last executing test programs: 43m50.387007067s ago: executing program 3 (id=287): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) futex_waitv(&(0x7f0000002d40), 0x0, 0x0, &(0x7f0000003680), 0x1) 43m50.191344931s ago: executing program 3 (id=289): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r1 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x2000000c}) write$P9_RSTATu(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="3b0200007d00000005fa00000000fe00000200000000000000000000000000000000000000000000000000000000000000001f0004"], 0x23b) 43m50.086572251s ago: executing program 3 (id=291): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xe) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000065c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="01"], 0x18, 0x44000}}], 0x1, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r1, 0x40047457, &(0x7f0000000000)=0x69a32cb2) 43m49.864164884s ago: executing program 3 (id=293): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x20d036, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x104000, 0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r4, 0x0, 0x19, 0x95, &(0x7f00000000c0)="e478b1fc2ae528eae6055c8c3a789bce601be870cbbd1ee895", &(0x7f0000000140)=""/149, 0x4, 0x0, 0x5b, 0xd1, &(0x7f0000000200)="b88a1df5826966cb59fc6f53039f1570ca3f4c3830dc8ad2428053c329329f99ace3a4cec8979df6248dd8e88919fb8e42f9707415bd9a443fb6410e1f4cd950cf10641a2f02eefd459ac4dca838655f9990346285ae552544a64b", &(0x7f0000000380)="0bdeaa8b5d7963f52909cd14f78d2ffa9350626236ed46305a9af610e0f099ae82cc91922eaea7edb7246505b9df56a5659020ee41771a53646dd88bb8a8ebdc620d2297377534df8e263b9ca96b28f7a73d5afb2f40a2737cde53b749ad01e1ed505ff6ce98707e249ef9b1ca003447d9b336bca9003905f73320f6ba9d3f1f96e083b63162d1ef6ad6f5e0a8247ef4c30c9852a55bdab0dc0080dc09405d0cf58f8a37036077f847f44e3a29caeb66670c98851a030a5f05140b280d9069c2334e2026249635f835f1938505e0662120", 0x0, 0x0, 0x4}, 0x50) ioctl$TCXONC(r3, 0x540a, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0xa00, 0x0) ioctl$TCSETAW(r5, 0x5407, &(0x7f0000000100)={0x7c, 0x23ff, 0x505, 0xb, 0xd}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x80000007, 0x1}, 0x1c) recvmmsg$unix(r7, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000005c0)=""/227, 0xe3}], 0x1}}], 0x1, 0x40000000, 0x0) r8 = socket$inet6(0xa, 0x5, 0x80000001) sendmmsg(r8, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffcf}}, {{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000800)="08ca7da8701e912631f72fd448ec387138e6352361a65b435c34724e02051ddad47c504974bad8421750b182cc0534da09dc368812ae461c5b6d57f9d18539c1a2efa63fa812bc3ffc8da8746cb3a6474c3c88ab8906c8252c48b06dbd820d11d17a5ed9dcd9fac4bf2b647bcff10bbf7adc891c9a6a007121e7062790bfa46bd76ff51fdb2335ab4357a403fbc4971b1d94f7378ef6b7ab494d6a03b2b9c8afee005c225a3daea0288c11ad772c344fc51ec4dfd21d2dbdcbbafd9bdca50808c6bf54f46750ce17973e430971a164abff2cab3fde2b9e10fa6c429063e2ec4ee59439f1148e68d11757a58922847b7eef2f2943d6f1d5789266793a73bb9e11fda60fef263a9e6ee93ee1f856ac0e48a0281757f93f2ff54161f91ed28e86fc4ee11e9b82fa3790a5e1e3c87347ac6813674e5b271f4635bc7a45db8b9a192c6839d6cad874117c0aa29db193c89619b23c9e290b3aa5eaeea37a6099d2b95f27a3e2ed3baaf40a9d469b15da960dc5babc56c1e7fe70313af40bf2a20b8db42ba3d43059f56630b2c45a8306e377ee18d951e2703a190444b3d5c8a2f575621c52dbd0ebc5b261ab83536137d3af824c2e20f303def3e002fa7b7b836c0cdd73441387eb6b70d218a56bd99c5c82124824cb4a83f188d2770f368bfebfdc8d76eb92134b77b1b91404cb48a56e0afadf4f566d3f34b48c674c50db7bb609805e56504945ae94a68e28e5920802e68f05d725eff181b3f41c6242ed9498e6c52ce6ab8a6bec4319cf6bf9820eb02017972a84e2c407d95e59a43124c29e74b15fb6a4934efae3e51759f7dcecc4af36225cd1cd6fd6e93aa068b30b099b599fe42fe50e489c60d7e11d78c34cd144f1465dc6439496ed513f0f959e1af871e2420a05cb7cbf408781eb76d8f7d6e69790612be6de9f12c19d09bd2c0840a51addbf18f9f52c7a1591ec28427c493dc29fa4fd64d7b3ebdfa95cf011e344e581fdab08fcccfda3b30c66764b6c8f2c87b9fd60adf2ecdd91b91fcdfb9940c75a823e44a76db99ccb291b12324f95dbf9216d23210a0322fa077e077e016d1df8fa3b71b1aaeed5dd1978f9c707af06cf9e23352367726b5f618cc4c137100aad4f5acc8c40bf984a325f6cb38ff844e5f1d7268ab50afd3d8611fb5d64faff06acd01c98712dd8f0b5ff2d53a93d1c64e189f97a852372764c90936a978ad6addc324bf8070d44d27882610ab817e4fac7fb86de4d7792a239db3c4a52d3ce92d365f9493ecb27923322d808e6c660844990662ceac3f4fd02c7c6027210024ed0672c045bf01c1d633bbb51f49f5a57567be924339a1668b90c4cc21435a865658192380fccbd88264571cba7f10a9f3d536ceffa3d2fdda717581856fa44572a8d2dbaa3581c8f5514a2d4df102ee033d321b4e186bee17fffe4b528c5f7f74bfc3e0ee6bd65ce7d5ae03f51b1f06a271a2f748f9ecfd7d894f47d34148c7a14b1ab218ed7458304cc66601eba2353d21ba4507dc992105969ea6a736b86bad184eb720167c41141515aa0cb6ef4de55023e5bcd26ba403d06daa90ab3bd7bba31d23f2919c9019e31229b6d7e1adc8501223d79ba026135ba6ff6a29edc10e07386f2cb9090620d325d4afb72ea65bd5748be511829803765479aa65a78c03bee24b427cda80c56faa4b3c7224725aba1349bda452abd861747c5ec4e3f3e873b8931c19471f88631cf99945827efc32cc526cffc1dfc98bbe38cc319d34caa431fe9ae3bc5b1c91eef50ef3d91d5b956740c5ab61aba991341ab14852a0c9f4ccd16e05b9c4fcda74161fe6588969c486115c1d29c0e2b6e6bc3833632ee153016fc713251db3e4edf610c619b4677745f9d0d6b69fea3d2c8ffa1e514a69116c212091a94bb2c6c9c3a004f65a728f4a5f5762462cb9049d05b0ee967ef1ac6b3e84aa203d3b937cde25910825c9ef0543ab294782a8e62f35aac772b6a36518d63fd120534c0a16effefe684cee807fe3bfcc8cd17740890c145fa789736d9f0b9ec2a09df8065b8f0d8c3be59493469a9d89a44f49ce9643c3e9dd02358f79a3ca91f18a23fe722ffdcd048073a0d1ad6a85336aad3c37c226c62ebfa55bc7603f2f68e511e71c3c953249d1cdd106f09aca338c8788f216161f28b613ce65bd0fc77d37df55464354a6edc8188887001b1f7c4565c1a695596a7caed182e8170e17f5ac2539c3a13b48ed67041821f1139a010f8f29767365b51b9c6d4a42f03f629fbbf1345a6a710d0c5477ab2caa498c7fb13ba1022c5fff847b0a466028cb3dbf3df257089220cff538e09493a4387197adc67adb402f6e58a960e4911e311f7187df7f4c31114d0cbfd85dba10b2c8f225f9eab0ce26a75a15552d37900a3c0da0f69cea95b2f3ad9cd997535bedfa66a46e55a0ec2a3963e798b1c7492c2a19be226bf85d1bb587a55247a3413f7ab804d5dafdec49eb9e0297ac000e56739b543dd300e779457c8a8529d7bc71c1c77c6b6650b6a24cce5d80b01c596d755af8fc21d43e884a817360371813515273459953c1951848aad64bc11b9319523ef4a882cb3fdaebd978e1add55516dff7bf37d3729fd2c88da80b3606bce4dff51d917e2e75673ed26731c48b189b910e395d254f0ba2c3adc659447c9abff3517c9bbfb72212a878ee3f9067cc35e4fea1e4e91340c593fed69bf2046ac76d8f4b82a470fc163912c010b6de71e4f7bf6bb4fbff464f729765c1448edab26c14b4ecb3be50c32cf1cc94af7c9f024058c6a593929b8459729f4944d5d7f61e379237db33c67d225f2dd69e05726263bcc2a451a1a3149e7c3b1a6b2dd3226fde041efccaecdab2387c83179fcfcad3550294c6ef253720deefe81425667f125fbf72b6f56e42ee2262f0d74ab9d301b4a4c78265a818654cb6f2e9dad2a552dc97441b73cf621cd91e772d6e86285cccec20d044e205f99b7ec4a90e14747fc509a6441017c22caa5b891236a187286c7ca6938444848ff4e62597718ad008d8ed9e9378a3b2909bc64ee05487aa2c48b73e4245109c9f575a7127b775d43b9123ebb88a5e89b2faf2febdf317f4c87d1e74f927d6b121d5700a53a71dd484b3a0900f5660434bd71f00fdeec867322d4055fee00e4047980c12f4c847ccc17e4b2dae25b36b89825323ece91e598dbbfe1d132b6324d5dbc01267ac3691e3eb8c31e082b2f0214e5498c47be09c2485c7eecfcaf19424c79da9cab799fbd8745b9f8f6c9228d4cdb8873b601360e5c6ce1523a32f97a6d5cb14c82066e3fccfe700bfef815da00a9f0ea62b1a5d5d67b27241f7cdbb002f70ba872bb4f9b3b10abf31b7be2772841098ac658fd63bfc2060070ac254807a3b0ba56b9416e211589e8ac21c8f1603652d3daad2ed435e7231603880fc6d66e7876a837de9d920f149f9821ffc660838f8468cce45dbfad9075e486d27176af629057ae7e7e9e60e8c936e8f1583990744856c42bed2ce00c5ef1b0933f11220537d989ecbc8aec9001d10f2b6c935d79c7ab10e2ccb63633430eefb575a601e552847a08bd8d94ea29e0f41ac4795ec86f0d9913e415f90882136d23587871f9917af3e4cb0d9727bad208e1e95f15c3d1659b9ea449f19ef322af0fb9b6406fd6d136621a887fea958ea1041f6d4ac591a3a92da90bf6438a263041fc9db24fa3c895d7a2b5176bf3d2ed27fe38cb2885a46f6985ec655d1ae56feef06526c34ce12e49235fb6ee765655db086e37b02465f3ea5cb86d8eb0422da71cbdd064ef8105035c9ea929da53faaadc57bee04f5f0abcab6b541d18edb881987e4dce2066af13e0ae5911d27660a89c162e4185fa7020044668c9210e7f31f0a79be9ec6104c4b87b06ca43e82dd99dfb75110a80532cb148fed0b452dad821e13b70f53e09539cdef5f1bbe9f78ae425d5edc48403c78f8e75e37ca64c07371c790402e0ebe25e1e1ffafee917a1e0c96880d77e0066079f12f616bab70d5a6920451056e267b689fccc804f5867a7dfe97e3d67b6cf3eda69511d4bc1ef62db6e7140550cc76b61cf154cb6553256e1e63f9761d15720fe340467a3ec2f73781268d3fe442df0caa65d53e308fd3acbed9a7a4e173da68f410828a850cf48642083322bd332b75b28798ca85808a8c5adbac7a126dad9d8c6cd48562fabadd46366520bafa6f8bb17483893d02fa9d988d795786313d3a2b55a827e9ca9b03fc6e8973f3cde411acf507642d6719126f96fc39a90d9f99f9e1dceccf8f3b00b74ecb9415ff1bec05c9e69d651a139a471bfd8c1226712496e6ad541bb69009487664472038265ef773f1a6597a440c791c25bc60bd80f3e2b7decae7c57b202cea059616bbdf0f32f13c825e623a1b8e3e7f12038ae1eecbc3fdb7004ce0ea9c43c02b870745dd2c4923211658668c0a4dd7fd969f0dc65695128b9d9adaac7da78b98b469c64b726eed67084d58f883be4ce6e9ce877e268998002f3c1b37a3ac36cb0b131c5267ad697c9ad6f3d9329b226dc587c3eae9eb39fbcea54a65a1550825c78c890f043baa0357e2de379fce80bc27434935d18312ea881c095d09cd5b8c4c2877389902bb1d75aa417e7f0eb4e8b2a9996afa88093a4e9f22e628ae9f0c89dec78a3c87970c876d44a6eebc34bc4fe0a5d13dd748b2258e9208673922588d502156c5b40e136e9577f2fd50d61b59208c8ceb9984d9a96884cdbb17d245f8bc45415096f6619881a532813d921ad8e1c05efc4e465a3fe0705dc28d826fa74d48c13dd7729d3fae8f4e49788c0067fff03d2b541397e189da2e2c4a6be6abcc80ffb60673b405bb9771348b2f7baf14d3c77ae3ca98d7edf3fafcd4c3ab0d6527273afe9e8d96a9ba09df8782b237fef0c2f77972259b90f4bac04690733a3c4de0dc4eb69f5ef40368c99adb254b398c6c4f4ab5d8d65f1a6f5e1cfe650ef65fe39bb6c1536a5bc8c836b1624d0016817b492b9d301a7a308386a221621bde2f4bf293528ebac92b8dc1c518a17a376c53e7111d09f7324a8add53ecffa6bf7c6755c16085c5201c3a95e080b899ca8a5cac7ddbf7ddf9a9745176d4d9d93d422981f2fda230b28ae454b7417b5398564f332d73b5e0d3925c715cd1b819f4ddc618d2ebab74537ab779c019a4861861dfb7eb3b9e43cfb7d7c4adcfac488e5ef7a11d0a7d123586434a51f6dc943cb073b794c16b8970ebc46b4a2146277e1416c8b76628fb11f982397bf6c735ef43f2eb38b59eca7784464d9fa319b97dcc2d0c2a9a888e022cfef8984437124802a485feda543a3990811055338f8f11850edb3cb1be163f47ae2d9af3e8338664867d23b6f09f85936c746d7c7d502c68f918b2a838071e43632ea91ff6f9efc919372c9f1134052edcd2d9fae03df336708f812474ecd569da596e100442efe55dfa78abe8a1de7d2607f17cdcd110f3236f578b51921f781873166f877372a84cb18b2d3c415398a392e3b3db5a2b1292d6da3a0b23358a8118b60911a8cfd60b9d5195013a165be1f09c2896f4b76f3793b5fe9a33cbc2b5389ab918dcc51b3a8135e6a3d596f3415b1ca7ff98d97e010aadf669fd2ea36cf1fd650a37e7cd10551f11a6097b6fcc0fcbdb9e047eb071ca6dc5f54d59c5cdbed9a00b19a9aaf7812fb28c1258304949647ee0039347c8ab09a2d00fc1aad50c4fc0d29462e90fe295c5899c1a2a4482e135f14d6abd9f850ba14daa498f62e3f72fb47c50ef50629ae843c8fbc903b9cf2"}, {&(0x7f0000001800)="7d0a557edcbee05376df877bdff4629ba6f85cb3559fad40734c7e757c31efa92d37104bbdc16446aa6a3d77a3e7ce3629c4c5ef"}, {&(0x7f0000001840)="bc2a2fecaa4888b65a2be9ae00419e8057ce15a78bb952e12c67ef9a3e3e4213d6dc067d505a5bfc115372bcd0de75a215640f1d28144c2518f141ba56fbddc93dd30143c0d7492462efead2d8ee81756608b47f8ac97fb87ef18b13e7"}, {&(0x7f00000018c0)="d8f8b24b9d3b57eff05bde5e330ca85f98432e99c196051b6765e685d060c09b505218a7b7e85e89968a15c048b9cd4b1a8ab7aab3041132cb406ff6d6c752c50fb86062f2d85f840b879b1c758bec0ab959c63b079a86be0915d98c83aaa7bc52e8fdcf29710d922487dfb7b0d236645e5eac"}], 0x0, &(0x7f0000001980)=[{0x0, 0x101, 0x1019a0, "d8e67bec93ab27cf3702a2ba55252db3006a55f2940a4cbbc6b9bd7c71b1153e78e994c5ba4fef7348eb41f35c1a7da9b826b2ebbe5c77f254ded2449b42473abc32159370e7ad868c106a74819c5f519e8afb66321a478e68938ae7c48e34f5e25d344a2836330c15ffc0be5a33a9b84f804fe6bb0385acb297aff042e3bbc87e2269a81ef8b6879972cc800a3dac2e56e4ed5115b477831f4ac55762375b4b0651925adf22e5ba03fd577ba6a15348752bdb"}, {0x0, 0x115, 0x80000001, "32fd9fc9ac501ad63c6624b045888038437cde01dc8cec0d8fec83c0b51ac2f8c07bcea911328068e2ff7c58afc4ea6a2a22a82dd3fff1b3d8935ce763f24262aee09c1da0e8760370241b7c28ac4ce1e7dd1e140beabd088068f8a5460284388dc8d6152febe5c561956a52b3abb12410863ef7"}, {0x0, 0x10c, 0xffffffff, "0c424beca4bc413d3836d3a855b1cb17223b9c58d90df0233c4c34cd83b6f2f619904048b733777ed709f2af3df5253c311bc31886f90f18feae69d229f0ab047b316ea9ac3894bb44232c0965c598ce9d0eaaaa8958435d36f99b704ed2fe5a98072b67375f0ee592ec2634aed4748a4ca7701e42d315351dc38340d059be66799c6dd71bc51c0b16a0285d2f6fce2b31f4eb7c9155bf380014b03e1d639125bb90336c39df3ac0f8b6ef85c6ef4fdb59fedce234909702e0297e50cf71577cd2c8b4b832439348ab8023aee79e0da64774e0abdd8c96be3d563633d4dc8a9f25416ce8a5b0276049f58a21516b810a1ebf4cd1ebefbb6e"}]}}], 0x1, 0x9200000000004044) ioctl$TIOCSSOFTCAR(r5, 0x541a, &(0x7f0000000040)=0xf) 43m48.851362043s ago: executing program 3 (id=296): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r7, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={0x0}}, 0x4) ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xb4}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r6, 0x0, 0x0) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r9, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r9, 0x4004743a, &(0x7f0000000300)) pwritev(r2, &(0x7f00000002c0)=[{&(0x7f0000000140)="000f", 0x2}], 0x1, 0x20000002, 0x100000) 43m48.543158194s ago: executing program 3 (id=299): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000080)=@get={0x1, 0x0, 0x7fe}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0xe61c1323c3c20c32) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) r1 = syz_open_dev$vim2m(&(0x7f0000000280), 0x400000000000404, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000200)=@userptr={0xfffffff7, 0x2, 0x4, 0x100000, 0xffff, {}, {0x4, 0xc, 0x88, 0x20, 0xc, 0x6, "2097d12c"}, 0xffff8001, 0x2, {0x0}, 0x5692}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="6000000009060300f100100000000000050000400900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c0001c008000140e00040000c00028008000140e00000020c00148008000140ffffffffbf"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x20000080) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x2, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000140)={{r4, r5+60000000}, {0x0, 0x3938700}}, &(0x7f0000000180)) unshare(0x62040200) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000005}, 0x80) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x339bcab94ff8e8eb, &(0x7f0000000300)={0x5, &(0x7f00000001c0)=[{0xfffd, 0x9, 0x3, 0x10000}, {0x10, 0xe2, 0x4}, {0x2, 0x9, 0x73, 0x2}, {0x8, 0x0, 0x32}, {0x6e8, 0x6, 0x1, 0x5}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r7 = socket(0x2, 0x3, 0x5) sendto$inet(r7, 0x0, 0xfffffffffffffd02, 0x4000000, &(0x7f0000000000)={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f0000b1d000/0x2000)=nil, 0x2000) 43m48.113329197s ago: executing program 32 (id=299): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000080)=@get={0x1, 0x0, 0x7fe}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0xe61c1323c3c20c32) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) r1 = syz_open_dev$vim2m(&(0x7f0000000280), 0x400000000000404, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000200)=@userptr={0xfffffff7, 0x2, 0x4, 0x100000, 0xffff, {}, {0x4, 0xc, 0x88, 0x20, 0xc, 0x6, "2097d12c"}, 0xffff8001, 0x2, {0x0}, 0x5692}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="6000000009060300f100100000000000050000400900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c0001c008000140e00040000c00028008000140e00000020c00148008000140ffffffffbf"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x20000080) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x2, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000140)={{r4, r5+60000000}, {0x0, 0x3938700}}, &(0x7f0000000180)) unshare(0x62040200) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000005}, 0x80) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x339bcab94ff8e8eb, &(0x7f0000000300)={0x5, &(0x7f00000001c0)=[{0xfffd, 0x9, 0x3, 0x10000}, {0x10, 0xe2, 0x4}, {0x2, 0x9, 0x73, 0x2}, {0x8, 0x0, 0x32}, {0x6e8, 0x6, 0x1, 0x5}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r7 = socket(0x2, 0x3, 0x5) sendto$inet(r7, 0x0, 0xfffffffffffffd02, 0x4000000, &(0x7f0000000000)={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f0000b1d000/0x2000)=nil, 0x2000) 42m7.897349275s ago: executing program 2 (id=995): r0 = socket$can_j1939(0x1d, 0x2, 0x7) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x400003, 0x0) socket$netlink(0x10, 0x3, 0xa) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) socket$unix(0x1, 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r4, @ANYBLOB="138000002b9201002400128009000100626f6e64000000001400028008006202bf0a3d240edc4d07e9296e087cad0d63edab8211951d28c97c64d899de94d72d09004f", @ANYRES16=r2], 0x44}}, 0x8000) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r5, 0x0, {0x0, 0x0, 0x4}}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r5}, 0x18) 42m7.429315757s ago: executing program 2 (id=999): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r1 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x2000000c}) write$P9_RSTATu(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="3b0200007d00000005fa000000000000000200200000000000000000000000000000000000000000000000000000000000001f0004"], 0x23b) 42m7.175184695s ago: executing program 2 (id=1001): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) io_uring_setup(0x524, 0x0) ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, 0x0) listen(r1, 0x4) recvmmsg(r1, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}}], 0x1, 0x40000100, 0x0) 42m6.088322076s ago: executing program 2 (id=1009): r0 = socket$nl_rdma(0x10, 0x3, 0x14) ptrace(0x10, 0x0) ptrace$setregs(0xf, 0x0, 0x40, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xdce6cde4ee0f6302, 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000111401000000000000000000080009000000000008004b0028"], 0x30}}, 0x0) 42m5.339221553s ago: executing program 2 (id=1015): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2020}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0xfe, 0xa4}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x29, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 42m4.491238817s ago: executing program 2 (id=1020): socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000180)={0x7, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) epoll_create1(0x0) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000080)=0x7) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x7fff, 0x800000000000007d, 0x0, 0x8000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0) 42m4.041106439s ago: executing program 33 (id=1020): socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000180)={0x7, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) epoll_create1(0x0) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000080)=0x7) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x7fff, 0x800000000000007d, 0x0, 0x8000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0) 35m24.943175187s ago: executing program 4 (id=2829): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = epoll_create(0x7) r5 = epoll_create(0x7) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000100)) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000140)={0x60002000}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r7, &(0x7f0000000080)={0x1008}) shutdown(r3, 0x0) close(0x3) r8 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000600)={'syz', 0x2}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000300)='syzkaller\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000440)="81157e0d90fe16721cc1352688f77dc407866e7db619f99d8326e688c0f9204ae75141bed5425fa7328450dd08fae4f5533a1cb6a7c4833572be740ef31737b960aa6f6b4369bc9d7aa0dc33137f905c30c2424242f120f07a64e0ec8747e7bc5558dbab209e561e8a8959fabb1395dc0d62e50970e559a270ff898d6e01", 0x7e, r8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r9, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000000c0)=ANY=[@ANYRES32=r9, @ANYBLOB='\x00'], 0x8) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}}}, 0x24}}, 0x0) recvmmsg(r1, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}], 0x1}, 0xfffffffc}], 0x2, 0x10, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a00000154000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672ba2600fb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32000000000900010073797a310000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) close(0x3) socket$nl_netfilter(0x10, 0x3, 0xc) 35m24.731700365s ago: executing program 4 (id=2830): r0 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x80) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000000c0)={"ae42ffff", 0x3, 0x5, 0x4, 0x100, 0x803, "000000ffff0600fdff090000000800", "00000002", "05030400", '\x00\b\x00', ['\x00', "6cf8ffffffeff0ff00000100", "f0ffffffffebffff00000010", "fdffffffff40b82dc44d00"]}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000050000001000"/28], 0x2c) syz_usb_connect(0x6, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16, @ANYRES16], 0x0) r2 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) r3 = dup(r2) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000000)={0x0, 0x8, 0xb, 0x8, "77f15ef6983d2e9e4cea7f3567bf701fa00d6a39ad4b3eb72544d4c1ba33b030"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000b7080000000000007b8af8ff00000000b508000000000000638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r1, @ANYBLOB="0000000002000000b703000008000000850000006a00000095"], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = socket(0x10, 0x3, 0x0) r5 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) sendmsg$NFT_BATCH(r5, &(0x7f00000106c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f00000038c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000801}, 0x4814) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0x1ff, 0xf48, 0x6, 0xaddd}, 0x5, 0x1, 0x11d, 0xfffffff8, 0x1, 0x1f, 0x11, 0xf, 0x1, 0x200, {0x1ff, 0x1, 0xfffffffc, 0x6, 0xfff, 0x4}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r6, 0x800, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x2f, 0x1, 0x6, 0xff, 0x2, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5a5ef12bcc43d272, 0x700, 0x446, 0x8}}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000180)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @private1, 0x0, 0xaa79, 0x9, 0x400, 0xf172, 0x4240000, r8}) r9 = socket$inet6(0xa, 0x2, 0x0) r10 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x202000, 0x0) copy_file_range(r9, 0x0, r10, 0x0, 0xfffffffffffffff3, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x300, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r12, 0x4188aec6, &(0x7f0000000040)={0x1, 0x8, 0x1, 0xb, 0x100a}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000700)={'syztnl0\x00', &(0x7f0000000680)={'syztnl0\x00', r8, 0x2f, 0x8, 0x5, 0x5, 0x1c, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x700, 0x40, 0x3}}) r14 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000740), 0x4) r15 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x7, '\x00', 0x0, r5, 0x5, 0x3, 0x5}, 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a5f000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) ptrace(0x10, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_tracing={0x1a, 0x11, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000e50000000000f5ff080000001811000014d3e419c866829ef533e781a12ee467b200132bdbc83c75381b1013b7ac1615dcd3a301e80d32969c45ee9a04e69e80a558edf383887dadae7154e495ae278d250241d893e5726238ee8b72f466a64b312408baa61580522da7b8f7719c6aee6721dd9ccb1ac4725384cac49f0feeb36e56b8f7f676991237c9dd3a914ca030ec38d329f5b43a802a6bb2f06afefed05e8b779e8ba0d3592a69b5211e2e6196225176142d54e7f44d828a39f8c5523b469245c1b0b16e77128937b6a2e54acd9575f7038084d94c041bd29edce9caab32e50fa02616189e7425711a209c0abc3c07ada293", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018560000070000000000000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000640)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x10, '\x00', r13, 0x1c, r14, 0x8, &(0x7f0000000780)={0x9, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x23d7f, r5, 0x2, &(0x7f0000000840)=[r15, 0xffffffffffffffff, r5, r3], &(0x7f0000000880)=[{0x1, 0x4, 0xa, 0xc}, {0x2, 0x5, 0x0, 0x3}], 0x10, 0x72c}, 0x94) 35m22.815302542s ago: executing program 4 (id=2839): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r1 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x2000000c}) write$P9_RSTATu(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="3b0200007d00000005fa0000000000000002000000feffffff000000000000000000000000000000000000000000000000001f0004"], 0x23b) 35m22.805466571s ago: executing program 4 (id=2840): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000006, 0x31, 0xffffffffffffffff, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/slabinfo\x00', 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000940)={0x24, &(0x7f0000000600)={0x20, 0x0, 0x9, {0x9, 0x7, "7ce839fc7a5aff"}}, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000480)={0x2c, &(0x7f00000002c0)={0x40, 0x23, 0xf0, {0xf0, 0xd, "9218b54a3d2784b535796a0dc1c253933a90cbbb819276f9d61665d51993ee80d78015c53d03c8899978e7df0d5f81449d949004debf8c7fa20b4c7446cbfa260d1bf0d46f327e9efb7309365a7e88ce7ef05132bea977a3988e5540ae8dff448b2df70360ce4bd8ca98dd7b8433c16cfdb85451aa3e224311ea2290938aaecbd738012d56ec3b6c870a27f791e520e5b788fd208f1c9e3fc66ebd4840c513667e35f22890cbb2e6354f6d4c9d0cc61e77d19d24718efe0369cc06de73586ccfd4ce3939fc7c6a318619f4403935587103ce28d6724fe32c81967fa54cec5935a0af16e638f3043670988d110ee8"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) socket$nl_route(0x10, 0x3, 0x0) epoll_create(0xd851) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) r2 = open(&(0x7f0000000280)='.