464.371218][ T31] kauditd_printk_skb: 38 callbacks suppressed [ 464.371236][ T31] audit: type=1326 audit(1785297035.377:1815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11813 comm="syz.6.1695" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a2719de99 code=0x7ffc0000 [ 464.414415][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.427556][ T31] audit: type=1326 audit(1785297035.377:1816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11813 comm="syz.6.1695" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a2719de99 code=0x7ffc0000 [ 464.470649][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.495788][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.508337][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.587232][ T31] audit: type=1800 audit(1785297035.597:1817): pid=11822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1698" name="SYSV00000000" dev="tmpfs" ino=8 res=0 errno=0 [ 464.671525][ T5710] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 464.826229][ T5710] usb 7-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 464.840348][ T5710] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.850771][ T5710] usb 7-1: Product: syz [ 464.855416][ T5710] usb 7-1: Manufacturer: syz [ 464.867699][ T5710] usb 7-1: SerialNumber: syz [ 464.885531][ T5710] usb 7-1: config 0 descriptor?? [ 464.898580][ T5710] hub 7-1:0.0: bad descriptor, ignoring hub [ 464.906845][ T5710] hub 7-1:0.0: probe with driver hub failed with error -5 [ 465.077710][ T31] audit: type=1800 audit(1785297036.087:1818): pid=11827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1699" name="SYSV00000000" dev="tmpfs" ino=7 res=0 errno=0 [ 465.119810][ T5710] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 465.297184][ T5710] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 465.328722][ T5710] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 465.341048][T11815] dib0700: tx buffer length is larger than 4. Not supported. [ 465.373332][ T5710] usb 7-1: media controller created [ 465.510944][ T5710] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 465.755701][ T5710] DVB: Unable to find symbol dib7000p_attach() [ 465.776824][ T5710] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 465.976433][ T5710] rc_core: IR keymap rc-dib0700-rc5 not found [ 466.008439][ T5710] Registered IR keymap rc-empty [ 466.031345][ T5710] dvb-usb: could not initialize remote control. [ 466.055953][ T5710] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 466.113196][ T5710] usb 7-1: USB disconnect, device number 7 [ 466.372858][ T5710] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 467.582462][ T5622] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 467.753414][ T5622] usb 2-1: Using ep0 maxpacket: 8 [ 467.773425][ T5622] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 467.797378][ T5622] usb 2-1: config 0 has no interface number 0 [ 467.811928][ T5622] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 467.831490][ T5622] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.840251][ T5622] usb 2-1: Product: syz [ 467.847148][ T5622] usb 2-1: Manufacturer: syz [ 467.853803][ T5622] usb 2-1: SerialNumber: syz [ 467.866194][ T5622] usb 2-1: config 0 descriptor?? [ 467.902112][T11872] usb usb7: usbfs: process 11872 (syz.5.1712) did not claim interface 0 before use [ 468.102751][T11864] nfs: Unknown parameter '' [ 468.116697][ T5622] uvcvideo 2-1:0.31: probe with driver uvcvideo failed with error -22 [ 468.150429][ T5622] usb 2-1: USB disconnect, device number 32 [ 468.165181][ T5627] udevd[5627]: setting owner of /dev/bus/usb/002/032 to uid=0, gid=0 failed: No such file or directory [ 469.171547][ T920] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 469.242321][ T31] audit: type=1800 audit(1785297040.257:1819): pid=11880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1714" name="SYSV00000000" dev="tmpfs" ino=8 res=0 errno=0 [ 469.341503][ T920] usb 6-1: Using ep0 maxpacket: 8 [ 469.349234][ T920] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 469.369787][ T920] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 469.405405][ T920] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 469.430214][ T920] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 469.459078][ T920] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 469.483691][ T920] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.759977][ T920] usb 6-1: GET_CAPABILITIES returned 0 [ 469.782662][ T920] usbtmc 6-1:16.0: can't read capabilities [ 469.970033][ T5356] usb 6-1: USB disconnect, device number 7 [ 470.163096][ T920] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 470.592695][ T920] usb 7-1: unable to get BOS descriptor or descriptor too short [ 470.636558][ T920] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 470.667211][ T920] usb 7-1: can't read configurations, error -71 [ 470.976337][ T31] audit: type=1326 audit(1785297041.987:1820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11899 comm="syz.2.1721" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1825b9de99 code=0x7ffc0000 [ 471.045401][ T31] audit: type=1326 audit(1785297042.017:1821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11899 comm="syz.2.1721" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1825b9de99 code=0x7ffc0000 [ 471.174153][ T31] audit: type=1326 audit(1785297042.047:1822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11899 comm="syz.2.1721" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f1825b9de99 code=0x7ffc0000 [ 471.258903][ T31] audit: type=1326 audit(1785297042.057:1823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11899 comm="syz.2.1721" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1825b9de99 code=0x7ffc0000 [ 471.390309][ T31] audit: type=1326 audit(1785297042.057:1824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11899 comm="syz.2.1721" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1825b9de99 code=0x7ffc0000 [ 471.474041][ T31] audit: type=1326 audit(1785297042.087:1825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11899 comm="syz.2.1721" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f1825b9de99 code=0x7ffc0000 [ 471.542507][ T31] audit: type=1326 audit(1785297042.097:1826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11899 comm="syz.2.1721" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1825b9de99 code=0x7ffc0000 [ 471.597120][ T31] audit: type=1326 audit(1785297042.097:1827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11899 comm="syz.2.1721" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1825b9de99 code=0x7ffc0000 [ 471.636211][ T31] audit: type=1326 audit(1785297042.107:1828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11899 comm="syz.2.1721" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1825b9de99 code=0x7ffc0000 [ 471.694329][ T24] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 471.708314][ T31] audit: type=1326 audit(1785297042.107:1829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11899 comm="syz.2.1721" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1825b9de99 code=0x7ffc0000 [ 471.858385][ T24] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 471.871714][ T24] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 471.914241][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 471.930358][ T24] usb 2-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 471.955796][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.987211][ T24] usb 2-1: config 0 descriptor?? [ 472.012917][T11912] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 472.081689][ T920] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 472.241536][ T920] usb 7-1: Using ep0 maxpacket: 8 [ 472.258718][ T920] usb 7-1: config 0 has an invalid interface number: 31 but max is 0 [ 472.276523][ T920] usb 7-1: config 0 has no interface number 0 [ 472.299746][ T920] usb 7-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 472.320431][ T920] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.346595][ T920] usb 7-1: Product: syz [ 472.364542][ T920] usb 7-1: Manufacturer: syz [ 472.382493][ T920] usb 7-1: SerialNumber: syz [ 472.400819][ T920] usb 7-1: config 0 descriptor?? [ 472.653366][T11914] nfs: Unknown parameter '' [ 472.665176][ T920] uvcvideo 7-1:0.31: probe with driver uvcvideo failed with error -22 [ 472.706315][ T920] usb 7-1: USB disconnect, device number 10 [ 473.127604][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 473.160349][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 473.210721][ T24] usb 2-1: USB disconnect, device number 33 [ 473.459079][ T5626] Bluetooth: hci0: command 0x0406 tx timeout [ 473.847423][T11932] KVM: debugfs: duplicate directory 11932-4 [ 473.866818][T11934] netlink: 'syz.5.1732': attribute type 1 has an invalid length. [ 474.009495][T11934] 8021q: adding VLAN 0 to HW filter on device bond3 [ 474.217809][T11939] bond3: (slave ip6gretap1): making interface the new active one [ 474.255751][T11939] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 474.766868][T11957] syz_tun: entered promiscuous mode [ 474.794236][T11957] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 474.872123][ T24] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 475.063939][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 475.094627][ T24] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 475.106426][ T24] usb 6-1: config 0 has no interface number 0 [ 475.136249][ T24] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 475.154975][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.171568][ T24] usb 6-1: Product: syz [ 475.176269][ T24] usb 6-1: Manufacturer: syz [ 475.183186][ T24] usb 6-1: SerialNumber: syz [ 475.212995][ T24] usb 6-1: config 0 descriptor?? [ 475.489902][T11950] nfs: Unknown parameter '' [ 475.495454][ T24] uvcvideo 6-1:0.31: probe with driver uvcvideo failed with error -22 [ 475.507432][ T24] usb 6-1: USB disconnect, device number 8 [ 476.300639][ T920] IPVS: starting estimator thread 0... [ 476.432241][T11984] IPVS: using max 50 ests per chain, 120000 per kthread [ 476.745452][T11992] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1749'. [ 478.103397][T12013] syzkaller0: entered promiscuous mode [ 478.131565][T12013] syzkaller0: entered allmulticast mode [ 478.419216][T12028] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1762'. [ 478.516999][T12028] ip6gre1: entered promiscuous mode [ 478.524290][T12028] ip6gre1: entered allmulticast mode [ 478.633993][T12028] netlink: 'syz.5.1762': attribute type 6 has an invalid length. [ 478.662685][T12028] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1762'. [ 478.901603][T12033] syzkaller0: entered promiscuous mode [ 478.910073][T12033] syzkaller0: entered allmulticast mode [ 478.980986][T12048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.995037][T12048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.948816][T12057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.959228][T12057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.519848][T12059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.541348][T12059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.696954][T12062] netlink: 