\x00', 0x20000, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000003080102000000074441980000000000050003"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x40810) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(r2, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r5 = openat$cgroup_ro(r2, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r7, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r2], 0x4}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendfile(r6, r5, 0x0, 0x100000002) (async) remap_file_pages(&(0x7f00009e4000/0x3000)=nil, 0x3000, 0x0, 0x6, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x7f41f000) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="640000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e64000000003400028008000300810000000800050000000000080004"], 0x64}}, 0x0) 35m21.845287995s ago: executing program 4 (id=2843): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xf}, 0x15, 0x3, 'sed\x00', 0x1, 0x6, 0x3d}, 0x2c) socket$inet_sctp(0x2, 0x1, 0x84) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) ioctl$TCSETS(0xffffffffffffffff, 0x545c, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) timer_create(0x0, 0x0, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000c00000/0x8000)=nil, 0x8000, 0x3) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000015, 0x10, 0xffffffffffffffff, 0xb320a000) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x7a44, 0x1700) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) timer_create(0x4, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r4, 0x406, r4) 35m20.946852038s ago: executing program 4 (id=2850): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r1 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x2000000c}) write$P9_RSTATu(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="3b0200007d00000005fa000000000000000200000000000000000004000000000000000000000000000000000000000000001f0004"], 0x23b) 35m5.851444616s ago: executing program 34 (id=2850): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r1 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x2000000c}) write$P9_RSTATu(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="3b0200007d00000005fa000000000000000200000000000000000004000000000000000000000000000000000000000000001f0004"], 0x23b) 20m49.779108438s ago: executing program 0 (id=6890): pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {&(0x7f00000003c0)="77cccb0deedbb94f1afd3ccb469a6721cc637e9cbc7f0685c4ab02897a615638b1ba209474e485e5c676dab2f779fc45e14a15eb8cab8dce71eaea08ea87db5609774523b75431043e4a32f82c5b61bea2b9b0eff207d81c7b175cfcb3e448d7fcac8844402e9401582eeb4a08d247096e183b9b7de727a818150a153b9397c4cc61a6bd461f30fb84b679bca11d47c56904a9d359442a5c3693048b8aa179cf93", 0xa1}, {0x0}, {&(0x7f0000000880)="0f0c83b4bbcd1b650554e6808cc05c8330c8306382c6b661f26746210e414b608aeeffb7e5f607475808da4a97422d77993220203506919cbf3f249cb2c984b7e7491f26d393f1119f53c043a4", 0x4d}], 0x5, 0x4, 0x5) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0x4, 0x5, 0x4, 0x86f, 0x4230, 0x500000000000000, 0x81, 0x9c1, 0x8001, 0x5, 0x7, 0x4db6, 0x0, 0xfffffdfffffffffd], 0xdddd1000, 0x80300}) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000340)="0bbb288dd6ffa80800431c00000000000000210d0000aaa8fa017242ba9380d419", 0x21) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000009c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540), ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xce, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), 0x0, 0x0, 0x3a, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x72, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000300)="e9a830dcb405b515c76b9cb4682e3c7d", 0x10}], 0x1, &(0x7f0000000400)=ANY=[], 0xf8}, 0x24000000) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e", 0xc2}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc) 20m49.428016324s ago: executing program 0 (id=6891): socket$packet(0x11, 0x2, 0x300) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x9, 0x1a0c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x0, {0x0, 0x0, 0x0, 0x3, 0x200001, 0x0, 0x0, 0x1, 0x4, "339f020bbe82b38b000000000000000000070d0ec0c1b4e9b3d741dd17c1c500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e07a68e174f000000100000000010e200000000000000000000001000"}}) r2 = dup(r1) read$FUSE(r2, &(0x7f0000003c40)={0x2020}, 0xffffff0a) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) r5 = dup(0xffffffffffffffff) r6 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r5, r10, &(0x7f00000005c0)={0x0, 0x2, 0x0, 0x3, 0x256, 0x0, r5}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc9b6, 0x80, 0x1000000, 0x10000003}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffb, 0x480, 0x0, 0x2a8, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc25b, 0x4, 0x1, 0x35c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x20000, 0x1, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x1d, 0x0, r5, 0xc0107520, 0x0, 0x0, 0x1000000, 0x1, {}, 0x0, 0x0, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) 20m49.042236887s ago: executing program 0 (id=6892): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x1, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000040)=0x7, 0x4) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000240), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='[\x00\x00\a', @ANYRES16=0x0, @ANYBLOB="040028bd7000fedbdf254300000008000300", @ANYRES32=0x0, @ANYBLOB="0c00580015000000000000000c00580066000000000000000c00580019000000000000000c00580003000000000000000c00580041000000000000000c0058003800000000000000"], 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4004) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000000)=0x5) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0xa, 0x0, 0x9, 0x50, 0x8, 0x2fa11, 0x1}, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x20, 0x1, 0x7ff, 0x6, 0x1, 0x9, 0x0, 0x7fff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) symlink(&(0x7f00000033c0)='./file0/file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000003440)='./file0\x00', &(0x7f0000003480)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="00000000100000000000000020fb0400"/36], 0x24, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000400)=""/5, 0x214000, 0x800}, 0x20) socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000040)=0x120881, 0x4) r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000003a00010321bdff0833abfd0000"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) syz_fuse_handle_req(r5, &(0x7f0000009b40)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x1, 0x24ff87199961d9e7, 0xdcf, 0x4005, 0x5, 0x800, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x30}, 0x10) socket$netlink(0x10, 0x3, 0x400000000000004) 20m48.094636381s ago: executing program 0 (id=6897): r0 = socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000240)={0x1, 0x101}) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRES32, @ANYRES8, @ANYRESOCT], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) close(0xffffffffffffffff) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, 0x0, 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x10, 0x3, 0x1, 0x2, 0x400, 0x85b8}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x8f, 0xad, 0x4, 0x0, 0x200237f, 0x10000}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f00000005c0)=0x18) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) write$6lowpan_enable(r4, &(0x7f0000000300)='0', 0x1) socket$inet(0x2, 0x80001, 0x84) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c011}, 0x24048800) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r7 = landlock_create_ruleset(&(0x7f0000000100)={0x4030, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r7, 0xf) landlock_create_ruleset(&(0x7f0000000000)={0xa4c0, 0x1}, 0x18, 0x0) 20m47.524955637s ago: executing program 0 (id=6901): pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {&(0x7f00000003c0)="77cccb0deedbb94f1afd3ccb469a6721cc637e9cbc7f0685c4ab02897a615638b1ba209474e485e5c676dab2f779fc45e14a15eb8cab8dce71eaea08ea87db5609774523b75431043e4a32f82c5b61bea2b9b0eff207d81c7b175cfcb3e448d7fcac8844402e9401582eeb4a08d247096e183b9b7de727a818150a153b9397c4cc61a6bd461f30fb84b679bca11d47c56904a9d359442a5c3693048b8aa179cf93", 0xa1}, {0x0}, {&(0x7f0000000880)="0f0c83b4bbcd1b650554e6808cc05c8330c8306382c6b661f26746210e414b608aeeffb7e5f607475808da4a97422d77993220203506919cbf3f249cb2c984b7e7491f26d393f1119f53c043a4", 0x4d}], 0x5, 0x4, 0x5) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0x4, 0x5, 0x4, 0x86f, 0x4230, 0x500000000000000, 0x81, 0x9c1, 0x8001, 0x5, 0x7, 0x4db6, 0x0, 0xfffffdfffffffffd], 0xdddd1000, 0x80300}) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000340)="0bbb288dd6ffa80800431c00000000000000210d0000aaa8fa017242ba9380d419", 0x21) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000009c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540), ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xce, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), 0x0, 0x0, 0x3a, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x72, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000300)="e9a830dcb405b515c76b9cb4682e3c7d", 0x10}], 0x1, &(0x7f0000000400)=ANY=[], 0xf8}, 0x24000000) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e", 0xc2}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc) 20m47.216260983s ago: executing program 0 (id=6903): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0xc2101, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1ff, 0x1, 0x8004}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(cast6)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x110, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = accept4(r4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r5) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x401, 0x0) sched_setscheduler(0x0, 0x2, 0x0) writev(r6, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000740)='X', 0x1}], 0x2) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbde, {0x0, 0x0, 0x0, r3, {0xe}, {0xfff1, 0xfff1}, {0x2, 0xb}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x8001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008091}, 0x4000000) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0x1f3f) 20m32.066190956s ago: executing program 35 (id=6903): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0xc2101, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1ff, 0x1, 0x8004}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(cast6)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x110, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = accept4(r4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r5) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x401, 0x0) sched_setscheduler(0x0, 0x2, 0x0) writev(r6, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000740)='X', 0x1}], 0x2) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbde, {0x0, 0x0, 0x0, r3, {0xe}, {0xfff1, 0xfff1}, {0x2, 0xb}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x8001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008091}, 0x4000000) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0x1f3f) 5.449394911s ago: executing program 6 (id=12535): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) recvmsg(0xffffffffffffffff, 0x0, 0x10040) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0x1, 0xb}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0xfbee}, 0x3, 0x0, 0x3, 0x7, 0xe, 0x4, 0xd, 0x18, 0x5, 0x2, {0x6, 0x8, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000280)="05", 0x5dc, 0x4009, &(0x7f0000000140)={0x11, 0x86dd, r6, 0x1, 0x3, 0x6, @remote}, 0x14) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) 4.839532084s ago: executing program 6 (id=12538): bind$inet(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x80000000002, 0x141101) (async, rerun: 32) r1 = socket$inet6(0xa, 0x3, 0x5) (rerun: 32) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, '\x00', 0x2f}, 0xffffffff}, 0x1c) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x6d71, &(0x7f00000001c0)={0x0, 0x4533, 0x40, 0x3, 0x3d8, 0x0, r2}, &(0x7f0000000300), 0x0, &(0x7f0000000040)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r3, 0x25, &(0x7f0000000000)={0x0, 0x2, 0x8}) (async) fcntl$lock(r3, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) (async) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0xfffffff8, 0x0, 0x0, 0x4}, 0x10) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000078000000090a010400000000000000000100fffd08000a40000000000900020073797a31000000000900010073797a300000000008000540000000253c0011800a0001006c696d69740000002c0002800c000240000000000000000308000440000000010c000140fffffffffffff7ff080003"], 0xc0}, 0x1, 0x0, 0x0, 0x40c0}, 0xc4) (async) syz_emit_ethernet(0x36, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRESOCT=r3], 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r5, 0x4008af00, &(0x7f00000000c0)=0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async, rerun: 64) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) (async, rerun: 64) madvise(&(0x7f000065b000/0x3000)=nil, 0x3000, 0x1) (async) fcntl$lock(0xffffffffffffffff, 0x3, 0x0) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async, rerun: 64) r6 = gettid() (async, rerun: 64) r7 = getpid() rt_tgsigqueueinfo(r7, r6, 0x5, &(0x7f0000000840)={0x2, 0xffffffff, 0xfffff7ff}) (async, rerun: 64) rt_tgsigqueueinfo(r7, r6, 0x18, &(0x7f0000000340)={0xd, 0xfffffffc}) (rerun: 64) 4.836979886s ago: executing program 7 (id=12539): syz_usbip_server_init(0x1) syz_usbip_server_init(0x5) (async) syz_usbip_server_init(0x5) 4.191178341s ago: executing program 6 (id=12542): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x501, 0x0, 0x0, {{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0xfffffffffffffffc}}, [@offload={0xc, 0x1c, {r1, 0x4}}]}, 0xc4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 4.190350613s ago: executing program 7 (id=12543): sendmsg$sock(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000280)="a73b0bc93bfb797e5c542761747f2ee9b1f119020956a038fc082fc8d81695304626d4fb940881d1034863c8e53c058b011328c49867ad0f4e655f7d768cb59f54500337ff4aeeec", 0x48}], 0x1}, 0x810) ppoll(&(0x7f0000000200), 0x1, 0x0, &(0x7f0000000080)={[0x8001a0efffffff]}, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x14028010}, 0x20004000) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r0) mbind(&(0x7f0000283000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x7, 0x0) mbind(&(0x7f00000bd000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x0) 4.15541224s ago: executing program 7 (id=12544): capset(0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x7f) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000002c0)=0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000300)='highspeed', 0x9) r2 = accept4(r0, 0x0, 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={[&(0x7f0000000040)='hash\x00', &(0x7f0000000080)='$+\x00', &(0x7f00000000c0)='%\'\\%@}\x00']}, &(0x7f0000000240)={[&(0x7f0000000140)='hash\x00', &(0x7f0000000180)='&^]o]w,}!#\x00', &(0x7f00000001c0)='hash\x00', &(0x7f0000000200)='hash\x00']}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000440)={@private1}, &(0x7f0000000480)=0x14) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000003c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000010c240000e9fffff5ffffffff092403f3ff00000502", @ANYRES8=r3, @ANYBLOB="05"], 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') lseek(r4, 0x100000008, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)=@generic={&(0x7f0000000500)='./file0\x00', 0x0, 0x10}, 0x18) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="d7659514d10b279cfe000000000000000900", @ANYRES32=r7, @ANYBLOB="2c003300d000000008021100000108021100000050505050505000000f020202010001007206030303030303"], 0x48}}, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x4) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x5) sendfile(r9, r8, &(0x7f00000001c0)=0x1, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000600)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x1, 0x8}, 0xc) recvmmsg$unix(r2, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 4.152177349s ago: executing program 6 (id=12545): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil) mremap(&(0x7f0000580000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil) r0 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f00006dd000/0x3000)=nil, 0x3ff, 0x5, 0xd6}) 4.055073137s ago: executing program 6 (id=12546): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000000c"], 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x50) sendmsg$nl_route(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)) pipe(&(0x7f0000000440)) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000040)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x80000) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000640)={0x10, 0x0, &(0x7f0000000140)=[@request_death], 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x98}, 0x50) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) accept4(r5, 0x0, 0x0, 0x80800) r6 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000080)='source', &(0x7f0000000100)='\\\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) 2.897606737s ago: executing program 1 (id=12551): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuset.effective_mems\x00', 0x275a, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x244a00, 0x0) unshare(0x2c020400) (async) read$FUSE(r3, 0x0, 0x0) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0xe0, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@TCA_STAB={0x80, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x6, 0x2, 0x9, 0x1, 0x2, 0x6, 0x6}}, {0x10, 0x2, [0xa, 0x4, 0x5, 0x6, 0x1, 0xa]}}, {{0x1c, 0x1, {0x0, 0x5, 0x3896, 0x80, 0x2, 0xf, 0xb, 0x4}}, {0xc, 0x2, [0x2, 0xfff, 0x7f, 0x6]}}, {{0x1c, 0x1, {0xa3, 0x6, 0x4, 0x7, 0x0, 0x9, 0xa, 0x4}}, {0xc, 0x2, [0x3389, 0x4, 0x600, 0x2]}}]}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x2c, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x5}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x6fa4}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x7}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x7}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x1}]}}]}, 0xe0}}, 0x4000010) (async, rerun: 32) r6 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup\x00', 0x8100, 0x5a) (rerun: 32) r7 = openat$cgroup_int(r6, &(0x7f0000000300)='cpu.idle\x00', 0x2, 0x0) sendfile(r7, r7, 0x0, 0x85b5) (async) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) (async, rerun: 32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_SET_SREGS2(r8, 0x4140aecd, &(0x7f0000000440)={{0x58000, 0x30000, 0xe, 0x1, 0x3, 0x80, 0x1, 0x0, 0x1a, 0x8, 0x5, 0x9}, {0x30000, 0xa9c4ad0ee1a52af4, 0xa, 0x5, 0x0, 0x2, 0x1, 0x4, 0xf8, 0x1, 0x0, 0xc6}, {0xe000, 0x0, 0xf, 0x7d, 0x8, 0x9, 0xa6, 0x10, 0x3, 0x4, 0xf, 0x6}, {0xb000, 0xffffffff, 0x9, 0x3, 0x60, 0x8, 0x3, 0x1, 0x26, 0x5, 0x84, 0x3}, {0xf000, 0xf000, 0xa, 0x7, 0x1, 0x7, 0x0, 0x2, 0x23, 0x80, 0x0, 0x80}, {0xdddd0000, 0xf000, 0x0, 0xff, 0x4a, 0x7d, 0x6, 0xb, 0x1a, 0x5, 0xd, 0x7f}, {0x2000, 0xffffffff, 0x10, 0xf, 0x6, 0x9, 0x7, 0x3, 0x3, 0x8, 0xff, 0xa8}, {0xc3752fd1146ae3b, 0x54000, 0x9, 0x8, 0xff, 0x4, 0x69, 0x4, 0x4, 0xfd, 0x8e, 0xc}, {0x80a0000, 0x40}, {0x8080000, 0xdd9a}, 0x10, 0x0, 0x6000, 0x20020, 0x0, 0x101, 0x41000, 0x1, [0x100000000, 0xe, 0xfffffffffffffeff, 0x100000001]}) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async, rerun: 64) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (rerun: 64) 2.710384329s ago: executing program 1 (id=12553): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) syz_usb_connect(0x5, 0x2d, &(0x7f0000000f80)={{0x12, 0x1, 0x200, 0x50, 0x86, 0x39, 0x10, 0xaf0, 0x7001, 0xbcac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xf4, 0xc, 0x10, 0x6, "", [{{0x9, 0x4, 0xdc, 0x5, 0x1, 0x3e, 0xb7, 0xe4, 0x2, [], [{{0x9, 0x5, 0x1, 0x3, 0x40, 0x2, 0x6, 0xbb}}]}}]}}]}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="44000000100037041000a521026f64dbf9c3883823b5d4ae2b8000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8345050001000000240012800b00010067656e65766500001400028005000c000000000005000a0001000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) 2.539918768s ago: executing program 8 (id=12556): socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 32) r0 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x460, 0x2f8, 0x1a0, 0xffffffff, 0x240, 0x0, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @multicast1, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x16}, 0x0, 0x168, 0x1a0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x7, 0xc, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x76, 0x2, {0x1}}}, @common=@unspec=@devgroup={{0x38}, {0x3, 0x0, 0x3, 0x3, 0x7e}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x1, @remote, @multicast1, @gre_key=0x8, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x10000}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'bond0\x00', 'veth1_to_bridge\x00', {}, {}, 0x0, 0x0, 0x4e}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@rand_addr=0x64010102, @ipv6=@mcast1, @port=0x4e21, @icmp_id=0x64}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, '\\Q', 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @local, @dev={0xac, 0x14, 0x14, 0x2a}, @port=0x4e27, @gre_key=0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0xdddd0000, 0x1a, 0x2, 0x40, 0xfd, 0x7, 0xd4, 0x0, 0x4, 0x7, 0x2}, {0xffff1000, 0x2, 0xd, 0x9, 0x8, 0x40, 0x6, 0x8, 0x5, 0xf, 0x3, 0xca}, {0xeeee0000, 0xdddd1000, 0xb, 0x8, 0x2, 0x7, 0x4, 0x1, 0x8c, 0x0, 0x6, 0x5}, {0xeeef0000, 0x3000, 0xd, 0xf, 0x43, 0x46, 0x2, 0xd, 0x46, 0x3, 0xfc, 0x1}, {0x100000, 0x0, 0x3, 0x3f, 0x3, 0x9, 0x9, 0x7, 0x5, 0x4, 0x1e, 0x4b}, {0x2, 0xd000, 0x9, 0x7, 0x4, 0x6f, 0x1, 0xfb, 0x4, 0x80, 0x1, 0x9}, {0x6000, 0x2000, 0xc, 0x9d, 0x3, 0x0, 0x1, 0xb, 0x1, 0x7, 0x0, 0x6}, {0xffff1000, 0x8000000, 0xd, 0x5, 0x3, 0x3, 0x6, 0x9, 0x54, 0x6, 0x2, 0x7}, {0x100000, 0x5}, {0xdddd1000, 0x5}, 0x40010000, 0x0, 0xf000, 0x300, 0x7, 0x0, 0x9000, [0x4, 0x402, 0x8, 0x1]}) (async, rerun: 64) syz_kvm_setup_cpu$x86(r2, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) (async, rerun: 64) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000040)="baa000b0ffee660f38404f81660f01dfbaf80c66b850be5a8e66efbafc0c66b80900000066ef0f09360f21be660f38f67de70f01dfbad104ec64660ff7e7", 0x3e}], 0x1, 0x6, 0x0, 0x0) (async) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x5, 0xff, 0x2}) ioctl$KVM_RUN(r3, 0xae80, 0x0) link(&(0x7f0000001240)='.\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2.372654272s ago: executing program 8 (id=12557): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000000)=0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0x10, &(0x7f0000000000)={0xffffffff}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a0020407d6b0000de00000014000200040000000000000000000000000040001400030076657468315f766c616e000000000000080006"], 0x4c}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRES32=r3], 0x5c}}, 0x4008000) shutdown(r1, 0x1) (async) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000d00)=ANY=[@ANYBLOB="14000000100001000000000000000000dcdd0e0aaf98ea7a060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e61afb9fdd672bad09dfb78c7699c74e891a0c7fffffffffffffff5000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a3200000000140000001100010000000000000000000100000a"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) (async, rerun: 32) syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) (async, rerun: 32) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[], 0x158}, 0x1, 0x0, 0x0, 0x44800}, 0x4c030) 2.296196406s ago: executing program 8 (id=12558): creat(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xe2) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$SO_COOKIE(r0, 0x1, 0x39, 0x0, &(0x7f0000000080)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) syz_emit_vhci(0x0, 0x0) socket$unix(0x1, 0x5, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_GET_SYSNAME(r2, 0x8040552c, &(0x7f0000006480)) 2.2159994s ago: executing program 8 (id=12560): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0xc, 0x0, 0x0, 0xff, "810000cc2b000000000000fa25ffff00ffffff"}) r2 = syz_open_pts(r1, 0x141601) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000140)={0x20, 0x3, 0x57, 0xfffffff7, 0x18, "bb73e3489ae37f615b5e4fa21572c3beceb48f", 0xda, 0x1}) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @payload={{0xfede}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xf8}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) 2.047194049s ago: executing program 8 (id=12561): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x100}) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0xd, 0x4}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x9, 0x2, 0xffffffff, 0x0, 0xfea}, 0x41, 0x0, 0x8, 0x7, 0x200, 0x15, 0x2, 0x8, 0x8, 0x51, {0x8, 0x6, 0x3, 0x7, 0x4, 0xe}}}}]}, 0x78}}, 0x20008001) mount$fuse(0x0, 0x0, 0x0, 0x800, &(0x7f00000003c0)=ANY=[@ANYRESHEX]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0xfffffffffffffffe, 0x0) r3 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x84, &(0x7f0000000000), 0x90) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r4, 0x84, 0x82, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r5, 0x7af, &(0x7f0000000140)={@local, 0x40}) sendmsg$inet(r3, &(0x7f0000000e40)={&(0x7f00000000c0)={0x2, 0x4e27, @loopback}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000040)="d4", 0x1}], 0x1}, 0x800) 1.349298771s ago: executing program 1 (id=12563): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x500, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f00000005c0)={0x1, 0x0, @pic={0x6, 0xf, 0xa, 0x7, 0x6, 0xb, 0x5, 0xe7, 0x97, 0x6, 0x2, 0x44, 0x3, 0x5, 0x6}}) ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f0000000180)={0x0, 0x2}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e105400000884700050004ee0b80558ddbba9b37242d", 0x27}], 0x1}, 0x4) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000021c0)=@newtfilter={0xea8, 0x2c, 0x20, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe74, 0x2, [@TCA_MATCHALL_ACT={0xe70, 0x2, [@m_pedit={0xe6c, 0x1, 0x0, 0x0, {{0xa}, {0xe40, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x5, 0x8}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x6, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x80000001, 0x8, 0x101, 0x3}, {0x3, 0x9, 0x0, 0x7, 0x5, 0x4}, {0x8000000f, 0x7, 0x9, 0x51, 0x8}, {0x3, 0x4, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x5, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x201, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0x0, 0x10000, 0x6}, {0x5, 0x96fc, 0x8, 0x3, 0x0, 0xffffffff}, {0x5, 0x7, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x40000005, 0x9}, {0x1, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0xffff997c, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xe, 0x3, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x4, 0x9}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x8, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x81, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x4, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf7, 0xffff8001}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x6, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x2000001, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x7, 0x80000801, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x6, 0x200, 0xc6e9}, {0x1, 0x2d73, 0x3ff, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0x0, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x40000004, 0x1, 0x8, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x808000, 0x7, 0x9}, {0xff, 0x7, 0x5, 0x9, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x407ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x2}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x8003}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x9, 0x4, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x3ff, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x3, 0x402c, 0xfffc, 0xfffefff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x2, 0x1ff, 0xc1b7}, {0xa24e, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x4, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x3}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x8}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2d, 0x800, 0x8, 0x7, 0x7}, {0x20000006, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x5, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x5, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x7f, 0xa, 0x49d, 0xb}, {0x9bf4, 0x6, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x5, 0x1}, {0x3}, {0x2}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x1}, {0x2}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x1, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x5}, {0x6, 0x1}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x1c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x4}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea8}, 0x1, 0x0, 0x0, 0x10}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB="2c726f6f746d6f64653d303030b525b60e30303030303030303030313030303030725f69643d00000000", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) syz_fuse_handle_req(r10, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x130, 0x0, 0x2, {0x0, 0x0, 0x0, '\x00', {0x7ff, 0x0, 0xadf, 0x10, 0x0, 0x0, 0xc000, '\x00', 0x6, 0x181, 0x1, 0xffffffffffffffff, {0x4, 0x6}, {0x1, 0xb}, {0x2000001, 0x20000d}, {0x1000000000, 0xa00}, 0x2, 0x6, 0xfff, 0x5}}}}) write$FUSE_INIT(r10, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x10400005}}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) accept$unix(0xffffffffffffffff, 0x0, 0x0) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r12 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r12, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000017db64000000400006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca4"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 1.166280484s ago: executing program 8 (id=12564): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYRESDEC=0x0], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="ce7700"/16], 0x0}, 0x0) syz_usb_connect$uac2(0x6, 0x7b, &(0x7f00000001c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x1235, 0x8201, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x0, 0x80, 0x7, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x5, 0x1, 0x9, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x9, 0x5, 0xfb, {0x8, 0x25, 0x1, 0x80, 0x30, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x10, 0x7, 0x0, {0x8, 0x25, 0x1, 0x80, 0xe, 0x2d}}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000340)={0x14, &(0x7f00000001c0)=ANY=[], 0x0}, 0x0) 1.03926489s ago: executing program 7 (id=12565): sendmsg$sock(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000280)="a73b0bc93bfb797e5c542761747f2ee9b1f119020956a038fc082fc8d81695304626d4fb940881d1034863c8e53c058b011328c49867ad0f4e655f7d768cb59f54500337ff4aeeec", 0x48}], 0x1}, 0x810) ppoll(&(0x7f0000000200), 0x1, 0x0, &(0x7f0000000080)={[0x8001a0efffffff]}, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x14028010}, 0x20004000) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r0) mbind(&(0x7f0000283000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x7, 0x0) mbind(&(0x7f00000bd000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x0) 1.02865777s ago: executing program 6 (id=12566): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001480)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$cgroup_int(r1, &(0x7f0000001500)=0xffffffffffffffff, 0x12) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x16, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x3, 0x9}, @TCA_PIE_LIMIT={0x8, 0x2, 0x797}]}}]}, 0x40}}, 0x40800) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000240)={'syztnl2\x00', &(0x7f0000000140)={'sit0\x00', r5, 0x1, 0x7800, 0x9, 0xcba, {{0xb, 0x4, 0x2, 0xd, 0x2c, 0x65, 0x0, 0xa, 0x8, 0x0, @multicast2, @local, {[@generic={0x83, 0xe, "0d312c7422c3420363fbc3d5"}, @end, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}]}}}}}) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001680)=[{0x0}, {&(0x7f0000000100)="d53d6ede", 0x4}, {&(0x7f0000000680)="dce2da0d31c65b1f619ab5444489c492351e3c5c3127b828d5046b555dd6a5edf1a0e98a31b63f17ea585b04843b8858370ede532a00bfca50f28fc8f8860fb7e70f55a0ecf4eab8d083525a0125d51244f2a5f9338bd34ba08419f7fb1fd90ecf7cbad4b29d101ead6c5731c9e06067df979679f09b7b724935fb4d193969e17adcdd04658ec005d8309dba43dc7d090da74b6691b824d0f7c762f869cbd82467e15ea2513eeb59ca6f12b1c022ebdd9289fee853ec3e67a76f27cddb562d0a75f789792ad4f68c7f6d9c4a59e06573db427f59530cd07bc9fcc48d1d1372b081402e4c000f32a80bdda1586ac671d88b38873dcd87d1d099d6e7423f3fd73f1696bb482589d1ae5b4d0d70388a5aefb7969c12abffb13500827f810567d7b7b8c3571b6a859250a8b7a3c87e7cb775440553d93b053faf4aad5c06c000c091abbbb7e8a34b9625e2f49657367f2e983459b0588d3044171c444c328673d401b870f8921609c9422aa0d3a218e78dec6e2717920288b38af1273e6f19e61d8c7c47250f51f844f9825df454c99a7033eb0b3dc44c359da79500332b035389874d06b994b0aa4bed66ec724b238542946b183982de9f90adba82107e331c35c1c7e3b3c4865bafdae27c4049e39ab39208997972ea4b95d09c17b1df154876766099ecf2f26ce006a8880e51039b866956a5367679f5a5f39d1f8006469a9b002e2e43e8077cdc9ea5eef6d12e16e18b1b7bbe3a4279457ba5124a0b5541f54301257680c0c8f6ee6bffafea370d5b940c1a61fa16bb6986f830e812cd969cba6886cde8bfee813f8d791aa01ee6f81a5f06e8832d038a8bc2a7c47a2632140a7a0e67e21ee850a5b1d18891bc4b060920f5cc29bacf319e4696f53179bdd57f8c58b1484842a09de34d2cc3aba13f559b5b9b500f10c394eb1125ecdbd952584340ab2ab937ed6d2ae75a3550d965cd7af3ffed2084f6ec7180e46d6afc94111125ecec20efbe3d1911b3d95e948414585d5ca36002cef810dec95a824d7b2d6ee59ddf00aa516e013ad2f4bb9252831eac007dab163cd8cd0a81781ddbbfee4ab54888b5644f7062afd1402932772e8a2c1696d545e3840dccbbd1285c205682a4f5e90f3905c5e8415da4ecbbb5d185817fc98d9143bfea308cccfea9beddd43b66610948647464998952d93f6f28f2f0c49b6f91be1b1574bc59e0f5250fb11a4e0d0cffb2e6d9d017fd058021cba1172112e2d01e512730528ef89402becc771037af4c1fda56ea5f74ae30331984e032ed4e87f1ea4b3f54ecc36b33ea1153433e9ba635a58982695b6b097186b2f398395afd4e09b1771ae0a825db1e3d728516f6eac6218c4523fc54f8e9023828b7ef74d37ab0655781ccc07b21015c7d6cae9ca4fb5156043293f5f3806639acaaea149e51e66f3565d647451a9f8ad841b128f703a3c43f56a4fd5f702b0683372727461109f2722d055d5ef33f113df19df2841fc6004e169f6cdbee29f0fc16df35a509a1dd992072ec6231166a717471356d97ec48f9819068851214830bb2e057af3b0194e4a0cfed74409d5635d9cb174c2f63090c46ea6fc180408a70559087527a57f923dc6d3ffbc423f11797e1dbd8bf8950d71b8a9c54280fd82e7126f219d3180a3efc2c0b4beb9ca052c8f1dbcfc77e6365e072d2bb8693f0f9d671422632f84d4efd8f8e8014ec9519d5b722aaa2ffdb3a08d62bae2ffb130a9c3fe628880db782779dba2977755bea71003114715dfd911a2c6effd0bc5cf7cd7cbe5f39e7627cf10d6c474cc3a7e5d66321020b7ccec96ab6afad12949389c562361fe37524a8adc0a191708151f36f5816e6842b1ba64c8b9ae1724b9c6ee152a0c17d2fa4caa999ede8095d0f8edc178986130bdcaf8ddc053fe550c26bef1f87724565f6ca719e6c28745dc9cb936744a71f9db16524c90165a2cac96dccae10fbd03d30c5de6e47901803e57f5965ca8c18639856c8c828f4cc49a470e024731f98aab9dda41a335a31fd4a3f907b6e578d37b29490d56c7a73dd8c64ed37839aebddf31fbfc067f8cb37ae3f07e371f40d0bc8644b020fb04bb503b62cb78740fcca302ec8016b2e6dfc7323424c8c0602def716f625ceed43fc558dd7bf8723ffbd9d517ede98a2eae210a0366922f405c26accd85d17decefeb73f1e3060700cbdf3e9aa13db8bcb500718a0bb4cfd406fba48a402b98a94a9aa09e2e42c9196e9829c730c07bbe2cfc9091c7df79b12d334d75d9e8d6d4e4209b978f0b5db6d83404185d5211fde6f28041c17168b1509a44d6e6ffddc537be001f3bbad56b01210de6b8227f4a4b408bb0bbf3230c1d18c47654a4a36b908fffc5e8f0ad32ef5fcb9c9b52b5a0b37bb18e216920b0be1a33a6d0c9f466eb409fd1fe82aaa58211b52637d4aac17ca1265300584b3fef5ea390a2e81e83955a804d08e36eb4b062fa5d28bfed4d33ccd9b98079047c94ca14cb86555933d452ae44a35655f1e0d1df4430270b989e34f1e7fb38f4fa262237dc3519a1e35dbdbe712788f55ec5210685b66dd2cca63188cf641db026fe7f8fbbfd6c20a86de5ba45886e4d40af8f232e55f2c3000ef931c0914f89dee937a9dc9e20cd8783fc69785dbdd3083755025e5cae6da31f627df1c9af3c1573c4dabf8358234b472f9ee665237f9003ab2510d10016e5ea46e50590aa23281ccb85d6a05639a404023e90dab81b060669b35e152325393c996db13e7151ede0aa48a95cef411aacda2ab386a88d77002ab15d9d93513a338809d64648f49480987401c65e2ed77e137de14400155f02fbbc8a852bf9aeb1fd401699a1a4e4ee45df76efa80ca1d78adaec00b2629f183294666ecbf86908885bb5fb88cf296d0a1adcaaf7ce39615483c56024d7b2c9582e33d2b496556e41ae2ca836c9d60b5b75c6a6b1628e1cd1944447e81d7cda016c1fd2a052f07f9029df0e58de6b3020ee957b34c6f2d567d6bdc9137f75b8be5f87b6284f6ba88e0fd00a8d0e3f3ee422882fda8b4d9e83546107d0aff7f4a25f8bed3c04d84bb8b9aa9b24f7769bb825754c79a951708ad5035859b381b04692c6a72c146690949406704479384943ef9d46ec081959c820fccc9c283a11f4c2a5fb7edd381d3d1bec34ef59ee1154f1a85d7b6888e843a735812ba405b59e8f2c2435a87a1809c439d4671c3267d762013f28879a3eb1b3390746e48444b9e26ad99548b01d9908fc45217310a95bd975206322e3b9a85a4a38a63e514b223052b145c93ada97b7842dab54b7016cf8d11bf1383bafee8eb71016fb8a38f5b89e8693fea65af69b24cd4c54b246feccf2652be437431de4cd25544abf4d0f652ebc76cd5527c74fc1e6be0d95a7f09a94a1581bad29670f37590fdbd3504569d8e60297217f1752c87ec807ae77746e4ce80de472ce060e4218d8759705bed67b680f79a85ab25b7642d238acc96a1330e764a398630a0cf1b4535cb09d4ba23c3bb49f177bd7c9faac08b1abfeeca445fe2eba2457bc13710fa48f5d893675d2a8645152dfdd5947efb443c0d14b653f825de9ac7c469a9ee1ef7d12ac2b3587346451b4239c72e1aa6924d53e8d634f5a1abfe59a484c8f94d298734b6aa9771881ad567bc37ea0933d3abef9bf23f6a0e02d474e5878fb9442fa67a2bdf77dfd159ffa28f0052868b50be9d0087c98468335c62125d29be72feb7ce4eb553bbe5d94fcbfaed3e055f48db7c967ec10267aa03eb9ab9cafe6be70c6fdd6246d4937ad79fed793b77e22d5e72ed60c108a5880b403135b9ab09c34d1afe39430fd4afe5412e7e50c9ae743a5c7e44441b02ef25f0021601489c257f15b28f1c95936d05c2662da177eb2828b94cfc3c206c6f22daad038c1db4c00a64e4e78918202f705ed0156bea5f72b2b05beabb24c51c5d1edb4e0a1a19346040764120c5b96c48a41104d1ae35b27b6668bb88c733c8dbb8c54994f8dd2a346c9f1335ebe2742cd12b624717eeeb0a9d83d1306e2810a95aa13090fdc3742f04d78db483c495a354112825d62a075623f14cf26a674afcebbdc291c6f4d4940a3b273463d8f43536f2a2227bd5a4094c8ce50859ed1415e9519e91c868455c8d9f9baad65ffb57ac6713fba5b4b757233e6b7406e81735d687d8ea3ce79bd1eecd77482a478feebaaae4828e7155e8bd06cd5f96ce172417207b51a60e59680b52d1300b88d842a165ff346d287580fe1f5bd931164e3f9c3259a33275a85e2c10e98a9c49df87134fda8b789d2ea882abc9b509f7675c50beb436f971b9e20e9ec2a03b1c60a1084392b2373da300f6e1a94f9610f2f27845e02016e300bc4f208b7f43102540983465f35483f7e92337e47217d685baa79363734160e4c49e04e0fbb6b33d3ea62f35ae8b42ff8144ba2a86da615f5d68bebb1644cdfc3118d649bf39b0838c36b3ecdd375842287de06f1cd60ed64ed9babb9c6fa55dd9bff723569073c37bd2203ba7c49c1334f87fdf06b8d833703d34f7cc3fd55a328302b64a4560e8bac4d6da5e768ca538d27597fbb15ea4f10117d3a2f48c28233672598845701de31e045e80b0efe9d6ff8a14d397b68bc3dd5a2ffea05434e55e6065306daceeed2c156dd18660d31b4c8dd1f130255520b9490985943ceb49a6bbeed98ab9dda88ace0e7ee56dab156153e2dea22b4151a41f44da4e5dbdb9b386fd3fe30416b559a6e7570c3f0cba084b5cacecb332ffed9cc082a8158d5cce0ac0fc924746e38bbcfe4dd2b312951f88c005c0d2105c19f4394fc8bfa23ff785dbf03f46aa036e6d8f694cf7496299d45e10f2018b3b528047e4bb618daec790165bff4a3aa8793b02d38b5bb0fa5c9027917fa11c1d1d02b0396b38cc180c863462cb4e7b8781655acef7472b7e23cff520b28f5cd3788667a0534b21b073faaafad4a693dbe4a4394e77999574b01b7bb37659850734bd9527e9f54b76759a34ea32920e382bf056d5b258ac5823c9d46c1884e1c4750400aab82132c1e9c3d6fc39bf130fca9dcb97f7e924a84f731a85a7a1ddf4c9061fb58c3fd6b7683283ee667a6de2b6a454b102c4debbd80e5f2f553143b2e8b34a19cdb59d39caf2d6f9f6cb3a454fc827391fd6bd100797c0caf4faa396a240f3f7be8c952033e228fb212174199faba7708d6bc09921a1d57100323922484e8da64d4db498822554a2211841246fb7749c68b24bb0e6ac032e318405e13cdcae43336f1f4eff3d8cde45bcdfc24d53b13c7b6bb910d2370c0ec42aace3463c7b9e9bf37843546d8e2ed0351c938664639ff995739e90e3168008abf46c95a040a9f4d472556bd4720b263ad5572870655ac4fd2a43f655a1edc266024b6c22bd96aa0c8a2f5ada131acc013ea59b4f6376375e59043780bf885adeb115279d3fc0231f0d5a1aa9fc60f5c585fcf92787d0a47515d6417c061aa5f23e4a3de6a2f40637a93c1c3e3eccdb431e6fc85684d07aa0d1e9c69ce4061f4bebf48f584ebc750a1f63cbf6714a83d1a32e65b0bed9656aa2f77415c0cb2762721938e486f5ce4a2573201ee0b87617e792c92fa699e55a07bde3dfd2405553182fc1303a1cb1f60f19bba7a996757868909e3a2981f746053ed6bf424db05618f9b786a279fb1eabb196ae274b546e2d1a51d6a6c796e4561217b37e812f5c706e14ce491e0186443b2ea73f16cb43536ea89774cc04a4cfcfe59366f1ad4358f25ad8aad093901536c92ab76c3c3ded84b0c7", 0x1000}], 0x3}, 0x20000000) syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010003f6fdd1400000000075f601020301090224000201005004090400f701c873b808090504105802030d5809042b"], &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0}) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0xfffffff3, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c0000002b0000000000000718"], 0x30}, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0d, &(0x7f0000000040)) 952.705126ms ago: executing program 7 (id=12567): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) fcntl$lock(r0, 0x26, &(0x7f0000000300)={0x0, 0x4, 0x4, 0x6, r1}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001400070010000800130008000300080012"], 0x44}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, &(0x7f0000000180)={0x1, 0x0, 0x1, 0xb, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r3, 0x40026f33, &(0x7f0000000000)=0x120) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r5 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r5, 0x84, 0x11, &(0x7f0000000000), 0x8) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r7, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f00000083c0)={{0x1, 0x0, 0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r7, 0x40505412, &(0x7f00000000c0)={0x7, 0x80000000, 0x104, 0x0, 0xe}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r7, 0x40505412, &(0x7f0000000380)={0x4, 0x3ff, 0x101, 0x0, 0xe}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, 0x0, 0x0) getsockopt$netlink(r6, 0x10e, 0x9, &(0x7f0000001840)=""/42, &(0x7f0000000100)=0x2a) sendto(r6, &(0x7f00000000c0)="54619b5936b9d703b92dcd4ff534f4", 0xf, 0x8041, &(0x7f0000000240)=@llc={0x1a, 0x304, 0x1, 0x9f, 0x3, 0x7}, 0x80) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0xa002, 0x0) setfsgid(0xee00) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={0x1c, r4, 0x8, 0x2000000, 0x0, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x4080) 500.000996ms ago: executing program 5 (id=12571): socket(0x2, 0x80805, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f0000000180), 0x4000000000002f8, 0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) (async) listen(r2, 0x0) (async) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) (async) syz_usb_control_io$lan78xx(0xffffffffffffffff, &(0x7f0000000300)={0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="4010100000ef0f0bb3026dabbd74a30635b09dcb6be4"], &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x240a}}}, &(0x7f00000007c0)={0x34, &(0x7f0000000580)={0x20, 0x12, 0xee, "3e2402ded2485a13bc07e21ca5ffdc21c42e62a447870cb415f4054930b8f1310231c69491f343a69be836dc6e617f6063f2cc43304d605ecaa03d3d9b3f8d202ab89fabcf702a604812e04142a4a35e8ca73ce7d87298959f7b15a0fa375fb2cd57ab46c594f7d2ee95b2699a792709b24417402e99afac6f90b2dccae42753016d768c6240d37c959dedd274085fa30c42f50fab8ab5e0711556ce071ef295a47421f8e780eda9f135f1fe1a286ad53f77194b70ed2bfcd678ee077963317d9d2fa00895f7375e9133466a7a4c7055d40b49a526e43234d3af7acdaa7cdd62c3daabfc61ab7f3c00c072f274a4"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x48}, &(0x7f0000000700)={0xc0, 0xa1, 0x4, 0x7}, &(0x7f0000000740)={0x40, 0xa0, 0x4, 0x1f}, &(0x7f0000000780)={0xc0, 0xa2, 0x2f, "59d614dcf077cdaa4cabc6691cd659926180c7dec1c6895f36224fd8bd6b24bc06d28ac6780e7606e6fa05827d8245"}}) (async) recvfrom(r3, 0x0, 0x0, 0x4121, 0x0, 0x0) (async, rerun: 32) syz_open_dev$dri(0x0, 0xd21, 0x4000) (async, rerun: 32) r4 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000010029bd7000ffbedf2500000000", @ANYRES8=0x0, @ANYRES64=r2], 0x48}, 0x1, 0x0, 0x0, 0x200000c1}, 0x37ab2ee4db4748aa) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f00000000c0)) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000180)={[{0x5, 0x1000, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x6, 0x1}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x5, 0x0, 0x3, 0x10}, {0x0, 0x4, 0xfa, 0x0, 0x0, 0x0, 0x2, 0x10, 0x2}], 0xa}) (async, rerun: 64) r8 = msgget$private(0x0, 0x4a0) (async, rerun: 64) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c0000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c0002800600010000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) (async) msgctl$IPC_STAT(r8, 0x2, 0x0) (async, rerun: 32) msgsnd(r8, 0x0, 0xe3, 0x0) (async, rerun: 32) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0xf, 0x3, 0x4, 0x1000000000000002, 0x102000000000002, 0x8000000d, 0x2004c8, 0xffff, 0x2467, 0xffffffff, 0x1, 0x7fffffffffffffff, 0xd0d, 0xfffffffffffffff9, 0x2000000000000003, 0x5], 0x80a0000, 0x4284}) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async, rerun: 64) ioctl$KVM_RUN(r7, 0xae80, 0x0) (rerun: 64) 415.303353ms ago: executing program 7 (id=12572): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {r2}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {r2}}, './file0\x00'}) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x10, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x10, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x3, 0x5) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106a058400000000000001090224000100000000090400000103000000092100000001220b0009058103"], 0x0) (async) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106a058400000000000001090224000100000000090400000103000000092100000001220b0009058103"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="007e1c51aa7b0000eb96014f284349c20042103a7066f20f59edd6abaa9328baaddae5c0a78c96e355b0f057ced5d6347099232f5296f8228f35d763bc3b2fe723450a92c496a9c98c58cf97e515e8cb3b758407c23874a4f83232f4a14e8cfb49ff55700bcd489daff1a79d2d06c94ca2d2631dec226a8a41dde1bd7e536c"], 0x0}, 0x0) sendmmsg(r4, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0801a1ab000000008c1f00007740d7e7454e8ad410083f9a0400993ffc557f4e714cd40b42aa258d38862578148afc3afedf76f052419aa2b5a434c769251ac563734e7ffed764271efd8a8b68f3b5a458a7c577aad74ea8ecad2eab51ef5dff0f66b50a38aea8a7b02265365dba832b3142f88565d77811bf25748d39aa4199e9f17e1293a10bb33b383a88bf4997b05a8da88b45e8b4e2deb65d", @ANYRES64=r4], 0x108}}], 0x2, 0x2000c040) 359.424089ms ago: executing program 5 (id=12573): socket$nl_netfilter(0x10, 0x3, 0xc) (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000009e000/0x1000)=nil, 0xffffffffffffffb5, &(0x7f00000006c0)='\xe3\x1f\xc74\x93\x18\x9a\x8e\x8f\x02\x9eZ\x00\x0e\xa2*;$hc\x83\xce\xee\xe0/\x94\x8a]\xd7\x02\xb8)\xc9\x9b\xa2\x18\xfasw[\xcd\xf2C\vq7\xcd\x847^6?~\xd9\xb5e!\xeb\x9f\xcf\xc3\x82E\xb0*\xeb\xce\x0e\x91v\x19\x9bL7\xd8\x11_\x8d\x9a\x15\xffEc\x1e\xe58?\xc4\xcf\xc1&l\xcb\xfb\x83\xc2[\x81\xe4\xd4=\xf3\x86+\xb2\xf3\xc7x\x01w\x1fE!\xab\xb1\xc3d\xbf\x06\xa6') (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000480)={[0x8000]}, &(0x7f00000004c0), 0x8) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x4008, r0}, 0x18) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = openat$cgroup_ro(r3, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f00000007c0)=ANY=[@ANYBLOB="f8c527839c2fdca1fc35bb264a2aaeb2860d8f751bc40fd01ce61d9cc13ddf2f088167506116a296134280f595d08b8acc4930da679bb296d35a3d34e9ab7aecf1be749a040d4e3da0aa85372409d3fd801078e16ca6f6e8365fc651fdbef78f98ed018cbb7ac02c340a584f04c911da6e8e1cf16cb91a74549c", @ANYRESHEX=r0, @ANYRESHEX=r5, @ANYRES16=0x0, @ANYRESHEX=r4, @ANYRES64=r5, @ANYBLOB="320553dff66cd0ab9e7ce80c8526d4f52ba66fb7a6acd1c57e0b52b8b1ef9072f330a449098b21aa9be7322ea7806cc830bb04b926a0a9302c3d5a43f048aabb12f515e4110124c4b196010486aa37483aeb395b4c75e6b896de7aacccba4574bf57477f34bd006bf39ae0f69fa171c2ee6c886dc7bcf2f1716bce1eedd314c339f584843a6e121ed06843bc6ac6a95e423cfff30c69d776a5fd48b5"], 0x3261e) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) (async) unshare(0x2c020400) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x23, 0x0, &(0x7f0000000200)) (async) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f000001fac0)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x40890}, 0x800) (async) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000580)={0x0, 0x5}, &(0x7f00000005c0)=0x8) (async) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="64670feea1096f00003e660f38054c880f323e26640fb9a9c94f660fc7b27f1a360f09366764f4660fdd40e69a3a00e300baa000b0e5ee", 0x37}], 0x1, 0x6, 0x0, 0x41) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x40000, 0x2000, &(0x7f0000181000/0x2000)=nil}) (async) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000440)={&(0x7f00000002c0), 0x10, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="07000000d20000000000020000000000", @ANYRES64=r8, @ANYRES64=r9/1000+60000, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0100000001000000dfffff5f07020000fd32e7ec9a8e6df4"], 0x48}, 0x1, 0x0, 0x0, 0x4008804}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000540)={{&(0x7f00007c5000/0x2000)=nil, 0x2000}, 0x4}) 318.722784ms ago: executing program 1 (id=12574): kexec_load(0x3, 0x6, &(0x7f00000005c0)=[{&(0x7f0000000000), 0x0, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3e45715203107f8ce516d99c8c7db918e0989ef123cc524fa8ae0af5c952de542a268179439f62e20fb410df0a4c2e54ec35543", 0xdc, 0x5, 0xffffffff}, {0x0, 0x0, 0x5, 0x4}, {0x0, 0x0, 0x7, 0x2}, {0x0, 0x0, 0x2, 0xfffffffffffffffa}, {&(0x7f00000004c0)="fd7cd1d51fb9987e67d12dded82fd30b5e7675f10da30291367bede16a4fe296961baf3caee5bd5c0d76b25c3de77c56ddefc936fa712ec3d7e51f4b16e682d3ee59b2abf6c05927c1edb91d54f66cf99928f710cf98acec87a3d75a6388bab3c5a1474d29cae1f0fd92cde6f444bf490f27f37e198aa55b403df846ce1732f7cf4c12d92aece1289b4b10b7d84532a07762548e3f3915b6575e8ef8130395476b9a721a7668c608c4d2f70aee2be4ae96ff0e5925b138fec99f91f19d8618037fe2842d248c8d44f425e54da4a668059f5124222cb4955f07", 0xd9, 0x5, 0x6}], 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="4274aa814c8f6ea8d8db43", 0xb}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307371d68817c7eca00a16bce0ea949", 0x97}], 0x2}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000340)={0x3f, 0x3, 0x9}, 0x10) write(r3, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000300000000000000080008001d000000", 0x24) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 252.302567ms ago: executing program 5 (id=12575): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x28000) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x0, 0x1, 0x0, 0x25dfdbfe, {0x2, 0x2, 0x2}}, 0x14}, 0x1, 0x40030000000000, 0x0, 0x800}, 0x80) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x4048010) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000001c0)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd28, 0x25dfdbfb, {0xa, 0x80, 0x80}, [@RTA_PREFSRC={0x8, 0x7, @broadcast}]}, 0x24}}, 0x20000050) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES64], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) r4 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="016f0800010027000000270000004600fd5e00000000008490783fffff20ac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba0007009078000abcd5fa37f11809c4000502ffffff07000007000002d58838"], 0xfd6c) 127.486603ms ago: executing program 5 (id=12576): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0xe8, 0x15, 0x9, 0x70bd27, 0x25dfdc03, {0x1}, [@typed={0x8, 0x115, 0x0, 0x0, @u32=0x1}, @typed={0x14, 0x130, 0x0, 0x0, @ipv6=@private1}, @generic="898dc5e22b1b0861670a015d77023ef72f9096fe4c823cad5ec5915c872ed28d24696d39efea1dee3c0bf9c29e97e2ff68896e6c8f3a80c2d91b4210f27383be6cbc8d80c08900a085ace122c45485ab393edd363986e304dc450ce6fd903904bc661a253439eafec435bea7c8be7840e95762861ee4fc633a88c6e73b087ae99e02734d018c6d6445c295da4d57b4b93664cfd286117c3ace83cd49de0f9542416f96c9b31fb8362f11e4a4478ce55b8201e1435c"]}, 0xe8}, 0x1, 0x0, 0x0, 0x42804}, 0x84) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'team_slave_1\x00', 0xca02}) r3 = socket$netlink(0x10, 0x3, 0x14) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="042f"], 0x102) pwritev(0xffffffffffffffff, &(0x7f00000012c0)=[{&(0x7f0000000000)="fd21", 0x2}], 0x1, 0x1, 0x8a60) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRES32], 0x9) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000280)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_MODE_CURSOR2(r2, 0xc02464bb, &(0x7f00000000c0)={0x2, r6, 0x6, 0x0, 0x7, 0xa, 0x9, 0xb6f, 0x80000001}) preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000340)=""/4, 0x4}], 0x1, 0x10, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 127.236368ms ago: executing program 1 (id=12577): sendmsg$sock(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000280)="a73b0bc93bfb797e5c542761747f2ee9b1f119020956a038fc082fc8d81695304626d4fb940881d1034863c8e53c058b011328c49867ad0f4e655f7d768cb59f54500337ff4aeeec", 0x48}], 0x1}, 0x810) ppoll(&(0x7f0000000200), 0x1, 0x0, &(0x7f0000000080)={[0x8001a0efffffff]}, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x80000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close(r1) mbind(&(0x7f0000283000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x7, 0x0) mbind(&(0x7f00000bd000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x0) 86.535326ms ago: executing program 5 (id=12578): r0 = syz_open_dev$sg(&(0x7f0000000280), 0x2, 0x7a3841) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000000)) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRESOCT=r1, @ANYBLOB="8a450200000000002400128009000100626f6e640000000014000280050001000600000008000200", @ANYRES16=r0], 0x44}, 0x1, 0x0, 0x0, 0x20000044}, 0x20040891) (async) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x1000, 0x57111544e8cf5cbe}) 33.503668ms ago: executing program 5 (id=12579): r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) r2 = syz_open_dev$amidi(&(0x7f0000000080), 0x827, 0x80000) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000001580)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r4, 0x5b16, 0x0) syz_usb_control_io(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000c, 0x204031, r2, 0x5ce8f000) syz_usb_disconnect(r0) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000040)='\b', 0x1}], 0x1) 0s ago: executing program 1 (id=12580): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = getpid() syz_usb_connect(0x3, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000049ffe840e5130100534e0000000109021b0001000000000904000001", @ANYRES8], 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000240)={0x2, r1}) r2 = socket$alg(0x26, 0x5, 0x0) symlinkat(&(0x7f0000000080)='./file0\x00', r0, &(0x7f00000000c0)='./file0\x00') r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r4, 0x40a0ae49, &(0x7f0000000180)={0x101fc, 0x4, 0x25000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x4e25, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x48}, 