'syz.2.1771': attribute type 1 has an invalid length. [ 480.795146][ T24] psmouse serio3: Failed to reset mouse on : -5 [ 482.828915][T12041] syzkaller0: entered promiscuous mode [ 482.834781][T12041] syzkaller0: entered allmulticast mode [ 482.877463][T12062] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 482.879896][T12063] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 482.920421][T12065] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 483.170305][T12073] syzkaller0: entered promiscuous mode [ 483.192417][T12073] syzkaller0: entered allmulticast mode [ 483.286470][T12078] bond1: entered allmulticast mode [ 483.299393][T12078] gre1: entered allmulticast mode [ 483.339198][T12078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.349215][ C1] net_ratelimit: 1014 callbacks suppressed [ 483.349292][ C1] ip_tunnel_core: Dead loop on virtual device gre1 (net 44), fix it urgently! [ 483.372265][T12078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.427228][T12082] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1777'. [ 483.448788][T12077] nfs: Unknown parameter '' [ 483.463987][T12076] bond1: left allmulticast mode [ 483.469238][T12076] gre1: left allmulticast mode [ 483.493016][ C1] ip_tunnel_core: Dead loop on virtual device gre1 (net 44), fix it urgently! [ 483.596451][T12089] netlink: 'syz.6.1780': attribute type 4 has an invalid length. [ 483.606307][T12087] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 483.615193][ C1] ip_tunnel_core: Dead loop on virtual device gre1 (net 44), fix it urgently! [ 483.719851][T12091] syzkaller0: entered promiscuous mode [ 483.726851][T12091] syzkaller0: entered allmulticast mode [ 483.802231][T12095] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=3979591798 (509387750144 ns) > initial count (364801339648 ns). Using initial count to start timer. [ 483.946078][T12098] netlink: 'syz.5.1784': attribute type 1 has an invalid length. [ 484.024392][T10679] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 484.097403][T12098] 8021q: adding VLAN 0 to HW filter on device bond5 [ 484.116988][T12098] bond4: (slave bond5): making interface the new active one [ 484.129245][T12098] bond4: (slave bond5): Enslaving as an active interface with an up link [ 484.150956][T12103] bond4: (slave gretap1): Enslaving as a backup interface with an up link [ 484.211321][T10679] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 484.240799][T10679] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 484.255715][T10679] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 484.267217][T10679] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 212, setting to 64 [ 484.278700][T10679] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 484.301799][ T920] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 484.320474][ T31] kauditd_printk_skb: 28 callbacks suppressed [ 484.320494][ T31] audit: type=1326 audit(1785297055.327:1858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12107 comm="syz.5.1787" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3be79de99 code=0x7ffc0000 [ 484.381799][ T31] audit: type=1326 audit(1785297055.327:1859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12107 comm="syz.5.1787" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3be79de99 code=0x7ffc0000 [ 484.425138][ T31] audit: type=1326 audit(1785297055.327:1860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12107 comm="syz.5.1787" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3be79de99 code=0x7ffc0000 [ 484.427515][T10679] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 484.461789][ T31] audit: type=1326 audit(1785297055.327:1861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12107 comm="syz.5.1787" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3be79de99 code=0x7ffc0000 [ 484.524256][ T920] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 484.536613][ T920] usb 7-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 484.557127][T10679] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.566339][ T920] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 484.576981][T10679] usb 2-1: Product: syz [ 484.581621][T10679] usb 2-1: Manufacturer: syz [ 484.587486][ T920] usb 7-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 484.601907][ T24] misc userio: Buffer overflowed, userio client isn't keeping up [ 484.609876][T10679] usb 2-1: SerialNumber: syz [ 484.623472][T10679] usb 2-1: config 0 descriptor?? [ 484.643270][ T920] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 484.662141][T12093] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 484.688594][ T31] audit: type=1326 audit(1785297055.327:1862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12107 comm="syz.5.1787" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7ff3be79de99 code=0x7ffc0000 [ 484.725772][ T920] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 484.769781][ T920] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 484.779773][ T31] audit: type=1326 audit(1785297055.327:1863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12107 comm="syz.5.1787" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3be79de99 code=0x7ffc0000 [ 484.815350][ T920] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 484.835547][ T920] usb 7-1: Product: syz [ 484.840023][ T920] usb 7-1: Manufacturer: syz [ 484.841792][ T31] audit: type=1326 audit(1785297055.327:1864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12107 comm="syz.5.1787" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3be79de99 code=0x7ffc0000 [ 484.882211][T10679] rc_core: IR keymap rc-xbox-dvd not found [ 484.888233][T10679] Registered IR keymap rc-empty [ 484.905042][T10679] rc rc0: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 484.915162][T12101] raw-gadget.4 gadget.6: fail, usb_ep_enable returned -22 [ 484.928511][ T920] cdc_wdm 7-1:1.0: skipping garbage [ 484.935807][ T920] cdc_wdm 7-1:1.0: skipping garbage [ 484.946397][T10679] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input11 [ 484.984539][ T31] audit: type=1326 audit(1785297055.367:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12107 comm="syz.5.1787" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff3be79de99 code=0x7ffc0000 [ 484.991647][ T920] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 485.057598][T10679] usb 2-1: USB disconnect, device number 34 [ 485.063908][ C0] xbox_remote 2-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 485.091118][ T920] cdc_wdm 7-1:1.0: Unknown control protocol [ 485.183124][ T31] audit: type=1326 audit(1785297055.377:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12107 comm="syz.5.1787" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff3be79de99 code=0x7ffc0000 [ 485.238342][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 485.245254][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 485.252971][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 485.259836][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 485.270218][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 485.276947][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 485.285392][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 485.292126][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 485.302052][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 485.309061][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 485.316245][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 485.323206][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 485.330316][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 485.337741][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 485.346089][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 485.352904][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 485.360291][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 485.366904][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 485.374064][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 485.380752][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 485.510885][ T5710] usb 7-1: USB disconnect, device number 11 [ 485.512055][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 485.683969][ T24] input: PS/2 Generic Mouse as /devices/serio3/input/input10 [ 485.954367][ T24] psmouse serio3: Failed to enable mouse on [ 486.497679][T12126] netlink: 'syz.5.1792': attribute type 10 has an invalid length. [ 486.546503][T12126] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.554615][T12126] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.049677][T12136] syzkaller0: entered promiscuous mode [ 487.074584][T12136] syzkaller0: entered allmulticast mode [ 487.248109][T12146] tipc: Enabled bearer , priority 0 [ 487.275130][T12146] syzkaller0: entered promiscuous mode [ 487.287930][T12146] syzkaller0: entered allmulticast mode [ 487.332826][T12146] tipc: Resetting bearer [ 487.353930][T12145] tipc: Resetting bearer [ 487.418171][T12145] tipc: Disabling bearer [ 487.452254][ T24] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 487.550345][ T31] audit: type=1326 audit(1785297058.557:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12147 comm="syz.1.1798" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7499de99 code=0x7ffc0000 [ 487.621499][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 487.644189][ T24] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 487.668114][ T24] usb 6-1: config 0 has no interface number 0 [ 487.700876][ T24] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 487.724321][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.762250][ T24] usb 6-1: Product: syz [ 487.770269][ T24] usb 6-1: Manufacturer: syz [ 487.784166][ T24] usb 6-1: SerialNumber: syz [ 487.808749][ T24] usb 6-1: config 0 descriptor?? [ 488.121230][T12140] nfs: Unknown parameter '' [ 488.155618][ T24] uvcvideo 6-1:0.31: probe with driver uvcvideo failed with error -22 [ 488.200768][ T24] usb 6-1: USB disconnect, device number 9 [ 488.294992][T12158] Cannot find del_set index 2 as target [ 488.687316][T12163] kvm: pic: non byte write [ 488.900677][T12168] syzkaller0: entered promiscuous mode [ 488.916283][T12168] syzkaller0: entered allmulticast mode [ 489.374283][T12174] netlink: 'syz.5.1806': attribute type 4 has an invalid length. [ 489.541971][T12173] netlink: 'syz.2.1805': attribute type 1 has an invalid length. [ 489.570337][T12173] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1805'. [ 489.600326][T12173] netlink: 'syz.2.1805': attribute type 1 has an invalid length. [ 489.999163][T12194] syzkaller0: entered promiscuous mode [ 490.035297][T12194] syzkaller0: entered allmulticast mode [ 491.044618][ T31] kauditd_printk_skb: 52 callbacks suppressed [ 491.044638][ T31] audit: type=1326 audit(1785297062.047:1920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12207 