0x0) r5 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000003700)=[{&(0x7f0000000600)="0000007f07c4cbc7af33ab5f99653a1795d517a861eff570fd40b4d806e877e099fb97c2b57d0a450c1bd104000030c42eaaa02480220a9286526f01583feaaef7782f4ae13d9a68e82a42095c8e4611464d36428f91cddc01c35544e0a034ced1e894461c7cf8dc4eec87755c0aa2faf8", 0x71}], 0x1}, 0x0) recvmsg$kcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000180)=""/100, 0x64}], 0x1, &(0x7f0000000800)=""/173, 0xad}, 0x22) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001173a6140f41515006ed10102030109022400013600a0000904"], 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) syz_usb_connect$uac2(0x1, 0xc4, &(0x7f00000003c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x38, 0x2a39, 0x3fd2, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb2, 0x3, 0x1, 0x9a, 0x0, 0x3d, {0x8, 0xb, 0x2, 0x1, 0x1, 0x4, 0x20, 0xa}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x8, 0x5, 0x1e}, [@input_terminal={0x10, 0x24, 0x2, 0x4, 0x405, 0x2, 0x2, 0x8e, 0x3, 0x45, 0x6, 0x8b}, @mixer_unit={0x5, 0x24, 0x4, 0x2, 0xd}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x0, 0xa}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x4, 0x1, 0x5, 0x8, 0x1}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x8}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x37, 0x6, 0xfa, 0x12, 0xff}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x1, 0xd7, 0x8, "ce", "6c96e0"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x8, 0x2, 0x1, {0x8, 0x25, 0x1, 0x101, 0xc, 0x3, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x6e, 0x5, 0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x3, 0x5, 0x0, {0x8, 0x25, 0x1, 0x83, 0x0, 0x9, 0x200}}}}}}}}]}}, &(0x7f0000000a00)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x110, 0x6, 0x6, 0x3, 0x20, 0xb}, 0xf, &(0x7f0000000580)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x6, 0x8, 0xd}]}, 0x7, [{0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x44d}}, {0xa5, &(0x7f0000000a80)=@string={0x90, 0x3, "c6fa690292daa6353d6341721d19a0660cbc4005b36176426d3958bbab033a62fef4b6145009f6bdc5de936725a08b008a4dd2f6e6c7a8bf4e4306b58ba08c9fa2bf55c5bb3bdbf5cdbb921fbf1cf9f5701595638173dfbafcf6610c2f237a5cc2fa11679c242f93cbbbb938156799e4672fe4f87e98ef919fb605e5a391fe977cafe77911a788d05651b660d51b"}}, {0xa, &(0x7f0000000740)=@string={0xa, 0x3, "fb9e08479c25a58c"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x40e}}, {0x15, &(0x7f00000007c0)=@string={0x15, 0x3, "a43eee387b279131e423619dec3643f59d5265"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x404}}, {0xa0, &(0x7f0000000940)=@string={0xa0, 0x3, "f28a2e4bbe3818a99442786ae8ca084f3efa1500cc4dadc47bdffc1bb550d2bd929756c158624fab1f2831bec5e1a60f56d7df70933490fbf85575050e728034a49378e6307f3ec9206eb27dc342523c16555ecd21dd3e1341f1ddd3aed151529a33ea5a5cf1ab0bdd8337a01b89ed3d40ec93d8df07ed331b1ff4fdcc06b7f4915ff24eba84c819152c31e7ab6081eebf78a8581d6414d345ca6d611fa8"}}]}) r6 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x96, 0x1, 0x1, 0xd59f80, 0x19ef, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0xbb6, 0x5, 0x1c, {0x80008, 0xff7fffff}, 0xd0, 0x9}}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004580)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000027c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x8000}], 0x1, 0x20000000) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r7, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340), 0x41}]) fcntl$notify(r0, 0x402, 0x80000027) openat$cgroup_ro(r0, &(0x7f0000000000)='cpuacct.stat\x00', 0x275a, 0x0) kernel console output (not intermixed with test programs): SCALL_64_after_hwframe+0x77/0x7f [ 2569.336519][T16613] do_syscall_64+0x174/0x580 [ 2569.336553][T16613] ? trace_irq_disable+0x3b/0x140 [ 2569.336583][T16613] ? clear_bhb_loop+0x40/0x90 [ 2569.336609][T16613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2569.336647][T16613] RIP: 0033:0x7f8a7039ce59 [ 2569.336668][T16613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2569.336687][T16613] RSP: 002b:00007f8a71197028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2569.336717][T16613] RAX: ffffffffffffffda RBX: 00007f8a70615fa0 RCX: 00007f8a7039ce59 [ 2569.336733][T16613] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000006 [ 2569.336747][T16613] RBP: 00007f8a71197090 R08: 0000000000000000 R09: 0000000000000000 [ 2569.336761][T16613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2569.336774][T16613] R13: 00007f8a70616038 R14: 00007f8a70615fa0 R15: 00007f8a7073fa48 [ 2569.336808][T16613] [ 2570.060292][T16631] loop5: detected capacity change from 0 to 7 [ 2570.090247][T16631] Dev loop5: unable to read RDB block 7 [ 2570.104508][T16631] loop5: unable to read partition table [ 2570.124132][T16631] loop5: partition table beyond EOD, truncated [ 2570.144885][T16631] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 2570.421745][T16637] binder: 16636:16637 ioctl c0306201 0 returned -14 [ 2571.047969][T16643] netlink: 76 bytes leftover after parsing attributes in process `syz.8.12048'. [ 2571.069793][T16643] netlink: 76 bytes leftover after parsing attributes in process `syz.8.12048'. [ 2571.202970][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2571.505128][T16650] : entered promiscuous mode [ 2572.649802][T16672] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2572.663098][T16672] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2572.674210][T16672] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2572.680481][T16672] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2572.687253][T16672] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2572.799314][T16681] fuse: Invalid uid '00000000000000000004' [ 2572.852846][T16688] loop5: detected capacity change from 0 to 7 [ 2572.859941][T16688] Dev loop5: unable to read RDB block 7 [ 2572.865890][T16688] loop5: AHDI p1 p2 p3 [ 2572.870169][T16688] loop5: partition table partially beyond EOD, truncated [ 2572.877709][T16688] loop5: p1 start 3741368766 is beyond EOD, truncated [ 2572.885908][T16688] loop5: p2 size 151585024 extends beyond EOD, truncated [ 2572.932917][ T29] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 2572.985613][T14372] udevd[14372]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 2573.102861][ T29] usb 6-1: Using ep0 maxpacket: 16 [ 2573.198719][T16700] netlink: 48 bytes leftover after parsing attributes in process `syz.7.12063'. [ 2573.983780][T16704] syzkaller0: entered promiscuous mode [ 2573.995529][T16704] syzkaller0: entered allmulticast mode [ 2574.027560][T16704] tipc: Enabled bearer , priority 0 [ 2574.035446][T16703] tipc: Resetting bearer [ 2574.105661][T16703] tipc: Disabling bearer [ 2574.204926][T16706] loop5: detected capacity change from 0 to 7 [ 2574.212206][T16706] Dev loop5: unable to read RDB block 7 [ 2574.218210][T16706] loop5: unable to read partition table [ 2574.224469][T16706] loop5: partition table beyond EOD, truncated [ 2574.230758][T16706] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 2574.573429][ T4086] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 2574.652027][T26943] Bluetooth: hci2: command 0x0406 tx timeout [ 2574.744395][T26943] Bluetooth: hci0: command 0x0c1a tx timeout [ 2574.750547][T26943] Bluetooth: hci3: command 0x0c1a tx timeout [ 2574.756802][T26943] Bluetooth: hci1: command 0x0406 tx timeout [ 2574.763230][T12239] Bluetooth: hci4: command 0x0406 tx timeout [ 2574.794114][ T4086] usb 2-1: Using ep0 maxpacket: 32 [ 2574.833416][ T4086] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2574.918910][ T4086] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2574.982340][ T4086] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2575.008144][ T4086] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2575.091752][ T4086] usb 2-1: config 0 descriptor?? [ 2575.101506][ T4086] hub 2-1:0.0: USB hub found [ 2575.346807][ T4086] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 2575.743466][ T29] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2575.780392][ T4086] hid-generic 0003:046D:C31C.0091: unknown main item tag 0x0 [ 2575.811298][ T29] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 2575.868855][ T29] usb 6-1: can't read configurations, error -71 [ 2575.890323][ T4086] hid-generic 0003:046D:C31C.0091: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 2575.945444][T16727] loop5: detected capacity change from 0 to 7 [ 2575.966616][T16727] loop5: p1 < > p3 p4 [ 2575.984771][T16727] loop5: partition table partially beyond EOD, truncated [ 2576.016528][T16727] loop5: p3 size 3645588866 extends beyond EOD, truncated [ 2576.053061][T16708] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:16x2160 (0x33424752, 8, 0, 0, 0) [ 2576.069249][T16727] loop5: p4 start 33554432 is beyond EOD, truncated [ 2576.143973][T10297] usb 2-1: USB disconnect, device number 4 [ 2576.201169][T14372] udevd[14372]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 2576.228231][T14514] udevd[14514]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 2576.257743][T16739] syzkaller0: entered promiscuous mode [ 2576.275546][T16739] syzkaller0: entered allmulticast mode [ 2576.408439][T16721] openvswitch: netlink: Missing key (keys=1040, expected=10000000) [ 2576.426132][T16721] openvswitch: netlink: Missing key (keys=1040, expected=10000000) [ 2576.452661][T16721] openvswitch: netlink: Missing key (keys=1040, expected=10000000) [ 2576.461303][T16721] openvswitch: netlink: Missing key (keys=1040, expected=10000000) [ 2576.523447][ T29] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 2576.604466][T16746] loop5: detected capacity change from 0 to 7 [ 2576.620861][T16746] Dev loop5: unable to read RDB block 7 [ 2576.640393][T16746] loop5: unable to read partition table [ 2576.657281][T16746] loop5: partition table beyond EOD, truncated [ 2576.675540][ T29] usb 6-1: Using ep0 maxpacket: 16 [ 2576.681406][T16746] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 2576.698492][ T29] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2576.720082][ T29] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2576.749190][ T29] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2576.776067][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2576.818317][ T29] usb 6-1: Product: syz [ 2576.846289][ T29] usb 6-1: Manufacturer: syz [ 2576.855939][ T29] usb 6-1: SerialNumber: syz [ 2576.892110][ T29] usb 6-1: 0:2 : does not exist [ 2577.081496][T16735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2577.097751][T16754] netlink: 48 bytes leftover after parsing attributes in process `syz.6.12079'. [ 2577.118099][T16735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2577.150949][T16735] ip6t_srh: unknown srh match flags 4000 [ 2577.355189][ T29] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 2577.454540][ T29] usb 6-1: USB disconnect, device number 26 [ 2577.499584][T14372] udevd[14372]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2585.286121][ C1] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2590.404409][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.410762][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 2602.563316][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2621.122997][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 2650.679186][T16774] loop5: detected capacity change from 0 to 7 [ 2650.712928][T16774] loop5: p1 < > p3 p4 [ 2650.717315][T16774] loop5: partition table partially beyond EOD, truncated [ 2650.733708][T16774] loop5: p3 size 3645588866 extends beyond EOD, truncated [ 2650.749467][T16774] loop5: p4 start 33554432 is beyond EOD, truncated [ 2650.776144][ T5001] loop5: p1 < > p3 p4 [ 2650.791978][ T5001] loop5: partition table partially beyond EOD, truncated [ 2650.812385][ T5001] loop5: p3 size 3645588866 extends beyond EOD, truncated [ 2650.821585][ T5001] loop5: p4 start 33554432 is beyond EOD, truncated [ 2650.969914][T16771] udevd[16771]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 2650.985617][T16775] udevd[16775]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 2651.014086][T10297] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 2651.105003][T16771] udevd[16771]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 2651.115173][T16775] udevd[16775]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 2651.163151][T10297] usb 6-1: device descriptor read/64, error -71 [ 2651.195970][T16201] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 2651.364470][T16201] usb 2-1: Using ep0 maxpacket: 32 [ 2651.380911][T16201] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2651.410638][T10297] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 2651.425023][T16201] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2651.432068][T16798] netlink: 48 bytes leftover after parsing attributes in process `syz.7.12093'. [ 2651.479621][T16201] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2651.488900][T16201] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2651.519688][T16201] usb 2-1: config 0 descriptor?? [ 2651.531096][T16201] hub 2-1:0.0: USB hub found [ 2651.592794][T10297] usb 6-1: device descriptor read/64, error -71 [ 2651.703261][T10297] usb usb6-port1: attempt power cycle [ 2651.740628][T16201] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 2651.845874][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 2651.854584][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 2652.102855][T10297] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 2652.143722][T10297] usb 6-1: device descriptor read/8, error -71 [ 2652.181867][T16201] hid-generic 0003:046D:C31C.0092: unknown main item tag 0x0 [ 2652.250195][T16201] hid-generic 0003:046D:C31C.0092: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 2652.404170][T10297] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 2652.451103][T10297] usb 6-1: device descriptor read/8, error -71 [ 2652.495517][T16801] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:16x2160 (0x33424752, 8, 0, 0, 0) [ 2652.593714][ T29] usb 2-1: USB disconnect, device number 5 [ 2652.596280][T10297] usb usb6-port1: unable to enumerate USB device [ 2653.372087][T16805] loop5: detected capacity change from 0 to 7 [ 2653.381012][T16805] Dev loop5: unable to read RDB block 7 [ 2653.389541][T16805] loop5: unable to read partition table [ 2653.398142][T16805] loop5: partition table beyond EOD, truncated [ 2653.406873][T16805] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 2653.453206][T16201] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 2653.616539][T16201] usb 2-1: config 8 has an invalid interface number: 177 but max is 0 [ 2653.635430][T16201] usb 2-1: config 8 has no interface number 0 [ 2653.650919][T16201] usb 2-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 2653.675806][T16201] usb 2-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0 [ 2653.705208][T16201] usb 2-1: config 8 interface 177 has no altsetting 0 [ 2653.717668][T16201] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 2653.729673][T16201] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2653.773051][T16803] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2654.009626][T16803] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12094'. [ 2654.075239][T16821] netlink: 'syz.1.12094': attribute type 29 has an invalid length. [ 2654.094627][T16821] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12094'. [ 2654.118924][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 2654.118943][ T30] audit: type=1326 audit(1781468835.628:17361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16802 comm="syz.1.12094" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8a7039ce59 code=0x0 [ 2654.193618][T10297] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 2654.207549][T16716] Bluetooth: hci4: Invalid handle: 0x9c98 > 0x0eff [ 2654.261106][T16825] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2654.311718][T16823] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2654.318491][T16823] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2654.326325][T16823] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2654.332562][T16823] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2654.340050][T16823] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2654.390076][T10297] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 2654.419135][T10297] usb 6-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 2654.443357][T10297] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2654.472932][T16201] usb 2-1: string descriptor 0 read error: -71 [ 2654.501248][T16201] ir_toy 2-1:8.177: required endpoints not found [ 2654.513637][T16829] netlink: 'syz.8.12103': attribute type 25 has an invalid length. [ 2654.530707][T10297] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 2654.548417][T16201] usb 2-1: USB disconnect, device number 6 [ 2654.809116][T16838] netlink: 48 bytes leftover after parsing attributes in process `syz.6.12105'. [ 2655.079881][T16845] loop5: detected capacity change from 0 to 7 [ 2655.092081][T16845] Dev loop5: unable to read RDB block 7 [ 2655.098366][T16845] loop5: AHDI p1 p2 p3 [ 2655.102980][T16845] loop5: partition table partially beyond EOD, truncated [ 2655.110782][T16845] loop5: p1 start 3741368766 is beyond EOD, truncated [ 2655.125398][T16845] loop5: p2 size 151585024 extends beyond EOD, truncated [ 2655.182507][T16771] udevd[16771]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 2655.426763][T16851] openvswitch: netlink: Invalid VLAN frame [ 2655.605310][T10297] gspca_stv0680: usb_control_msg error 2, request = 0x6, error = -32 [ 2655.624701][T10297] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32 [ 2655.634443][T10297] stv0680 6-1:4.0: last error: 86, command = 0x78 [ 2655.680450][T16854] syzkaller0: entered promiscuous mode [ 2655.691832][T16854] syzkaller0: entered allmulticast mode [ 2655.719103][T16854] tipc: Enabled bearer , priority 0 [ 2655.735874][T16853] tipc: Resetting bearer [ 2655.779713][T16853] tipc: Disabling bearer [ 2655.815093][T10297] usb 6-1: USB disconnect, device number 31 [ 2656.133679][T16201] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 2656.302876][T16201] usb 2-1: Using ep0 maxpacket: 32 [ 2656.310032][T16201] usb 2-1: too many endpoints for config 0 interface 0 altsetting 15: 254, using maximum allowed: 30 [ 2656.321356][T16201] usb 2-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 2656.335305][T16201] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2656.342101][T16201] usb 2-1: New USB device found, idVendor=044f, idProduct=b304, bcdDevice= 0.00 [ 2656.343269][ T4504] Bluetooth: hci4: command 0x0406 tx timeout [ 2656.351864][T16716] Bluetooth: hci2: command 0x0406 tx timeout [ 2656.363659][T16201] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2656.378229][T16201] usb 2-1: config 0 descriptor?? [ 2656.392895][T16201] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2656.402972][T16716] Bluetooth: hci0: command 0x0c1a tx timeout [ 2656.403062][ T4504] Bluetooth: hci3: command 0x0c1a tx timeout [ 2656.409068][T16716] Bluetooth: hci1: command 0x0406 tx timeout [ 2656.712944][ T4086] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 2656.872856][ T4086] usb 6-1: Using ep0 maxpacket: 16 [ 2656.880774][ T4086] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2656.892528][ T4086] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 18, changing to 8 [ 2656.904145][ T4086] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2656.917434][ T4086] usb 6-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 2656.926560][ T4086] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2656.937927][ T4086] usb 6-1: config 0 descriptor?? [ 2657.074963][T16865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2657.089693][T16865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2657.352140][ T4086] logitech 0003:046D:C293.0093: unknown main item tag 0x0 [ 2657.360906][ T4086] logitech 0003:046D:C293.0093: unknown main item tag 0x0 [ 2657.368304][ T4086] logitech 0003:046D:C293.0093: unknown main item tag 0x0 [ 2657.376612][ T4086] logitech 0003:046D:C293.0093: unknown main item tag 0x0 [ 2657.383858][ T4086] logitech 0003:046D:C293.0093: unknown main item tag 0x0 [ 2657.391394][ T4086] logitech 0003:046D:C293.0093: unknown main item tag 0x0 [ 2657.399450][ T4086] logitech 0003:046D:C293.0093: unknown main item tag 0x0 [ 2657.407308][ T4086] logitech 0003:046D:C293.0093: unknown main item tag 0x0 [ 2657.417688][ T4086] logitech 0003:046D:C293.0093: hidraw0: USB HID v0.00 Device [HID 046d:c293] on usb-dummy_hcd.5-1/input0 [ 2657.432692][ T4086] logitech 0003:046D:C293.0093: no inputs found [ 2657.550550][T16863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2657.560774][T16863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2657.728348][T16879] loop5: detected capacity change from 0 to 7 [ 2657.737265][T16879] Dev loop5: unable to read RDB block 7 [ 2657.744328][T16879] loop5: AHDI p1 p2 p3 [ 2657.748654][T16879] loop5: partition table partially beyond EOD, truncated [ 2657.756886][T16879] loop5: p1 start 3741368766 is beyond EOD, truncated [ 2657.764596][T16879] loop5: p2 size 151585024 extends beyond EOD, truncated [ 2657.817007][T16771] udevd[16771]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 2657.866220][T16881] input: syz0 as /devices/virtual/input/input195 [ 2658.249254][T16891] fuse: Bad value for 'fd' [ 2658.889780][T10297] usb 2-1: USB disconnect, device number 7 [ 2659.374626][T16900] bridge0: port 3(geneve0) entered disabled state [ 2659.382611][T16900] bridge0: port 2(bridge_slave_1) entered disabled state [ 2659.390254][T16900] bridge0: port 1(bridge_slave_0) entered disabled state [ 2659.677892][T16905] loop5: detected capacity change from 0 to 7 [ 2659.707677][T16905] Dev loop5: unable to read RDB block 7 [ 2659.726087][T16905] loop5: unable to read partition table [ 2659.749224][T16905] loop5: partition table beyond EOD, truncated [ 2659.768643][T16905] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 2659.886404][T16900] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2659.927438][T16917] usb 6-1: USB disconnect, device number 32 [ 2659.990170][T16900] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2660.094261][T16716] Bluetooth: hci2: command 0x0406 tx timeout [ 2660.101599][T16201] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 2660.135231][T16201] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 2660.365294][T16917] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 2660.543885][T16917] usb 6-1: Using ep0 maxpacket: 8 [ 2660.561365][T16917] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 2660.601148][T16917] usb 6-1: config 179 has no interface number 0 [ 2660.629503][T16917] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2660.670392][T16917] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 2660.703188][T12717] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2660.723374][T16917] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2660.743015][T12717] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2660.768357][T16917] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 2660.783195][T12717] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2660.808999][T16917] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2660.821614][T12717] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2660.861472][T16917] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2660.901182][T16917] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2660.934803][T16925] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 2660.985365][T16917] xpad 6-1:179.65: probe with driver xpad failed with error -5 [ 2661.238866][T16946] netlink: 'syz.1.12135': attribute type 22 has an invalid length. [ 2661.264851][T16946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12135'. [ 2661.275278][T16949] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2661.316645][T16949] bond3: (slave lo): Enslaving as an active interface with an up link [ 2661.338082][T16949] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 2661.540900][T16949] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2661.550659][T16949] bridge0: port 2(bond4) entered blocking state [ 2661.559215][T16949] bridge0: port 2(bond4) entered disabled state [ 2661.565798][T16949] bond4: entered allmulticast mode [ 2661.574532][T16949] bond4: entered promiscuous mode [ 2661.690633][T16958] sctp: [Deprecated]: syz.1.12137 (pid 16958) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2661.690633][T16958] Use struct sctp_sack_info instead [ 2661.869628][T16965] fuse: Bad value for 'fd' [ 2661.972183][T16969] loop5: detected capacity change from 0 to 7 [ 2661.980075][T16969] Dev loop5: unable to read RDB block 7 [ 2661.985985][T16969] loop5: unable to read partition table [ 2661.992000][T16969] loop5: partition table beyond EOD, truncated [ 2661.998795][T16969] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 2662.057181][T16971] FAULT_INJECTION: forcing a failure. [ 2662.057181][T16971] name failslab, interval 1, probability 0, space 0, times 0 [ 2662.072154][T16971] CPU: 1 UID: 0 PID: 16971 Comm: syz.6.12142 Tainted: G L syzkaller #0 PREEMPT(full) [ 2662.072178][T16971] Tainted: [L]=SOFTLOCKUP [ 2662.072184][T16971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2662.072193][T16971] Call Trace: [ 2662.072199][T16971] [ 2662.072207][T16971] dump_stack_lvl+0xe8/0x150 [ 2662.072231][T16971] should_fail_ex+0x40c/0x560 [ 2662.072250][T16971] should_failslab+0xa8/0x100 [ 2662.072284][T16971] __kmalloc_noprof+0xe8/0x750 [ 2662.072307][T16971] ? sk_prot_alloc+0xe7/0x210 [ 2662.072334][T16971] sk_prot_alloc+0xe7/0x210 [ 2662.072354][T16971] ? sk_alloc+0x27/0x390 [ 2662.072376][T16971] sk_alloc+0x3a/0x390 [ 2662.072400][T16971] __netlink_create+0x62/0x260 [ 2662.072422][T16971] ? __pfx_genl_release+0x10/0x10 [ 2662.072438][T16971] netlink_create+0x3ca/0x590 [ 2662.072452][T16971] ? __pfx_genl_unbind+0x10/0x10 [ 2662.072467][T16971] ? __pfx_genl_bind+0x10/0x10 [ 2662.072484][T16971] __sock_create+0x4b3/0x9d0 [ 2662.072510][T16971] __sys_socket+0xd6/0x1b0 [ 2662.072528][T16971] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2662.072545][T16971] __x64_sys_socket+0x7a/0x90 [ 2662.072565][T16971] do_syscall_64+0x174/0x580 [ 2662.072579][T16971] ? trace_irq_disable+0x3b/0x140 [ 2662.072602][T16971] ? clear_bhb_loop+0x40/0x90 [ 2662.072620][T16971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2662.072634][T16971] RIP: 0033:0x7fdbfc79e6c7 [ 2662.072648][T16971] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2662.072661][T16971] RSP: 002b:00007fdbfd66df98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 2662.072677][T16971] RAX: ffffffffffffffda RBX: 00007fdbfca15fa0 RCX: 00007fdbfc79e6c7 [ 2662.072689][T16971] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 2662.072698][T16971] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 