comm="syz.2.1816" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1825b9de99 code=0x7ffc0000 [ 491.207333][ T31] audit: type=1326 audit(1785297062.057:1921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12207 comm="syz.2.1816" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f1825b9de99 code=0x7ffc0000 [ 491.365868][ T31] audit: type=1326 audit(1785297062.057:1922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12207 comm="syz.2.1816" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1825b9de99 code=0x7ffc0000 [ 491.468773][ T31] audit: type=1326 audit(1785297062.087:1923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12207 comm="syz.2.1816" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f1825b9de99 code=0x7ffc0000 [ 491.574130][ T31] audit: type=1326 audit(1785297062.087:1924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12207 comm="syz.2.1816" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1825b9de99 code=0x7ffc0000 [ 491.761086][ T31] audit: type=1326 audit(1785297062.087:1925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12207 comm="syz.2.1816" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1825b9de99 code=0x7ffc0000 [ 491.804329][T12217] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1819'. [ 491.840245][ T31] audit: type=1326 audit(1785297062.097:1926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12207 comm="syz.2.1816" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1825b9de99 code=0x7ffc0000 [ 491.918889][ T31] audit: type=1326 audit(1785297062.097:1927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12207 comm="syz.2.1816" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1825b9de99 code=0x7ffc0000 [ 492.043977][ T31] audit: type=1326 audit(1785297062.107:1928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12207 comm="syz.2.1816" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1825b9de99 code=0x7ffc0000 [ 492.086008][T12222] syzkaller0: entered promiscuous mode [ 492.095429][T12222] syzkaller0: entered allmulticast mode [ 492.106163][ T31] audit: type=1326 audit(1785297062.107:1929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12207 comm="syz.2.1816" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1825b5e6ce code=0x7ffc0000 [ 492.981617][ T24] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 493.176009][ T24] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 493.204171][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.220886][ T24] usb 6-1: Product: syz [ 493.231954][ T24] usb 6-1: Manufacturer: syz [ 493.241826][ T24] usb 6-1: SerialNumber: syz [ 493.591518][ T5688] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 493.683341][ T24] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 493.750999][ T24] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 493.773838][ T5688] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 493.794976][ T5688] usb 7-1: config 0 has no interface number 0 [ 493.814913][ T24] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 493.834953][ T5688] usb 7-1: config 0 interface 41 has no altsetting 0 [ 493.860584][ T5688] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 493.881599][ T24] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 493.891943][ T5688] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.910303][ T5688] usb 7-1: Product: syz [ 493.915732][ T24] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 493.924929][ T5688] usb 7-1: Manufacturer: syz [ 493.929834][ T5688] usb 7-1: SerialNumber: syz [ 493.942969][ T24] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 493.953546][ T5688] usb 7-1: config 0 descriptor?? [ 494.006529][ T24] usb 6-1: USB disconnect, device number 10 [ 494.524459][T12245] syzkaller0: entered promiscuous mode [ 494.556172][T12245] syzkaller0: entered allmulticast mode [ 494.772269][ T5688] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 494.835437][T12258] netlink: 'syz.5.1832': attribute type 13 has an invalid length. [ 494.909025][T12261] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1833'. [ 494.929326][T12261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.951049][T12261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.314811][T12270] syzkaller0: entered promiscuous mode [ 495.331881][T12270] syzkaller0: entered allmulticast mode [ 495.663124][T12274] vlan2: entered promiscuous mode [ 495.668716][T12274] bridge0: entered promiscuous mode [ 496.264165][ T5688] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 496.306418][ T5688] CoreChips 7-1:0.41: probe with driver CoreChips failed with error -71 [ 496.375868][ T5688] usb 7-1: USB disconnect, device number 12 [ 497.559156][T12313] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1849'. [ 497.831916][ T5688] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 497.947246][T12318] syzkaller0: entered promiscuous mode [ 497.954054][T12318] syzkaller0: entered allmulticast mode [ 498.023824][ T5688] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 498.035286][ T5688] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 498.047564][ T5688] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 498.068856][ T5688] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 498.078719][ T5688] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 498.102122][ T5688] usb 6-1: Manufacturer: syz [ 498.122461][ T5688] usb 6-1: config 0 descriptor?? [ 498.349555][ T31] kauditd_printk_skb: 119 callbacks suppressed [ 498.349605][ T31] audit: type=1800 audit(1785297069.357:2049): pid=12329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1854" name="SYSV00000000" dev="tmpfs" ino=10 res=0 errno=0 [ 498.441469][ T31] audit: type=1326 audit(1785297069.447:2050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12330 comm="syz.2.1855" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1825b9de99 code=0x7ffc0000 [ 498.535624][ T31] audit: type=1326 audit(1785297069.497:2051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12330 comm="syz.2.1855" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1825b9de99 code=0x7ffc0000 [ 498.573479][ T5688] appleir 0003:05AC:8243.000F: unknown main item tag 0x0 [ 498.590909][ T5688] appleir 0003:05AC:8243.000F: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 498.616388][ T31] audit: type=1326 audit(1785297069.497:2052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12330 comm="syz.2.1855" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f1825b9de99 code=0x7ffc0000 [ 498.744419][ T31] audit: type=1326 audit(1785297069.497:2053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12330 comm="syz.2.1855" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1825b9de99 code=0x7ffc0000 [ 498.842003][ T31] audit: type=1326 audit(1785297069.497:2054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12330 comm="syz.2.1855" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1825b9de99 code=0x7ffc0000 [ 498.871575][ T31] audit: type=1326 audit(1785297069.497:2055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12330 comm="syz.2.1855" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f1825b9de99 code=0x7ffc0000 [ 498.898579][ T31] audit: type=1326 audit(1785297069.497:2056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12330 comm="syz.2.1855" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1825b9de99 code=0x7ffc0000 [ 499.000369][ T31] audit: type=1326 audit(1785297069.497:2057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12330 comm="syz.2.1855" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1825b9de99 code=0x7ffc0000 [ 499.201502][ T31] audit: type=1326 audit(1785297069.497:2058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12330 comm="syz.2.1855" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1825b9de99 code=0x7ffc0000 [ 500.552880][ T5727] usb 6-1: USB disconnect, device number 11 [ 500.683533][T12361] syzkaller0: entered promiscuous mode [ 500.720482][T12361] syzkaller0: entered allmulticast mode [ 500.789698][T12365] xt_hashlimit: size too large, truncated to 1048576 [ 501.111043][T12371] syzkaller0: entered promiscuous mode [ 501.136488][T12371] syzkaller0: entered allmulticast mode [ 502.098584][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.111657][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.294602][T12398] tipc: Enabling of bearer rejected, already enabled [ 502.339624][T12398] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1872'. [ 502.457192][T12402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.476823][T12402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.384008][T12415] syzkaller0: entered promiscuous mode [ 504.413179][T12415] syzkaller0: entered allmulticast mode [ 505.081922][T12435] syzkaller0: entered promiscuous mode [ 505.100054][T12435] syzkaller0: entered allmulticast mode [ 505.439133][T12441] syzkaller0: entered promiscuous mode [ 505.462605][T12441] syzkaller0: entered allmulticast mode [ 505.485250][T12443] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1885'. [ 505.600254][T12446] syzkaller0: entered promiscuous mode [ 505.623399][T12446] syzkaller0: entered allmulticast mode [ 505.812440][T12450] syzkaller0: entered promiscuous mode [ 505.827470][T12450] syzkaller0: entered allmulticast mode [ 506.237143][ T31] kauditd_printk_skb: 88 callbacks suppressed [ 506.237164][ T31] audit: type=1326 audit(1785297077.247:2147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12458 comm="syz.6.1890" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a2719de99 code=0x7ffc0000 [ 506.409200][ T31] audit: type=1326 audit(1785297077.287:2148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12458 comm="syz.6.1890" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a2719de99 code=0x7ffc0000 [ 506.507433][ T31] audit: type=1326 audit(1785297077.287:2149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12458 comm="syz.6.1890" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f7a2719de99 code=0x7ffc0000 [ 506.565547][T12469] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 506.605886][ T31] audit: type=1326 audit(1785297077.287:2150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12458 comm="syz.6.1890" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a2719de99 code=0x7ffc0000 [ 506.634239][ T31] audit: type=1326 audit(1785297077.287:2151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12458 comm="syz.6.1890" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a2719de99 code=0x7ffc0000 [ 506.664425][ T31] audit: type=1326 audit(1785297077.287:2152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12458 comm="syz.6.1890" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7a2719de99 code=0x7ffc0000 [ 506.694255][ T31] audit: type=1326 audit(1785297077.287:2153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12458 comm="syz.6.1890" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a2719de99 code=0x7ffc0000 [ 506.835172][ T31] audit: type=1326 audit(1785297077.287:2154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12458 comm="syz.6.1890" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7a2719de99 code=0x7ffc0000 [ 506.971908][ T31] audit: type=1326 audit(1785297077.287:2155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12458 comm="syz.6.1890" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a2719de99 code=0x7ffc0000 [ 507.053092][ T31] audit: type=1326 audit(1785297077.297:2156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12458 comm="syz.6.1890" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7a2719de99 code=0x7ffc0000 [ 507.113110][T12472] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1893'. [ 507.151888][T12472] bond0: option arp_validate: invalid value (39) [ 507.483318][T12480] tipc: Enabling of bearer rejected, already enabled [ 507.522390][T12480] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1895'. [ 507.637179][T12482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.678181][T12482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.321708][T12488] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1898'. [ 508.356708][T12488] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1898'. [ 508.583225][T12491] geneve2: left promiscuous mode [ 508.639624][T10831] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.692235][T10831] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.729565][T10831] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.748776][T10831] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.181167][T12515] syzkaller0: entered promiscuous mode [ 510.194331][T12515] syzkaller0: entered allmulticast mode [ 511.046250][T12529] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 511.247846][ T31] kauditd_printk_skb: 91 callbacks suppressed [ 511.247865][ T31] audit: type=1326 audit(1785297082.257:2248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12534 comm="syz.2.1912" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f1825b9de99 code=0x7ffc0000 [ 511.375408][T12542] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1914'. [ 511.390846][ T31] audit: type=1326 audit(1785297082.287:2249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12534 comm="syz.2.1912" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1825b9de99 code=0x7ffc0000 [ 511.512726][ T31] audit: type=1326 audit(1785297082.287:2250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12534 comm="syz.2.1912" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1825b9de99 code=0x7ffc0000 [ 511.635694][ T31] audit: type=1326 audit(1785297082.287:2251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12534 comm="syz.2.1912" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1825b9de99 code=0x7ffc0000 [ 511.729442][ T31] audit: type=1326 audit(1785297082.287:2252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12534 comm="syz.2.1912" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1825b9de99 code=0x7ffc0000 [ 511.803676][ T31] audit: type=1326 audit(1785297082.297:2253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12534 comm="syz.2.1912" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1825b9de99 code=0x7ffc0000 [ 511.879701][ T31] audit: type=1326 audit(1785297082.297:2254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12534 comm="syz.2.1912" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1825b9de99 code=0x7ffc0000 [ 511.978588][ T31] audit: type=1326 audit(1785297082.297:2255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12534 comm="syz.2.1912" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1825b9de99 code=0x7ffc0000 [ 512.065584][ T31] audit: type=1326 audit(1785297082.297:2256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12534 comm="syz.2.1912" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1825b5e6ce code=0x7ffc0000 [ 512.141275][ T31] audit: type=1326 audit(1785297082.337:2257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12534 comm="syz.2.1912" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1825b9de99 code=0x7ffc0000 [ 512.445511][T12549] ip6gre1: left promiscuous mode [ 512.524851][T12548] syzkaller0: entered promiscuous mode [ 512.561568][T12548] syzkaller0: entered allmulticast mode [ 512.625487][T12551] tipc: Enabled bearer , priority 0 [ 512.664682][T12547] tipc: Resetting bearer [ 512.764368][T12547] tipc: Disabling bearer [ 513.015415][T12557] blktrace: Concurrent blktraces are not allowed on sg0 [ 513.102453][T12553] syzkaller0: entered promiscuous mode [ 513.108286][T12553] syzkaller0: entered allmulticast mode [ 513.360622][T12571] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1921'. [ 513.460062][T12573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.470379][T12573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.633745][T12578] netlink: 'syz.5.1923': attribute type 1 has an invalid length. [ 517.704305][T12563] tipc: Enabling of bearer rejected, already enabled [ 517.723232][T12566] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1919'. [ 517.764431][T12578] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 517.909595][T12579] veth3: entered promiscuous mode [ 518.117767][T12592] ALSA: mixer_oss: invalid OSS volume 'ـD̨qbc' [ 518.134265][T12592] ALSA: mixer_oss: invalid OSS volume 'e"p=@' [ 518.141236][T12592] ALSA: mixer_oss: invalid OSS volume 'p-`j*OezoW7[M_mbw)' [ 518.153739][T12592] ALSA: mixer_oss: invalid OSS volume '*2(2"`7*>Z(?K' [ 518.163309][T12592] ALSA: mixer_oss: invalid OSS volume '7_1Q' [ 518.170743][T12592] ALSA: mixer_oss: invalid OSS volume '' [ 518.182350][T12592] ALSA: mixer_oss: invalid OSS volume '"ׇbY;.*̤c\B' [ 518.191182][T12592] ALSA: mixer_oss: invalid OSS volume '>EUR6S{)ZF]' [ 518.202099][T12592] ALSA: mixer_oss: invalid OSS volume 'E;!i<' [ 518.209140][T12592] ALSA: mixer_oss: invalid OSS volume '5HaP =zWGNHBs' [ 518.218343][T12592] ALSA: mixer_oss: invalid OSS volume '$۾;ΘK>2' [ 518.250483][T12592] ALSA: mixer_oss: invalid OSS volume 'LjQ' [ 518.267068][T12592] ALSA: mixer_oss: invalid OSS volume '‹^COT\r†dxoj' [ 518.298888][T12592] ALSA: mixer_oss: invalid OSS volume 'hRi@!lWGi cF~"' [ 518.321258][T12592] ALSA: mixer_oss: invalid OSS volume 'eQ͔|wвGxѢ' [ 518.333145][T12592] ALSA: mixer_oss: invalid OSS volume 'xwbJ–$ܡXwTQMa' [ 518.343290][T12592] ALSA: mixer_oss: invalid OSS volume '.I+l_$Ԧ' [ 518.350517][T12592] ALSA: mixer_oss: invalid OSS volume 'f5_D!v2/B#}?' [ 518.360543][T12592] ALSA: mixer_oss: invalid OSS volume '"d|F̟?% +i' [ 518.370000][T12592] ALSA: mixer_oss: invalid OSS volume '9i/\p}l@@M^6A]_' [ 518.380856][T12592] ALSA: mixer_oss: invalid OSS volume 'є_nK8 /UJ27n' [ 518.390164][T12592] ALSA: mixer_oss: invalid OSS volume '`r&O#csY3ka' [ 518.408173][T12592] ALSA: mixer_oss: invalid OSS volume 'r((M4SB_<<7' [ 518.424691][T12592] ALSA: mixer_oss: invalid OSS volume 'yIVւq^x' [ 518.452596][T12592] ALSA: mixer_oss: invalid OSS volume '黖u쥚E$;ýs^' [ 518.464326][T12592] ALSA: mixer_oss: invalid OSS volume 'eE0zl9'HS-dv' [ 518.473233][T12592] ALSA: mixer_oss: invalid OSS volume '3PBLx%8HX9){EiNP' [ 518.939201][ T31] audit: type=1326 audit(1785297089.577:2300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12600 comm="syz.6.1929" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a2719de99 code=0x7ffc0000 [ 518.946274][T10679] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 518.964172][T12592] ALSA: mixer_oss: invalid OSS volume 'gSZHkzCArѭh' [ 518.982287][T12592] ALSA: mixer_oss: invalid OSS volume '1q"/RLԕj\' [ 518.990011][ T31] audit: type=1326 audit(1785297089.577:2301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12600 comm="syz.6.1929" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7a2719de99 code=0x7ffc0000 [ 519.017946][T10679] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 519.030275][T10679] usb 6-1: Product: syz [ 519.037949][T10679] usb 6-1: Manufacturer: syz [ 519.066045][T12592] ALSA: mixer_oss: invalid OSS volume 'YE)}_`+{فQ' [ 519.069189][T10679] cdc_wdm 6-1:1.0: skipping garbage [ 519.075549][ C1] ip_tunnel_core: Dead loop on virtual device gre1 (net 44), fix it urgently! [ 519.085460][T10679] cdc_wdm 6-1:1.0: skipping garbage [ 519.096787][ T31] audit: type=1326 audit(1785297089.577:2302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12600 comm="syz.6.1929" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a2719de99 code=0x7ffc0000 [ 519.123219][T12592] ALSA: mixer_oss: invalid OSS volume '\gԿ3QRM%Hq²M' [ 519.124115][T10679] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 519.132563][T12592] ALSA: mixer_oss: invalid OSS volume 'Wꐎ1o.˖gbzjg8.%[' [ 519.147819][ T31] audit: type=1326 audit(1785297089.587:2303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12600 comm="syz.6.1929" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7a2715e6ce code=0x7ffc0000 [ 519.173095][T12592] ALSA: mixer_oss: invalid OSS volume 'd@EI' [ 519.173673][T10679] cdc_wdm 6-1:1.0: Unknown control protocol [ 519.180633][T12592] ALSA: mixer_oss: invalid OSS volume 'ЭXX׀a:S1M30n)' [ 519.200674][T12592] ALSA: mixer_oss: invalid OSS volume '<(Pv' [ 519.210039][T12592] ALSA: mixer_oss: invalid OSS volume 'K*Wq0-dΡ`tI1an1' [ 519.297744][T12592] ALSA: mixer_oss: invalid OSS volume '8.PJq_5F[4' [ 519.382652][T12592] ALSA: mixer_oss: invalid OSS volume 'q+Ɇ@&9oUv6p' [ 519.411549][T12592] ALSA: mixer_oss: invalid OSS volume '¾*:|?WjlRQd{mqF>aX' [ 519.420441][T12592] ALSA: mixer_oss: invalid OSS volume '!e\1|' [ 519.438545][T12592] ALSA: mixer_oss: invalid OSS volume 'lp=#vX0DhQ9hkz,-ynbD' [ 519.457768][T12592] ALSA: mixer_oss: invalid OSS volume 'S:gJtd4Ià]JMdI.9' [ 519.493680][T12592] ALSA: mixer_oss: invalid OSS volume 'K|`-uWs|¡' [ 519.507523][T12612] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 519.529808][T12592] ALSA: mixer_oss: invalid OSS volume '՗ɣ*1꨹EuUYQȼ(p' [ 519.557781][ T5633] Bluetooth: hci1: command 0x0406 tx timeout [ 519.591531][T12592] ALSA: mixer_oss: invalid OSS volume '<@Rl~' [ 519.612518][T12592] ALSA: mixer_oss: invalid OSS volume 'cSOi}nvEpkعD!' [ 519.647138][T10679] usb 6-1: USB disconnect, device number 12 [ 519.699638][T12592] ALSA: mixer_oss: invalid OSS volume '}2Dt]Maɹ'`_:1j' [ 519.845295][T12592] ALSA: mixer_oss: invalid OSS volume 'OJ0' [ 519.884301][T12592] ALSA: mixer_oss: invalid OSS volume 'vzqwCȀ%]cV2-c' [ 519.901682][T12592] ALSA: mixer_oss: invalid OSS volume '$;XhfOמ_@Ӂ?' [ 519.910636][T12592] ALSA: mixer_oss: invalid OSS volume 'Hȸ`kFAč:<' [ 519.950582][T12592] ALSA: mixer_oss: invalid OSS volume 'bSDR᫦UlO1%@V' [ 519.989867][T12592] ALSA: mixer_oss: invalid OSS volume 'aK/؄Njx :^'z'' [ 520.065557][T12592] ALSA: mixer_oss: invalid OSS volume '`w' [ 520.111191][T12592] ALSA: mixer_oss: invalid OSS volume '2_d[sa*Bq' [ 520.111491][T10679] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 520.306156][T10679] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 520.438188][T10679] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 520.520926][T10679] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 520.530900][T10679] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 520.545532][T10679] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 