2662.072730][T16971] R10: 0000200000000140 R11: 0000000000000286 R12: 0000000000000001 [ 2662.072760][T16971] R13: 00007fdbfca16038 R14: 00007fdbfca15fa0 R15: 00007fdbfcb3fa48 [ 2662.072793][T16971] [ 2662.074033][T16200] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 2662.443846][T16200] usb 2-1: device descriptor read/64, error -71 [ 2662.636708][T16985] sctp: [Deprecated]: syz.8.12148 (pid 16985) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2662.636708][T16985] Use struct sctp_sack_info instead [ 2662.655970][T16986] sctp: [Deprecated]: syz.8.12148 (pid 16986) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2662.655970][T16986] Use struct sctp_sack_info instead [ 2662.692906][T16200] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 2662.845316][T16200] usb 2-1: device descriptor read/64, error -71 [ 2662.893066][T16201] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 2662.901451][T16716] Bluetooth: hci4: command 0x0406 tx timeout [ 2662.908239][T16201] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 2662.963847][T16200] usb usb2-port1: attempt power cycle [ 2663.015898][T16939] usb 6-1: USB disconnect, device number 33 [ 2663.302862][T16200] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 2663.324055][T16200] usb 2-1: device descriptor read/8, error -71 [ 2663.462869][T16939] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 2663.572882][T16200] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 2663.594952][T16200] usb 2-1: device descriptor read/8, error -71 [ 2663.614745][T16939] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2663.626999][T16939] usb 6-1: string descriptor 0 read error: -22 [ 2663.633378][T16939] usb 6-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40 [ 2663.642440][T16939] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2663.659081][T16939] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2663.666228][T16939] usb 6-1: MIDIStreaming interface descriptor not found [ 2663.707316][T16200] usb usb2-port1: unable to enumerate USB device [ 2663.858141][ T4086] usb 6-1: USB disconnect, device number 34 [ 2664.207947][T16996] loop5: detected capacity change from 0 to 7 [ 2664.218119][T16996] Dev loop5: unable to read RDB block 7 [ 2664.225522][T16996] loop5: unable to read partition table [ 2664.231712][T16996] loop5: partition table beyond EOD, truncated [ 2664.238068][T16996] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 2664.772860][T16939] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 2664.922900][T16939] usb 6-1: Using ep0 maxpacket: 32 [ 2664.930624][T16939] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2664.941762][T16939] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2664.951698][T16939] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2664.961016][T16939] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2664.969895][T16716] Bluetooth: hci1: command 0x0406 tx timeout [ 2664.976311][T16201] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 2664.984897][T16201] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 2664.994375][T16939] usb 6-1: config 0 descriptor?? [ 2665.015029][T16939] hub 6-1:0.0: USB hub found [ 2665.208576][T16939] hub 6-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 2665.232809][ T4086] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 2665.382825][ T4086] usb 2-1: Using ep0 maxpacket: 32 [ 2665.390213][ T4086] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 2665.398428][ T4086] usb 2-1: config 0 has no interface number 0 [ 2665.407712][ T4086] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2665.416888][ T4086] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2665.424996][ T4086] usb 2-1: Product: syz [ 2665.429188][ T4086] usb 2-1: Manufacturer: syz [ 2665.433854][ T4086] usb 2-1: SerialNumber: syz [ 2665.441631][ T4086] usb 2-1: config 0 descriptor?? [ 2665.455390][ T4086] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2665.623615][T16939] hid-generic 0003:046D:C31C.0094: unknown main item tag 0x0 [ 2665.641633][T16939] hid-generic 0003:046D:C31C.0094: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.5-1/input0 [ 2665.678565][ T4086] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2665.696855][ T4086] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2665.877381][T17007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2665.905225][T17007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2665.921508][T17015] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:16x2160 (0x33424752, 8, 0, 0, 0) [ 2665.983726][ T4086] usb 6-1: USB disconnect, device number 35 [ 2666.136129][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2666.140469][T16939] usb 2-1: USB disconnect, device number 12 [ 2666.176465][T16939] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2666.231239][T16939] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2666.259552][T16939] quatech2 2-1:0.51: device disconnected [ 2666.739056][ T30] audit: type=1326 audit(1781468848.248:17362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17036 comm="syz.1.12164" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8a7039ce59 code=0x0 [ 2666.872865][ T4086] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 2667.042953][T16716] Bluetooth: hci3: command 0x0c1a tx timeout [ 2667.049145][T16201] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 2667.061148][T16201] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 2667.067911][ T4086] usb 6-1: config 0 has no interfaces? [ 2667.082482][ T4086] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 2667.098759][ T4086] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 2667.108492][ T4086] usb 6-1: Product: syz [ 2667.113822][ T4086] usb 6-1: SerialNumber: syz [ 2667.139741][ T4086] usb 6-1: config 0 descriptor?? [ 2667.357850][T17033] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12163'. [ 2667.368239][T17033] netlink: 'syz.5.12163': attribute type 7 has an invalid length. [ 2667.377121][T17033] netlink: 'syz.5.12163': attribute type 8 has an invalid length. [ 2667.386478][T17033] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12163'. [ 2667.452551][ T4086] usb 6-1: USB disconnect, device number 36 [ 2667.932820][ T4086] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 2668.088470][T17057] input: syz0 as /devices/virtual/input/input196 [ 2668.106182][ T4086] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2668.121681][ T4086] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2668.136415][ T4086] usb 2-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 2668.147362][ T4086] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2668.162213][ T4086] usb 2-1: config 0 descriptor?? [ 2668.395507][ T1412] tipc: Subscription rejected, illegal request [ 2668.406897][T17050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2668.416423][T17050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2668.426021][T17050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2668.434888][T17050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2668.512851][ T5695] usb 6-1: new low-speed USB device number 37 using dummy_hcd [ 2668.561481][ T4086] usb 2-1: USB disconnect, device number 13 [ 2668.652806][ T5695] usb 6-1: device descriptor read/64, error -71 [ 2668.892848][ T5695] usb 6-1: new low-speed USB device number 38 using dummy_hcd [ 2669.023849][ T5695] usb 6-1: device descriptor read/64, error -71 [ 2669.134093][ T5695] usb usb6-port1: attempt power cycle [ 2669.202977][T16716] Bluetooth: hci0: command 0x0c1a tx timeout [ 2669.210665][T16201] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 2669.217116][T16201] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 2669.392890][T16939] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 2669.492937][ T5695] usb 6-1: new low-speed USB device number 39 using dummy_hcd [ 2669.513321][ T5695] usb 6-1: device descriptor read/8, error -71 [ 2669.542787][T16939] usb 2-1: Using ep0 maxpacket: 32 [ 2669.549469][T16939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2669.560907][T16939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2669.570812][T16939] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2669.579993][T16939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2669.591704][T16939] usb 2-1: config 0 descriptor?? [ 2669.600712][T16939] hub 2-1:0.0: USB hub found [ 2669.752844][ T5695] usb 6-1: new low-speed USB device number 40 using dummy_hcd [ 2669.773561][ T5695] usb 6-1: device descriptor read/8, error -71 [ 2669.801667][T16939] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 2669.883087][ T5695] usb usb6-port1: unable to enumerate USB device [ 2670.208213][T16939] hid-generic 0003:046D:C31C.0095: unknown main item tag 0x0 [ 2670.224257][T16939] hid-generic 0003:046D:C31C.0095: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 2670.464328][T17067] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:16x2160 (0x33424752, 8, 0, 0, 0) [ 2670.555113][T16939] usb 2-1: USB disconnect, device number 14 [ 2671.702919][T16939] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 2671.854408][T16939] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 2671.865508][T16939] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 2671.878657][T16939] usb 6-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 2671.887864][T16939] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2671.895970][T16939] usb 6-1: Product: syz [ 2671.900144][T16939] usb 6-1: Manufacturer: syz [ 2671.904935][T16939] usb 6-1: SerialNumber: syz [ 2672.118184][T17094] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.12183'. [ 2672.134997][T17094] netlink: 20 bytes leftover after parsing attributes in process `syz.5.12183'. [ 2672.219206][T17101] binder: BINDER_SET_CONTEXT_MGR already set [ 2672.226601][T17101] binder: 17096:17101 ioctl 4018620d 200000000100 returned -16 [ 2672.360096][T16939] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 2672.446602][T16939] usb 6-1: USB disconnect, device number 41 [ 2672.481582][T16771] udevd[16771]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2672.940916][ T30] audit: type=1326 audit(1781468854.448:17363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17118 comm="syz.1.12189" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7039ce59 code=0x7ffc0000 [ 2672.971482][ T30] audit: type=1326 audit(1781468854.448:17364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17118 comm="syz.1.12189" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8a7039ce59 code=0x7ffc0000 [ 2672.999232][ T30] audit: type=1326 audit(1781468854.448:17365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17118 comm="syz.1.12189" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7039ce59 code=0x7ffc0000 [ 2673.024582][ T30] audit: type=1326 audit(1781468854.448:17366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17118 comm="syz.1.12189" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7039ce59 code=0x7ffc0000 [ 2673.084935][ T30] audit: type=1326 audit(1781468854.478:17367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17118 comm="syz.1.12189" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8a7039caeb code=0x7ffc0000 [ 2673.109838][ T30] audit: type=1326 audit(1781468854.478:17368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17118 comm="syz.1.12189" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7039ce59 code=0x7ffc0000 [ 2673.137803][ T30] audit: type=1326 audit(1781468854.478:17369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17118 comm="syz.1.12189" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7039ce59 code=0x7ffc0000 [ 2673.263037][T16939] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 2673.416549][T16939] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2673.427199][T16939] usb 6-1: config 114 has an invalid interface number: 20 but max is 0 [ 2673.435652][T16939] usb 6-1: config 114 has no interface number 0 [ 2673.442663][T16939] usb 6-1: config 114 interface 20 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 2673.453579][T16939] usb 6-1: config 114 interface 20 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 2673.466303][T16939] usb 6-1: config 114 interface 20 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 2673.478148][T16939] usb 6-1: config 114 interface 20 has no altsetting 0 [ 2673.490024][T16939] usb 6-1: New USB device found, idVendor=03f0, idProduct=0f7f, bcdDevice=2d.ac [ 2673.501286][T16939] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2673.509421][T16939] usb 6-1: Product: syz [ 2673.516083][T16939] usb 6-1: Manufacturer: syz [ 2673.520918][T16939] usb 6-1: SerialNumber: syz [ 2673.531616][T17117] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2673.544236][T17117] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2673.853978][T16939] pl2303 6-1:114.20: required interrupt-in endpoint missing [ 2673.886526][T16939] usb 6-1: USB disconnect, device number 42 [ 2674.160097][T17143] fuse: Bad value for 'fd' [ 2674.309547][ T30] audit: type=1326 audit(1781468855.818:17370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17144 comm="syz.7.12197" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee5bd9ce59 code=0x7ffc0000 [ 2674.336457][ T30] audit: type=1326 audit(1781468855.818:17371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17144 comm="syz.7.12197" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7fee5bd9ce59 code=0x7ffc0000 [ 2674.372886][ T30] audit: type=1326 audit(1781468855.818:17372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17144 comm="syz.7.12197" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee5bd9ce59 code=0x7ffc0000 [ 2674.424484][ T5695] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 2674.614723][ T5695] usb 2-1: Using ep0 maxpacket: 32 [ 2674.644568][ T5695] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 2674.655270][ T5695] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2674.670060][ T5695] usb 2-1: Product: syz [ 2674.674379][ T5695] usb 2-1: Manufacturer: и [ 2674.678954][ T5695] usb 2-1: SerialNumber: syz [ 2674.907458][T17170] random: crng reseeded on system resumption [ 2675.041710][T17174] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2675.161576][ T5695] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 2675.360222][ T5695] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 2675.433404][ T5695] usb 2-1: USB disconnect, device number 15 [ 2675.486146][T16771] udevd[16771]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2675.884713][T17180] loop5: detected capacity change from 0 to 7 [ 2675.906013][T17180] loop5: p1 < > p3 p4 [ 2675.913067][T17180] loop5: partition table partially beyond EOD, truncated [ 2675.927641][T17180] loop5: p3 size 3645588866 extends beyond EOD, truncated [ 2675.936954][T17180] loop5: p4 start 33554432 is beyond EOD, truncated [ 2676.029228][T16792] udevd[16792]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 2676.046090][T16771] udevd[16771]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 2676.106312][T17189] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12208'. [ 2676.107226][T17188] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12208'. [ 2676.149364][T12703] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2676.160091][T17189] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12208'. [ 2676.170866][T12703] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2676.180184][T12703] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2676.190876][ T1412] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2676.191335][T17189] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12208'. [ 2676.383348][ T5695] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 2676.410473][T17195] netlink: 12 bytes leftover after parsing attributes in process `syz.8.12211'. [ 2676.532845][ T5695] usb 6-1: device descriptor read/64, error -71 [ 2676.782813][ T5695] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 2676.922900][ T5695] usb 6-1: device descriptor read/64, error -71 [ 2677.044003][ T5695] usb usb6-port1: attempt power cycle [ 2677.302922][T16939] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 2677.383035][ T5695] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 2677.403642][ T5695] usb 6-1: device descriptor read/8, error -71 [ 2677.454505][T16939] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 2677.462675][T16939] usb 2-1: config 1 has no interface number 0 [ 2677.468934][T16939] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 2677.480622][T16939] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 2677.490954][T16939] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2677.506721][T16939] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 2677.515930][T16939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2677.524153][T16939] usb 2-1: Product: syz [ 2677.528358][T16939] usb 2-1: Manufacturer: syz [ 2677.533033][T16939] usb 2-1: SerialNumber: syz [ 2677.541439][T17206] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2677.662884][ T5695] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 2677.693720][ T5695] usb 6-1: device descriptor read/8, error -71 [ 2677.753450][T17206] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2677.803159][ T5695] usb usb6-port1: unable to enumerate USB device [ 2677.962474][T17206] netlink: 76 bytes leftover after parsing attributes in process `syz.1.12215'. [ 2677.993106][T16939] sierra_net 2-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.1-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:03:07 [ 2679.077433][ T5695] usb 2-1: USB disconnect, device number 16 [ 2679.095814][ T5695] sierra_net 2-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.1-1, Sierra Wireless USB-to-WWAN Modem [ 2679.340514][ T5695] sierra_net 2-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 2679.664804][T17250] loop5: detected capacity change from 0 to 7 [ 2679.672456][T17250] loop5: p1 < > p3 p4 [ 2679.681489][ T4086] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 2679.692565][T17250] loop5: partition table partially beyond EOD, truncated [ 2679.703420][T17250] loop5: p3 size 3645588866 extends beyond EOD, truncated [ 2679.712642][T17250] loop5: p4 start 33554432 is beyond EOD, truncated [ 2679.846015][T16792] udevd[16792]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 2679.858567][T16771] udevd[16771]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 2679.868514][ T4086] usb 6-1: Using ep0 maxpacket: 8 [ 2679.897145][ T4086] usb 6-1: config 0 has an invalid interface number: 186 but max is 0 [ 2679.921532][ T4086] usb 6-1: config 0 has no interface number 0 [ 2679.940452][ T4086] usb 6-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2679.954635][ T4086] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2679.965688][ T4086] usb 6-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 2679.984232][ T4086] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 102, changing to 10 [ 2680.018646][T17262] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12221'. [ 2680.029727][ T4086] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid maxpacket 24624, setting to 1024 [ 2680.075922][ T4086] usb 6-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 2680.177881][ T4086] usb 6-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 2680.224695][ T4086] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2680.263664][ T4086] usb 6-1: Product: syz [ 2680.276639][T17262] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12221'. [ 2680.292636][ T4086] usb 6-1: Manufacturer: syz [ 2680.315578][ T4086] usb 6-1: SerialNumber: syz [ 2680.390727][ T4086] usb 6-1: config 0 descriptor?? [ 2680.646897][ T4086] iowarrior 6-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 2680.730799][T17265] netdevsim netdevsim1: Direct firmware load for  failed with error -2 [ 2680.739883][T17265] netdevsim netdevsim1: Falling back to sysfs fallback for:  [ 2680.786203][T17262] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12221'. [ 2682.586760][T16201] usb 6-1: USB disconnect, device number 47 [ 2682.790690][T17294] netlink: 48 bytes leftover after parsing attributes in process `syz.1.12224'. [ 2682.966685][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 2682.966702][ T30] audit: type=1326 audit(1781468864.468:17404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17302 comm="syz.8.12226" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff7c19ce59 code=0x7ffc0000 [ 2683.133746][ T30] audit: type=1326 audit(1781468864.468:17405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17302 comm="syz.8.12226" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff7c19ce59 code=0x7ffc0000 [ 2683.214745][ T30] audit: type=1326 audit(1781468864.468:17406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17302 comm="syz.8.12226" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff7c19ce59 code=0x7ffc0000 [ 2683.292623][ T30] audit: type=1326 audit(1781468864.468:17407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17302 comm="syz.8.12226" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff7c19ce59 code=0x7ffc0000 [ 2683.420899][T17316] syzkaller0: entered promiscuous mode [ 2683.428072][T17316] syzkaller0: entered allmulticast mode [ 2683.455452][T17316] tipc: Enabled bearer , priority 0 [ 2683.465966][T17315] tipc: Resetting bearer [ 2683.505472][T17315] tipc: Disabling bearer [ 2683.559569][ T30] audit: type=1326 audit(1781468864.468:17408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17302 comm="syz.8.12226" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7eff7c19ce59 code=0x7ffc0000 [ 2683.714843][ T30] audit: type=1326 audit(1781468864.468:17409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17302 comm="syz.8.12226" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff7c19ce59 code=0x7ffc0000 [ 2683.834933][ T30] audit: type=1326 audit(1781468864.468:17410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17302 comm="syz.8.12226" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff7c19ce59 code=0x7ffc0000 [ 2683.926854][ T30] audit: type=1326 audit(1781468864.468:17411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17302 comm="syz.8.12226" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff7c19ce59 code=0x7ffc0000 [ 2684.040531][T17322] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2684.097940][ T30] audit: type=1326 audit(1781468864.468:17412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17302 comm="syz.8.12226" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff7c19ce59 code=0x7ffc0000 [ 2684.195184][ T30] audit: type=1326 audit(1781468864.468:17413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17302 comm="syz.8.12226" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7eff7c19ce59 code=0x7ffc0000 [ 2684.258266][T17329] syzkaller0: entered promiscuous mode [ 2684.271416][T17329] syzkaller0: entered allmulticast mode [ 2684.741021][T17335] syzkaller0: entered promiscuous mode [ 2684.774164][T17335] syzkaller0: entered allmulticast mode [ 2685.198498][T17349] loop5: detected capacity change from 0 to 7 [ 2685.212506][T17349] Dev loop5: unable to read RDB block 7 [ 2685.227692][T17349] loop5: AHDI p1 p2 p3 [ 2685.238775][T17349] loop5: partition table partially beyond EOD, truncated [ 2685.261182][T17349] loop5: p1 start 3741368766 is beyond EOD, truncated [ 2685.290618][T17349] loop5: p2 size 151585024 extends beyond EOD, truncated [ 2685.371864][T16771] udevd[16771]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 2685.472063][T17353] tipc: Enabled bearer , priority 0 [ 2685.495905][T17353] syzkaller0: entered promiscuous mode [ 2685.508443][T17353] syzkaller0: entered allmulticast mode [ 2685.593511][ T4086] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 2685.614461][T17356] tipc: Resetting bearer [ 2685.770324][ T4086] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2685.794803][ T4086] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2685.807217][ T4086] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2685.820195][ T4086] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2685.848384][ T4086] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2685.862043][ T4086] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2685.870540][ T4086] usb 2-1: Product: syz [ 2685.875132][ T4086] usb 2-1: Manufacturer: syz [ 2685.914318][ T4086] cdc_wdm 2-1:1.0: skipping garbage [ 2685.923619][ T4086] cdc_wdm 2-1:1.0: skipping garbage [ 2685.939252][ T4086] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2686.406602][ T4086] usb 2-1: USB disconnect, device number 17 [ 2686.492530][T16917] tipc: Node number set to 338633783 [ 2686.786800][T17353] tipc: Resetting bearer [ 2686.842840][T17353] tipc: Disabling bearer [ 2687.207586][T17404] loop5: detected capacity change from 0 to 7 [ 2687.234798][T17404] loop5: p1 < > p3 p4 [ 2687.241688][T17404] loop5: partition table partially beyond EOD, truncated [ 2687.259618][T17404] loop5: p3 size 3645588866 extends beyond EOD, truncated [ 2687.276216][T17408] syz_tun: entered allmulticast mode [ 2687.284504][T17404] loop5: p4 start 33554432 is beyond EOD, truncated [ 2687.314949][T17408] dvmrp6: entered allmulticast mode [ 2687.406869][T16771] udevd[16771]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 2687.423197][T16792] udevd[16792]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 2687.772843][T16201] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 2687.947168][T16201] usb 6-1: config 1 interface 0 has no altsetting 0 [ 2687.978118][T16201] usb 6-1: string descriptor 0 read error: -22 [ 2687.998293][T16201] usb 6-1: New USB device found, idVendor=046d, idProduct=c287, bcdDevice= 0.40 [ 2688.027653][T16201] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2688.516450][T17421] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12258'. [ 2688.542627][T16201] logitech 0003:046D:C287.0096: unknown main item tag 0x0 [ 2688.570112][T16201] logitech 0003:046D:C287.0096: unknown main item tag 0x0 [ 2688.585167][T17421] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12258'. [ 2688.605488][T16201] logitech 0003:046D:C287.0096: unknown main item tag 0x0 [ 2688.634957][T16201] logitech 0003:046D:C287.0096: unknown main item tag 0x0 [ 2688.664618][T16201] logitech 0003:046D:C287.0096: unknown main item tag 0x0 [ 2688.698587][T16201] logitech 0003:046D:C287.0096: unknown main item tag 0x0 [ 2688.723014][T16201] logitech 0003:046D:C287.0096: unknown main item tag 0x0 [ 2688.745419][T16201] logitech 0003:046D:C287.0096: unknown main item tag 0x0 [ 2688.762918][T16201] logitech 0003:046D:C287.0096: unknown main item tag 0x0 [ 2688.782842][T16201] logitech 0003:046D:C287.0096: unknown main item tag 0x0 [ 2688.846007][T16201] logitech 0003:046D:C287.0096: hidraw0: USB HID v0.02 Device [HID 046d:c287] on usb-dummy_hcd.5-1/input0 [ 2688.869135][T16201] logitech 0003:046D:C287.0096: no inputs found [ 2688.881441][T16917] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 2688.903058][T16201] usb 6-1: USB disconnect, device number 48 [ 2689.010943][T17423] fido_id[17423]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 2689.054553][T16917] usb 2-1: Using ep0 maxpacket: 32 [ 2689.069491][T16917] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2689.099006][T16917] usb 2-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 2689.118593][T16917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2689.126817][T16917] usb 2-1: Product: syz [ 2689.131124][T16917] usb 2-1: Manufacturer: syz [ 2689.136155][T16917] usb 2-1: SerialNumber: syz [ 2689.501384][T17429] fuse: Unknown parameter './file0' [ 2689.558447][T16917] usb 2-1: USB disconnect, device number 18 [ 2689.720039][T17435] udevd[17435]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2690.093503][T16917] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 2690.133201][ T54] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 2690.229820][T17453] loop5: detected capacity change from 0 to 7 [ 2690.238978][T17453] loop5: p1 < > p3 p4 [ 2690.246843][T17453] loop5: partition table partially beyond EOD, truncated [ 2690.260552][T17453] loop5: p3 size 3645588866 extends beyond EOD, truncated [ 2690.267889][T16917] usb 2-1: Using ep0 maxpacket: 8 [ 2690.279806][T16917] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 2690.292401][T17453] loop5: p4 start 33554432 is beyond EOD, truncated [ 2690.299977][T16917] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 2690.304253][ T54] usb 6-1: Using ep0 maxpacket: 8 [ 2690.327923][T16917] usb 2-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.00 [ 2690.371173][T16917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2690.381787][ T54] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2690.427765][T16917] usb 2-1: config 0 descriptor?? [ 2690.432836][ T54] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2690.432867][ T54] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2690.465427][ T54] usb 6-1: config 0 descriptor?? [ 2690.543812][T17435] udevd[17435]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 2690.559040][T16787] udevd[16787]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 2690.715251][ T54] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2690.852428][ T4086] usb 6-1: USB disconnect, device number 49 [ 2691.114182][T17470] netlink: 24 bytes leftover after parsing attributes in process `syz.7.12269'. [ 2691.155202][T17472] netlink: 'syz.5.12271': attribute type 10 has an invalid length. [ 2691.333021][T17472] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2691.368690][T17472] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 2691.595770][T17409] syz_tun: left allmulticast mode [ 2692.273224][T17482] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12272'. [ 2692.802222][T16201] usb 2-1: USB disconnect, device number 19 [ 2692.925823][T17488] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12274'. [ 2693.047568][T17492] netlink: 'syz.7.12275': attribute type 16 has an invalid length. [ 2693.195385][T17498] loop5: detected capacity change from 0 to 7 [ 2693.204451][T17498] loop5: p1 < > p3 p4 [ 2693.211900][T17498] loop5: partition table partially beyond EOD, truncated [ 2693.240255][T17498] loop5: p3 size 3645588866 extends beyond EOD, truncated [ 2693.260793][T17498] loop5: p4 start 33554432 is beyond EOD, truncated [ 2693.386095][T17439] udevd[17439]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 2693.397049][T17435] udevd[17435]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 2694.276200][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 2694.276220][ T30] audit: type=1326 audit(1781468875.788:17474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17501 comm="syz.6.12279" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdbfc79ce59 code=0x0 [ 2694.699341][T17516] netlink: 165 bytes leftover after parsing attributes in process `syz.6.12283'. [ 2694.709023][T17517] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12282'. [ 2695.184167][T17524] program syz.5.12285 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2695.206263][T17524] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12285'. [ 2695.615852][ T5695] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 2695.777725][ T5695] usb 6-1: Using ep0 maxpacket: 8 [ 2695.803374][ T5695] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 2695.827489][ T5695] usb 6-1: config 0 has no interface number 0 [ 2695.849418][ T5695] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 2695.871123][ T5695] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2695.879536][ T5695] usb 6-1: Product: syz [ 2695.886192][ T5695] usb 6-1: Manufacturer: syz [ 2695.890831][ T5695] usb 6-1: SerialNumber: syz [ 2695.922660][ T5695] usb 6-1: config 0 descriptor?? [ 2696.148938][ T5695] uvcvideo 6-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 2696.168741][ T5695] uvcvideo 6-1:0.31: Entity type for entity Output 32774 was not initialized! [ 2696.208633][ T5695] usb 6-1: USB disconnect, device number 50 [ 2696.890213][T17543] netlink: 48 bytes leftover after parsing attributes in process `syz.7.12290'. [ 2697.912872][T16201] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 2697.983196][T17559] loop5: detected capacity change from 0 to 7 [ 2697.999982][T17559] Dev loop5: unable to read RDB block 7 [ 2698.012105][T17559] loop5: AHDI p1 p2 p3 [ 2698.022150][T17559] loop5: partition table partially beyond EOD, truncated [ 2698.038501][T17559] loop5: p1 start 3741368766 is beyond EOD, truncated [ 2698.054094][T17559] loop5: p2 size 151585024 extends beyond EOD, truncated [ 2698.094044][T16201] usb 2-1: Using ep0 maxpacket: 32 [ 2698.115237][T16201] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2698.143715][T17435] udevd[17435]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 2698.158759][T16201] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2698.184181][T16201] usb 2-1: New USB device found, idVendor=0e41, idProduct=4242, bcdDevice= 0.40 [ 2698.202540][T16201] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2698.221535][T16201] usb 2-1: Product: syz [ 2698.227070][T16201] usb 2-1: Manufacturer: syz [ 2698.245451][T16201] usb 2-1: SerialNumber: syz [ 2698.515477][T16201] usb 2-1: 0:1 : does not exist [ 2698.651933][T16201] usb 2-1: USB disconnect, device number 20 [ 2698.734839][T17435] udevd[17435]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2699.293490][T16201] usb 6-1: new full-speed USB device number 51 using dummy_hcd [ 2699.326388][T16939] hid_parser_main: 2124 callbacks suppressed [ 2699.326412][T16939] hid-generic 0000:0000:0000.0098: unknown main item tag 0x0 [ 2699.365207][T16939] hid-generic 0000:0000:0000.0098: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2699.455438][T16201] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2699.473522][T16201] usb 6-1: not running at top speed; connect to a high speed hub [ 2699.480139][ T5695] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 2699.490249][T16201] usb 6-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 2699.509808][T16201] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2699.524326][T16201] usb 6-1: Product: syz [ 2699.533095][T16201] usb 6-1: Manufacturer: syz [ 2699.542806][T16201] usb 6-1: SerialNumber: syz [ 2699.652801][ T5695] usb 2-1: Using ep0 maxpacket: 32 [ 2699.661910][ T5695] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 2699.671519][ T5695] usb 2-1: config 0 has no interface number 0 [ 2699.679842][ T5695] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 2699.694480][ T5695] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 2699.704359][ T5695] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2699.712407][ T5695] usb 2-1: Product: syz [ 2699.718356][ T5695] usb 2-1: Manufacturer: syz [ 2699.723065][ T5695] usb 2-1: SerialNumber: syz [ 2699.732159][ T5695] usb 2-1: config 0 descriptor?? [ 2699.742353][T17576] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 2699.776372][T16201] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 2700.079054][ T5695] asix 2-1:0.188: probe with driver asix failed with error -71 [ 2700.105992][T17593] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 2700.130238][ T5695] usb 2-1: USB disconnect, device number 21 [ 2700.259380][T16201] gp8psk: usb in 128 operation failed. [ 2700.266453][T16201] gp8psk: usb in 137 operation failed. [ 2700.272029][T16201] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 2700.286664][T16201] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-19) [ 2700.301377][T16201] usb 6-1: USB disconnect, device number 51 [ 2700.364134][T17598] syzkaller1: entered allmulticast mode [ 2701.063679][ T5695] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 2701.240841][ T5695] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2701.264606][ T5695] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2701.278285][ T5695] usb 2-1: Product: syz [ 2701.286447][ T5695] usb 2-1: Manufacturer: syz [ 2701.291103][ T5695] usb 2-1: SerialNumber: syz [ 2701.722860][ T5695] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 2701.736460][ T5695] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 2701.861415][ T30] audit: type=1326 audit(1781468883.368:17475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17636 comm="syz.7.12320" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee5bd9ce59 code=0x0 [ 2701.911285][ T30] audit: type=1326 audit(1781468883.418:17476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17636 comm="syz.7.12320" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee5bd9ce59 code=0x0 [ 2702.843173][T17659] netlink: 'syz.5.12326': attribute type 62 has an invalid length. [ 2703.286037][T17663] loop5: detected capacity change from 0 to 7 [ 2703.314399][T17663] loop5: p1 < > p3 p4 [ 2703.324396][T17663] loop5: partition table partially beyond EOD, truncated [ 2703.347846][T17663] loop5: p3 size 3645588866 extends beyond EOD, truncated [ 2703.367427][ T5695] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -EPROTO [ 2703.391626][T17663] loop5: p4 start 33554432 is beyond EOD, truncated [ 2703.414037][ T5695] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2703.512514][ T5695] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2703.555112][T17439] udevd[17439]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 2703.569410][T16771] udevd[16771]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 2703.584678][ T5695] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 2703.646211][ T5695] usb 2-1: USB disconnect, device number 22 [ 2703.721165][T17665] lo: entered allmulticast mode [ 2703.756956][T17665] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2704.807487][T17680] loop5: detected capacity change from 0 to 7 [ 2704.824343][T17680] Dev loop5: unable to read RDB block 7 [ 2704.840258][T17680] loop5: unable to read partition table [ 2704.846242][T17680] loop5: partition table beyond EOD, truncated [ 2704.862667][T17680] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 2705.119788][T17692] loop5: detected capacity change from 0 to 7 [ 2705.127668][T17692] Dev loop5: unable to read RDB block 7 [ 2705.133916][T17692] loop5: unable to read partition table [ 2705.139876][T17692] loop5: partition table beyond EOD, truncated [ 2705.151916][T17692] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 2705.177313][ T5001] Dev loop5: unable to read RDB block 7 [ 2705.191604][ T5001] loop5: unable to read partition table [ 2705.205957][ T5001] loop5: partition table beyond EOD, truncated [ 2705.524882][T17707] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2706.991198][T17714] netlink: 36 bytes leftover after parsing attributes in process `syz.8.12343'. [ 2707.412572][T17724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12344'. [ 2707.631972][T17722] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 2708.270891][T17747] loop5: detected capacity change from 0 to 7 [ 2708.297632][T17747] Dev loop5: unable to read RDB block 7 [ 2708.318133][T17747] loop5: unable to read partition table [ 2708.342985][T17747] loop5: partition table beyond EOD, truncated [ 2708.365361][T17747] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 2708.485038][T17749] tipc: Enabling of bearer rejected, already enabled [ 2709.174245][ T5695] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 2709.343026][ T5695] usb 6-1: Using ep0 maxpacket: 16 [ 2709.357221][ T5695] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2709.394582][ T5695] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2709.426523][ T5695] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2709.466833][ T5695] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2709.494064][ T5695] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2709.520443][ T5695] usb 6-1: config 0 descriptor?? [ 2709.744864][T17773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2709.754020][T17773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2709.951061][ T5695] microsoft 0003:045E:07DA.0099: unknown main item tag 0x0 [ 2709.972802][ T5695] microsoft 0003:045E:07DA.0099: unknown main item tag 0x0 [ 2709.982792][ T5695] microsoft 0003:045E:07DA.0099: unknown main item tag 0x0 [ 2710.004487][ T5695] microsoft 0003:045E:07DA.0099: unknown main item tag 0x0 [ 2710.014586][ T5695] microsoft 0003:045E:07DA.0099: unknown main item tag 0x0 [ 2710.034467][ T5695] microsoft 0003:045E:07DA.0099: unknown main item tag 0x0 [ 2710.052817][ T5695] microsoft 0003:045E:07DA.0099: unknown main item tag 0x0 [ 2710.060094][ T5695] microsoft 0003:045E:07DA.0099: unknown main item tag 0x0 [ 2710.083638][ T5695] microsoft 0003:045E:07DA.0099: unknown main item tag 0x0 [ 2710.090929][ T5695] microsoft 0003:045E:07DA.0099: unknown main item tag 0x0 [ 2710.112127][ T5695] microsoft 0003:045E:07DA.0099: unsupported Resolution Multiplier 0 [ 2710.121983][ T5695] microsoft 0003:045E:07DA.0099: unsupported Resolution Multiplier 0 [ 2710.134380][ T5695] microsoft 0003:045E:07DA.0099: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 2710.155822][ T5695] microsoft 0003:045E:07DA.0099: no inputs found [ 2710.168257][ T5695] microsoft 0003:045E:07DA.0099: could not initialize ff, continuing anyway [ 2710.196145][T17776] loop5: detected capacity change from 0 to 7 [ 2710.198653][ T5695] usb 6-1: USB disconnect, device number 52 [ 2710.213986][T17776] Dev loop5: unable to read RDB block 7 [ 2710.219915][T17776] loop5: AHDI p1 p2 p3 [ 2710.225862][T17776] loop5: partition table partially beyond EOD, truncated [ 2710.233718][T17776] loop5: p1 start 3741368766 is beyond EOD, truncated [ 2710.240814][T17776] loop5: p2 size 151585024 extends beyond EOD, truncated [ 2710.287023][T17774] fido_id[17774]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 2710.333963][T17439] udevd[17439]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 2710.566177][T17782] netlink: 48 bytes leftover after parsing attributes in process `syz.6.12363'. [ 2710.612781][T16201] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 2710.782886][T16201] usb 2-1: Using ep0 maxpacket: 16 [ 2710.802672][T17784] netlink: 'syz.5.12364': attribute type 1 has an invalid length. [ 2710.815693][T16201] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 2710.825274][T16201] usb 2-1: config 1 has no interface number 0 [ 2710.832666][T16201] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 2710.843430][T16201] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 2710.854866][T16201] usb 2-1: config 1 interface 105 has no altsetting 0 [ 2710.865756][T16201] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 2710.880276][T16201] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 2710.895986][T16201] usb 2-1: Product: syz [ 2710.902167][T16201] usb 2-1: Manufacturer: syz [ 2710.908107][T16201] usb 2-1: SerialNumber: syz [ 2710.923972][T17778] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2710.928276][T17784] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2710.973099][T17778] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2711.154909][T17788] syzkaller0: entered promiscuous mode [ 2711.163199][T17788] syzkaller0: entered allmulticast mode [ 2711.186756][T17788] tipc: Enabled bearer , priority 0 [ 2711.197227][T17787] tipc: Resetting bearer [ 2711.215142][T17789] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2711.222568][T17789] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2711.299417][T17787] tipc: Disabling bearer [ 2711.780159][T17795] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 2711.790544][T17795] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2712.420469][T17808] loop5: detected capacity change from 0 to 7 [ 2712.427830][T17808] Dev loop5: unable to read RDB block 7 [ 2712.435288][T17808] loop5: AHDI p1 p2 p3 [ 2712.439555][T17808] loop5: partition table partially beyond EOD, truncated [ 2712.447699][T17808] loop5: p1 start 3741368766 is beyond EOD, truncated [ 2712.455730][T17808] loop5: p2 size 151585024 extends beyond EOD, truncated [ 2712.510188][T17439] udevd[17439]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 2712.546597][T17811] binder: BINDER_SET_CONTEXT_MGR already set [ 2712.554814][T17811] binder: 17809:17811 ioctl 4018620d 200000000040 returned -16 [ 2712.554848][T17812] binder: BINDER_SET_CONTEXT_MGR already set [ 2712.568814][T17812] binder: 17809:17812 ioctl 4018620d 200000000280 returned -16 [ 2712.657252][T17815] loop5: detected capacity change from 0 to 7 [ 2712.665085][T17815] Dev loop5: unable to read RDB block 7 [ 2712.670900][T17815] loop5: unable to read partition table [ 2712.677938][T17815] loop5: partition table beyond EOD, truncated [ 2712.684509][T17815] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 2712.826700][T17820] syzkaller0: entered promiscuous mode [ 2712.832373][T17820] syzkaller0: entered allmulticast mode [ 2712.852842][T17820] tipc: Enabled bearer , priority 0 [ 2712.870730][T17819] tipc: Resetting bearer [ 2712.908044][T17819] tipc: Disabling bearer [ 2713.155408][T17831] netlink: 48 bytes leftover after parsing attributes in process `syz.5.12378'. [ 2713.285549][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 2713.293003][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 2713.412396][T16201] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 2713.428872][T16201] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 2713.463695][T16201] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 2713.537171][T16201] aqc111 2-1:1.105 eth17: register 'aqc111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, fe:6b:04:00:00:00 [ 2713.567600][T16201] usb 2-1: USB disconnect, device number 23 [ 2713.663819][T16201] aqc111 2-1:1.105 eth17: unregister 'aqc111' usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 2713.763795][T16201] aqc111 2-1:1.105 eth17 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 2713.776016][T16201] aqc111 2-1:1.105 eth17 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 2713.790870][T16201] aqc111 2-1:1.105 eth17 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 2714.113015][T16201] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 2714.282801][T16201] usb 2-1: Using ep0 maxpacket: 16 [ 2714.289993][T16201] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2714.300403][T16201] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2714.310028][T16201] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2714.319888][T16201] usb 2-1: config 1 interface 1 has no altsetting 0 [ 2714.329087][T16201] usb 2-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 2714.339247][T16201] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2714.349131][T16201] usb 2-1: Product: syz [ 2714.355002][T16201] usb 2-1: Manufacturer: syz [ 2714.359971][T16201] usb 2-1: SerialNumber: syz [ 2714.572327][T17833] netlink: 'syz.1.12379': attribute type 1 has an invalid length. [ 2714.608329][T17833] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2714.641640][T17833] bond2: (slave geneve3): making interface the new active one [ 2714.651107][T17833] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 2714.660035][T12703] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2714.681041][T12703] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2714.700591][T12703] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2714.714310][T16201] usb 2-1: selecting invalid altsetting 0 [ 2714.720220][T12703] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2714.772206][T16201] usb 2-1: USB disconnect, device number 24 [ 2714.840529][T16775] udevd[16775]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2715.600687][T17853] loop5: detected capacity change from 0 to 7 [ 2715.613952][T17853] Dev loop5: unable to read RDB block 7 [ 2715.620790][T17853] loop5: unable to read partition table [ 2715.632014][T17853] loop5: partition table beyond EOD, truncated [ 2715.642163][T17853] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 2715.662793][T16201] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 2715.845578][T16201] usb 2-1: config 213 has an invalid interface number: 27 but max is 0 [ 2715.861118][T16201] usb 2-1: config 213 has no interface number 0 [ 2715.868258][T16201] usb 2-1: config 213 interface 27 has no altsetting 0 [ 2715.884211][T16201] usb 2-1: New USB device found, idVendor=0921, idProduct=1200, bcdDevice=d6.6b [ 2715.894886][T16201] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2715.905135][T17859] tipc: Enabling of bearer rejected, already enabled [ 2715.907842][T16201] usb 2-1: Product: syz [ 2715.918291][T16201] usb 2-1: Manufacturer: syz [ 2715.924727][T16201] usb 2-1: SerialNumber: syz [ 2716.022885][ T54] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 2716.155137][T17847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2716.185193][ T54] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2716.211636][T17847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2716.248549][T16201] belkin_sa 2-1:213.27: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 2716.260925][ T54] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 2716.289766][T16201] usb 2-1: bcdDevice: d66b, bfc: 0 [ 2716.296495][ T54] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 2716.307796][T16201] usb 2-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 2716.319336][ T54] usb 6-1: Product: syz [ 2716.362866][ T54] usb 6-1: Manufacturer: syz [ 2716.399200][ T54] usb 6-1: SerialNumber: syz [ 2716.407486][T16201] usb 2-1: USB disconnect, device number 25 [ 2716.525277][T16201] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 2716.583231][T16201] belkin_sa 2-1:213.27: device disconnected [ 2716.667716][ T54] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 53 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2716.692913][T17868] netlink: 48 bytes leftover after parsing attributes in process `syz.8.12390'. [ 2716.940384][ T54] usb 6-1: USB disconnect, device number 53 [ 2716.989904][ T54] usblp0: removed [ 2717.346154][ T5695] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 2717.551177][ T5695] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2717.612821][ T5695] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2717.656475][ T5695] usb 2-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00 [ 2717.688732][ T5695] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2717.796097][ T5695] usb 2-1: config 0 descriptor?? [ 2718.261525][T17873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2718.297180][T17873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2718.332342][T17873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2718.371282][T17873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2718.408461][ T5695] hid_parser_main: 8 callbacks suppressed [ 2718.408478][ T5695] semitek 0003:1EA7:0907.009A: unknown main item tag 0x0 [ 2718.463833][ T5695] semitek 0003:1EA7:0907.009A: unknown main item tag 0x4 [ 2718.500908][ T5695] semitek 0003:1EA7:0907.009A: unknown main item tag 0x0 [ 2718.514027][T28722] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2718.531651][ T5695] semitek 0003:1EA7:0907.009A: unknown main item tag 0x0 [ 2718.554080][ T5695] semitek 0003:1EA7:0907.009A: unknown main item tag 0x0 [ 2718.567587][T28722] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2718.580162][ T5695] semitek 0003:1EA7:0907.009A: unknown main item tag 0x2 [ 2718.591108][T28722] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 36451 - 0 [ 2718.603542][ T5695] semitek 0003:1EA7:0907.009A: unknown main item tag 0x0 [ 2718.634819][ T5695] semitek 0003:1EA7:0907.009A: unknown main item tag 0x0 [ 2718.683501][ T5695] semitek 0003:1EA7:0907.009A: unknown main item tag 0x0 [ 2718.717203][ T5695] semitek 0003:1EA7:0907.009A: unknown main item tag 0x0 [ 2718.747741][ T5695] semitek 0003:1EA7:0907.009A: item fetching failed at offset 40/41 [ 2718.786314][ T5695] semitek 0003:1EA7:0907.009A: probe with driver semitek failed with error -22 [ 2718.851854][ T5695] usb 2-1: USB disconnect, device number 26 [ 2719.035509][ T4504] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2719.055747][ T4504] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2719.067311][ T4504] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2719.082481][ T4504] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2719.094410][ T4504] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2719.124990][T16716] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2719.161834][T16716] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2719.169464][T16716] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2719.178452][T16716] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2719.188329][T16716] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2719.353480][T17881] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12396'. [ 2719.500305][T28722] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2719.543003][T28722] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2719.571599][T28722] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 36451 - 0 [ 2719.653942][T17885] loop5: detected capacity change from 0 to 7 [ 2719.663180][T17885] Dev loop5: unable to read RDB block 7 [ 2719.670243][T17885] loop5: unable to read partition table [ 2719.695928][T17885] loop5: partition table beyond EOD, truncated [ 2719.705863][T17885] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 2719.903399][T28722] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2719.916584][T28722] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2719.947704][T28722] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 36451 - 0 [ 2720.067607][T17889] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2720.107340][T17895] batman_adv: batadv0: Adding interface: gretap2 [ 2720.123197][T17895] batman_adv: batadv0: The MTU of interface gretap2 is too small (1382) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2720.190440][T17895] batman_adv: batadv0: Interface activated: gretap2 [ 2720.475771][T28722] vlan0 (unregistering): left allmulticast mode [ 2720.491291][T28722] vlan0 (unregistering): left promiscuous mode [ 2720.506352][T28722] netdevsim netdevsim7 netdevsim0 (unregistering): left promiscuous mode [ 2720.560695][T28722] bridge0: port 1(vlan0) entered disabled state [ 2720.648276][T28722] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2720.701958][T28722] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2720.778137][T28722] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 36451 - 0 [ 2721.002911][ T5695] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 2721.163061][ T5695] usb 6-1: Using ep0 maxpacket: 32 [ 2721.190171][T17902] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2721.210343][ T5695] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2721.228653][ T5695] usb 6-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 2721.237887][ T5695] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2721.246024][ T5695] usb 6-1: Product: syz [ 2721.250283][ T5695] usb 6-1: Manufacturer: syz [ 2721.254982][ T5695] usb 6-1: SerialNumber: syz [ 2721.283872][ T4504] Bluetooth: hci2: command tx timeout [ 2721.302803][T16201] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 2721.496331][T16201] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 2721.536237][T16201] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 2721.569842][T16201] usb 2-1: Product: syz [ 2721.598051][T16201] usb 2-1: SerialNumber: syz [ 2721.638627][T16201] usb 2-1: config 0 descriptor?? [ 2721.650144][T17922] netlink: 'syz.5.12405': attribute type 12 has an invalid length. [ 2721.896414][T16201] hso 2-1:0.0: Failed to find BULK eps [ 2721.914108][T28722] bond4: left allmulticast mode [ 2721.939261][T28722] bond4: left promiscuous mode [ 2721.964226][T28722] bridge0: port 2(bond4) entered disabled state [ 2722.673564][T17935] netlink: 48 bytes leftover after parsing attributes in process `syz.6.12408'. [ 2722.988534][T17940] netlink: 40 bytes leftover after parsing attributes in process `syz.8.12409'. [ 2723.373132][ T4504] Bluetooth: hci2: command tx timeout [ 2723.412367][T28722] bond0 (unregistering): Released all slaves [ 2723.496858][T28722] bond1 (unregistering): Released all slaves [ 2723.594663][T28722] bond2 (unregistering): Released all slaves [ 2723.646590][T28722] bond3 (unregistering): (slave lo): Releasing backup interface [ 2723.664368][T28722] bond3 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 2723.682206][T28722] bond3 (unregistering): Released all slaves [ 2723.708317][T28722] bond4 (unregistering): Released all slaves [ 2723.914947][ T5695] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2723.941926][ T5296] 8021q: adding VLAN 0 to HW filter on device eth17 [ 2724.039839][T28722] : left promiscuous mode [ 2724.109461][ T4086] usb 2-1: USB disconnect, device number 27 [ 2724.198525][T17953] loop5: detected capacity change from 0 to 7 [ 2724.213235][T17953] Dev loop5: unable to read RDB block 7 [ 2724.219791][T17953] loop5: unable to read partition table [ 2724.226603][T17953] loop5: partition table beyond EOD, truncated [ 2724.245612][T17953] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 2724.282236][ T5695] usb 6-1: USB disconnect, device number 54 [ 2724.447520][T28722] tipc: Disabling bearer [ 2724.486495][T28722] tipc: Left network mode [ 2724.692951][ T4086] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 2724.748062][T17878] bridge0: port 1(bridge_slave_0) entered blocking state [ 2724.795258][T17878] bridge0: port 1(bridge_slave_0) entered disabled state [ 2724.812135][T17878] bridge_slave_0: entered allmulticast mode [ 2724.830641][T17878] bridge_slave_0: entered promiscuous mode [ 2724.880414][T17878] bridge0: port 2(bridge_slave_1) entered blocking state [ 2724.889715][T17878] bridge0: port 2(bridge_slave_1) entered disabled state [ 2724.898294][T17878] bridge_slave_1: entered allmulticast mode [ 2724.912274][T17878] bridge_slave_1: entered promiscuous mode [ 2724.920052][ T4086] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2724.947937][ T4086] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 2724.983070][ T5695] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 2725.014058][ T4086] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 2725.041572][ T4086] usb 2-1: can't read configurations, error -61 [ 2725.175703][ T5695] usb 6-1: Using ep0 maxpacket: 16 [ 2725.188022][T17878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2725.204514][ T4086] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 2725.221283][T17878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2725.230917][ T5695] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 2725.248451][ T5695] usb 6-1: config 0 has no interface number 0 [ 2725.256833][ T5695] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2725.271418][ T5695] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2725.281649][ T5695] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2725.290990][ T5695] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2725.320335][ T5695] usb 6-1: config 0 descriptor?? [ 2725.347092][T17972] input: syz1 as /devices/virtual/input/input198 [ 2725.395063][ T4086] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2725.420630][ T4086] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 2725.439589][ T4086] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 2725.448994][ T4504] Bluetooth: hci2: command tx timeout [ 2725.458611][ T4086] usb 2-1: can't read configurations, error -61 [ 2725.468177][T17878] team0: Port device team_slave_0 added [ 2725.472336][ T4086] usb usb2-port1: attempt power cycle [ 2725.488683][T17878] team0: Port device team_slave_1 added [ 2725.560105][T28722] hsr_slave_0: left promiscuous mode [ 2725.567798][T28722] hsr_slave_1: left promiscuous mode [ 2725.587220][T28722] veth1_macvtap: left promiscuous mode [ 2725.594223][T28722] veth0_macvtap: left promiscuous mode [ 2725.787132][ T5695] usbhid 6-1:0.2: can't add hid device: -71 [ 2725.793430][ T5695] usbhid 6-1:0.2: probe with driver usbhid failed with error -71 [ 2725.814473][ T5695] usb 6-1: USB disconnect, device number 55 [ 2725.834390][ T4086] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 2725.877629][ T4086] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2725.888813][ T4086] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 2725.899067][ T4086] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 2725.911224][ T4086] usb 2-1: can't read configurations, error -61 [ 2726.042801][ T4086] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 2726.069636][ T4086] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2726.077872][ T4086] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 2726.094286][ T4086] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 2726.103383][ T4086] usb 2-1: can't read configurations, error -61 [ 2726.110162][ T4086] usb usb2-port1: unable to enumerate USB device [ 2726.149817][ T5296] 8021q: adding VLAN 0 to HW filter on device eth18 [ 2726.163985][T17878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2726.171016][T17878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2726.197599][T17878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2726.210869][T17878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2726.218340][T17878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2726.246140][T17878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2726.335638][T17878] hsr_slave_0: entered promiscuous mode [ 2726.342261][T17878] hsr_slave_1: entered promiscuous mode [ 2726.348955][T17878] debugfs: 'hsr0' already exists in 'hsr' [ 2726.354907][T17878] Cannot create hsr debugfs directory [ 2726.495394][T17983] sit0: entered promiscuous mode [ 2726.501167][T17983] netlink: 'syz.5.12416': attribute type 1 has an invalid length. [ 2726.509448][T17983] netlink: 9 bytes leftover after parsing attributes in process `syz.5.12416'. [ 2727.006689][ T4086] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 2727.192862][ T4086] usb 6-1: Using ep0 maxpacket: 32 [ 2727.204733][ T4086] usb 6-1: too many configurations: 17, using maximum allowed: 8 [ 2727.224371][ T4086] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 2727.243684][ T4086] usb 6-1: config 0 has no interface number 0 [ 2727.251981][ T4086] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 2727.260114][ T4086] usb 6-1: config 0 has no interface number 0 [ 2727.267474][ T4086] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 2727.275530][ T4086] usb 6-1: config 0 has no interface number 0 [ 2727.282796][ T4086] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 2727.291955][ T4086] usb 6-1: config 0 has no interface number 0 [ 2727.304029][ T4086] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 2727.312071][ T4086] usb 6-1: config 0 has no interface number 0 [ 2727.319451][ T4086] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 2727.327558][ T4086] usb 6-1: config 0 has no interface number 0 [ 2727.335187][ T4086] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 2727.345272][ T4086] usb 6-1: config 0 has no interface number 0 [ 2727.354103][ T4086] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 2727.362147][ T4086] usb 6-1: config 0 has no interface number 0 [ 2727.371521][ T4086] usb 6-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 2727.381537][ T4086] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2727.389950][ T4086] usb 6-1: Product: syz [ 2727.394907][ T4086] usb 6-1: Manufacturer: syz [ 2727.399618][ T4086] usb 6-1: SerialNumber: syz [ 2727.429369][ T4086] usb 6-1: config 0 descriptor?? [ 2727.460517][ T4086] etas_es58x 6-1:0.2: Starting syz syz (Serial Number syz) [ 2727.534492][ T4504] Bluetooth: hci2: command tx timeout [ 2727.666148][ T4086] etas_es58x 6-1:0.2: could not retrieve the product info string [ 2727.875894][ T5695] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 2728.046798][ T5695] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2728.069320][ T5695] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2728.105848][ T5695] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2728.111491][T17878] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2728.134083][ T5695] usb 2-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 2728.151721][ T5695] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2728.170663][T17878] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2728.181326][ T5695] usb 2-1: config 0 descriptor?? [ 2728.187595][T17878] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2728.217541][T17878] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2728.235214][T17878] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2728.272002][T17878] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2728.300520][T17878] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2728.347730][T17878] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2728.442454][T18028] xt_hashlimit: size too large, truncated to 1048576 [ 2728.564125][T17878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2728.655181][T17878] 8021q: adding VLAN 0 to HW filter on device team0 [ 2728.694613][T15233] bridge0: port 1(bridge_slave_0) entered blocking state [ 2728.701853][T15233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2728.795122][T28722] bridge0: port 2(bridge_slave_1) entered blocking state [ 2728.802355][T28722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2729.044482][T17878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2729.078046][ T5695] usbhid 2-1:0.0: can't add hid device: -71 [ 2729.105704][ T5695] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2729.151558][ T5695] usb 2-1: USB disconnect, device number 32 [ 2729.204500][T17878] veth0_vlan: entered promiscuous mode [ 2729.235670][T17878] veth1_vlan: entered promiscuous mode [ 2729.294747][T17878] veth0_macvtap: entered promiscuous mode [ 2729.328365][T17878] veth1_macvtap: entered promiscuous mode [ 2729.374866][T17878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2729.404595][T17878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2729.434621][T28721] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2729.458730][T28721] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2729.471653][T28721] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2729.481901][T28721] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2729.718062][T28722] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2729.731208][T16201] usb 6-1: USB disconnect, device number 56 [ 2729.760535][T28722] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2729.768686][T18055] loop5: detected capacity change from 0 to 7 [ 2729.777025][T16201] etas_es58x 6-1:0.2: Disconnecting syz syz [ 2729.802024][T18055] loop5: p1 < > p3 p4 [ 2729.816926][T18055] loop5: partition table partially beyond EOD, truncated [ 2729.826308][T18055] loop5: p3 size 3645588866 extends beyond EOD, truncated [ 2729.842688][T18055] loop5: p4 start 33554432 is beyond EOD, truncated [ 2730.034350][T17435] udevd[17435]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 2730.034829][T16771] udevd[16771]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 2730.103116][T15233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2730.124481][T15233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2730.218681][T18066] netlink: 48 bytes leftover after parsing attributes in process `syz.6.12425'. [ 2730.800347][T18091] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12429'. [ 2730.823178][T18091] macvlan9: entered allmulticast mode [ 2730.840679][T18091] hsr0: entered allmulticast mode [ 2730.887455][T18091] hsr_slave_0: entered allmulticast mode [ 2730.897495][T18091] hsr_slave_1: entered allmulticast mode [ 2731.162911][T16239] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 2731.344542][T16239] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2731.366890][T16239] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 2731.419619][T16239] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2731.446301][T16239] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2731.498243][T16239] usb 6-1: Product: syz [ 2731.519216][T16239] usb 6-1: Manufacturer: syz [ 2731.538936][T16239] usb 6-1: SerialNumber: syz [ 2731.574801][T16239] usb 6-1: config 0 descriptor?? [ 2731.821899][T18112] netlink: 'syz.7.12432': attribute type 13 has an invalid length. [ 2731.850931][T18112] netlink: 'syz.7.12432': attribute type 17 has an invalid length. [ 2732.196765][T18112] bridge0: port 2(bridge_slave_1) entered disabled state [ 2732.204418][T18112] bridge0: port 1(bridge_slave_0) entered disabled state [ 2732.516678][T18112] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2732.566936][T18112] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2732.706569][ T30] audit: type=1800 audit(1781468914.218:17477): pid=18121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.12434" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 2733.188066][T18136] loop5: detected capacity change from 0 to 7 [ 2733.196213][T18136] loop5: p1 < > p3 p4 [ 2733.201257][T18136] loop5: partition table partially beyond EOD, truncated [ 2733.226703][T15237] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2733.228114][T18136] loop5: p3 size 3645588866 extends beyond EOD, truncated [ 2733.245032][T15237] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2733.254888][T18136] loop5: p4 start 33554432 is beyond EOD, truncated [ 2733.276063][T15237] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2733.317536][T15237] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2733.345796][T16771] udevd[16771]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 2733.360582][T17439] udevd[17439]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 2733.824968][T16939] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 2733.882081][T16239] usb 6-1: USB disconnect, device number 57 [ 2733.973192][T16939] usb 2-1: device descriptor read/64, error -71 [ 2734.212784][T16939] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 2734.343018][T16939] usb 2-1: device descriptor read/64, error -71 [ 2734.454322][T16939] usb usb2-port1: attempt power cycle [ 2734.792930][T16939] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 2734.813722][T16939] usb 2-1: device descriptor read/8, error -71 [ 2735.052795][T16939] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 2735.073474][T16939] usb 2-1: device descriptor read/8, error -71 [ 2735.169507][T18154] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12443'. [ 2735.188054][T16939] usb usb2-port1: unable to enumerate USB device [ 2736.674605][T18166] syzkaller0: entered promiscuous mode [ 2736.680218][T18166] syzkaller0: entered allmulticast mode [ 2736.688163][T18166] tipc: Enabled bearer , priority 0 [ 2736.734670][T18166] tipc: Resetting bearer [ 2736.781346][T18166] tipc: Disabling bearer [ 2736.834036][T18170] loop5: detected capacity change from 0 to 7 [ 2736.841536][T18170] loop5: p1 < > p3 p4 [ 2736.846122][T18170] loop5: partition table partially beyond EOD, truncated [ 2736.867370][T18170] loop5: p3 size 3645588866 extends beyond EOD, truncated [ 2736.886289][T18170] loop5: p4 start 33554432 is beyond EOD, truncated [ 2736.992461][T16771] udevd[16771]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 2737.008021][T17435] udevd[17435]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 2737.127647][T18184] syzkaller0: entered promiscuous mode [ 2737.144008][T18184] syzkaller0: entered allmulticast mode [ 2737.480368][T18201] random: crng reseeded on system resumption [ 2738.831388][T18219] loop5: detected capacity change from 0 to 7 [ 2738.843103][T18219] loop5: p1 < > p3 p4 [ 2738.848220][T18219] loop5: partition table partially beyond EOD, truncated [ 2738.859085][T18219] loop5: p3 size 3645588866 extends beyond EOD, truncated [ 2738.871533][T18219] loop5: p4 start 33554432 is beyond EOD, truncated [ 2738.966105][T17439] udevd[17439]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 2738.971724][T17435] udevd[17435]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 2739.048656][T18221] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12463'. [ 2739.081385][T18221] vlan4: entered promiscuous mode [ 2739.086579][T18221] macvlan1: entered promiscuous mode [ 2739.393129][T16939] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 2739.563081][T16939] usb 2-1: Using ep0 maxpacket: 16 [ 2739.579335][T16939] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2739.600820][T16939] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2739.621396][T16939] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2739.639140][T16939] usb 2-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 2739.648831][T16939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2739.657106][T16939] usb 2-1: Product: 峸牃ኤ紋쳕䇵帨ን셭墡歠枾荞꺕瘫춧倆尿瘚❮䲨뱝呒禉昻惝섉㹰뮠ᢺᐛ⡯僪ꔤይ褹基Ｎ໾㤳๛ᑢ岩 [ 2739.674945][T16939] usb 2-1: Manufacturer: у [ 2739.679627][T16939] usb 2-1: SerialNumber: Ж [ 2739.906464][T16939] usb 2-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 2739.925403][T16939] usb 2-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 2739.988020][T16939] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 2740.003161][T16939] usb 2-1: USB disconnect, device number 37 [ 2740.030402][T17435] udevd[17435]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2740.187539][T18233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2740.196798][T18233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2740.422870][T16239] usb 6-1: new low-speed USB device number 58 using dummy_hcd [ 2740.496480][T18237] syzkaller0: entered promiscuous mode [ 2740.502037][T18237] syzkaller0: entered allmulticast mode [ 2740.513067][T18237] tipc: Enabled bearer , priority 0 [ 2740.521056][T18238] tipc: Enabling of bearer rejected, already enabled [ 2740.595386][T16239] usb 6-1: config index 0 descriptor too short (expected 1307, got 27) [ 2740.612738][T16239] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 2740.622644][T16239] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 2740.633853][T16239] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 2740.644733][T16239] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x5D, changing to 0xD [ 2740.656450][T16239] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 10 [ 2740.667410][T16239] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 2740.677131][T16239] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 2740.693550][T16239] usb 6-1: string descriptor 0 read error: -22 [ 2740.700163][T18236] tipc: Resetting bearer [ 2740.706149][T16239] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 2740.715495][T16239] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2740.728533][T16239] usb 6-1: config 0 descriptor?? [ 2740.737786][T16239] hub 6-1:0.0: bad descriptor, ignoring hub [ 2740.750721][T16239] hub 6-1:0.0: probe with driver hub failed with error -5 [ 2740.782083][T18236] tipc: Disabling bearer [ 2741.043569][ T4086] usb 6-1: USB disconnect, device number 58 [ 2741.162865][T18253] loop5: detected capacity change from 0 to 7 [ 2741.170323][T18253] loop5: p1 < > p3 p4 [ 2741.176581][T18253] loop5: partition table partially beyond EOD, truncated [ 2741.187373][T18253] loop5: p3 size 3645588866 extends beyond EOD, truncated [ 2741.197165][T18253] loop5: p4 start 33554432 is beyond EOD, truncated [ 2741.240337][T17439] udevd[17439]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 2741.252394][T17435] udevd[17435]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 2741.470927][T18261] netlink: 568 bytes leftover after parsing attributes in process `syz.8.12477'. [ 2741.699542][T18268] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2741.811000][T18272] loop5: detected capacity change from 0 to 7 [ 2741.818439][T18272] Dev loop5: unable to read RDB block 7 [ 2741.825059][T18272] loop5: unable to read partition table [ 2741.830983][T18272] loop5: partition table beyond EOD, truncated [ 2741.837611][T18272] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 2741.977272][T18282] loop5: detected capacity change from 0 to 7 [ 2741.985461][T18282] loop5: p1 < > p3 p4 [ 2741.989605][T18282] loop5: partition table partially beyond EOD, truncated [ 2741.999263][T18282] loop5: p3 size 3645588866 extends beyond EOD, truncated [ 2742.009637][T18282] loop5: p4 start 33554432 is beyond EOD, truncated [ 2742.088063][T17435] udevd[17435]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 2742.106398][T17439] udevd[17439]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 2742.262179][T18295] netlink: 28 bytes leftover after parsing attributes in process `syz.7.12488'. [ 2742.530476][T18301] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12490'. [ 2742.536880][T16201] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 2742.551603][T18301] ip6tnl1: entered allmulticast mode [ 2742.559719][T18301] usb usb7: usbfs: process 18301 (syz.7.12490) did not claim interface 0 before use [ 2742.673814][T16201] usb 2-1: device descriptor read/64, error -71 [ 2742.877601][ T30] audit: type=1326 audit(1781468924.388:17478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18306 comm="syz.6.12492" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdbfc79ce59 code=0x0 [ 2742.922865][T16201] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 2743.062934][T16201] usb 2-1: device descriptor read/64, error -71 [ 2743.184033][T16201] usb usb2-port1: attempt power cycle [ 2743.244641][T18314] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 2743.392123][T18319] netlink: 48 bytes leftover after parsing attributes in process `syz.7.12495'. [ 2743.552869][T16201] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 2743.602231][T16201] usb 2-1: device descriptor read/8, error -71 [ 2743.846084][T16201] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 2743.883626][T16201] usb 2-1: device descriptor read/8, error -71 [ 2743.901699][T18322] loop5: detected capacity change from 0 to 7 [ 2743.925207][T18322] loop5: p1 < > p3 p4 [ 2743.935546][T18322] loop5: partition table partially beyond EOD, truncated [ 2743.980474][T18322] loop5: p3 size 3645588866 extends beyond EOD, truncated [ 2743.994861][T18322] loop5: p4 start 33554432 is beyond EOD, truncated [ 2744.025523][T16201] usb usb2-port1: unable to enumerate USB device [ 2744.106268][T17439] udevd[17439]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 2744.121930][T17435] udevd[17435]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 2744.942771][T16939] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 2745.111462][T16939] usb 6-1: Using ep0 maxpacket: 32 [ 2745.137627][T16939] usb 6-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 2745.150795][T16939] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2745.162802][T16939] usb 6-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 2745.184491][T16939] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2745.215198][T16939] usb 6-1: config 0 descriptor?? [ 2746.980510][T18368] loop5: detected capacity change from 0 to 7 [ 2747.010141][T18368] Dev loop5: unable to read RDB block 7 [ 2747.030649][T18368] loop5: unable to read partition table [ 2747.045818][T18368] loop5: partition table beyond EOD, truncated [ 2747.066972][T18368] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 2747.147895][T16201] usb 6-1: USB disconnect, device number 59 [ 2747.306462][T18370] netlink: 'syz.1.12511': attribute type 11 has an invalid length. [ 2747.328156][T18370] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12511'. [ 2747.535356][T18376] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12513'. [ 2748.137024][T18386] syzkaller0: entered promiscuous mode [ 2748.143422][T18386] syzkaller0: entered allmulticast mode [ 2748.167615][T18386] tipc: Enabled bearer , priority 0 [ 2748.184404][T18385] tipc: Resetting bearer [ 2748.257648][T18385] tipc: Disabling bearer [ 2748.447463][T18389] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2748.468002][T18391] input: syz1 as /devices/virtual/input/input199 [ 2748.537169][T18389] netlink: 'syz.6.12518': attribute type 10 has an invalid length. [ 2748.908379][T18402] loop5: detected capacity change from 0 to 7 [ 2748.927349][T18402] Dev loop5: unable to read RDB block 7 [ 2748.943375][T18402] loop5: unable to read partition table [ 2748.958706][T18402] loop5: partition table beyond EOD, truncated [ 2748.972855][T18402] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 2749.812032][T18411] netlink: 12 bytes leftover after parsing attributes in process `syz.8.12524'. [ 