520.556204][T10679] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 520.567099][T10679] usb 6-1: Product: syz [ 520.573466][T10679] usb 6-1: Manufacturer: syz [ 520.595452][T10679] cdc_wdm 6-1:1.0: skipping garbage [ 520.613304][T10679] cdc_wdm 6-1:1.0: skipping garbage [ 520.621160][T10679] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 520.627982][T10679] cdc_wdm 6-1:1.0: Unknown control protocol [ 521.399517][ C1] wdm_int_callback: 160 callbacks suppressed [ 521.399535][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 521.412398][ C1] wdm_int_callback: 160 callbacks suppressed [ 521.412422][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 521.426518][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 521.433312][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 521.439656][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 521.446263][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 521.452903][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 521.459689][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 521.466450][ T5710] usb 6-1: USB disconnect, device number 13 [ 521.805225][T12645] tipc: Enabled bearer , priority 0 [ 521.823029][T12645] syzkaller0: entered promiscuous mode [ 521.837913][T12645] syzkaller0: entered allmulticast mode [ 521.888808][T12645] tipc: Resetting bearer [ 521.936112][T12642] tipc: Resetting bearer [ 521.965950][T12642] tipc: Disabling bearer [ 521.987409][T12650] syzkaller0: entered promiscuous mode [ 521.993356][T12650] syzkaller0: entered allmulticast mode [ 522.002374][ T64] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.012810][ T64] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.053282][T12650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.063509][T12650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.115114][T12650] tipc: Enabled bearer , priority 0 [ 522.127973][T12649] tipc: Resetting bearer [ 522.175877][T12653] binder: BINDER_SET_CONTEXT_MGR already set [ 522.183024][T12653] binder: 12652:12653 ioctl 4018620d 200000004a80 returned -16 [ 522.199410][T12649] tipc: Disabling bearer [ 522.519981][T12662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.556825][T12662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 523.114814][T12669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 523.141826][T12669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 523.437026][T12672] kvm: pic: non byte write [ 523.785069][T12676] tipc: Enabled bearer , priority 0 [ 523.809748][T12676] syzkaller0: entered promiscuous mode [ 523.830997][T12676] syzkaller0: entered allmulticast mode [ 523.947083][T12676] tipc: Resetting bearer [ 523.975131][T12675] tipc: Resetting bearer [ 524.044615][T12675] tipc: Disabling bearer [ 524.450040][T12686] syzkaller0: entered promiscuous mode [ 524.469545][T12686] syzkaller0: entered allmulticast mode [ 524.849809][T12695] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1956'. [ 525.002512][ T31] kauditd_printk_skb: 176 callbacks suppressed [ 525.002542][ T31] audit: type=1800 audit(1785297096.017:2480): pid=12699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1958" name="SYSV00000000" dev="tmpfs" ino=9 res=0 errno=0 [ 525.761782][T12705] syzkaller0: entered promiscuous mode [ 525.775465][T12705] syzkaller0: entered allmulticast mode [ 525.806751][T12708] syzkaller0: entered promiscuous mode [ 525.844711][T12708] syzkaller0: entered allmulticast mode [ 526.020323][T12711] netlink: 'syz.2.1962': attribute type 1 has an invalid length. [ 526.169413][T12718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1962'. [ 526.283795][T12718] bond2 (unregistering): Released all slaves [ 526.379706][T12726] tipc: Started in network mode [ 526.414195][ T31] audit: type=1326 audit(1785297097.427:2481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12721 comm="syz.4.1964" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017159de99 code=0x7ffc0000 [ 526.418586][T12726] tipc: Node identity ac14140f, cluster identity 4711 [ 526.453389][T12726] tipc: New replicast peer: 255.255.255.255 [ 526.460245][T12726] tipc: Enabled bearer , priority 10 [ 526.500341][ T31] audit: type=1326 audit(1785297097.457:2482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12721 comm="syz.4.1964" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017159de99 code=0x7ffc0000 [ 526.534109][ T31] audit: type=1326 audit(1785297097.457:2483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12721 comm="syz.4.1964" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f017159de99 code=0x7ffc0000 [ 526.561481][ T31] audit: type=1326 audit(1785297097.467:2484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12721 comm="syz.4.1964" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017159de99 code=0x7ffc0000 [ 526.664312][ T31] audit: type=1326 audit(1785297097.467:2485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12721 comm="syz.4.1964" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f017159de99 code=0x7ffc0000 [ 526.740514][ T31] audit: type=1326 audit(1785297097.467:2486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12721 comm="syz.4.1964" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017159de99 code=0x7ffc0000 [ 526.767546][ T5710] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 526.791907][ T31] audit: type=1326 audit(1785297097.467:2487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12721 comm="syz.4.1964" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017159de99 code=0x7ffc0000 [ 526.867004][T12738] ip_tunnel_core: Dead loop on virtual device gre1 (net 44), fix it urgently! [ 526.891782][ T31] audit: type=1326 audit(1785297097.467:2488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12721 comm="syz.4.1964" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f017159de99 code=0x7ffc0000 [ 526.955697][T12738] ip_tunnel_core: Dead loop on virtual device gre1 (net 44), fix it urgently! [ 526.970870][ T5710] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 526.989236][T12738] ip_tunnel_core: Dead loop on virtual device gre1 (net 44), fix it urgently! [ 527.006446][ T5710] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 527.021935][ T31] audit: type=1326 audit(1785297097.467:2489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12721 comm="syz.4.1964" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017159de99 code=0x7ffc0000 [ 527.054851][T12738] ip_tunnel_core: Dead loop on virtual device gre1 (net 44), fix it urgently! [ 527.075248][T12738] ip_tunnel_core: Dead loop on virtual device gre1 (net 44), fix it urgently! [ 527.091840][ T5710] usb 7-1: config 0 interface 0 has no altsetting 0 [ 527.147176][T12738] ip_tunnel_core: Dead loop on virtual device gre1 (net 44), fix it urgently! [ 527.166179][ T5710] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 527.175662][ T5710] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 527.183922][ T5710] usb 7-1: Product: syz [ 527.188214][ T5710] usb 7-1: Manufacturer: syz [ 527.195113][T12738] ip_tunnel_core: Dead loop on virtual device gre1 (net 44), fix it urgently! [ 527.209319][ T5710] usb 7-1: SerialNumber: syz [ 527.228135][ T5710] usb 7-1: config 0 descriptor?? [ 527.240365][T12738] ip_tunnel_core: Dead loop on virtual device gre1 (net 44), fix it urgently! [ 527.258853][ T5710] usb 7-1: selecting invalid altsetting 0 [ 527.287533][T12738] ip_tunnel_core: Dead loop on virtual device gre1 (net 44), fix it urgently! [ 527.319156][T12738] ip_tunnel_core: Dead loop on virtual device gre1 (net 44), fix it urgently! [ 527.587309][ T920] tipc: Node number set to 2886997007 [ 529.121577][ T5710] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 529.289946][T10679] usb 7-1: USB disconnect, device number 13 [ 529.291544][ T5710] usb 2-1: Using ep0 maxpacket: 32 [ 529.920240][ T5710] usb 2-1: unable to get BOS descriptor or descriptor too short [ 529.956865][ T5710] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 529.972087][ T5710] usb 2-1: can't read configurations, error -71 [ 530.321832][ T5727] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 530.369305][T12777] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1978'. [ 530.420023][T12777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 530.452356][T12777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 530.492201][ T5727] usb 6-1: Using ep0 maxpacket: 8 [ 530.515772][ T5727] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 530.545089][ T5727] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 530.559735][ T5727] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 530.570730][ T5727] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 530.586984][ T5727] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 530.598489][ T5727] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.826611][ T5727] usb 6-1: GET_CAPABILITIES returned 0 [ 530.836400][ T5727] usbtmc 6-1:16.0: can't read capabilities [ 531.061007][ T5688] usb 6-1: USB disconnect, device number 14 [ 531.143879][ T5710] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 531.311575][ T5710] usb 2-1: Using ep0 maxpacket: 16 [ 531.321900][ T31] kauditd_printk_skb: 67 callbacks suppressed [ 531.321920][ T31] audit: type=1326 audit(1785297102.337:2557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12786 comm="syz.2.1982" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1825b9de99 code=0x7ffc0000 [ 531.372765][ T5710] usb 2-1: config 0 has an invalid interface number: 68 but max is 0 [ 531.384358][ T5710] usb 2-1: config 0 has no interface number 0 [ 531.392633][ T5710] usb 2-1: config 0 interface 68 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 531.404051][ T31] audit: type=1326 audit(1785297102.337:2558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12786 comm="syz.2.1982" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f1825b9de99 code=0x7ffc0000 [ 531.449028][T12793] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 531.463973][ T5710] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 531.476370][ T5710] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.486063][ T31] audit: type=1326 audit(1785297102.337:2559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12786 comm="syz.2.1982" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1825b9de99 code=0x7ffc0000 [ 531.517325][ T5710] usb 2-1: Product: syz [ 531.528114][ T5710] usb 2-1: Manufacturer: syz [ 531.545119][ T5710] usb 2-1: SerialNumber: syz [ 531.579881][ T5710] usb 2-1: config 0 descriptor?? [ 531.594923][ T31] audit: type=1326 audit(1785297102.337:2560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12786 comm="syz.2.1982" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f1825b9de99 code=0x7ffc0000 [ 531.671513][ T5710] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 531.689934][ T31] audit: type=1326 audit(1785297102.337:2561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12786 comm="syz.2.1982" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1825b9de99 code=0x7ffc0000 [ 531.823275][ T31] audit: type=1326 audit(1785297102.337:2562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12786 comm="syz.2.1982" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1825b9de99 code=0x7ffc0000 [ 531.879027][ T31] audit: type=1326 audit(1785297102.337:2563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12786 comm="syz.2.1982" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1825b9de99 code=0x7ffc0000 [ 531.951652][ T31] audit: type=1326 audit(1785297102.337:2564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12786 comm="syz.2.1982" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1825b9de99 code=0x7ffc0000 [ 532.029065][T10831] usb 2-1: Failed to submit usb control message: -71 [ 532.036927][ T5710] usb 2-1: USB disconnect, device number 37 [ 532.061607][T10831] usb 2-1: unable to send the bmi data to the device: -71 [ 532.070519][ T31] audit: type=1326 audit(1785297102.337:2565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12786 comm="syz.2.1982" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1825b9de99 code=0x7ffc0000 [ 532.106638][T10831] usb 2-1: unable to get target info from device [ 532.121860][T10831] usb 2-1: could not get target info (-71) [ 532.138958][T10831] usb 2-1: could not probe fw (-71) [ 532.144796][ T31] audit: type=1326 audit(1785297102.337:2566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12786 comm="syz.2.1982" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1825b5e6ce code=0x7ffc0000 [ 532.543060][ T920] usb 6-1: new low-speed USB device number 15 using dummy_hcd [ 532.713939][ T920] usb 6-1: descriptor type invalid, skip [ 532.735507][ T920] usb 6-1: descriptor type invalid, skip [ 532.757784][ T920] usb 6-1: descriptor type invalid, skip [ 532.780651][T12806] netlink: 'syz.1.1987': attribute type 13 has an invalid length. [ 532.801522][ T920] usb 6-1: string descriptor 0 read error: -22 [ 532.815988][ T920] usb 6-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 532.850303][ T920] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.935390][ T920] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 532.970463][ T920] usb 6-1: MIDIStreaming interface descriptor not found [ 533.635428][ T5727] usb 6-1: USB disconnect, device number 15 [ 534.836188][T12842] syzkaller0: entered promiscuous mode [ 534.851801][T12842] syzkaller0: entered allmulticast mode [ 535.144246][T12848] syzkaller0: entered promiscuous mode [ 535.161438][T12848] syzkaller0: entered allmulticast mode [ 535.719028][T12857] syzkaller0: entered promiscuous mode [ 535.767682][T12857] syzkaller0: entered allmulticast mode [ 535.784496][T12859] net_ratelimit: 257 callbacks suppressed [ 535.784512][T12859] TC_ACT_REPEAT abuse ? [ 537.431586][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 537.777566][T12875] netlink: 'syz.4.2005': attribute type 1 has an invalid length. [ 537.879666][T12875] bond3: entered promiscuous mode [ 537.928597][T12875] bond3: entered allmulticast mode [ 537.935806][T12878] binder_alloc: 12876: binder_alloc_buf size 4096 failed, no address space [ 537.981144][T12880] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2005'. [ 538.005599][T12878] binder_alloc: allocated: 4096 (num: 1 largest: 4096), free: 0 (num: 0 largest: 0) [ 538.027087][T12875] 8021q: adding VLAN 0 to HW filter on device bond3 [ 538.127601][T12879] erspan1: entered allmulticast mode [ 538.183132][T12879] bond3: (slave erspan1): making interface the new active one [ 538.226420][T12879] erspan1: entered promiscuous mode [ 538.268945][T12879] bond3: (slave erspan1): Enslaving as an active interface with an up link [ 538.390048][T12880] bond3 (unregistering): (slave erspan1): Releasing active interface [ 538.421619][T12880] erspan1: left promiscuous mode [ 538.458477][T12880] bond3 (unregistering): Released all slaves [ 538.604712][T12884] syzkaller0: entered promiscuous mode [ 538.613295][T12884] syzkaller0: entered allmulticast mode [ 538.814235][T12892] syzkaller0: entered promiscuous mode [ 538.827734][T12892] syzkaller0: entered allmulticast mode [ 539.058658][T12894] syzkaller0: entered promiscuous mode [ 539.067684][T12894] syzkaller0: entered allmulticast mode [ 544.017915][T12929] syzkaller0: entered promiscuous mode [ 544.034332][T12929] syzkaller0: entered allmulticast mode [ 544.070351][T12935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 544.109090][T12935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.133085][T12935] misc userio: The device must be registered before sending interrupts [ 544.194021][T12934] syzkaller0: entered promiscuous mode [ 544.198280][T12939] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2019'. [ 544.231564][T12934] syzkaller0: entered allmulticast mode [ 544.400782][T12944] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 545.096451][T12960] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2029'. [ 545.134435][T12960] netlink: 'syz.1.2029': attribute type 1 has an invalid length. [ 545.344160][T10679] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 545.375702][T12959] loop7: detected capacity change from 16320 to 16383 [ 545.405482][T12968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.425824][T12966] tipc: Enabled bearer , priority 0 [ 545.434879][T12968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.447705][T12966] syzkaller0: entered promiscuous mode [ 545.468102][T12966] syzkaller0: entered allmulticast mode [ 545.543702][T12966] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 545.559380][T10679] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 545.567693][T12966] tipc: Resetting bearer [ 545.587553][T10679] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 545.604389][T12965] tipc: Resetting bearer [ 545.639348][T10679] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 545.659516][T12965] tipc: Disabling bearer [ 545.685748][T10679] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.727156][T10679] usb 7-1: config 0 descriptor?? [ 546.436528][T10679] usb 7-1: USB disconnect, device number 14 [ 546.592842][ T5622] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 546.761457][ T5622] usb 6-1: Using ep0 maxpacket: 32 [ 546.984687][T10679] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 547.184050][T10679] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 547.203572][T10679] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.217077][T10679] usb 2-1: Product: syz [ 547.222617][T10679] usb 2-1: Manufacturer: syz [ 547.229944][T10679] usb 2-1: SerialNumber: syz [ 547.428563][ T5622] usb 6-1: unable to get BOS descriptor or descriptor too short [ 547.461893][ T5622] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 547.476220][ T5622] usb 6-1: can't read configurations, error -71 [ 547.593817][T12996] syzkaller0: entered promiscuous mode [ 547.604417][T12996] syzkaller0: entered allmulticast mode [ 547.845594][T13004] syzkaller0: entered promiscuous mode [ 547.859519][T13004] syzkaller0: entered allmulticast mode [ 548.598544][T10679] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 548.630981][T10679] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 548.686978][T10679] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 548.715813][T10679] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 548.747847][T10679] usb 2-1: USB disconnect, device number 38 [ 548.759699][T13024] syzkaller0: entered promiscuous mode [ 548.784978][T13024] syzkaller0: entered allmulticast mode [ 548.967123][T13029] tipc: Enabled bearer , priority 0 [ 548.994105][T13029] syzkaller0: entered promiscuous mode [ 549.007273][T13029] syzkaller0: entered allmulticast mode [ 549.083360][T13029] tipc: Resetting bearer [ 549.121198][T13028] tipc: Resetting bearer [ 549.153028][T13028] tipc: Disabling bearer [ 549.179848][T13031] tc action pedit 'at' offset 4 out of bounds [ 549.417999][T13035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 549.473247][T13035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 549.625560][T13037] batadv0: entered promiscuous mode [ 549.672372][T13037] macsec2: entered promiscuous mode [ 549.687538][T13037] macsec2: entered allmulticast mode [ 549.695145][T13037] batadv0: entered allmulticast mode [ 549.707205][T13037] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 549.733801][T10679] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 549.911604][T10679] usb 6-1: Using ep0 maxpacket: 32 [ 550.076490][T13052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.106130][T13052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.167018][T13055] syzkaller0: entered promiscuous mode [ 550.192810][T13055] syzkaller0: entered allmulticast mode [ 550.332647][T10679] usb 6-1: unable to get BOS descriptor or descriptor too short [ 550.358218][T10679] usb 6-1: too many configurations: 80, using maximum allowed: 8 [ 550.366737][T13052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.380886][T10679] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 550.390020][T13052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.398765][T10679] usb 6-1: can't read configurations, error -71 [ 550.991500][ T5727] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 551.186027][ T5727] usb 7-1: config 2 has an invalid interface number: 43 but max is 0 [ 551.209258][ T5727] usb 7-1: config 2 has no interface number 0 [ 551.227255][ T5727] usb 7-1: config 2 interface 43 has no altsetting 0 [ 551.244225][ T5727] usb 7-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 551.271560][ T5727] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.300007][ T5727] usb 7-1: Product: syz [ 551.310634][ T5727] usb 7-1: Manufacturer: syz [ 551.321666][ T5727] usb 7-1: SerialNumber: syz [ 551.386015][T13072] syzkaller0: entered promiscuous mode [ 551.395110][T13072] syzkaller0: entered allmulticast mode [ 551.561804][ T5622] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 551.741481][ T5622] usb 2-1: Using ep0 maxpacket: 32 [ 552.019286][ T5727] ums-usbat 7-1:2.43: USB Mass Storage device detected [ 552.079764][ T5727] ums-usbat 7-1:2.43: Quirks match for vid 0781 pid 0005: 1 [ 552.149996][ T5727] usb 7-1: USB disconnect, device number 15 [ 552.288175][ T5622] usb 2-1: unable to get BOS descriptor or descriptor too short [ 552.315591][ T5622] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 552.335625][ T5622] usb 2-1: can't read configurations, error -71 [ 553.027640][T13098] tc action pedit 'at' offset 5 out of bounds [ 553.035662][T13098] tc action pedit 'at' offset 5 out of bounds [ 553.042042][T13098] tc action pedit 'at' offset 5 out of bounds [ 553.048293][T13098] tc action pedit 'at' offset 5 out of bounds [ 553.054498][T13098] tc action pedit 'at' offset 5 out of bounds [ 553.060674][T13098] tc action pedit 'at' offset 5 out of bounds [ 553.066890][T13098] tc action pedit 'at' offset 5 out of bounds [ 553.073367][T13098] tc action pedit 'at' offset 5 out of bounds [ 553.079543][T13098] tc action pedit 'at' offset 5 out of bounds [ 553.085694][T13098] 0: reclassify loop, rule prio 0, protocol 800 [ 553.759109][ T31] kauditd_printk_skb: 31 callbacks suppressed [ 553.759130][ T31] audit: type=1800 audit(1785297124.767:2598): pid=13106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2074" name="/" dev="fuse" ino=1 res=0 errno=0 [ 554.255619][T13114] tc action pedit offset must be on 32 bit boundaries [ 554.264564][T13114] tc action pedit offset must be on 32 bit boundaries [ 554.271546][T13114] tc action pedit offset must be on 32 bit boundaries [ 554.278379][T13114] tc action pedit offset must be on 32 bit boundaries [ 554.285609][T13114] tc action pedit offset must be on 32 bit boundaries [ 554.292462][T13114] tc action pedit offset must be on 32 bit boundaries [ 554.299288][T13114] tc action pedit offset must be on 32 bit boundaries [ 554.306097][T13114] tc action pedit offset must be on 32 bit boundaries [ 554.312935][T13114] tc action pedit offset must be on 32 bit boundaries [ 554.319819][T13114] tc action pedit offset must be on 32 bit boundaries [ 554.326695][T13114] 0: reclassify loop, rule prio 0, protocol 800 [ 554.829625][T13126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.842874][T13126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.851943][T13123] tc action pedit offset 132 out of bounds [ 554.859898][T13123] tc action pedit offset 132 out of bounds [ 554.865989][T13123] tc action pedit offset 132 out of bounds [ 554.871962][T13123] tc action pedit offset 132 out of bounds [ 554.877893][T13123] tc action pedit offset 132 out of bounds [ 554.883760][T13123] tc action pedit offset 132 out of bounds [ 554.889601][T13123] tc action pedit offset 132 out of bounds [ 554.895551][T13123] tc action pedit offset 132 out of bounds [ 554.901501][T13123] tc action pedit offset 132 out of bounds [ 554.907449][T13123] tc action pedit offset 132 out of bounds [ 554.913338][T13123] 0: reclassify loop, rule prio 0, protocol 800 [ 555.235656][T13129] syzkaller0: entered promiscuous mode [ 555.248404][T13129] syzkaller0: entered allmulticast mode [ 555.447444][T13134] macvlan2: entered allmulticast mode [ 555.460414][T13134] dummy0: entered allmulticast mode [ 555.472425][T13134] dummy0: entered promiscuous mode [ 555.488140][T13134] team0: Port device macvlan2 added [ 555.618780][T13140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.644995][T13140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.496787][T13160] syzkaller0: entered promiscuous mode [ 556.524046][T13161] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2089'. [ 556.538127][T13160] syzkaller0: entered allmulticast mode [ 557.436453][T13177] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2094'. [ 557.730179][T13177] ipvlan3: entered promiscuous mode [ 557.765877][T13177] ipvlan3: entered allmulticast mode [ 557.808505][T13177] dummy0: entered allmulticast mode [ 557.882487][ T5622] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 558.061471][ T5622] usb 2-1: Using ep0 maxpacket: 32 [ 558.078834][ T5622] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 558.111531][ T5622] usb 2-1: config 0 has no interface number 0 [ 558.144771][ T5622] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 558.204352][ T5622] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.225464][ T5622] usb 2-1: Product: syz [ 558.256203][ T5622] usb 2-1: Manufacturer: syz [ 558.269620][ T5622] usb 2-1: SerialNumber: syz [ 558.289007][ T5622] usb 2-1: config 0 descriptor?? [ 558.721053][ T5622] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 558.762167][ T5622] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 559.802583][T13198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.833526][T13198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.600961][T13204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.649584][T13204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.709657][T13204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.737932][T13204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.757335][T13204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.787372][T13204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.827918][T13204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.856539][T13204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.898271][T13204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.935455][T13204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 561.225809][T13209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 561.237576][T13209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 561.850434][ T5622] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000000: -71 [ 561.876211][ T5622] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 561.909623][ T5622] usb 2-1: USB disconnect, device number 41 [ 563.535471][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.542779][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.635697][T13231] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2108'. [ 563.877209][T13233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.898523][T13233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 565.006322][T13256] tipc: Enabled bearer , priority 0 [ 565.056359][T13256] syzkaller0: entered promiscuous mode [ 565.075856][T13256] syzkaller0: entered allmulticast mode [ 565.132874][T13254] mac80211_hwsim hwsim15 wlan0: entered promiscuous mode [ 565.252066][T13258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 565.276842][T13256] tipc: Resetting bearer [ 565.306045][T13255] tipc: Resetting bearer [ 565.393230][T13255] tipc: Disabling bearer [ 565.487441][T13262] mmap: syz.4.2116 (13262) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 565.853451][ T5727] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 566.035264][ T5727] usb 2-1: config index 0 descriptor too short (expected 65183, got 72) [ 566.067172][ T5727] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 566.089952][ T5727] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.123657][ T5727] usb 2-1: Product: syz [ 566.142286][ T5727] usb 2-1: Manufacturer: syz [ 566.159803][ T5727] usb 2-1: SerialNumber: syz [ 566.171726][ T5622] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 566.385055][ T5622] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 566.387349][ T920] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 566.440647][ T5622] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 566.473748][ T5622] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 566.499484][ T5622] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.523665][ T5622] usb 7-1: config 0 descriptor?? [ 566.676229][T13266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.707178][T13266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.758800][T13266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.813680][T13266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.868373][T13266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.910260][T13266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.960919][T13266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.997141][T13266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.054453][ T5622] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0 [ 567.063216][T13277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.089632][ T5622] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0 [ 567.103790][ T5622] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0 [ 567.114292][ T5622] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0 [ 567.135251][T13266] netlink: 11870 bytes leftover after parsing attributes in process `syz.1.2119'. [ 567.168599][T13277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.179526][ T5622] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0 [ 567.191735][ T5622] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0 [ 567.200061][ T5622] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0 [ 567.225968][ T5622] cp2112 0003:10C4:EA90.0010: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0 [ 567.313065][ T5622] cp2112 0003:10C4:EA90.0010: Part Number: 0x00 Device Version: 0x00 [ 567.611714][ T920] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 567.627749][ T920] ath9k_htc: Failed to initialize the device [ 567.745883][ T5622] cp2112 0003:10C4:EA90.0010: error setting SMBus config [ 567.769877][ T5622] cp2112 0003:10C4:EA90.0010: probe with driver cp2112 failed with error -71 [ 567.778005][ T920] usb 2-1: ath9k_htc: USB layer deinitialized [ 567.885858][ T5622] usb 7-1: USB disconnect, device number 16 [ 567.934084][ T5727] usb 2-1: USB disconnect, device number 42 [ 568.007059][T13284] tipc: Enabling of bearer rejected, already enabled [ 568.021248][T13283] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2125'. [ 568.047904][T13284] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2124'. [ 568.217830][T13287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.256681][T13287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.441474][ T5727] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 568.496515][ T31] audit: type=1326 audit(1785297139.507:2599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13286 comm="syz.2.2126" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1825b9de99 code=0x0 [ 568.590308][ T31] audit: type=1800 audit(1785297139.597:2600): pid=13295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2129" name="SYSV00000000" dev="tmpfs" ino=12 res=0 errno=0 [ 568.617351][T13293] syzkaller0: entered promiscuous mode [ 568.640486][T13293] syzkaller0: entered allmulticast mode [ 568.662463][ T5727] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 568.702913][ T5727] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 568.737436][T13293] tipc: Enabled bearer , priority 0 [ 568.759168][ T5727] usb 2-1: config 0 interface 0 has no altsetting 0 [ 568.793511][T13293] tipc: Resetting bearer [ 568.809826][ T5727] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 568.839782][ T5727] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 568.864729][T13292] tipc: Resetting bearer [ 568.888480][ T5727] usb 2-1: Product: syz [ 568.913079][ T5727] usb 2-1: Manufacturer: syz [ 568.942986][ T5727] usb 2-1: SerialNumber: syz [ 568.962241][T13292] tipc: Disabling bearer [ 568.969029][ T5727] usb 2-1: config 0 descriptor?? [ 569.012559][ T5727] usb 2-1: selecting invalid altsetting 0 [ 569.636982][T13309] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2130'. [ 569.952024][ T5727] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 569.978395][T13314] syzkaller0: entered promiscuous mode [ 569.989315][T13314] syzkaller0: entered allmulticast mode [ 570.009706][T13314] tipc: Enabled bearer , priority 0 [ 570.049573][T13314] tipc: Resetting bearer [ 570.076137][T13313] tipc: Resetting bearer [ 570.118751][ T5727] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 570.153980][ T5727] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 570.165822][T13313] tipc: Disabling bearer [ 570.190390][ T5727] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 