2750.492257][T18416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2750.516383][T18416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2750.569835][T18418] loop5: detected capacity change from 0 to 7 [ 2750.581405][T18418] Dev loop5: unable to read RDB block 7 [ 2750.587484][T18418] loop5: AHDI p1 p2 p3 [ 2750.591734][T18418] loop5: partition table partially beyond EOD, truncated [ 2750.605961][T18418] loop5: p1 start 3741368766 is beyond EOD, truncated [ 2750.613366][T18418] loop5: p2 size 151585024 extends beyond EOD, truncated [ 2750.670264][T17435] udevd[17435]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 2750.752134][T18420] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12527'. [ 2750.762225][T18420] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12527'. [ 2750.771622][T18420] netlink: 'syz.1.12527': attribute type 7 has an invalid length. [ 2750.811380][T18422] netlink: 32 bytes leftover after parsing attributes in process `syz.5.12528'. [ 2750.822039][T18422] tipc: Enabled bearer , priority 0 [ 2750.830745][T18422] syzkaller0: entered promiscuous mode [ 2750.837512][T18422] syzkaller0: entered allmulticast mode [ 2750.855149][T18422] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 2750.918139][T18421] tipc: Resetting bearer [ 2750.946253][T18421] tipc: Disabling bearer [ 2751.054453][T16239] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 2751.214652][T16239] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2751.225470][T16239] usb 2-1: config 1 interface 0 altsetting 171 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2751.238579][T16239] usb 2-1: config 1 interface 0 has no altsetting 0 [ 2751.247422][T16239] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2751.256538][T16239] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2751.264809][T16239] usb 2-1: Product: syz [ 2751.269283][T16239] usb 2-1: Manufacturer: syz [ 2751.274954][T16239] usb 2-1: SerialNumber: syz [ 2751.322811][ T5695] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 2751.452807][ T5695] usb 6-1: device descriptor read/64, error -71 [ 2751.490557][T16239] cdc_mbim 2-1:1.0: MBIM functional descriptor missing [ 2751.497813][T16239] cdc_mbim 2-1:1.0: bind() failure [ 2751.507397][T16239] usb 2-1: USB disconnect, device number 42 [ 2751.692785][ T5695] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 2751.822939][ T5695] usb 6-1: device descriptor read/64, error -71 [ 2751.933165][ T5695] usb usb6-port1: attempt power cycle [ 2752.272776][ T5695] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 2752.293966][ T5695] usb 6-1: device descriptor read/8, error -71 [ 2752.532835][ T5695] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 2752.553787][ T5695] usb 6-1: device descriptor read/8, error -71 [ 2752.664626][ T5695] usb usb6-port1: unable to enumerate USB device [ 2753.125448][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880217d2400: rx timeout, send abort [ 2753.625656][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880343fbc00: rx timeout, send abort [ 2753.634079][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880217d2400: abort rx timeout. Force session deactivation [ 2753.766870][T18446] syzkaller0: entered promiscuous mode [ 2753.772553][T18446] syzkaller0: entered allmulticast mode [ 2754.015885][T18460] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 2754.022428][T18460] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2754.035183][T18460] vhci_hcd vhci_hcd.0: Device attached [ 2754.049480][T18460] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 2754.056026][T18460] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2754.063866][T18463] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(8) [ 2754.070379][T18463] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2754.092447][T18460] vhci_hcd vhci_hcd.0: Device attached [ 2754.099179][T18463] vhci_hcd vhci_hcd.0: Device attached [ 2754.111606][T18465] vhci_hcd: connection closed [ 2754.111842][T18464] vhci_hcd: connection closed [ 2754.117002][T18461] vhci_hcd: connection closed [ 2754.124013][T15237] vhci_hcd vhci_hcd.7: stop threads [ 2754.134017][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880343fbc00: abort rx timeout. Force session deactivation [ 2754.151748][T15237] vhci_hcd vhci_hcd.7: release socket [ 2754.157730][T15237] vhci_hcd vhci_hcd.7: disconnect device [ 2754.165280][T15237] vhci_hcd vhci_hcd.7: stop threads [ 2754.182817][T15237] vhci_hcd vhci_hcd.7: release socket [ 2754.204220][T15237] vhci_hcd vhci_hcd.7: disconnect device [ 2754.220667][T15237] vhci_hcd vhci_hcd.7: stop threads [ 2754.227247][T16239] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 2754.242944][T15237] vhci_hcd vhci_hcd.7: release socket [ 2754.254079][T15237] vhci_hcd vhci_hcd.7: disconnect device [ 2754.632894][T16939] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 2754.793907][T16939] usb 6-1: Using ep0 maxpacket: 32 [ 2754.806342][T16939] usb 6-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 2754.816156][T16939] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2754.824401][T16939] usb 6-1: Product: syz [ 2754.828599][T16939] usb 6-1: Manufacturer: syz [ 2754.833270][T16939] usb 6-1: SerialNumber: syz [ 2755.051321][T16939] usb 6-1: 1:1: cannot get freq (v2/v3): err -71 [ 2755.058345][T16939] usb 6-1: 1:1: cannot set freq 44100 (v2/v3): err -71 [ 2755.067078][T16939] usb 6-1: 2:1: cannot get freq (v2/v3): err -71 [ 2755.073960][T16939] usb 6-1: 2:1: cannot set freq 44100 (v2/v3): err -71 [ 2755.117137][T16939] usb 6-1: USB disconnect, device number 64 [ 2755.169705][T16787] udevd[16787]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2755.513858][ T5695] usb usb48-port1: attempt power cycle [ 2755.654666][T18489] netlink: zone id is out of range [ 2755.671262][T18489] netlink: zone id is out of range [ 2755.695118][T18489] netlink: set zone limit has 4 unknown bytes [ 2755.749760][ T30] audit: type=1326 audit(1781468937.258:17479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18490 comm="syz.5.12549" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe51079ce59 code=0x0 [ 2755.938426][T18495] loop5: detected capacity change from 0 to 7 [ 2755.951982][T18495] Dev loop5: unable to read RDB block 7 [ 2755.964480][T18495] loop5: unable to read partition table [ 2755.979110][T18495] loop5: partition table beyond EOD, truncated [ 2755.985948][T18495] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 2756.089941][ T5695] usb usb48-port1: unable to enumerate USB device [ 2756.444574][ T4086] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 2756.602791][ T4086] usb 2-1: Using ep0 maxpacket: 16 [ 2756.619141][ T4086] usb 2-1: config 244 has an invalid interface number: 220 but max is 0 [ 2756.641032][ T4086] usb 2-1: config 244 has no interface number 0 [ 2756.651224][ T4086] usb 2-1: config 244 interface 220 has no altsetting 0 [ 2756.675203][ T4086] usb 2-1: New USB device found, idVendor=0af0, idProduct=7001, bcdDevice=bc.ac [ 2756.693294][ T4086] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2756.702559][T18522] netlink: 32 bytes leftover after parsing attributes in process `syz.8.12560'. [ 2756.712146][ T4086] usb 2-1: Product: syz [ 2756.717920][ T4086] usb 2-1: Manufacturer: syz [ 2756.730464][ T4086] usb 2-1: SerialNumber: syz [ 2756.948860][T18506] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12553'. [ 2756.975127][ T4086] option 2-1:244.220: GSM modem (1-port) converter detected [ 2757.027006][ T4086] usb 2-1: USB disconnect, device number 43 [ 2757.066067][ T4086] option 2-1:244.220: device disconnected [ 2757.568339][T18552] fuse: Bad value for 'rootmode' [ 2757.634084][T18555] netlink: 64 bytes leftover after parsing attributes in process `syz.1.12563'. [ 2757.955116][T18569] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2758.525499][T18586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2758.535409][T18586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2759.082816][T16939] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 2759.112781][T16201] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 2759.234460][T16939] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2759.245888][T16939] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2759.256262][T16939] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2759.266645][T16939] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2759.276334][T16201] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2759.287471][T16201] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2759.301725][T16201] usb 2-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 2759.311524][T18606] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 2759.318908][T16201] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2759.331110][T16939] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2759.340667][T16201] usb 2-1: config 0 descriptor?? [ 2759.546335][T18606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2759.556174][T18606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2759.571474][T12703] tipc: Subscription rejected, illegal request [ 2759.582411][T16939] usb 6-1: USB disconnect, device number 65 [ 2759.593712][T18608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2759.616119][T18608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2759.626295][T18608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2759.635214][T18608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2759.645991][T18608] [ 2759.648390][T18608] ===================================================== [ 2759.655342][T18608] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 2759.662964][T18608] syzkaller #0 Tainted: G L [ 2759.668960][T18608] ----------------------------------------------------- [ 2759.675941][T18608] syz.1.12580/18608 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 2759.683816][T18608] ffffffff8e60a058 (tasklist_lock){.+.+}-{3:3}, at: send_sigio+0x101/0x370 [ 2759.692528][T18608] [ 2759.692528][T18608] and this task is already holding: [ 2759.699890][T18608] ffff888025706820 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x38/0x370 [ 2759.708555][T18608] which would create a new lock dependency: [ 2759.714457][T18608] (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3} [ 2759.722126][T18608] [ 2759.722126][T18608] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 2759.731597][T18608] (&dev->event_lock#2){..-.}-{3:3} [ 2759.731643][T18608] [ 2759.731643][T18608] ... which became SOFTIRQ-irq-safe at: [ 2759.744568][T18608] lock_acquire+0x106/0x350 [ 2759.749200][T18608] _raw_spin_lock_irqsave+0x40/0x60 [ 2759.754569][T18608] input_inject_event+0xa4/0x330 [ 2759.759758][T18608] led_trigger_event+0x138/0x210 [ 2759.764898][T18608] kbd_bh+0x1c6/0x2e0 [ 2759.768996][T18608] tasklet_action_common+0x2da/0x4a0 [ 2759.774398][T18608] handle_softirqs+0x225/0x840 [ 2759.779283][T18608] __irq_exit_rcu+0xca/0x220 [ 2759.783980][T18608] irq_exit_rcu+0x9/0x30 [ 2759.788333][T18608] sysvec_call_function_single+0xa3/0xc0 [ 2759.794117][T18608] asm_sysvec_call_function_single+0x1a/0x20 [ 2759.800220][T18608] _raw_spin_unlock_irqrestore+0x47/0x80 [ 2759.805990][T18608] evdev_write+0x325/0x4c0 [ 2759.810618][T18608] vfs_write+0x296/0xba0 [ 2759.814994][T18608] ksys_write+0x150/0x270 [ 2759.819445][T18608] do_syscall_64+0x174/0x580 [ 2759.824150][T18608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2759.830157][T18608] [ 2759.830157][T18608] to a SOFTIRQ-irq-unsafe lock: [ 2759.837240][T18608] (tasklist_lock){.+.+}-{3:3} [ 2759.837277][T18608] [ 2759.837277][T18608] ... which became SOFTIRQ-irq-unsafe at: [ 2759.849948][T18608] ... [ 2759.849960][T18608] lock_acquire+0x106/0x350 [ 2759.857174][T18608] _raw_read_lock+0x36/0x50 [ 2759.861800][T18608] __do_wait+0xd9/0x720 [ 2759.866078][T18608] do_wait+0x1e7/0x510 [ 2759.870283][T18608] kernel_wait+0xd6/0x1c0 [ 2759.874723][T18608] call_usermodehelper_exec_work+0xbe/0x230 [ 2759.880755][T18608] process_scheduled_works+0xa8e/0x14e0 [ 2759.886497][T18608] worker_thread+0xa47/0xfb0 [ 2759.891196][T18608] kthread+0x389/0x470 [ 2759.895363][T18608] ret_from_fork+0x514/0xb70 [ 2759.900070][T18608] ret_from_fork_asm+0x1a/0x30 [ 2759.904952][T18608] [ 2759.904952][T18608] other info that might help us debug this: [ 2759.904952][T18608] [ 2759.915219][T18608] Chain exists of: [ 2759.915219][T18608] &dev->event_lock#2 --> &f_owner->lock --> tasklist_lock [ 2759.915219][T18608] [ 2759.928381][T18608] Possible interrupt unsafe locking scenario: [ 2759.928381][T18608] [ 2759.936779][T18608] CPU0 CPU1 [ 2759.942158][T18608] ---- ---- [ 2759.947600][T18608] lock(tasklist_lock); [ 2759.951873][T18608] local_irq_disable(); [ 2759.958651][T18608] lock(&dev->event_lock#2); [ 2759.965939][T18608] lock(&f_owner->lock); [ 2759.972865][T18608] [ 2759.976387][T18608] lock(&dev->event_lock#2); [ 2759.981314][T18608] [ 2759.981314][T18608] *** DEADLOCK *** [ 2759.981314][T18608] [ 2759.989491][T18608] 5 locks held by syz.1.12580/18608: [ 2759.994806][T18608] #0: ffff888053a64410 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 2760.004046][T18608] #1: ffff8880683c4a80 (&type->i_mutex_dir_key#5){++++}-{4:4}, at: path_openat+0xb5a/0x3890 [ 2760.014289][T18608] #2: ffffffff9a4969f8 (&fsnotify_mark_srcu){.+.?}-{0:0}, at: fsnotify+0x752/0x1b60 [ 2760.023913][T18608] #3: ffff88802d4b08d0 (&mark->lock){+.+.}-{3:3}, at: dnotify_handle_event+0x62/0x440 [ 2760.033704][T18608] #4: ffff888025706820 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x38/0x370 [ 2760.042809][T18608] [ 2760.042809][T18608] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 2760.053245][T18608] -> (&dev->event_lock#2){..-.}-{3:3} { [ 2760.059128][T18608] IN-SOFTIRQ-W at: [ 2760.063506][T18608] lock_acquire+0x106/0x350 [ 2760.070219][T18608] _raw_spin_lock_irqsave+0x40/0x60 [ 2760.077621][T18608] input_inject_event+0xa4/0x330 [ 2760.084755][T18608] led_trigger_event+0x138/0x210 [ 2760.091912][T18608] kbd_bh+0x1c6/0x2e0 [ 2760.098085][T18608] tasklet_action_common+0x2da/0x4a0 [ 2760.105576][T18608] handle_softirqs+0x225/0x840 [ 2760.112530][T18608] __irq_exit_rcu+0xca/0x220 [ 2760.119316][T18608] irq_exit_rcu+0x9/0x30 [ 2760.125764][T18608] sysvec_call_function_single+0xa3/0xc0 [ 2760.133630][T18608] asm_sysvec_call_function_single+0x1a/0x20 [ 2760.141838][T18608] _raw_spin_unlock_irqrestore+0x47/0x80 [ 2760.149677][T18608] evdev_write+0x325/0x4c0 [ 2760.156291][T18608] vfs_write+0x296/0xba0 [ 2760.162737][T18608] ksys_write+0x150/0x270 [ 2760.169282][T18608] do_syscall_64+0x174/0x580 [ 2760.176067][T18608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2760.184144][T18608] INITIAL USE at: [ 2760.188314][T18608] lock_acquire+0x106/0x350 [ 2760.194923][T18608] _raw_spin_lock_irqsave+0x40/0x60 [ 2760.202242][T18608] input_inject_event+0xa4/0x330 [ 2760.209288][T18608] kbd_led_trigger_activate+0xbc/0x100 [ 2760.216876][T18608] led_trigger_set+0x525/0x940 [ 2760.223772][T18608] led_trigger_set_default+0x263/0x2a0 [ 2760.231344][T18608] led_classdev_register_ext+0x761/0x9a0 [ 2760.239106][T18608] input_leds_connect+0x4de/0x750 [ 2760.246267][T18608] input_register_device+0xd12/0x1150 [ 2760.253855][T18608] atkbd_connect+0x6fa/0x9f0 [ 2760.260559][T18608] serio_driver_probe+0x82/0xb0 [ 2760.267627][T18608] really_probe+0x254/0xae0 [ 2760.274316][T18608] __driver_probe_device+0x1f5/0x380 [ 2760.281708][T18608] driver_probe_device+0x4f/0x240 [ 2760.288856][T18608] __driver_attach+0x342/0x620 [ 2760.295730][T18608] bus_for_each_dev+0x23b/0x2c0 [ 2760.302699][T18608] serio_handle_event+0x1af/0xfc0 [ 2760.309844][T18608] process_scheduled_works+0xa8e/0x14e0 [ 2760.317508][T18608] worker_thread+0xa47/0xfb0 [ 2760.324213][T18608] kthread+0x389/0x470 [ 2760.330396][T18608] ret_from_fork+0x514/0xb70 [ 2760.337099][T18608] ret_from_fork_asm+0x1a/0x30 [ 2760.343979][T18608] } [ 2760.346760][T18608] ... key at: [] input_allocate_device.__key.7+0x0/0x20 [ 2760.356178][T18608] -> (&client->buffer_lock){....}-{3:3} { [ 2760.362147][T18608] INITIAL USE at: [ 2760.366245][T18608] lock_acquire+0x106/0x350 [ 2760.372692][T18608] _raw_spin_lock+0x2e/0x40 [ 2760.379150][T18608] evdev_handle_get_val+0x75/0xa30 [ 2760.386235][T18608] evdev_ioctl_handler+0x11e5/0x1f60 [ 2760.393467][T18608] __se_sys_ioctl+0xfc/0x170 [ 2760.400015][T18608] do_syscall_64+0x174/0x580 [ 2760.406556][T18608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2760.414393][T18608] } [ 2760.417109][T18608] ... key at: [] evdev_open.__key.27+0x0/0x20 [ 2760.425478][T18608] ... acquired at: [ 2760.429482][T18608] _raw_spin_lock+0x2e/0x40 [ 2760.434204][T18608] evdev_handle_get_val+0x75/0xa30 [ 2760.439521][T18608] evdev_ioctl_handler+0x11e5/0x1f60 [ 2760.445024][T18608] __se_sys_ioctl+0xfc/0x170 [ 2760.449855][T18608] do_syscall_64+0x174/0x580 [ 2760.454654][T18608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2760.460750][T18608] [ 2760.463100][T18608] -> (&new->fa_lock){....}-{3:3} { [ 2760.468357][T18608] INITIAL USE at: [ 2760.472370][T18608] lock_acquire+0x106/0x350 [ 2760.478674][T18608] _raw_write_lock_irq+0x3d/0x50 [ 2760.485392][T18608] fasync_remove_entry+0xf1/0x1c0 [ 2760.492293][T18608] tty_fasync+0x13c/0x350 [ 2760.498388][T18608] __fput+0x88d/0xa50 [ 2760.504144][T18608] task_work_run+0x1d9/0x270 [ 2760.510505][T18608] exit_to_user_mode_loop+0x193/0x6b0 [ 2760.517627][T18608] do_syscall_64+0x353/0x580 [ 2760.523980][T18608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2760.531644][T18608] INITIAL READ USE at: [ 2760.536092][T18608] lock_acquire+0x106/0x350 [ 2760.542788][T18608] _raw_read_lock_irqsave+0x48/0x60 [ 2760.550193][T18608] kill_fasync+0x199/0x4d0 [ 2760.556809][T18608] lease_break_callback+0x26/0x30 [ 2760.564073][T18608] __break_lease+0x80d/0x1e70 [ 2760.570953][T18608] do_dentry_open+0xf11/0x1380 [ 2760.577916][T18608] vfs_open+0x3b/0x340 [ 2760.584182][T18608] path_openat+0x2e3b/0x3890 [ 2760.590988][T18608] do_file_open+0x23e/0x4a0 [ 2760.597686][T18608] do_sys_openat2+0x113/0x200 [ 2760.604555][T18608] __x64_sys_creat+0x8f/0xc0 [ 2760.611367][T18608] do_syscall_64+0x174/0x580 [ 2760.618148][T18608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2760.626246][T18608] } [ 2760.628857][T18608] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 2760.637769][T18608] ... acquired at: [ 2760.641688][T18608] _raw_read_lock_irqsave+0x48/0x60 [ 2760.647097][T18608] kill_fasync+0x199/0x4d0 [ 2760.651757][T18608] evdev_pass_values+0x552/0xc00 [ 2760.656898][T18608] evdev_events+0x1e6/0x340 [ 2760.661590][T18608] input_pass_values+0x288/0x890 [ 2760.666762][T18608] input_event_dispose+0x330/0x6b0 [ 2760.672085][T18608] input_inject_event+0x1dd/0x330 [ 2760.677309][T18608] evdev_write+0x325/0x4c0 [ 2760.681942][T18608] vfs_write+0x296/0xba0 [ 2760.686399][T18608] ksys_write+0x150/0x270 [ 2760.690989][T18608] do_syscall_64+0x174/0x580 [ 2760.695800][T18608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2760.701890][T18608] [ 2760.704217][T18608] -> (&f_owner->lock){....}-{3:3} { [ 2760.709451][T18608] INITIAL USE at: [ 2760.713366][T18608] lock_acquire+0x106/0x350 [ 2760.719487][T18608] _raw_write_lock_irq+0x3d/0x50 [ 2760.726024][T18608] __f_setown+0x5f/0x380 [ 2760.731851][T18608] tty_fasync+0x2db/0x350 [ 2760.737769][T18608] do_fcntl+0x1215/0x1a30 [ 2760.743686][T18608] __se_sys_fcntl+0xc8/0x150 [ 2760.749875][T18608] do_syscall_64+0x174/0x580 [ 2760.756056][T18608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2760.763532][T18608] INITIAL READ USE at: [ 2760.767872][T18608] lock_acquire+0x106/0x350 [ 2760.774415][T18608] _raw_read_lock_irqsave+0x48/0x60 [ 2760.781660][T18608] send_sigio+0x38/0x370 [ 2760.787927][T18608] kill_fasync+0x24d/0x4d0 [ 2760.794380][T18608] lease_break_callback+0x26/0x30 [ 2760.801441][T18608] __break_lease+0x80d/0x1e70 [ 2760.808147][T18608] do_dentry_open+0xf11/0x1380 [ 2760.814920][T18608] vfs_open+0x3b/0x340 [ 2760.821000][T18608] path_openat+0x2e3b/0x3890 [ 2760.827613][T18608] do_file_open+0x23e/0x4a0 [ 2760.834141][T18608] do_sys_openat2+0x113/0x200 [ 2760.840840][T18608] __x64_sys_creat+0x8f/0xc0 [ 2760.847441][T18608] do_syscall_64+0x174/0x580 [ 2760.854043][T18608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2760.861948][T18608] } [ 2760.864454][T18608] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 2760.873324][T18608] ... acquired at: [ 2760.877134][T18608] _raw_read_lock_irqsave+0x48/0x60 [ 2760.882528][T18608] send_sigio+0x38/0x370 [ 2760.886977][T18608] kill_fasync+0x24d/0x4d0 [ 2760.891591][T18608] lease_break_callback+0x26/0x30 [ 2760.896818][T18608] __break_lease+0x80d/0x1e70 [ 2760.901693][T18608] do_dentry_open+0xf11/0x1380 [ 2760.906656][T18608] vfs_open+0x3b/0x340 [ 2760.911098][T18608] path_openat+0x2e3b/0x3890 [ 2760.915908][T18608] do_file_open+0x23e/0x4a0 [ 2760.920608][T18608] do_sys_openat2+0x113/0x200 [ 2760.925485][T18608] __x64_sys_creat+0x8f/0xc0 [ 2760.930270][T18608] do_syscall_64+0x174/0x580 [ 2760.935052][T18608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2760.941132][T18608] [ 2760.943467][T18608] [ 2760.943467][T18608] the dependencies between the lock to be acquired [ 2760.943478][T18608] and SOFTIRQ-irq-unsafe lock: [ 2760.957001][T18608] -> (tasklist_lock){.+.+}-{3:3} { [ 2760.962153][T18608] HARDIRQ-ON-R at: [ 2760.966151][T18608] lock_acquire+0x106/0x350 [ 2760.972324][T18608] _raw_read_lock+0x36/0x50 [ 2760.978507][T18608] __do_wait+0xd9/0x720 [ 2760.984342][T18608] do_wait+0x1e7/0x510 [ 2760.990102][T18608] kernel_wait+0xd6/0x1c0 [ 2760.996105][T18608] call_usermodehelper_exec_work+0xbe/0x230 [ 2761.003674][T18608] process_scheduled_works+0xa8e/0x14e0 [ 2761.010891][T18608] worker_thread+0xa47/0xfb0 [ 2761.017142][T18608] kthread+0x389/0x470 [ 2761.022878][T18608] ret_from_fork+0x514/0xb70 [ 2761.029138][T18608] ret_from_fork_asm+0x1a/0x30 [ 2761.035573][T18608] SOFTIRQ-ON-R at: [ 2761.039565][T18608] lock_acquire+0x106/0x350 [ 2761.045733][T18608] _raw_read_lock+0x36/0x50 [ 2761.051913][T18608] __do_wait+0xd9/0x720 [ 2761.057739][T18608] do_wait+0x1e7/0x510 [ 2761.063489][T18608] kernel_wait+0xd6/0x1c0 [ 2761.069497][T18608] call_usermodehelper_exec_work+0xbe/0x230 [ 2761.077066][T18608] process_scheduled_works+0xa8e/0x14e0 [ 2761.084274][T18608] worker_thread+0xa47/0xfb0 [ 2761.090613][T18608] kthread+0x389/0x470 [ 2761.096346][T18608] ret_from_fork+0x514/0xb70 [ 2761.102609][T18608] ret_from_fork_asm+0x1a/0x30 [ 2761.109038][T18608] INITIAL USE at: [ 2761.112951][T18608] lock_acquire+0x106/0x350 [ 2761.119035][T18608] _raw_write_lock_irq+0x3d/0x50 [ 2761.125567][T18608] copy_process+0x29eb/0x4380 [ 2761.131824][T18608] kernel_clone+0x2d7/0x940 [ 2761.137940][T18608] user_mode_thread+0x110/0x180 [ 2761.144373][T18608] rest_init+0x23/0x300 [ 2761.150120][T18608] start_kernel+0x38a/0x3e0 [ 2761.156360][T18608] x86_64_start_reservations+0x24/0x30 [ 2761.163439][T18608] x86_64_start_kernel+0x137/0x1b0 [ 2761.170153][T18608] common_startup_64+0x13e/0x147 [ 2761.176667][T18608] INITIAL READ USE at: [ 2761.181049][T18608] lock_acquire+0x106/0x350 [ 2761.187569][T18608] _raw_read_lock+0x36/0x50 [ 2761.194116][T18608] __do_wait+0xd9/0x720 [ 2761.200309][T18608] do_wait+0x1e7/0x510 [ 2761.206409][T18608] kernel_wait+0xd6/0x1c0 [ 2761.212775][T18608] call_usermodehelper_exec_work+0xbe/0x230 [ 2761.220703][T18608] process_scheduled_works+0xa8e/0x14e0 [ 2761.228267][T18608] worker_thread+0xa47/0xfb0 [ 2761.234875][T18608] kthread+0x389/0x470 [ 2761.240984][T18608] ret_from_fork+0x514/0xb70 [ 2761.247585][T18608] ret_from_fork_asm+0x1a/0x30 [ 2761.254377][T18608] } [ 2761.256886][T18608] ... key at: [] tasklist_lock+0x18/0x40 [ 2761.264725][T18608] ... acquired at: [ 2761.268538][T18608] _raw_read_lock+0x36/0x50 [ 2761.273250][T18608] send_sigio+0x101/0x370 [ 2761.277772][T18608] dnotify_handle_event+0x169/0x440 [ 2761.283159][T18608] fsnotify+0x18a5/0x1b60 [ 2761.287703][T18608] path_openat+0x11aa/0x3890 [ 2761.292488][T18608] do_file_open+0x23e/0x4a0 [ 2761.297220][T18608] do_sys_openat2+0x113/0x200 [ 2761.302092][T18608] __x64_sys_openat+0x138/0x170 [ 2761.307138][T18608] do_syscall_64+0x174/0x580 [ 2761.311926][T18608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2761.318007][T18608] [ 2761.320345][T18608] [ 2761.320345][T18608] stack backtrace: [ 2761.326251][T18608] CPU: 1 UID: 0 PID: 18608 Comm: syz.1.12580 Tainted: G L syzkaller #0 PREEMPT(full) [ 2761.326279][T18608] Tainted: [L]=SOFTLOCKUP [ 2761.326286][T18608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2761.326298][T18608] Call Trace: [ 2761.326306][T18608] [ 2761.326315][T18608] dump_stack_lvl+0xe8/0x150 [ 2761.326337][T18608] __lock_acquire+0x2a37/0x2cd0 [ 2761.326371][T18608] ? send_sigio+0x101/0x370 [ 2761.326396][T18608] lock_acquire+0x106/0x350 [ 2761.326415][T18608] ? send_sigio+0x101/0x370 [ 2761.326445][T18608] _raw_read_lock+0x36/0x50 [ 2761.326472][T18608] ? send_sigio+0x101/0x370 [ 2761.326503][T18608] send_sigio+0x101/0x370 [ 2761.326530][T18608] dnotify_handle_event+0x169/0x440 [ 2761.326553][T18608] fsnotify+0x18a5/0x1b60 [ 2761.326584][T18608] ? fsnotify+0x752/0x1b60 [ 2761.326608][T18608] ? __pfx_fsnotify+0x10/0x10 [ 2761.326634][T18608] ? do_raw_spin_unlock+0xf5/0x210 [ 2761.326663][T18608] ? d_make_persistent+0x10c/0x180 [ 2761.326692][T18608] ? shmem_mknod+0x2d4/0x340 [ 2761.326723][T18608] path_openat+0x11aa/0x3890 [ 2761.326749][T18608] ? arch_stack_walk+0xfb/0x150 [ 2761.326789][T18608] ? __pfx_path_openat+0x10/0x10 [ 2761.326814][T18608] ? __x64_sys_openat+0x138/0x170 [ 2761.326843][T18608] do_file_open+0x23e/0x4a0 [ 2761.326871][T18608] ? __pfx_do_file_open+0x10/0x10 [ 2761.326915][T18608] ? alloc_fd+0x62e/0x6a0 [ 2761.326940][T18608] do_sys_openat2+0x113/0x200 [ 2761.326961][T18608] ? __se_sys_futex+0x3a8/0x450 [ 2761.326982][T18608] ? __pfx_do_sys_openat2+0x10/0x10 [ 2761.327005][T18608] ? __pfx___se_sys_futex+0x10/0x10 [ 2761.327028][T18608] __x64_sys_openat+0x138/0x170 [ 2761.327055][T18608] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2761.327074][T18608] do_syscall_64+0x174/0x580 [ 2761.327102][T18608] ? trace_irq_disable+0x3b/0x140 [ 2761.327128][T18608] ? clear_bhb_loop+0x40/0x90 [ 2761.327148][T18608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2761.327166][T18608] RIP: 0033:0x7f8a7039ce59 [ 2761.327184][T18608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2761.327203][T18608] RSP: 002b:00007f8a71197028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2761.327222][T18608] RAX: ffffffffffffffda RBX: 00007f8a70615fa0 RCX: 00007f8a7039ce59 [ 2761.327236][T18608] RDX: 000000000000275a RSI: 0000200000000000 RDI: 0000000000000003 [ 2761.327248][T18608] RBP: 00007f8a70432d6f R08: 0000000000000000 R09: 0000000000000000 [ 2761.327260][T18608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2761.327271][T18608] R13: 00007f8a70616038 R14: 00007f8a70615fa0 R15: 00007f8a7073fa48 [ 2761.327290][T18608] [ 2761.720812][T16201] usb 2-1: USB disconnect, device number 44