570.247134][ T5727] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 570.271504][ T5727] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 570.288731][ T5727] usb 6-1: Manufacturer: syz [ 570.318622][ T5727] usb 6-1: config 0 descriptor?? [ 570.768501][ T5727] appleir 0003:05AC:8243.0011: unknown main item tag 0x0 [ 570.849449][ T5727] appleir 0003:05AC:8243.0011: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 571.001207][T13281] snd-usb-audio 2-1:0.0: Runtime PM usage count underflow! [ 571.011491][ T5622] usb 2-1: USB disconnect, device number 43 [ 572.261062][ T31] audit: type=1800 audit(1785297143.267:2601): pid=13348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2142" name="SYSV00000000" dev="tmpfs" ino=10 res=0 errno=0 [ 572.713288][ T31] audit: type=1326 audit(1785297143.727:2602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13352 comm="syz.4.2143" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f017159de99 code=0x0 [ 572.800032][T13357] netlink: 'syz.4.2143': attribute type 10 has an invalid length. [ 572.814499][T13357] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 572.836452][ T5622] usb 6-1: USB disconnect, device number 20 [ 572.856766][T13357] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 572.925807][T13361] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 572.968744][T13361] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 573.061577][T13361] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 573.180283][T13361] bond0 (unregistering): Released all slaves [ 573.472042][T13368] syzkaller0: entered promiscuous mode [ 573.490765][T13368] syzkaller0: entered allmulticast mode [ 573.765977][T13372] tipc: Enabling of bearer rejected, already enabled [ 573.834740][T13372] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2148'. [ 574.158402][ T5622] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 574.338156][ T5622] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 574.406254][ T5622] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 574.461486][ T5622] usb 2-1: config 0 interface 0 has no altsetting 0 [ 574.520799][ T5622] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 574.537467][ T5622] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 574.575548][ T5622] usb 2-1: Product: syz [ 574.603291][ T5622] usb 2-1: Manufacturer: syz [ 574.627778][ T5622] usb 2-1: SerialNumber: syz [ 574.654952][ T5622] usb 2-1: config 0 descriptor?? [ 574.704607][ T5622] usb 2-1: selecting invalid altsetting 0 [ 574.835684][T13392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 574.896162][T13392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.987609][T13392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.044323][T13392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 575.138111][T13397] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2154'. [ 575.411567][ T5688] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 575.583716][ T5688] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 575.602499][ T5688] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 575.613086][ T5688] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 575.628110][ T5688] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 575.638126][ T5688] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 575.646921][ T5688] usb 7-1: Manufacturer: syz [ 575.663989][ T5688] usb 7-1: config 0 descriptor?? [ 575.871660][T13401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.888564][T13401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.091178][ T5688] appleir 0003:05AC:8243.0012: unknown main item tag 0x0 [ 576.167573][ T5688] appleir 0003:05AC:8243.0012: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 576.784691][ T31] audit: type=1800 audit(1785297147.797:2603): pid=13410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2157" name="SYSV00000000" dev="tmpfs" ino=13 res=0 errno=0 [ 576.947026][ T5727] usb 2-1: USB disconnect, device number 44 [ 577.631511][ T5727] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 577.794564][ T5727] usb 6-1: config 0 interface 0 has no altsetting 0 [ 577.825341][ T5727] usb 6-1: New USB device found, idVendor=0853, idProduct=0146, bcdDevice= 0.00 [ 577.841016][ T5727] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.889805][ T5727] usb 6-1: config 0 descriptor?? [ 578.083664][T13424] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2161'. [ 578.124681][T13428] [ 578.125560][ T5622] usb 7-1: USB disconnect, device number 17 [ 578.127075][T13428] ============================================ [ 578.139273][T13428] WARNING: possible recursive locking detected [ 578.145545][T13428] syzkaller #0 Tainted: G L [ 578.151643][T13428] -------------------------------------------- [ 578.157957][T13428] syz.2.2162/13428 is trying to acquire lock: [ 578.164220][T13428] ffffffff8f62ac50 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0xe9/0xec0 [ 578.174528][T13428] [ 578.174528][T13428] but task is already holding lock: [ 578.181911][T13428] ffffffff8f62ac50 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0xe9/0xec0 [ 578.192056][T13428] [ 578.192056][T13428] other info that might help us debug this: [ 578.200402][T13428] Possible unsafe locking scenario: [ 578.200402][T13428] [ 578.207952][T13428] CPU0 [ 578.211246][T13428] ---- [ 578.214540][T13428] lock(qp_broker_list.mutex); [ 578.219423][T13428] lock(qp_broker_list.mutex); [ 578.224291][T13428] [ 578.224291][T13428] *** DEADLOCK *** [ 578.224291][T13428] [ 578.232475][T13428] May be due to missing lock nesting notation [ 578.232475][T13428] [ 578.241122][T13428] 1 lock held by syz.2.2162/13428: [ 578.246383][T13428] #0: ffffffff8f62ac50 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0xe9/0xec0 [ 578.256952][T13428] [ 578.256952][T13428] stack backtrace: [ 578.262880][T13428] CPU: 0 UID: 0 PID: 13428 Comm: syz.2.2162 Tainted: G L syzkaller #0 PREEMPT(full) [ 578.262901][T13428] Tainted: [L]=SOFTLOCKUP [ 578.262906][T13428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 578.262914][T13428] Call Trace: [ 578.262964][T13428] [ 578.262987][T13428] dump_stack_lvl+0xe8/0x150 [ 578.263048][T13428] print_deadlock_bug+0x279/0x290 [ 578.263077][T13428] __lock_acquire+0x24df/0x2cf0 [ 578.263095][T13428] ? kernel_text_address+0xa5/0xe0 [ 578.263175][T13428] ? __kernel_text_address+0xd/0x30 [ 578.263187][T13428] ? stack_depot_save_flags+0x28b/0x800 [ 578.263238][T13428] ? lock_acquire+0x106/0x350 [ 578.263255][T13428] ? vmci_qp_broker_detach+0xe9/0xec0 [ 578.263267][T13428] lock_acquire+0x106/0x350 [ 578.263283][T13428] ? vmci_qp_broker_detach+0xe9/0xec0 [ 578.263298][T13428] __mutex_lock+0x19d/0x1550 [ 578.263451][T13428] ? vmci_qp_broker_detach+0xe9/0xec0 [ 578.263462][T13428] ? kasan_save_track+0x3e/0x80 [ 578.263504][T13428] ? kasan_save_free_info+0x40/0x50 [ 578.263516][T13428] ? __kasan_slab_free+0x5c/0x80 [ 578.263532][T13428] ? kfree+0x1c5/0x640 [ 578.263550][T13428] ? vmci_ctx_put+0x5ba/0xc00 [ 578.263591][T13428] ? vmci_ctx_enqueue_datagram+0x3c3/0x440 [ 578.263605][T13428] ? vmci_datagram_dispatch+0x450/0xc80 [ 578.263619][T13428] ? vmci_qp_broker_detach+0x887/0xec0 [ 578.263629][T13428] ? vmci_ctx_put+0x619/0xc00 [ 578.263642][T13428] ? vmci_host_close+0x8e/0x140 [ 578.263658][T13428] ? __fput+0x418/0xa50 [ 578.263686][T13428] ? exit_to_user_mode_loop+0x1fa/0x730 [ 578.263717][T13428] ? do_syscall_64+0x353/0x580 [ 578.263744][T13428] ? vmci_qp_broker_detach+0xe9/0xec0 [ 578.263758][T13428] ? __pfx___mutex_lock+0x10/0x10 [ 578.263785][T13428] vmci_qp_broker_detach+0xe9/0xec0 [ 578.263802][T13428] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 578.263813][T13428] ? kasan_quarantine_put+0xbb/0x1f0 [ 578.263830][T13428] ? lockdep_hardirqs_on+0x7a/0x110 [ 578.263859][T13428] ? kfree+0x1c5/0x640 [ 578.263871][T13428] ? vmci_ctx_put+0x5ba/0xc00 [ 578.263883][T13428] ? vmci_ctx_put+0x13e/0xc00 [ 578.263896][T13428] vmci_ctx_put+0x619/0xc00 [ 578.263909][T13428] ? vmci_ctx_put+0x13e/0xc00 [ 578.263922][T13428] ? __pfx_vmci_ctx_put+0x10/0x10 [ 578.263935][T13428] ? preempt_schedule_thunk+0x16/0x40 [ 578.263949][T13428] ? preempt_schedule_common+0x82/0xd0 [ 578.263960][T13428] ? preempt_schedule_thunk+0x16/0x40 [ 578.263974][T13428] vmci_ctx_enqueue_datagram+0x3c3/0x440 [ 578.263990][T13428] vmci_datagram_dispatch+0x450/0xc80 [ 578.264006][T13428] ? __pfx_vmci_datagram_dispatch+0x10/0x10 [ 578.264023][T13428] vmci_qp_broker_detach+0x887/0xec0 [ 578.264036][T13428] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 578.264046][T13428] ? kasan_quarantine_put+0xbb/0x1f0 [ 578.264062][T13428] ? kfree+0x1c5/0x640 [ 578.264074][T13428] ? vmci_ctx_put+0x5ba/0xc00 [ 578.264086][T13428] ? vmci_ctx_put+0x13e/0xc00 [ 578.264099][T13428] vmci_ctx_put+0x619/0xc00 [ 578.264111][T13428] ? vmci_ctx_put+0x13e/0xc00 [ 578.264124][T13428] ? __pfx_vmci_ctx_put+0x10/0x10 [ 578.264141][T13428] vmci_host_close+0x8e/0x140 [ 578.264158][T13428] ? __pfx_vmci_host_close+0x10/0x10 [ 578.264174][T13428] __fput+0x418/0xa50 [ 578.264191][T13428] task_work_run+0x1d9/0x270 [ 578.264202][T13428] ? __pfx_task_work_run+0x10/0x10 [ 578.264214][T13428] exit_to_user_mode_loop+0x1fa/0x730 [ 578.264229][T13428] ? rcu_is_watching+0x15/0xb0 [ 578.264240][T13428] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.264284][T13428] do_syscall_64+0x353/0x580 [ 578.264296][T13428] ? trace_irq_disable+0x3b/0x140 [ 578.264330][T13428] ? clear_bhb_loop+0x40/0x90 [ 578.264342][T13428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.264354][T13428] RIP: 0033:0x7f1825b9de99 [ 578.264385][T13428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 578.264395][T13428] RSP: 002b:00007f1826a01028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 578.264435][T13428] RAX: 0000000000000000 RBX: 00007f1825e26090 RCX: 00007f1825b9de99 [ 578.264449][T13428] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000007 [ 578.264460][T13428] RBP: 00007f1825c33eaf R08: 0000000000000000 R09: 0000000000000000 [ 578.264471][T13428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 578.264484][T13428] R13: 00007f1825e26128 R14: 00007f1825e26090 R15: 00007f1825f4fa48 [ 578.264503][T13428] [ 578.777206][T13424] bridge1: port 1(dummy0) entered blocking state [ 578.783721][T13424] bridge1: port 1(dummy0) entered disabled state [ 578.790388][T13424] dummy0: entered allmulticast mode [ 578.796635][T13424] dummy0: entered promiscuous mode [ 578.807050][T13424] netlink: 'syz.6.2161': attribute type 10 has an invalid length. [ 578.815375][T13424] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2161'. [ 578.825731][T13424] bridge1: port 1(dummy0) entered blocking state [ 578.832463][T13424] bridge1: port 1(dummy0) entered forwarding state [ 578.839726][T13424] dummy0: left allmulticast mode [ 578.845303][T13424] bridge1: port 1(dummy0) entered disabled state [ 579.538969][ T5727] usbhid 6-1:0.0: can't add hid device: -71 [ 579.548630][ T5727] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 579.572474][ T5727] usb 6-1: USB disconnect, device number 21